TANDBERG TELEPRESENCE MANAGEMENT SUITE SECURE SERVER - CONFIGURATION GUIDE..., Administration Manual

Page 1: ...Cisco TMS Administration Guide Page 1 of 37 Cisco TelePresence Management Suite Administration Guide D13741 12 December 2010 ...

Page 2: ...3 System tracked by Host Name 13 System tracked by MAC address 14 Support for remote systems 15 How the communication works 15 Reachable on public Internet 15 Behind firewall 15 Plugging in at remote location 15 Adding a remote system to Cisco TMS 16 A system already added to Cisco TMS 16 A system not added to Cisco TMS 16 Setting an endpoint in public 16 Booking 16 Phonebooks 16 Software upgrade ...

Page 3: ...ervice 27 Symptoms 28 How to fix 28 TMSLiveService 28 Symptoms 28 How to fix 28 TMSPLCMDirectoryService 29 Symptoms 29 How to fix 29 TMSSchedulerService 29 Symptoms 29 How to fix 29 TMSSnmpService formerly TMSWatchdogServiceStarter exe 29 Symptoms 30 How to fix 30 TMSServerDiagnosticsService 30 Symptoms 30 How to fix 30 Cisco TMS Database Management Service optional 31 Symptoms 31 How to fix 31 TM...

Page 4: ...Introduction Cisco TMS Administration Guide Page 4 of 37 Disclaimers and notices 37 ...

Page 5: ... tune Cisco TMS default behavior to suit your organization needs set up user permissions and configure your network model so that all of Cisco TMS call handling functionalities are available This document provides information for fresh installs upgrading an existing version or configuring the Cisco TMS version that comes preinstalled on a Cisco TelePresence Management Server There is also a guide ...

Page 6: ... in this ISDN zone Note If you use the same prefix to gain an outside line for both local and long distance calls you should put the same prefix here as you put in the previous field Number of digits to use for internal ISDN calls This specifies the number of digits used for internal dialing within this zone The leading digits will be stripped from the number when dialing between systems in this I...

Page 7: ...cking the link a page with an overview of all area code rules for the ISDN zone is displayed New rules can be added to the location from this page by clicking New Rule You can edit old rules for the location by clicking the Edit links to the right of every rule To delete a rule select it and click Delete Note In a US phone number for example 1 123 456 7890 the area code consists of the digits in b...

Page 8: ...hich domain name Cisco TMS should use for routing H323 calls to this IP zone when doing URI dialing Note Cisco TMS will always use URI dialing between two locations where this setting is filled in thereby ignoring the IP ISDN preferences defined at the bottom of this page Gateway Auto Prefix Specify the prefix to use to get an outside ISDN line through the gateway for video calls Gateway Telephone...

Page 9: ...ng via Cisco TMS booking and the only option when using a different booking interface like Outlook Lotus Notes Microsoft Office Communicator Lotus Sametime or Cisco Scheduler The systems in the same IP zone will be dialed on E164 alias if all systems in the conference are registered to one gatekeeper or different neighboring gatekeepers Participants that are not reachable through a gatekeeper will...

Page 10: ...ose systems you want to add to the Cisco TMS The following example will add two systems one by DNS name and one by IP address and scan ten systems in a range user tms int 10 0 0 1 10 1 1 0 10 1 1 10 This page is also where you specify the correct locations for the systems and the time zone In the Advanced Setting pane you can Enter Username Password and or an Admin Password if the systems require ...

Page 11: ...MS when adding systems rooms and equipment When adding systems and rooms equipment Cisco TMS will analyze the systems configurations using the ticketing service to ensure that when a system is added its settings are verified If Cisco TMS finds any faulty configurations it will present the system in the table with the header saying NOTE Systems Discovered with Incorrect Settings Not Yet Added to Fo...

Page 12: ...d to the SNMP broadcast messages that Cisco TMS will send out on set intervals This interval is configurable in Administrative Tools Configuration Network Settings TMS Services SNMP Broadcast Interval in minutes Note The Cisco 150 MXP with L1 1 and L1 2 is configured to request the DHCP for option 173 It is therefore advised to either upgrade the endpoints to newer software or to configure both th...

Page 13: ...e network or choosing an existing system in Cisco TMS by clicking Select system 4 Click Next You will then be shown a summary page where you choose whether you would like to keep the system name keep call configuration apply last configuration backup and keep all logs of the system You can also choose to purge the system that you are replacing from Cisco TMS 5 Click OK and the switch will be compl...

Page 14: ...done in two ways 1 Update the MAC address field in the Connection tab for the system with the new system s MAC address click Save Try and reboot the system via the remote control or telnet This will make the endpoint send a trap to Cisco TMS with its MAC address and IP address resulting in Cisco TMS recognizing the MAC address and updating the IP address in Cisco TMS 2 Set Track system on network ...

Page 15: ...ll the field TMS Server Address Fully Qualified Host Name or IPv4 Address When the system is reachable on the public Internet you can have TMS communicate with the system on both HTTPS port 443 and HTTP port 80 Behind firewall Setting Behind firewall as System Connectivity will make TMS communicate with the endpoint in much the same way as Reachable on Public Internet except TMS will not be able t...

Page 16: ...r If you are using a proxy type the dns name of the proxy server instead 5 This configuration is correct by default but if it has changed type xConfiguration ExternalManager Path tms public external management systemmanagementservice asmx 6 Type bye When this has been set the endpoint will send a register event to Cisco TMS and when Cisco TMS receives this and notices that the system is not alread...

Page 17: ...on To allow for the remote systems to communicate with the Cisco TMS server Cisco TMS needs to be reachable from the remote system There are several ways that this can be done Alternative Description Put the Cisco TMS in public This option provides less security and makes the Cisco TMS vulnerable for attacks directly over the Internet Put the Cisco TMS in DMZ This option provides a bit more securi...

Page 18: ...and external systems are now in two different databases The two databases will also cause a problem for statistics as the remote systems will have its statistics stored on the public Cisco TMS and the internal systems will have its statistics stored on the internal Cisco TMS System upgrades will need to be scheduled separately and software packages must be put on the two servers Phonebooks can how...

Page 19: ...the Site Administrator Users All users automatically become members of the Users group It is recommended that the access rights assigned to this group represents the lowest level you want any person in your organization to have This applies both to what Cisco TMS functions you want them to see and to which systems they are allowed to use Note You are not allowed to change any of the permission rig...

Page 20: ...ed systems listed This option lets the user choose how many of the previously used systems should be shown when booking a meeting in Cisco TMS First page for New Conference in Scheduler Lets the user choose whether to start with the default page the choose conference room page or the choose time page when opening Scheduler List your meetings when opening Cisco Scheduler Lets the user choose whethe...

Page 21: ... will load 1 Select check boxes according to your specifications 2 Click Save Access to different parts of Cisco TMS When setting up permissions for user group access to different parts of Cisco TMS the following choices are available Portal Booking Monitoring Systems Phone Books Reporting and Administrative Tools A detailed list of the permissions can be found in the Cisco TMS help system Adminis...

Page 22: ...this group as the default group All new users on the Cisco TMS server will then be denied access to Cisco TMS If you do this you should proceed to create an additional group with the minimum permissions for a trusted user These users need to be added into the group after they log into Cisco TMS the first time so that the user is created or you may predefine the users in Cisco TMS and place them in...

Page 23: ...whether Corporate Directory Global Directory or both should be used in their network Using both is recommended since this will give the endpoints a failover option If Cisco TMS is not reachable and the Corporate Directory cannot be displayed the Global Directory will show the 400 first entries in a flat list To select which systems should get the different phone books go to Phone Books in Cisco TM...

Page 24: ...ir prm file transmitted to the endpoint over HTTP every time adjustments to the Set on system list are made and at the intervals specified in the Update Frequency dropdown menu Endpoints such as Cisco Classic E3 x B8 x and older and Cisco TelePresence MCU D 3 x or newer Settings that will be set on the endpoints supporting Corporate Directory xconfiguration corpdir mode on xconfiguration corpdir i...

Page 25: ...matically clear themselves out if no longer used by the Operator s system How to set up an operator conference Operator conferences can be set up with Cisco TMS and the Cisco TelePresence MCU When viewing the conference in Conference Control Center you can move a participant to an Operator Conference by first selecting the participant from the participant list and clicking the button Move to Opera...

Page 26: ...g User Directory and Provisioning information from Cisco TMS via a single or clustered Cisco VCS to endpoint devices such as the E20 and the Movi software client For more information concerning the use and deployment of the Provisioning see Cisco Provisioning deployment guide ...

Page 27: ...mous access is set but the account used has been overwritten by a group policy The default IUSR user is a part of the guest account and typically group policies disable this account TMS No phonebook s set on this system No phonebook s set on this system in Cisco TMS Configure the endpoint to subscribe to phonebooks in Cisco TMS Using NAT on the endpoint can lead to Cisco TMS not recognizing the sy...

Page 28: ...he system information and system status in Cisco TMS is outdated Systems not responding still have the status InCall or Idle How to fix 1 Check the logs for symptoms or error messages at c Program Files TANDBERG TMS wwwTMS Data Logs tmsdebug log TMSDatabaseScanner txt on the server 2 Restarting the service or the Cisco TMS server will normally fix any problem with this service TMSLiveService This ...

Page 29: ...s or error messages at c Program Files TANDBERG TMS wwwTMS Data Logs tmsdebug log schedulerservice txt on the server 2 Restarting the service or the Cisco TMS server will normally fix any problem with this service TMSSnmpService formerly TMSWatchdogServiceStarter exe This service should be turned off if you have Cisco TMS set to HTTPS only For more information see Implementing Secure Management Th...

Page 30: ...r like HP Openview or other server network monitoring tools using Microsoft Windows SNMP Component 2 Check the logs for symptoms or error messages at c Program Files TANDBERG TMS wwwTMS Data Logs tmsdebug log watchdog txt on the server 3 Restarting the service or the Cisco TMS server will normally fix any problem with this service TMSServerDiagnosticsService This service is responsible for checkin...

Page 31: ...to or create and edit groups or users within Cisco TMS on page Systems Provisioning Directory How to fix Check the logs for symptoms or error messages at c Program Files TANDBERG TMS wwwTMS Data Logs tmsdebug log tmsagent txt on the server Restarting the service or the Cisco TMS server will normally fix any problem with this service See the Cisco TMS Provisioning deployment guide and the Cisco TMS...

Page 32: ...d with a Polycom MGC with version 6 x or older TMSConferenceAPI This component warns the old Exchange API Cisco TMS 7 and 8 that it must be upgraded The virtual directory for this component on the IIS is http serverIP TMSConferenceAPI This component should have the Directory Security set to Anonymous Access This component can be removed if this Cisco TMS installation does not have an older Exchang...

Page 33: ...ly Conference snapshots are not displayed on some clients How to fix Authentication The Java Applet will require the users to authenticate themselves if the Cisco TMS server is not part of the domain or a trusted domain the user is logged into The solution is to make the Cisco TMS server part of the domain or insert the username and password when prompted for each session Java installation The Jav...

Page 34: ...e Java Control Panel to make the Graphic and Map Monitor work as expected The database The database is where all information in use by Cisco TMS is stored except software files for system upgrade and the services log files The database is called tmsng and can run on SQL 2005 servers During the installation of Cisco TMS the sa account on the SQL server is automatically chosen to create and access t...

Page 35: ...ses to connect to the database is correct This information was historically only stored in the registry but is now also stored encrypted in the web config file It is therefore recommended to use the Cisco TMS Tools application found under TANDBERG in the Start menu of the Cisco TMS server to change and verify this information ...

Page 36: ...ing table lists documents and web sites referenced in this document All product documentation can be found on our web site No Document reference or location Name 1 D14389 03 Dated May 2010 Cisco TMS Installation Guide 2 D50520 04 December 2010 Cisco TelePresence Implementing Secure Management ...

Page 37: ...AULTS CISCO AND THE ABOVE NAMED SUPPLIERS DISCLAIM ALL WARRANTIES EXPRESSED OR IMPLIED INCLUDING WITHOUT LIMITATION THOSE OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING USAGE OR TRADE PRACTICE IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT SPECIAL CONSEQUENTIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION LOST ...