Patton electronic SmartNode 4110 Series ユーザーズマニュアル

ページ / 664
Gateway configuration task list
554
SmartWare Software Configuration Guide 
45 • H.323 gateway configuration
Example: Switch on H.235 security
The following example shows how to use the password encryption tool and how to enable H.235 security. 
Additionally the H.235 security debug monitor is enabled.
Generate the encrypted H.235 password from ‘myh235pwd’:
C:\>getcryptopassword myh235pwd 12d3f4e76a83c6dd1067a6d34fe5cb21
H.235 Password          : myh235pwd
Encrypted H.235 Password: 21dafa5dfc7399e5cef9cc138dabd22f
Master Password         : 12d3f4e76a83c6dd1067a6d34fe5cb21
Hash of Master Password : bc210d2244a1afd2e7da7a54a1a8c179403220c4
C:\>
Configure and enable H.235:
172.16.224.102(cfg)#gateway h323 h323
172.16.224.102(gw-h323)[h323]#h235security master-password 
12d3f4e76a83c6dd1067a6d34fe5cb21
172.16.224.102(gw-h323)[h323]#h235security password 
21dafa5dfc7399e5cef9cc138dabd22f encrypted
172.16.224.102(gw-h323)[h323]#h235security time-window 100
172.16.224.102(gw-h323)[h323]#h235security version v2
172.16.224.102(gw-h323)[h323]#h235security ras-auth-int-tx
172.16.224.102(gw-h323)[h323]#h235security ras-auth-int-rx
172.16.224.102(gw-h323)[h323]#h235security q931-auth-int
172.16.224.102(gw-h323)[h323]#show h235security
H.235 SECURITY SETTINGS
-----------------------
  H.235 Security              : Disabled
  H.235 Module Version        : 2.02.01
  H.235 Version               : 2
  Sender ID                   : NODE13
  General ID                  : GK01
  Time Window                 : 100 seconds
  Master Password Hash        : bc210d2244a1afd2e7da7a54a1a8c179403220c4
  Debug Monitor:              : Disabled
172.16.224.102(gw-h323)[h323]#
172.16.224.102(gw-h323)[h323]#debug h235security detail 3
172.16.224.102(gw-h323)[h323]#h235security
172.16.224.102(gw-h323)[h323]#14:27:35  H235  > Info: H.235 was started successfully
Advanced configuration options (optional)
Enabling H.245 Tunneling
If H.245 Tunneling is enabled, H.245 messages use the same TCP connection as the H.323 signaling. H.245 
Tunneling is disabled by default. If enabled, it only takes place when both parties agree. When experiencing 
problems with establishing H.323 calls, disabling H.245-Tunneling may help.