Filter
Top Products
Gateway configuration task list 554
SmartWare Software Configuration Guide 45 • H.323 gateway configuration
Example: Switch on H.235 security
The following example shows how to use the password encryption tool and how to enable H.235 security.
Additionally the H.235 security debug monitor is enabled.
Generate the encrypted H.235 password from ‘myh235pwd’:
C:\>getcryptopassword myh235pwd 12d3f4e76a83c6dd1067a6d34fe5cb21
H.235 Password : myh235pwd
Encrypted H.235 Password: 21dafa5dfc7399e5cef9cc138dabd22f
Master Password : 12d3f4e76a83c6dd1067a6d34fe5cb21
Hash of Master Password : bc210d2244a1afd2e7da7a54a1a8c179403220c4
C:\>
Configure and enable H.235:
172.16.224.102(cfg)#gateway h323 h323
172.16.224.102(gw-h323)[h323]#h235security master-password
12d3f4e76a83c6dd1067a6d34fe5cb21
172.16.224.102(gw-h323)[h323]#h235security password
21dafa5dfc7399e5cef9cc138dabd22f encrypted
172.16.224.102(gw-h323)[h323]#h235security time-window 100
172.16.224.102(gw-h323)[h323]#h235security version v2
172.16.224.102(gw-h323)[h323]#h235security ras-auth-int-tx
172.16.224.102(gw-h323)[h323]#h235security ras-auth-int-rx
172.16.224.102(gw-h323)[h323]#h235security q931-auth-int
172.16.224.102(gw-h323)[h323]#show h235security
H.235 SECURITY SETTINGS
-----------------------
H.235 Security : Disabled
H.235 Module Version : 2.02.01
H.235 Version : 2
Sender ID : NODE13
General ID : GK01
Time Window : 100 seconds
Master Password Hash : bc210d2244a1afd2e7da7a54a1a8c179403220c4
Debug Monitor: : Disabled
172.16.224.102(gw-h323)[h323]#
172.16.224.102(gw-h323)[h323]#debug h235security detail 3
172.16.224.102(gw-h323)[h323]#h235security
172.16.224.102(gw-h323)[h323]#14:27:35 H235 > Info: H.235 was started successfully
Advanced configuration options (optional)
Enabling H.245 Tunneling
If H.245 Tunneling is enabled, H.245 messages use the same TCP connection as the H.323 signaling. H.245
Tunneling is disabled by default. If enabled, it only takes place when both parties agree. When experiencing
problems with establishing H.323 calls, disabling H.245-Tunneling may help.