TANDBERG Gatekeeper User Manual download pdf (Page 36)

TANDBERG Gatekeeper User Guide

Page 36 of 105

8. Registration Control

The TANDBERG Gatekeeper can control which endpoints are allowed to register with it. Two separate

mechanisms are provided: a simple Registration Restriction Policy, and an authentication process based

on user names and passwords. It is possible to use both mechanisms at once: authentication to verify

an endpoint's identity from a corporate directory, and registration restriction to control which of those

authenticated endpoints may register with a particular Gatekeeper.

8.1. Setting Registration Restriction Policy

When an endpoint registers with your Gatekeeper it presents a list of aliases. You can control which

endpoints are allowed to register by including any one of its aliases on the Allow List or the Deny list.

Entries on the Allow and Deny Lists are in the form of patterns. When an endpoint attempts to register,

each of its aliases are compared with the patterns in the relevant list to see if they match. A pattern can

either specify an exact alias, or use wildcards to specify a group of aliases whose registration you want

to control.

For example, if the Registration Restriction policy is set to Deny and an endpoint attempts to register

using three aliases, one of which matches a pattern on the Deny list, that endpoint’s registration will be

denied. Likewise, if the Registration Restriction policy is set to Allow, only one of the endpoint’s aliases

needs to match a pattern on the Allow list for it to be allowed to register using all its aliases.

8.1.1. Viewing the Allow and Deny lists

To view the entries in the Allow and Deny lists, either issue the following commands:

xConfiguration Gatekeeper Registration AllowList

xConfiguration Gatekeeper Registration DenyList

or go to Gatekeeper Configuration -> Restrictions. The Allow and Deny list entries appear in the Allowed

Registrations and Denied Registrations boxes respectively (see Figure 17).

8.1.2. Activating use of Allow or Deny lists

To activate the use of Allow or Deny lists when determining which aliases are allowed to register with the

Gatekeeper, either issue the following command:

xConfiguration Gatekeeper Registration RestrictionPolicy

[None|AllowList|DenyList ]

or go to Gatekeeper Configuration > Restrictions and select one of the options from the Registration

restriction policy drop-down menu .

The options are as follows:

None (default)

Any endpoint may register.

AllowList

Only those endpoints with an alias that matches an entry in the Allow List may

DenyList

All endpoints may register, unless they match an entry on the Deny List.

Note: Allow Lists and Deny Lists are mutually exclusive: only one may be in use at any given time.

1 2 ... 31 32 33 34 35 36 37 38 39 40 41 ... 104 105

No comments

TANDBERG Gatekeeper User Manual Page 36