Solved: Re: Tandberg 880 won't register to gatekeeper

Darrell Westbrook · ‎03-04-2014

I'm trying to deploy a legacy Tandberg 800 (E3.3) endpoint on our IP video network, but I constantly reads

"GateKeeper Status : Registering with gatekeeper." My admin says "my source is allowed to connect to the destination via http and https". Is this system too old to use with TANDBEGR VCS? Do the Streaming settings need to be activated in order to use IP video conferencing? This system is primarily used with ISDN. Do you need a license key to use IP?

Darrell Westbrook · ‎03-20-2014

Ended up totally disabling the H320/ISDN functionality and setting NAT functionality to "On". Successfully registered to GP. Thanks all.

View solution in original post

Martin Koch · ‎03-04-2014

h323 requires a bunch of ports to be opened.

http://www.cisco.com/en/US/docs/telepresence/endpoint/mxp-series/white_papers/white_paper_tandberg_and_security.pdf

http://www.cisco.com/en/US/docs/telepresence/infrastructure/vcs/config_guide/X8-1/Cisco-VCS-IP-Port-Usage-for-Firewall-Traversal-Deployment-Guide-X8-1.pdf

http and https are not used in between the vcs and the endpoint, thats just for managing.

I think there are some really old tandberg systems which have a network interface but which

are still isdn only and can only be managed via ip.

They did not had any options to configure gatekeeper settings, as yo seem to have them

it might be possible. Sstems had some ip bandwidth keys, so yes, this could also be missing

Thats a really really old system, so I would not guarantee that it works properly. I would say your

time is spend better to figure out how and were to get a new system. Check out a system like the sx20.

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

Darrell Westbrook · ‎03-05-2014

Thanks for the prompt reply, Martin. I agree my time will be better spent procurringa new system, however, public funds are depleated at this time. As long as there is ethernet on the rear of this machine I'm obliged to make it work. I double check the Telnet settings and h323 is active.

Perhaps a firmware update is in order? Do you know where I can find one for this machine? I suppose I'll need a release key as well? Any help will be greatly appreciated.

Wayne DeNardi · ‎03-05-2014

The 880MXP software can be downloaded from the Tandberg FTP Server. The latest version for the MXP series codecs is F9.3.1 which can be found here: ftp://ftp.tandberg.com/pub/software/endpoints/mxp/f931/

You will of course need a release key to upgrade to the new software version (if you're not already on the F9.x train) -if you have an active service contract, you can get this from the Cisco Licencing Portal (http;//www.cisco.com/go/licence/), otherwise, without a service contract, you should be able to get a F9.x release key from Cisco TAC by contacting them as discussed in this security advisory: http://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20110831-tandberg.html.

Depending on what version of software you're running, you may need step through some intermediate versions (so you may need to get the release keys for those versions as well). The recommended upgrade path can be found in this thread:https://supportforums.cisco.com/message/3774853#3774853

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

Wayne

Please remember to mark helpful responses and to set your question as answered if appropriate.

Martin Koch · ‎03-06-2014

Wayne: this is not a MXP system!

The system and the software must be more than 10 years old.

I have many things which talk IP and Ethernet which are old, but I like them

to collect or to "play with" but not to be used in productivity.

At one point its just time to retire something. A mid aged computer with

JabberVideo and an ok webcam will deliver a way better quality that

this system is capable of doing.

Please remember to rate helpful responses and identify helpful or correct answers.

Please remember to rate helpful responses and identify

Wayne DeNardi · ‎03-06-2014

Sorry, saw the 880 and assumed it was an 880MXP.

The original 880 software is still available on the FTP site though: ftp://ftp.tandberg.com/pub/software/endpoints/classic/e-series/

Wayne

Sent from Cisco Technical Support iPad App

Wayne

Please remember to mark helpful responses and to set your question as answered if appropriate.

Lawrence James · ‎03-06-2014

Yes some older TANDBERGs do require a release key to enable IP.

Steve Kapinos · ‎03-06-2014

Martin Koch wrote:

I think there are some really old tandberg systems which have a network interface but which

are still isdn only and can only be managed via ip.

Yeah, but those were much older Classic codecs The original 5000 running A software if I recall. B software added H.323

E software was the hardware rev that added the high resolution input/output if I recall.

Somewhere buried in the bits is a document someone put together a long time out outlining the major pivot points. I've forgotten most of them

Darrell Westbrook · ‎03-07-2014

Thanks for all the suggestions. I've come to the realization that this system is just too old.

I moved a Tanderberg 95 MXP Edge (v9.1 NTSC) in to the room, but still can't get connected to the Gatekeeper. The system has been historically used in an ISDN environment. I figured no better time than the present to get it on the IP network. We punch a hole in the firewall to permit both udp and tcp traffic on 1024-65535. We can't even make direct calls to other IP systems on our LAN. Can some one verify if an Option key is needed for IP conferencing for this model? Our installed Options are MultiSite, Presenter, Security

Steve Kapinos · ‎03-07-2014

No option key is needed to make H323 calls on the MXP.

The firewall itself can still be a big player.. as well as if you are using NAT

If you have local endpoints, to build your confidence up... start simple and move up.

1) do the obvious.. confirm IP connectivty (web or telnet into the endpoint)

2) Disable GK on both endpoints, and dial via IP address. That should get a call up. If not, you still have some NAT or other security device between them. (disabling GK is done on the other system just in case you have some call admission policies about unknown addresses). Restore the GK setting on the test endpoint once done of course

Honestly I think you have insufficent setup on your endpoint for your firewall or the firewall is interfering. It's tough to decode without more hands-on info... but the usual suspects are

1) using NAT and the endpoint needs the NAT settings to properly advertise itself

2) required ports blocked in the Firewall (take note of udp and tcp.. and direction!)

3) firewall attempting to do application aware things like h323fixup

Darrell Westbrook · ‎03-11-2014

Both MXP95 endpoints are set to "direct" but still can't make IP calls. Keep getting error "...can't find gatekeeper.."

This is a point-to-point call! I don't need no stinking gatekeeper! :-)

Also, why do I need to configure NAT settings? Is this particular to Tanderberg systems? None of my Cisco SX20 have NAT enabled?

Darrell Westbrook · ‎03-20-2014

Ended up totally disabling the H320/ISDN functionality and setting NAT functionality to "On". Successfully registered to GP. Thanks all.

Chris Swinney · ‎03-20-2014

Hi Coolpants,

Are you tryng to call an endpoint direct using an IP address or register to a gatekeeper?

Either-way, neither will use HTTP or HTTPS. The H.323 gatekeeper registration port is TCP 1720, but you will also need UDP 1719 (and if you are doing automatic discovery, perhaps UDP 1718 which is set at a multicast group). In addition you may need other UDP ports open as H.323 is very chatty. I can't remember if an 880 supports firewall traversal, but otherwise you might need to open up a lot or ports.

Good luck

Chris

Chris Swinney · ‎03-20-2014

Appologies - these new forums are driving me nuts!!!!!!!!! The previous answers didn't show until I posted!!!