Koppeling OCS aan SURFcontact

Transcriptie

1 indi Koppeling OCS aan SURFcontact Project : SURFworks Projectjaar : 2010 Projectmanager : Alexander van den Hil Auteur(s) : Erik Dobbelsteijn Opleverdatum : Versie : 1.0 Samenvatting Microsoft OCS is sterk in opkomst als UC oplossing binnen het hoger onderwijs. Daarnaast hebben veel instellingen de afgelopen jaren hardware gebasseerde H323 endpoints aangeschaft. Een logische vraag die dan naar voren komt is hoe je deze twee werelden met elkaar kan integreren. Een van de mogelijkheden is om dit te doen via de MCU van de SURFcontact dienst. Voor deze publicatie geldt de Creative Commons Licentie Attribution 3.0 Unported. Meer informatie over deze licentie is te vinden op

2 Colofon Programmalijn Onderdeel Activiteit Deliverable Toegangsrechten Externe partij : Stimulering gebruik support : Kennisdomein GSO: Unified Communications : Pilot koppeling instellings UC met roombased videoconferencing : Koppeling OCS aan SURFcontact : open : Twiyo Dit project is tot stand gekomen met steun van SURF, de organisatie die ICT vernieuwingen in het hoger onderwijs en onderzoek initieert, regisseert en stimuleert door onder meer het financieren van projecten. Meer informatie over SURF is te vinden op de website (

3 !"#$%%$'()%"*('*'"+,-'./0#01$,211'.(, 30445"'.%$'0"#,6(/7(/,899:,;8,700/, 6<;=.0"$%.$,!"#!$#$%!% '%($ )(*+,,-./ (3.!"#$%%"'( 5+NN-.13B'>3?-07--'1?-+=+3D-4-3=13B7-4-.?-3+NB-G-0( )*$#( )*$#'+*$,( >3?-4G12?/( *-A>3?.-1?13B'-4-1/05-331/'> U*X9UK13?+7/$%%Y>?C131/04>01+3-3IE9( Z--/01N/[ C+-0-3?-/0>3?>>4?7>>4?-3>>3B-3+C-37+4?-3( R/-4'1=-S?1-+3?-4H1=4+/+D0K13?+7/?4>>10T( -.$(/0.$.( 13/0-..13B0+-B-/0>>37+4?0#=+30>=0.-BB-3C-0?-9:;<=+30>=09*HE:+C? C HE:'-4B>?-4/-//1-139*57>.10-10(

4 1,2$3(!""#$%'!()*+,-.,/ ,45,-.6.,016./,3.7894:/,19724.:.,(;,<-8.==.5,>008,-.,.?/.85., /0.3<53=1008/,/0/,-.,45/.85.,B<AC45.=,HI%$A08.,.5,I%$"FJE,F</,4=,.AC/.8,><594/, :<8<:/.8,><5,C./,.?1.84B.5/..85./L.8:,L<<801,-.,B<AC45.=,64K5,453.84AC/,.AC/.8,54./,..5>09-43, B03.24K:E, 4*,*#*'%$( @10?1'-4/-/-4' UC-0>./5-43?-<4+30)3?/-4'-4U?1-7-A1-43>++57-.R=+4-S/-4'-4 *-HE:5>3G1=A4-B1/04-4-3'1>9FM+N?1'-4/-/ FM/-4'-4/7>>4+3?-4--3IE9/-4'-4(*1-13/0-..13B-3G123?>3++513B-B-'-3+N?-HE:(

5 LAN IP_EXT_SDMCU FW ext SD MCU IP_EXT_EDGE DNS_EXT_EDGE_access DNS_EXT_EDGE_webconf DNS_EXT_EDGE_av IP_INT_EDGE DNS_INT_EDGE TCP_INT_EDGE:4 45, 5062 TLS IP_INT_DC DNS_INT_DC DC Office user Edge IP_INT_DNS DNS_INT_DNS internet TLS IP_EXT_XMPPGW DNS_EXT_XMPPGW DNS TLS XMPPgw IP_INT_CA DNS_INT_CA CA TLS IP_INT_core DNS_INT_core DNS_INT_pool IP_EXT_CORE DNS_EXT_CORE FW ext DMZ FW ext Core net CORE SIP 5061 HTTPS 443 WC 444 AV 4444 /*+$(.$+5$+( QC--/0>.C-0N41'>0-FM>?4-//-3T(F3+3/B-'>./0>>0?-HE:>=A0-4G123-1B-3D14-7>..-3A--D '$(.$+5$+(( F3?-G-+N/0-..13B1/R4-C+0->==-//S>=01-DU--34+.'>3?-)?B-9-4'-4?1-A-0C+B-.125C>>50'++4 ^==-//)?B-9-4'-4U'++4?-K-,E+3D-4-3=13B)?B-/-4'-4-3?-^_)?B-9-4'-4T(`-01/A-0 A>3?1B/0+CN++40eeb'++4>..-?41-?-/-4'-4/U+C?>0?1-N++4013B>/ C--/0>. `-01/=+CC+3N4>=01=-+C?-!"#$%"$*X93>C-30-.>0-3-13?1B-3+N(.+=>.(F3?-G-+NG-01/-=A0-4

6 7$.8#3003( /=A-4C'>3?-HE:0-4-=A0[

7

8 /0>01+31/13B-.+B?[

9 )3++5'>3>D--3-\0-43?+C-135>3^..>4?`++1/C>'>3K13?-/A-1C?--.3-C-3C-0G123 `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`($ab'++4?- *-HE:5>3C>>4+N!9FM?+C-134-B1/04-4-3(*>0, ?>0?-HE:31-00-B-.125+N--3IE9 +CB-'13B5>313.+BB-3-3+N--3>3?-4-9FMN4+\8? =A0'++4?-?1-3/04-.-'>301/(I'-41B-3/

10 5>3?-HE:G+3?-49FM4-B1/04> FM+N4+-N-3,->307++4?-3?1-B-41=A0G123>>3 :0";$5$#%"'$"( d+?4>e1/=+q'++4a--3j>3?,-4bu'++4a--3e+?1>3td14c7>4-'412b--d0?1-?-he:+n--3/0>,1-.- F3.+BB :;<=+30>=0'-4B>?-45>C-45>3+N07--C>31-4-3[ # _1>?->@0+#>00-3?>30U?++4=+30>=00-C>5-3C-0C=@6/@4D=+30>=0(3.-3'-4'+.B-3/C /2-/13?-E+CC@31=>0+4?-5>C G-3 # ;-=A0/4--5/U?++4=+30>=00-C>5-3C-0g5>C-43@CC-4h6/@4D=+30>=0(3. *-.>>0/0-C-0A+?-1/A-0C--/0B-,4@15-4/'41-3?-.125UC>>4'-4-1/0C--4,-A--4/0>NN-3()4C+-0 3>C-.125' >C IE9#B-,4@15-4,133-3?-9:;<=+30>=0IE9+CB-'13B>>3B-C>>50 7+4?-3( F3?1-3?-5+NN-.13B/0>, U5>3B ?-3+D?-57> '-4, /(*-IDD1=- E+CC@31=>0+4,1-?0C+B-.125A-?-3+C4-B1/04813/0-..13B-3>>30-N>//-3C-0, B0+0?- 4-/+.@01-( <%=#0'$>(!".30##03%$.30,,$"(?**+;$+$%%"'( J12?-3/?-'++4,-4-1?13BG123?-'+.B-3?-G>5-3>>3B-'4>>B?[ # _140@-.-C>=A13-/C-0I9Q713?+7/$%%Yae,10U)30-4N41/-'++4?-^*UB--3;$B-,4@15-3iT # M@,.1-5-FM>?4-//-3 # *X / # M@,.1-5=-401D1=>>0'++4)?B-/-4'-4( :#'$@$"$(%".30##03%$.30,,$"(5**+(0##$(@09A%"$.(!( F3/0>..--4@N?>0-/Q9M$T $( F3/0>..--4_HK>4-?41'-4/j [ A00N[jj5,('C7>4-(=+Cj/-.D/-4'1=-jC1=4+/10-/j/->4=A(?+k.>3B@>B-l-3m:9n=C?l?1/N.>8oEn -\0-43>.F?l!%$b!$" b( `-43+-C-0A-43-0>?>N0-4/[ >( K^X'++4N@,.1-5->?>N0-4U,( Z^X'++4>?>N0-4C-0N41'f>?4-/ e( *+73.+>?-313/0>..--4K14-/A>45 I3?-4pp+=/=+4-p/A>4-G123?-13/0>..-4/'>30++./3--4B-G-0UG+>./K14-/A>45-0=( 15$+2%9A3(@09A%"$'$'$5$".( IP_EXT DNS_EXT IP_INT DNS_INT Netbios name ad.surfcontact.nl Ad.surfcontact.nl SURFCONTACT-AD

11 ocscore.surfcontact.nl Surfcontact-cor.surfcontact.nl SURFCONTACT-COR ocsedge.surfcontact.nl Ocsedgeint.surfcontact.nl SURFCONTACT-EDG `-43+-C?-C>=A13--3A-4/0>40 $( b( F3/0>..--4^**E/-4'1=-/ e( q( a( P(

12 Y( "(!%( `-4/0>40?-C>=A13-3>>D.++N'>3?-71G>4?(!$( Z+B13'>3>D--3>3?-4-C>=A13-'1>?-Z^X>?>N0-4Q31-0K^XT+C0-G1-3+D?>07-450( MNE :7<<8,!q( 3>>C1/9:;<=+30>=0#E^(*-?14-=0+48'++4.+BB13B1/=[pE-40Z+B 16. IN-3--3=+CC>3?N4+CN0C-0>?C131/04>0+44-=A N-'-4'+.B-3/[ Certutil -setreg policy\editflags +EDITF_ATTRIBUTESUBJECTALTNAME2 net stop certsvc net start certsvc!p( >#4-=+4?0+'++4A-0FM>?4-/>>3? >30'>3?-)?B-/-4'-4 1/B(6'$(.$+5$+(!(

13 $( o1-/r?-n.+8+0a-4/-4'-44+.-/s!*-n.+8)?b-9-4'-4 )3,-B13C-0RF3/0>..<1.-/D+4)?B-9-4'-4S-3'-4'+.B-3/R>=01'>0-)?B-9-4'-4S(X+0--4A-0 b(

14 e( G =A013B+3?-4rING-0s'++4?-'-45.>413B'>3+3?-4/0>>3?-13/0>..>01-/0>N[ q(

15 a( P( Y(

16 "( /0+4-[!%( _>>57-450A-04-=A0/04--5/>>3'4>B-3,12? E^31-0+C?>0?-)?B A-0

17 !$( *+73.+>?A-0(=-4,-/0>3?-3'-4'+.B?-71G>4?C-0?10=-4,-/0>3?(!b( /-4'1=-T7+4?0>./'+.B0>>3B-'4>>B?QG1-++5 A00N[jjB+(C1=4+/+D0(=+CjD7.135jkZ135F?l!ab%YbT!e( [Version] Signature="$Windows NT$ [NewRequest] Subject = "CN=sip.surfgroepen.nl" Exportable = TRUE KeyLength = 1024 KeySpec = 1 KeyUsage = 0xA0 ; Digital Signature, Key Encipherment MachineKeySet = True RequestType = PKCS10 [EnhancedKeyUsageExtension] OID= ; Server Authentication [RequestAttributes] SAN="dns=sip.surfcontact.nldns=sip.surfnet.nl" MOE J8N-+N?-=+CC>3?.13-[ A.8/8.P,Q5.L,8.P9.=/E45@,<AA.==.-3.E8.P,!a( '-4/0@@4A-04-t@-/0,-/0>3?3>>4?-N@,.1-5-E^( MRE X>+30'>3B/0'>3--3(=-4,-/0>3?'>3?-E^U08N-2-[ A.8/8.P,Q<AA.1/,QB<AC45.,<AA.==.-3.EA.8,!Y( F3/0>..--4?-IE94-/+@4= /[ A00N[jj777(C1=4+/+D0(=+Cj?+73.+>?/j-3j?-0>1./(>/N\kD>C1.81?l"-P">$ba#=%?D#e>P$#>,>a# ">"a%$>"b-?%n?1/n.>8.>3bl-3

18 !"(

19 1/B(9*+$(.$+5$+(!( Z+B13+N?-C>=A13-C-0>?C131/04>0+44-=A0-3(

20 $( b( `-43+-C?-C>=A /0>40 e( _+-B?-C>=A13-0+->>3A-0?+C-13-3A-4/0>40( q( Z+B13>./?+C-13>?C131/04>0+4( a( P( ;-C+0-^?C131/04>01+3[

21 Y( "(!%( F3/0>..--4IE990>3?>4?)?101+3[

22 !!( o1-/r2>s(*-*-n.+8c-30k1g>4?'-4/=a1230[!$(

23 !Y( $%( $!( 7>=A07++4?-3(;JE9-4'1=-7>=A07++4? $$(

24 $b( $e( $q( QG1-A00N[jj,.+B/(N+130,41?B-(=+Cjc.+B/j/=A-40Gm2-DDjM>B-/jM+/0(>/N\kmF*laYA+-?-G- >=A0-4>D'-4>3?-4?5>37+4?-3T

25 $a( $P( $Y( $"( 90>40?-/-4'1=-/( b%( F3/0>..--4?-^?C131/04>01'-0++./Q4-=A0/+NA-0*-N.+8C-30K1G>4?A++D?/=A-4CT( b!( A00N[jj777(C1=4+/+D0(=+Cj?+73.+>?/j-3j?-0>1./(>/N\kD>C1.81?l"-P">$ba#=%?D#e>P$#>,>a# ">"a%$>"b-?%n?1/n.>8.>3bl-3

26 b$( +3?-490>3?>4?)? '-4/-351-/?-<4+30)3?M4+N-401-/[ bb( o.15c-04-=a0/+na-0d+4-/013?-hhe-351-/'+1=-n4+n-401-/u-3'+-b--3.+=>01+3n4+d1.- be( @10/0>>0-3RN>//7+4?3-'-4-\N14-/S>>3(

27 bq( 9-4'-4S[ ba( bp( /*%0"(C/-(3*$5*$'$"(

28 !( $( b(

29 e( IN?-HE:C+-013B-/0-.?7+4?-3A+-?-HE:135>3.+BB-3+N?-IE9=+4-/-4'-4[ q(