In This Guide This guide contains the following chapters: Stand-Alone Deployment on page 1 Cluster Deployment on page 20 Summary of Changes Changes for Release 20, Guide Version 20.0.0.5 The following section are new for this version: Cluster Deployment on page 20 Major updates have occurred to the following sections:
1722. UDP/TCP. The H.225 listener port of the gatekeeper. Page 12. Yealink Meeting Server Network Deployment Guide.
About This Guide i ii About This Guide About This Guide This guide introduces how to deploy and configure YMS. The deployment structure of YMS includes standard version and enterprise version, also called the stand-alone deployment and the cluster deployment. In This Guide This guide contains the following chapters: Stand-Alone Deployment on page 1 Cluster Deployment on page 20 Summary of Changes Changes for Release 20, Guide Version 20.0.0.5 The following section are new for this version: Cluster Deployment on page 20 Major updates have occurred to the following sections: Scenario 1: A Single Network Adapter in the Internal Network on page 1 Scenario 2: A Single Network Adapter in the External Network on page 3 Scenario 3: A Single Network Adapter and Static NAT on page 5 Scenario 4: Dual Network Adapters in the Internal Network and the External Network on page 11 Scenario 5: Dual Network Adapters and Static NAT on page 14 Changes for Release 23, Guide Version 10.23.0.60 Major updates have occurred to the following section: Port Mapping Requirements on page 5 iii Yealink Meeting Server Network Deployment Guide iv Table of Contents Table of Contents About This Guide ........................................................................... iii In This Guide................................................................................................................................................. iii Summary of Changes................................................................................................................................iii Changes for Release 20, Guide Version 20.0.0.5 ................................................................... iii Changes for Release 23, Guide Version 10.23.0.60 .............................................................. iii Table of Contents ............................................................................ v Stand-Alone Deployment............................................................... 1 Scenario 1: A Single Network Adapter in the Internal Network ...............................................1 Setting the Network...........................................................................................................................1 Setting the Primary Domain Name and the Web Service Address.................................2 Setting the Registration Service....................................................................................................2 Registering the Device......................................................................................................................3 Scenario 2: A Single Network Adapter in the External Network...............................................3 Setting the Network...........................................................................................................................3 Setting the Primary Domain Name and the Web Service Address.................................4 Setting the Registration Service....................................................................................................4 Registering the Device......................................................................................................................5 Scenario 3: A Single Network Adapter and Static NAT................................................................5 Port Mapping Requirements ..........................................................................................................5 Setting the Network...........................................................................................................................6 Setting the Primary Domain Name and the Web Service Address.................................8 Setting the Registration Service....................................................................................................8 Registering the Device ................................................................................................................... 10 Scenario 4: Dual Network Adapters in the Internal Network and the External Network ......................................................................................................................................................................... 11 Setting the Network........................................................................................................................ 11 Setting the Primary Domain Name and the Web Service Address .............................. 12 Setting the Registration Service ................................................................................................. 12 Registering the Device ................................................................................................................... 13 Scenario 5: Dual Network Adapters and Static NAT .................................................................. 14 Port Mapping Requirements ....................................................................................................... 14 Setting the Network........................................................................................................................ 15 Setting the Primary Domain Name and the Web Service Address .............................. 16 Setting the Registration Service ................................................................................................. 16 Registering the Device ................................................................................................................... 19 Cluster Deployment ...................................................................... 20 Port Mapping Requirements ............................................................................................................... 21 Setting the Network ................................................................................................................................ 22 Setting the Primary Domain Name and the Web Service Address ...................................... 22 v Yealink Meeting Server Network Deployment Guide Configuring the Address Port Mapping.................................................................................. 23 Setting the Registration Service ......................................................................................................... 23 Configuring the Address Port Mapping.................................................................................. 24 Registering the Device ........................................................................................................................... 25 vi Stand-Alone Deployment Stand-Alone Deployment Scenario 1: A Single Network Adapter in the Internal Network Setting the Network If you register YMS accounts, place point-to-point calls or join video conferences only in the internal network, you can deploy YMS by this method. You just need configure the internal network adapter on YMS to finish the deployment. Procedure: 1. Log into YMS, and click System Setting->Node Management. 2. Click and the server will identity the IP address of the internal network adapter by default, and then configure the network parameter to ensure the network connectivity. Note Make sure that DNS server is available. Otherwise, the service will be abnormal. The routing rules came with the server cannot be deleted. If they are deleted, other added routing rules will be abnormal. 1 Yealink Meeting Server Network Deployment Guide Setting the Primary Domain Name and the Web Service Address When you register an account, the server address you enter is the primary domain name. The web service address is used for the devices to access the server or the YMS contacts, to download the firmware from the server and so on. Procedure: 1. Log into YMS, and click System Setting->Common Setting->Network Association. 2. Configure the primary domain name and the web service address. 3. Click Save. 4. Operate according to prompts and click OK. Setting the Registration Service Procedure: 1. Log into YMS, and click Service->SIP Service->Registration Service->Add. 2. Configure the registration service for the internal network. 3. Click Save. 4. Operate according to prompts and click OK. 2 Stand-Alone Deployment Registering the Device The users in the internal network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: Scenario 2: A Single Network Adapter in the External Network Setting the Network If you register YMS accounts, place point-to-point calls or join video conferences only in the Internet, you can deploy YMS by this method. You just need configure the external network adapter on YMS to finish the deployment. 3 Yealink Meeting Server Network Deployment Guide Procedure: 1. Log into YMS, and click System Setting->Node Management. 2. Click on the right side of the default node, and the server will identity the IP address of the external network adapter by default, and then configure the network parameter to ensure the network connectivity. Note Make sure that DNS server is available. Otherwise, the service will be abnormal. The routing rules came with the server cannot be deleted. If they are deleted, other added routing rules will be abnormal. Setting the Primary Domain Name and the Web Service Address When you register an account, the server address you enter is the primary domain name. The web service address is used for the devices to access the server or the YMS contacts, to download the firmware from the server and so on. Procedure: 1. Log into YMS, and click System Setting->Common Setting->Network Association. 2. Configure the primary domain name and the web service address. 3. Click Save. 4. Operate according to prompts and click OK. Setting the Registration Service Procedure: 1. Log into YMS, and click Service->SIP Service->Registration Service->Add. 2. Configure the registration service for the external network. 3. Click Save. 4. Operate according to prompts and click OK. 4 Stand-Alone Deployment Registering the Device The users in external network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: Scenario 3: A Single Network Adapter and Static NAT Port Mapping Requirements If the following ports are restricted in your network, you need open these ports. If YMS is deployed in an intranet, you should map the following ports to the Internet to realize the interconnection between the private and the Internet. Module Port UDP/TCP Description 443 Web port 444 Rsyslog log service port H.323port 80 514 1719 1720 1722 TCP TCP TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP HTTPS port YMS can be trusted by the Yealink devices even if the web HTTPS certificate is replaced by YMS. HTTP port YMS server can collect the device log via this port. The RAS listener port of the gatekeeper. The H.225 listener port of the gateway. The H.225 listener port of the gatekeeper. 5 Yealink Meeting Server Network Deployment Guide Module Port Turnserver port 3478 3479 9688 SIP port 5060 5061 5062-5070 UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP Media port 10000-65535 UDP/TCP Description The listener port of the traversal service. The backup listener port. This port, which has impact on the traversal service, should be mapped as long as there is IP mapping. It is used for the IP call service. It is used for the registration service. It is used for the third-party service, the PSTN gateway service, the peer trunk service, REG trunk service, and Skype for Business service. It is used for the MCU service, IVR, BFCP/FECC, the conference stack signaling, the conference stack media, and the traversal service (UDP is compulsory but TCP is optional). Setting the Network To ensure the YMS security and maintain the internal network, you can deploy YMS in the internal network and map the address by static NAT through the router and YMS, so that users in external network can access YMS. For example, a YMS in the internal network with the IP address 10.86.0.220 and the domain name 10.86.0.220.xip.io, after static NAT mapping, its IP address and domain name are 124.72.94.3 and yms220.yealink.com respectively. Therefore, the mapped IP address and domain name can be used by the user for access and registration. In order to make the user in the internal network can register accounts, we need configure another IP address on the internal network, that is IP address 10.86.0.221. Note that YMS is allowed to configure multiple IP addresses on one network adapter. 6 Stand-Alone Deployment Procedure: 1. Log into YMS, and click System Setting->Node Management. 2. Click on the right side of the default node, and configure the network parameter to ensure the network connectivity. 3. Click Add and configure the second IP address for this network adapter. 4. Click Save. 5. Select the corresponding IP address, and enable Public IP to allow the access and registration for the user in the external network. 6. Click Save. Note Make sure that DNS server is available. Otherwise, the service will be abnormal. The routing rules came with the server cannot be deleted. If they are deleted, other added routing rules will be abnormal. 7 Yealink Meeting Server Network Deployment Guide Setting the Primary Domain Name and the Web Service Address When you register an account, the server address you enter is the primary domain name. For security reason, you can set the service addresses for the internal and external network respectively, to realize the separation of the internal and external network when the device is accessing the server or YMS contacts, downloading the firmware from the server. Procedure: 1. Log into YMS, and click System Setting->Common Setting->Network Association. 2. Configure the primary domain name and the web service address. 3. Click Save. 4. Operate according to prompts and click OK. Setting the Registration Service You can configure the registration service to allow the user in the internal and external network to register a YMS account. Procedure: 1. Log into YMS, and click Service->SIP Service->Registration Service->Add. 2. Configure the registration service for the internal network. 3. Click Save. 4. Operate according to prompts and click OK. 8 Stand-Alone Deployment 5. Repeat the steps from 1 to 4 to configure the registration service for the external network. After the configuration, the page is shown as below: Configuring the Address Port Mapping When configuring the registration service for the external network, the port 5060 and 5061 of 10.86.0.220 are mapped to the port 5060 and 5061 of 124.72.94.3, therefore, you need add address port mapping on YMS. Procedure: 1. Log into YMS, and click System Setting->Address Port Mapping->Add. 2. Configure the address port mapping. 3. Click Save. 4. Operate according to prompts and click OK. 9 Yealink Meeting Server Network Deployment Guide Registering the Device The users in the internal network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: The users in external network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: 10 Stand-Alone Deployment Scenario 4: Dual Network Adapters in the Internal Network and the External Network Setting the Network If you register YMS accounts, place point-to-point calls or join video conferences in both the internal network and the Internet, you can deploy YMS by this method. You need configure the internal and external network adapter on YMS to finish the deployment. Procedure: 1. Log into YMS, and click System Setting->Node Management. 2. Click and the server will identity the IP addresses of the internal and external network adapters by default, and then configure the network parameter to ensure the network connectivity. 3. Select the desired adapter, and enable Public IP. 4. Click Save. Note Make sure that DNS server is available. Otherwise, the service will be abnormal. The routing rules came with the server cannot be deleted. If they are deleted, other added routing rules will be abnormal. 11 Yealink Meeting Server Network Deployment Guide Setting the Primary Domain Name and the Web Service Address When you register an account, the server address you enter is the primary domain name. For security reason, you can set the service addresses for the internal and external network respectively, to realize the separation of the internal and external network when the device is accessing the server or YMS contacts, downloading the firmware from the server. Procedure: 1. Log into YMS, and click System Setting->Common Setting->Network Association. 2. Configure the primary domain name and the web service address. 3. Click Save. 4. Operate according to prompts and click OK. Setting the Registration Service You can configure the registration service to allow the user in both the internal and external network to register a YMS account. Procedure: 1. Log into YMS, and click Service->SIP Service->Registration Service->Add. 2. Configure the registration service for the internal network. 3. Click Save. 4. Operate according to prompts and click OK. 12 Stand-Alone Deployment 5. Repeat the steps from 1 to 4 to configure the registration service for the external network. After the configuration, the page is shown as below: Registering the Device The users in the internal network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: 13 Yealink Meeting Server Network Deployment Guide The users in the external network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: Scenario 5: Dual Network Adapters and Static NAT Port Mapping Requirements If the following ports are restricted in your network environment, you need open these ports. If the YMS is deployed in an intranet, you should map the following ports to the Internet on the router to realize the interconnection between the private and the Internet. Module Web port Rsyslog log service port H.323port Turnserver port Port 443 444 80 514 1719 1720 1722 3478 3479 9688 UDP/TCP TCP TCP TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP Description HTTPS port YMS can be trusted by the Yealink devices even if the web HTTPS certificate is replaced by YMS. HTTP port YMS server can collect the device log via this port. The RAS listener port of the gatekeeper. The H.225 listener port of the gateway. The H.225 listener port of the gatekeeper. The listener port of the traversal service. The backup listener port. This port, which has impact on the 14 Stand-Alone Deployment Module Port UDP/TCP SIP port 5060 5061 UDP/TCP UDP/TCP 5062-5070 UDP/TCP Media port 10000-65535 UDP/TCP Description traversal service, should be mapped as long as there is IP mapping. It is used for the IP call service. It is used for the registration service. It is used for the third-party service, the PSTN gateway service, the peer trunk service, the REG trunk service, and Skype for Business service. It is used for the MCU service, IVR, BFCP/FECC, the conference stack signaling, the conference stack media, and the traversal service (UDP is compulsory but TCP is optional). Setting the Network To ensure the YMS security and maintain the internal network, you can deploy YMS in the internal network and configure the address by static NAT mapping through the router and YMS, so that users in external network can access YMS. You need configure the internal and external network adapter on YMS to finish the deployment. For example, a server in the internal network, with the IP address of LAN port as 10.82.24.149 and the primary domain name as 10.82.24.149.xip.io, is used for the user in the internal network to access and register. The IP address (10.81.62.14) and domain name of this server's WAN port, after the static NAT mapping, is 218.107.197.142 and ymstest2.yealink.com respectively, which can be used for the user in the external network to access and register. Procedure: 1. Log into YMS, and click System Setting->Node Management. 2. Click and the server will identity the IP addresses of the internal and external network adapter by default, and then configure the network parameter to ensure the network connectivity. 3. Select the desired adapter, and enable Public IP. 15 Yealink Meeting Server Network Deployment Guide Note 4. Click Save. Make sure that DNS server is available. Otherwise, the service will be abnormal. The routing rules came with the server cannot be deleted. If they are deleted, other added routing rules will be abnormal. Setting the Primary Domain Name and the Web Service Address When you register an account, the server address you enter is the primary domain name. For security reason, you can set the service addresses for the internal and external network respectively, to realize the separation of the internal and external network when the device is accessing the server or YMS contacts, downloading the firmware from the server. Procedure: 1. Log into YMS, and click System Setting->Common Setting->Network Association. 2. Configure the primary domain name and the web service address. 3. Click Save. 4. Operate according to prompts and click OK. Setting the Registration Service You can configure the registration service to allow the user in the internal and external network to register a YMS account. Procedure: 1. Log into YMS, and click Service->SIP Service->Registration Service->Add. 2. Configure the registration service for the internal network. 16 Stand-Alone Deployment 3. Click Save. 4. Operate according to prompts and click OK. 17 Yealink Meeting Server Network Deployment Guide 5. Repeat the steps from 1 to 4 to configure the registration service for the external network. After the configuration, the page is shown as below: Configuring the Address Port Mapping Because the port 5060 and 5061 of 10.81.62.14 are mapped to the port 5060 and 5061 of 218.107.197.142, you need add address port mapping on YMS. Procedure: 1. Log into YMS, and click System Setting->Address Port Mapping->Add. 2. Configure the address port mapping. 3. Click Save. 4. Operate according to prompts and click OK. 18 Stand-Alone Deployment Registering the Device The users in the internal network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: The users in external network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: 19 Yealink Meeting Server Network Deployment Guide Cluster Deployment If your enterprise uses cluster deployment, you need configure each node according to the deployment plan. The following part takes this environment as an example and introduces how to configure the registration service. For other services, refer to Yealink Meeting Service Administrator Guide. The above topology IP is described as below: Three master nodes: 10.86.254.11 (the master node), 10.86.254.12 (the sub-master node), 10.86.254.13 (the sub-master node), with 10.86.254.10 and 10.86.254.11 configured on one network adapter and 10.86.254.10 mapped to the external network 110.87.96.14 by NAT. Nine business nodes which include the following: Three edge nodes (providing signaling service): 172.17.2.21, 172.17.2.22, 172.17.2.23, with 172.17.2.41 and 172.17.2.21 configured on one network adapter and 172.17.2.41 mapped to the external network 110.87.96.14 by NAT. Three edge nodes (providing media service): 172.17.2.11, 172.17.2.12, 172.17.2.13, with 172.17.2.31 and 172.17.2.11 configured on one network adapter and 172.17.2.31 mapped to the external network 110.87.96.14 by NAT. Three MCUs: 10.86.254.21, 10.86.254.22, 10.86.254.23. 20 Cluster Deployment Port Mapping Requirements If the following ports are restricted in your network environment, you need open these ports. If the YMS is deployed in an intranet, you should map the following ports to the Internet on the router and YMS to realize the interconnection between the private and the Internet. Requirements of the internal service port: make sure that the following ports in every node of the cluster can communicate with each other. Port UDP/TCP Description 8000-9000 UDP+TCP The internal service port. 27017 UDP+TCP This port is used for database accessing. 22 TCP This port is used for installing or upgrading YMS by SSH. Requirements for the External Service Port: Module Web port Rsyslog service log port H.323 port Turnserver port SIP port Media Port Port UDP/TCP 443 TCP 444 TCP 80 UDP/TCP 514 1719 1720 1722 3478 3479 9688 5060 5061 5062-5070 UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP UDP/TCP 10000-65535 UDP/TCP The detailed mapping information based on the above network topology Map the port 443 of 172.17.2.41 to the port 8443 of the external network 110.87.96.14. unmapped Map the port 80 of 172.17.2.41 to the port 8080) of the external network 110.87.96.14. unmapped Map a port (from 1719 to 1722) of 172.17.2.41 to a port (from 1719 to 1722) of the external network 110.87.96.14. Map a port (from 3478 to 3479) of 172.17.2.31 to a port (from 3478 to 3479) of the external network 110.87.96.14. unmapped Map a port (from 5060 to 5061) of 172.17.2.41 to a port (from 5060 to 5061) of the external network 110.87.96.14. unmapped Map a port (from 10000 to 29999) of 172.17.2.41 to a port (from 10000 to 29999) of the external network 110.87.96.14. 21 Yealink Meeting Server Network Deployment Guide Setting the Network You need configure the internal network to ensure a smooth internal network first and then configure the external network mapping. Note that the name of each node is default, you can edit them for convenient management and recognition. Procedure: 1. Log into YMS, and click System Setting->Node Management. 2. Click and the server will identity the IP address of each node by default, and configure the network parameter to ensure the network connectivity. Note Make sure that DNS server is available. Otherwise, the service will be abnormal. The routing rules came with the server cannot be deleted. If they are deleted, other added routing rules will be abnormal. You cannot edit the IP address of the master node on the management platform but you can edit it in the installation file and re-install it. Setting the Primary Domain Name and the Web Service Address When you register an account, the server address you enter is the primary domain name. For security reason, you can set the service addresses for the internal and external network respectively, to realize the separation of the internal and external network when the device is accessing the server or YMS contacts, downloading the firmware from the server. Procedure: 1. Log into YMS, and click System Setting->Common Setting->Network Association. 2. Configure the primary domain name and the web service address. 3. Click Save. 4. Operate according to prompts and click OK. 22 Cluster Deployment Configuring the Address Port Mapping Because the port 443 of the internal network 172.17.2.41 is mapped to the port 8443 of the external network 110.87.96.14, you need add address port mapping on YMS. Procedure: 1. Log into YMS, and click System Setting->Address Port Mapping->Add. 2. Configure the address port mapping. 3. Click Save. 4. Operate according to prompts and click OK. Setting the Registration Service You can configure the registration service to allow the user in the internal and external network to register a YMS account. Procedure: 1. Log into YMS, and click Service->SIP Service->Registration Service->Add. 2. Configure the registration service for the internal network. 23 Yealink Meeting Server Network Deployment Guide 3. Configure the registration service for the external network. For example, add 172.17.2.41 (introduced in the above topology) to the server address. After the configuration, the page is shown as below: Configuring the Address Port Mapping Because the port 5060 and 5061 of 172.17.2.41 are mapped to the port 5060 and 5061 of 110.87.96.14, you need add address port mapping on YMS. Procedure: 1. Log into YMS, and click System Setting->Address Port Mapping->Add. 2. Configure the address port mapping. 3. Click Save. 4. Operate according to prompts and click OK. 24 Cluster Deployment Registering the Device The users in the internal and external network can register YMS accounts via Yealink VC Desktop. It is shown as the picture below: 25 Yealink Meeting Server Network Deployment Guide Customer Feedback We are striving to improve our documentation quality and we appreciate your feedback. Email your opinions and comments to DocsFeedback@yealink.com. Technical Support Visit Yealink WIKI (http://support.yealink.com/) for the latest firmware, guides, FAQ, Product documents, and more. For better service, we sincerely recommend you to use Yealink Ticketing system (https://ticket.yealink.com) to submit all your technical issues. 26Microsoft Word 2016 Microsoft Word 2016