You are on page 1of 74

MPCS131106

Setup Manual
HD Visual CommunicationCommunication-MPCS

Introduction
Purpose
This document describes HD Visual Communication Multi Point Connection Software Version2.0 ( Referred to as
HDVC-MPCS V2.0 hereinafter ) installation.

Contents/Preconditions
This document describes Linux installation, HDVC-MPCS installation, and confirmation test after setting up
HDVC-MPCS. In case of use of the system in which Linux has been installed, please set up same environment as this
document describes.
This document doesnt describe how to get HDVC-MPCS program. In case of setup by using this document, please
get HDVC-MPCS program beforehand and store it into USB memory.
This document is described for a person who understands OS function and operation well.

Requirement for System


PC with the following spec is recommended when using this software.
Up to 8 sites (Low Model)
Model)
CPU
Clock (GHz)
CPU
Core/Thread
Cache (MB)
Memory (GB)
HDD

Intel Core i7 or Xeon E3-1280


3.4GHz
1
4/8
8MB
8GB or more
(Free Space) 128GB or more

8 sites or more (Middle/High Model)


Model)
CPU
Intel Xeon X5690
Clock (GHz)
3.46GHz
CPU
1 or more
Core/Tread
6/12
Cache (MB)
12MB
Memory (GB)
8GB or more
HDD (GB)
(Free Space) 128GB or more
As for PC with above mentioned spec, products that are already confirmed HDVC-MPCS operation check are as
follows.
HP Pavilion PC h8-1280jp (Low Model)
HP DL160 G6 (Middle/High Model)
Note
Make sure to use PC only for HDVC-MPCS. If you activate other software (with HDVC-MPCS) as the same time,
there is a possibility for HDVC-MPCS performance to be influenced.
When using PC with spec other than recommended one, make sure to confirm operation check (including continuous
operation) after kitting, afterwards, please set up user environment.

Introduction(Continuance)

Linux version
Recommended Linux version used for HDVC-MPCS is as follows.
Corresponded Linux distributions are CentOS, Red Hat.
CentOS_6.2_final 64bit
Red Hat Enterprise Linux Server release 6.2 64bit
Red Hat Enterprise Linux Server release 6.4 64bit
Note
HDVC-MPCS activation is not guaranteed on version other than recommended one and on Linux environment
which is installed from unsupported Linux distribution.

Browsers
Browsers for Web Console
Following browsers are recommended for using HDVC-MPCS Web console.
Windows Internet Explorer 8.0 (only Windows7)
Windows Internet Explorer 10.0
Mozilla Firefox
Note
Windows Internet Explorer 9.0 Google Chrome are not supported in MPCS V2.0.
Windows XP is not supported as platform to be operated browser.
Memo
According to browser for use, display position such as text display, ruled line, input operation area, list display,
pull-down menu and so on, and part of processing might be different.

Browser version that are already confirmed operation check, are as follows.
Windows Internet Explorer 8.0
Windows Internet Explorer 10.0
Mozilla Firefox 23
Note
Make sure to use Web console browser since the version already confirmed operation check.
Browser (Mozilla Firefox) version bundled on Linux is old, therefore, make sure to perform version-up in
case of use as browser for Web console.
Recommended browser is confirmed operation check in developing HDVC-MPCS, however the operation might
be different by performing (browser) version-up afterward.

Introduction(Continuance)

Necessary Packages
Following packages are necessary for HDVC-MPCS operation environment.
When necessary packages are not installed, its added when installing HDVC-MPCS.
The shared libraries used by Kerberos krb5-libs
krb5-libs-1.9-22.el6(i686)
GCC version 4.4 shared support library
libgcc-4.4.6-3.el6(i686)
Library providing XML and HTML support
libxml2-2.7.6-4.el6(i686)
A C binding to the X11 protocol
libxcb-1.5-1.el6(i686)
SELinux library and simple utilities libselinux
libselinux-2.0.94-5.2.el6(i686)
GNU Standard C++ Library
libstdc++-4.4.6-3.el6(i686)
A graphics library for quick creation of PNG or JPEG images
gd-2.0.35-10.el6(i686)
Font configuration and customization library
fontconfig-2.8.0-3.el6(i686)
A free and portable font rendering engine
freetype-2.3.11-6.el6_1.7(i686)
An XML parser library
expat-2.0.1-9.1.el6(i686)
A library of functions for manipulating PNG image format files
libpng-1.2.46-1.el6_1(i686)
Key utilities library
keyutils-libs-1.4-3.el6(i686)
Core X11 protocol client library
libX11-1.3-2.el6(i686)
Libraries for applications using bzip2
bzip2-libs-1.0.5-7.el6(i686)
A library for manipulating JPEG image format files
libjpeg-6b-46.el6(i686)
The zlib compression and decompression library
zlib-1.2.3-27.el6(i686)
Common error description library
libcom_err-1.41.12-11.el6(i686)
X.Org X11 libXpm runtime library
libXpm-3.5.8-2.el6(i686)
A general purpose cryptography library
openssl-1.0.0-20.el6(i686)
Each package version is based on CentOS_6.2_final.

Firewall (iptables)Settings
(iptables)Settings
Following firewall setting is changed when HDVC-MPCS is installed.
As for change parts, -A INPUT -j REJECT --reject-with icmp-host-prohibited on /etc/sysconfig/iptables file is
commented out. iptables contents are as follows.
# Firewall c onfiguration written by sys tem-c onfig-firewall
# Manual customization of this file is not rec ommended.
*filter
:INPUT ACCEPT [0:0]
:FORW ARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p ic mp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCE PT
#-A IN PUT -j REJECT --reject-with icmp-host-prohibited
-A FORW ARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

iptables
Note
Change of iptables (Firewall Settings) executed by installer is a setting to be operated HDVC-MPCS correctly,
and not to guarantee the network security. Regarding the firewall (iptables), please ensure the network
security by setting according to network environment.
->refer to Appendix Firewall Setting Procedure (Reference)(Page58).
Memo
Commented out -A INPUT -j REJECT --reject-with icmp-host-prohibited is a setting for discard packet
which is undefined rule to be returned error (ICMP).

Introduction(Continuance)

Service Start Settings


Following service settings are changed when HDVC-MPCS is installed.
Service Name
NetworkManager
NetworkManager is a tool for easily managing network connections
httpd
The Apache HTTP Server is an extensible server implementing the current
HTTP standards.
acpid
Listen and dispatch ACPI events from the kernel
sshd
SSH is a protocol for secure remote shell access. This service starts up
the OpenSSH server daemon.

Settings
No change for service start settings
If HDVC-MPCS start, it is stopped.
ValidIt starts at Runlevel 3.

InvalidStop
InvalidStop

Note
httpd (activated at Runlevel 3, 5) and acpid (stop) settings are surely needed for activating HDVC-MPCS
properly. (Dont change these settings)
When NetworkManager stops, network setting on Network Connection screen (GUI) which is activated on
Menu System >> Settings >> Network Connection is unable to be executed properly. In case of setting
up network set from Network Connection screen (GUI), execute it after activating NetworkManager in
advance. After completed setting, please surely reboot Linux.
->refer to Appendix Network Setting Procedure(Page52).
Memo
When NetworkManager service activation setting is also Activation (On), NetworkManager is stopped
during HDVC-MPCS activation.
sshd is stopped with security reason. When using SSH, activate sshd with users (Network administrator)
responsibility. ->refer to Appendix SSH Setting Procedure (Page56).

Introduction(Continuance)

httpd Settings
HDVC-MPCS uses httpd for offering Web console and external interface function.
Required setting for activating HDVC-MPCS is written on hdvc-mpcs.conf , and its added to
/etc/httpd/conf.d/ in installing HDVC-MPCS. hdvc-mpcs.conf contents are as follows.
Alias /hdvc_mp cs /usr/loca l/hdvc-mpcs/www/webroot
<Directory "/usr/loca l/hdvc-mpcs/www/webroot">
DirectoryInde x Inst_La nguage.cgi LicenseAgreeme nt.cgi Co nf_Main.cgi Mainte_NetworkState.cgi S et_DefaultSe tting.cgi Lo gi n.cgi ind ex.cgi
index.html
Optio ns Indexes FollowS ymLinks
Optio ns +E xecCGI
AddType text/x-se rver-parsed-html .html
AddType a pp lication/x-httpd-cgi .cgi
Allo wOver ride A ll
Ord er deny,allo w
Deny fro m all
Allo w from all
</Directo ry>
<Directory "/usr/loca l/hdvc-mpcs/www/webroot/system">
AuthType Digest
AuthName "Di gest A uth"
AuthUserFile "/usr/local/hdvc-mpcs/www/pass/htdigest"
Require va lid- user
</Directo ry>
<Directory "/usr/loca l/hdvc-mpcs/www/webroot/e xtif">
AuthType Digest
AuthName "Di gest A uth"
AuthUserFile "/usr/local/hdvc-mpcs/www/pass/htdigest"
Require va lid- user
</Directo ry>
<Directory "/usr/loca l/hdvc-mpcs/www/webroot/admin">
AuthType Digest
AuthName "Di gest A uth"
AuthUserFile "/usr/local/hdvc-mpcs/www/pass/htdigest_ admin"
Require va lid- user
</Directo ry>

hdvchdvc-mpcs.conf

Note
Httpd setting which is performed by installer is not taken into consideration, as for the network security.
According to network environment, please protect httpd network security by setting up httpd.conf.
->refer to Appendix Example for httpd Setting (Reference)(Page68).

Font for Site Name Display


HDVC-MPCS sets up font for site name display in installation. Font depends on specified language in Linux installation,
and it is symbolic linked under /usr/local/share/fonts/. Moreover, font type set up is only 1 type.
Memo
If you want to change font type for using site name, change the symbolic link under
/usr/local/share/fonts/. However, be aware that display position or character size on screen might be
different from expected ones, according to font set up.

Table of Contents
Introduction ................................................................
................................................................................................
..............................................................................................
.............................................................. 2
Purpose .......................................................................................................................................................................................2
Contents/Preconditions .......................................................................................................................................................2
Requirement for System ......................................................................................................................................................2
Linux version .............................................................................................................................................................................3
Browsers for Web Console ..................................................................................................................................................3
Necessary Packages ..............................................................................................................................................................4
Firewall (iptables)Settings ....................................................................................................................................................4
Service Start Settings...........................................................................................................................................................5
httpd Settings ...........................................................................................................................................................................6
Font for Site Name Display .................................................................................................................................................6

Setup Procedure ................................................................


................................................................................................
....................................................................................
.................................................... 8
Setting Operation (Kitting) Environment........................................................................................................................8
Setting Flow...............................................................................................................................................................................8
Linux Installation ......................................................................................................................................................................9
HDVC-MPCS Installation.................................................................................................................................................. 19
Installation Setup.................................................................................................................................................................. 37
Confirm Basic Function ..................................................................................................................................................... 39

Update ................................................................
................................................................................................
................................................................................................
......................................................................
...................................... 42
Update Procedure ................................................................................................................................................................ 42

Version Up ................................................................
................................................................................................
..............................................................................................
.............................................................. 43
Version Up Procedure ........................................................................................................................................................ 43

Uninstall ................................................................
................................................................................................
................................................................................................
...................................................................
................................... 44
Uninstall Procedure ............................................................................................................................................................. 44

Notes................................................................
................................................................................................
................................................................................................
.........................................................................
......................................... 47
License Agreement .............................................................................................................................................................. 47
Network Security.................................................................................................................................................................. 47
Date & Time Change ........................................................................................................................................................... 47
Support for Ending the HDVC-MPCS ......................................................................................................................... 48
Red Hat Enterprise Linux Upgrade Procedure ......................................................................................................... 50

Appendix ................................................................
................................................................................................
................................................................................................
..................................................................
.................................. 52
Network Setting Procedure.............................................................................................................................................. 52
SSH Setting Procedure ..................................................................................................................................................... 56
Firewall Setting Procedure (Reference) ...................................................................................................................... 58
Example for httpd Setting (Reference) ....................................................................................................................... 65
Network Interface Name Confirmation Procedure ................................................................................................. 70
NAT Traversal Service / IP Mode Mixed Settings ................................................................................................. 71
To Shorten System Restoration Time In Resetting Router. (Reference) ..................................................... 72

Setup Procedure
Setting Operation (Kitting)
Kitting) Environment
As for HDVC-MPCS setting operation, it is necessary to prepare recommended PC to be installed HDVC-MPCS,
besides HUB, Network cable (required numbers) and more than 2 HDVC for confirming basic function. Furthermore,
configure environment that you can confirm from HDVCHDVC-MPCS basic function
function to Linux installation at local network.
Installation setup needs Registration Key, therefore purchase the license card beforehand and get Registration
Key.

Setting Flow
Linux Installation

HDVCHDVC-MPCS Installation

Setup Installation

Confirm Basic Function

Install Linux(OS)
->Refer to Linux Installation(Page 9)

Install HDVC-MPCS(application).
->Refer to HDVC-MPCS Installation(Page19).

Execute installation setup (initial settings) for using


HDVC-MPCS.
->Refer to Installation Setup(Page37).

Confirm whether the activation for HDVC-MPCS is set.


-> Refer to Confirm Basic Function(Page39).

Note
In case of entrusting Linux installation operation to external party, indicate the party to specify Desktop
at Linux installation and install all packages which are listed on Necessary Packages (Page 4). When you
cant indicate it, prepare the DVD (Purchases media as for Red Hat.) for OS installation, execute installation
with the procedure which is written on Linux Installation.

Setup Procedure(Continuance)

Linux Installation
Preparation
Download CentOS_6.2_final on www.centos.org, create DVD for OS installation.
(Download CentOS-6.2-x86_64-bin-DVD1.iso on http://vault.centos.org/6.2/isos/x86_64/)
In case of RedHat, purchase media from licenser, or download Red Hat Enterprise Linux Server release 6.2 or Red Hat
Enterprise Linux Server release 6.4 from jp.redhat.com. And create DVD for OS installation.

Still more, HDVC-MPCS operation check is not confirmed, as for the version except CentOS_6.2_final, Red
Hat Enterprise Linux Server release 6.2 and Red Hat Enterprise Linux Server release 6.4.

Installation Procedure
Execute OS installation in accordance with following procedure.
Name(Screen Name, Button, etc.), capture screen are based on CentOS.

(1) Insert DVD for OS installation into DVD Drive, activate OS installation DVD.
Press ESC as the same time as power on, display choice screen for activating device.
Insert CentOS_6.2_final installation DVD Disk1 into DVD Drive.
Choose CD/DVD Drive(SATA2 as Activation Device.
Reboot the system if necessary.

(2) Choose Install or upgrade an existing


system (default) on Welcome to CentOS
6.2! screen and activate it.
Choose Install or upgrade an existing
system on top of the screen and press
return key.

Memo
If screen isnt displayed, in spite of
choosing and activating Install or upgrade
an existing system, choose Install
system with basic video driver and install.

Setup Procedure(Continuance)
(3) Choose Skip on Disc Found screen
and press return key.
Press -> key to choose Skip, and
press return key.

(4) Click Next on CentOS6 screen.


Mouse enables to be used from on this
screen.

(5) Choose a language on language select


screen, and click Next button.
Select Japanese by scrolling screen,
because you can find Japanese 14 lines
below from English.

10

Setup Procedure(Continuance)
(6) Choose proper keyboard on keyboard
select screen, and click Next.
If you select Japanese on language
select screen, Japanese is set for
default. So, only you usually have to do
is to click Next button.

(7) Choose Basic Storage Devices Default


on storage device select screen, and click
Next button.

(8) When Storage Device Warning screen is


displayed, choose Yes, discard any data.
(No need to click Next)
Note
When storage device has necessary data,
please execute backup surely before
installation.
Memo
There is a case that it is not displayed for
formatted or new disk.

11

Setup Procedure(Continuance)
(9)

Click Configure Network button on host


name setting screen.

Note
Before the operation, confirm LAN cable is
connected to network interface for using
HDVC-MPCS. (LAN cable needs to be
connected HUB.)
When HUB and LAN cable are unable to be
ready, go to (15) without (9)(14)
operations.
Execute network connection setting after
LAN cable is prepared.
->refer to Appendi Network Setting
Procedure(Page52).

(10) Choose Network interface (Ex. System


eth0), on network connection screen,
which HDVC-MPCS uses, and click Edit
button.
Note
When several network interfaces are
displayed on the list, choose network
interface HDVC
HDVCHDVC-MPCS uses the
communication for HDVC
HDVC first.
Other network interface setting should be
executed for second time or more.

(11) Check Connect automatically on


Editing System eth0 screen.
Note
In case of setting MTU size, the receiving
packet size might be limited up to MTU size
according to the Ethernet driver used in
Linux-PC.
So please do not change automatic as
for MTU size.
Please make sure to check for "Connect
Connect
automatically".
automatically
In case of the network interface which
HDVC-MPCS doesnt use, execute
settings according to network environment.
(We recommend to set up automatic)

12

Setup Procedure(Continuance)
(12) Choose (Click) IPv4 Settings tab on
Editing System eth0 screen.

(13) Change mode to Manual on Editing


System eth0 screen, click Add button
on Address, enter Address/Net mask/
Gateway and if you set DNS server as
necessary, click Apply.
Note
In case of using NAT Traversal Service, it
is necessary to enter gateway and set
DNS server.
Memo
When Network interface which
HDVC-MPCS doesnt use after 2 times or
more, set up according to purpose.

(14) Click Close on Editing System eth0.


Memo
When using several NICs, repeat operation
from (10) to (13) and add setting
Additional NIC can be set after completing
OS installation

13

Setup Procedure(Continuance)
(15) Specify host name (default) on Host Name
Setting screen and click Next.
Click Next without changing default
setting (localhost.localdomain) for Host
name.

(16) Confirm that Use UTC for system clock


is checked after specified proper time zone
on time zone setting screen, and click
Next.
In case of selecting Japanese, default
(Asia/Tokyo) is set.

(17) Specify password on root password


setting and click Next.
Note
Remember the password without forget, be
sure to keep the password safe with your
responsibility.
Please set up the password which cant be
presumed easily from a third party.
Please change the password regularly.

14

Setup Procedure(Continuance)
(18) Specify Use All Space on Partition
Setting screen and click Next.
Use All Space deletes all install device
data, if required data is in it, please install
after executing backup absolutely.

(19) Choose Write changes to disk on Storage


Configuration Caution screen. (No need to
click Next)
Disk format is started.

(20) Choose Desktop on Additional Software


Select Screen and click Next.
Choose Desktop. And without
changing the checked CentOS
(default) and checked customize
later(default) , then click Next to start
installation.

15

Setup Procedure(Continuance)
(21) Install completion screen is displayed,
remove DVD for OS installation and click
"reboot" button.
When installation is normally ended, DVD
drive is injected, then take out DVD for
installation.
Complete Installation screen is displayed,
click Reboot button.
Note
Execute Reboot with inserting DVD for
OS installation in DVD drive, OS installation
initial screen is displayed.

(22) Click Next on Initial Settings


(Welcome) screen.

(23) When agreeing the contents, choose Yes, I


agree to the License Agreement on
License Information screen and click
Forward.
Please read End User License
Agreement (EULA). Choose Yes, I agree
to the License Agreement if you agree.

16

Setup Procedure(Continuance)
(24) Click Forward on Create User screen.
When User Registration is necessary,
specify user name, full name, password and
click Forward.
Memo
User Registration enables after completing
OS installation.

(25) Click Yes on User Registration


Confirmation screen.
In case of registered user at (24),
confirmation screen is not displayed.(It
shifts to (26)).

(26) Specify current date and time on Date and


Time screen and click Forward.
Dont check (default) Synchronize date
and time over the network.
Note
HDVC-MPCS isnt supported for
synchronizing time to the time server.
Please pay attention when time is
synchronized in activating HDVC-MPCS,
the activation comes to unstable.

17

Setup Procedure(Continuance)
(27) Click Finish button on Kdump screen.
Dont change from default and click
Finish.
Confirmation message screen Changing
Kdump setting requires rebooting the
system to reallocate memory accordingly.
Would you like to continue with this change
and reboot the system after firstboot is
complete? is displayed, then click Yes.
Confirmation message screen The
system is necessary to be rebooted for
some of your selections to be taken
effect. is displayed, then system is
started the reboot after clicking OK
button.

(28) OS Login screen is displayed.


OS installation and initial setting are
completed.

18

Setup Procedure(Continuance)

HDVCHDVC-MPCS Installation
Installation procedures with both of USB memory and CD are explained.

1. In case of USB memory


Preparation
Prepare USB memory (256MByte or more) for installation, decompress (enter specified password) distributed
HDVC-MPCS_RPM.exe file on the Windows PC. Please copy decompressed file (RPM) to USB memory.
Folder since PRM is copied on USB memory root folder, USB memory for HDVC-MPCS installation is completed.

Installation Procedure
Execute HDVC-MPCS installation with following procedure.
Name (Screen Name, Button, etc.), capture screen are based on HDVC-MPCS V1.0 and CentOS.

(1) Choose Other on OS Login screen and


click Log In at root user.

(2) Enter root user password on OS Login


screen and click Log In button.

19

Setup Procedure(Continuance)
(3) Caution screen in super user login is
displayed, click Close.

(4) Insert OS installation DVD to DVD Drive.


Insert CentOS_6.2_final installation
DVDDisk1 to DVD Drive.
When OS recognizes DVD, DVD icon is
displayed on desktop.
Window is automatically opened, DVD file
is displayed. (Display position may not be
center)

(5) Insert USB memory for HDVC-MPCS


installation to USB interface.
Insert prepared USB memory for
HDVC-MPCS installation to USB
interface.
When OS recognizes USB memory, file
system icon is displayed on desktop.
Window is automatically opened, file in
USB is displayed. (Display position may not
be center)

20

Setup Procedure(Continuance)
(6) Double click ethflwctrl_setup icon from
window that display files in USB memory.
If you double click ethflwctrl_setup icon
from window for displaying files, a window
which displays files in ethflwctrl_setup is
opened.

(7) Double click ethflwctrl_setup.sh icon on


the window which displays files in
ethflwctrl_setup.

(8) Click Run on ethflwctrl_setup.sh


execution confirmation screen.
Note
If ethflwctrl_setup.sh is executed, flow
control for Ethernet is set to off.

21

Setup Procedure(Continuance)
Note
In case of following message (Cannot get device pause setting: Operation not supported
supported Pause parameters
for eth0:)
eth0:) is displayed, please confirm network interface name. (Confirmation procedure refers to Appendix
Network Interface Name Confirmation Procedure(Page70 )) In case of network interface name used for
HDVC-MPCS, set Ethernet flow control to OFF on network systems (router, etc.) connected to the
HDVC-MPCS. If HDVC-MPCS isnt used for the network interface, its no problem.
When flow control cant be set to off on network system, please confirm whether flow control function is
performed on network system users guide. If it has the flow control function and its impossible to be set to
off, please connect a HUB , which is not supported for flow control, between HDVC-MPCS and network
system control.

*Error Screen. Its not displayed normally.

(9) Double click yumsetup on window which


displayed file in USB memory.
When double clicking yumsetup icon on
file displayed window, window which is
displayed file in yumsetup is opened.

(10) Double click yumsetup.sh icon on window


which displays file in yumsetup.
Memo
When double clicking yumsetup.sh icon,
referent in adding package is changed from
download site on network to local DVD
Drive.

22

Setup Procedure(Continuance)
(11) Click Run on yumsetup.sh execution
confirmation screen.

Note
When following message (Please check the version of a Linux OS.
OS.Linux distribution that you use.)
use.) is
displayed,
displayed it might not be specified OS version for HDVC-MPCS. Confirm Linux OS version, please operate
(10) and after again.
Tested OS for HDVC-MPCS activation are CentOS_6.2_final and Red Hat Enterprise Linux Server release
6.2, Red Hat Enterprise Linux Server release 6.4.
Confirm message contents, and click X button on right top of the screen and end Firefox.

*Error Screen. Its not displayed normally.

(12) Double click RPM icon on window which


displayed file in USB memory.
When double clicking RPM icon on file
displayed window, window which displays
file in RPM is opened.

23

Setup Procedure(Continuance)
(13) Double click
hdvc-mpcs-x.x-x.x.x86_64.rpm icon on
window which displayed file in RPM.
Double click
hdvc-mpcs-x.x-x.x.x86_64.rpm icon on
file displayed window.

(14) Click Continue Anyway button on


caution screen displayed when authorized
user execute.

(15) Click Install button on Confirm


Installation screen.

Note
When following message (Transaction Error) is displayed, confirm whether installation DVD is inserted to DVD
Drive.
After completed the confirmation, click Closebutton and operate (10) and after again.

*Error Screen. Its not displayed normally.

24

Setup Procedure(Continuance)
(16) Click Install button on additional
packages confirmation screen.
Package list on additional packages screen displays required package to activate HDVC-MPCS.
Installation is started by clicking Install button.
Memo
It might not be displayed 19 packages as
described as right section.
When adding package doesnt exist
(Already installed), this screen isnt
displayed.

(17) When installation is completed,


Start_HDVC-MPCS.sh and
Uninstall_HDVC-MPCS.sh icon are
created on the desktop.
Installation is completed after
Start_HDVC-MPCS.sh and
Uninstall_HDVC-MPCS.sh are created
on the desktop.

25

Setup Procedure(Continuance)
(18) Double click yumrestore.sh on the
window which displayed file in yumsetup.
Memo
When double clicking yumrestore.sh icon,
referent in adding package is returned from
local DVD Drive to download site on
network.

(19) Click Run on yumrestore.sh


Confirm Execution screen.

(20) Take out installation DVD from drive. Next,


right click file system (USB) icon and take
out USB memory after executing
Unmount from Menu.
Take out installation DVD from drive.
right click file system (USB) icon, and
choose Unmount from Menu. Confirm
the file system (USB) icon on the desktop
is deleted and take out USB memory.

26

Setup Procedure(Continuance)
(21) Choose Shut Down from System on
OS Menu.

(22) Click Restart button on Shutdown this


system now? screen.

(23) When reboot is completed, login screen is


displayed.
HDVC-MPCS installation is completed.

27

Setup Procedure(Continuance)

2. Incase of CD
Preparation
Prepare CD for installation, and decompress (enter specified password) distributed HDVC-MPCS_RPM.exe file on
the Windows PC. Please copy decompressed file (RPM) to CD.
Folder since PRM is copied on CD root folder, then CD for HDVC-MPCS installation is completed.

Installation Procedure
Execute HDVC-MPCS installation with following procedure.
Name (Screen Name, Button, etc.), capture screen are based on HDVC-MPCS V1.0 and CentOS.

(1) Choose Other on OS Login screen and


click Log In as root user.

(2) Enter root user password on OS Login


screen and click Log In button.

28

Setup Procedure(Continuance)
(3) Caution screen in super user logging in is
displayed, click Close.

(4) Insert CD for HDVC-MPCS installation to


CD-ROM drive.
Window is automatically opened, and CD
file is displayed. (If it isnt displayed
automatically, select mount to double
click computer and to right click CD. )
Create setup folder on Desktop and
copy HDVC-MPCS_v1.0 folder to setup
folder.

(5) After Taking out CD for HDVC-MPCS


installation, insert OS installation DVD to
DVD Drive.
Right click CD for HDVC-MPCS
installation and choose Unmount from
Menu and Take out CD.
Insert CentOS_6.2_final installation DVD to
DVD Drive., after taking out CD for
HDVC-MPCS installation.
When OS recognizes DVD, DVD icon is
displayed on desktop.
Window is automatically opened, DVD file
is displayed. (Display position may not be
center)

29

Setup Procedure(Continuance)
(6) Right click setup folder and choose Properties from
Menu and change Permissions.

Click Permissions tab and set Folder access of


Owner, Group and Others to Create and delete
files. And set File access to Read and write.

After Folder access setting, set a checkbox of

Allow executing files as program.


Execute to
Click Apply Permissions to Enclosed Files and Click
Close. (After clicking, File access display ---, but
it is no problem.)

Memo
After clicking Apply Permissions to Enclosed Files
the checkbox changes to
. But permissions of all
files in setup folder have been changed. So, it is no
problem.
Right click in setup folder, and choose property.

(7) Double click ethflwctrl_setup icon from


window which display files in HDVC-MPCS_V1.0
in setup folder.

When double clicking ethflwctrl_setup icon


from window for displaying files, a window which
displays files in ethflwctrl_setup is opened.

(8) Double click ethflwctrl_setup.sh icon on


the window which displays files in
ethflwctrl_setup.

30

Setup Procedure(Continuance)
(9)

Click Run from ethflwctrl_setup.sh


execution
confirmation screen.

Memo
If executed ethflwctrl_setup.sh, flow
control for Ethernet is set to off.

Note
In case of following message (Cannot get device pause setting: Operation not supported Pause parameters
for eth0:) is displayed, please confirm network interface name. (Confirmation procedure refers to Appendix
Network Interface Name Confirmation Procedure(Page70)) In case of network interface name used for
HDVC-MPCS, set Ethernet flow control to OFF on network systems (router, etc.) connected to the
HDVC-MPCS. If HDVC-MPCS isnt used for the network interface, its no problem.
When flow control cant be set to off on network system, please confirm whether flow control function is
existed with network system users guide. If it has the flow control function and it cant be set to off, please
connect a HUB, which is not supported for flow control, between HDVC-MPCS and network system.

*Error Screen. Its not displayed normally.

(10) Double click yumsetup on window which


displayed file in HDVC-MPCS_V1.0 folder in
setup folder.
When double clicking yumsetup icon on
file displayed window, window which is
displayed file in yumsetup is opened.

31

Setup Procedure(Continuance)
(11) Double click yumsetup.sh icon on window which
displays file in yumsetup.
Memo
When double clicking yumsetup.sh icon,
referent in adding package is changed from
download site on network to local DVD
Drive.

(12) Click Run on yumsetup.sh execution


confirmation screen.

Note
When following message (Please check the version of a Linux OS.
OS.Linux distribution that you use.
use.) is
displayed,
displayed it might not be specified OS version for HDVC-MPCS. Confirm Linux OS version, please operate
(10) and after again.
Tested OS for HDVC-MPCS activation are CentOS_6.2_final, Red Hat Enterprise Linux Server release 6.2
and Red Hat Enterprise Linux Server release6.4.
Confirm message contents, and click X button on right top of the screen and end Firefox.

*Error Screen. Its not displayed normally.

32

Setup Procedure(Continuance)
(13) Double click RPM icon on window which
displayed file in setup folder.
When double clicking RPM icon on file
displayed window, window which displays file in
RPM is opened.

(14) Double click hdvc-mpcs-x.x-x.x.x86_64.rpm on


window which displayed file in RPM.
Double click hdvc-mpcs-x.x-x.x.x86_64.rpm
icon on file displayed window.

(15) Click Continue Anyway button on caution


screen in authorized user executing.

(16) Click Install button on Confirm Installation


screen.

33

Setup Procedure(Continuance)
Note
When following message (Transaction Error) is displayed, confirm whether installation DVD is inserted to DVD
Drive.
After completed the confirmation, click Closebutton and operate (10) and after again.

*Error Screen. Its not displayed normally.

(17) Click Install button on additional packages


confirmation screen.
Package list on additional packages screen
displays required package to activate
HDVC-MPCS.
Installation is started by clicking Install
button.

Memo
It might not be displayed 19 packages
described as right section.
When adding package doesnt exist
(Already installed), this screen isnt
displayed.

(18) When installation is completed,


Start_HDVC-MPCS.sh and
Uninstall_HDVC-MPCS.sh icon are
created on the desktop.
Move Start_HDVC-MPCS.sh and
Uninstall_HDVC-MPCS.sh into setup
folder.

34

Setup Procedure(Continuance)
(19) Double click yumrestore.sh on the window
which displayed file in yumsetup.
Memo
When double clicking yumrestore.sh icon,
referent in adding package is returned from
local DVD Drive to download site on
network.

(20) Click Run on yumrestore.sh Confirm


Execution screen.
(Nothing happens especially. But, there is no
problem.)

(21) Take out installation DVD from DVD drive.


After right clicking CentOS_6.2_final
installation DVD icon and choosing
Unmount from Menu.

35

Setup Procedure(Continuance)
(22) Choose Shut Down from System on
OS Menu.

(23) Click Restart button on Shutdown this


system now? screen.

(24) When reboot is completed, login screen is


displayed.
HDVC-MPCS installation is completed

36

Setup Procedure(Continuance)

Installation Setup
Preparation
Connect Linux PC installed HDVC-MPCS to PC for accessing HDVC-MPCS on same LAN.
Note
Purchase license card beforehand, get Registration Key.
As for PC for Web console which is used for operation, please set screen saver so as to be locked (protection
by password) if it is not operated after a period of inactivity ( less than 3 minutes is recommended).

Setup Procedure
Initial setting (Installation Setup) is executed for activating HDVC-MPCS.
Installation Setup is set up on wizard style screen to access HDVC-MPCS Web Console from PC browser.
Language Setting Set up language (English/Japanese) displayed on Web Console.
Registration Key Setting Register the License to HDVC-MPCS.
Account Settings Register administrator account for logging in HDVC-MPCS.
IP Address Setting Set up IP address used for HDVC-MPCS.
(1) Open Web browser, access http://(HDVC-MPCS IP Address)/hdvc_mpcs/index.cgi.
Installation Setup wizard screen is displayed.

(2) Choose Japanese and click Next button.


Registration Key Setting screen is displayed.
After that selected language is displayed.

Language Setting screen

(3) Enter obtained Registration Key, and click Next button.


Account Settings screen is displayed.
When input is wrong, alert message is displayed, please
enter again.
Return to Language Setting screen by clicking
Back button.
Memo
Even when alert message wasn't shown with clicking "Next"
button, there is a case of error in checking "Registration
Key" when clicking "finish" button on procedure (5).
Registration Key Setting screen

37

Setup Procedure(Continuance)
(4) Enter administrator user name and password, and click
Next button.
IP Address Setting screen is displayed.
When input is wrong, alert message is displayed, please
enter again.
Return Registration Key Setting screen by clicking
Back button.
Note
Do not forget login user name and password. Please keep
proper management on customers responsibility.
Please set password so as not to be guessed easily.
Please change password periodically.

Account Settings screen

Memo
User name4-16 characters, password6-16 characters.
Following characters are available. (Uppercase and
Lowercase are distinguished)
User Namealphanumeric and symbols -_
Passwordalphanumeric and symbols ! # $ % ( ) - = * _

(5)

Enter IP Address which HDVC-MPCS uses, click Finish


button.
It also confirms "Registration Key" verification.
Registration completed. message is displayed. Installation
Setup is completed by displaying this message.
Return to Account Settings screen by clicking Back
button.

When error is occurred on the "Registration Key"


confirmation, alert message is displayed. After confirmed
message, it shifts "Language setting screen with clicking
"OK" button, then operate from procedure (2) again.

IP Address Setting screen

(6)

Click OK button on Registration completed. Message


screen.
HDVC-MPCS Console Login screen is displayed.
Go to Confirm Basic Function.

Language Setting screen

38

Setup Procedure(Continuance)

Confirm Basic Function


Confirm whether HDVC-MPCS activates normally after completing Installation Setup.

Preparation
Connect Linux PC installed for HDVC-MPCS to, PC for
accessing HDVC-MPCS, and 2 HDVCs(HDVC1, HDVC2) on
same LAN.

HDVC 1

HDVC 2

Just after completed Installation Setup, it starts from the


HDVC-MPCS
state which HDVC-MPCS Console Login screen is displayed
on Web browser.
When Web browser is closed, please open Web browser and
access http://(HDVC-MPCS IP Address)/hdvc_mpcs/index.cgi. Login screen is displayed.

PC

Confirmation Procedure
(1) Click Login button.
Authentication screen is displayed.

Login screen
(2) Enter registered administrator user name and password
at Installation Setup, and click OK button.
Successfully logged in, License Agreement screen is
displayed.

Authentication screen
(3) Choose I agree and click OK button. During choosing
Conference Status tab, Home screen is displayed.
Note
In case of internal setup operation (You dont have end
users), dont check for Do not ask me again.In case of
end user is with you, ask customer to confirm the
contents of license agreement, and to click Do not ask
me again by yourself.
->refer to Notes License Agreement(Page47).

License Agreement screen

39

Setup Procedure(Continuance)
(4)

Confirm the conference status is Inactivate Conference, click


Conference Start/End.
Conference Start/End screen 1 is displayed.

Home screen
(5) Choose Ad-Hoc Mode in conference mode, click Next button.
Conference Start/End screen 2 is displayed.

Conference Start/End screen 1


(6) Click Add button on Dial Out Endpoint List.
IP Address entering box is displayed as popup.

Conference Start/End screen 2


Conference Start/End screen 2
(7) Enter IP address of HDVC1, and click OK button.
HDVC1 is registered in Dial Out Endpoint List on
Conference Start/End screen 2.

IP Address entering box

40

Setup Procedure(Continuance)
(8) Click Add button, register HDVC2 as same.
As a result, HDVC1 and HDVC2 are registered in Dial Out
Endpoint List.

Conference Start/End screen 2 (terminal registered)


(9) Click Start Conference button.
Conference is started, HDVC-MPCS is calling to HDVC1 and HDVC2 automatically.

(10) Incoming call response by each of HDVC1 and HDVC2.


HDVC image is displayed at position 1 and 2 on CP4
Layout screen.
Image with louder voice from HDVC microphone
automatically switches the display to position 1 on CP4 in
real time (5-second intervals).

CP4 Layout screen

(11) Click End Conference button on HDVC-MPCS console.


HDVC1 and HDVC2 are automatically disconnected, the status
comes to end conference.

Conference Start/End screen 3


Thats all for confirming basic function.

41

Update
Execute in case that new HDVC-MPCS is released such for function improving and so on. As for update, it is not
necessary to enter registration key.

Update Procedure
HDVC-MPCS update procedure is as same as installation procedure, therefore please refer to HDVC-MPCS
Installation(13) (Page 24) on the setup manual to execute operation.

Note
Update is executed even in HDVC-MPCS activating. Please note when you are in conference, the unit is
disconnected and conference is ended.
Firewall Settings and Service Start Settings which are executed in initial installation are not executed on
update. In case of back to initial state, update after uninstalled.
Memo
When RPM (HDVC-MPCS package) version is older than installed version (also same version), installation is
not executed. In case of installing previous version, install after uninstalled.
On the update, package adding which is done in initial installation is not executed.
Even update is executed, already registered profile or Address Book are saved.

42

Version Up
In case of HDVC-MPCS version up from V1.0 to V2.0, version up should be executed.

Version Up Procedure
As for HDVC-MPCS version up procedure, except registration key setting when installation set up, because of same
as standard installation procedure, refer to setting up procedureHDVC-MPCS installation(19pages) and after pages
to operate.

Note
Version up is executed even in HDVC-MPCS activating. Please note when you are in conference, the unit is
disconnected and conference is ended.
Firewall Settings and Service Start Settings which are executed in initial installation are not executed. In
case of back to initial state, update after uninstalled.
In case of set up by registration key, version up cant be executed.
Memo
If version up is executed, already registered content of profile and address book are saved.
(1) Activate Web browser and access to http://(HDVC-MPCS IP address)/hdvc mpcs/index.cgil.
Installation set up wizard screen (language setting screen) is displayed.

(2) Choose Japanese and click Next button.


Registration key setting screen is displayed.
After that, selected language is displayed.

Language Setting screen


(3) Enter obtained registration key for version up, and click
Next button.
Account setting screen is displayed.
If input is wrong, alert message screen is displayed. So,
enter again.
If you click Next button, you return to language setting
screen.

Registration Key Setting screen

43

Uninstall
Uninstall Procedure
Procedure
Please execute uninstall with following procedure.
Name (Screen Name, Button, etc.), capture screen are based on CentOS.

(1) Desk top


Double click Uninstall_HDVC-MPCS.sh
icon.

(2) Click Run on Uninstall_HDVC-MPCS.sh


confirm execution screen.

(3) Click OK button on HDVC MPCS Uninstall


screen.

44

Uninstall(Continuance)
(4)

When uninstall is completed,


Start_HDVC-MPCS.sh and
Uninstall_HDVC-MPCS.sh icon on
desktop are deleted
Start_HDVC-MPCS.sh and
Uninstall_HDVC-MPCS.sh icons are
deleted, then HDVC-MPCS
(application)uninstall is completed.

Memo
When you dispose of PC or re-install OS
after uninstalled, following procedure is not
necessary.

(5) Insert USB for installing HDVC-MPCS to


the USB interface.
OS recognizes USB memory, and file
system icon is displayed on desktop.
Automatically a window is opened, files in
USB memory are displayed. (The display
position might not be center)

(6) Double click ethflwctrl_setup icon from


the window which display files in USB
memory.
Double click ethflwctrl_setup icon from
the window which files are displayed, and a
window which display files in
ethflwctrl_setup is newly opened.

45

Uninstall(Continuance)
(7) Double click ethflwctrl_restore.sh icon on
the window which display files in
ethflwctrl_setup.

(8) Click Run button from


ethflwctrl_restore.sh execution
confirmation screen.
Memo
ethflwctrl_restore.sh is executed, then
ethernet flow control setting returns to NIC
drivers default value.

Note
When you abolish or transfer PC after uninstalled, we recommend to delete data on desktop properly, along
with guide line to delete desktop data concerning PC disposal and transfer recommended by JEITA.
Memo
When uninstall is executed, HDVC-MPCS files are deleted but dependence package deletion or OS setting
changes are not executed..
In case of change httpd (httpd.conf) settings on procedure Appendix Example for httpd Setting
(Reference)(Page68), its returned to default value, refering Note on httpd Setting Procedure (3), to
execute httpdrestore.sh.

46

Notes
License Agreement
When HDVC-MPCS is set up, please ask an end user to confirm EULA/OSS and check Do not ask me again by the
end user.
Memo
License agreement is displayed when you login HDVC-MPCS Web console as follows
-> See Installation Setup Confirm Basic Function(Page 39)

Network Security
Please set up proper network security in accordance with HDVC-MPCS network environment and network policy.
Settings which are mentioned on Appendix Firewall setting procedure(Reference) and httpd setting example
(Reference), do not guarantee the network security.
You have to set network security not only as for HDVC-MPCS, but also as for router properly. In addition, we highly
recommend that you use firewall system and preventing unauthorized access system and so on, and HDVC-MPCS is
operated with these system. (We dont recommend to operate HDVC-MPCS connected to the internet directly.)

Date & Time Change


When you change OS(Linux) system date, please execute it after ending the HDVC-MPCS by Web console surely. If
system date is changed with activating the HDVC-MPCS, conference video/audio is in disorder or systems are
disconnected in conference are occurred. Moreover, there is a case that activation might be unstable after that.
Especially, please pay attention to back system date. Even when the system date is changed after ending
HDVC-MPCS, there is a case that it comes to an error by file system check, system (OS) doesnt activate
normally with rebooting OS. System date change should be executed by a person who has enough information about
OS (Linux).

47

Notes(Continuance)

Support for Ending


Ending the HDVCHDVC-MPCS
In HDVC-MPCS setup, if HDVC-MPCS cause following status, please surely explain following reboot procedures to
end users that system reboot is necessary.
Unable to connect to Web console (Enter correct URL but browser has connection error)
Operate with Web console, only HDVC-MPCS is ended by mistake.
HDVC-MPCS service is ended with a failure.
Memo
When HDVC-MPCS is ended (end with a failure is also same), following message is displayed on Web console.

Reboot System Procedure


Procedure
(1) Choose Shut Down from system on
the OS Menu.

48

Notes(Continuance)
(2) Click Restart on the Shut down this
system now? screen.

(3) If restart is completed, login screen is


displayed.
System reboot is completed.

49

Notes(Continuance)

Red Hat Enterprise


Enterprise Linux
Linux Upgrade Procedure
It is not recommended on standard setting procedure, but in case of upgrading from Red Hat Enterprise Linux Server
release 6.2 64bit in which installed MPCS V1.0, to Red Hat Enterprise Linux Server release 6.4 64bit, after version
up to MPCS V2.0, please upgrade to Red Hat Enterprise Linux Server release 6.4 64bit.
In case of version up to MPCS V2.0, after upgrading from Red Hat Enterprise Linux Server release 6.2 64bit, to
Red Hat Enterprise Linux Server release 6.4 64bit, please perform version up after executing the following
procedure.
(1) Double click sample icon.
Double click sample icon from file
display window, and new window that
display file in sample is opened.

(2) Double click RHEL6.4-versionup icon on


window displaying file in sample.

(3) Double click clean_ yum_cache.sh icon on


window displaying file in
RHEL6.4-versionup.

50

Notes(Continuance)
(4) Click Run from clean_yum_cache.sh execution
confirmation screen.
Memo
Execute succeeding operation in
accordance with standard version up
procedure.

(5)Confirmation screen is described as right section, and click OK


button.

51

Appendix
Network Setting Procedure
In case of set up network setting after installing Linux, Please execute with following procedure.
Procedure mentions network initial setting as precondition, but even when you change network setting with operation
reason, please follow this documents procedure to set up necessary items.

(1) Choose Administration and Services


from System on the OS Menu.
Note
Confirm whether LAN cable is connected
to the network interface for using
HDVC-MPCS before operation. (LAN cable
needs to connected to HUB)

(2) Choose NetworkManager from service


list on the Service Configuration screen,
and click Start button.

(3) Confirm NetworkManager state is This


service is running on the Service
Configuration screen.

52

Appendix(Continuance)
(4) Choose Preferences and Network
Connections from System on the OS
Menu.

(5) Choose network interface (For example


System eth0 described as right section)
for using HDVC-MPCS from Network
Connections, and click Edit... button.

(6) Check Connect automatically from


Editing System eth0 screen.
Note
In case of changing MTU size, the receiving
packet size might be limited up to MTU size
according to the Ethernet driver used in
Linux-PC.
So please do not change MTU size.
Please make sure to check (for) "Connect
Connect
automatically".
automatically
In case of the network interface which
HDVC-MPCS doesnt use, execute
settings according to network environment.
(We recommend to set up automatic)

53

Appendix(Continuance)
(7) Choose (Click) IPv4 Settings tab on
Editing System eth0 screen.

(8) Change method to manual on Editing


System eth0 screen, next click Add
button, and enter Address Netmask
Gateway, then click Apply button
according to the need after setting DNS
server.
Note
In case of using NAT Traversal Service, it
is necessary to enter gateway and to set
DNS server.

(9) Click Close button on Editing System


eth0 screen.
Memo
In case of using several NIC, repeat (5)
(8) operations, and add the settings.

54

Appendix(Continuance)
(10) Choose Shut Down from System on
the OS Menu.

(11) Click Restart button on Shut down this


system now? screen.

55

Appendix(Continuance)

SSH Setting Procedure


In case of set up SSH, please use following procedure for your reference.

(1) Choose Administration and Services


from System on the OS Menu.

(2) Choose sshd from service list on the


Service Configuration screen, and click
Enable button.
Memo
If you activate the service, service
automatically is activated after rebooting
OS.

(3) Choose sshd from service list on the


Service Configuration screen, and click
Start button.

56

Appendix(Continuance)
(4) Confirm that sshd state is This service
is running on the Service Configuration
screen.
Note
When SSH is unable to be used from
external system even activating sshd,
22/tcp port might be closed on firewall
setting.
->refer to Appendix Firewall Setting
Procedure (Reference)(Page58)

57

Appendix(Continuance)

Firewall Setting Procedure (Reference)


Reference)
In case of change firewall settings, please use following procedure for your reference.
Procedure mentions minimum necessary settings for activating HDVC-MPCS. When firewall is set up in accordance
with security policy, in addition execute after completing following settings.
(1) Choose Administration and Firewall
from System on the OS Menu.

(2) Confirm the contents on Firewall Configuration


Startup screen, and click Close button.

(3) Choose Trusted Services on Firewall


Configuration screen, and check the www
(HTTP).
Memo
In case of using SSH, check SSH, too.

58

Appendix(Continuance)
(4) Choose Other Ports on Firewall
Configuration screen, and click Add button.

(5) Choose Port: 5060 Protocol : tcp Service: sip from


list on Port and Protocol screen, and click OK.

59

Appendix(Continuance)
(6) Confirm whether 5060 tcp sip setting is
added on Firewall Configuration screen, and
choose Other Ports, then click Add.

(7) Choose Port: 5060 Protocol: udp Service: sip

from list on Port and Protocol screen, and click OK.

60

Appendix(Continuance)
(8) Confirm whether 5060 udp sip setting is
added from Firewall Configuration screen,
then choose Other Ports, and click Add
button.

(9) Check User Defined on Port and Protocol screen,


then enter 5100-5198 on Port/Port Range, and
click OK after choosing udp for Protocol.

61

Appendix(Continuance)
(10) confirm whether 51005198 udp setting is
added on Firewall Configuration screen,
and click Add button.

(11) Check User Defined on Port and Protocol


screen, then enter 5200-5298 on Port/Port
Range, and click OK after choosing udp for
Protocol

62

Appendix(Continuance)
(12) Confirm whether 5200-5298 udp setting is
added on Firewall Configuration screen, and
click Add button.

(13) Click Yes button on system-config-firewall


screen.

(14) Choose Quit button from File on


Firewall Configuration screen Menu.

Memo
In case of set up advanced firewall, please edit /etc/sysconfig/iptables directly. However, directly edited
iptables are unable to be read or be edited from GUI (Firewall setting tool)
->Confirm Firewall Configuration Startup which is displayed on procedure (2).

63

Appendix(Continuance)
After completing firewall settings, /etc/sysconfig/iptables is updated as follows.

# Firewall configuration written by system-config-firewall


# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 5060 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5060 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5100:5198 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5200:5298 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

iptables.

Memo
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT is the setting to permit destination
port number 80 TCP packet, and its necessary description for using .
-A INPUT -m state --state NEW -m -p --dport 5060 -j ACCEPT is the setting to permit
destination port number 5060 TCP packet, and its necessary description for using SIP.
-A INPUT -m state --state NEW -m udp -p udp --dport5060 -j ACCEPT is the setting to permit
destination port number 5060 UDP packet, its necessary description for using SIP.
-A INPUT -m state --state NEW -m udp -p udp --dport 5200:5298 -j ACCEPT is the setting to permit
destination port number from 5200 to 5298 UDP packet, its necessary description for HDVC-MPCS to
receive RTP audio packet.
-A INPUT -m state --state NEW -m udp -p udp --dport 5200:5298 -j ACCEPT is the setting to permit
destination port number from 5200 to 5298 UDP packet, its necessary description for HDVC-MPCS to
receive RTP video packet.
Commented out -A INPUT -j REJECT --reject-with icmp-host-prohibited in installing the HDVC-MPCS
comes to available.
In case of checking SSH on procedure (3), -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j
ACCEPT is added.

64

Appendix(Continuance)

Example for httpd Setting (Reference)


Reference)
The following mentions example for httpd setting (httpd.confhdvc-mpcs.conf). By setting up following setting, it
enables to increase the security strength. Please refer for setting up httpd network security.

Change Parts for httpd.conf


In the setting example, following setting is changed from /etc/httpd/conf/httpd.conf as a default.
(1) To hide OS information and Apache version information, change ServerTokens OS as a default to
ServerTokens ProductOnly.

## PSN Modified "OS" -> "Pro ductOnly"


ServerToke ns Pro ductOnly

(2) Add TraceEnable Off, so as not to be able to use TRACE method.


## PSN A dded : TRACE method is disabled
TraceEnable Off

(3) Add <IfModule mod_rewrite.c>


RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^OPTIONS
RewriteRule .* - [F]
</IfModule>
, so as not be able to use OPTIONS method.
## PSN A dded : OPTIONS method is disab led
<IfModule mo d_rewrite.c>
RewriteE ngi ne o n
RewriteCond % {REQUE ST_METHOD} ^OPTIONS
RewriteRule .* - [F]
</IfModule>

(4) To hide default route, delete DocumentRoot "/var/www/html".


## PSN Modified :Delete
#Do cumentRo ot "/var/www/html"

(5) To hide file list under specified folder, changeOptions Indexes FollowSymLinks as default to Options
Indexes.
## PSN Modified "Inde x FolloSymLinks" -> "-Indexes"
Optio ns -Indexes

65

Appendix(Continuance)
(6) To limit GET, POST, OPTIONS as available method, add as follows.
<Directory />
AllowOverride FileInfo AuthConfig Limit
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>
## PSN added using method Limitation.
<Directory />
AllowOverride FileInfo AuthConfig Limit
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExc ept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
</IfModule>

(7) For restrain footer in outputting error message, change ServerSignature On as default to ServerSignature Off.
## PSN Modified "O n" -> "Off"
ServerSig nature Off

(8) To permit URL encoded /(Slash), add AllowEncodedSlashes On.


## PSN A dded E ncodeSlashes
AllowE ncodedSlashes On

(9) To hide "/var/www/icons/" folder, delete Alias /icons/ "/var/www/icons/".


## PSN Modified : Delete
#Ali as /icons/ "/var/www/icons/"

(10) To hide "/var/www/icgi-bin/" folder, delete Alias /cgi-bin/ "/var/www/cgi-bin/" .


## PSN Modified : Delete
#ScriptAlias /cgi-bin/ "/var /www/cgi-bin/"

(11) To hide "/var/www/error/" folder, delete Alias /error/ "/var/www/error/" .


## PSN Modified : Delete
#Ali as /error/ "/var/www/error/"

66

Appendix(Continuance)

Change Parts for hdvchdvc-mpcs.conf


In setting example, following setting is changed from /etc/httpd/conf.d/hdvc-mpcs.conf just after installing
HDVC-MPCS.
Alias /hdvc_mp cs /usr/loca l/hdvc-mpcs/www/webroot
<Directory "/usr/loca l/hdvc-mpcs/www/webroot">
DirectoryInde x Inst_La nguage.cgi LicenseAgreeme nt.cgi Co nf_Main.cgi Mainte_NetworkState.cgi S et_DefaultSe tting.cgi Lo gi n.cgi ind ex.cgi
index.html
Optio ns -Indexes Follo wSymLinks
Optio ns +E xecCGI
AddType a pp lication/x-httpd-cgi .cgi
Allo wOver ride None
<Files ~ "^.+$">
Order Deny,Allo w
Deny from all
</Files>
<Files ~ "^.*.(cgi|css|js|png|html|gif|bmp) $">
SetE nvIf Referer "^http://.*/hdvc_mpcs/" r ef
Order Deny,Allo w
Deny from all
Allow fro m env=ref
</Files>
<Files ~ "^.*(i ndex.cgi|Login.cgi|Login_emer ge ncy.cgi|Inst_Langua ge.cgi)$">
Order A llo w,Deny
Allow fro m all
</Files>
</Directo ry>
<Directory "/usr/loca l/hdvc-mpcs/www/webroot/system">
AuthType Digest
AuthName "Di gest A uth"
AuthUserFile "/usr/local/hdvc-mpcs/www/pass/htdigest"
Require va lid- user
</Directo ry>
<Directory "/usr/loca l/hdvc-mpcs/www/webroot/e xtif">
AuthType Digest
AuthName "Di gest A uth"
AuthUserFile "/usr/local/hdvc-mpcs/www/pass/htdigest_ extif"
Require va lid- user
</Directo ry>
<Directory "/usr/loca l/hdvc-mpcs/www/webroot/admin">
AuthType Digest
AuthName "Di gest A uth"
AuthUserFile "/usr/local/hdvc-mpcs/www/pass/htdigest_ admin"
Require va lid- user
</Directo ry>

hdvchdvc-m
pcs.conf

67

Appendix(Continuance)
Note
Changed setting enable to check referer, access is permitted only when (http://XXXXXX/hdvc_mpcs/XXXXX)
keyword is existed on referrer. Moreover, As for Iogin, Login_emergency, or Inst_Language, as top page, referer
is not checked.
When this setting comes to be available, external interface control also need referer. In case of using external
interface, add referrer which is edited spuriously to required command.
As for Windows Internet Explorer 8.0 and Windows Internet Explorer 9.0 help screen of Web console is
not displayed.

httpd Setting Procedure


In case of changing /etc/httpd/conf/httpd.conf and /etc/httpd/conf.d/hdvc-mpcs.conf, please use following
procedure for your reference. Moreover, if necessary, add settings in accordance with setting environment security
policy.
(1) Insert USB memory for install
HDVC-MPCS to USB interface.
Insert prepared USB memory in advance
for installing HDVC-MPCS to USB
interface.
When OS recognizes USB memory, file
system icon is displayed on the desktop.
Automatically a window is opened, file in
USB memory are displayed. (Display
position might not be center)

(2) Double click httpdsetup icon on a window


which display files in USB memory.
Double click httpdsetup icon on a
window on which files are displayed, then a
window which display files in httpdsetup
is opened.

68

Appendix(Continuance)
(3) Double click httpdsetup.sh icon on a
window which display files in httpdsetup.
Note
Double click httpdrestore.sh icon, in case
that you
return /etc/httpd/conf/httpd.conf
setting to the previous setting.

(4) Click Run on httpdsetup.sh execution


confirmation screen.
By clicking Execute button from
httpdsetup.sh execution confirmation
screen, httpd.conf setting is completed.
After that, add setting if necessary.

(5) Double click referercheck_setup.sh icon


on a window which display files in
httpdsetup.
Note
Double click referercheck_restore.sh
icon, in case that you return
/etc/httpd/conf.d/hdvc-mpcs.conf
setting to the previous setting.

(6) Click Run button on


referercheck_setup.sh execution
confirmation screen.
By clicking Run button on
referercheck_setup.sh execution
confirmation screen, then
hdvc-mpcs.conf setting is completed.

69

Appendix(Continuance)

Network Interface Name Confirmation Procedure


(1) Choose System Tools and Terminal
from Applications on the OS Menu.

(2) Press return key after entering ifconfig


ifconfig
a from system screen (console)
command line, and confirm network
interface name used for HDVC-MPCS.
Press return key after entering ifconfig
ifconfig
a from command line, and network
interface list is displayed. Confirm network
interface name set up IP address for using
HDVC-MPCS. For example described as
right section, You can confirm that IP
address (192.168.1.10
192.168.1.10)
192.168.1.10 for using
HDVC-MPCS is set to eth0
eth0.
eth0
Memo
IP address used for HDVC-MPCS is the IP
address set up on install procedure (10) of
the Set-up manual Linux Installation.

70

Appendix(Continuance)

NAT Traversal Service / IP Mode Mixed Settings


In HDVC-MPCS V2.0, by using different network I/F, mixed operation such as NAT Traversal Service and IP
mode are supported. This setting should be executed by a person who understand HDVC-MPCS setting
network environment, and has knowledge about network infrastructure and Linux. Setting should be executed
after understanding the following important condition.

Note
Each network I/F is necessary for both NAT Traversal Service and IP mode. Mixtured with NAT
Traversal Service / NAT Traversal Service, IP mode / IP mode are impossible.
Set default gateway to network I/F on NAT Traversal Service side.
Execute DNS server setting absolutely.
As for IP address (38pages) used for HDVC-MPCS, set IP address that is set for IP mode network I/F.
Memo
Concerning routing table on IP mode side, add routing setting, if necessary.

71

Appendix(Continuance)

To Shorten System Restoration Time In Resetting Router.


(Reference)
In case that router connected to HDVC-MPCS is reset, it takes about 2030 minutes (depending on network
environment) to restore (conference available) after router start to be operated.
To shorten restoration time, it is necessary to reduce retrial frequency before detecting TCP session disconnected.
If you reduce retrial frequency, refer to the following procedure.

Change parts for .conf


.conf
In setting example, add the following setting to /etc/sysctl.conf as default.
(1) Set retrial frequency, before detecting TCP session disconnected, to net.ipv4.tcp retries2=8(default
15).
# How many times to retry killing an alive TCP connection
net.ipv4.tcp_retries2 = 8

Note
This setting should be executed by a person who understand Linux well.
In reference example, retrial frequency is set to 8. But, actual retrial depend on network environment. So, 8
retrial is not executed absolutely.

.conf
.conf setting procedure
In case of setting /etc/sysctl.conf, execute setting in accordance with the following example.
(1) Double click sample icon.
Double click sample icon on window
displaying file, and new window displaying file
in sample is opened.

72

Appendix(Continuance)
(2) Double click sysctl setup on window displaying file in
sample.

(3) Double click sysctl setup.sh icon on window displaying


file in sysctl setup.

(4) Click Run on sysctl seup.sh execution


confirmation screen.

(5) As confirmation screen described as right section is displayed, click


OK and restart system

Note
If you set back /etc/sysctl.conf setting to
previous one, please double click sysctl
restore.sh icon.

73

Panasonic System Networks Co., Ltd. 2013

You might also like