wiki.IPBRICK.COM - User contributions [en]

UCoIP DNS/firewall configuration

2018-12-04T16:46:06Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It's mandatory ensure that IPBrick can access the local addresses, so coud be necessary configure the DNS hosts.

If IPBrick public interface '''is behind a NAT''' and:

''- IPBrick have 2 network interfaces (ETH0 and ETH1) configured with private IPs''

''- The communication between IPBrick and the router is done by ETH1

''- Public IP is on the router

''- Public DNS zone configured in IPBrick and all registers are resolved to public IP''

''- IPBrick resolves local addresses in your local DNS (public zone)''

Then, requests made from IPBRICK to any of their addresses are always going to be routed to the public IP.

As these orders leave and re-enter, they are blocked, so you need configure the IPBrick DNS hosts to '''resolve the local addresses to the internal IP'''.

On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-12T16:05:55Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It's mandatory ensure that IPBrick can access the local addresses, so coud be necessary configure the DNS hosts.

If IPBrick public interface '''is behind a NAT''' and:

''- IPBrick have 2 network interfaces (ETH0 and ETH1) configured with private IPs''

''- The communication between IPBrick and the router is done by ETH1

''- Public IP is on the router

''- Public DNS zone configured in IPBrick and all registers are resolved to public IP''

''- IPBrick resolves local addresses in your local DNS (public zone)''

Then, orders made from IPBRICK to any of their addresses are always going to be routed to the public IP.

As these orders leave and re-enter, they are blocked, so you need configure the IPBrick DNS hosts to '''resolve the local addresses to the internal IP'''.

On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-12T16:02:25Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It's mandatory ensure that IPBrick can access the local addresses, so coud be necessary configure the DNS hosts.

If IPBrick public interface '''is behind a NAT''' and:

''- IPBrick have 2 network interfaces (ETH0 and ETH1) configured with private IPs''

''- The communication between IPBrick and the router is done by ETH1

''- Public IP is on the router

''- Public DNS zone configured in IPBrick and all registers are resolved to public IP''

''- IPBrick resolves local addresses in your local DNS (public zone)''

Then, orders made from IPBRICK to any of their addresses are always going to be routed to the public IP. As these orders come out and re-enter, they are blocked, so you need configure the DNS hosts to '''resolve the local addresses to the internal IP'''.

On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-12T16:01:52Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It's mandatory ensure that IPBrick can access the local addresses, so coud be necessary configure the DNS hosts.

If IPBrick public interface '''is behind a NAT''' and:

''- IPBrick have 2 network interfaces (ETH0 and ETH1) configured with private IPs''

''- The communication between IPBrick and the router is done by eth1

''- Public IP is on the router

''- Public DNS zone configured in IPBrick and all registers are resolved to public IP''

''- IPBrick resolves local addresses in your local DNS (public zone)''

Then, orders made from IPBRICK to any of their addresses are always going to be routed to the public IP. As these orders come out and re-enter, they are blocked, so you need configure the DNS hosts to '''resolve the local addresses to the internal IP'''.

On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-12T16:01:11Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It's mandatory ensure that IPBrick can access the local addresses, so coud be necessary configure the DNS hosts.

If IPBrick public interface '''is behind a NAT''':

''- IPBrick have 2 network interfaces (ETH0 and ETH1) configured with private IPs''

''- The communication between IPBrick and the router is done by eth1

''- Public IP is on the router

''- Public DNS zone configured in IPBrick and all registers are resolved to public IP''

''- IPBrick resolves local addresses in your local DNS (public zone)''

Then, orders made from IPBRICK to any of their addresses are always going to be routed to the public IP. As these orders come out and re-enter, they are blocked, so you need configure the DNS hosts to '''resolve the local addresses to the internal IP'''.

On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-12T10:26:56Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It is also necessary ensure that IPBrick can access the local addresses, so if:

''- IPBrick public interface '''is behind a NAT''' and eth1 it's a private IP''

''- IPBrick resolves local addresses to public IP''

''- IPBrick requests for local addresses are being blocked''

you need configure the DNS hosts to '''resolve the local addresses to the internal IP'''.

On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-09T18:19:25Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is behind a NAT at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It is also necessary ensure that IPBrick can access the local addresses, so if IPBrick public interface '''is behind a NAT''' and eth1 it's a private IP, it's necessary configure the DNS hosts to resolve the local addresses to the internal IP.

On IPBrick interface ("DNS -> Name Resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-09T17:32:28Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is '''behind a NAT''' at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It is also necessary ensure that IPBrick can access the local addresses. This can be done by configuring the DNS hosts to resolve the local addresses to the internal IP.

On IPBrick interface ("DNS -> Name Resolution") add the following entries:
<pre>
- cafe.<domain> -> Internal IP
- contacts.<domain> -> Internal IP
- groupware.<domain> -> Internal IP
- im.<domain> -> Internal IP
- iportaldoc.<domain> -> Internal IP
- ucoip.<domain> -> Internal IP
- voip.<domain> -> Internal IP
- webrtc.<domain> -> Internal IP
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP DNS/firewall configuration

2018-11-09T17:24:08Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working at LAN/Internet it's necessary to configure some DNS records at internal and external DNS servers of the company domain.

Next is given an example for the public DNS zone configuration. In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: srv001.domain.com
Public IP associated to IPBrick: 85.86.87.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
srv001.domain.com. IN A 85.86.87.88
voip.domain.com. IN A 85.86.87.88
webrtc.domain.com. IN A 85.86.87.88
cafe.domain.com. IN A 85.86.87.88
ucoip.domain.com. IN A 85.86.87.88
im.domain.com. IN A 85.86.87.88
iportaldoc.domain.com. IN A 85.86.87.88
</pre>

CNAME records:

<pre>
contacts.domain.com. IN CNAME srv001.domain.com.
jwchat.domain.com. IN CNAME srv001.domain.com.
light.domain.com. IN CNAME srv001.domain.com.
webphone.domain.com. IN CNAME srv001.domain.com.
groupware.domain.com. IN CNAME srv001.domain.com.
webmail.domain.com. IN CNAME srv001.domain.com.
webrtcproxy.domain.com. IN CNAME srv001.domain.com.
autoconfig.domain.com. IN CNAME srv001.domain.com.
autodiscover.domain.com. IN CNAME srv001.domain.com.
*.domain.com. IN CNAME ucoip.domain.com.
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-server._tcp.domain.com. IN SRV 5 0 5269 im.domain.com.
_xmpp-client._tcp.domain.com. IN SRV 5 0 5222 im.domain.com.
</pre>

SRV record for UCoIP:

<pre>
_ucoip._tcp.domain.com. IN SRV 1 0 80 ucoip.domain.com.
</pre>

SRV record for CAFE:

<pre>
_cafe._tcp.domain.com. IN SRV 1 0 443 cafe.domain.com.
</pre>

SRV record for WebRTC:

<pre>
_webrtc._tcp.domain.com. IN SRV 1 0 8888 webrtc.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com. IN MX 5 srv001.domain.com.
</pre>

SPF - Sender Policy Framework
<pre>
domain.com IN TXT "v=spf1 mx ip4:85.86.87.88 -all"
</pre>

Costumer ISP must add this PTR record at reverse DNS zone:
<pre>
88.87.86.85.in-addr.arpa. IN PTR srv001.domain.com.
</pre>

=Firewall/Router configuration=

UCoIP concept uses many services running on their standard ports. IPBrick firewall is prepared to accept all this traffic at public interface (eth1).

But if IPBrick public interface is '''behind a NAT''' at Router/Firewall, its necessary to forward the necessary traffic to IPBrick. The list is:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP-client - 5222 TCP
XMPP-server - 5269 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

It is also necessary to ensure that IPBrick resolves the local addresses for the internal IP. To do that configure "DNS -> Name Resolution" with the following entries:
<pre>
- cafe.<domain> -> <Internal IP>
- contacts.<domain> -> <Internal IP>
- groupware.<domain> -> <Internal IP>
- im.<domain> -> <Internal IP>
- iportaldoc.<domain> -> <Internal IP>
- ucoip.<domain> -> <Internal IP>
- voip.<domain> -> <Internal IP>
- webrtc.<domain> -> <Internal IP>
</pre>

NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:

[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]

[https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

UCoIP

2017-05-26T11:58:41Z

Ipbwikiadmin:

* [[UCoIP_DNS/firewall_configuration| How to configure DNS and the Firewall to make UCOIP available to Internet]]

UCoIP

2017-05-26T11:57:19Z

Ipbwikiadmin: Created page with "* How to configure DNS and firewall for make UCOIP available to Internet"

* [[UCoIP_DNS/firewall_configuration| How to configure DNS and firewall for make UCOIP available to Internet]]

IPBrick Disk migration

2016-08-09T14:55:15Z

Ipbwikiadmin: /* Procedure */

This guide is to assist the IT IPBRICK administrator in the process of migrating a running IPBRICK installation from:
* scenario 1 : one server machine - one disk to another disk on the same server machine
* scenario 2 : two server machine - one disk to another disk on a different server machine

'''ATTENTION: This is an advanced procedure. The tasks described bellow are to be performed by an IT technician familiar with IPBRICK.IC operating system architecture and linux command line interface. This guide refers to the IPBRICK installation manual and the disaster recovery procedure. Before starting please make sure that you have an up to date backup of all data files, databases and configurations. Proceed at your own risk.'''

=On the original server machine=
On the original installation, apply configurations and download/save a backup copy configurations file to your Desktop. (Advanced Configurations -> Disaster Recovery -> Download : select the last one with the current timestamp).

Just stop the the services you use.
<pre>
/etc/init.d/systemmonitor stop
/etc/init.d/asterisk stop
/etc/init.d/apache2 stop
/etc/init.d/ejabberd stop
/etc/init.d/qmail stop
...
</pre>

Execute this command to backup all the databases.
* IPBRICK.OS version 6.x or above
<pre>php5 /opt/system/backupSYS/backup_DBs.php </pre>
* IPBRICK.IC versions: 5.3, 5.4 or 5.5
<pre>php5 /opt/ipbox/backupSYS/backup_DBs.php </pre>

== IPortalDoc ==
If you have IPortalDoc installed, you must backup this database separatelly.
* IPBRICK.OS version 6.x or above - use '''ipbrickdb_ipb6'''
<pre>
ipbrick2:~# mkdir /home2/_backup_db_dbdoc
ipbrick2:~# cd /home2/_backup_db_dbdoc
ipbrick2:/home2/_backup_db_dbdoc# wget http://downloads3.ipbrick.com/wiki/ipbrickdb_ipb6
ipbrick2:/home2/_backup_db_dbdoc# php5 ipbrickdb_ipb6 --dump --dbname dbdoc --file dbdoc_20160512_1700.sql

STARTING DUMP OF DATABASE dbdoc TO FILE dbdoc_20160512_1717.sql

ipbrick2:/home2/_backup_db_dbdoc# ls -al dbdoc_20160512_1700.sql
-rw-r--r-- 1 root root 570695550 May 12 17:20 dbdoc_20160512_1700.sql
ipbrick2:/home2/_backup_db_dbdoc#
</pre>
* IPBRICK.IC version 5.x - use '''ipbrickdb_ipb5'''
<pre>
ipbrick2:~# mkdir /home2/_backup_db_dbdoc
ipbrick2:~# cd /home2/_backup_db_dbdoc
ipbrick2:/home2/_backup_db_dbdoc# wget http://downloads3.ipbrick.com/wiki/ipbrickdb_ipb5
ipbrick2:/home2/_backup_db_dbdoc# php5 ipbrickdb_ipb5 --dump --dbname dbdoc --file dbdoc_20160512_1700.sql

STARTING DUMP OF DATABASE dbdoc TO FILE dbdoc_20160512_1717.sql

ipbrick2:/home2/_backup_db_dbdoc# ls -al dbdoc_20160512_1700.sql
-rw-r--r-- 1 root root 570695550 May 12 17:20 dbdoc_20160512_1700.sql
ipbrick2:/home2/_backup_db_dbdoc#
</pre>

=Scenario 1 - only one server machine=
Procedure:
* shutdown the server machine
* remove/detach the original (old) disk from the server
* install/attach the replacement (new) disk
* install the IPBRICK.IC operating system (please refer to IPBRICK.IC installation manual)
** perform the first boot, proceed with initial setup (FQDN, IP)
** after finishing installation and initial configuration proceed to the next step
* with the server power on, connect the old (original) disk using a USB connector
** now at the command line you can check for the disks
<pre>
fdisk -l
</pre>
* confirm that you have 2 (two) disks: sda (new internal disk) and sdb (old disk connected via usb)
** you shoudl be able to identify the partition tables
* create two temporary folders to map/mount the work areas from the old disk
<pre>
mkdir /old_home1
mkdir /old_home2
ls /old_home* -al
</pre>
* Then we need to mount the partitions we need to copy.
<pre>
mount /dev/sdb7 /old_home1
mount /dev/sdb8 /old_home2
</pre>
* Now lets start the rsync
<pre>
rsync -aAuv /old_home1/ /home1/ > /tmp/rsync_home1.log 2> /tmp/rsync_home1.err &
rsync -aAuv /old_home2/ /home2/ > /tmp/rsync_home2.log 2> /tmp/rsync_home2.err &
</pre>
* You can see the logs in these files (log is normal output, err is for status warning)
<pre>
tail /tmp/rsync_home1.log
tail /tmp/rsync_home1.err
tail /tmp/rsync_home2.log
tail /tmp/rsync_home2.err
</pre>
* When the rsync process finishes, you can unmap/unmount the old disk
<pre>
umount /old_home1
umount /old_home2
</pre>
* after successfull unmount you can disconnect the old disk (usb)
** NOTE: we recommend you to keep the old disk safe until this procedure is completly finished (backup procedure)
* Now please access to web interface, insert and replace the configurations file that you have previously saved on your desktop
** Please refer to the installation manual and/or disaster recover procedure in order to perform settings replacement
** The server machine performs a reboot
* After the server boot up, go to IPBRICK web interface, Advanced configurations -> Disaster Recovery -> Aplications -> Databases : for each database, click on the database name, then you get a listing of all the available backups, click on the last timestamp (click on the timestamp, not on the download link), and click on Restore to proceed to restore.
* When this Finnish test the services you have on IPBrick
* For the last step you need to re-activate your license - Advanced configurations -> IPBrick -> Web Access : License activation (please refer to the installation manual, license activation)

=Scenario 2 - two server machine=

== Second server installation ==
Install the IPBrick on the new machine (refer to IPBRICK.IC installation manual)
** NOTE: you must install exactly the same software version, this means that you must use the same IPBRICK.OS version and the exact same list of IPBRICK packages and/or updates

'''NOTE - Licence Activation''' - during this procedure you will need to reactivate your product, please send file.dat to email address support@ipbrick.com requesting licence activation - to (re)activate a licence you are required to have a valid maintenance/software assurance contract.

== Procedure ==
EX: IPBrick1 New (192.168.69.199) and IPBrick2 OLD (192.168.69.200)

On machine IPBrick1 generate ssh key:
<pre>
ipbrick1:~# cd /root
ipbrick1:~# ssh-keygen -t rsa
#assume default location /root/.ssh/id_rsa
#enter empty passphrase
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
3d:90:bf:f3:95:b3:96:6f:9d:90:95:98:69:fd:fb:0b root@ipbrick1
The key's randomart image is:
+--[ RSA 2048]----+
| |
| . |
| o = .|
| + = + |
| S + . o .|
| o o ..|
| o E=.+|
| o .+=o|
| ...+=|
+-----------------+
ipbrick1:~#
</pre>

Copy contents of public key from IPBrick1 to IPBrick2.
<pre>
ipbrick1:~# cat /root/.ssh/id_rsa.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRRerZEo0cyzCP3JxTabRAG8uPe4DVnAuduIUUayn+r64mrpy1RFcu1qQLGiKFyOgxCg3m+pC
tg79yxvWfrx/XR/SIXh1uuLSmG/SOnFmn5WQJLXSCNBYGp/2BOQ1e4p6J2GFzmJF5/QnUXWCbLyIG/j7+klidLhktv/8+gHJClehMm6H31KynRe
aiuSyNiPFoG9+q5EmF+7Ibjqk5ZG6XeGodgINpfnNNFNLTmG+RyCK0vttGwVyKbnz2s3ypAbHpjQcNm7vG9iq73KjPaH1Y2r/09XoV3Bw15/0ZP
VkkvlNHSwBpnsHrCAL8KT3m7qgDy2WT3cuArXRpm/PGTMXH root@ipbrick1
ipbrick1:~#
</pre>
Select and copy the output/contents of file id_rsa.pub from IPBrick1 as example above, install it on IPBrick2. Example:
<pre>
ipbrick2:~# mkdir -p /home1/_ssh/root/.ssh
ipbrick2:~# echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRRerZEo0cyzCP3JxTabRAG8uPe4DVnAuduIUUayn+r64mrpy1RFcu1qQLGiKFyOgxCg3m+pC
tg79yxvWfrx/XR/SIXh1uuLSmG/SOnFmn5WQJLXSCNBYGp/2BOQ1e4p6J2GFzmJF5/QnUXWCbLyIG/j7+klidLhktv/8+gHJClehMm6H31KynRe
aiuSyNiPFoG9+q5EmF+7Ibjqk5ZG6XeGodgINpfnNNFNLTmG+RyCK0vttGwVyKbnz2s3ypAbHpjQcNm7vG9iq73KjPaH1Y2r/09XoV3Bw15/0ZP
VkkvlNHSwBpnsHrCAL8KT3m7qgDy2WT3cuArXRpm/PGTMXH root@ipbrick1" >> /home1/_ssh/root/.ssh/authorized_keys
ipbrick2:~#
</pre>

Now for the first root ssh access from ipbrick1 to ipbrick2 using the ssh key.
<pre>
ipbrick1:~# ssh -i /root/.ssh/id_rsa root@192.168.69.200
The authenticity of host '192' can't be established.
RSA key fingerprint is 2d:b9:97:b6:c0:e9:1e:b7:c4:51:01:ab:e9:21:12:51.
Are you sure you want to continue connecting (yes/no)? ^C
ipbrick1:~# ssh -i /root/.ssh/id_rsa root@localhost
The authenticity of host '192.168.69.200 (192.168.69.200)' can't be established.
RSA key fingerprint is 2d:b9:97:b6:c0:e9:1e:b7:c4:51:01:ab:e9:21:12:51.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.69.200' (RSA) to the list of known hosts.

++++++++++++++++++++++++++++++: System Info :+++++++++++++++++++++++++++++++++
+ FQDN = ipbrick2.domain.com
+ IP address = 192.168.69.200
+ Kernel = 3.2.0-4-amd64
+ Uptime = 10:05:02 up 458 days, 32 min, 10 users, load average: 3.04, 2.51, 2.20
+ Total CPUs = 4 x Architecture x86_64 @ 2399.734 Hz
+ Total Memory = 16470664 kB
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

ipbrick2:~# logout
Connection to 192.168.69.200 closed.
ipbrick1:~#
</pre>

Now you can access as root from ipbrick1 (NEW, 192.168.69.199) to ipbrick2 (OLD, 192.168.69.200).

Now lets start the rsync on IPBrick1.

<pre>
ipbrick1:~# rsync -avu --delete --rsh="ssh -l root -i /root/.ssh/id_rsa " 192.168.69.200:/home1/ /home1/ > rh1.log 2> rh1.err
ipbrick1:~# rsync -avu --delete --rsh="ssh -l root -i /root/.ssh/id_rsa " 192.168.69.200:/home2/ /home2/ > rh2.log 2> rh2.err
</pre>

You can see the logs in this file -> rsync_home1.log
Or the errors in this file -> rsync_home1.err

Wen the rsync is finish access to web interface and then insert and replace the configuration that you save on your desktop.

After replacing, go to Advanced configuration -> disaster recovery -> aplication -> databases -> and replace the last one.

== IPortalDoc ==
If you have IPortalDoc installed, you must now restore the database backup separatelly. This procedure is now executed in the new server (NOTE that after replacing configurations this server is now called ipbrick2, just like the original server.)
* IPBRICK.OS version 6.x or above - use '''ipbrickdb_ipb6'''
<pre>
ipbrick2:~# cd /home2/_backup_db_dbdoc
ipbrick2:/home2/_backup_db_dbdoc# php5 ipbrickdb_ipb6 --restore --dbname dbdoc --file /home2/_backup_db_dbdoc/dbdoc_20160512_1700.sql
ipbrick2:/home2/_backup_db_dbdoc#
</pre>
* IPBRICK.IC version 5.3, 5.4 or 5.5 - use '''ipbrickdb_ipb5'''
<pre>
ipbrick2:~# cd /home2/_backup_db_dbdoc
ipbrick2:/home2/_backup_db_dbdoc# php5 ipbrickdb_ipb5 --restore --dbname dbdoc --file /home2/_backup_db_dbdoc/dbdoc_20160512_1700.sql
ipbrick2:/home2/_backup_db_dbdoc#
</pre>

Go to IPortalDoc Web interface, login with an administrator account,
* rebuild iPortalDoc workflow accounts:
** a) Definitions Menu -> Configuration Interface
** b) Poplist on the right (Menu) -> Workflows
** c) Click on the Rebuild button
* rebuild share "Access" and the account of Associated Emails to Documents, of iPortalDoc:
** a) Access Share: Definitions -> Configuration Interface-> Build Global FS
** b) Emails associated to documents: Definitions -> Configuration Interface -> Build Global mailFS
*** (This task is scheduled to be executed at midnight);

Go to IPContacts application, login with an administrator account
* rebuild entities and contacts
** a) Administration -> Rebuild Contacts

= Finish =
Now it is time to test and check all services.

UCoIP DNS/firewall configuration

2016-06-08T12:02:35Z

Ipbwikiadmin: /* Firewall/Router configuration */

Click2call Windows

2016-04-20T12:40:58Z

Ipbwikiadmin: /* Installing the TAPI Client */

== Description ==
Module for the usage of Click2Call on Windows.

Pages:

* TTTelecom [http://www.tttelecom.nl]

* Taridium [http://wiki.taridium.com/Click_to_Call]

== Necessary configurations ==

=== IPBrick Configurations ===

* Go to IPBrick's Web Interface:
** Advanced Configurations » Telephony » Configurations » IP PBX remote managers » Enable.
* Configure IP PBX remote managers:
** Define the authorized networks and determine a login and password;
** After creating the remote manager, edit its ''Access permissions'', by selecting the checkbox ''originate - Ability to originate''.

[[File:Click2call1.png| center|1250px]]

[[File:Click2call2.png| center|1250px]]

=== Windows Configurations for Outlook, using the modem feature ===

==== Installing the TAPI Clien ====

Download ActivaTSP [http://sourceforge.net/projects/activa/files/].

Open the Zip file and install "SetupActiva.exe" in the folder ''Activa''. This configuration will ask for details of the server.

==== ActivaTSP Configuration ====

* '''Line DN:''' The extension that will be used (E.g.: For the extension 305, enter SIP/305.)
* '''Line Prefix:''' AST (default)
* '''Caller ID Name:''' Empty

===== Asterisk Connection =====

* '''Host IP:''' 192.168.19.5 (IPBrick's IP)
* '''Port:''' 5038
* '''User:''' adm
* '''Password:''' <Password>

===== Context =====

* '''Outgoing:''' local_processing
* '''Agent:''' local_processing

[[Image:Click2call3.png]]

Click ''OK'' to save configurations. It may be necessary to reboot the PC.

We can always access to this menu on Control Panel » Telephones and modems.

==== Test the functioning ====

On the contacts of the list view, right-click and make the call.

[[Image:Click2call4.png]]

Now click on '''Start Call'''.

[[Image:Click2call5.png]]

It may be necessary to configure the calling line; to do so, go to the menu '''Dialing Properties...'''.

[[Image:Click2call6.png]]

=== Windows configurations, using ADAT===

* Link to download ADAT: [http://dl.tttelecom.nl/index.php/en/component/docman/doc_download/6-adat-r2-0713];

* Execute the program and proceed to its installation;

* After installing, go to the configuration menu and perform the following configurations (see images).

[[Image:Click2call7.png]]

[[Image:Click2call8.png]]

This configuration allows us to select the number, in any application, and click on '''Alt + c''' to make the call.

=== Browser support - Google Chrome ===

We can use Google Chrome's extension: [https://chrome.google.com/webstore/detail/asterisk-click2call/hlnmjkbpmnbgeondjeceaomhafdacmlj].

We create a site with the following information (for example, calls.domain.com):

cat /home1/_sites/calls/site/call.php
<pre>
<?if (!empty( $_REQUEST['phone']) && !empty( $_REQUEST['exten'] ) )
{
$num = $_REQUEST['phone'];
$ext = $_REQUEST['exten'];
$num = preg_replace( "/^\+7/", "8", $num );
$num = preg_replace( "/\D/", "", $num );

if ( ! empty( $num ) )
{
echo "Dialing $num\r\n";

$timeout = 10;
$asterisk_ip = "192.168.19.5";

$socket = fsockopen($asterisk_ip,"5038", $errno, $errstr, $timeout);
fputs($socket, "Action: Login\r\n");
fputs($socket, "UserName: ADM\r\n");
fputs($socket, "Secret: C3r34l1s#\r\n\r\n");

$wrets=fgets($socket,128);

echo $wrets;

fputs($socket, "Action: Originate\r\n" );
fputs($socket, "Channel: Local/$ext@local_processing\r\n" );
fputs($socket, "Exten: $num\r\n" );
fputs($socket, "Context: local_processing\r\n" );
fputs($socket, "Priority: 1\r\n" );
fputs($socket, "Async: yes\r\n" );
fputs($socket, "WaitTime: 15\r\n" );
fputs($socket, "Callerid: $ext\r\n\r\n" );

$wrets=fgets($socket,128);
echo $wrets;
}
else
{
echo "Unable to determine number from (" . $_REQUEST['phone'] . ")\r\n";
}
}
else
{?>Please enter a number to dial.
<?}?>
</pre>

All we have to do it's modify the IP, login and password.

In the application, we place the extension.

[[Image:Click2call9.png]]

How to buy and configure a SSL certificate at IPBrick 6.1

2016-04-18T10:08:16Z

Ipbwikiadmin:

The site www.ssls.com is a good option to buy cheap SSL certificates.

Here are presented the steps to buy a Wildcard certificate and to configure it at IPBrick 6.1. So its a certificate type that can be used for all names and services from a DNS domain.

Let suppose first the following info:

<pre>
Country: Portugal
City: Porto
Company Name: Domain
DNS domain: domain.com
Wildcard certificate: *.domain.com
Approver email: administrator@domain.com
Email to receive the certificate: jsmith@xpto.com
</pre>

so in that case, the certificate is valid for all names under the domain "domain.com". Eg: domain.com, groupware.domain.com, www.domain.com, cafe.domain.com, iportaldoc.domain.com.

=A - CSR generation=

* Go to Advanced Configurations - IPBrick - Certificates and Insert a certificate. Eg: wildcard-domain-2015
* Click at Certificate and generate the Private Key. After that generate the CSR with the following definitions:

<pre>
Country code: PT
State or province: Porto
City: Porto
Company: Domain
Department:
Common Name (CN): *.domain.com
Email: jsmith@xpto.com
</pre>

NOTE: If you are buying not a wildcard certificate but a certificate for a specific name/FQDN like groupware.domain.com, the CN must be: groupware.domain.com

* Download the CSR

=B - Buy a certificate from www.ssls.com=

* Go to www.ssls.com and register with a new account
* Sign in and choose the cheapest CA to buy a Wildcard certificate and the number of years. Eg: PositiveSSL, 1 year
* Activate the certificate

# When activating enter the file .CSR (generated at IPBrick)
# Choose the '''email approval''' - administrator@domain.com
# Go to administrator@domain.com email account and aprove it.
# Enter the company information and the email address that will receive the certificate (jsmith@xpto.com)

=C - Install the certificate at IPBrick=

* Go to jsmith@xpto.com email account and download and decompress the .zip file attached. The content is:

<pre>
COMODORSADomainValidationSecureServerCA.crt -> Intermediate 2 CA certificate
COMODORSAAddTrustCA.crt -> Intermediate 1 CA certificate
AddTrustExternalCARoot.crt -> Root CA certificate
STAR_domain_com.crt -> Your Wildcard certificate
</pre>

* Open the following files at Notepad:

<pre>
COMODORSADomainValidationSecureServerCA.crt
COMODORSAAddTrustCA.crt
AddTrustExternalCARoot.crt
</pre>

# Create a new file called ca_bundle.crt and concatenate all the three files content in that order
# Go back to IPBrick at Configurations - IPBrick - Certificates, click at wildcard-domain-2015 and at "Certificate" insert the file STAR_domain_com.crt
# Choose "Certificate Authority (CA)" and insert the file ca_bundle.crt
# Hit "Back" and at "Services with certificate" option, choose the certificate wildcard-domain-2015 for all the services.
# Apply Configurations
# Now all the client applications running SSL will accept the certificate (browsers, email clients etc.)

NOTE: If the current IPBrick have a valid SSL certificate manually installed by the IPBrick Support Team, please send an email to support@ipbrick.com in order to check the configurations

UCoIP DNS/firewall configuration

2016-04-07T16:13:01Z

Ipbwikiadmin: /* Firewall/Router configuration */

UCoIP DNS/firewall configuration

2016-04-07T15:16:22Z

Ipbwikiadmin: /* Firewall/Router configuration */

How to buy and configure a SSL certificate at IPBrick 6.1

UCoIP DNS/firewall configuration

2016-04-07T09:09:24Z

Ipbwikiadmin: /* Firewall/Router configuration */

=DNS configuration=

In order to get the full UCoIP concept working from the Internet, it's necessary to configure some DNS records at the public DNS zone.

In that example lets suppose that:

<pre>
DNS domain: domain.com
IPBrick FQDN: voip.domain.com
Public IP associated to IPBrick: 88.88.88.88
User UCoIP page to create: jsmith.domain.com
</pre>

So in this case we need to configure the following DNS records:

A records:

<pre>
voip A 88.88.88.88
webrtc A 88.88.88.88
webrtcproxy A 88.88.88.88
</pre>

CNAME records:

<pre>
im CNAME voip
jwchat CNAME voip
webphone CNAME voip
groupware CNAME voip
cafe CNAME voip
jsmith CNAME voip
</pre>

SRV records for VoIP (SIP):

<pre>
_sips._tcp.domain.com. IN SRV 1 0 5061 voip.domain.com.
_sip._tcp.domain.com. IN SRV 1 0 5060 voip.domain.com.
_sip._udp.domain.com. IN SRV 1 0 5060 voip.domain.com.
</pre>

SRV records for chat (Jabber/XMPP):

<pre>
_jabber._tcp.domain.com. 86400 IN SRV 5 0 5269 voip.domain.com.
_xmpp-server._tcp.domain.com. 86400 IN SRV 5 0 5269 voip.domain.com.
_xmpp-client._tcp.domain.com. 86400 IN SRV 5 0 5222 voip.domain.com.
</pre>

If IPBrick will be the email server, we need to modify/add the MX record:

<pre>
domain.com MX 5 voip.domain.com
</pre>

=Firewall/Router configuration=

If the eth1 IPBrick is behind a NAT at Router/Firewall, its necessary to forward the following traffic to eth1 IP:

<pre>
HTTP - 80 TCP
HTTPS - 443 TCP
SMTP - 25 TCP
SIP - 5060 UDP/TCP
SIPS - 5061 TCP
RTP - 40000:45000 UDP
RTP - 50000:55000 UDP
RTP - 60000:65000 UDP
XMPP - 5222 TCP
XMPP - 5280 TCP
XMPPS - 5223 TCP
WebRTC - 8888 TCP
Webphone - 10060 UDP/TCP
Webphone - 10062 TCP
</pre>

2015-07-23T11:52:26Z

Ipbwikiadmin: /* Configuration Hints */

== Welcome to IPBrick.IC support ==

* [[What is new at IPBrick.IC version 6.0]]
* [[Update to IPBrick version 6.0]]
* [[Licensing IPBrick]]
* [[How to update IPBrick]]

== Information per service ==

* IPBrick.I
** [[Domain Server]]
** [[File Server]]
** [[Email Server]]
** [[Backup]]

* IPBrick.C
** [[Email Server]]
** [[FTP Server]]
** [[VPN PPTP]]
** [[VoIP]]

== Information per Apps ==

* [[Archipel]]
* [[CAFE]]
* [[Contacts]]
* [[Groupware]]

== Configuration Hints ==

* [[Registering Phones with Open-VPN]]
* [[UCoIP DNS/firewall configuration]]
* [[How to buy and configure a SSL certificate at IPBrick 6.1]]
* [[IPBrick Disk migration]]
* [[VMWare tools for IPBrick 6.X]]

== Known Issues ==
* IPBrick v6.0
** [[NIC device detection/management]]
** [[Network Configuration / DHCP General Options Network Mask]]

IPBrick Disk migration

2015-07-07T10:19:01Z

Ipbwikiadmin:

=<big>'''IPBrick Disk migration'''</big>=

Apply configuration and save the configurations file to your Desktop.

Just stop the the services you use.
<pre>
/etc/init.d/asterisk stop
/etc/init.d/apache2 stop
/etc/init.d/ejabberd stop
/etc/init.d/qmail stop
...
</pre>

Execute this command to backup all the data bases.
<pre>php5 /opt/system/backupSYS/backup_DBs.php </pre>

Install the IPBrick on the new machine or on the new disk.

Make the rsync command to copy all the data to the new disk,
Some examples of rsync

==='''rsync using local machine only, (device attached by usb)'''===
----

See the disks on machine
<pre>
fdisk -l
</pre>

You must have 2 disk sda and sdb

And see the partition table off the two devices.

Then create 2 folders
<pre>
mkdir /old_home1
mkdir /old_home2
</pre>

Then we need to mount the partitions we need to copy.
<pre>
mount /dev/sdb7 /old_home1
mount /dev/sdb8 /old_home2
</pre>

Now lets start the rsync

<pre>
rsync -aAuv /old_home1 /home1 > rsync_home1.log 2> rsync_home1.err &
rsync -aAuv /old_home2 /home2 > rsync_home2.log 2> rsync_home2.err &
</pre>

You can see the logs in this file -> rsync_home1.log
Or the errors in this file -> rsync_home1.err

Wen the rsync is finish access to web interface and then insert and replace the configuration that you save on your desktop.

After replacing, go to Advanced configuration -> disaster recovery -> aplication -> data bases -> and replace the last one.

Wen this Finnish test the services you have on IPBrick.

==='''rsync using 2 IPBrick'''===
----
EX: IPBrick1 New (192.168.69.199) and IPBrick2 OLD (192.168.69.200)

On machine IPBrick2 open ssh to root

<pre>
cat /etc/ssh/sshusers-allowed
operator
root
</pre>

insert the line root on the file.

Now lets start the rsync on IPBrick1

<pre>
rsync -avz --rsh="ssh -l root" 192.168.69.200:/home1 /home1 > rsync_home1.log 2> rsync_home1.err
rsync -avz --rsh="ssh -l root" 192.168.69.200:/home2 /home2 > rsync_home2.log 2> rsync_home2.err
</pre>
* the route password will be prompt to insert.

You can see the logs in this file -> rsync_home1.log
Or the errors in this file -> rsync_home1.err

Wen the rsync is finish access to web interface and then insert and replace the configuration that you save on your desktop.

After replacing, go to Advanced configuration -> disaster recovery -> aplication -> data bases -> and replace the last one.

Wen this Finnish test the services you have on IPBrick.