Konftel 300IPx Installation Guide

PDF

Dokument

Oglas

K O N F T E L . C O M

Installation & Administration of Konftel 300IPx

E N G L I S H

ABOUT THIS DOCUMENT

This document only includes setup, registration of accounts and configuration. The use of the conference phone is described in the Quick reference guide and the User guide . The latest version of all documentation can be downloaded from www.konftel.com/300ipx .

CONTENT

Description 2

Display information and web interface 3

Display screen ...........................................................................................3

Navigation and selection in menus .................................................. 4

Using the web interface ....................................................................... 6

Installation 7

Connecting ................................................................................................7

Obtaining a network address ............................................................ 8

Software upgrade and basic settings ............................................. 9

Registering an account .......................................................................12

Settings 14

Basic ............................................................................................................14

SIP ................................................................................................................ 17

Network ....................................................................................................23

Media .........................................................................................................26

LDAP ..........................................................................................................29

Web interface..........................................................................................31

Time & Region ........................................................................................32

Provisioning.............................................................................................33

System .......................................................................................................34

Headset and PA installation and settings 35

Connecting a wireless headset .......................................................35

Connecting a PA interface box .......................................................36

PA settings .............................................................................................. 37

Hard system recovery 39

Provisioning – upgrade and configuration 40

Firmware upgrade on a single phone .......................................... 40

Using a configuration file...................................................................42

Using a device management server ............................................. 48

Managing phone book and conf. guide 52

Importing and exporting contacts ................................................52

Importing and exporting conference groups .......................... 54

Checking status and logs 55

Device .......................................................................................................55

Network ....................................................................................................55

Time & Region ........................................................................................56

SIP ...............................................................................................................56

Media ......................................................................................................... 57

Log ..............................................................................................................58

Technical data 60

Service and guarantee

Appendix

DESCRIPTION

Speaker Microphone Display screen Keypad

NFC symbol

LEDs

Flashing blue Incoming call

Steady blue light Call in progress

Flashing red On hold, microphone and speakers turned off

Steady red light Mute, microphone turned off

Network cable port

SD memory card port

Expansion microphone port

Maintenance

Clean the equipment with a soft, dry cloth.

Never use liquids.

AUX port

Security lock port

USB port

Power supply port

Expansion microphone port

Navigation in menus

Display of call list

No/end/back

Start/stop recording

Increase volume

Decrease volume

Mute, the caller cannot hear you

Hold, puts a call on hold

Menu

Settings

Alphanumerical buttons

Hold down a button for 2 seconds to open the phonebook

Navigation in menus

Display of call list

Yes/confirm choice

Answer/connect calls and

Flash

During a call: Press to call a new person

Hang up/end call

Conference

Automatic dialling of conference groups

One press of this button will always connect all parties to a conference call

Line selection

DISPLAY INFORMATION AND WEB INTERFACE

DISPLAY SCREEN

On Hook

Press to display this screen.

Date

Time

Mobile device connected via Konftel Unite

Screen text (can be changed)

Account name (can be changed)

Registered

Not registered

Off Hook

Press to display this screen.

Call duration

Time

Information text (see below)

Phone lines (L1–L4)

Line status (see below)

Secure connection (see page 10)

Line status:

Line free (Before account name – telephone not registered)

Line connected (Before account name – telephone registered)

Line on hold (“HOLD” displayed on the screen – all calls on hold)

Line (called party) busy

Own line put on hold by other party

Recording call

Secure connection

Information text displays one of the following:

• Number or name of each phone line

(The name will be displayed if a number is in the phone book)

• Explanation of what you should do (For example ENTER NUMBER )

• Status (For example HOLD when you place all calls on hold)

Line menu

Press LINE to switch to and from this menu.

Line/number/name

New line (two lines if two accounts are registered)

Option for creating or splitting conference calls

DISPLAY INFORMATION AND WEB INTERFACE

NAVIGATION AND SELECTION IN MENUS

 Press MENU .

 Select the option you want from the menu using the arrow buttons.

 Confirm by pressing OK to select the marked option.

 Cancel the setting or go back one level in the menu by pressing C .

 Quit the menu by pressing MENU again.

 Note that after you have made changes to a setting, you must press OK to activate the setting.

It is possible to open a menu option directly by pressing the number button that corresponds to the position of the option in the menu (e.g. 2 to open PHONE BOOK and then 3 to select EDIT CONTACT).

Writing style in instructions

In the instructions, MENU > SETTINGS (6) means you should:

 Press MENU .

 Mark the SETTINGS option using the arrow buttons and confirm by pressing OK to open the menu (or press button number 6 ).

Correspondingly, Phone book > Conference Guide in the web interface means you should select Menu Phone book and the Conference Guide tab.

DISPLAY INFORMATION AND WEB INTERFACE

Menu tree

PROFILES

PHONE BOOK

DEFAULT

PROFILE 1

PROFILE 2

PROFILE 3

PROFILE 4

SEARCH

CONTACT

ADD

CONTACT

EDIT

CONTACT

ERASE

CONTACT

ERASE

ALL

STATUS

EXT. PHONE BOOK

CONF GUIDE

SEARCH

GROUP

ADD

GROUP

EDIT

GROUP

ERASE

GROUP

ERASE

ALL

STATUS

RECORDING

PLAYBACK

FILE

RENAME

FILE

ERASE

FILE

ERASE

ALL

SETTINGS

STATUS

SETTINGS

BASIC

ADVANCED

BASIC

SETTINGS

ACCOUNTS

LANGUAGE

KEY TONE

RING LEVEL

EQUALIZER

AUX PORT

TIME

FORMAT

DEFAULT

SYSTEM

RESTART

REBOOT

FACTORY

RESET

STATUS

ACCOUNTS

NETWORK

NAT

TRAVERSAL

MEDIA

TIME

DEVICE

UNITE

DISCONNECT

ERASE

DEVICE

ERASE

ALL

STATUS

Menu tree, advanced settings

The advanced settings are protected by administrator’s PIN code. The default value is 1234 .

SETTINGS

BASIC

ADVANCED PIN

ACCOUNTS

ACCOUNT 1

ACCOUNT 2

TRANSPORT

NETWORK

ETHERNET

NAT

TRAVERSAL

STUN

OFFER ICE

VLAN

802.1X

AUTH

ENABLE/

DISABLE

ACCOUNT

EDIT

ACCOUNT

MEDIA

CODEC

VAD

DTMF

SIGNALLING

SECURITY

SRTP

SIGNALLING

TIME

NTP

TIME DATE

TIME ZONE

DAYLIGHT

SAVING

G722

PCMA

PCMU

G729

REGION WEB

INTERFACE

SCREEN

TEXT

UNITE

The simplest way to make settings and edit contacts is using a PC and the Konftel

300IPx web interface.

DISPLAY INFORMATION AND WEB INTERFACE

USING THE WEB INTERFACE

You can use the web browser of a PC connected to the same network to manage contacts, conference groups and settings in the Konftel 300IPx.

For security reasons, recordings can only be managed directly on the Konftel 300IPx. All other settings that can be made directly on the Konftel 300IPx can also be made via the web interface. It is also possible to import and export contacts and conference groups, name user profiles and change PIN codes, which can only be done via the web interface.

The administrator can also view logs, update software and create a configuration file.

The default setting for the PIN code is 0000 for the user account (Default, Profile 1,

Profile 2, Profile 3 and Profile 4) and 1234 for the administrator’s account (Admin). We recommend that you change the PIN codes in order to protect the settings. The code may consist of eight digits. The administrator can always view and change the PIN codes to the user accounts. The administrator’s PIN code can only be reset with a complete reset to factory settings.

Checking IP address

 Press MENU and select the sub menu STATUS > NETWORK (8,2).

 Check the conference phone’s network address under the heading IP ADDRESS .

 Use this address to log into the web server in the conference phone.

Login

 Log into the web server in Konftel 300IPx by entering the phone’s network address in your computer’s web browser.

 Select Admin as Profile and enter your PIN.

 Default PIN is 0000

INSTALLATION

The printed Installation Guide provides brief and simplified installation instructions.

The guide includes the basic settings for a quick start and works in most cases.

CONNECTING

 Connect the Konftel 300IPx to the network as illustrated below. Konftel 300IPx supports PoE (Power over Ethernet).

 If the network does not support PoE, an optional Konftel AC adapter must be used for connection to the mains.

Ethernet and PoE connection

AC-adapter (Optional)

 Place the conference phone in the middle of the table.

The Konftel 300IPx must obtain a network address and be registered in a SIP PBX before it can be used. The easiest way to register an account and make the settings in the Konftel

300IPx is using a computer connected to the same network and via the integrated web server.

INSTALLATION

OBTAINING A NETWORK ADDRESS

Connecting to a network with DHCP

See “Check IP address” under “USING THE WEB INTERFACE” on page 6.

Connecting to a network with static IP addresses

You need the IP address, host name, domain, netmask, gateway, DNS 1, and DNS 2. The host name can be set freely. The domain and secondary DNS can be left blank.

 Press MENU and select SETTINGS > ADVANCED (6,2).

 Enter the PIN code.

 The default code is 1234 .

 Select NETWORK (2)

 Select STATIC IP .

 Enter values for the IP ADDRESS.

 Enter three digits (begin with 0 if necessary), press OK , enter three digits, and so on.

 Enter HOST NAME

Default is kt300IPx.

 Enter DOMAIN

 Enter NETMASK

 Enter GATEWAY

 Enter DNS 1

 Enter DNS 2

The display shows DONE.

LOGIN

See “Login” under “USING THE WEB INTERFACE” on page 6.

INSTALLATION

SOFTWARE UPGRADE AND BASIC SETTINGS

The following settings should be done during installation.

 See page 48 about Device management if you are responsible for installing or upgrading many phones.

Note that all settings on the Basic tab also affect the user profile Default. Other user profiles can be changed individually. The settings on the Basic tab, except the name and

PIN for Admin, can be modified by any user. Other settings require a login as Admin.

Upgrade software

See the heading “PROVISIONING – UPGRADE AND CONFIGURATION” on page 40 for a detailed description and upgrading options.

 Select Settings > Provisioning .

 Click on Check Now .

 Compare the latest version with the current version (shown on the web page).

 If you want to upgrade, select the desired version in the list box and click on Upgrade .

The browser window and the display on the Konftel 300IPx shows that the upgrade has begun.

 The download and installation can take several minutes. Do not interrupt the upgrade and do not disconnect plugs to the Konftel 300IPx during the upgrade. Interrupting the upgrade may render the conference phone inoperable.

 When installation is complete, the text “Upgrade Complete. The unit will be rebooted.” is shown in your browser, and after a while you hear the Konftel music signature, which indicates that the conference phone has started.

INSTALLATION

Setting time and region

 Select Settings > Time & Region .

 Select the time zone and, if you wish, correction for DST (Daylight saving).

 It is also possible to set the time and date manually or choose a different time server.

 Select the region where you are.

 This setting affects the signalling.

 Save the setting.

The Konftel 300IPx reboots with the new settings.

INSTALLATION

Changing the language

 Select Settings > Basic .

 Select the desired language in the list box after Language and save the setting.

 Note, this only affects the phone language, not the web interface.

Changing the PIN

We recommend that you change the PIN code for Admin from the default setting to protect the settings. Make a note of the new PIN code and keep it in a safe place. The administrator’s PIN code can only be reset by a full factory reset!

 Select Settings > Basic and click the Edit button on the Admin line.

 Enter a new PIN.

 The PIN code may consist of 8 digits.

 Click on the Set and Save buttons.

INSTALLATION

REGISTERING AN ACCOUNT

The conference phone can be registered in a company SIP PBX or with a public IP telephony service provider. You can store settings for two accounts in The Konftel 300IPx. To register your phone, you must have access to the account information and all necessary settings that the SIP PBX or service provider requires.

See the heading “SIP” on page 17 for a detailed description of all settings.

 Select Settings > SIP .

 Click Yes at Enable account under Account 1.

 Enter the account information you have received.

 Account name can be chosen freely and is the name or phone number you want to appear in the phone display.

 Leave the default values if you have no other information.

INSTALLATION

 Select a method of NAT traversal if you have received this information.

 Select a different transport protocol if you have received this information. See page

20 about using a secure transport protocol.

 Save the settings by clicking the Save button.

The Konftel 300IPx responds by showing REGISTERING. If registration is successful, your selected account name will appear at the bottom of the display screen next to a shaded square.

Make media settings

 Select a different codec priority, if you do not accept the default settings. See page

26.

 Select a SRTP option if you need a secure media protocol. See page 27. Note that this also requires a corresponding transport setting on the SIP tab.

SETTINGS

Almost all settings can be done directly on The Konftel 300IPx. See “NAVIGATION AND

SELECTION IN MENUS” on page 4 for using the menu system. We explain how to make settings using the web interface as this is the easiest method.

For safety reasons, recordings can only be managed directly on the Konftel 300IPx. All other settings can be changed via the web interface. The web interface also allows you to import and export contacts and conference groups, rename user profiles and change PIN codes. As an administrator, you can also study logs, upgrade the software and create an

XML based configuration file for easier management of a set of phones.

LOGIN

See “USING THE WEB INTERFACE” on page 6 for a description of how to log in to the web server in The Konftel 300IPx.

BASIC

 Select Settings > Basic .

SETTINGS

These settings affect the Admin and Default profiles. To change the basic settings of a user profile, you need to log in with that profile.

Profiles – edit name and PIN

We recommend that you change the PIN code from the default setting to protect the settings.

 Select Settings > Basic and click the Edit button on the account you want to change.

 Enter a new PIN code.

 The PIN code may consist of 8 digits.

 You can also choose to change the name of a user profile.

 Click on the Set and Save buttons.

 Make a note of the new PIN code and keep it in a safe place.

 The administrator’s PIN code can only be reset with a complete reset to factory settings!

Default account

This setting determines which account will be used as default. By pressing LINE before dialling a number, you can choose the alternative account for the call.

 Select Account 1 or Account 2 and click on the Save button.

On phone: MENU > SETTINGS > BASIC > ACCOUNT (6,1,1).

Language

 Select language using the list box and click on the Save button.

On phone: MENU > SETTINGS > BASIC > LANGUAGE (6,1,2).

Ring level

There are six volume levels plus a silent mode. You will hear the ring tone for each level you select. If you select silent mode, only the blue LEDs on the phone flash when an incoming call is received.

 Select level using the list box and click on the Save button.

On phone: MENU > SETTINGS > BASIC > RING LEVEL (6,1,4).

Key tone

You can select whether or not you want a tone to be heard when you press a button.

 Select On or Off and click on the Save button.

On phone: MENU > SETTINGS > BASIC > KEY TONE (6,1,3).

SETTINGS

Recording

It is possible to turn off the recording feature. This setting can only be done by the administrator and affects all profiles.

 Select On or Off and click on the Save button.

Recording tone

A short beep is heard every 20 seconds so that all the parties in the call know it is being recorded. This feature can be turned off.

 Select On or Off and click on the Save button.

On phone: MENU > RECORDING TONE > SETTINGS (5,5).

Settings when connecting external equipment (Aux)

The Konftel 300IPx can be connected to a wireless headset or an external PA system. An optional PA interface box is required for PA system connection.

 Select the PA option to activate features for external microphone mixer and PA system.

 Do not select the PA option unless a PA system is connected. This option turns off the internal microphone and internal speakers as default. The HEADSET option may be selected whether or not a headset is connected.

Time format

 Select 12 hour or 24 hour and click on the Save button.

On phone: MENU > SETTINGS > BASIC > TIME FORMAT (6,1,7).

Equalizer

The sound reproduction can be adjusted to the required pitch (SOFT, NEUTRAL or

BRIGHT).

 Select Soft, Neutral or Bright and click on the Save button.

On phone: MENU > SETTINGS > BASIC > EQUALIZER (6,1,5).

Screen text

The text on the display screen is shown when The Konftel 300IPx is in stand-by mode (on hook).

 Enter your new text in the text box and click on the Save button.

On phone: MENU > SETTINGS > ADVANCED > SCREEN TEXT (6,1,8).

 Den angivna texten används också som identifiering av Konftel 300IPx vid anslutning med Konftel Unite-appen.

SETTINGS

SIP

 Select Settings > SIP

The Konftel 300IPx can store information for two accounts, e.g. one PBX and one public service provider.

Why use two accounts?

It may be sensible to register a second account if the PBX or SIP server is located in another country than the phone. Otherwise, local calls using the PSTN (telephone network), connected through the ordinary PBX or SIP server, would be connected as international calls.

SETTINGS

Account 1 and Account 2

Enable account It is possible to store account information for future use, but temporarily disable it.

Account name

User

Registrar

Proxy

This is the name displayed on the screen. It can be set according to company standards.

The account (customer) name.

Shall contain the IP address or the public name of the SIP server where the account is registered (e.g. 10.10.1.100 for a local SIP server or sip.company.net for a public VoIP service provider)

Shall contain the proxy server used for Internet communication, if any. Can be left blank.

Realm The protection domain where the SIP authentication (name and password) is valid. This is usually the same as the registrar. If left blank, or marked with a “*”, the phone will respond to any realm. If specified, the phone will only respond to the specific realm when asked for credentials.

Authentication name The name used for the Realm authentication. This may be the same as the user name, but must be filled in.

Password The password used for the Realm authentication.

Registration Interval This is a request to the SIP server for when the registration should expire. Konftel 300IPx automatically renews the registration within the time interval if the phone is still on and connected to the server. The default value is 1800 seconds.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > ACCOUNTS (6,2,1).

Nat traversal

NAT ( Network Address Translation ) is a firewall or router function that operates by rewriting the IP addresses in the IP headers as packets pass from one interface to the other. When a packet, for example, is sent from the inside, the source IP address and port are rewritten from the private IP address space into the address space on the outside

(Internet).

NAT rewrites the addresses but leaves the packets themselves untouched. This kind of translation works fine for many protocols, but causes a lot of trouble for SIP packets that contain address information in their content (for example an INVITE request from one IP address to another).

NAT traversal solves this problem, providing a “view from the outside” that makes it possible to replace the IP address in the SIP requests with the address shown on the other side of the firewall.

SETTINGS

Note that in some cases NAT traversal is not necessary. Some public service providers of IP telephony keep track of the actual IP address used to register a phone, and the one used in the SIP requests from the same phone, and then replaces the addresses in the SIP messages.

STUN STUN ( Simple Traversal of UDP through NATs ) is a protocol that assists devices behind a NAT firewall or router with their packet routing. STUN is commonly used in real-time voice, video, messaging, and other interactive IP communication applications..

The protocol allows applications operating through a NAT to discover the presence and specific type of NAT and obtain the mapped (public) IP address (NAT address) and port number that the NAT has allocated for the application’s User Datagram Protocol

(UDP) connections to remote hosts. The protocol requires assistance from a 3rd-party network server (STUN server).

STUN should be activated if an external SIP server cannot connect to the Konftel 300IPx behind a firewall NAT function and the SIP server supports STUN. A suitable STUN server is usually provided by the VoIP service provider.

STUN host

Offer ICE

TURN

Note: STUN might also be referred to as Session Traversal Utilities for NAT .

The IP address or public name of the STUN server.

ICE ( Interactive Connectivity Establishment ), is a STUN addition that provides various techniques to allow SIP-based VoIP devices to successfully traverse the variety of firewalls that may exist between the devices. The protocol provides a mechanism for both endpoints to identify the most optimal path for the media traffic to follow.

TURN ( Traversal Using Relay NAT ) TURN is an extension of the

STUN protocol that enables NAT traversal when both endpoints are behind symmetric NAT. With TURN, media traffic for the session will have to go to a relay server. Since relaying is expensive, in terms of bandwidth that must be provided by the provider, and additional delay for the media traffic, TURN is normally used as a last resort when endpoints cannot communicate directly.

TURN User

TURN host

User authentication name on the TURN server.

The IP address or public name of the TURN server.

Password User authentication password on the TURN server.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > NAT TRAVERSAL (6,2,3).

SETTINGS

Advanced

Enable SIP Replaces Default is Yes . Setting this option to No , will instruct the PBX not to use the SIP replace header. Some PBXes try to take over the bridging functionality from Konftel 300IPx using this command, which causes the calls to interrupt.

Enable Blind Transfer Default is Yes . Setting this option to No , will disable the transfer function ( MENU > TRANSFER ) during a call. This may be used if the

PBX does not support blind transfer.

Transport

The transport setting only concerns the protocol to be used for SIP messages between the devices involved. These settings do not include the media (the actual call). The settings on the Media tab should be set accordingly.

Note that if you choose to use a secure connection, both units must support it. Otherwise they cannot negotiate a connection. If an incoming call demands a secure TLS or SIPS connection, the Konftel 300IPx uses the appropriate protocol even if you have set the phone to use UDP.

Protocol UDP ( User Datagram Protocol ) is a protocol on the transport layer in the Internet Protocol Suite. It is a stateless protocol for short messages – datagrams. Stateless implies that it does not establish any connection between sender and receiver in advance. UDP does not guarantee reliability or ordering in the way that TCP does.

Datagrams may arrive out of order or go missing without notice.

The advantages it offers are speed and efficiency.

UDP is the default protocol for SIP.

TCP ( Transmission Control Protocol ) is a protocol on the transport layer in the Internet Protocol Suite. TCP is the standard protocol for Internet communication. TCP keeps track of all individual packets of data, ensuring that they reach the receiver and are put together properly. TCP is not the default protocol for SIP, because it is slower and uses more bandwidth than UDP.

With UDP and TCP, SIP packets travel in plain text. TLS ( Transport

Layer Security ) is a cryptographic protocol that provides security and data integrity for communications over TCP/IP networks. TLS encrypts the datagrams of the transport layer protocol in use. The secure connection may be to the end device or to the first server

(usually the SIP server where the phone is registered). There is no guarantee that there is a secure channel to the end point, but because the SIP server is the only part receiving the user authentication, this is still a rather secure solution.

SETTINGS

SIPS ( Secure SIP ) is a security measure that uses TLS to provide an encrypted end-to-end channel for the SIP messages. To use SIPS, however, both VoIP devices and the SIP server must support it.

 Even if Transport is set to TLS or SIPS, the Konftel 300IPx still accepts incoming UDP or TCP signalling.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > ACCOUNTS > TRANSPORT (6,2,1,3).

TLS Settings

If you select TLS or SIPS under the transport setting, this additional setting appears on the page.

It may be possible to use secure communication without a certificate and make changes to these settings. In some cases, if you choose TLS or SIPS, the SIP server requires a certificate for user/client verification. This should be specified in the account information.

Youcan further increase security by requiring verification of the server, or the client when the Konftel 300IPx acts as a server for incoming calls.

Method The TLS includes a variety of security measures. The methods are defined in the versions of the standard (SSL, SSL v2, SSL v3, TLS v1,

TLS v2). The default method is SSLv23, which accepts both SSL v2 and v3.

Negotiation timeout The TLS settings are negotiated during a call setup (both incoming and outgoing). If this negotiation does not succeed within the specified time (seconds) the negotiation is aborted. Timeout is disabled with 0 (zero).

Verify client When set to On, the Konftel 300IPx will activate peer verification for incoming secure SIP connections (TLS or SIPS).

SETTINGS

Require client certificate

When set to On, the Konftel 300IPx rejects incoming secure

SIP connections (TLS or SIPS) if the client does not have a valid certificate.

Verify server When the Konftel 300IPx is acting as a client (outgoing connections) using secure SIP (TLS or SIPS) it will always receive a certificate from the peer. If Verify server is set to On, the Konftel

300IPx closes the connection if the server certificate is not valid.

Certificate Here you can upload a certificate to the Konftel 300IPx to be used for TLS or SIPS communication.

A certificate is a file that combines a public key with information about the owner of the public key, all signed by a trusted third party. If you trust the third party, then you can be sure that the public key belongs to the person/organization named in that file.

You can also be sure that everything you decrypt with that public key is encrypted by the person/organization named in the certificate.

Root certificate

Private key

The public key in the root certificate is used to verify other certificates. A root certificate is only needed if you have selected client or server verification.

A root certificate is signed by the same public key that is in the certificate, a so-called “self-signed” certificate. A typical root certificate is one received from a Certificate Authority .

Here you can upload a private key to the Konftel 300IPx to be used for TLS or SIPS communication.

A private key is one of the keys in a key-pair used in asymmetric cryptography . Messages encrypted using the public key can only be decrypted using the private key.

Private key password The password used for encryption of the private key, if it is encrypted.

SETTINGS

NETWORK

 Select Settings > Network .

DHCP

IP address

Hostname

Netmask

Domain

Gateway

Primary DNS

Secondary DNS

Dynamic Host Configuration Protocol is used by network devices

(clients) to obtain the parameters necessary for operation in the

IP network. This protocol reduces system administration workload, allowing devices to be added to the network with little or no manual configuration.

DHCP should be set to On if no other information is given. When set to On, all information on this page will be set automatically.

IP address of the device (Konftel 300IPx). The address is provided by the network administrator or service provider if DHCP is not in use.

Set to kt300IPx as default. Can be changed to suitable name.

Usually set to 255.255.255.0 to limit network traffic to the subnet.

The domain where the device is located. May be left blank.

The device or server used for Internet communication.

The address to the primary DNS ( Domain Name System ) server - a program or computer that maps a human-recognisable name to its computer-recognisable identifier (IP address).

The address of an optional secondary DNS server.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > NETWORK (6,2,2).

SETTINGS

Quality of Service

Quality of service is used in IP networks to provide different priority to different applications, users, or to guarantee a certain level of performance to a critical data flow such as voice or video. Differentiated Services or DiffServ is a networking architecture that specifies a simple mechanism for classifying network traffic using a 6-bit field in the header of the IP packets. VLAN ( Virtual LAN ) is a technology to logically divide a physical network into several logical nets and thus to differentiate traffic.

SIP DiffServ

Media DiffServ

VLAN

VLAN ID

VLAN map enable

VLAN prio SIP

VLAN prio media

Enter a value between 0 and 63 to prioritize the SIP messages.

Enter a value between 0 and 63 to prioritize the media packets

(voice).

By enabling this option, all communication to and from Konftel

300IPx is done via the VLAN specified under VLAN ID. Note that this VLAN also must be used to communicate with Konftel 300IPx via the web interface.

The ID number to be used for the IP telephony VLAN.

Enabling VLAN priority mapping from the DiffServ setting.

Set a value between 0 and 7 to prioritize the SIP messages in the

VLAN.

Set a value between 0 and 7 to prioritize the media packets in the

VLAN.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > NETWORK > ETHERNET > VLAN

(6,2,2,2,1).

SETTINGS

802.1x

IEEE 802.1X is an IEEE Standard for port-based Network Access Control and is part of the

IEEE 802.1 group of networking protocols. It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN.

Enable 802.1x By enabling this option, Konftel 300IPx asks an authentication server for permission when connected to the LAN.

EAP method

Username

MD5 password

Certificate

Root certificate

Private key

TLS password

Select which EAP ( Extensible Authentication Protocol ) method to use: MD5 or TLS.

The device identity in the network.

Password for the device identity when using MD5.

Here you can upload a certificate to the Konftel 300IPx to be used for authentication when using TLS.

The public key in the root certificate is used to verify other certificates when using TLS.

Here you can upload a private key to the Konftel 300IPx to be used for authentication when using TLS.

The password used for encryption of the private key when using

TLS.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > NETWORK > ETHERNET > 802.1X AUTH

(6,2,2,2,2).

SETTINGS

MEDIA

 Select Settings > Media .

The media settings determine how audio is sent between the devices. The devices negotiate via SIP before a call is connected. All devices must support the same media types, codecs and security settings.

Codec

Codecs are used to convert an analogue voice signal to a digitally encoded version and vice versa. Codecs vary in the sound quality they deliver and the bandwidth required.

The Konftel 300IPx supports the most common codecs and each codec can be given a precedence depending on your requirements for high quality audio or low bandwidth use.

The priority can be set to from 4 (high) to 1 (low) or 0 (disabled)

G722 G.722 is an ITU-T standard codec that provides 7 kHz wideband audio at a data rate within 64 kbit/s. It offers greately improved speech quality compared with older narrowband codecs such as

G.711, but requires a high quality network connection between the devices.

SETTINGS

G711 Alaw

G711 Ulaw

G729

G.711 is an ITU-T standard codec that uses audio companding.

Companding algorithms reduce the dynamic range of an audio signal. In analogue systems, this can increase the signal-to-noise ratio achieved during transmission and, in the digital domain, can reduce the quantization error.

Two main compression algorithms are defined in the standard, the µ-law algorithm (used in North America and Japan) and A-law algorithm (used in Europe and the rest of the world).

See G711 µ-law above.

G.729 is an ITU-T standard codec that operates at 8 kbit/s. It is mostly used in VoIP applications with low bandwidth requirement.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > MEDIA > CODEC (6,2,4,1).

Security

The media in VoIP calls is usually sent using the RTP protocol ( Real-time Transport

Protocol ). RTP is a standardized packet format for delivering audio and video over the

Internet.

SRTP ( Secure Real-time Transport Protocol ) is an extension of RTP to provide encryption, message authentication and integrity for the audio and video streams.

All devices must support SRTP to establish a connection. It is therefore possible to set

SRTP as disabled, optional or mandatory.

SRTP If set to disabled, the media is sent using RTP. Note that despite this setting, the Konftel 300IPx will still use a secure channel if the opposite device demands it.

If set to optional or mandatory, a padlock will be shown in the bottom right-hand corner of the screen. If the other devices support

SRTP, the padlock will be locked. Otherwise, an open padlock will be displayed.

Secure signalling

If set to mandatory, the call will not be connected if the other devices do not support SRTP.

The SIP messages (signalling) and the SRTP cipher key are sent on a different channel than the media and are not affected by the

RTP/SRTP setting. To ensure a secure connection, the signalling must be secured using TLS or SIPS , see page 20. Note that the SIP transport setting must be set accordingly.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > MEDIA > SECURITY (6,2,4,4).

SETTINGS

VAD

Voice Activity Detection (speech detection) is a technique used in speech processing to detect the presence or absence of human speech in regions of audio. In VoIP applications,

VAD is mainly used to avoid unnecessary coding and transmission of silence packets, saving on computation and network bandwidth.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > MEDIA > VAD (6,2,4,2).

DTMF

DTMF ( Dual-tone multi-frequency ) signalling is used for telephone signalling over the line to the phone switch or PBX.

If the device itself generates the tones and they are sent in the voice-frequency band, the method is called Inband . This is not the best method when using VoIP. Low bit rate codecs may corrupt the signalling tones and make it difficult for the switch to identify them.

RFC 2833 is a method of carrying DTMF signals in RTP packets using a separate RTP payload format. With this method a PSTN gateway reproduces the DTMF tones sent from the end device.

With SIP Info the DTMF signals are sent as SIP requests. The SIP switch creates the tones if the call is transferred to the PSTN.

Use RFC 2833 or SIP Info as preferred methods. Switch to inband only if you encounter problems using DTMF signalling with your PBX/SIP switch.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > MEDIA > DTMF SIGNALLING (6,2,4,3).

Advanced

First RTP port If the RTP packets must be directed to a specific port series, the first port number is set here.

SETTINGS

LDAP

 Select Settings > LDAP .

Konftel 300IPx has support for an external phone book, which means it can communicate with a directory server using LDAP ( Lightweight Directory Access Protocol ). The built in search function dynamically filters the content from the LDAP database, based on the search characters the user enter.

To make the LDAP phone book available, the administrator has to activate and configure the LDAP feature.

Enable LDAP The LDAP feature is disabled by default because it has to be configured.

Name filter

Server URL

Search base

Username

Password

Defines how the entered search characters are used. The filter is designed conforming to the string representation of LDAP search filters described in RFC2254 . The character % in the filter string will be replaced with the search character entered by the user.

Example:

(|(sn=%*)(cn=%*)) - All entries with the search characters in the beginning of the sn OR cn attribute are presented to the user.

The IP address of the LDAP server host. Supports ldap and ldaps .

The DN ( distinguished name ) of the search base

Example: dc=domain, dc=com .

Leave this field blank if the LDAP server does not require a username.

Leave this field blank if the LDAP server does not require username and password.

SETTINGS

Max hits

Display name

The maximum number of hits to return for each LDAP search.

Specifies how the search hits shall be presented on the display in

Konftel 300IPx.

Example:

%cn - shows the cn attribute.

%givenName %sn - shows the givenName attribute and the sn attribute with a space in between.

Sorts the search hits based on the Display name. Sort results

Number attributes Here you define the attributes that shall be displayed for a selected search hit.

Example: mobile telephoneNumber - shows the mobile phone number and office phone number on separate rows for the selected Display name.

Country code By entering the country code where the phone is located, the country code in any phone number attribute is ignored, if it is identical.

Area code

External prefix

By entering the area code where the phone is located, the area code in any phone number attribute is ignored, if it is identical.

If a special prefix is needed to dial external numbers, it should be added here. Use this if you for example need to dial 0 to get a dialing tone.

Min length for external prefix

Restricts the external prefix to be added only if the phone number is longer than the min length. This makes it possible to use short internal numbers.

Exact length for no external prefix

The external prefix in not added if the phone number has exactly the entered length.

Number prefix for no external prefix

All numbers that starts with this number will not have the external prefix added. Useful if you know that all internal numbers start with a certain number.

SETTINGS

WEB INTERFACE

 Select Settings > Web interface .

The web server in the Konftel 300IPx supports secure connections using HTTPS.

Enable HTTPS Set Enable HTTPS to On if you need a secure communication between the PC used for setup and the phone.

Certificate To use HTTPS you need to upload a certificate to the phone.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > WEB INTERFACE (6,2,7).

SETTINGS

TIME & REGION

 Select Settings > Time & Region .

Time

Enable NTP

Time

Date

Timezone

Daylight saving

NTP Server

NTP ( Network Time Protocol ) is a protocol for distributing the

Coordinated Universal Time (UTC) by means of synchronizing the clocks of computer systems over packet-switched, variablelatency data networks.

This field shows the actual time if NTP is enabled. Otherwise enter the correct time (hh:mm:ss) and save the setting.

This field shows the actual date if NTP is enabled. Otherwise enter the correct date (yyyy-mm-dd) and save the setting.

Select the UTC time zone in your country.

Select the Yes radio button if DST ( Daylight Saving Time or Summer

Time ) is currently used in your country. Note that this setting only adjusts the time by one hour and does not change the time automatically when the DST starts and ends.

The NTP pool is a dynamic collection of networked computers that volunteer to provide highly accurate time via NTP to clients worldwide. These computers are part of the pool.ntp.org domain

SETTINGS and part of several subdomains divided by geographical zones.

They are distributed to NTP clients via round robin DNS.

On phone: MENU > SETTINGS > ADVANCED > (PIN) > TIME (6,2,5).

Region

Select the region where you are. This setting determines the signalling (disconnect tone, busy tone, etc).

On phone: MENU > SETTINGS > ADVANCED > (PIN) > REGION (6,2,6).

Daylight saving

Enable DST Select the Yes radio button if DST ( Daylight Saving Time or Summer

Time ) is used in your country.

Select the offset from UTC time when daylight saving is in use.

DST Timezone

DST Mode When set to Automatic, OmniTouch 4135 IP uses dates stored in the phone to adjust for DST. When set to Manual, you need to manually set the offset two times a year.

Start/Stop fixed date Set to Yes if DST changes the same date every year in your country. Then select the time and date it changes.

Set to No if DST changes a specific week and day each eyar. (For instance third sunday in March.) Then select the month, week and time it changes.

PROVISIONING

See “PROVISIONING – UPGRADE AND CONFIGURATION” on page 40.

SETTINGS

SYSTEM

 Select Settings > System .

Application restart

The Restart button restarts the phone application. This takes less than 30 seconds.

On phone: MENU > SYSTEM > RESTART (7,1).

System reboot

The Reboot button reboots the conference phone. The starting procedure may take about two minutes.

On phone: MENU > SYSTEM > REBOOT (7,2).

Factory reset

The Reset button resets the Konftel 300IPx to factory default settings. All personal settings, including account information, are erased.

On phone: MENU > SYSTEM > FACTORY RESET (7,3).

Hard reset to factory settings

See page 39 about resetting the phone if you have forgotten the Admin PIN code.

HEADSET AND PA INSTALLATION AND SETTINGS

CONNECTING A WIRELESS HEADSET

 Connect the headset to the Aux port on Konftel 300IPx.

The microphones from the Konftel 300IPx and the wireless headset will work simultaneously and transmit the call to other participants in the phone conference.

Please refer to the headset manual for further information.

Turning off the internal speakers when using a headset

The internal speakers can be turned off temporarily if you wish to use the Konftel 300IPx as a personal telephone with a headset.

 During a call, select MENU > HEADSET .

 Select YES when asked “SPEAKER OFF?”.

 The speakers come on automatically when the call is ended.

HEADSET AND PA INSTALLATION AND SETTINGS

CONNECTING A PA INTERFACE BOX

The Konftel 300IPx can be connected to an external PA system using a PA interface box.

2.5 m connection cable To mixer/microphone To amplifier/speakers

AUX port

PA interface box

Always disconnect the power supply from the electrical outlet before disconnecting or connecting equipment to the Konftel

300IPx.

 Connect the PA-box to the AUX port on Konftel 300IPx with the included cable.

 Connect the external amplifier to the RCA connector marked with a speaker.

 Connect the microphone mixer to the RCA connector marked with a microphone.

Changing the auxilary port setting

 Select Settings > Basic .

 Select PA under the heading Auxilary port to aktivate the functions for external microphones and speaker system.

 Click on Save .

 Do not select the PA option unless a PA system is connected. This option turns off the internal microphone and internal speakers as default.

On phone: MENU > SETTINGS > BASIC > AUX PORT (6,1,6).

HEADSET AND PA INSTALLATION AND SETTINGS

PA SETTINGS

To match several types of situations and equipment, there are some settings available in the Konftel 300IPx menu.

Activating internal microphone and speakers

 These settings are not available via the web interface.

 Select MENU > SETTINGS > BASIC > PA (6,1,7).

 Select INTERNAL MIC and press OK to switch between on (shaded box) and off.

 To ensure maximum audio quality, do not use the internal microphone and external microphones connected via the PA box at the same time.

 Only the internal microphone is turned off. Any external microphones connected to the Konftel 300IPx are still turned on.

 Select INTERNAL SPKR and press OK to switch between on (shaded box) and off.

 To ensure maximum audio quality, do not use the internal speakers and external speakers connected via the PA box at the same time.

Adjusting microphone volume from PA

 During a call, select MENU > PA > PA MONITOR .

 Adjust the microphone volume from the mixer so that the level on the display screen is around 10–12 when speaking in a normal tone.

Adjusting PA calibration manually

It is possible to calibrate the duplex performance of the conference phone when it is connected to a PA system. The calibration level can be set automatically by the Konftel

300IPx or adjusted manually to any value between 0 and 5 (0 being full duplex).

• Increase the calibration if the other party experiences disturbing echo.

• Decrease the calibration if the other party experiences low duplex, i.e. your voice is muted or clipped when the other party is speaking.

HEADSET AND PA INSTALLATION AND SETTINGS

 The position of the PA system’s microphones and speakers and the amplifier’s settings may affect full duplex performance.

 Select MENU > PA > CALIBRATION .

 AUTO is the default setting and is recommended in most cases. The figure shown in brackets is the measured calibration value.

 Select different levels and compare the audio quality to achieve your preferred setting.

 NB. You must ask the person you are calling to assess the effect of the adjustments you make.

HARD SYSTEM RECOVERY

Reset configuration

If you have forgotten the Admin PIN code, the only way to reset it to default is to do a hard factory reset. This is the same as the Factory reset in the system menu ( MENU >

SYSTEM > FACTORY RESET ).

 This erases all settings including account information and contacts!

 Disconnect the power supply cable. Note that this is the same as the network cable if the phone uses Power over Ethernet.

 Press and hold the MENU button while you connect the cable again (i.e. starts the

Konftel 300IPx). Hold the button pressed until the SYSTEM RECOVERY menu is shown on the display.

 You can press any other button than 1 , 2 , or 3 to start the phone without resetting.

 Press 1 to select Reset configuration and confirm with OK .

 Upgrade to the latest version of the software when the phone has started and redo the setup of account and other settings (see page 7).

Restore firmware

This replaces the current software with the one supplied with the phone. All settings are erased.

 Disconnect the power supply cable. Note that this is the same as the network cable if the phone uses Power over Ethernet.

 Press and hold the MENU button while you connect the cable again (i.e. starts the

Konftel 300IPx). Hold the button pressed until the SYSTEM RECOVERY menu is shown on the display.

 You can press any other button than 1 , 2 , or 3 to start the phone without restoring the firmware.

 Press 3 to select Restore firmware and confirm with OK .

All content in the phone’s memory is erased and the firmware supplied with the phone is written to the memory.

 Upgrade to the latest version of the software when the phone has started and redo the setup of account and other settings (see page 7).

PROVISIONING – UPGRADE AND CONFIGURATION

FIRMWARE UPGRADE ON A SINGLE PHONE

The easiest way to upgrade the Konftel 300IPx is via a computer connected to the same network. Via the web interface, you can check for a more recent version and then automatically install it.

It is also possible to download the latest version, via the Konftel website ( www.konftel.

com/300IPx ), and then install the file via the web interface or using a SD card.

Using the web interface

 Select Settings > Provisioning .

 Click on the Check Now button.

 Compare the latest software version with the current version (shown on the same page).

 If you choose to upgrade, select version in the list box and click on the Upgrade button.

The browser window and the Konftel 300IPx display shows that the upgrading has begun.

PROVISIONING – UPGRADE AND CONFIGURATION

When installation is complete, the text “Upgrade Complete. The unit will be rebooted.” is shown in your browser, and after a while you hear the Konftel music signature, which indicates that the conference phone has started.

Upgrading from downloaded file

It is possible to download a firmware file from www.konftel.com/300IPx and install it on the Konftel 300IPx from the local hard disk.

 Download the firmware file from www.konftel.com/300IPx .

 Click on the Browse… button and locate and select the downloaded file.

 Click on the Upgrade button.

Upgrading from SD card

Upgrading from SD card may be suitable if you have many phones to upgrade. The phones do not have to be connected to the network.

 Download the latest firmware as above and save it on a SD card.

 Put the SD card in the phone you want to upgrade.

 Disconnect the power supply cable. Note that this is the same as the network cable if the phone uses Power over Ethernet.

 Press and hold the MENU button while you connect the cable again (i.e. starts the

Konftel 300IPx). Hold the button pressed until the SYSTEM RECOVERY menu is shown on the display.

 You can press any other button than 1 , 2 , or 3 to start the phone without any change.

 Press 2 to select SD-card upgrade .

The Konftel 300IPx is upgraded with the firmware file on the SD card and starts when the upgrade is done.

After upgrading

If DHCP is used in the network, the IP address may have been changed. If the web browser loses contact with Konftel 300IPx, check the IP address on the conference phone (see “USING THE WEB INTERFACE” on page 6).

PROVISIONING – UPGRADE AND CONFIGURATION

USING A CONFIGURATION FILE

It is possible to save a configuration xml file to be used as:

• Backup (i.e. if the system has been reset to factory default)

• Configuration interface (there are some settings that are not configurable via the web interface)

• Management tool (export, edit and import settings to a set of phones instead of doing the settings on each phone)

• Use with a Device Management server, see page 48.

The structure of the xml file is as follows:

<locale>

<recording>

<logging>

<level>

<log_sip>

<remote_log>

<remote_host />

The phone application logs messages to log facility LOCAL0.

Log level 1–5 (equivalent to Fatal–Trace)

Log SIP messages to log facility LOCAL1. Default is true.

Log messages to a remote log server. Default is false.

Remote log server.

<network>

<net>

<dhcp>

<ip>

<dns>

Specify if DHCP should be used to obtain network settings. If so, the other network settings won’t be used.

Specify the IP address of the KT300IPx.

The netmask of the IP address.

Specify the default gateway to be used.

Specify at most two Domain Name Servers to be used.

<vlan>

<id>

Specify host name.

Specify domain name.

Virtual LAN enabled if set to true

VLAN ID.

<std_prio_map>

<sip_priority>

<media_priority>

<ether_8021x>

PROVISIONING – UPGRADE AND CONFIGURATION

<eap_md5>

<eap_tls>

<qos>

<dscp_sip>

<dscp_media>

<time>

<ntp>

<daylight_save>

<ntps>

<sip>

<udp_transport>

<udp_port>

<tcp_transport>

<tcp_port>

<tls_transport>

<sips_transport>

<tls_port>

<rtp_port>

<outbound_proxy />

<use_stun>

<stun_domain />

<stun_host />

<use_turn>

<turn_host />

<turn_tcp>

<turn_user />

<turn_passwd />

Specify if UDP shall be used as transport.

Specify the UDP port to listen to.

Specify if TCP shall be used as transport.

Specify the TCP port to listen to.

Specify if TLS shall be used as transport.

Specify if SIPS shall be used as transport.

Specify the TLS port to listen to.

Specify the start port for RTP traffic.

Specify the URL of outbound proxies to visit for all outgoing requests. The outbound proxies will be used for all accounts and will be used to build the route set for outgoing requests. The final route set for outgoing requests will consist of the outbound proxies and the proxy configured in the account.

Use Simple Traversal of UDP through NATs (STUN) for NAT traversal.

Default is no.

Specify domain name to be resolved with DNS SRV resolution to get the address of the STUN servers. Alternatively application may specify stun_host and stun_relay_host instead.

Specify STUN server to be used in ”HOST[:PORT]” format. If port is not specified, default port 3478 will be used.

Use Traversal Using Relay NAT (TURN) for NAT traversal. Default is no.

Specify TURN relay server to be used.

Use TCP connection to TURN server. Default is false.

TURN username.

TURN password.

PROVISIONING – UPGRADE AND CONFIGURATION

<nat_type_in_sdp>

<require_100rel>

<use_srtp>

<srtp_secure_signaling>

Support for adding and parsing NAT type in the SDP to assist troubleshooting. The valid values are:

0: no information will be added in SDP and parsing is disabled

1: only the NAT type number is added

2: add both NAT type number and name

Specify whether support for reliable provisional response (100rel and

PRACK) should be required by default. Note that this setting can be further customized in account configuration.

Specify default value of secure media transport usage. Note that this setting can be further customized in account configuration.

0: SRTP will be disabled, and the transport will reject RTP/SAVP offer.

1: SRTP will be advertised as optional and incoming SRTP offer will be accepted.

2: The transport will require that RTP/SAVP media shall be used.

Specify whether SRTP requires secure signalling. This option is only used when use_srtp option above is non-zero. Note that this setting can be further customized in account configuration.

0: SRTP does not require secure signalling

1: SRTP requires secure transport such as TLS

2: SRTP requires secure end-to-end transport (SIPS)

<codec>

<type>

<name>

<prio>

<dtmf>

<no_vad>

<ec_tail>

<enable_ice>

<enable_relay>

<enable_presence>

<tls>

<tls_password />

<tls_method>

Codec type

Codec name

Codec priority (0-4)

DTMF signalling. Default is 2.

0: In-band

1: SIP message

2: RTP message

Disable VAD. Default is VAD enabled.

Echo canceller tail length, in milliseconds.

Enable ICE?

Enable ICE relay?

Enable the use of presence signalling.

<tls_verify_server>

<tls_verify_client>

<tls_require_client_cert>

<tls_neg_timeout>

Password for the private key

TLS protocol method from pjsip_ssl_method, which can be:

0: Default (SSLv23)

1: TLSv1

2: SSLv2

3: SSLv3

23: SSLv23

Verify server certificate.

Verify client certificate.

Require client certificate.

TLS negotiation timeout in seconds to be applied for both outgoing and incoming connections. If zero, no timeout is used.

PROVISIONING – UPGRADE AND CONFIGURATION

<account>

<valid>

<name>

<id>

<publish_enabled>

<initial_auth>

<initial_algo />

<pidf_tuple_id />

<force_contact />

<require_100rel>

<proxy_uri />

<reg_timeout>

<cred>

<realm>

<cred_data_type>

<cred_data>

<auto_update_nat>

<ka_interval>

<ka_data />

<use_srtp>

If this account information is valid or not.

User defined name of the account

The full SIP URL for the account.

This is the URL to be put in the request URI for the registration.

If this flag is set, the presence information of this account will be published to the server where the account belongs.

If this flag is set, the authentication client framework will send an empty

Authorization header in each initial request.

Specify the algorithm to use when empty Authorization header is to be sent for each initial request (see above).

Optional PIDF tuple ID for outgoing PUBLISH and NOTIFY. If this value is not specified, a random string will be used.

Optional URI to be put as Contact for this account. It is recommended that this field is left empty, so that the value will be calculated automatically based on the transport address.

Specify whether support for reliable provisional response (100rel and

PRACK) should be required for all sessions of this account.

Optional URI of the proxies to be visited for all outgoing requests that are using this account (REGISTER, INVITE, etc).

Optional interval for registration, in seconds. If the value is zero, default interval will be used.

Array of credentials. Normally, if registration is required, at least one credential should be specified to successfully authenticate the service provider. More credentials can be specified, for example when it is expected that requests will be challenged by the proxies in the route set.

Realm. Use ”*” to make a credential that can be used to authenticate any challenges.

Scheme (e.g. ”digest”).

Authentication name

Type of data (0 for plaintext password).

The data, which can be a plaintext password or a hashed digest.

This option is useful for keeping the UDP transport address up to date with the NAT public mapped address. When this option is enabled and STUN is configured, the library will keep track of the public IP address from the response of REGISTER request. Once it detects that the address has changed, it will unregister current Contact, update the UDP transport address and register a new Contact to the registrar.

Set the interval for periodic keep-alive transmission for this account. If this value is zero, keep-alive will be disabled for this account. The keep-alive transmission will be sent to the registrar’s address after successful registration.

Specify the data to be transmitted as keep-alive packets. Default: CR-LF.

Specify whether secure media transport should be used for this account.

0: SRTP will be disabled and the transport will reject RTP/SAVP offer.

1: SRTP will be advertised as optional and incoming SRTP offer will be

PROVISIONING – UPGRADE AND CONFIGURATION

<srtp_secure_signaling>

<account>

Same as above for account 2

<provisioning>

<url> Place to find software upgrades. The supported URL types are: HTTP, FTP, and TFTP.

<dev_mgnt>

<use_dhcp_option>

Device management enabled, true or false.

Use DHCP option for DM server address.

<dhcp_option> Specification of which DHCP option to use.

<file_server_address> DM server address if not provided by DHCP option.

Base name of configuration files to download

Configuration file type specification

<update_interval> Timing for downloading files. Shall be entered in crontab format:

* * * * * where the * stands for minute (0–59), hour (0–23), day of month

(1–30), month (1–12), day of week (0–7) (Sunday =0 or 7)

Example:

0 6 * * * = the files are downloaded daily at 6:00.

<https_check_srv_cert> Controls server certificate, true or false.

<https_protocol> Possibility to set https protocol if open-ssl auto detection fails.

<www>

<enable_https>

<pa>

<enable_pa>

<enable_internal_mic>

<enable_internal_spkr>

<calibration> accepted.

2: The transport will require that RTP/SAVP media is used.

Specify whether SRTP requires secure signalling. This option is only used when use_srtp option above is non-zero.

0: SRTP does not require secure signalling

1: SRTP requires secure transport such as TLS

2: SRTP requires secure end-to-end transport (SIPS)

Secure communication to the 300IPx web server. Default is false.

PA enabled, true or false

Internal mic enabled when PA set to true.

Internal speakers enabled when PA set to true.

Calibration value. Note that 0 is auto, 1 is calibration value 1, 2 is calibration value 1, etc.

<ldap>

<name_filter>

<server_url>

<search_base>

LDAP enabled, true or false.

NAme filter according to RFC2254

LDAP server address

The DN (distinguished name) of the search base

PROVISIONING – UPGRADE AND CONFIGURATION

<max_hits>

<country_code>

<area_code>

<external_prefix />

<min_length_for_ext_prefix />

<exact_length_for_no_ext_prefix />

<number_prefix_for_no_ext_prefix />

<number_attributes>

<display_name>

<sort_results>

Export configuration

 Select Settings > Provisioning .

 Click on the Export button under Configuration .

The configuration file is shown in the web browser.

 Choose to save the page as an xml file.

The xml file is as default saved in your folder for downloaded files.

 If necessary, edit the xml file in a suitable editor.

Import configuration

 Click on the Browse… button under Configuration .

 Select the xml file and choose to open it.

 Click on the Import button.

PROVISIONING – UPGRADE AND CONFIGURATION

USING A DEVICE MANAGEMENT SERVER

Using Device management facilitates the upgrading and configuration of multiple conference phones. To use this feature, the Device management needs to be enabled (default) and configured and the appropriate files must be located on a server reachable from all phones, here called a device management server .

The configuration and firmware download are controlled with a configurable frequency.

The default value is once every 30 minutes. (Note: The interval can only be edited directly in the configuration file.)

Configuration priorities

Because the same configuration parameters can be entered in multiple locations, there is a need for priorities. The local configuration files have the highest priority followed by the global configuration file. Configuration entered on the unit itself, via the web interface or directly on the phone, is overridden the next time the configuration files are downloaded.

 Note one exception. Phone language entered on the unit will take precedence.

Files on the device management server

Global configuration file

The global configuration file contains the basic configuration – all settings that are common for all conference phones on your location. The easiest way to create this file is simply to configure one phone and export the configuration file or use the built in configuration file creator.

The default name for this file is kt300IPx.xml

, but it is possible to create a custom name by using the pagename element in the configuration file. It is also possible to refer to a cgi, php, asp, js or jsp file, instead of the xml file, if this is declared using the type element in the configuration file.

Konftel 300IPx searches for configuration files in the following order:

%"%

E %

PROVISIONING – UPGRADE AND CONFIGURATION

Local configuration file

The local configuration file contains configuration parameters that are unique for every conference phone. The settings in this file takes precedence over the settings in the global configuration file.

The default name for this file is kt300IPx-<MAC>.xml

, where <MAC> is the MAC address of the specific conference phone. The MAC address should be written without colons.

It is possible to create a custom name by using the pagename element in the configuration file. It is also possible to refer to a cgi, php, asp, js or jsp file, instead of the xml file, if this is declared using the type element in the configuration file.

Konftel 300IPx searches for configuration files in the following order:

%"%

5 E

E %

Firmware binary

Contains the firmware binary that will be downloaded and installed by Konftel 300IPx if the metadata file shows that this is a newer version than the present installed. The binary file can be downloaded from www.konftel.com/upgrades .

Firmware metadata file

A metadata file in xml format with information of the firmware version in the binary file.

The file is used to check if the binary file should be downloaded to the phone or not.

The name of this file shall be kt300IPx_fw_version.xml

. The file shall contain the following elements in xml format.

<firmware_version>

<version>X.X.X </version> Eg. 2.0.3

<filename>xxxx </filename> Eg. KT300IPx_v2.0.3.kt

<checksum>XXXX </checksum> MD5 checksum of the firmware binary

</firmware_version>

PROVISIONING – UPGRADE AND CONFIGURATION

Device management configuration in Konftel 300IPx

 Select Settings > Provisioning .

Device management

Enable

Use DHCP option

DHCP option

On enables Device management.

Set to on if you want to use DHCP option for DM server address.

Select the DHCP option used for the DM server address.

43: Vendor specific

56: DHCP message

60: Class Id

61: Client Id

66: Server-name

67: Bootfile-name

File server address DM server address if not provided by DHCP option.

HTTPS protocol Default is auto, but can be set to SSLv2 or SSLv3 if open-ssl auto detection fails.

Check server cert. Enable authentication with certificate.

Certificate Here you can upload a certificate to the Konftel 300IPx to be used for authentication when using Device management.

Root certificate

Private key

The public key in the root certificate is used to verify other certificates when using Device management.

Here you can upload a private key to the Konftel 300IPx to be used for authentication when using Device management.

 Read more about certificates on page 22.

PROVISIONING – UPGRADE AND CONFIGURATION

Setting up a Device management server

This is a description of a manual method to create the configuration files.

 Select Settings > Provisioning .

 Enable Device management and enter the server information.

Creating a global configuration file

 Configure one phone with the basic configuration.

 Click on Export to create a configuratuion file .

 If necessary, edit the xml file in a suitable editor.

 Some parameters can’t be entered via the web interface (update frequency, pagename, and filetype).

 To avoid confusion, it may be wise to delete the local information from the file (eg. account information).

 Save the file with the name kt300IPx.xml

on the File server address specified above.

Creating local configuration files

 Save a copy of the configuration file for each conference phone on your location with content only in the elements that shall be unique for each conference phone (eg. account information).

The default name for each file is kt300IPx-<MAC>.xml

, where <MAC> is the MAC address of the specific conference phone.

 Place the configuration files on the File server address specified above.

Firmware binary

 Place the firmware binary file on the Provisioning server.

 Create a Firmware metadata file according to page 49 and place it on the File server address specified above.

 Depending on the server used, and the security settings, there might be necessary to add the file type .kt

to the MIME settings on the server. This is easily checked by trying to download the kt file from a web browser.

MANAGING PHONE BOOK AND CONF. GUIDE

IMPORTING AND EXPORTING CONTACTS

You can import contacts from a comma separated values (CSV) file. One way of creating a CSV file is using Microsoft Excel and saving the file in CSV format.

Enter the names of the contacts in the first column and their phone numbers or URIs in the second. Do not use hyphens or spaces in the number. Note that Excel ignores zeros at the beginning of numbers. The cells must therefore be formatted as text.

It is normally possible to export contact books stored in your PC in CSV format.

 The way the number can be written may depend on the SIP PBX being used, but normally you can use:

• Complete phone number, including country code

• Phone number, including area code

• Local phone number only

• Internal speed dial number (with company’s own PBX)

• URI, e.g. sip:[email protected]

• URI with IP address, e.g. sip:10.10.1.100

(within a local network)

MANAGING PHONE BOOK AND CONF. GUIDE

Importing contacts

 Select Phone Book .

 Click on the Scroll… button under the heading Import in the web window.

 Open your CSV file.

 Click on Import .

 The name is limited to 15 characters, since the Konftel 300IPx screen cannot display more than 15 characters.

Exporting contacts

You can export your contacts as a CSV document in order to import them into another phone.

 Click on Export .

 Save the document.

MANAGING PHONE BOOK AND CONF. GUIDE

IMPORTING AND EXPORTING CONFERENCE GROUPS

The conference groups can be imported and exported in the same way as the contacts in the phone book, but use a three column csv instead of a two column csv.

CHECKING STATUS AND LOGS

The tabs under Status show the settings on corresponding tabs plus device info and logs.

DEVICE

 Select Status > Device .

The Device tab shows phone information including serial number, network port and current software version.

On phone: MENU > STATUS > DEVICE (8,6).

NETWORK

 Select Status > Network .

On phone: MENU > STATUS > NETWORK (8,2).

CHECKING STATUS AND LOGS

TIME & REGION

 Select Status > Time & Region .

On phone: MENU > STATUS > TIME (8,5).

SIP

 Select Status > SIP .

CHECKING STATUS AND LOGS

Account 1 and Account 2

On phone: MENU > STATUS > ACCOUNTS (8,1,1 and 8,1,2).

NAT traversal

On phone: MENU > STATUS > NAT TRAVERSAL (8,3).

Transport

On phone: MENU > STATUS > ACCOUNTS > TRANSPORT (8,1,3).

MEDIA

 Select Status > Media .

On phone: MENU > STATUS > MEDIA (8,4).

CHECKING STATUS AND LOGS

LOG

 Select Status > Log .

The Log tab contains five types of log messages and can be useful for trouble shooting.

 Select the log you want to review and click on the Change button.

 The Refresh button adds all new messages sent since the present log was chosen.

Application log

This shows the phone application messages. The log can be filtered from “Fatal” (only the fatal error messages) to “Trace” (all messages).

The Clear log button erases all content in the log.

SIP Trace

The SIP Trace logs the communication between the phone and the SIP PBX.

The Clear log button erases all content in the log.

It is possible to disable the SIP trace log

 Select SIP logging Off and click on the Set button.

CHECKING STATUS AND LOGS

System log

Shows the phone system messages.

Device management log

Logs the device management activities.

Upgrade log

Logs the upgrade procedure.

TECHNICAL DATA

Size

Weight

Colour

Display screen

Keypad

Anti-theft protection

Memory

Diameter 240 mm, height 77 mm

1 kg

Liquorice black

Illuminated graphics (LCD), 128x64

Alphanumerical 0–9, *, on, off, mute, hold, volume up, volume down, 5 buttons for menu navigation, line mode, conference guide

Kensington security slot

Support for SD and SDHC memory cards

(Recording capacity 35h/GB)

Connectivity

Network connection

USB connection

Bluetooth

NFC

Power supply

Extra microphones

Auxiliary

Modular 8P8C (RJ45), Ethernet 10/100 Base T

USB 2.0 Mini B.

Bluetooth v4. Support for Bluetooth Low Energy Profiles,

GAP and GATT.

Support for simplified Bluetooth pairing and connection using

NFC (near-field communications).

NFC Forum Type 4 and ISO/IEC 14443 Type A support.

IEEE 802.3af Power over Ethernet, Class III.

Optional: AC adapter 100–240 V AC/14 V DC

2 modular 4P4C

Modular 4P4C for wireless headset

Network and communication

Network addressing DHCP and static IP

NAT traversal

Connection protocol

Transport

Security

STUN, ICE and TURN

SIP 2.0 (RFC 3261 and companion RFCs)

UDP, TCP, TLS and SIPS

SRTP and TLS

Quality of Service

Audio support

DiffServ, VLAN and 802.1x

Codecs: G722, G711 A-law, G711 µ-law, G729ab

DTMF tone generation RFC, SIP INFO, In-band

Time servers NTP and SNTP

Daylight saving

Configuration

Configurable for automatic adjustments.

Via integrated web server

TECHNICAL DATA

Configuration and provisioning

Configuration Via integrated web server, HTTP or HTTPS

Device management

Separate user and administrator login for secure configuration.

Support for device management for easy configuration and updating of multiple conference phones.

Sound

Technology OmniSound ® HD

Microphone Omni-directional

Reception area

Speaker

Up to 30 metres 2 , >10 people

Frequency band 200–7000 Hz,

Volume

Equalizer

90 dB SPL 0.5 m

Three pitches: soft, neutral, bright

Environment

Temperature: 5°–40°C

Relative humidity: 20-80% condensation free

Recommended acoustic conditions:

Reverberation period: 0.5 S Rt 60

Background noise: 45 dBA

SERVICE AND GUARANTEE

If anything is wrong with your Konftel unit, please contact the place of purchase.

Guarantee

We give a two-year guarantee on our conference telephones.

Service

Service is offered after the expiration of the guarantee. Please contact your retailer and ask for a cost estimate.

Konftel support

If you have any questions about the guarantee and service, please contact your Konftel support centre.

Europe:

+46(0)90-706 489 (Monday–Friday 8.00–17.00 GMT+1)

E-mail: [email protected]

Web: konftel.com/Support/Contact-Support

USA and Canada:

+1 866-606-4728 (Monday–Friday 08.00–17.00 GMT-8)

E-mail: [email protected]

Web: konftel.com/Support/Contact-Support

APPENDIX

The OpenLDAP Public License

Version 2.8, 17 August 2003

Redistribution and use of this software and associated documentation (“Software”), with or without modification, are permitted provided that the following conditions are met:

1. Redistributions in source form must retain copyright statements and notices,

2. Redistributions in binary form must reproduce applicable copyright statements and notices, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution, and

3. Redistributions must contain a verbatim copy of this document.

The OpenLDAP Foundation may revise this license from time to time. Each revision is distinguished by a version number. You may use this Software under terms of this license revision or under the terms of any subsequent revision of the license.

THIS SOFTWARE IS PROVIDED BY THE OPENLDAP FOUNDATION AND ITS CONTRIBUTORS ``AS

IS’’ AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

ARE DISCLAIMED. IN NO EVENT SHALL THE OPENLDAP FOUNDATION, ITS CONTRIBUTORS,

OR THE AUTHOR(S) OR OWNER(S) OF THE SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT,

INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,

OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF

LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR

OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF

THE POSSIBILITY OF SUCH DAMAGE.

The names of the authors and copyright holders must not be used in advertising or otherwise to promote the sale, use or other dealing in this Software without specific, written prior permission.

Title to copyright in this Software shall at all times remain with copyright holders.

OpenLDAP is a registered trademark of the OpenLDAP Foundation.

K O N F T E L . C O M

Konftel is a leading company and the world’s fastest growing brand, within audio conferencing equipment. Since 1988, our mission has been to help people around the world to conduct meetings despite distances. Based on our success, we know that audio conferencing is a great way to save time, money and at the same time contribute to a better environment. High audio quality is essential for efficient meetings, this is why our patented audio technology OmniSound ® , is built into all Konftel Conference phones. The products are sold globally under the Konftel brand and our head-quarter is based in Sweden.

Read more about the company and products on www.konftel.com

Konftel AB, Box 268, SE-901 06 Umeå, Sweden

Tel: +46 90 70 64 89 E-mail: [email protected]

Pozdrav! Ja sam AI chatbot posebno obučen da vam pomogne s Konftel 300IPx Installation Guide. Temeljito sam pregledao dokument i mogu vam pomoći pronaći točne informacije koje su vam potrebne ili objasniti sadržaj na jasan i jednostavan način. Bez obzira tražite li smjernice o određenim značajkama, korake za rješavanje problema ili općenitu upotrebu, slobodno postavite svoja pitanja. Što više detalja pružite o svojim problemima ili potrebama, to ću vam točnije i učinkovitije moći pomoći!

Pomoćnik tipka

Pomoćnik je nedostupan. Molimo, pokušajte ponovo kasnije.

Sadržaj

Oglas