Poly Studio X50 Administrator Guide
Poly Studio X50 is a video conferencing system designed for small to medium sized meeting rooms. It combines a professional camera with high-quality audio for a seamless video conferencing experience. The system features a sleek and compact design, making it ideal for huddle rooms, conference rooms, or even home offices. It supports various connectivity options, including HDMI, USB, and Bluetooth, ensuring compatibility with multiple devices and peripherals. The Poly Studio X50 also offers features such as automatic camera framing, noise cancellation, and a wide field of view for clear and engaging video calls.
Advertisement
Advertisement
ADMINISTRATOR GUIDE 3.3.0 | January 2021 | 3725-85854-010A
Poly Video Mode
(G7500, Studio X50, and Studio
X30)
Getting Help
For more information about installing, configuring, and administering Poly/Polycom products or services, go to
Polycom Support.
Plantronics, Inc. (Poly — formerly Plantronics and Polycom)
345 Encinal Street
Santa Cruz, California
95060
© 202 1 Plantronics, Inc. All rights reserved. Poly, the propeller design, and the Poly logo are trademarks of Plantronics, Inc.
All other trademarks are the property of their respective owners.
Contents
Overview of Poly G7500, Studio X50, and Studio X30 Hardware.....................................13
LED Status Indicators for the Studio X50 and Studio X30 Systems...................... 17
Complete Setup with the System Web Interface....................................................19
Pairing IP Devices on the Link-Local Network (LLN)............................................. 20
Pairing IP Devices on the Local Area Network (LAN)............................................ 21
1
Register the System with RealPresence Resource Manager Provisioning Service..........37
Manually Assign a Host Name and Domain Name................................................ 42
Delete a Network Domain for Outbound Calls....................................................... 55
Select the Default Network Domain for Outbound Calls........................................ 55
Enable Point-to-Point Call Escalation to a RealPresence DMA Conference Call............. 55
Contents
2
Specify the Wireless Operating Channel for Miracast-Certified Devices............... 56
Configure the System Web Interface Port Lock..................................................... 67
Configure the System for H.460 Firewall/NAT Traversal........................................78
Contents
3
Using the EagleEye Cube USB Camera Microphone.......................................... 102
Configuring Video and Camera Settings......................................................103
Contents
4
Maximum Number of Supported Camera Connections........................................110
Configure Camera Tracking Settings for Studio X50 or Studio X30..................... 113
Configure Camera Tracking Settings for G7500...................................................113
Controlling the System Remotely.................................................................129
Contents
5
Updating Software in the System Web Interface..................................................132
Update System Software from a USB Storage Device........................................ 134
Update the Poly Bluetooth Remote Control Firmware......................................... 134
Manually Downgrade Software in the System Web Interface.............................. 135
Downgrade Software with a USB Flash Drive......................................................136
Consolidated System and Peripheral Device Logs.............................................. 142
IP Device Doesn’t Display On the Available Devices List.................................... 154
IP Device Paired to Inaccessible Video System...................................................155
IP Audio Device is Disconnected from G7500..................................................... 155
Contents
6
LDAP Directory Server Ignores the Minimum TLS Version Setting................................ 159
Zero Touch Onboarding Connection Fails During Initial Setup or After Reset................ 160
RealPresence Resource Manager Provisioning Fails After Downgrading Software.......161
Contents
7
Before You Begin
Topics:
•
Audience, Purpose, and Required Skills
▪
Related Poly and Partner Resources
This guide contains overview information, procedures, and references you can use to perform tasks with your video system.
The information in this guide applies to all the following Poly video systems and peripherals except where noted:
▪ Poly Bluetooth Remote Control (model: P010)
▪ Poly G7500 (model: P011)
▪ Poly Microphone IP Adapter (model: P012)
▪ Poly IP Table Microphone (model: P013)
▪ Poly IP Ceiling Microphone (model: P014)
▪ Poly Studio X50 (model: P017)
▪ Poly Studio X30 (model: P018)
▪ Poly TC8 (model: P020)
Audience, Purpose, and Required Skills
This guide is written for a technical audience.
You must be familiar with the following concepts before beginning:
• Current telecommunications practices, protocols, and principles
• Telecommunication basics, video teleconferencing, and voice or data equipment
• Open SIP networks and VoIP endpoint environments
Related Poly and Partner Resources
See the following sites for information related to this product.
▪ The Poly Online Support Center is the entry point to online product, service, and solution support information including Video Tutorials, Documents & Software, Knowledge Base, Community
Discussions, Poly University, and additional services.
▪ The Polycom Document Library provides support documentation for active products, services, and solutions. The documentation displays in responsive HTML5 format so that you can easily access and view installation, configuration, or administration content from any online device.
▪ The Poly Community provides access to the latest developer and support information. Create an account to access Poly support personnel and participate in developer and support forums. You can find the latest information on hardware, software, and partner solutions topics, share ideas, and solve problems with your colleagues.
8
Before You Begin
▪ The Poly Partners are industry leaders who natively integrate the Poly standards-based
RealPresence Platform with their customers’ current UC infrastructures, making it easy for you to communicate face-to-face with the applications and devices you use every day.
▪ The Poly Services help your business succeed and get the most out of your investment through the benefits of collaboration.
9
Getting Started
Topics:
▪
Product Overview of Poly Video Systems
▪
Powering the System On and Off
▪
The Poly G7500, Studio X50, and Studio X30 systems provide video conferencing capabilities and collaboration tools for any size meeting space or room.
Product Overview of Poly Video Systems
Poly G7500, Studio X50, and Studio X30 systems in Poly Video Mode support Poly video conferencing and content sharing features.
Poly G7500 System Features and Capabilities
G7500 systems support the following features:
▪ Peripheral cameras and microphones make the system scalable for medium rooms and up to large integrated rooms
▪ Placing and joining video calls
▪ Viewing and joining scheduled calendar meetings
▪ Managing contacts, call lists, and directories
▪ Sharing wireless and wired content
▪ Collaborating with electronic blackboards
▪ Camera tracking technology that can automatically zoom in on the person talking or frame the group of people in the room (depending on how you configure the system)
▪ Poly NoiseBlockAI, which eliminates background and extraneous sound during calls in common working environments
▪ Polycom Acoustic Fence technology, which enables video conferencing in open workspaces by capturing only the voices in a defined area
▪ HDMI: Single input and dual output
▪ Serial port connection
Poly Studio X50 Features and Capabilities
Studio X50 systems support the following features:
▪ All-in-one collaboration system for huddle rooms and small-to-medium rooms
▪ No need for a separate PC, laptop, or codec to run video-conferencing software
▪ Placing and joining video calls
▪ Viewing and joining scheduled calendar meetings
▪ Managing contacts, call lists, and directories
10
Getting Started
▪ Sharing wireless and wired content
▪ Collaborating with electronic blackboards
▪ Built-in 4K camera with ultra-wide 120-degree field of view
▪ Camera tracking technology that automatically frames the group of people in the room
▪ Hi-fidelity, built-in stereo microphones that pick up sound within 7.62 m (25 ft) and use spatial audio for life-like presence and clarity
▪ Poly NoiseBlockAI, which eliminates background and extraneous sound during calls in common working environments
▪ Dual stereo speakers
▪ HDMI: Single input and dual output
Poly Studio X30 Features and Capabilities
Studio X30 systems support the following features:
▪ All-in-one collaboration system for huddle rooms and small-to-medium rooms
▪ No need for a separate PC, laptop, or codec to run video-conferencing software
▪ Placing and joining video calls
▪ Viewing and joining scheduled calendar meetings
▪ Managing contacts, call lists, and directories
▪ Sharing wireless and wired content
▪ Collaborating with electronic blackboards
▪ Built-in 4K camera with ultra-wide 120-degree field of view
▪ Camera tracking technology that automatically frames the group of people in the room
▪ High-fidelity, built-in stereo microphones that pick up sound within 4.57 m (15 ft) and use spatial audio for life-like presence and clarity
▪ Poly NoiseBlockAI, which eliminates background and extraneous sound during calls in common working environments
▪ Single mono speaker
▪ HDMI: Single input and output
Administrator Features and Capabilities
The G7500, Studio X50, and Studio X30 systems provide features for administrators to deploy, manage, and access systems.
These systems provide the following features and capabilities:
▪ Remote access for managing standalone systems
▪ Provisioning with Polycom RealPresence Resource Manager to support single system, small business, and large multisite enterprise deployments
▪ SNMP reporting and remote logging
▪ Industry-standard security techniques, including 802.1X authentication
▪ Polycom platform on-premises infrastructure and management solutions
▪ Standards-based video conferencing (SIP and H.323)
▪ Customizable home screen and monitor layouts
11
Getting Started
Powering the System On and Off
The system turns on when you plug it into a power source. The system doesn’t have a power button, so you must unplug the power cable to power it off.
Note: Don’t power off the system during maintenance activities (for example, while a software update is in progress).
Related Links
Restart the System on page 136
Navigating the System
You can navigate the system using the system web interface.
Access the System Web Interface
Access the system web interface to perform administrative tasks.
The system web interface enables you to do the following actions:
▪ Finish setting up your system.
▪ Remotely configure and manage your system. Unlike the local interface, you can configure every setting through the system web interface.
▪ Control certain user functions of the system (such as placing calls and ending content sessions).
▪ Manage contacts.
Procedure
1.
Open a web browser and enter the system IP address.
When setting up your system, the onscreen instructions display the IP address to use.
2.
Enter the user name (the default is admin ).
3.
Enter the password (the default is the last six characters of your system’s serial number).
Related Links
Complete Setup with the System Web Interface on page 19
12
Setting Up the System
Topics:
▪
Overview of Poly G7500, Studio X50, and Studio X30 Hardware
▪
▪
Completing Initial System Setup
▪
See the setup sheets applicable to your video system and its peripheral devices, including cameras, monitors, microphones, and controllers.
Overview of Poly G7500, Studio X50, and Studio X30
Hardware
The following figures and tables provide information about hardware features available on your system.
Poly G7500 System Ports
The following illustration and table explain the ports on the back panel of your G7500 system.
G7500 System Back Panel Port Descriptions
Ref. Number
6
7
4
5
1
2
3
Port Description
3.5 mm audio line out
3.5 mm audio line in
Security lock
Mini-DIN/RS-232 serial port
USB 3.0 port (host)
USB-C port
HDCI input for Polycom cameras
13
Ref. Number
8
9
10
11
12
13
Port Description
HDMI input for sharing content (for example, from a laptop)
HDMI output for the primary monitor
HDMI output for the secondary monitor
LAN connection for the system
Link-local network (LLN) connections for IP-based peripheral devices
Power
Related Links
Specify the Primary and Fence Microphones
on page 97
LED Status Indicators for the System LAN Ports
on page 158
Poly Studio X50 System Ports
The following illustration and table explain the ports on your Poly Studio X50 system.
Setting Up the System
Poly Studio X50 System Port Descriptions
Ref. Number
1
2
3
4
5
6
7
8
Port Description
3.5 mm audio line in (reserved for future use)
3.5 mm audio line out
Polycom RealPresence Debut expansion microphone connection
USB-C port
USB ports
Factory restore pinhole
Security lock (on the back flat section of the system)
HDMI output for the secondary monitor
14
Ref. Number
9
10
11
12
Port Description
HDMI output for the primary monitor
HDMI input for sharing content (for example, from a laptop)
LAN connection for the system
Power
Poly Studio X30 System Ports
The following illustration and table explain the ports on your Poly Studio X30 system.
Setting Up the System
Poly Studio X30 System Port Descriptions
Ref. Number
1
2
3
4
5
6
7
8
Port Description
Power
Security lock
Factory restore pinhole
HDMI output for the primary monitor
USB-C port
HDMI input for sharing content (for example, from a laptop)
USB port
LAN connection for the system
15
Setting Up the System
LED Status Indicators
The following figures display the LEDs on your systems. The tables list each LED indicator and its associated status.
LED Status Indicators for the G7500 System
Use the LED on the front right corner of the codec to get information on the state of your system.
G7500 System LED Status Indicators
Indicator Status
Blinking white
Solid white
Solid green
Blinking amber
Powering on
Working normally
In a call
Update in progress
Solid amber
Blinking red
Solid red
Sleeping
Error preventing normal operation
Muted microphone
Related Links
Factory Restore the System on page 137
16
Setting Up the System
LED Status Indicators for the Studio X50 and Studio X30 Systems
The system provides an LED light bar above the camera to help you understand the system’s behaviors.
Basic Studio X50 and Studio X30 LED Indicators and Status
Indicator Position Status
Solid white
Blinking blue
Solid blue for 3 seconds
Blinking green
Solid green
Solid green
All
Twelve in the middle
All
All
All
Four to eight (when in the middle), indicating the tracked speaker or the direction of the camera
Boot initialization in progress
Bluetooth in discovery
Bluetooth paired
Incoming call
Outgoing call
Working
The lights are green with supported applications in the following cases:
▪ Tracking people in group framing and speaker tracking mode
▪ Indicating the direction of the camera that you customize in pan-tilt-zoom (PTZ) mode
Solid amber
Pulsing red
Pulsing green
Solid white for 3 seconds
Solid red
Solid red
Pulsing amber
Blinking red
Blinking amber
Twelve in the middle
Twelve in the middle
Twelve in the middle
Twelve in the middle
All
Four in the middle
All
All
Twelve alternating
Standing by
The system is in sleep mode with no active video output.
Call on hold
Call on hold (by far site)
Saving a preset
Muted microphone
Muted camera. The muted microphone LEDs take precedence and cover the camera mute LEDs.
Firmware update in progress
Error preventing normal operation
In a POST sequence, at least one test resulted in a warning error. The system continues to blink amber, but initializes after the sequence is complete if no severe errors occur.
17
Setting Up the System
Indicator
Blinking red
Position
Twelve alternating
Status
In a POST sequence, at least one test resulted in a severe error. The system continues to blink red and doesn’t start up.
Completing Initial System Setup
When you power on the system for the first time (or after a system reset or factory restore), you must complete the system setup process.
This process involves the system contacting the Poly Zero Touch Onboarding (ZTO) server to determine its mode of operation: Poly Video or Partner mode.
Before you begin:
▪ During initial setup, you must have a DHCP server in your environment to ensure the system gets an IP address. (You can configure the system with a static IP address later if needed.)
▪ Configure your firewall and/or web proxy so that the system can communicate with the following services on port 443:
◦ ZTO ( zto.poly.com
)
◦ Poly Lens ( lens.poly.com
)
◦ Polycom software download ( downloads.polycom.com
)
▪ You must have an NTP server on your network for the system to connect with the ZTO service.
▪ Your conferencing application may require a separate license or subscription for call-related features. Contact your conferencing partner for information.
The system boots directly into a conferencing application. If the ZTO specified conferencing application isn’t available in the current software, the system performs a software update. If after update, the specified conferencing application isn’t available, the system defaults to Poly Video mode. To change the conferencing application, go to the system web interface Provider section and select an option.
Required Steps Following Initial System Setup
After going through the system setup process, you also must manually configure or provision the following system settings for an optimal deployment and user experience:
▪ Local administrator password : For security reasons, don’t use the default password.
▪ Country : If you use the default country setting, the system’s Wi-Fi settings may not be optimal for your country or region.
▪ Timezone : Depending on the system location, using the default timezone setting may display the incorrect time on the system (including for scheduled calendar events).
Registering the System with Poly Lens
Poly Lens provides cloud-based management and insights for your system.
You can register your system with Poly Lens during system setup or on the Poly Lens registration page.
For more information, see Poly Lens Help .
18
Setting Up the System
Register During System Setup
You can register with Poly Lens during system setup.
Procedure
1.
When prompted to register with Poly Lens, do one of the following:
▪ Scan the registration QR code with your mobile device.
▪ Enter the registration URL in a browser.
▪ Select the registration link in the system web interface.
2.
Follow the instructions to finish registering your system.
Your system remains registered with Poly Lens even after a reset or factory restore.
Related Links
on page 19
Verify Poly Lens Registration Status
on page 161
Register Later
If you don’t register during setup, you can do so on the Poly Lens registration page.
Procedure
1.
Go to https://lens.poly.com/go .
2.
Follow the instructions to register your system.
Related Links
Register During System Setup on page 19
Verify Poly Lens Registration Status
on page 161
Complete Setup with the System Web Interface
To finish setting up your system, manually configure the system’s local administrator password, country, and timezone.
Procedure
1.
Power on the system and follow the onscreen instructions.
2.
Log in to the system web interface.
3.
Go to Security > Local Accounts to change the local administrator password from the default value (the last six characters of your system’s serial number).
4.
Go to General Settings > My Information > Location to specify the country where your system is located.
5.
Go to General Settings > Date and Time to set the timezone for your system.
Initial system setup is complete. You can start using the system.
Related Links
Access the System Web Interface on page 12
Create Local Administrator Credentials on page 60
Set the System Location on page 32
Set the Date and Time on page 31
19
Setting Up the System
Complete Setup with Provisioning
To finish setting up your system, provision the system’s local administrator password, country, and timezone.
Make sure to configure your provisioning server (for example, RealPresence Resource Manager) ahead of time so that it recognizes and works with your endpoint.
Procedure
1.
Power on the system and follow the onscreen instructions.
2.
Log in to the system web interface and go to Servers > Provisioning Server to register the system with your provisioning service.
3.
In your provisioning template configuration file, set the following parameters:
See the Poly VideoOS Parameter Reference Guide on the Polycom Documentation Library for detailed descriptions about configuration parameters and their permitted values.
▪ sec.auth.admin.password
▪ device.local.country
▪ device.local.timezone
The provisioning service automatically configures these settings on your system.
Initial system setup is complete. You can start using the system.
Related Links
Register the System with RealPresence Resource Manager Provisioning Service
on page 37
Download a Provisioning Template Configuration File on page 38
Managing Peripheral Devices
You can pair, monitor, and unpair the devices connected to your system in the system web interface.
Pairing IP Devices on the Link-Local Network (LLN)
IP devices automatically pair with your system when connected to either of the system’s three link-local network (LLN) ports.
The Studio X50 and Studio X30 don't support LLN connections.
You can pair the following devices to your G7500 system with an LLN connection:
▪ Poly IP Table Microphone
▪ Poly IP Ceiling Microphone
▪ Poly Microphone IP Adapter
While not recommended, you can turn off automatic pairing and manually pair devices using the system web interface.
20
Setting Up the System
Automatically Pair an IP Device
By default, IP devices automatically pair when connected to a system LLN port. For example, when you plug in a Polycom IP Table Microphone to the back of the system, it’s ready to use.
Procedure
» Connect the device to an LLN port on the back of your system.
If paired successfully, the device displays under Connected Devices with a Connected status. If a device shows a Disconnected status, this indicates that pairing wasn’t successful.
Disable Automatic Pairing
You can disable automatic pairing with your system’s link-local network (LLN) connections.
If you disable automatic pairing, you must manually pair a device in the system web interface to use the device.
Procedure
1.
In the system web interface, go to General Settings > Device Management .
2.
Clear the Enable New Device Auto-Pairing check box.
Manually Pair an IP Device
If you turn off automatic pairing of link-local network (LLN) connections, you must manually pair an IP device to use it with your system.
Know the MAC address of the device you’re pairing.
Procedure
1.
Connect the device to an LLN port on the back of your system.
2.
In the system web interface, go to General Settings > Device Management .
3.
Under Available Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Pair .
If paired successfully, the device displays under Connected Devices with a Connected status. If a device shows a Disconnected status, this indicates that pairing wasn’t successful.
Pairing IP Devices on the Local Area Network (LAN)
Supported IP devices can pair to your video system over your primary local area network (LAN).
Pairing a Poly Trio
You can use a Poly Trio system as a controller and audio device with a Poly Studio X50, Studio X30, or
G7500 video system. See your system’s latest Release Notes for supported Poly Trio models.
You pair the phone as an IP device over your primary network. When paired, from the video system web interface you can configure audio to play from the phone speakers, Studio X50 or Studio X30 system speakers, or monitors connected to the video system. The Poly Trio microphones are always on.
21
Setting Up the System
Configure a Poly Trio for Pairing
To pair with a video system, you must configure your Poly Trio system’s base profile and device role.
Procedure
1.
On the phone’s local interface, go to Settings > Advanced > Administration Settings >
Network Configuration .
2.
Set the Base Profile to Generic .
3.
After the phone restarts, go to Settings > Advanced > Networked Devices .
4.
Set Networked Device Role to Device .
The system automatically restarts.
Pair an IP Device on the Primary Network
Some devices connected to your primary network can pair with your video system. For example, this feature enables you to pair a Poly TC 8 device without a physical connection to the video system.
Note: Pairing IP audio devices and cameras over the primary network isn’t supported.
To pair, the device must be on the same subnet as the video system and the following network components must be unblocked:
▪ Multicast address 224.0.0.200
▪ TCP port 2000
▪ UDP port 18888
Know the MAC address of the device you’re pairing.
A device may pair automatically after connecting to the network. However, you may need to manually pair a device in the following situations:
▪ The device doesn’t automatically pair during setup with the system you purchased.
▪ You want to pair the device with a different system.
▪ You want to pair multiple similar devices (for example, to control the system with more than one
Poly TC8 device).
Note: The Enable New Device Auto-Pairing setting applies only to link-local network (LLN) devices; not devices connected to the primary network.
Procedure
1.
Connect the device you want to pair to an Ethernet port in the room.
2.
In the system web interface, go to General Settings > Device Management .
3.
Under Available Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Pair .
If paired successfully, the device displays under Connected Devices with a Connected status. If a device shows a Disconnected status, this indicates that pairing wasn’t successful.
If pairing isn’t successful, check the network connection, the configuration of your device, and the system you’re pairing with.
22
Setting Up the System
Unpair an IP Device
You must unpair an IP device if you no longer want to use it with a particular video system.
Don’t unpair devices if you plan to use them with the same system. For example, if you move your videoconferencing equipment to another room, just disconnect and reconnect the devices in the new location.
Note: If you unpair a link-local network (LLN) device, it won’t automatically pair again with the same system.
Procedure
1.
In the system web interface, go to General Settings > Device Management .
2.
Under Connected Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Unpair .
The unpaired device moves from Connected Devices to Available Devices (which shows discovered devices you can pair with the system).
Related Links
Move a Microphone Adapter to Another Location on page 29
Connect a USB Device
You can use some devices, such as a Windows or Mac laptop, with a USB connection to your video system. See the latest Release Notes for supported USB devices.
Procedure
» Connect the device to a USB port on the back of your system.
Poly Bluetooth Remote Control
You can use the Poly Bluetooth Remote Control with your system.
Use the system web interface to perform the following tasks:
▪ Configure a remote control’s button behavior.
▪ Pair and unpair a remote control.
Note: The remote control included with your G7500 system purchase is paired and ready to use without any extra setup.
▪ View the remote control name, pairing status, and battery level.
Related Links
Disable Wireless Options on page 57
Update the Poly Bluetooth Remote Control Firmware
on page 134
Configure Remote Control Behavior
You can customize how the remote control paired to your system behaves.
Procedure
1.
In the system web interface, go to General Settings > System Settings .
23
Setting Up the System
2.
Configure the following settings:
Setting
Keypad Audio Confirmation
Numeric Keypad Function While In a Call
#/@ Button function
Description
Specifies whether to play a voice confirmation of numbers selected with the remote control or keypad.
Specifies whether pressing number buttons on the remote control or keypad moves the camera to presets or generates touch tones (DTMF tones). If you set this option to Presets , you can generate
DTMF tones by pressing the # key on the remote control while in a call.
Specifies the behavior of the # button on the remote control.
▪ #, then @ : Pressing the # button once displays the hash symbol. Pressing the # button twice quickly displays the @ symbol.
▪ @, then # : Pressing the # button once displays the @ symbol. Pressing the # button twice quickly displays the # symbol.
*/. Button function Specifies the behavior of the * button on the remote control:
▪ * then .
: Pressing the * button once displays the
* symbol. Pressing the * button twice quickly displays a period.
▪ . then * : Pressing the * button once displays a period. Pressing the * button twice quickly displays the * symbol.
3.
Select Save .
Pair a Remote Control
In most cases, you must pair the remote control after setting up your system. To use a different remote control, you must pair it with the system.
The system doesn’t support multiple remote controls. You can pair only one at a time.
Procedure
1.
Depending on your system, do one of the following:
▪ (G7500 only) On the front of the system, press the Bluetooth button.
24
Setting Up the System
▪ (All systems) In the system web interface, go to General Settings > Remote Control and select Start Discovery Mode .
2.
Follow the instructions on the pairing screen.
The screen displays either a successful or unsuccessful pairing notification.
3.
Depending on the pairing result, do one of the following:
▪ Successful pairing : The remote control is ready to use. You can view the remote control name, battery level, and status of the device in the system web interface.
▪ Unsuccessful pairing : Try the following solutions:
◦ Remove the batteries from the remote control and reinsert after five seconds.
◦ Move your remote control closer to the system than other remote controls and try to pair again.
Unpair a Remote Control
You can unpair a remote control if you no longer want to use it with your system.
Procedure
1.
In the system web interface, go to Remote Control .
2.
Select Unpair Remote .
The remote control unpairs.
IP Microphones
You can use a combination of IP-based Polycom table and ceiling microphones with your G7500 system.
These microphones also support Polycom Acoustic Fence technology.
The Studio X50 and Studio X30 don’t support IP microphones.
You can connect up to three of the following microphones directly to your system:
▪ Poly IP Table Microphone
▪ Poly IP Ceiling Microphone
Related Links
Factory Restore a Table Microphone on page 138
Factory Restore a Ceiling Microphone on page 138
25
Poly IP Table Microphone Ports
The following illustration and table explain the ports on the table microphone.
Setting Up the System
Poly IP Table Microphone Port Descriptions
Ref. Number
1
2
3
Port Description
Micro-USB debugging port
Factory restore pinhole
Link-local network (LLN) connection
Poly IP Ceiling Microphone Ports
The following illustration and table explain the ports on the ceiling microphone.
Poly IP Table Microphone Port Descriptions
Ref. Number
1
2
3
Port Description
Link-local network (LLN) connection
Microphone cable connector
Microphone cable connector
26
Setting Up the System
LED Status Indicators for IP Microphones
Use the LED on the IP table and ceiling microphones to get information on the state of each device.
IP Microphone LED Status Indicators
Indicator
Solid then blinking white
Solid red
Solid green
Status
Powering on
Muted microphone
To avoid distraction, the ceiling microphone doesn’t display red when muted.
In a call and microphone not muted
To avoid distraction, the ceiling microphone doesn’t display green in a call.
Update in progress Alternating blinking and solid amber
Blinking amber
Blinking blue
Solid blue
Factory restore in progress
Ready to pair
Paired successfully
Poly Microphone IP Adapter
The Poly Microphone IP Adapter lets you connect non-IP Polycom audio devices with your system. For example, if your Polycom microphone uses a Walta-Walta cable, you can connect it to your system through the microphone adapter.
The Studio X50 and Studio X30 don’t support the microphone adapter.
See the latest video system Release Notes for which audio devices work with the microphone adapter.
Note: You can’t use the microphone adapter with IP microphones connected to your system.
Related Links
Configuring the Microphone Adapter on page 95
Factory Restore a Microphone Adapter
on page 140
27
Microphone Adapter Ports
The following illustration and table explain the ports on the microphone adapter.
Setting Up the System
Microphone Adapter Port Descriptions
Ref. Number
3
4
1
2
5
6
Port Description
USB 2.0 debugging port
Polycom microphone Walta-Walta connector
Power
Link-local network (LLN) connection
LED status indicator
Factory restore pinhole
LED Status Indicators for the Microphone Adapter
Use the LED to get information on the state of your microphone adapter.
Microphone Adapter LED Status Indicators
Indicator Status
Blinking white Powering on
28
Setting Up the System
Indicator
Solid white
Blinking blue
Solid blue
Blinking green and blue
Status
On
Ready to pair
Paired successfully
Update in progress
Factory restore in progress
Powering the Microphone Adapter On and Off
When plugged in to a power source, the microphone adapter is on. The system doesn’t have a power button, so you must unplug the power cable to power it off.
Don’t power off the system during maintenance activities (for example, while a software update is in progress).
Connecting Microphones to the Microphone Adapter
To connect a non-IP Polycom microphone to the microphone adapter, use a RealPresence Group Series microphone array Walta-Walta cable. You can then daisy chain up to three more microphones to the one directly connected to the adapter.
For more information, see the Polycom Microphone IP Adapter Setup Sheet .
Move a Microphone Adapter to Another Location
You might need to move your microphone adapter from a system in one room to a system in another room.
Procedure
1.
In the system web interface, unpair the microphone adapter from the system.
2.
Move the microphone adapter to the new location.
3.
Use the system web interface to pair the microphone adapter to the new system.
Related Links
on page 23
29
Configuring General Settings
Topics:
▪
▪
▪
▪
▪
Set the Local Interface Language
▪
▪
Configure Out of Office Settings
▪
Change Studio X50 and Studio X30 LED Bar Brightness
▪
Change Conferencing Partner Application
▪
Set the Conferencing Provider to Device Mode
▪
▪
System Usage Data Collected by Poly
General settings include your system name, location, and language preferences.
Name the System and Room
Name your system and assign it a room name.
The room name displays on call participants’ screens.
Procedure
1.
In the system web interface, go to General Settings > System Settings .
2.
Edit the Device Name , Room Name , or both.
The system supports double-byte characters. The Device Name field accepts all alphanumeric and special character formats (including foreign language characters) and has a maximum limit of
40 characters.
3.
Select Save .
Provide Contact Information
Enter contact information for your system so that users know whom to call when they need assistance.
Procedure
1.
In the system web interface, go to General Settings > My Information .
2.
Go to Contact Information .
3.
Configure the following settings:
30
Configuring General Settings
▪ Contact Person
▪ Contact Number
▪ Contact Email
▪ Contact Fax
▪ Tech Support : Specifies a second contact in case someone needs additional support.
▪ Site
▪ Organization
▪ City
▪ State/Province
▪ Country
4.
Select Save .
Set the Date and Time
Change the date and time settings in the system web interface.
Procedure
1.
In the system web interface, go to General Settings > Date and Time .
2.
Configure the following settings (your changes save automatically):
Setting
Date Format
Time Format
Auto Adjust for Daylight Saving Time
Time Zone
Time Server
Primary Time Server Address
Secondary Time Server Address
Current Date and Current Time
Description
Specifies how the date displays.
Specifies how the time displays.
When enabled, the system clock automatically adjusts for daylight saving time.
Specifies the time difference between GMT and your location.
Specifies if you want to automatically or manually configure the system to use a time server. You can also select Off to manually enter the date and time.
Specifies the address of the primary time server your system uses when you set Time Server to
Manual .
Specifies the address of the time server your system uses when the Primary Time Server
Address doesn’t respond. This is an optional field.
If you set Time Server to Manual or Auto , the system doesn’t display these settings.
If you set Time Server to Off , you can configure
Current Date and Current Time .
31
Configuring General Settings
Related Links
Complete Setup with the System Web Interface on page 19
Set the System Location
Specify the country and country code where the system is located.
Procedure
1.
In the system web interface, go to General Settings > My Information .
2.
Go to Location .
3.
Configure the following settings (your changes save automatically):
Setting
Country
Description
Specifies the country where the system is located.
Changing the country automatically adjusts the country code associated with your system.
Country Code Displays the country code associated with the system location.
Related Links
Complete Setup with the System Web Interface on page 19
Set the Local Interface Language
Change the language that users see on the system local interface.
Procedure
1.
In the system web interface, go to General Settings .
2.
Select System Language and choose a language.
Configure Sleep Settings
Configure when you want your device to go to sleep after a period of inactivity. Sleep mode can help prevent monitor burn-in.
Procedure
1.
In the system web interface, go to General Settings > System Settings .
2.
Configure the following settings:
Setting
Display
Description
Choose if the system displays a black screen or a no signal message.
32
Configuring General Settings
Setting
Time Before System Goes to Sleep
Description
▪ Select how long the device can be idle before it goes to sleep.
▪ Select Off to disable system sleep mode.
Enable Mic Mute in Sleep Mode Select the check box to mute your microphones while the system is asleep.
3.
Select Save .
Related Links
Issues When the System is Sleeping or Waking on page 162
Configure General Audio Settings
on page 93
Configure General Camera Settings
on page 107
Configure Out of Office Settings
Configure when your system goes to sleep after normal office hours. The system goes to sleep 3 minutes after out of office hours begin.
Putting the system to sleep prevents screen burn-in and excess power consumption.
Procedure
1.
In the system web interface, go to General Settings > System Settings .
2.
Select the Out of Office Hours check box and configure the following settings:
Setting
Start Time
End Time
3.
Select Save .
Description
When out of office hours begin
When out of office hours end
Change Studio X50 and Studio X30 LED Bar
Brightness
If you’re sitting close to the system and monitor, bright LEDs can affect the video white balance, causing odd coloration of the video output.
To correct issues such as this, adjust your system's LED bar brightness.
Procedure
1.
In the system web interface, go to General Settings > System Settings .
2.
Slide the LED Bar Brightness slider to the left to lower the brightness and to the right to increase the brightness.
3.
Select Save .
33
Configuring General Settings
Change Conferencing Partner Application
You can switch the conferencing partner application your system uses (for example, Poly or Zoom
Rooms).
Important: Changing the conferencing provider causes a system reset. All settings return to default values, and the system deletes any saved information.
Procedure
1.
Write down your system’s IP address and last six characters of the serial number. You must have this information to complete your setup.
a.
In the system web interface, go to Dashboard > System Detail to access the serial number information.
b.
Go to Dashboard > Network Settings to access your system’s IP address.
2.
Go to General Settings > Provider .
3.
Select your provider.
4.
Select Save and then Reset .
The system resets, the administrator password reverts to the default (last six characters of the serial number), and nonfactory paired peripherals unpair.
5.
Log in to the system web interface using the default administrator username and password
(admin/ <last six characters of the serial number> ).
6.
Change the administrator password and select Next .
If you aren’t switching to Teams, your system restarts. If you’re switching to Teams, go to the next step.
7.
(Applies only to Teams) Select a language from the list and select Reboot .
The system restarts.
Related Links
Reset System Settings on page 136
Set the Conferencing Provider to Device Mode
Choosing Device Mode as your provider locks your system in Poly Device Mode.
Connect the system to your network using an Ethernet cable, and complete the initial system setup. The system requires an active network connection after switching your provider to Device Mode.
Important: Changing the provider causes a system reset. All settings return to default values, and the system deletes any saved information.
Note: You can’t change the provider to Device Mode using a provisioning method.
Changing the provider to Device Mode disables Airplay and Miracast in the system web interface.
34
Configuring General Settings
Procedure
1.
In the system web interface, go to General Settings > Provider .
2.
From the Provider drop-down menu, choose Device Mode .
3.
Select Save and Reset .
The system resets all settings to their default configurations, the administrator password resets to the default password (last six characters of the serial number), and any nonfactory paired peripherals unpair from the system.
The system boots into Device Mode. Connect a computer to the system to join meetings or place calls using the system as an audio and video peripheral.
Disable Poly Device Mode
You can disable Poly Device Mode, which lets you use the system as an external camera, microphone, and speaker for a USB-connected laptop.
Disabling Device Mode requires a system restart.
Procedure
1.
In the system web interface, go to General Settings > System Settings > Collaboration Tools .
2.
Clear the Enable Device Mode check box and select Save .
System Usage Data Collected by Poly
By default, your system sends usage data to Poly to help improve its products and services.
For information about the data that Poly collects, see the system Privacy Guide .
Send Usage Data to Polycom
You can help Polycom improve its products and services by allowing the collection of usage data from your system.
With your agreement, the system sends the following information to Polycom Cloud Services and the
Device Analytics service:
▪ Basic device information, including hardware and software versions
▪ Basic device configuration data
▪ Data and statistics related to device or feature usage
▪ Device health data, including CPU and memory usage
Procedure
1.
In the system web interface, go to Servers > Cloud > Preferences .
2.
Click the link to read the “Terms and Conditions”.
3.
Select the check box to agree to the data collection.
35
Using a Provisioning Service
Topics:
▪
Register the System with RealPresence Resource Manager Provisioning Service
▪
Download a Provisioning Template Configuration File
▪
Register the System with the Poly Lens Provisioning Service
▪
Register the System Using DHCP Auto Discovery
Provisioning services, such as Poly Lens or Polycom RealPresence Resource Manager, enable you to deploy enterprise-wide configurations to your systems.
You can use a provisioning service to perform the following actions with your system and some of its paired devices:
▪ Automatically configure settings
▪ Automatically update software
Remember the following when you register your system to a provisioning service:
▪ Provisioned settings are read-only in the system web interface. Settings that are dependent on provisioned values are read-only or unavailable.
▪ The system automatically checks for and runs software updates every time it restarts and at an interval set by the service.
▪ If a registered system fails to detect the service when it restarts or checks for updates, an alert displays on System Status .
▪ If the system loses registration with the service, it continues to use the most recent configuration it received.
▪ The system looks for provisioning options during initial system setup in the following order: Zero
Touch Onboarding, Poly Lens, then DHCP. If the system doesn’t find provisioning information for an option, it automatically goes to the next one.
Note: To maintain call connection, you can't configure provisioning settings during a call.
For a list of configuration parameters, see the Poly VideoOS Configuration Parameters Reference Guide on the Poly Documentation Library .
Related Links
on page 131
on page 68
Choose How to Get Software Updates
on page 132
36
Using a Provisioning Service
Register the System with RealPresence Resource
Manager Provisioning Service
Before you can provision a system, you must register it with a provisioning service.
Note: Make sure to configure your provisioning server (for example, RealPresence Resource Manager) ahead of time so that it recognizes and works with your endpoint.
For information on how to provision your system with RealPresence Resource Manager, see the Polycom
RealPresence Resource Manager System Operations Guide Polycom RealPresence Resource Manager
System Operations Guide .
Procedure
1.
In the system web interface, go to Servers > Provisioning Server .
2.
Select Enable Provisioning .
3.
Select Load Discovered Information .
The registration fields update automatically if your system detects a provisioning server.
4.
Optional: If your system didn’t detect a provisioning server, complete the following fields (contact your network administrator for help):
Setting Description
Authentication Type
Server Address
The type of authentication the system uses to connect to the provisioning server.
Address of the system running the provisioning service. The format is https://< server >/ucservice . For example, https:// video.myrpp.poly.com/ucservice .
Domain Name Domain for registering with the provisioning service. This option doesn’t display if you select Basic as the authentication type.
User ID for registering with the provisioning service.
User Name
Password Password for registering with the provisioning service.
5.
Select Save .
6.
Verify that Registration Status changes from Pending to Registered .
It might take a minute or two for the status to change.
Related Links
Check Provisioning Results on page 153
Complete Setup with Provisioning
on page 20
Downgrading Software on page 135
RealPresence Resource Manager Provisioning Fails After Downgrading Software
on page 161
37
Using a Provisioning Service
Download a Provisioning Template Configuration File
Template configuration files show how parameters are set on your system. You can use this template to modify parameters and import the changes to your provisioning server.
If you’re provisioning your system with a RealPresence Resource Manager system, you can use the template to create a UC endpoint configuration profile to associate with your systems. For more information, see the Polycom RealPresence Resource Manager System Operations Guide .
Procedure
1.
In the system web interface, go to Servers > Provisioning Server .
2.
Select Download Profile Template .
The template saves to your local device as a .cfg
file.
Related Links
Complete Setup with Provisioning
on page 20
Register the System with the Poly Lens Provisioning
Service
Before you can provision a system, you must register it with Poly Lens.
For information on how to provision your system with Poly Lens, see the Poly Lens Help Documentation .
Procedure
1.
In the system web interface, go to Servers > Provisioning Server .
2.
Select Enable Provisioning .
3.
In the Authentication Type field, select Basic .
4.
Optional: If your system didn’t detect a provisioning server, complete the following fields (contact your network administrator for help):
Setting Description
Server Address Address of the system running the provisioning service.
User Name User ID for registering with the provisioning service.
Password Password for registering with the provisioning service.
5.
Select Save .
6.
Verify that Registration Status changes from Pending to Registered .
It might take a minute or two for the status to change.
38
Using a Provisioning Service
Register the System Using DHCP Auto Discovery
You can use DHCP to automatically register your system to a provisioning service before initial system setup or after a system reset.
The system looks for option number 160 and 66 (in that order) in the response received from the DHCP server. The DHCP server should send address information that matches one of the address formats.
Procedure
» Configure your DHCP server to send the username, password, and URL of your provisioning service in the following format:
▪ For Polycom RealPresence Resource Manager use https://
<shareduserID>:<sharedpassword>@<server>/ucservice
For example, https://mySharedID:[email protected]/ucservice
▪ For Poly Lens use https://
<ServerUser>:<ServerPassword>@<ServerAddressURL>
For example, https://
ServerUser:[email protected]
39
Configuring Network Settings
Topics:
▪
Configuring Wired LAN Settings
•
▪
▪
Configure Network Quality Settings
▪
▪
•
▪
Enable Point-to-Point Call Escalation to a RealPresence DMA Conference Call
▪
Network settings include the system primary (wired LAN) and secondary (Wi-Fi) network configurations.
You also can register your system with SIP and H.323 for calling.
Configuring Wired LAN Settings
You can set the wired LAN properties for your system.
Related Links
LED Status Indicators for the System LAN Ports
on page 158
Automatically Obtain IPv4 Address Settings
Your system by default gets its IP address information automatically. If this behavior is turned off, you can turn it back on.
You must have a DHCP server deployed in your environment.
Procedure
1.
In the system web interface, go to Network > Primary Network > IP Addresses .
2.
For IP Address , select Obtain IP address automatically .
Some of your IP address settings populate automatically and are read-only.
3.
Select Save .
Manually Configure IPv4 Address Settings
You can manually specify the system’s IPv4 address settings.
Procedure
1.
In the system web interface, go to Network > Primary Network > IP Addresses .
2.
For IP Address , select Enter IP address manually .
40
Configuring Network Settings
3.
Configure the following settings:
Setting
Your IP Address is
Subnet Mask
Default Gateway
Description
Specifies the system IP address.
Specifies the subnet mask assigned to your system.
Specifies the default gateway assigned to your system.
4.
Select Save .
Automatically Obtain IPv6 Address Settings
You can enable your system to use IPv6 addresses and get IP address information automatically.
You must have a DHCP server deployed in your environment.
Warning: If your network environment only supports IPv6, you must manually configure a static IPv4 address. For example, manually configure the IPv4 IP address to 192.168.0.4.
Procedure
1.
In the system web interface, go to Network > Primary Network > IP Addresses .
2.
Select the Enable IPV6 checkbox.
3.
For IP Address , select Obtain IP address automatically .
4.
Optional: Select the Enable SLAAC checkbox to enable the system to use stateless address autoconfiguration (SLAAC) to automatically obtain IP address.
Manually Configure IPv6 Address Settings
You can manually configure the system’s IPv6 address settings.
Warning: If your network environment only supports IPv6, you must manually configure a static IPv4 address. For example, manually configure the IPv4 IP address to 192.168.0.4.
Procedure
1.
In the system web interface, go to Network > Primary Network > IP Addresses .
2.
Select the Enable IPV6 checkbox.
3.
For IP Address , select Enter IP address manually .
4.
Configure the following settings:
Setting
Link-Local
Description
Specifies the IPv6 address to use for local communication within the subnet.
41
Configuring Network Settings
Setting
Site-Local
Global Address
Default Gateway
Description
Specifies the IPv6 address to use for communication within the site or organization.
Specifies the IPv6 internet address.
Specifies the default gateway assigned to your system.
5.
Select Save .
Manually Assign a Host Name and Domain Name
You can manually enter the host name and domain name for your system. You also can modify these settings even if your network automatically assigns them.
Procedure
1.
Enter or modify the system Host Name .
Indicates your system name. If the system discovers a valid name during setup or a software update, the system automatically creates the host name. However, if an invalid name is found, such as a name with a space, the system creates a host name using the following format:
SystemType-xxxxxx , where xxxxxx is a set of random alphanumeric characters.
IPv4 networks : The system sends the host name to the DHCP server to attempt to register the name with the local DNS server or look up the domain where the system is registered (if supported).
2.
Optional: Enter or modify the Domain Name that the system belongs to.
3.
Select Save .
Manually Configure DNS Settings
You can manually configure the DNS server settings for your system.
If your system gets its IP address automatically using DHCP, you can’t configure these settings. They display as read-only.
Procedure
1.
In the system web interface, go to Network > DNS .
2.
Enter the DNS server addresses your system uses (you can enter up to four addresses).
3.
Select Save .
Configure System VLAN Settings
You can configure your system’s virtual LAN (VLAN) settings.
Note: VLAN isn’t supported in IPv6 environments.
Procedure
1.
In the system web interface, go to Network > Primary Network > LAN Options .
42
Configuring Network Settings
2.
Optional: Select the Enable LLDP check box so that the system can advertise itself on the network using Link Layer Discovery Protocol (LLDP).
If you enable LLDP and then enter a VLAN ID, the VLAN ID you enter supersedes the autodiscovered VLAN ID from LLDP.
3.
Select the 802.1p/Q check box and enter a VLAN ID .
You can use values from 1 to 4094 .
4.
Enter a Video Priority to set the link layer priority of video traffic on the wired LAN.
Video traffic is RTP traffic consisting of video data and associated RTCP traffic. You can use any value from 0 to 7 , although Poly recommends not using 6 and 7 .
5.
Enter an Audio Priority to set the link layer priority of audio traffic on the wired LAN.
Audio traffic is RTP traffic consisting of audio data and associated RTCP traffic. You can use any value from 0 to 7 , although Poly recommends not using 6 and 7 .
6.
Enter a Control Priority to set the link layer priority of control traffic on the wired LAN.
Control traffic consists of control information associated with a call:
▪ H.323
: H.225.0 Call Signaling, H.225.0 RAS, H.245, Far-End Camera Control (FECC)
▪ SIP : SIP Signaling, FECC, Binary Floor Control Protocol (BFCP)
You can use any value from 0 to 7 , although Poly recommends not using 6 and 7 .
7.
Select Save .
Related Links
on page 45
Configure System 802.1X Settings
You can configure your system to use 802.1X authentication when connecting to the wired LAN.
Install the PKI certificates on your system required for authenticating with your network.
Note: 802.1X isn’t supported in IPv6 environments.
The system supports the following authentication protocols:
▪ EAP-MD5
▪ EAP-TLS
▪ EAP-TTLS
◦ EAP-MSCHAPv2
◦ EAP-GTC
▪ EAP-PEAPv0 (MSCHAPv2)
◦ EAP-MSCHAPv2
◦ EAP-GTC
Procedure
1.
In the system web interface, go to Network > Primary Network > LAN Options .
2.
Select the Enable EAP/802.1X
check box.
3.
Select an EAP/802.1X authentication method.
4.
Optional: For EAP-TTLS or EAP-PEAPv0, choose an EAP/802.1X Phase 2 Authentication .
43
Configuring Network Settings
5.
Enter an EAP/802.1X Identity for your system.
You can’t leave this field blank.
6.
Enter an EAP/802.1X Password for your system.
This setting is required when you use EAP-MD5, EAP-PEAPv0, or EAP-TTLS.
7.
Select Save .
Related Links
on page 68
Configure Wired LAN Options
You can configure other LAN properties for your system in the local interface or the system web interface.
Procedure
1.
In the system web interface, go to Network > Primary Network > LAN Options .
2.
Configure the following settings:
Setting
Autonegotiation
(under General Settings in the local interface)
LAN Speed
(under General Settings in the local interface)
Duplex Mode
(under General Settings in the local interface)
Ignore Redirect Messages
Description
Specifies whether the system should automatically negotiate the LAN speed and duplex mode per
IEEE 802.3 autonegotiation procedures. If you enable this setting, the system sets LAN Speed and Duplex Mode to read-only.
Poly recommends that you use autonegotiation to avoid network issues.
Specifies whether to use 10 Mbps , 100 Mbps , or
1000 Mbps for the LAN speed. Note that the switch must support the speed you choose. If you enable the Autonegotiation setting, this setting is readonly.
Specifies the duplex mode to use. Note that the switch must support the speed you choose. If you enable the Autonegotiation setting, this setting is read-only.
Enables the system to ignore ICMP redirect messages.
Polycom recommends that you enable this setting in most circumstances.
44
Configuring Network Settings
Setting
ICMP Transmission Rate Limit (millisec)
Generate Destination Unreachable Messages
Respond to Broadcast and Multicast Echo
Requests
Description
Specifies the minimum number of milliseconds between transmitted packets. Enter a number between 0 and 60000 . The default value of 1000 means the system sends 1 packet per second. If you enter 0 , the system disables the transmission rate limit.
This setting applies only to “error” ICMP packets.
This setting has no effect on “informational” ICMP packets, such as echo requests and replies.
Generates an ICMP Destination
Unreachable message if the system can’t deliver a packet to its destination for reasons other than network congestion.
When enabled, your system sends an ICMP Echo
Reply message in response to a broadcast or multicast Echo Request that isn’t specifically addressed to the system.
3.
Select Save .
LLDP and LLDP-MED Support
Link Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol Media Endpoint Discovery
(LLDP-MED) are supported on your systems. LLDP is a vendor-neutral link layer protocol in the Internet
Protocol Suite used by network devices to advertise their identity and capabilities on an IEEE 802 local area network (LAN). This protocol runs over the data-link layer only, allowing connected systems running different network layer protocols to discover information about each other. LLDP-MED is an extension of
LLDP.
Examples of applications that use information discovered by LLDP include:
• Network topology - A network management system (NMS) can accurately represent a map of the network topology.
• Inventory - A management system can query a switch to learn about all the devices connected to that switch. The LLDP protocol is formally specified in standards document IEEE 802.1AB.
Related Links
Configure System VLAN Settings on page 42
LLMP-MED Information Discovery
LLDP-MED enables the following information discovery for your systems:
• Auto discovery of LAN policies enabling plug and play networking
• Inventory management, which allows network administrators to track their network devices.
45
Configuring Network Settings
Behavior When LLDP is Enabled
When LLDP is enabled on a system, it discovers VLANs advertised by the network switch and automatically configures the system for one of the VLANs. If the room system discovers any of the following VLAN types in LLDP data from the network switch, the system automatically configures itself for one of them. The chosen VLAN type is based on the order of precedence, as follows:
• Video Conferencing VLAN
• Voice VLAN
• Voice Signaling VLAN
If none of the above VLAN types are found, the room system configures itself for the default or native
LAN of the switch port to which it is connected.
LLDP packets are transmitted regularly so that the network switch (and the neighboring endpoints) are aware of the system presence on the network.
Enable LLDP
Enable Link Layer Discovery Protocol (LLDP) to automatically configure your system to a VLAN with data received from your network switch.
Procedure
1.
In the system web interface, go to Network > Primary Network > LAN Options .
2.
Select the Enable LLDP check box so that the system can advertise itself on the network using
LLDP.
If you enable LLDP and then enter a VLAN ID, the VLAN ID you enter supersedes the autodiscovered VLAN ID from LLDP.
3.
Select Save .
Configure Wi-Fi Settings
In addition to a LAN, you can also connect your system to a Wi-Fi network so that guests can share content to the system using an AirPlay-certified device or the Polycom Content App.
Procedure
1.
In the system web interface, go to Network > Wi-Fi Network .
2.
For Choose Network Type , select Wi-Fi .
3.
Do one of the following:
▪ Select a network from Available Wi-Fi Networks . (The system lists networks in order of signal strength.)
▪ Enter the network name in the SSID field.
Selecting a new SSID erases the previous SSID and relevant Wi-Fi settings from the system.
4.
Configure the following settings:
Available settings vary with your selections.
46
Configuring Network Settings
Setting
Security
Key (Passphrase/PSK)
EAP Method
Phase 2 Authentication
User Name
Password
IP Address
Your IP Address is
Subnet Mask
Default Gateway
DNS Server
DNS Alternate Server
Description
Specifies the encryption protocol:
▪ None
▪ WEP
▪ WPA/WPA2/FT PSK
▪ 802.1x EAP
Specifies an encryption passphrase (like a password) for the Wi-Fi network.
You must enter the passphrase to connect to the Wi-Fi network.
Specifies the extensible authentication protocol (EAP) for WPA-Enterprise
(802.1xEAP):
▪ PEAP
▪ TLS
▪ PWD
Specifies Phase 2 authentication method:
▪ MSCHAPV2
▪ GTC
Specifies the login user name for WPA-Enterprise (802.1xEAP).
Specifies the login password for WPA-Enterprise (802.1xEAP).
Select one of the following to set your system Wi-Fi network IP address:
▪ Obtain IP address automatically (You must have a DHCP server in your environment to use this option.)
▪ Enter IP address manually
Specifies the IP address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
Specifies the subnet mask address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
Specifies the IP gateway for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
Specifics the DNS server address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
Specifics the alternate DNS server address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
47
Configuring Network Settings
Configure Network Quality Settings
You can specify how your system responds to network quality issues by controlling how your network handles packets during video calls.
Procedure
1.
In the system web interface, go to Network > Primary Network > Network Quality .
2.
Configure the following settings:
Setting
Quality Preference
Type of Service
Video
Audio
Control
Description
Specifies which video stream has precedence when attempting to compensate for network loss:
▪ Both people and content streams
▪ People streams
▪ Content streams
The stream option you select experiences less quality degradation during network loss compensation than the other. Choosing Both means each stream experiences roughly equal degradation.
This setting is not available if you enable
Automatically Adjust People/Content
Bandwidth .
Specifies the type of service (ToS), which lets you prioritize packets sent to your system for video, audio, Far End Camera Control (FECC), and
OA&M:
▪ IP Precedence : Represents a priority level between 0 and 7.
▪ DiffServ : Represents a priority level between 0 and 63.
Specifies the IP Precedence or DiffServ priority level for video RTP and associated RTCP traffic.
Specifies the IP Precedence or DiffServ priority level for audio RTP and associated RTCP traffic.
Specifies the IP Precedence or Diffserv priority level for control traffic on the following channels:
▪ H.323
: H.225.0 Call Signaling, H.225.0 RAS, H.
245, and FECC
▪ SIP : SIP Signaling, FECC, and Binary Floor
Control Protocol (BFCP)
(The system enables FECC by Allow Other
Participants in a Call to Control Your Camera .)
48
Configuring Network Settings
Setting
OAM
Maximum Transmission Unit Size
Maximum Transmission Unit Size Bytes
Enable Lost Packet Recovery
Enable RSVP
Dynamic Bandwidth
Maximum Transmit Bandwidth
Maximum Receive Bandwidth
Description
Specifies the IP Precedence or Diffserv value for traffic unrelated to video, audio, or FECC.
Specifies whether to use the default Maximum
Transmission Unit (MTU) size for IP calls or let you select it.
Specifies the MTU size (in bytes) used in calls.
▪ If video quality is poor or you experience network errors, packets might be too large.
Decrease the MTU.
▪ If the network is burdened with unnecessary overhead, packets might be too small. Increase the MTU.
If you enable this setting, the system uses the Lost
Packet Recovery (LPR) protocol to help compensate for packet loss if it occurs.
If you enable this setting, the system can use the
Resource Reservation Setup Protocol (RSVP) to request that routers reserve bandwidth along an IP connection path. (To use this feature, the near and far site must support RSVP.)
Enable this setting if you want the system to automatically determine the optimal call rate.
Specifies the maximum transmit call rate between
64 kbps and the system’s maximum line rate.
Use this setting when the system connects to the network using an access method with different transmit and receive bandwidths.
Specifies the maximum receive call rate between
64 kbps and the system’s maximum line rate.
Use this setting when the system connects to the network using an access method with different transmit and receive bandwidths.
3.
Select Save .
Configure H.323 Settings
If your network uses an H.323 gatekeeper, the system can automatically register its H.323 name and extension. Others can then call the system using its H.323 name or extension instead of its IP address.
Procedure
1.
In the system web interface, go to Call Configuration > H.323
.
2.
Configure the following settings:
49
Setting
Enable IP H.323
Registration Status
H.323 Name
H.323 Extension (E.164)
Use Gatekeeper
Require Authentication
User Name
Password
Configuring Network Settings
Description
Enables the system to display H.323 settings and configuration options.
Read-only setting shows if your system is registered with an H.323 gatekeeper.
How gatekeepers and gateways identify your system. You can make point-to-point calls using H.
323 names if both systems are registered to a gatekeeper.
The H.323 Name is the same as the device name unless you change it.
Your organization’s dial plan might define the name you can use.
You can place point-to-point calls using this extension if both systems are registered with a gatekeeper. Gatekeepers and gateways also use the extension to identify your system.
Your organization’s dial plan might define the extensions you can use.
Specifies if you want to use a gatekeeper for H.323
services.
▪ Off : Calls don’t use a gatekeeper.
▪ Auto : System tries to automatically find an available gatekeeper.
▪ Specify : Calls use the specified gatekeeper.
You must select this setting to enable H.235
Annex D Authentication.
If you don’t configure this setting to Off , a registration status displays.
Enables support for H.235 Annex D Authentication.
When you enable H.235 Annex D Authentication, the H.323 gatekeeper ensures that only trusted H.
323 endpoints can access the gatekeeper.
This setting is available when you set Use
Gatekeeper to Specify .
Specifies a user name if the gatekeeper requires authentication for registration.
Specifies a password if the gatekeeper requires authentication for registration.
50
Configuring Network Settings
Setting
Current Gatekeeper IP Address
Primary Gatekeeper IP Address
Description
Displays the IP address that the gatekeeper is using.
If you select Off for the Use Gatekeeper field, the
Current Gatekeeper IP Address field doesn’t display.
The gatekeeper IPv4 address the system registers with. As part of the registration process, the gatekeeper might return alternate gatekeepers. If your system loses communication with the primary gatekeeper, your system registers with the alternate gatekeeper but continues to poll the primary gatekeeper. If the system re-establishes communication with the primary gatekeeper, it unregisters from the alternate gatekeeper.
▪ If you set the Use Gatekeeper field to Off , the
Primary Gatekeeper IP Address field doesn’t display.
▪ If you use an automatically selected gatekeeper, this area displays the gatekeeper’s
IP address.
▪ If you specify a gatekeeper, enter the gatekeeper IP address or name (for example,
10.11.12.13
or gatekeeper.companyname.usa.com
).
3.
Select Save .
Related Links
on page 88
Configure SIP Settings on page 51
Configure SIP Settings
If your network supports SIP, you can use it to connect calls on your system.
Procedure
1.
In the system web interface, go to Call Configuration > SIP .
2.
Configure the following settings:
Setting
Enable SIP
Registration Status
Description
Enables the system to make and receive SIP calls.
Read-only setting shows if your system is registered to a SIP server.
51
Setting
SIP Server Configuration
Transport Protocol
Force Connection Reuse
Configuring Network Settings
Description
Specifies whether to automatically or manually set the SIP server’s IP address.
If you select Auto , you can’t edit the Transport
Protocol , Registrar Server , and Proxy Server settings. If you select Specify , you can edit these settings.
Sets the protocol your system uses for SIP signaling (your SIP network determines which protocol is required).
▪ Auto : Enables automatic negotiation of protocols in the following order: TLS, TCP, and
UDP. This is applicable only when using a proxy server.
For unregistered systems, if you set the
Transport Protocol to Auto , the order is TCP then UDP. TLS is not included.
▪ TLS : Provides secure SIP signaling. TLS is available only when you register your system with a SIP server that supports it. If you set this option, your system ignores TCP/UDP port
5060. Poly recommends you use the TLS setting when possible.
▪ TCP : Provides reliable transport via TCP.
▪ UDP : Provides best-effort transport via UDP.
Disabled by default (recommended).
When disabled, the system uses an ephemeral source port for outgoing SIP messages. When enabled, the system uses the active SIP listening port as the source port (5060 or 5061, depending on the negotiated SIP transport protocol in use).
You can use this setting to establish correct operation with remote SIP peer devices, which require that the source port match the contact port in SIP messages.
52
Setting
BFCP Transport Preference
Sign-in Address
User Name
Password
Registrar Server
Configuring Network Settings
Description
Controls content sharing negotiation behavior.
When you use the Binary Floor Control Protocol
(BFCP), a relationship is established between the floor control server and its clients. What you set here determines how network traffic flows between the server and clients.
Note: TCP is typically slightly slower but more reliable than UDP. Some deployments don’t support it, such as with session border controllers (SBCs).
▪ Prefer UDP : (Default) Starts resource sharing using UDP but falls back to TCP if needed.
▪ Prefer TCP : Starts resource sharing using TCP but falls back to UDP if needed.
▪ UDP Only : Shares resources only using UDP. If
UDP is unavailable, your system can’t share content in a separate video stream.
▪ TCP Only : Shares resources only through TCP.
If TCP is unavailable, your system can’t share content in a separate video stream.
The SIP address or name of the system (for example, [email protected]
).
If you leave this blank, the system IP address is used for authentication.
The user name for authenticating your system with a SIP registrar server (for example, marySmith ).
If the SIP proxy requires authentication, you can’t leave the user name and password blank.
The password associated with the user name for authenticating your system with a SIP registrar server.
The IP address or FQDN of the SIP registrar server. If you register a remote system with an edge server, use that server’s FQDN.
By default, the system sends SIP signaling to ports
5060 (TCP) and 5061 (TLS) on the registrar server.
Enter the address and port using the following format: <IP_Address>:<Port> .
The <IP_Address> can be an IPv4 address or an FQDN such as servername.company.com:5060 .
53
Configuring Network Settings
Setting
Proxy Server
Description
The IP address or FQDN of the SIP proxy server. If you leave this field blank, the system uses the registrar server address. If you also leave the SIP registrar server field blank, there is no SIP proxy server to configure.
By default, the system sends SIP signaling to ports
5061 (TLS) and 5060 (TCP) on the proxy server.
The syntax for this setting is the same as the registrar server.
Specifies the type of SIP registrar server you’re using.
Registrar Server Type
3.
Select Save .
Related Links
on page 88
Configure H.323 Settings on page 49
AS-SIP Settings
Your system supports the Assured Services Session Initiation Protocol (AS-SIP), which meets the requirements defined in Unified Capabilities Requirements (UCR) 2013 Change 3.
Developed by the U.S. Department of Defense (DoD), AS-SIP includes secure signaling and media encryption, Quality of Service (QoS), and IPv6 support.
Enable AS-SIP Settings
In the AS-SIP settings, you can choose the default network domain for your system’s outbound calls. You also can add and delete custom domains.
Procedure
1.
In the system web interface, go to Call Configuration > SIP .
2.
Select the Enable AS-SIP check box.
Add a Network Domain for Outbound Calls
While your system’s AS-SIP outbound call settings include the standard DoD network domains Defense
Switched Network (DSN) and Unified Capabilities (UC), you can also add a custom domain.
Procedure
1.
In the system web interface, go to Call Configuration > SIP .
2.
Under Outbound Precedence Configuration , select Add .
3.
Enter the name of the domain you want to add and select Save .
54
Configuring Network Settings
Delete a Network Domain for Outbound Calls
You can remove a custom network domain associated with your system’s AS-SIP settings. You can’t delete the preconfigured domains DSN and UC.
Procedure
1.
In the system web interface, go to Call Configuration > SIP .
2.
Under Outbound Precedence Configuration , locate the domain you want to remove and select
Delete in the same row as the domain.
Select the Default Network Domain for Outbound Calls
You can choose the default network domain for your system’s AS-SIP outbound calls.
Procedure
1.
In the system web interface, go to Call Configuration > SIP .
2.
Under Outbound Precedence Configuration , select a domain from the list (for example, dsn ).
Enable Point-to-Point Call Escalation to a
RealPresence DMA Conference Call
When you register your system with a Polycom RealPresence DMA system, you can enable a point-topoint call on your system to escalate to an impromptu conference call on an external Polycom MCU.
You must configure your system’s SIP settings to register with your RealPresence DMA system.
For information about working with a RealPresence DMA system, specifically SIP conference factories, see the Polycom RealPresence DMA Operations Guide Polycom RealPresence DMA Operations Guide .
Procedure
1.
In the system web interface, go to Call Configuration > SIP .
2.
Go to Adhoc Call Escalation .
3.
Select the Enable automatic call escalation of point-to-point to an external MCU check box.
4.
For the Conference Factory ID , enter the ID associated with the SIP conference factory on your
RealPresence DMA system.
Note: The conference factory ID must come from the same RealPresence DMA system your video conferencing system uses for SIP registration. Calls don’t escalate if your
RealPresence DMA system doesn’t recognize the ID you provide.
5.
Select Save .
Calls converted through a RealPresence DMA system gateway (H.323 to SIP or vice versa) don’t join an impromptu conference call.
55
Configuring Network Settings
Wireless Devices
The system includes Wi-Fi and Bluetooth wireless communication options so your users can discover the system on the network with the Polycom Content App or their AirPlay- or Miracast-certified device. Your remote control also connects to the system using Bluetooth.
You can enable or disable these features as needed.
Note: If you have a no-radio system, wireless connections are unavailable including the Bluetooth remote control.
Specify the Wireless Operating Channel for Miracast-Certified Devices
You can choose the wireless LAN (WLAN) operating channel the system uses for connecting with
Miracast-certified devices. Changing the operating channel can, for example, help minimize network interference and video quality issues when sharing content.
Available operating channels are within the 2.4 GHz signal range. During initial setup, the system picks an operating channel based on the country you choose. If you don’t choose a country during setup, the system selects a random operating channel in the 2.4 GHz signal range.
The listening channel, which is used by the system to advertise it can connect with nearby Miracastcertified devices, is selected automatically in the 2.4 GHz signal range. You can’t configure the listening channel.
For more information on Miracast, see the Miracast Performance Technical Reference on the Poly Online
Support Center .
Procedure
1.
In the system web interface, go to Security > Wireless Security .
2.
Choose an Operating Channel .
Remember the following when selecting an operating channel:
▪ To avoid content quality issues (such as latency or packet loss), select the same operating channel configured on your wireless access point (WAP).
▪ You can’t change the operating channel during an ongoing content mirroring session.
Related Links
Wireless Port Usage with Miracast-Certified Devices on page 86
Enable Miracast Over Infrastructure
Miracast over infrastructure enables devices to communicate with your system using existing network infrastructure, including wired and wireless LAN connections.
▪ Only Windows 10 devices with build 1903 or later support this feature.
▪ The Windows 10 firewall automatically allows inbound TCP ports 7250 and 7236. If a third-party firewall application blocks these ports, you may need to add these two inbound ports.
▪ Your system and the Miracast casting source device must be on the same enterprise network via
Ethernet or a secure Wi-Fi connection
For more information on Miracast, see the Miracast Performance Technical Reference on the Poly Online
Support Center .
56
Configuring Network Settings
Procedure
1.
In the system web interface, go to Security > Wireless Security .
2.
Select the Miracast Over Infastructure check box.
Disable Wireless Options
You can disable the wireless features on your system. Wireless features are enabled by default.
Remember the following when disabling wireless features:
▪ Disabling wireless connectivity turns off screen mirroring with Miracast-certified devices and prevents the system from using Wi-Fi to connect to a secondary network.
▪ Disabling Bluetooth turns off screen mirroring with AirPlay-certified devices and prevents those devices and the Polycom Content App from automatically discovering your system. (You can still connect with the Polycom Content App using the system IP address.)
▪ Disabling Bluetooth also disables your remote control.
Procedure
1.
In the system web interface, go to Security > Wireless Security .
2.
Do one of the following:
▪ Clear the Enable Wireless Connectivity check box.
▪ Clear the Enable Bluetooth check box.
Related Links
Default Options for Sharing Content on page 124
Poly Bluetooth Remote Control on page 23
Update the Poly Bluetooth Remote Control Firmware
on page 134
57
Securing the System
Topics:
•
•
▪
▪
Disable the Polycom Content App Port
▪
▪
Enable or Disable Content Saving
▪
•
▪
▪
▪
▪
View Connections to the System
▪
▪
Wireless Port Usage with Miracast-Certified Devices
Your system includes features and settings to help you meet security requirements.
Related Links
Managing System Access
An administrator can configure systems to grant access using network accounts that are authenticated through an Active Directory (AD) server such as the Microsoft Active Directory server. In this case, the account information is stored on the AD server and not on the room system. The AD administrator assigns accounts to AD groups, one for the room system admin access and one for user access. For this reason, external authentication is also referred to as Active Directory authentication.
The room system administrator configures the external authentication settings on the system to specify the address of an AD Server for authenticating user logins, AD group for user access, and AD group for admin access on the room system. The system can map only one Active Directory group to a given role.
Users can enter their network account credentials to access the system on the following interfaces:
• Web interface (admin access only)
• Local interface ( user and admin role accounts when Require Login for System Access is enabled; admin accounts when admin-only areas of the local interface are accessed)
When External Authentication is enabled in PKI environments where Always Validate Peer Certificates from Server is enabled on the system, configure the Active Directory Server Address on the system using the address information that is in the Active Directory Server identity certificate. This allows the system to
58
Securing the System validate the identity certificate. As an example, if the Active Directory Server identity certificate contains its
DNS name only, and no specific IP address, configuring the Active Directory Server Address on the system using the server's IP address results in certificate validation failure, and consequently authentication failure. The system configuration would have to specify the server by DNS name, in this case, to successfully match the server certificate data.
The system local user account is disabled when Enable Active Directory External Authentication is enabled. The admin account is active and usable, however.
Local Accounts
The system stores local account IDs and passwords.
Configure Password Policies
You can specify requirements for administrator, remote access, and SNMP passwords for your system.
Poly strongly recommends that you create an administrator password for your system. Administrators set password policies and minimum requirements.
Procedure
1.
In the system web interface, go to Security > Password Requirements .
2.
Configure the following settings for the Admin Room , Remote Access , or SNMP passwords:
Note: You must configure the Admin Room and Remote Access password settings separately.
Setting
Minimum Length
Require Lowercase Letters
Require Uppercase Letters
Require Numbers
Require Special Characters
Reject Previous Passwords
Minimum Password Age in Days
Maximum Password Age in Days
Description
The minimum number of characters required for a valid password.
The minimum number of lowercase letters required for a valid password.
The minimum number of uppercase letters required for a valid password.
The minimum number of numerals required for a valid password.
The minimum number of special characters required for a valid password. Supported characters include: @ - _ ! ; $ , \ / & . # *
The number of most recent passwords that you can’t reuse. If you set this to Off , all previous passwords are valid.
The minimum number of days before the password can change.
The maximum number of days before the password must change.
59
Securing the System
Setting Description
Minimum Changed Characters
Maximum Consecutive Repeated Characters
The number of characters that must be different or change position in a new password. For example, if you set this to 3 , 123abc can change to 345cde but not to 234bcd .
The maximum number of consecutive repeated characters allowed in a password. For example, if you set this to 3 , aaa123 is a valid password but aaaa123 is not.
Password Expiration Warning Specifies how many days in advance a warning displays indicating that the password expires soon
(if you set a maximum password age).
Can Contain ID or Its Reverse Form Specifies whether the associated ID or its reverse can be part of a password. If you enable this setting and the ID is admin , passwords admin and nimda are allowed.
3.
Select Save .
Changes to most password policy settings don’t take effect until the next time the password is changed.
Changes take effect immediately for Minimum Password Age in Days , Maximum Password Age in
Days , and Password Expiration Warning .
Create Local Administrator Credentials
You can require local administrator credentials for in-room and remote access to the system.
Passwords for logging in to the system are case sensitive and can’t contain more than 40 characters.
Procedure
1.
In the system web interface, go to Security > Local Accounts .
2.
Configure the following settings:
Setting
Admin ID
Room Password
Remote Access Password
Description
The local administrator account name (default is admin ).
You must enter this password to change administrator settings in the local interface.
The default password is the last six characters of the serial number listed in System Details and on the back of the device.
If you set this option, you must enter this password to access the system through the system web interface or command-line API (SSH or telnet).
This password lets you perform device management tasks, such as updating the system’s software.
60
Securing the System
3.
Optional: Do one of the following:
• To use the local administrator Room Password for remote logins, leave the Use Room
Password for Remote Access option enabled.
Note: Password requirements for the local administrator password and remote access password must be configured separately.
• If you don’t want to use the local administrator Room Password for remote logins, disable the Use Room Password for Remote Access option.
This setting specifies that the system uses the local administrator Room Password for remote logins. This setting is enabled by default.
4.
Select Save .
Related Links
Complete Setup with the System Web Interface on page 19
Change Administrator Credentials
You can change the administrator username and password to access the system web interface and administrator sections of the local interface.
The default username is admin and the default password is the last six characters of the system’s serial number.
Procedure
1.
In the system web interface, go to Security > Local Accounts .
2.
Enter the new administrator username in the Admin ID field.
3.
Select Change Password .
4.
Enter the current password and then the new password.
Entering an incorrect current password too many times causes the system to automatically log out and close the session.
5.
Select Save .
Configure Account Lockout Settings
Account lockout controls prevent unauthorized access to your system.
Procedure
1.
In the system web interface, go to Security > Local Accounts .
2.
Configure the following settings (your changes save automatically):
Setting
Lock Admin Account after Failed Logins
Description
Specifies the number of failed login attempts allowed before the system locks the account. You can turn this setting Off .
61
Securing the System
Setting
Admin Account Lock Duration
Reset Admin Account Lock Counter After
Description
Specifies the amount of time an account is locked because of failed login attempts. After this period expires, the system resets the failed login attempts counter to zero, and users can again log in with that account.
Determines how many hours the failed login window lasts. The window is a period of time starting with the first failed login attempt and during which the system counts subsequent failed attempts against the number allowed.
The counter resets to zero at the end of the window
(if the account is not locked because of failed attempts) and after a successful login.
Enable External Authentication
You can set up external authentication through Active Directory for your system. When enabled, you can access the system with an Active Directory account or the system’s local administrator credentials.
Before you begin, make sure that you configure the Domain Name setting on the Network > Primary
Network > LAN Options page with your Active Directory domain.
The system can map only one Active Directory group to a given role.
Procedure
1.
In the system web interface, go to Security > Global Security .
2.
Go to Authentication .
3.
Configure the following settings:
Setting
Enable Active Directory External Authentication
Description
Specifies whether to authenticate users with the
Active Directory server. When you enable Active
Directory authentication, users can log in to the system with their network credentials using this format: domain\user . With this format, users can have accounts on multiple domains.
62
Securing the System
Setting
Active Directory Server Address
Active Directory Admin Group
Active Directory User Group
4.
Select Save .
Configure System Access Settings
You can configure how you and others access the system.
Description
Specifies the Active Directory server’s FQDN or IP address. If you are using subdomains, append port number 3268 as follows: ad.domain.com:
3268 .
You can alternatively use RealPresence Resource
Manager as an Active Directory server and enter its address here.
If you enable Always Validate Peer Certificates from Server on the Certificates page, make sure this value matches what is in the Active Directory server certificate. For example, if you enter the
Active Directory server IP address here, but the certificate only has the server’s FQDN, external authentication fails.
Specifies the Active Directory group whose members should have administrator access to the system. This name must exactly match the name in the Active Directory server for successful authentication.
Specifies the Active Directory group whose members should have user access to the system.
This name must exactly match the name in the
Active Directory server for successful authentication.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Configure the following settings:
Setting Description
Enable Network Intrusion Detection System (NIDS) When you enable this setting, the system creates security log entries when it detects a possible network intrusion.
Enable Web Access
Enable Diagnostics Port Idle Session Timeout
Specifies whether you can access the system using the system web interface.
Specifies whether to allow the diagnostics port to time out at the configured time interval or not. You set the timeout at Idle Session Timeout in
Minutes .
63
Securing the System
Setting
Enable API Port Idle Session Timeout
Enable SNMP Access
Idle Session Timeout in Minutes
Maximum Number of Active Sessions
Max Session Timeout in Minutes
Description
Specifies whether to allow the API port to time out at the configured time interval or not. You set the timeout at Idle Session Timeout in Minutes .
Specifies whether to allow SNMP access.
Specifies the number of minutes a session can be idle before it times out.
Specifies the maximum number of users logged in through the system web interface or command-line
API (SSH or telnet).
Specifies the maximum number of minutes a session can be open before it times out, regardless of session activity.
3.
Select Save .
Related Links
Detecting Intrusions on page 68
Command-Line API Access for G7500
You can access your G7500 system’s command-line API over SSH, telnet, or through a serial port connection.
Enable Command-Line API Access Over SSH
Use SSH on port 22 if you want encrypted access to the system command-line API.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Select the Enable Legacy API Over SSH check box if it’s cleared.
3.
Select the Enable Telnet Access check box.
Configure the SSH Port Lock
You can limit the number of failed SSH login attempts to your system command-line API to protect against brute-force attacks.
Enable command-line API access over SSH to access these settings.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Configure the following settings:
64
Securing the System
Setting
Lock SSH Port After Failed Logins
SSH Port Lock Duration
Reset SSH Port Lock Counter After
Description
Specifies the number of failed login attempts allowed before the system locks SSH access to the
API.
Specifies the amount of time that SSH access to the API remains locked due to failed login attempts.
After this period expires, the system resets the failed login attempts counter, and you can again try to log in again.
Specifies the number of hours, starting with the first failed login attempt, during which subsequent failed login attempts are counted against the maximum number allowed ( Lock SSH Port after Failed
Logins ).
The counter resets when the set period of time expires or a user successfully logs in.
3.
Select Save .
Enable Command-Line API Access Over Telnet
Use port 24 or 23 to access the system command-line API using telnet.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Select the Enable Telnet Access check box.
3.
Choose an API Port for telnet connections: 24 (default) or 23 .
Disable the Telnet Password
By default, you must enter a password to connect to the command-line API using telnet. You can disable it.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Clear the Telnet Authentication check box.
Locking the Telnet Port
Other than disabling telnet access to the system command-line API, you can’t restrict telnet access in other ways, such as locking its port for too many failed login attempts (like you can with web or SSH access).
Note: Remember the following about telnet access: A telnet session disconnects after three failed login attempts. If you start a new session, the system allows another three attempts.
65
Securing the System
Configure Serial Port Settings
You can configure RS-232 serial port settings for your system.
The Studio X50 and Studio X30 don’t have a serial port.
Procedure
1.
In the system web interface, go to General Settings > Serial Ports .
2.
Configure the following settings:
Setting
RS-232 Mode
Description
Specifies the mode used for the RS-232 serial port.
• Off : Disables the serial port.
• Control : Receives control signals from a touchpanel control. Allows any device connected to the RS-232 port to control the system using API commands.
Set these options to the same values configured on the serial device.
Baud Rate
Parity
Stop Bits
Data Bits
RS-232 Flow Control
Login Mode
This setting is read-only.
Specifies if you want to use hardware flow control between the connected device and your system.
Specifies the credentials necessary for a control system to connect to the RS-232 port.
• Admin password only : (Default) Requires the administrator password (if you set one) when the control system connects.
• User Name/Password : Requires the user name and administrator password (if you set one) when the control system connects.
• None : The system doesn’t require a user name or password when the control system connects.
Note: This setting only displays when you set
RS-232 Mode to Control .
3.
Select Save .
Disable Command-Line API Access
To disable command-line API access to your system, close network ports 22, 23, and 24 and the RS-232 serial port.
Procedure
1.
In the system web interface, go to Security > Access .
66
Securing the System
2.
Clear the Enable Telnet Access check box.
Network ports 22, 23, and 24 on your system are closed.
3.
In the system web interface, go to General Settings > Serial Ports .
4.
For RS-232 Mode , select Off .
The serial port is closed.
Command-line API access to your system is disabled.
Configure the System Web Interface Port Lock
You can limit the number of failed login attempts to the system web interface to protect against brute-force attacks.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Configure the following settings:
Setting
Lock Port after Failed Logins
Port Lock Duration
Reset Port Lock Counter After
Description
The number of failed login attempts allowed before the web interface locks. You can set this to Off .
Specifies the amount of time that the web interface remains locked due to failed login attempts. When this period expires, the failed login attempts counter resets and you can try to log in again.
Specifies the number of hours, starting with the first failed login attempt, during which subsequent failed login attempts are counted against the maximum number allowed ( Lock Port After Failed Logins ).
The counter resets when the set period of time expires or a user successfully logs in.
3.
Select Save .
Disable USB Ports
You can configure your system so no one can use its USB ports.
Note: You can’t completely turn off the USB-C port; it still provides power.
If you disable the system’s USB ports, you can’t use the system as an external camera, microphone, and speaker accessory (i.e., Poly Device Mode).
Procedure
1.
In the system web interface, go to Security > Access .
2.
Select Disable All USB Ports .
67
Securing the System
Detecting Intrusions
When the system detects a possible network intrusion, it logs an entry to the security log.
The Enable Network Intrusion Detection System (NIDS) setting controls the logging behavior. The security log prefix identifies the type of packet detected, as shown in the following table:
Prefix
SECURITY: NIDS/unknown_tcp
SECURITY: NIDS/unknown_udp
SECURITY: NIDS/invalid_tcp
SECURITY: NIDS/invalid_icmp
SECURITY: NIDS/unknown
SECURITY: NIDS/flood
Packet Type
Packet that attempts to connect or probe a closed TCP port
Packet that probes a closed UDP port
TCP packet in an invalid state
ICMP or ICMPv6 packet in an invalid state
Packet with an unknown protocol number in the IP header
Stream of ICMP or ICMPv6 ping requests or TCP connections to an opened TCP port
Following the message prefix, the security log entry includes the time stamp and the IP, TCP, UDP, ICMP, or ICMPv6 headers. For example, the following security log entry shows an unknown_udp intrusion:
2009-05-08 21:32:52 WARNING kernel: SECURITY: NIDS/unknown_udp IN=eth0
OUT= MAC=00:e0:db:08:9a:ff:00:19:aa:da:11:c3:08:00 SRC=172.18.1.80
DST=172.18.1.170 LEN=28 TOS=0x00 PREC=0x00 TTL=63 ID=22458 PROTO=UDP
SPT=1450 DPT=7788 LEN=8
Related Links
Configure System Access Settings
on page 63
PKI Certificates
If your organization uses a public key infrastructure (PKI) for securing network connections, Poly recommends that you have a strong understanding of certificate management and how it applies to your system.
PKI certificates authenticate secure network connections to and from the system. The system uses standard PKI techniques to configure and manage certificates and certificate signing requests (CSRs).
ANSI X.509 standards regulate the certificate characteristics.
Your system can generate CSRs to send to a certificate authority (CA), a trusted entity that validates and officially issues, or signs, PKI certificates. Your system uses those certificates for client and server authentication.
If your system is in an environment without PKI, you don’t need a CA-signed certificate; the system comes with a self-signed certificate for its TLS connections. When you deploy PKI, however, self-signed certificates aren’t trusted and you must use CA-signed certificates.
68
Securing the System
Root certificates installed on your system automatically transfer to a paired TC8 device. If you delete root certificates from the system, they’re automatically deleted from the TC8. System certificates are unique to each system and don’t transfer to paired devices.
Here are some examples of how you use PKI certificates:
▪ If your environment uses the 802.1X authentication framework for wired connections, create a CSR and install the resulting CA-signed certificate on your system so it’s trusted on the network.
▪ If you want to navigate with a browser over a secure connection to your system web interface, create a CSR and install the resulting CA certificate chain on your system to replace its factoryinstalled certificate, which isn’t trusted.
▪ Provisioning your system using RealPresence Resource Manager in a secure environment.
Note: Your system must have a Host Name in this situation.
Related Links
Using a Provisioning Service on page 36
Configure System 802.1X Settings
on page 43
Create a Certificate Signing Request
If you deploy a PKI in your environment, create a CSR to make sure your system or device is trusted by its network peers.
Note: Only one CSR can exist at a time. After a CSR is generated, get it signed and installed on your system before creating another. If you generate a CSR and generate a second CSR before you install the first one, the device discards the previous one.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Select Create Certificate Signing Request (CSR) .
3.
In the Certificate Details form, complete the following fields:
CSR Information
Hash Algorithm
Common Name (CN)
Description
Specifies the hash algorithm for the CSR: SHA-256 (recommended) or SHA-1 (not recommended).
Specifies the system name. This is a required field. Maximum characters: 64 (truncated if necessary).
Poly recommends the following guidelines for this field:
▪ For systems registered in DNS, use the system's FQDN.
▪ For systems not registered in DNS, use the system's IP address.
69
Securing the System
CSR Information
Organizational Unit (OU)
Description
Specifies the unit of business defined by your organization. Default is blank. Maximum characters: 64.
Note: The system supports only one OU field. If you want the signed certificate to include more than one OU field, you must download and edit the CSR manually.
Organization (O)
City or Locality (L)
State or Province (ST)
Country (C)
SAN: FQDN
SAN: Additional Name
Specifies your organization’s name. Default is blank. Maximum characters: 64.
Specifies the city where your organization is located. Default is blank.
Maximum characters: 128.
Specifies the state or province where your organization is located.
Default is blank. Maximum characters: 128.
Displays the country selected in the setup wizard. You can’t change this setting here.
Specifies the FQDN assigned to the system. This is the same as the
Common Name (CN) , but it isn’t truncated. Default is blank.
Maximum characters: 253.
Specifies an additional name. Default is blank. Maximum characters:
253.
Default is the IPv4 address of the system. Maximum characters: 15.
SAN: IPv4 Address
User Principle Name (UPN) Specifies the user and domain name to log in to a Windows domain
(for example, [email protected]
). This is the userPrincipalName attribute of the account object in Active
Directory.
Relate this setting to the 802.1X identity and password you specified on the Network > LAN Options page. Default is blank.
4.
Select Create .
5.
If the CSR was created successfully, select CSR Available for Download to download the CSR file to send to a CA, which issues your signed certificate.
Create a TC8 Certificate Signing Request
If you deploy a PKI in your environment, create a CSR to make sure your system or device is trusted by its network peers.
Only one CSR can exist on your device at a time. After you generate a CSR, get it signed and install it on your device before generating another. If you generate a second CSR before you install the first one, the device discards the previous CSR.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Select Poly TC8 > Create and Download CSR .
3.
In the Certificate Details form, complete the following fields:
70
Securing the System
CSR Information
Hash Algorithm
Common Name (CN)
Organizational Unit (OU)
Description
Specifies the hash algorithm for the CSR: SHA-256 (recommended) or SHA-1 (not recommended).
Specifies the system name. This is a required field. Maximum characters: 64 (truncated if necessary).
Poly recommends the following guidelines for this field:
▪ For systems registered in DNS, use the system’s FQDN.
▪ For systems not registered in DNS, use the system’s IP address.
Specifies the unit of business defined by your organization. Default is blank. Maximum characters: 64.
Note: The system supports only one OU field. If you want the signed certificate to include more than one OU field, you must download and edit the CSR manually.
Organization (O)
City or Locality (L)
State or Province (ST)
Country (C)
SAN: FQDN
SAN: Additional Name
Specifies your organization’s name. Default is blank. Maximum characters: 64.
Specifies the city where your organization is located. Default is blank.
Maximum characters: 128.
Specifies the state or province where your organization is located.
Default is blank. Maximum characters: 128.
Displays the country selected in the setup wizard. You can’t change this setting here.
Specifies the FQDN assigned to the system. This is the same as the
Common Name (CN) , but it isn’t truncated. Default is blank.
Maximum characters: 253.
Specifies an additional name. Default is blank. Maximum characters:
253.
Default is the IPv4 address of the system. Maximum characters: 15.
SAN: IPv4 Address
User Principle Name (UPN) Specifies the user and domain name to log in to a Windows domain
(for example, [email protected]
). This is the userPrincipalName attribute of the account object in Active
Directory.
Relate this setting to the 802.1X identity and password you specified on the Network > LAN Options page. Default is blank.
4.
Select Create .
If the system successfully creates the CSR, it automatically downloads the file.
5.
Send the CSR file to a CA, which issues your signed certificate.
71
Securing the System
Configure Certificate Validation Options
The system can automatically validate user-installed certificates when establishing an authenticated network connection.
To perform this validation, you must install certificates from the CAs that are part of the trust chain on the system.
For a full list of preinstalled certificates on your system, see the Poly VideoOS and TC8 Certificates
Update on the Poly Online Support Center .
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Configure the following settings (your changes save automatically):
Setting
Maximum Peer Certificate Chain Depth
Always Validate Peer Certificates From Server
Always Validate Peer Certificates From Browser
Disable Preinstalled Certificates
Description
Specifies how many links a certificate chain can have. The term peer certificate refers to any certificate sent by the far-end host when a network connection is being established between the two systems.
Determines whether your system requires a remote server to present a valid certificate when connecting to it for services, such as provisioning.
Determines whether your system requires a web browser to present a valid certificate when connecting to it.
Disables preinstalled root certificate CA chains.
Install a Certificate
Once you receive a signed certificate from the CA that processed your CSR, you can install it on your system.
Note: System certificates must be created on the Poly system and signed by an external CA before installation. Externally created device certificates won't work properly.
This option isn’t available if your certificate is provisioned to the system.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Select the System tab or Connected Device tab.
3.
Select Install Certificate to browse for the CA-signed certificate you want to install and select
Open .
Your system accepts the following certificate file formats: .pem
, .der
, and PKCS #7 (which typically has a .p7b
file name extension).
The system checks the certificate data and, if the upload is successful, adds it to the page.
72
Securing the System
With your CA-signed certificate installed, your system is trusted by its network peers (provided that a root certificate has established a chain of trust). This allows you to navigate with your web browser over a secure connection to the system web interface and perform administrative tasks.
View a Certificate
The system lists user-installed certificates in the system web interface, where you also can view the contents of those certificates.
Procedure
1.
In the system web interface, go to Security > Certificates .
The Certificates page lists your user-installed certificates. It includes information about which entity a certificate is issued to, who issued it, when it expires, and the certificate type (server, client, or CA).
2.
To view the contents of a certificate, select Visibility in the same row as the certificate.
The certificate contents display in plain text.
View a TC8 Certificate
The system lists user-installed TC8 certificates in the system web interface, where you also can view the contents of those certificates.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Select the connected device tab.
The Certificates page lists your user-installed certificates. It includes information about which entity a certificate is issued to, who issued it, when it expires, and the certificate type (server, client, or CA).
Delete a Certificate
You can remove user-installed certificates through the system web interface.
When you delete all user-installed certificates, your system reverts to using the factory-installed certificate. This option isn’t available if your certificate is provisioned to the system.
Note: Deleting system settings by default retains your user-installed certificates, but performing a factory reset removes these certificates.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Locate the certificate you want to delete and select Delete in the same row as the certificate.
Caution: You can’t undo this action.
3.
Confirm by selecting Delete .
A message indicates that the system deleted the certificate.
73
Securing the System
Certificate Revocation
During certificate validation, your system checks whether certificates used for secure communications are revoked by their issuing CAs.
Your system can check certificate revocation status with the following standard method:
▪ Certificate Revocation List (CRL) : File containing a list of certificates revoked by their issuing CA.
You must manually upload CRLs to your system.
Manually Upload a CRL
You can use CRLs to perform certificate revocation checks on your system.
Uploading a CRL fails unless you install all of the certificates in the issuing CA’s chain of trust for that
CRL.
This option is not available if your CRL is provisioned to the system.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Configure the following settings:
Setting Description
Revocation Method To use the CRL revocation method, select CRL .
Allow Incomplete Revocation Checks When enabled, a certificate in the chain of trust validates without a revocation check if no corresponding CRL from the issuing CA is installed.
3.
Select Save .
4.
Select Upload CRL File to add a CRL.
You aren’t limited to how many CRLs you can install, but you can only upload 10 at a time.
Successfully-uploaded CRLs display on the page and include information about the issuing CA, when the
CRL was updated, and when it’s scheduled to update again.
Delete a CRL
You can remove CRLs that were previously uploaded on the system.
This option is not available if your CRL is provisioned to the system.
Procedure
1.
In the system web interface, go to Security > Certificates .
2.
Under Revocation , select Delete next to the CRL you want to delete.
Disable the Polycom Content App Port
To prevent the Content App from connecting to your system and providing a video and audio content stream, disable the content sharing application in the system web interface.
This option stops TCP/TLS traffic on port 5001.
74
Securing the System
Procedure
1.
In the system web interface, go to General Settings > System Settings .
2.
Clear the Enable Poly Content App Sharing check box.
3.
Select Save .
Related Links
Default Options for Sharing Content on page 124
Disable the Security Code
By default, you must enter a security code to connect to the system to share or save content, but you can disable it.
Procedure
» In the system web interface, go to Security > Security Code and clear the Enable Security
Code check box.
Related Links
on page 124
Enable or Disable Content Saving
Enable or disable content saving from the Pano App for users who connect to the primary or secondary network.
Procedure
1.
In the system web interface, go to Security > Content .
2.
Select or deselect Allow users to save content from Primary Network and Allow users to save content from Secondary Network .
Related Links
on page 124
System Allow List
The allow list enables access to your system web interface and SNMP ports only to IP addresses you specify.
An allow list supports up to 30 addresses (including IPv4 and IPv6 formats) and can only be configured in the system web interface.
Note: If your IP addresses are dynamically assigned, make sure the allow list is updated so those hosts can connect to your system.
75
Securing the System
Add IP Addresses to the Allow List
You can add and edit specific IP addresses to an allow list for your system.
Warning: Once you save the IP allow list, you can access the system web interface of only those devices on the list. If your current device isn’t on the list, you can’t access the system web interface for that device. You may have to factory restore the system to regain access.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Select Enable Allow List , then Edit Allow List .
3.
Select address type IPv4 or IPv6 .
4.
In the IP Address field, enter the address of the system you want to add to the allow list.
5.
Select Add .
6.
Optional: Repeat steps 4 and 5 for the other IP addresses you want to add to the allow list.
7.
Select Save .
Delete IP Addresses from the Allow List
You can delete specific IP addresses from the allot list for your system.
Procedure
1.
In the system web interface, go to Security > Access .
2.
Select Edit Allow List .
3.
Select the check box next to any IP address you want to delete and select Remove .
IPv4 Address Formats
The configuration requires a single IP address, a range of addresses, or an IP and netmask. (The netmask represents the number of valid bits of the IPv4 address to use.)
The following are valid IPv4 formats for your system:
• 10.12.128.7
• 172.26.16.0/24
IPv6 Address Formats
For IPv6 addresses, you can use a Classless Inter-Domain Routing (CIDR) notation to represent a range of IP addresses.
The following are valid IPv6 formats for your system:
• ::1
• 2001:db8:abc:def:10.242.12.23
• 2001:db8::/48
• 2001:db8:abcd:0012::0/64
• 2001:0db8:85a3:0000:0000:1234:0abc:cdef
76
Securing the System
Call Encryption
AES is standard on your system. When enabled, your system automatically encrypts calls with other systems using AES.
A locked padlock icon displays on the connected monitor(s) when a call is encrypted. If a call is unencrypted, you see an unlocked padlock. The padlock may not accurately indicate encryption status if the call is cascaded or includes an audio-only endpoint. To avoid security ambiguity, participants can verbally communicate the state of their padlock icon at the beginning of a call.
The following AES cryptographic algorithms ensure flexibility when negotiating secure media transport:
• H.323 (per H.235.6)
◦ AES-CBC-128 / DH-1024
◦ AES-CBC-256 / DH-2048
• SIP (per RFCs 3711, 4568, 6188)
◦ AES_CM_128_HMAC_SHA1_32
◦ AES_CM_128_HMAC_SHA1_80
◦ AES_CM_256_HMAC_SHA1_32
◦ AES_CM_256_HMAC_SHA1_80
Related Links
Configure SIP Settings on page 51
Configure Call Encryption
You can encrypt calls on your system.
Procedure
1.
In the system web interface, go to Security > Global Security .
2.
For the Require AES Encryption for Calls setting, choose how you want to encrypt calls:
• Off : AES encryption is disabled.
• When Available : AES encryption is used with systems that support it, but the system also allows unencrypted calls.
• Required for Video Calls Only : AES encryption is used in all video calls. Calls with systems that don’t support it fail.
• Required for All Calls : AES encryption is used in all types of calls. Calls with systems that don’t support it fail.
Configure Minimum TLS
You can restrict your system from using earlier versions of TLS for secure communications.
For example, if you set your minimum TLS version to 1.1, you’re disabling TLS 1.0.
Procedure
1.
In the system web interface, go to Security > Global Security .
2.
Choose one of the following options for Minimum TLS Version :
77
Securing the System
• TLS 1.2
• TLS 1.1
• TLS 1.0
3.
Select Save .
Related Links
Register with an LDAP Directory Server
on page 117
LDAP Directory Server Ignores the Minimum TLS Version Setting on page 159
H.460 Firewall/NAT Traversal
You can configure your system for firewall or network address translation (NAT) traversal using the H.
460.18 and H.460.19 standards. This includes environments with session border controllers (SBCs).
For example, an endpoint outside your network that’s initiating a SIP call connects to an SBC as a remote endpoint. The incoming SIP traffic then traverses a firewall before connecting to the endpoint it’s calling inside your network.
Real-time media streams often use UDP for their speeds. If your system is behind a firewall that restricts access to UDP ports, however, you can configure your system for only TCP connections.
Caution: Systems deployed outside a firewall are potentially vulnerable to unauthorized access. Visit the Polycom Security section of the Knowledge Base at the Poly Online Support Center for timely security information. You can also register to receive periodic updates and advisories.
Configure the System for H.460 Firewall/NAT Traversal
H.460 firewall/NAT traversal can be necessary if you’re calling with a cloud-based conferencing service or your system is outside a corporate network (for example, a home office).
Make sure you register your system with a network device that supports H.460.18 and H.460.19
standards (for example, a RealPresence Access Director system or a Polycom VBP device).
Procedure
1.
In the system web interface, go to Network > Primary Network .
2.
Go to Firewall .
3.
Make sure that the Enable H.460 Firewall Traversal check box is selected.
4.
Verify the firewalls that you traverse allow your system to use outbound TCP and UDP connections.
▪ Firewalls with a stricter rule set must allow the system to use at least the following outbound
TCP and UDP ports: 1720 (TCP), 14085-15084 (TCP), 1719 (UDP), and 16386-25386
(UDP).
▪ Firewalls must allow inbound traffic to the TCP and UDP ports used for outbound traffic.
5.
Configure the following settings:
78
Setting
Fixed Ports
TCP Ports
UDP Ports
NAT Configuration
Securing the System
Description
Defines which TCP and UDP ports your system uses for firewall traversal.
Enable this option if your firewall isn’t H.323
compatible. The system assigns a port range starting with the TCP and UDP ports you specify
(port 3230 is where the range begins by default).
Note: For the fixed ports you configure, you must open the corresponding ports on your firewall. For H.323, open TCP port
1720. For SIP, open UDP port 5060, TCP
5060, or TCP 5061 depending on if you’re using UDP, TCP, or TLS, respectively, as the SIP transport protocol.
Disable this option if your firewall is H.323
compatible or the system isn’t behind a firewall.
The starting value for the range of TCP and UDP ports the system uses. The system automatically configures the range based on the beginning value you set here.
To allow H.323 traffic, you need two TCP and eight
UDP ports per connection. You must also open
TCP port 1720 on the firewall.
To allow SIP traffic, you need TCP port 5060 and eight UDP ports per connection.
UDP port range : Because systems support ICE, the range of fixed UDP ports is 32. The system cycles through the available ports from call to call.
Fixed ports range and filters : You might notice that the source port of a SIP signaling message is not in the fixed ports range. When your firewall is filtering on source ports, in the system web interface, go to the SIP page and enable Force
Connection Reuse . When enabled, the system uses port 5060 and 5061 for the source and destination port (these must be open on the firewall).
Specifies if the system automatically determines the NAT public (WAN) address.
▪ If the system isn’t behind a NAT or is connected to the network through a VPN, set this option to
Off .
▪ If the system is behind a NAT that allows HTTP traffic, set this option to Auto .
▪ If the system is behind a NAT that doesn’t allow
HTTP traffic, set this option to Manual .
79
Securing the System
Setting
NAT Public (WAN) Address
NAT is H.323 Compatible
Address Displayed in Global Directory
Enable SIP Keep-Alive Messages
Description
The address callers from outside the LAN use to call your system. If you configured the NAT manually, enter the NAT public address here.
You can configure this option only when you set
NAT Configuration to Manual .
Identifies whether the system is behind a NAT that can translate H.323 traffic.
This option is available only when you set NAT
Configuration to Auto or Manual .
Choose whether to display the system’s public or private address in the global directory.
This option is available only when you set NAT
Configuration to Auto or Manual .
Specifies whether to regularly transmit keep-alive messages on the SIP signaling channel and on
RTP sessions part of SIP calls. Keep-alive messages maintain connections through firewall/NAT devices that are often used at network edges.
If your system is in an Avaya SIP environment, it’s recommended that you disable this setting to enable calls to fully connect.
6.
Select Save .
Set Up a Security Banner
You can create a security banner, which is a message that displays before users log in to the system remotely.
Procedure
1.
In the system web interface, go to Security > Security Banner .
2.
Select Enable Security Banner .
3.
Configure the following settings and select Save .
Setting
Banner Text
Description
▪ Custom : Enter any text for the banner.
▪ DoD : A default U.S. Department of Defense security banner. You can’t change this text.
80
Securing the System
Setting
Remote Access Banner Text
Description
The security banner that displays on the system web interface and command-line API (SSH or telnet). Enter up to 2408 single-byte or 1024 double-byte characters. The text wraps to the next line as you type, but you can press Enter anywhere to force a line break.
Web Proxies
A web proxy can help your system communicate outside your network securely and with increased performance. For example, you can direct your system’s outbound requests through an enterprise proxy.
You can configure your system to use a proxy one of the following ways:
▪ Automatic : You specify only the proxy credentials (if needed). Using DHCP, your system obtains a
URL to automatically download a proxy auto-configuration (PAC) file.
▪ Semi-automatic : You specify the proxy credentials and URL for automatically downloading a PAC file.
▪ Manual : You specify the proxy address, port, and credentials. (This method lets you configure your system with only one proxy.)
If your configuration includes automatically downloading a PAC file, there must be an expiration associated with the file so the system knows when to download a new one. Make sure your PAC file server includes an Expires header in its HTTP response (for example, Expires: Wed, 30 Oct
2016 09:30:00 GMT ).
Your system can authenticate with a proxy using the following methods:
▪ Digest authentication (with either MD-5 or SHA-256 digest)
▪ NTLM authentication (only NTLMv2 is supported)
▪ Basic authentication (this insecure method is disabled by default)
▪ No authentication (or null authentication, meaning the proxy server doesn’t require credentials)
Your system supports the following services when configured to use a web proxy:
▪ Directory servers
▪ Provisioning service
▪ Software updates
Related Links
Checking the Web Proxy Configuration
on page 160
Enable the System to Use a Web Proxy
By default, your system configuration doesn’t use web proxies.
Procedure
1.
In the system web interface, go to Network > Primary Network > Web Proxy Settings .
2.
Select Enable Web Proxy .
81
Securing the System
Set Up Automatic Web Proxy Configuration
With automatic web proxy configuration, your system obtains a URL for downloading a proxy autoconfiguration (PAC) file through DHCP option 252.
Procedure
1.
In the system web interface, go to Network > Primary Network > Web Proxy Settings .
2.
Select Automatic Configuration .
3.
Select Enable WPAD .
This option enables the web proxy auto-discovery protocol (WPAD), which helps your system automatically download the PAC file on your network using DHCP option 252.
4.
Enter the Proxy User Name and Proxy Password .
5.
Select Save .
Your system automatically downloads and reads the PAC file specifying the proxy rules. The system also automatically downloads subsequent files before the current file expires.
Set Up Semi-Automatic Web Proxy Configuration
With semiautomatic web proxy configuration, you must specify the URL your system uses to download a proxy auto-configuration (PAC) file.
Procedure
1.
In the system web interface, go to Network > Primary Network > Web Proxy Settings .
2.
Select Automatic Configuration .
3.
If checked, clear the Enable WPAD check box.
4.
Enter the Proxy User Name and Proxy Password .
5.
Enter the PAC URL from which your system downloads the PAC file.
6.
Select Save .
Your system automatically downloads and reads the PAC file specifying the proxy rules. The system also automatically downloads subsequent files before the current file expires.
Manually Update the PAC File on the System
Even if you set up your system for automatic or semi-automatic web proxy configuration, you can still manually download a new PAC file from the server.
The PAC file may update on the server much sooner than its expiration date. In this situation, you don’t have to wait for the system to automatically download the latest version.
Procedure
1.
In the system web interface, go to Network > Primary Network > Web Proxy Settings .
2.
Select Update PAC File to fetch the latest version of the file from the server.
Manually Configure a Web Proxy
You can manually configure your system to communicate with a web proxy by providing a proxy address, port, and credentials (if required).
This method lets you configure your system with only one proxy.
82
Securing the System
Procedure
1.
In the system web interface, go to Network > Primary Network > Web Proxy Settings .
2.
If checked, clear the Automatic Configuration check box.
3.
Enter the Proxy Address and Proxy Port .
4.
Enter the Proxy User Name and Proxy Password .
5.
Select Save .
View Connections to the System
You can see a list of current connections to your system.
The list provides the following information:
▪ Type of connection (for example, web)
▪ ID associated with the session (for example, admin or user)
▪ Remote address (IP addresses of the hosts accessing your system)
This list doesn’t show details related to sharing content. For example, if someone shares a video from an
HDMI-connected laptop, you don’t see that this device is connected to the system.
Procedure
» In the system web interface, go to Diagnostics > Sessions .
System Port Usage
The following table lists the inbound, outbound, and bidirectional ports used by your system.
G7500, Studio X50, and Studio X30 System Port Usage
Port Direction Type Protocol Function
22 Inbound Static SSH
Open by
Default?
No
Configurable
Port?
No
23
24
53
Inbound
Inbound
Outbound
Static
Static
Static
TCP
TCP
UDP
Command-line
API access over
SSH
Command-line
API access over telnet
Command-line
API access over telnet
DNS
No
No
Yes
No
No
No
83
Securing the System
Port
80
Direction
Inbound
Type
Static
123
161
443
514
554
Outbound
Inbound
Bidirectional
Outbound
Inbound
Static
Static
Static
Static
Static
Protocol
TCP
UDP
UDP
TCP/SCTP
UDP
TCP, UDP
Function
HTTP web server listener that provides access to the web interface.
Redirects all sessions to
HTTPS on port
443. Also used by AirPlay.
Open by
Default?
Yes
NTP (automatic time synchronization)
SNMP reporting
Static TCP
HTTPS web server listener that provides
TLS access to the web interface.
AirPlay
Microsoft
Exchange Server
Zero Touch
Onboarding
Provisioning (for example,
RealPresence
Resource
Manager)
Video system control using a
Poly TC8 device
Video system control using a
Poly Trio system
REST API
Polycom Content
App
Remote logging
AirPlay (Real-
Time Streaming
Protocol [RTSP])
Yes
No
Yes
No
No
Configurable
Port?
Yes
No
Yes
No
Yes
No
84
Securing the System
Port
601
1718
1719
1720
1900
2000
3689
Direction
Outbound
Outbound
Bidirectional
Bidirectional
Inbound
Inbound
Inbound
Type
Static
Static
Static
Static
Static
Static
Static
4100–
4115
4100–
4115
4443
Bidirectional Static
Inbound Static
Bidirectional Static
5001
5060
5061
5127
5297
Inbound
Bidirectional
Bidirectional
Inbound
Inbound
Static
Static
Static
Static
Static
Protocol
TCP
UDP
UDP
Function
Remote logging
H.255.0
gatekeeper discovery
H.255.0 RAS signaling
No
Open by
Default?
No
No
TCP
UDP
UDP
TCP
TCP
UDP
TCP/TLS
TCP/TLS
H.255.0 call signaling
AirPlay/Bonjour
(Simple Service
Discovery
Protocol [SSDP])
Multicast pairing iTunes Music
Sharing/AirPlay
(Digital Audio
Access Protocol
[DAAP])
AirPlay (audio control)
AirPlay (audio data)
Web server for peripheral device software downloads and log uploads
Polycom Content
App
SIP
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes TCP or UDP, depending the on configuration
TLS
TCP
TCP
SIP
Poly usage data collection
Bonjour
Yes
Yes
Yes
No
No
No
No
No
Configurable
Port?
Yes
No
No
No
No
No
No
Yes
(outbound)
No (inbound)
No
No
85
Securing the System
Port
5298
5353
49163
Direction
Inbound
Inbound
Inbound
Type
Static
Static
16384–
32764
18888
44444
47000
49152–
65535
49159
6514
7000
7080
7081
7100
Outbound
Inbound
Inbound
Inbound
Inbound
Static
Static
Static
Static
Static
Bidirectional Dynamic
Inbound
Inbound
Inbound
Static
Static
Static
Bidirectional Dynamic
Inbound Static
Static
TLS
TCP
TCP
TCP
TCP
UDP
TCP
TCP
TCP
TCP
UDP
Protocol
TCP
UDP
UDP
Function
Bonjour
Bonjour/AirPlay
(multicast
Domain Name
System [mDNS])
Remote logging
AirPlay standard services
Web services
Web services
AirPlay mirroring services
RTP/RTCP
(video and audio streams)
Modular room messaging
Content stream
AirPlay casting services
H.245
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Open by
Default?
Yes
Yes
Bonjour/AirPlay
(mDNS
[Windows])
Bonjour/AirPlay
(mDNS
[Windows])
Yes
Yes
Yes
No
No
No
No
Yes
No
No
No
Yes
No
Configurable
Port?
No
No
No
Wireless Port Usage with Miracast-Certified Devices
A Miracast-certified device uses an ad-hoc, peer-to-peer Wi-Fi connection (known as Wi-Fi Direct) to share content on your system.
The following tables describe the Wi-Fi network ports used by 1) Miracast-certified devices connected to your system and 2) the system when connected to a Miracast-certified device.
86
Securing the System
Note: Highly secure environments may restrict network activity using client firewalls or Group Policy
(GPO), which can block access to Miracast functionality and cause connection issues. To avoid these problems, your GPO must explicitly allow Wi-Fi Direct groups and connections to ad-hoc networks.
It’s also recommended that you don't restrict the following ports on the Wi-Fi adapter of a Miracastcertified device intended to share content.
Miracast-Certified Device Ports for Wi-Fi Direct Connections
Port
1024-65535
1024-65535
7236
Direction
Outbound
Bidirectional
Bidirectional
Type
Dynamic
Dynamic
Static
Protocol
UDP
UDP
TCP
Function
RTP (video and audio mirroring)
RTCP (RTP transportation quality report)
RTSP (Miracast display negotiation)
Note
Randomly assigned by the client.
Randomly assigned by the client.
System Ports for Wi-Fi Direct Connections
Port
1024-65535
Direction
Bidirectional
Type
Dynamic
Protocol
TCP
14000, 14002,
14004, 14006
Inbound
14001, 14003,
14005, 14007
Bidirectional
Static
Static
UDP
UDP
Function
RTSP (Miracast display negotiation)
RTP (video and audio mirroring)
RTCP (RTP transportation quality report)
Note
Randomly assigned by the system.
Ports 14002,
14004, and
14006 are used when there’s more than one device connected to your system.
Ports 14003,
14005, and
14007 are used when there’s more than one device connected to your system.
Related Links
Specify the Wireless Operating Channel for Miracast-Certified Devices on page 56
87
Configuring Call Settings
Topics:
▪
▪
▪
▪
▪
Configure the Recent Calls List
▪
Specify how you want your system to handle and manage calls.
Related Links
Configure H.323 Settings on page 49
Configure SIP Settings on page 51
Configure Call Settings
You can configure call settings in the system web interface.
Procedure
1.
In the system web interface, go to Call Configuration > Call Settings .
2.
Configure the following settings:
Setting
Maximum Time in Call
Auto Answer Point-to-Point Call
Description
Sets the maximum number of hours allowed for a call.
When the maximum time expires, the system prompts the user to hang up. If the user doesn’t answer within one minute, the call automatically ends. If the user chooses to stay in the call, the system doesn’t prompt the user again.
Specifies whether the system answers an incoming call when not in a call. Choose one of the following options:
▪ Yes : The system automatically answers incoming point-to-point calls.
▪ No : Users must answer incoming calls manually.
▪ Do Not Disturb : The system rejects incoming calls without notification.
88
Setting
Auto-Merge Incoming Call to Current Call
Display Icons in a Call
Enable Flashing Incoming Call Notification
Preferred 'Place a Call' Navigation
Configuring Call Settings
Description
Specifies whether the system automatically answers, provides a notification on the local interface, or ignores an incoming audio or video call while you’re in an active call. When you merge an incoming call, it joins the incoming call with the current active call participants. This is only applicable to incoming SIP and H.323 calls.
Choose one of the following options:
▪ Yes : The system automatically answers and merges an incoming audio or video call to the existing call. Incoming video calls are audio only once they merge with the active call. You can only merge a single incoming call with an active call. If the system receives additional incoming calls, they’re rejected without notification.
▪ No : The system doesn’t automatically answer the incoming call, and the system displays a notification on the local interface prompting you to answer or ignore the call.
▪ Do Not Disturb : The system rejects incoming calls without notification.
Specifies whether to display onscreen graphics, including icons and help text, during calls.
Specifies whether you see an incoming call notification.
Specifies the default options that display on the local interface Place a Call screen. Choose one of the following options:
▪ Keypad : Displays recently-dialed numbers and a dialpad.
▪ Contacts : Displays a screen for searching a directory. The multitiered directory (LDAP) root entry displays at the top of the Contacts list, which combines your search results and favorites.
▪ Recent Calls : Lists previous calls in chronological order.
3.
Select Save .
Related Links
Configure General Audio Settings
on page 93
89
Configuring Call Settings
Configure Dialing Options
You can specify video and audio dialing preferences for your system.
Procedure
1.
In the system web interface, go to Call Configuration > Dialing Preference .
2.
Configure the following settings (your changes save automatically):
Setting
Scalable Video Coding Preference (H.264)
Description
This read-only setting indicates your system uses only AVC conferencing.
Note: Scalable video coding (SVC) conferencing isn’t supported.
Enable H.239
Enable Audio-Only Calls
Call Type Order
Video Dialing Order Preferences
Audio Dialing Order Preferences
Enables the use of a standards-based specification for parallel video streams (people and content).
Enable this setting if you know call participants support H.239.
Enables you to place audio-only calls on the system.
Specifies an order preference for video or voice calls. Select either Video then Phone , or Phone then Video . This setting is read-only if the video system has no phone connections.
Specifies how the system places video calls to directory entries with more than one type of number.
Select one of the following protocols for each preference:
▪ SIP
▪ IP H.323
This setting also determines how the system places video calls from the Place a Call screen when your set the call protocol to Auto or if it’s unavailable.
For example, if a call doesn’t connect with H.323, the system tries using SIP.
Specifies how the system places audio calls to directory entries with more than one type of number.
Select one of the following protocols for each preference:
▪ SIP
▪ H.323
90
Configuring Call Settings
Set Call Answering Mode
You can configure how users answer calls on the system.
Procedure
1.
In the system web interface, go to Call Configuration > Call Settings .
2.
Select one of the following for Auto Answer Point-to-Point Call :
▪ Yes : The system automatically answers incoming calls.
▪ No : Users must answer incoming calls manually.
▪ Do Not Disturb : The system rejects incoming calls without notification.
Set Preferred Call Speeds
You can configure call speeds in the system web interface.
Procedure
1.
In the system web interface, go to Call Configuration > Dialing Preference .
2.
Configure the following settings (your changes save automatically):
Setting
Preferred Speed for Placed Calls
Maximum Speed for Received Calls
Description
Determines the IP call speed your system uses when either of the following occurs:
▪ A user sets the call speed to Auto on the Place a Call screen.
▪ A user places a call from the directory.
If the far-site system doesn’t support the selected speed, the system automatically negotiates a lower speed.
The system doesn’t receive calls at a higher rate than the speed you set here.
Configure the Recent Calls List
You can display recent calls on the Place a Call page in the system web interface.
The recent calls list includes the following information:
▪ Name or number
▪ If the system placed or received the call
▪ Date and time
Procedure
1.
In the system web interface, go to Call Configuration > Recent Calls .
91
Configuring Call Settings
2.
Configure the following settings (your changes save automatically):
Setting
Call Detail Report
Enable Recent Calls
Maximum Number to Display
Description
Call detail record (CDR) information is in the system logs. When disabled, the system doesn’t write call information.
Specifies whether to show recent calls on the local interface and the system web interface.
The maximum number of calls the system displays in the recent calls list.
Clear Recent Calls
You can clear the recent calls list from the system web interface.
Procedure
1.
In the system web interface, go to Call Configuration > Recent Calls .
2.
For Clear Recent Calls , select Clear and confirm your choice.
92
Configuring Audio Settings
Topics:
▪
Configure General Audio Settings
▪
▪
▪
You can configure audio settings in the system web interface.
Configure General Audio Settings
You can specify general audio settings for your system.
If you are in a call with a far site that is sending audio in stereo mode, you can receive in stereo. In calls where some sites can send and receive stereo but some can’t, any site set up to send or receive stereo can do so.
Note: Some audio settings are unavailable when you connect a SoundStructure digital mixer to your system.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > General Audio Settings .
2.
Configure the following settings (your changes save automatically):
Setting
Polycom StereoSurround
Sound Effects Volume
Ringtone
Description
Enables Polycom StereoSurround software for all calls.
Note: Enabling this setting disables Polycom
Acoustic Fence technology and vice versa.
This feature isn’t available on the Studio X30 system. It also isn’t available when using a Poly
Microphone IP Adapter your system.
Sets the volume level of the ringtone.
Specifies the ringtone for incoming calls.
93
Configuring Audio Settings
Setting
Audio Mute Auto-Answered Calls
Enable M-Mode
Enable NoiseBlockAI
Enable Join and Leave Tones
Transmission Audio Gain (dB)
Enable Audio Mute Reminder
Description
Specifies whether to automatically mute incoming calls.
Note: You must first enable Auto Answer Pointto-Point Video in Call Settings to use this feature.
Specifies whether the system transmits audio using a configuration that best reproduces interactive and live performance music picked up by microphones.
This feature provides the highest-possible bandwidth for audio.
When you enable M-Mode, even the faintest musical notes come through clearly.
Enables Poly NoiseBlockAI, which during a call eliminates background and extraneous sounds in common working environments.
Note: This setting is disabled when you enable
M-Mode. If you use an external echo canceller, keyboard noise reduction isn’t available.
The system plays a tone when someone joins or leaves a conference call.
Specifies the audio level (in decibels) that the system transmits sound. Unless otherwise advised, you should set this value to 0 dB.
Specifies if the system displays a notification that the microphones are muted when it detects someone speaking.
Related Links
Configure Sleep Settings on page 32
on page 88
on page 156
on page 157
Audio Input
You can connect several types of microphones to your system.
The following audio inputs are supported:
▪ IP-based Poly microphone peripherals (for the G7500 system only):
◦ Poly IP Table Microphone
94
Configuring Audio Settings
◦ Poly IP Ceiling Microphone
◦ Poly Microphone IP Adapter
▪ X50 Microphones and X30 Microphones : The built-in microphones that come with the Studio X50 and Studio X30 systems.
▪ Polycom RealPresence Debut Expansion Microphone (for the Studio X50 system only)
▪ 3.5 mm (not available on Studio X30 system): 3.5 mm stereo input used to share audio from a device or microphone. Depending on your setup, you can specify if sound from this input plays in the room and at far sites or just at far sites.
▪ HDMI : Used to share audio (along with content) from a device. Sound from this input plays in the room and at far sites.
Configure IP Microphones
You can configure IP table and ceiling microphone settings for your system.
The Studio X50 and Studio X30 don’t support IP microphones.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Audio Input .
2.
Configure the following settings (your changes save automatically):
Setting
Stereo Mode
Autorotation
Description
Positions the audio input within the left and right channels. Left sends all of the audio to the left channel. Right sends all of the audio to the right channel. For Poly table microphone and ceiling microphones, Left+Right sends audio from one microphone element to the left channel and audio from a second element to the right channel.
Specifies whether the system uses autorotation for
Poly microphones. If you enable this feature, the system automatically assigns left and right channels for the microphone based on the sound it senses from the left and right speakers.
Configuring the Microphone Adapter
The video system automatically configures Poly Microphone IP Adapter when you pair it.
The Studio X50 and Studio X30 systems don’t support the microphone adapter.
Note the following when using the microphone adapter:
▪ You can’t use Poly IP table and ceiling microphones.
▪ Polycom StereoSurround software isn’t available.
▪ The audio input level (mono channel meter) displays in the local interface and system web interface.
Related Links
Poly Microphone IP Adapter on page 27
95
Configuring Audio Settings
Polycom Acoustic Fence
Polycom Acoustic Fence technology creates a virtual audio fence that blocks sounds from outside the fence. It suppresses background noise during calls to enhance audio quality for call participants.
Polycom Acoustic Fence works in mono mode only and disables Polycom StereoSurround when enabled.
Polycom Acoustic Fence technology provides the following:
▪ Mutes sounds outside the fence when no one is speaking inside it
▪ Lowers sounds outside the fence by 12 dB when someone is speaking inside it
▪ Mutes speakers when someone leaves the fenced area
▪ Enables you to adjust the width of the audio fence beam to define the area where sounds are picked up
For Studio X50 and Studio X30 Systems:
Once you enable Polycom Acoustic Fence on your Studio X50 or Studio X30 system, you can also adjust the width of the audio fence beam so that the system’s built-in microphones pick up sound in the area you want.
For G7500 Systems:
Once you enable Polycom Acoustic Fence, you must set up additional hardware to use this feature with your G7500 system. You need a primary microphone and at least one more microphone to create the fence.
The boundary radius can be two to several feet around the following Poly peripheral devices:
▪ Table microphone
▪ Ceiling microphone
Note: Microphones connected to a Poly Microphone IP Adapter currently don’t support Polycom
Acoustic Fence.
Once you set up the microphones, you can adjust the width of the audio fence beam to limit or expand where sounds are picked up inside the fence.
For more details on Polycom Acoustic Fence, search the Polycom Knowledge Base for acoustic fence .
Configure Polycom Acoustic Fence
You can enable and configure the Polycom Acoustic Fence feature to help define the audio fence around the system.
Note: This option isn’t available if you enable Polycom StereoSurround .
Procedure
1.
In the system web interface, go to Audio/Video > Audio > General Audio Settings .
2.
Select the Enable Acoustic Fence check box.
3.
Set Acoustic Fence Sensitivity to adjust the width of the audio fence beam.
▪ For Studio X50 and Studio X30 systems : Higher values increase the width of the audio fence beam. Use 0 for the narrowest beam (24 degrees) or 10 for the widest beam (120 degrees).
96
Configuring Audio Settings
▪ For G7500 systems : Higher values increase the width of the audio fence beam between the primary and fence microphone(s). Use 0 for the narrowest beam (20 degrees) or 10 for the widest beam (120 degrees).
Specify the Primary and Fence Microphones
To use Polycom Acoustic Fence technology with your G7500 system, you need a primary microphone to pick up audio and one or more fence microphones to define the audio boundary.
The system considers the first microphone you pair as the primary microphone. By default, a microphone pairs to the system when you connect it (unless you’ve disabled automatic pairing). You can connect up to three microphones directly to your system.
Note: If you use a mix of table and ceiling microphones, the primary microphone must be a table microphone. The primary microphone can be a ceiling microphone if you use only that type of microphone.
Procedure
1.
Connect the primary microphone to an LLN port on the back of your system.
Important: When using Polycom Acoustic Fence technology, remember which microphone is the primary one. If you disconnect this microphone, Polycom Acoustic Fence no longer works and you must reconnect all microphones (starting with the primary microphone) for it to work again.
2.
Connect the other microphone(s).
Related Links
Poly G7500 System Ports on page 13
Specify a Different Primary Microphone
If you want to change the primary microphone you’re using for Polycom Acoustic Fence technology, you must first disconnect all the microphones from your G7500 system.
Note: If you use a mix of table and ceiling microphones, the primary microphone must be a table microphone. The primary microphone can be a ceiling microphone if you use only that type of microphone.
Procedure
1.
Disconnect all microphones from the LLN ports on the back of your system.
2.
Reconnect the microphone you want to be the primary.
Your primary microphone is set up.
3.
Connect the other microphone(s).
Your system is ready to use Polycom Acoustic Fence with a new primary microphone.
97
Configuring Audio Settings
Configure HDMI Audio Input
You can specify the audio input level for your system’s HDMI connections (for example, audio from an
HDMI-connected laptop).
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Audio Input > HDMI .
2.
For Audio Input Level , set the left and right channel levels by choosing a value from 0 to 10 .
The audio meters display the input’s left and right channel levels.
Configure 3.5 mm Audio Input
You can specify how the system routes and controls audio from the 3.5 mm stereo input.
The Studio X30 doesn't support 3.5 mm audio input.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Audio Input > 3.5 mm .
2.
For Audio Input Level , set the left and right channel levels by choosing a value from 0 to 10 .
The audio meters display the input’s left and right channel levels.
3.
Choose one of the following Playback Options :
Playback Options
Option
Playback to All Locations
Description
Select this option if you’re sending audio from a device.
Result
▪ Near and far sites hear the
3.5 mm stereo input.
▪ You can’t mute audio or control echo cancellation.
Playback to All Locations
Playback to Far Sites, Mute
Controlled
Select this option if you’re using an external digital signal processor (DSP), such as
Polycom SoundStructure, which provides mute controls and echo cancellation.
Select this option if you want to perform activities like sharing music from a mobile phone to call participants.
▪ Only far sites hear the 3.5
mm stereo input (there is no associated video content).
▪ You can’t mute audio or control echo cancellation through the system.
▪ Only far sites hear the 3.5
mm stereo input (there is no associated video content).
▪ You can mute audio but can’t control echo cancellation.
98
Configuring Audio Settings
Option
Playback to Far Sites, Mute
Controlled, Echo Cancelled
Description
Select this option if you’re using a line-level microphone.
Note: The microphone must provide the line-level signal to work.
Result
▪ Only far sites hear the 3.5
mm stereo input (there is no associated video content).
▪ You can mute audio and control echo cancellation.
▪ Mic-level inputs aren’t supported.
Using Poly Trio Microphones
The video system automatically configures Poly Trio microphones when you pair the phone.
You can only use the following microphones in addition to the Poly Trio microphones:
▪ Poly Trio Expansion Microphones
▪ Studio X50 and Studio X30 built-in microphones (speaker locating only)
Also note the following when using Poly Trio microphones with your video system:
▪ You can’t use Poly IP audio devices, including table and ceiling microphones and the microphone adapter.
▪ Polycom Acoustic Fence technology isn’t available.
▪ Polycom StereoSurround software isn’t available.
▪ The audio input level (mono channel meter) displays in the local interface and system web interface.
Configure NoiseBlockAI When Paired with Poly Trio
To use Poly NoiseBlockAI when paired with a Poly Trio, enable the setting on your video system. There’s nothing to configure on the phone.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > General Audio Settings .
2.
Select the Enable Keyboard Noise Reduction and NoiseBlock check box.
Configuring the Microphone Adapter
The video system automatically configures Poly Microphone IP Adapter when you pair it.
The Studio X50 and Studio X30 systems don’t support the microphone adapter.
Note the following when using the microphone adapter:
▪ You can’t use Poly IP table and ceiling microphones.
▪ Polycom StereoSurround software isn’t available.
▪ The audio input level (mono channel meter) displays in the local interface and system web interface.
Related Links
Poly Microphone IP Adapter on page 27
99
Configuring Audio Settings
Audio Output
You have different options to play audio on your system to fit your setup.
You can use the primary monitor’s built-in speakers, the Studio X50 and Studio X30 systems’ built-in speakers, or you can connect an external speaker system (such as Polycom StereoSurround kit) to the
G7500 system to provide more volume and comprehensive sound in large rooms.
See your system setup sheet for connection details. Make sure that you power off the system before connecting anything to it.
Configure Audio Output Settings
You can configure the audio output settings for your system.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Audio Output .
2.
Configure the following settings (your changes save automatically):
Setting
Primary Audio Volume
Bass
Treble
Speaker Options
Description
Sets the main audio output volume level going to the speakers.
Sets the volume level for low frequencies without changing the primary audio volume.
Sets the volume level for high frequencies without changing the primary audio volume.
Specifies the speaker output.
▪ TV Speakers : Use only the speakers on your connected monitors.
▪ System Speakers : Use only the built-in speakers on a Studio X50 or Studio X30 system.
Using Poly Trio Speakers
When you pair a Poly Trio system with your video system, you can use the phone’s speakers as the audio output for the room.
Choose Speakers When Paired with Poly Trio
In or out of a call, you can toggle whether you want to use Poly Trio, connected monitor, or video system speakers.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Audio Output .
2.
Choose one of the following Speaker Options :
100
Configuring Audio Settings
▪ Phone Speakers : Use only your Poly Trio system speakers.
▪ TV Speakers : Use only the speakers on your connected monitors.
▪ System Speakers : Use only the built-in speakers on a Studio X50 or Studio X30 system.
Configure 3.5 mm Audio Output
If you want to use the 3.5 mm stereo line output to hear audio in the room, make sure you mute the monitor(s) connected to your system through HDMI.
The Studio X30 doesn’t support 3.5 mm audio output.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Line Out .
2.
To specify how volume is controlled for a device connected to the line out port, choose one of the following Output Mode options:
▪ Variable : Enables users to change the volume.
▪ Fixed : Sets the volume to the audio level configured for the system.
USB Audio
Your system supports audio input and output sources through USB connections. When enabled, non-USB audio connections aren’t supported.
Using USB and Bluetooth Headsets
You can use USB and Bluetooth headsets with your system (Bluetooth headsets require a USB adapter).
When connected, you can control your headset audio but not the system audio (such as mute or volume control).
Only headsets with the following specifications are supported:
▪ 48 kHz sample rate
▪ Dual channels
▪ 16-bit pulse-code modulation (PCM)
Using the Shure IntelliMix P300
You can connect a Shure IntelliMix P300 audio conferencing processor to your G7500 or Studio X50 system using a USB-A port (USB-C isn’t supported).
Note the following when using this audio processor:
▪ Once connected to the system, the processor handles all audio.
▪ You can’t use speakers and microphones that aren’t connected to the processor.
▪ The video system automatically disables its internal echo cancellation processing.
101
Configuring Audio Settings
Using the EagleEye Cube USB Camera Microphone
With a G7500 system, you can use the Poly EagleEye Cube USB camera as a microphone if you don’t connect other microphones to the system.
Enable USB Audio
USB audio connections (for example, a USB headset) don’t work by default.
Procedure
1.
In the system web interface, go to Audio/Video > Audio > General Audio Settings .
2.
Select the Enable USB Audio check box.
102
Configuring Video and Camera Settings
Topics:
▪
▪
Supported HDCI Input Resolutions
▪
▪
•
▪
Configure General Camera Settings
▪
Reset Camera Settings to Defaults
▪
▪
▪
Configuring Video Input Settings
▪
You can configure video settings for your system, including monitors and cameras.
Use the information about supported HDMI I/O resolutions and codec capabilities to optimize your video experience based on your deployment requirements.
HDMI I/O
Your system has HDMI input and output ports.
Your system has the following HDMI connections:
▪ Output for connecting the primary system monitor (Monitor 1)
▪ Output for connecting the secondary system monitor (Monitor 2)
The Studio X30 system doesn’t have a second HDMI output.
▪ Input for content sharing, including audio streaming
Note the following:
▪ The system supports only HDMI-to-HDMI connections and doesn’t support display conversions, such as VGA-to-HDMI or HDMI-to-DVI cable converters.
▪ The HDMI specifications don’t provide maximum cable length definitions. The requirements defined in the specification implicitly give rise to length limitations that are based on the cable’s construction.
▪ As with other Polycom hardware, the HDMI ports on your system meet HDMI specification requirements. HDMI signal quality is dependent on every cable and connector in the HDMI path.
Passive HDMI extenders, female-female couplers, and wall plates are potential points of failure and signal loss.
▪ A high-quality passive cable of minimum length provides the most repeatable solution. As the power level of HDMI output devices can vary greatly, keep the distance from the HDMI source to the system input as short as possible.
103
Configuring Video and Camera Settings
Polycom claims no responsibility or liability for the quality, performance, or reliability of third-party HDMI cables, HDMI splitters, or HDMI USB adapters.
Polycom recommends working with your A/V integrator or partner who understands the unique requirements in your environment.
Supported HDMI Output Resolutions for Single-Monitor Setups
Your system supports the following HDMI output resolutions and frame rates when using one monitor.
Supported HDMI Output Resolutions and Frame Rates for Single-Monitor Setups
Output
UHD (4K)
FHD
Resolution
3840 × 2160p
1920 × 1080p
Frame Rates (fps)
25, 30, 50, 60
50, 60
Supported HDMI Output Resolutions for Dual-Monitor Setups
The G7500 and Studio X50 systems support the following HDMI output resolutions and frame rates when using two monitors.
Note: 4K resolution (3840 × 2160p) isn’t supported when you configure your system for dual monitors. If you want to use 4K, set Monitor 2 to Off in the system web interface.
Supported HDMI Output Resolutions and Frame Rates for Dual-Monitor Setups
Output
FHD
Resolution
1920 × 1080p
Frame Rates (fps)
50, 60
Supported HDMI Input Resolutions
The content sharing HDMI interface supports audio streaming. Sharing content from personal computing devices refers to sharing content using a computer with an HDMI connection. The system supports a variety of resolutions.
Supported HDMI Input Resolutions and Frame Rates
Input
UHD
QHD
FHD
WSXGA+
UXGA
SXGA
Resolution
3840 x 2160p
2560 x 1440p
1920 x 1080p
1680 x 1050
1600 x 1200
1280 x 1024
Frame Rate(s)
24, 25, 30
50, 60
50, 60
60
60
60
104
Configuring Video and Camera Settings
Input
HD
XGA
SVGA
Resolution
1280 x 720p
1024 x 768
800 x 600
Frame Rate(s)
50, 60
60
60
Supported HDCI Input Resolutions
The HDCI input resolution is fixed based on the supported Poly camera.
HDCI input applies only to the G7500 system.
Configure Monitor Settings
You can optimize your system video output for single- and dual-monitor setups.
The Studio X30 system doesn’t support dual monitors.
Interlaced modes aren’t supported.
Procedure
1.
In the system web interface, go to Audio/Video > Monitors .
2.
Configure the following settings (your changes save automatically):
Setting
Configure Monitor
Description
Specifies monitor settings.
▪ Automatic : (Default) Detects the highestsupported resolution of the connected monitors.
When you select this option, the Resolution setting is disabled.
▪ Manual : You can choose the monitor
Resolution .
▪ Off : Disable this monitor (not available for
Monitor 1).
Note: To use 4K resolution, make sure you set
Monitor 2 to Off .
105
Configuring Video and Camera Settings
Setting
Resolution
Description
Specifies the monitor resolution. This setting is unavailable when you select Automatic for the
Configure Monitor setting.
Note: The system uses the resolution you select even if the monitor doesn’t support it.
There is no dynamic resolution adjustment in this situation.
Related Links
Configure a Touch Monitor on page 106
Configure Dual Monitor Display Settings on page 127
Configure a Touch Monitor
In a dual-monitor setup, you must configure the touch monitors to work in the system local interface.
Note: Touch monitors in single-monitor setups don’t require configuration. For example, there’s no additional touch monitor configuration required if you have a Studio X30 system.
Procedure
1.
Do one of the following:
▪ In a call: Go to Menu > More > Settings > Diagnostics > Touch Configuration .
▪ Out of a call: Go to Menu > Settings > Diagnostics > Touch Configuration .
2.
On each screen, select the Hand icon.
3.
Select Finish Configuration .
Related Links
Configure Monitor Settings on page 105
Configure Dual Monitor Display Settings on page 127
Monitors with CEC
You can use some Consumer Electronics Control (CEC) features with HDMI-connected monitors that support the CEC protocol.
Your system supports the following CEC commands:
• System Standby : When the system goes to sleep, connected monitors switch to standby mode to save power.
• One Touch Play : You can wake connected monitors with your system remote control.
Remember the following when enabling CEC on your system:
106
Configuring Video and Camera Settings
• If you connect a monitor with an HDMI splitter, the splitter must support CEC. Due to HDMI splitter limitations, monitors behind a 1xM (one-input multiple-output) splitter might not switch to the correct input when waking up.
• The system doesn’t respond to CEC commands from a monitor remote control.
• If a monitor is connected to two endpoints, the monitor displays the active endpoint when the other is sleeping.
Disable CEC
You can disable CEC in the system web interface.
Procedure
1.
In the system web interface, go to Audio/Video > Monitors .
2.
Clear the Enable Consumer Electronics Control check box.
Enable CEC
You can enable CEC in the system web interface.
Make sure your monitor’s CEC settings are configured correctly (see your monitor’s documentation).
Procedure
1.
In the system web interface, go to Audio/Video > Monitors .
2.
Select the Enable Consumer Electronics Control check box.
Configure General Camera Settings
You can configure settings for cameras connected to your system. The system automatically discovers your camera model and displays the relevant settings in the system web interface.
See the latest Release Notes for specific information about the cameras you can use with your system.
Note: If you connect an unsupported camera, the system still attempts to show video. Poly can’t guarantee that the results are optimal or that the available settings are the same as a supported camera.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs > General Camera Settings .
2.
Configure the following settings:
Setting
Enable Camera Update
Description
107
Configuring Video and Camera Settings
Setting
Allow Other Participants in a Call to Control Your
Camera
Power Frequency
Enable Camera Preset Snapshot Icons
Camera Sleep Mode
Current People Camera
Enable User Camera Selection
3.
Select Save .
Related Links
Update Poly HDCI Cameras on page 135
Description
Specifies whether the far site can pan, tilt, or zoom the near-site camera. When you enable this setting, a user at the far site can control the framing and angle of the camera for the best view of the near site. This is also called Far End Camera Control
(FECC).
Specifies the power-line frequency for your system.
Your system typically defaults to the correct powerline frequency based on the video standard used in the country where it’s located. This setting helps you adapt the system to areas where the frequency doesn’t match the video standard. You might also need to change this setting to avoid flicker from fluorescent lights in the room.
Enables the use of snapshot icons that represent camera presets.
To see a preset icon, you must enable this setting before configuring the preset.
Specifies a sleep mode for your camera.
Fast Wake Up : The camera provides an image as soon as the monitor wakes. While asleep, the camera faces forward.
▪ When you set sleep Display to Black , an image more quickly displays, but be aware that this uses maximum power.
▪ When you set sleep Display to No Signal , the display synchronizes with the system. This can take a few seconds but may conserve energy depending on the monitor.
Save Energy : Puts the camera into standby mode to save power (the camera spins to the rear and faces down).
▪ When you set sleep Display to Black , it takes a few seconds for the camera to send an image.
▪ When you set sleep Display to No Signal , the camera is already sending an image by the time the display synchronizes with the system.
Select the camera or HDMI input to be used for conferencing.
Allow the user to select primary camera from the
TC8 or the local interface.
108
Configuring Video and Camera Settings
Configure Sleep Settings on page 32
Reset Camera Settings to Defaults
After changing camera settings, you can quickly reset all camera settings to the default configuration.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
Select Reset to Defaults .
3.
Select Continue .
Camera settings reset to the default configuration.
Supported USB Cameras
You can connect a supported USB camera to your G7500 or Studio X50 system to use as a primary or secondary camera.
Poly supports the following USB cameras:
▪ Poly EagleEye Cube USB camera
▪ Polycom EagleEye IV USB camera
▪ Poly Studio USB video bar
▪ Polycom EagleEye Mini USB camera
Selecting the Primary Camera
In Poly Video Mode and Zoom Rooms, if you have more than one camera attached to the system, you can select the primary camera in or out of a call.
Camera Priority
When you connect or disconnect a camera, camera priority determines the primary or active camera.
▪ When you attach a camera to a system that’s powered on, it automatically becomes the current people camera.
▪ If you attach a camera during a call, it automatically becomes the current people camera.
▪ If you disconnect the current people camera, the system falls back to the next priority camera.
The system observes the following camera type priority:
1.
Embedded camera
2.
HDCI camera
3.
USB camera
4.
HDMI source set to display as people
109
Configuring Video and Camera Settings
Maximum Number of Supported Camera Connections
Your systems support a limited number of cameras for use in and out of calls.
Each system supports the following number of cameras:
Maximum Number of Connected Cameras
System Cameras
G7500
Studio X50
Supports a maximum of four connected cameras at a time.
▪ Three USB-A cameras
▪ One HDCI camera
Supports a maximum of two connected cameras at a time.
▪ Two USB-A cameras
▪ Built-in camera
Studio X30 Doesn't support multicamera connections.
Configuring Video Input Settings
You can customize your video input settings, such as enabling connected cameras, adjusting camera orientation, or specifying whether people or content display on connected monitors.
Your system supports two video inputs. For example, a People source has pan, tilt, zoom, and near/far camera control settings, while a Content source doesn’t.
Configure General Video Input Settings
Available settings vary depending on your video input sources.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
Go to the input of a connected camera.
3.
Configure the following settings:
Setting
Input Format
Name
Model
Description
Specifies the source type of the device. This setting is read-only unless the system doesn’t detect the device.
Enter a name for the camera or device.
Displays the type of device connected to the system.
110
Configuring Video and Camera Settings
Setting
Optimized for
Orientation
Backlight Compensation
Skin Enhancement
Wide Dynamic Range
Framing Size
Sharpness
Brightness
Color Saturation
Maximum Digital Zoom Factor
Description
Specifies optimization preferences for the video input.
▪ Sharpness : Gives preference to resolution over frames per second. With this setting, moderateto-heavy motion at low call rates can cause some frames to drop.
▪ Motion : Gives preference to frames per second over resolution.
Specifies whether to invert the camera display for a
Studio X30 system that’s mounted below a monitor.
Specifies if the camera automatically adjusts for a bright background. Use backlight compensation when the subject appears darker than the background.
Enables or disables natural skin color enhancements for participants.
Enables or disables re-exposure according to the framed area instead of full view.
Specifies the framing view.
▪ Wide : Establishes a wide view of meeting participants.
▪ Medium : (Default group framing view)
Establishes a medium view of meeting participants.
▪ Tight : Establishes a close-up view of meeting participants.
Adjusts the video’s overall clarity.
Adjusts the video brightness.
Adjusts the color saturation.
Specifies the maximum digital zoom factor for the camera.
4.
Select Save .
Configure HDMI Input Settings
Configuring HDMI input as people input enables you to take full advantage of the system’s available transmit bandwidth and provides better picture quality for shared content.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
111
Configuring Video and Camera Settings
2.
Configure the following HDMI Input settings:
Setting
Display as
Name
Optimized for
Description
Specifies the display type. You can’t change this setting if the system is in Device Mode or if the
HDMI input is set to People and the system is currently using the source as the people camera.
▪ People : Sends content as a camera source with the highest levels of transmit bandwidth.
This feature isn’t available on Studio X30 systems.
▪ Content : Sends content as a content source with a lower bandwidth and enables you to use the system’s annotation tools.
Enter a name for the HDMI input.
Specifies optimization preferences for the video input.
▪ Sharpness : Gives preference to resolution over frames per second. With this setting, moderateto-heavy motion at low call rates can cause some frames to drop.
▪ Motion : Gives preference to frames per second over resolution.
3.
Select Save .
Adjust the White Balance
The white balance setting specifies how the camera compensates for light source variations in the room.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
Choose one of the following options for the White Balance setting (available options depend on the camera you’re using):
▪ Auto : Recommended for most situations. It calculates the best white balance setting based on lighting conditions in the room.
▪ Manual : Use this setting for rooms where the Auto and fixed values don’t provide acceptable color reproduction.
When you set to Manual , fill the camera’s field of view with a flat white object, such as a piece of paper. For best results, the object should be uniformly illuminated with light that is representative of the room lighting used in the conference, rather than light from a display, another area, or a shadow. After the object is in place, select Calibrate .
▪ Color Temperature Value : The color temperature values, measured in degrees Kelvin, correspond to the color of ambient light in a room. Use lower values for warmer lighting and higher values for cooler lighting.
▪ Color Temperature Term : Some cameras provide text descriptions of available color temperatures (for example, Fluorescent or Shade ).
112
Configuring Video and Camera Settings
▪ Off
3.
Select Save .
Configure Camera Tracking Settings for Studio X50 or Studio X30
With Studio X50 and Studio X30 systems, Poly camera tracking technology can automatically frame groups of people and follow conversations in small and medium rooms.
Tracking options and behavior depend on your connected camera. For example, if you use a standalone
EagleEye IV camera with your system, you won’t see tracking options.
Note: If you select a framing option it automatically enables tracking on Studio X50 and Studio X30 systems.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
Go to the camera’s settings and specify a Tracking Mode .
▪ Frame Group : The camera automatically locates and frames all the people in the room.
▪ Frame Speaker : The camera includes everyone in the current conversation. For example:
◦ The camera focuses on people actively talking to each other.
◦ When someone is talking for a prolonged period of time, the camera assumes that this person is presenting and only focuses on them.
◦ If there’s a period in which no one has said anything or the far side is doing most of the talking, the camera frames everyone in the room.
Note: When you mute your microphone, the camera tracking mode automatically switches to Frame Group .
▪ Off : Disables automatic tracking. You must control the camera manually.
3.
Select Save .
Configure Camera Tracking Settings for G7500
With a G7500 system, Poly camera tracking technology can automatically frame groups of people or the active speaker in medium and large rooms.
Tracking options and behavior depend on your connected camera. For example, if you use a standalone
EagleEye IV camera with your system, you won’t see tracking options.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
Go to the camera’s settings and specify a Tracking Mode .
▪ Frame Group : The camera automatically locates and frames all the people in the room.
▪ Frame Group with Transition : The camera automatically locates and frames people in the room while moving the camera. For example, if someone enters the room, you might see the camera pan until that person is in view. This option is available only using an EagleEye
Producer camera.
▪ Frame Speaker : The camera automatically locates and frames the active speaker. When someone else starts speaking, the camera switches to that person.
113
Configuring Video and Camera Settings
Note: When you mute your microphone, the camera tracking mode automatically switches to Frame Group .
▪ Off : Disables automatic tracking. You must control the camera manually.
3.
Optional: Turn on the Picture in Picture setting.
This setting is available only with the EagleEye Director II camera. When enabled, a picture-inpicture window displays showing a wide angle of the room in addition to the main window showing the primary speaker(s).
4.
Select Save .
Video Codec Capabilities
Your system supports H.265 High Efficiency Video Coding (HEVC), H.264 Advanced Video Coding
(AVC), and H.263 codec standards.
Related Links
Default Options for Sharing Content on page 124
H.265 High Efficiency Video Coding
From a video call quality standpoint, H.265 gives you up to 4K at 30 fps for people streams and 4K at 15 fps for content streams.
Note: Your system only supports H.265 during point-to-point SIP calls with any of the following Poly video systems: G7500, Studio X50, or Studio X30.
Supported H.265 People Stream Resolutions During Calls
The following tables include the H.265 resolutions and frame rates for people streams observed in SIP calls between two Poly video systems (G7500, Studio X50, or Studio X30).
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)
Due to the complexities of system capabilities and the call types and scenarios in your environment, it isn’t possible to provide the resolutions and frame rates for calls between a system and a different type of endpoint. The systems attempt to provide the highest resolutions and best frame rates in all types of calls.
The information in the following table is based on a camera source capable of 4K at 30 fps (for example, the Studio X50 or Studio X30’s built-in camera).
Supported H.265 People Stream Resolutions During Calls (4K at 30 fps Camera Source)
Call Speed (kbps)
1137–1308
1309–1468
1469–2110
≥2111
Motion/Sharpness
Both
Both
Both
Both
Resolution
2560 × 1440
2880 × 1620
3200 × 1800
3840 × 2160
Max Frame Rate (fps)
30
30
30
30
114
Configuring Video and Camera Settings
The information in the following table is based on a camera source capable of 1080p at 60 fps.
Supported H.265 People Stream Resolutions During Calls (1080p at 60 fps Camera Source)
Call Speed (kbps)
370–479
480–109
≥110
300–600
600–1199
≥1200
Motion/Sharpness
Motion
Motion
Motion
Sharpness
Sharpness
Sharpness
Resolution
1024 × 576
1280 × 720
1920 × 1080
1280 × 720
1920 × 1080
1920 × 1080
Max Frame Rate (fps)
60
60
60
30
30
60
Supported H.265 Content Stream Resolutions During Calls
The following table includes the H.265 resolutions and frame rates for content streams observed in SIP calls between two Poly video systems (G7500, Studio X50, or Studio X30).
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)
Due to the complexities of system capabilities and the call types and scenarios in your environment, it isn’t possible to provide the resolutions and frame rates for calls between a system and a different type of endpoint. The systems attempt to provide the highest resolutions and best frame rates in all types of calls.
Supported H.265 Content Stream Resolutions During Calls
Resolution
1920 × 1080
2560 × 1440
2880 × 1620
3200 × 1800
3840 × 2160
Sharpness Max Frame Rate (fps)
30
30
15
15
15
Motion Max Frame Rate (fps)
30
30
15
15
15
H.264 Advanced Video Coding
Your system supports H.264 during H.323 and SIP calls.
Supported H.264 People Stream Resolutions During Calls
The following table includes the H.264 resolutions and frame rates for people streams observed in H.323
calls between two Poly video systems (G7500, Studio X50, or Studio X30).
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)
115
Configuring Video and Camera Settings
Due to the complexities of system capabilities and the call types and scenarios in your environment, it isn’t possible to provide the resolutions and frame rates for calls between a system and a different type of endpoint. The systems attempt to provide the highest resolutions and best frame rates in all types of calls.
The information in the following table is based on a camera source capable of 1080p at 60 fps.
Supported H.264 People Stream Resolutions During Calls
Call Speed (kbps) Motion/Sharpness Resolution Max Frame Rate (fps)
<160
160–511
512–831
832–895
896–1727
≥1728
<128
128–511
512–1023
≥1024
Motion
Motion
Motion
Motion
Motion
Motion
Sharpness
Sharpness
Sharpness
Sharpness
512 × 288
640 × 368
848 × 480
720 × 832
1280 × 720
1920 × 1080
640 × 368
1024 × 576
1280 × 720
1920 × 1080
30
30
30
30
60
60
60
60
60
60
Supported H.264 Content Stream Resolutions During Calls
The following table includes the H.264 resolutions and frame rates for content streams observed in H.323
calls between two Poly video systems (G7500, Studio X50, or Studio X30).
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)
Due to the complexities of system capabilities and the call types and scenarios in your environment, it isn’t possible to provide the resolutions and frame rates for calls between a system and a different type of endpoint. The systems attempt to provide the highest resolutions and best frame rates in all types of calls.
Supported H.264 Content Stream Resolutions During Calls
Resolution Sharpness Max Frame Rate (fps)
800 × 600
1024 × 768
1280 × 720
1280 × 1024
1920 × 1080
30
30
30
30
30
Motion Max Frame Rate (fps)
60
60
60
60
60
116
Setting Up a Directory
Topics:
▪
Register with the Polycom Global Directory Server
▪
Register with an LDAP Directory Server
▪
Managing Contacts and Favorites
You can register your system with a directory to call contacts in your organization.
The system supports the following directory features:
▪ Up to 2,000 local contacts
▪ Up to 2,000 Favorites
▪ Up to 200 Favorites groups
▪ Global groups (local groups aren’t supported)
▪ Up to 4,000 contacts from a Polycom GDS server
Register with the Polycom Global Directory Server
You can register your system with the Polycom Global Directory Server (GDS).
Enable H.323 on your system before you register it with this directory server.
Procedure
1.
In the system web interface, go to Servers > Directory Servers .
2.
In the Server Type field, select Polycom GDS .
3.
Configure the following settings:
Setting
Server Address
Password
4.
Select Save .
Description
Specifies the IP or DNS address of the Polycom
GDS.
The Polycom GDS password, if one exists.
Register with an LDAP Directory Server
You can register your system with an LDAP directory server.
Procedure
1.
In the system web interface, go to Servers > Directory Servers .
2.
In the Server Type field, select LDAP .
3.
Configure the following settings:
117
Setting Up a Directory
Setting
Server Address
Server Port
Base DN (Distinguished Name)
Description
Specifies the address of the LDAP directory server.
When provisioned, this setting is read-only.
Specifies the port for connecting with the LDAP server. When provisioned, this setting is read-only.
Specifies the top level of the LDAP directory where searches begin. When provisioned, this setting is read-only.
To avoid LDAP registration issues, make sure the base DN is at least one level deeper than your domain. For example, enter ou=users,dc=example,dc=com instead of dc=example,dc=com .
Multitiered Directory Default Group DN
Authentication Type
Bind DN (Distinguished Name)
Use SSL (Secure Socket Layer)
Domain Name
User Name
Specifies the top-level group of the LDAP directory required to access its hierarchical structure. When provisioned, this setting is read-only.
Specifies the protocol for authenticating with the
LDAP server: NTLM , Basic , or Anonymous .
Specifies the bind DN when using basic authentication. Available only when you set
Authentication Type to Basic . When provisioned, this setting is read-only.
When enabled, encrypts data to and from the
LDAP server.
Specifies the domain name for registering with the
LDAP server.
Specifies the user name for registering with LDAP server.
Password Specifies the password for registering with the
LDAP server.
4.
Select Save .
Related Links
Configure Minimum TLS on page 77
LDAP Directory Server Ignores the Minimum TLS Version Setting on page 159
118
Setting Up a Directory
Managing Contacts and Favorites
You can create local contacts and designate favorites for your system.
Types of Favorites
The system web interface displays several types of favorites.
Directory Server Registration
Polycom GDS
LDAP with H.350
Types of Contacts
▪ Directory entries created locally by the user.
▪ References to Polycom GDS entries added to
Favorites by the user.
These entries are available only if you successfully register the system with Polycom GDS. Users can delete these entries from Favorites, but they can’t edit these entries. Users can copy these entries to other
Favorites and remove them from those groups.
▪ Directory entries created locally by the user.
▪ References to LDAP directory entries added to
Favorites by the user.
These entries are available only if the system can successfully access the LDAP server. Users can delete these entries from Favorites, but they can’t edit these entries. Users can copy these entries to other Favorites and remove them from those groups.
Manage Contacts
You can add contacts individually or in bulk in the system web interface.
Procedure
1.
Do one of the following:
▪ Go to Dashboard > Contacts .
▪ Go to Place a Call > Contacts .
2.
Select More and choose one of the following options:
▪ New Contact : Create a single contact.
▪ Import : Upload contacts in bulk using an XML file (can’t exceed 3 MB).
▪ Export : Download local contacts to an XML file (doesn’t include contacts available through a directory server).
119
Unfavorite a Contact
Unfavorite a contact to remove the contact from your Favorites list.
Procedure
1.
Go to Place a Call > Favorites .
2.
Choose a favorite card, then select Unfavorite .
The contact is removed from the Favorites list.
Setting Up a Directory
120
Calendaring Service
Topics:
•
Configure a Calendaring Service
systems can connect to Microsoft Exchange Server 2013 to retrieve calendar information for a specific
Microsoft Outlook or a Microsoft Office 365 individual or system account. The system connects to
Microsoft Exchange Server using the credentials you provide or by automatically discovering the connection information based on an email address or SIP server address.
Connection to a calendaring service allows the system to:
• Display the day's scheduled meetings, along with details about each
• Display a Join button on all scheduled meetings for the current day
• Let users join the meeting without knowing the connection details
• Hide or show details about meetings marked Private, depending on the configuration of the system
• Display a meeting reminder before each scheduled meeting, along with a reminder tone
Professional Services for Microsoft integration is mandatory for Polycom Conferencing for Microsoft
Outlook and Microsoft Office Communications Server integrations. For additional information and details, please refer to http://www.polycom.com/services/professional_services/index.html
or contact your local
Polycom representative.
Configure a Calendaring Service
You must configure your system to use a calendaring service so users can see scheduled meetings on the local interface.
Procedure
1.
In the system web interface, go to Servers > Calendaring Service .
2.
Select the Enable Calendaring Service check box.
3.
Configure the following settings:
Setting
Description
Specifies the email address used when scheduling the system for a meeting (for instance, you can use your system as a mechanism to reserve a meeting space). This email address must match the Primary
SMTP Address for the account on Microsoft
Exchange Server, which displays as the value of the mail attribute in the account properties.
121
Setting
Domain
User Name
Password
Auto Discover Using
Calendaring Service
Description
Specifies the domain to register to the Microsoft
Exchange Server in NETBIOS or DNS notation (for example, company.local
or COMPANY ).
If you are using the Auto Discover Using setting in the system web interface, don’t provide a value here.
Specifies the user name to register to the Microsoft
Exchange Server. This can be the name of the system or an individual (for example, [email protected]
).
If you want to use the calendar associated with an
Office 365 account, enter the user name for that account here.
Specifies the system password to register to the
Microsoft Exchange Server. This can be the system's or an individual’s password.
If you want to use the calendar associated with an
Office 365 account, enter the password for that account here.
Specifies how the system obtains the Microsoft
Exchange Server address. If you select Email
Address , the system uses the value provided in the Email field. If you select SIP Server , the system uses the registered SIP server domain name configured for the system.
With either option, you must complete the Email ,
User Name , and Password fields that correspond to the account you want the system to use for the calendaring service. The system may prompt you to confirm the password.
Note: This feature is unavailable if the Microsoft
Exchange Server address is provisioned.
If after configuring the calendaring service a message displays that the system is unable to discover the service, verify that the information you provided is correct.
You can also use an API command to automatically discover the Microsoft Exchange Server address.
For more information, go to Polycom Support .
122
Calendaring Service
Setting
Microsoft Exchange Server
Meeting Reminder Time in Minutes
Play Reminder Tone When Not in a Call
Description
Specifies the FQDN of the Microsoft Exchange
Client Access server. If your organization has multiple servers behind a network load balancer, this is the FQDN of the server’s virtual IP address.
If required, you can use an IP address instead of an FQDN, but it’s recommended you use the same
FQDN for Outlook clients.
Provide a value here only if you want to manually provide connection information to the Microsoft
Exchange Server. Otherwise, use the Auto
Discover Using setting to automatically populate this field.
Specifies the number of minutes before the meeting that a reminder displays on the system.
Specifies whether to play a sound along with the text reminder (when the system is not in a call).
Show Information for Meetings Set to Private Specifies whether to display details about meetings marked private.
4.
Select Save .
After you register your system to the calendaring service, users can join scheduled meetings from the
Home and Calendar screens on the local interface.
123
Sharing Content
Topics:
▪
Default Options for Sharing Content
▪
Disable Screen Mirroring Options
Your system provides several ways to share and annotate content.
Related Links
on page 75
Enable or Disable Content Saving
on page 75
Default Options for Sharing Content
Once your system is running and configured for your environment, users can share content from their personal devices with no additional setup using the following methods.
▪ Wireless screen mirroring :
◦ A Miracast-certified device screen is mirrored onto the system display.
◦ An AirPlay-certified device screen and any accompanying audio is mirrored onto the system display.
You can disable these options in the system web interface.
▪ Wired input : A laptop or desktop connected to the system through HDMI.
▪ Polycom Content App : Installed on a Microsoft Windows or Apple Mac system for wireless screen or application sharing.
For more information on Miracast, see the Miracast Performance Technical Reference on the Poly Online
Support Center .
The system allows up to four simultaneous content sources out of a call and three in a call (a source can include content shared from a device in the room or by a far-end participant).
For example, if you’re in a call with three content sources and you share your desktop using the Content
App, the oldest wireless or far-end content source in the session is replaced by your content. HDMI content, however, is never replaced.
Related Links
Disable Wireless Options on page 57
on page 114
Disable the Polycom Content App Port on page 74
124
Sharing Content
Disable Screen Mirroring Options
You can disable content sharing with Miracast- or AirPlay-certified devices (screen mirroring) without turning off wireless connectivity or Bluetooth on your system. Screen mirroring options are enabled by default.
Procedure
1.
In the system web interface, go to Security > Wireless Security .
2.
Do one of the following:
▪ Clear the Enable AirPlay check box to disable screen mirroring with AirPlay-certified devices.
▪ Clear the Enable Miracast check box to disable screen mirroring with Miracast-certified devices.
125
Customizing the Local Interface
Topics:
▪
Change the Home Screen Background Image
▪
Restore the Default Background Image
▪
▪
Display Meetings or Favorites on the Home Screen
▪
Configure Dual Monitor Display Settings
You can configure some of the system local interface settings according to your preferences.
Change the Home Screen Background Image
You can upload a custom background image to display on your system.
The image must have a 16:9 resolution between 1280 × 720 and 3840 × 2160 (1920 × 1080, 2560 ×
1440, or 3840 × 2160 is recommended). The system supports .jpg
and .png
formats with a file size of less than 10 MB.
Note: This option is unavailable if your image is provisioned to the system.
Procedure
1.
In the system web interface, go to General Settings > Home Screen .
2.
Select Choose File , navigate to the image file, then select Upload .
The custom image displays.
Restore the Default Background Image
You can switch back to the default background image to display on your system.
Procedure
1.
In the system web interface, go to General Settings > Home Screen .
2.
Select Use Default Background .
Customize the Address Bar
You can customize what displays in the address bar of the system’s local interface Home screen.
The address bar is under the room name. You can list two of the following details:
▪ Primary IP Address
▪ Guest Wi-Fi IP Address
126
Customizing the Local Interface
▪ H.323 Extension
▪ SIP Address
▪ None
Procedure
1.
In the system web interface, go to General Settings > Home Screen .
2.
Choose options for Primary Element and Secondary Element (your changes save automatically).
Display Meetings or Favorites on the Home Screen
You can display meeting information or favorite contacts on the home screen of the system local interface.
Procedure
1.
In the system web interface, go to General Settings > Home Screen .
2.
Select one of the following options in the Home Screen Widget field:
Setting
None
Calendar
Favorites
Description
Hides the home screen widget.
Displays meeting information on the home screen.
Displays favorites on the home screen.
Configure Dual Monitor Display Settings
You can choose your self view and content display preferences when you connect two monitors to your system.
Even if your system has only one monitor, you can still configure second monitor settings. These settings take effect once you connect a second monitor.
The Studio X30 system supports only one monitor.
Procedure
1.
In the system web interface, go to Audio/Video > Monitors .
2.
Configure the following settings (your changes save automatically):
127
Setting
Self View Size
Content Display
Related Links
Configure Monitor Settings on page 105
Configure a Touch Monitor on page 106
Customizing the Local Interface
Description
Specifies how the self view window displays when others join a call.
▪ Corner : Displays the self view in the corner of
Monitor 2.
▪ Full Screen : Displays the self view on the entire screen of Monitor 2.
Specifies whether to display content on one or two monitors.
▪ Single : Display content on Monitor 2 and people on Monitor 1.
▪ Dual : Display people and content on Monitor 1 and content only on Monitor 2.
128
Controlling the System Remotely
Topics:
▪
▪
▪
Place a Call from the System Web Interface
▪
You can control the system without a remote control.
Control the Camera Remotely
You can monitor and adjust both the far-end and the near-end video by controlling the cameras from the system web interface.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
In the Current People Camera field, select the near-end camera you want to view.
3.
Go to Diagnostics > Remote Monitoring and do the following:
▪ To move the camera, select the direction keys.
▪ To zoom the camera view, select + or .
▪ To mute or unmute the near-end camera, select Camera below the video feed.
▪ To load a preset, go to Presets and select the preset you need.
Wake the System Remotely
You can wake the system from the system web interface.
Procedure
1.
In the system web interface, go to Diagnostics > Remote Monitoring .
2.
Go to System Wake and select Wake the System .
Place a Call from the System Web Interface
The system web interface gives you many of the same calling features and controls that are in the local interface.
You can also place video and audio-only calls directly from the Dashboard .
Note: You can’t make calls from the system web interface when Poly Device Mode is enabled.
129
Controlling the System Remotely
Procedure
1.
In the system web interface, go to Place a Call .
2.
Do one of the following:
▪ Select Dial to manually dial a number or name.
▪ Select Contacts to search local and directory contacts to call.
▪ Select Favorites to search contacts marked as Favorites.
▪ Select Recent to select a number or name you’ve called in the past.
End a Session
Use this tool to close a sharing session. All live content is stopped, and all blackboards and whiteboards are deleted.
Procedure
» Select . A message appears informing you that the session will end in 15 seconds.
Related Links
on page 124
130
System Maintenance
Topics:
▪
▪
▪
▪
▪
▪
▪
Factory Restore a Table Microphone
▪
Factory Restore a Ceiling Microphone
▪
Factory Restore a Microphone Adapter
You can perform several functions to keep your system running properly.
Unlock System Settings
Some settings in the local interface are locked by default. You can unlock these settings with your system’s local administrator credentials.
Procedure
1.
Do one of the following:
▪ In a call, select Menu > More > Settings .
▪ Out of a call, select Menu > Settings .
2.
Select a setting with a Lock .
3.
Enter your local administrator credentials to unlock the setting.
Note: Settings lock again if you exit the Settings screen, restart the system, or power off the system.
Updating Software
You can update your system software a few different ways.
Use one of the following methods to update system software:
▪ Poly download server
▪ Custom server URL
▪ Software package you obtain from Polycom Support and upload with a USB flash drive
▪ Provisioning service (for example, RealPresence Resource Manager)
131
System Maintenance
Related Links
Using a Provisioning Service on page 36
Updating Paired Devices
When you update your system, you also update some of its paired devices (if those devices have a new version available). Depending on your setup, these devices might include:
▪ Poly IP Table Microphone
▪ Poly IP Ceiling Microphone
▪ Poly Microphone IP Adapter
▪ Poly Bluetooth Remote Control (firmware)
▪ Poly EagleEye Cube USB camera
▪ Poly TC8 device
Updating a Paired Poly Trio
You can update a Poly Trio system that’s supposed to work with a video system in various ways.
See the Poly Trio administrator documentation for information on updating the phone using the following methods.
Automatic Updates
Provision your phone with Poly UC Software. This method works when the phone is paired with the video system.
Manual Updates
Upgrade the phone with a USB flash drive. You must first set the phone to Hub mode before you can update.
Note: Unlike some other peripherals, you can’t update a paired Poly Trio from the Device Management page in the system web interface.
Updating Software in the System Web Interface
You can manually update software or set up automatic updates in the system web interface.
Choose How to Get Software Updates
You may have several options to update your system software, depending on your environment.
Note: If you provision your system, it can only get updates from the provisioning server. For example, if you want updates from a custom server URL, you must disable provisioning.
Procedure
1.
In the system web interface, go to General Settings > Device Management .
2.
Select one of the following options in the Download Update From field:
132
System Maintenance
Software Update Method
Polycom Support Site
Custom Server URL
Description
A software server hosted by Polycom.
A server on your network that supports HTTP or HTTPS downloads.
▪
▪
▪
▪
▪
▪
The URL is the path to the latest software build folder (for example, https://<system_build_folder> ). It includes update packages for some of your connected devices (for example, a TC8 device) and the video system.
To successfully update everything, you must have this exact folder structure:
◦
◦ eecube
Config image.zip
◦
◦
◦ version videocodec
Config poly-video-<version>.zip
◦
◦
◦
◦ release.json
version
◦ ipmic
Config image.zip
version
◦
◦
◦ micadapter
Config image.zip
version
◦
◦
◦ touchctrl
Config poly-tc8-<version>.zip
version
◦ release.json
softwareupdate.cfg
Provisioning Server Receive updates from a provisioning service, such as
RealPresence Resource Manager.
3.
If you choose to download software from a Custom Server URL , enter the path to the software build folder on your network in the Update Server Address field.
Once you select from where to download software updates, you can manually or automatically update the system.
133
System Maintenance
Related Links
Using a Provisioning Service on page 36
Manually Update Software
You can manually update the software of your system and some of its paired devices.
Procedure
1.
In the system web interface, go to General Settings > Device Management .
2.
Select Check for Updates .
3.
If the system finds updates, select Update All .
Automatically Update Software
You can automatically update the software of your system and some of its paired devices.
Procedure
1.
In the system web interface, go to General Settings > Device Management .
2.
Select Enable Automatic Updates .
Unless you specify a maintenance window, your system tries to update a minute after you enable this setting. If an update isn’t available at the time, the system tries again every four hours.
3.
Optional: Select Only Check for Updates During Maintenance Hours to specify a range of time to automatically update the software.
4.
Optional: Choose times for Maintenance Hours Begin and Maintenance Hours End .
The system calculates a random time within the defined maintenance window to check for updates.
Note: If these settings are provisioned, the provisioning profile defines the polling interval. The default interval is one hour.
Update System Software from a USB Storage Device
Procedure
1.
Obtain the software package from Polycom Support .
2.
Save the software upgrade package to the root directory of a USB storage device.
3.
Connect the USB storage device to the USB 2.0 port on the back of the device. This is the top
USB port. The device detects the USB storage device and displays a prompt on the monitor for you to confirm that you want to update the software.
4.
Select OK . Follow the setup wizard instructions to complete the update.
Update the Poly Bluetooth Remote Control Firmware
A system update may include new firmware for your Poly Bluetooth Remote Control.
You must be actively using the remote control for an available update to take effect. After 30 seconds of inactivity, the remote control disconnects from the system until you pick it up or press a button.
134
System Maintenance
Procedure
1.
Update your system software.
2.
Pick up the remote control or press a button.
The remote control automatically updates if it detects a new firmware version.
Related Links
Poly Bluetooth Remote Control on page 23
Disable Wireless Options on page 57
Update Poly HDCI Cameras
You can automatically update an HDCI-connected Poly camera, but not in the same way you update the system and other connected devices (such as IP microphones).
HDCI cameras only apply to the G7500 system.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
Select Enable Camera Update .
If the system detects a newer software version than what the camera is currently running, the camera updates automatically when the system isn’t in a call. However, if during a call you connect a camera that isn’t running the latest software, the call ends and the camera software update starts.
Related Links
Configure General Camera Settings
on page 107
Downgrading Software
You can also manually downgrade software using a USB flash drive or the system web interface if your system doesn’t use a provisioning server.
Note: Before downgrading, make sure that the selected provider is supported in the version you’re downgrading to.
Related Links
Register the System with RealPresence Resource Manager Provisioning Service
on page 37
RealPresence Resource Manager Provisioning Fails After Downgrading Software
on page 161
Manually Downgrade Software in the System Web Interface
You can downgrade your system software and the software of some of its paired devices from a custom download server.
Before you downgrade, Poly recommends doing the following:
▪ Check the software version you’re running. You can find the software version on the system web interface Dashboard .
▪ Make sure automatic updates are disabled on General Settings > Device Management .
Procedure
1.
Go to General Settings > Device Management .
135
System Maintenance
2.
Manually downgrade your software to an older version located on your download server.
Downgrade Software with a USB Flash Drive
You can downgrade your system software and some of its paired devices (not a TC8 device) using a USB flash drive.
Before you downgrade, Poly recommends doing the following:
▪ Check the software version you’re running. You can find the software version on the system web interface Dashboard .
▪ Make sure automatic updates are disabled on General Settings > Device Management .
Procedure
1.
Download an older software version to a USB flash drive.
2.
Connect the USB flash drive to your system.
Restart the System
If you encounter issues, you can try restarting your system.
Procedure
» Do one of the following:
▪ (G7500 only) On the front of the system, press and hold the Restart button for five seconds.
▪ (All systems) In the system web interface, go to Diagnostics > System Reset and select
Restart .
Related Links
Powering the System On and Off on page 12
Reset System Settings
You can reset your system to its default configuration settings.
You may need to perform a system reset for a variety of reasons, for example, when moving a device to a new location.
Resetting your system deletes all but the following data:
▪ Current software version
▪ User-installed PKI certificates
▪ Local directory entries
136
System Maintenance
▪ Logs
▪ Call detail record (CDR)
You also can choose not to retain some of this data after the system resets.
Note: A system reset restores your system to its original mode of operation (for example, Poly Video
Mode or Poly Partner Mode).
Procedure
1.
In the system web interface, go to Diagnostics > System Reset .
2.
Select Reset All System Configurations .
3.
Optional: Clear any of the following check boxes for data you want to delete as part of the reset:
▪ Keep installed certificates.
▪ Keep the directory entries.
▪ Keep the system logs.
▪ Keep the system call detail reports.
4.
Select Reset .
Related Links
Change Conferencing Partner Application on page 34
Factory Restore the System
A factory restore completely erases the system’s flash memory and restores it to the latest major software version (x.0).
The system doesn’t save the following data with a factory restore:
▪ Current software version
▪ Logs
▪ User-installed PKI certificates
▪ Local directory entries
▪ Call detail record (CDR)
Procedure
1.
Disconnect the power supply to turn off the system.
2.
Do one of the following:
▪ On the front of the G7500 insert a straightened paper clip through the factory restore pinhole.
137
System Maintenance
▪ On the side of the Studio X50 insert a straightened paper clip through the factory restore pinhole.
▪ On the bottom of the Studio X30 insert a straightened paper clip through the factory restore pinhole.
3.
While continuing to hold the restore button, reconnect the power supply to turn the system on.
4.
When the system LED indicator light turns amber, stop pressing the restore button.
Related Links
LED Status Indicators for the G7500 System
on page 16
Factory Restore a Table Microphone
You can restore a microphone to its default settings. This process refreshes the device by deleting its configurations except the current version of software.
Procedure
1.
Ensure that the microphone is powered on.
2.
On the back of the table microphone insert a straightened paper clip through the factory restore pinhole.
3.
Press and hold the restore button for 5 seconds, then release it when the microphone LED blinks amber.
Note: Don’t power off the microphone during this process. It restarts when complete.
Related Links
on page 25
Factory Restore a Ceiling Microphone on page 138
Factory Restore a Ceiling Microphone
You can restore a microphone to its default settings. This process refreshes the device by deleting its configurations except the current version of software.
Factory restoring the ceiling microphone requires the following tools:
▪ A small, thin block N45 magnet (for example, 76.2 mm [3 in.] × 12.7 mm [1/2 in.] × 3.18 mm [1/8 in.])
▪ Yardstick or adjustable floor-to-ceiling pole (so you don’t have to use a ladder)
138
System Maintenance
▪ Duct tape
Procedure
1.
Tape the magnet to one end of the pole with one of the 3.18 mm (1/8 in.) edges facing up.
Caution: If you have a suspended ceiling, tape the magnet securely to avoid it coming loose and sticking to a ceiling support grid.
2.
Ensure that the microphone is powered on.
3.
Locate the factory reset sensor.
Looking at the bottom edge of the microphone connector along a longer side of the electronics enclosure, the sensor is approximately 63.5 mm (2.5 in.) towards the end opposite to the enclosure’s RJ-45 connector.
If you can’t see the RJ-45 connector, look for the small black button on the microphone cable.
Facing that button at the 12 o’clock position, the sensor is located toward the 9 o’clock position.
4.
Line up the center of the magnet with the sensor and hold it no more than 19 mm (3/4 in.) away from the enclosure for approximately 7 seconds.
139
System Maintenance
The microphone LED blinks amber during a factory restore.
Note: Don’t power off the microphone during this process. It restarts when complete.
Related Links
on page 25
Factory Restore a Table Microphone on page 138
Factory Restore a Microphone Adapter
If your microphone adapter isn’t functioning correctly, you might need to factory restore it. A factory restore completely erases the microphone adapter’s flash memory and restores it to the latest major software version (x.0).
The factory restore button is on the side of the microphone adapter.
Procedure
1.
Disconnect the power supply to turn off the microphone adapter.
2. Optional for USB flash drive method : Download the software package you want to install from
Polycom Support and save the package to the root directory of a USB flash drive. Insert the USB flash drive into a USB port.
Note: Poly recommends formatting your USB flash drive with the FAT32 file system.
3.
Insert a straightened paper clip through the factory restore button pinhole.
4.
While continuing to hold the restore button, reconnect the power supply to turn the microphone adapter on.
5.
Hold the restore button for 10 more seconds, then release it.
140
System Maintenance
The microphone adapter LED blinks green and blue during a factory restore.
Note: Don’t power off the microphone adapter during this process. It restarts when complete.
Related Links
Poly Microphone IP Adapter on page 27
141
Troubleshooting
Topics:
•
▪
▪
▪
▪
▪
▪
▪
Can’t Wake the System by Touching the Monitor
▪
LED Status Indicators for the System LAN Ports
▪
Fix Polycom Acoustic Fence Issues with G7500
▪
▪
Test Connection with Another System
▪
▪
LDAP Directory Server Ignores the Minimum TLS Version Setting
▪
Checking the Web Proxy Configuration
▪
Zero Touch Onboarding Connection Fails During Initial Setup or After Reset
▪
Verify Poly Lens Registration Status
▪
RealPresence Resource Manager Provisioning Fails After Downgrading Software
▪
Lighting Conditions Impact Picture Quality
▪
Issues When the System is Sleeping or Waking
Refer to the following topics to help you diagnose and fix problems while using your system.
Logs
Logs contain information about system activities and configurations to help you troubleshoot issues.
Consolidated System and Peripheral Device Logs
Event information about your system and some of its connected devices are available in a single log package.
The system log package includes details about the following devices:
• Cameras (see your video system’s latest Release Notes for supported models)
• Poly TC8 device
142
Troubleshooting
• Poly Trio system (see your video system’s latest Release Notes for supported models)
• Poly IP Table Microphone (G7500 only)
• Poly IP Ceiling Microphone (G7500 only)
• Poly Microphone IP Adapter (G7500 only)
Configure Log Preferences
You can manage some basic aspects of your system logs, including how logs are transferred to a USB flash drive.
Your system has limited storage space for logs. If you want logs to be overwritten less frequently, attach a
USB flash drive to the system.
When the system log fills past your configured threshold, the system triggers the following actions:
• Transfers the log to a USB flash drive if you set Transfer Frequency to Auto At Threshold .
• Creates a log entry indicating that the system reached the threshold.
Procedure
1.
In the system web interface, go to Diagnostics > Logs > Log Management .
2.
Configure the following settings:
Setting
Current Percent Filled
Percent Filled Threshold
Folder Name
Storage Type
Description
Displays as a percentage how full the logs are.
When the logs are full, system deletes the oldest entries.
Reaching the threshold you configure here creates a log entry and automatically transfers logs if you set Transfer Frequency to Auto At Threshold .
Specifies the folder name for log transfers. Select one of the following:
• System Name and Timestamp : Folder name is the system name and the timestamp of the log transfer. For example, if the system name is
Marketing , the folder name might be marketing_<date_and_time> .
• Timestamp : Folder name is the timestamp of the log transfer (for example,
<yyyyMMddhhmmssSSS> ).
• Custom : Lets you specify a folder name for manual log transfers.
Specifies the type of storage device used for log file transfers.
143
Troubleshooting
Setting
Transfer Frequency
Description
Specifies when the system transfers logs:
• Manual : The transfer starts when you select the
Start button, which is visible only in the local interface. If the log fills before you transfer, new events overwrite the oldest events.
• Auto at Threshold : The transfer starts automatically when the system reaches the
Percent Filled Threshold .
3.
Select Save .
Configure Log Level
You can determine how much detail you want in your system logs.
Procedure
1.
In the system web interface, go to Diagnostics > Logs > System Log Settings .
2.
Configure the following settings:
Setting
Log Level
Description
Sets the minimum log level of messages stored in the system’s flash memory. Poly recommends that you use the default value.
When you enable remote logging, the log level is the same for both remote and local logging.
Set one of the following log levels:
• Debug : Logs all messages. Poly recommends that you enable automatic transfer of logs to a
USB flash drive or enable remote logging when using this setting.
Note: Don’t set the logging level to Debug for long durations (weeks or months).
• Info : Poly recommends that you enable automatic transfer of logs to a USB flash drive or enable remote logging when using this setting.
• Warning : Poly recommends that you enable automatic transfer of logs to a USB flash drive or enable remote logging when using this setting.
• Critical : Logs the fewest number of messages
144
Troubleshooting
Setting
Enable H.323 Trace
Enable SIP Trace
Description
Logs additional H.323 connectivity information.
Poly recommends that you enable automatic transfer of logs to a USB flash drive or enable remote logging when using this setting.
Logs additional SIP connectivity information. Poly recommends that you enable automatic transfer of logs to a USB flash drive or enable remote logging when using this setting.
3.
Select Save .
Retrieve Log Files
You can use the web interface to download log files to a location on your computer.
Note: The date and time of the system log entries for devices are shown in GMT.
Procedure
1.
Access the web interface by opening a web browser and entering the IP address of the system using the format https://IPaddress (for example, https://10.11.12.13), and go to Diagnostics >
Logs .
2.
Select Download system logs . A dialog window opens for you to specify how you want to open or save the .tgz file.
Transfer Logs to a USB Flash Drive
You can transfer logs to a USB flash drive to free up space on your system.
Note: Poly recommends formatting your USB flash drive with the FAT32 file system.
Procedure
1.
In the local interface, go to Menu > Settings > Diagnostics .
2.
Select Log Management and enter the system’s local administrator credentials.
3.
Select Start .
Note: Wait until the system displays a message that the log transfer has completed successfully before you remove the USB flash drive.
The system saves a file in the USB flash drive named according to the settings in the system web interface.
Configure Remote Logging
In addition to downloading logs locally, you can also configure your system to send the event details it collects to a remote logging server (using Syslog or a similar mechanism).
Remember the following about remote logging with your system:
145
Troubleshooting
• The system sends logs to remote logging servers over a secure TLS connection.
• You can use more than one remote logging server.
• Logs can be consumed by an intrusion detection system (IDS) and a security information and event management (SIEM) system.
Procedure
1.
In the system web interface, go to Diagnostics > Logs .
2.
Configure the following settings:
Setting
Enable Remote Logging
Remote Log Server Address
Remote Log Server Transport Protocol
Description
Specifies whether remote logging is enabled.
Enabling this setting causes the system to send each log message to the specified server in addition to logging it locally.
The system immediately begins forwarding its log messages after you click Save .
The system supports remote logging encryption using TLS. If you use UDP or TCP transport, Poly recommends remote logging only on secure, local networks.
Specifies the server address and port. If you don’t specify the port, the system uses a default destination port. The system determines the default port by how you configure Remote Log Server
Transport Protocol :
• UDP: 514
• TCP: 601
• TLS: 6514
You can specify the address and port in the following formats:
• IPv4 address: 192.0.2.0: <port> , where
<port> is the elective destination port number in the 1-65535 range.
• FQDN: logserverhost.company.com: <port
> , where <port> is the elective destination port number in the 1-65535 range.
Specifies the transport protocol for sending logs to a remote server:
• UDP
• TCP
• TLS (secure connection)
3.
Select Save .
146
Troubleshooting
Sample Log File
The following code shows examples from a system log file.
Login:
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: securityserviceproto.cpp SecurityServiceCreateSessionRequest clienttype: 3 location: 192.168.137.1 clientName: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/
537.36 request: clienttype: kWeb
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: createSession ClientType is 3 location: 192.168.137.1 name:Mozilla/5.0
(Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/81.0.4044.129 Safari/537.36
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: In createSession sessionId=PSLgZBGvGw7I
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: createSession The password is not empty, setting the user as anonymous
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: updateSessionCount: Increment session count for client type '3' to 1
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService:
SessionAddNtfy: len 268
2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService:
SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0
2020-05-07 19:06:36.533 DEBUG SecurityService: SecurityService:
SecurityServiceLoginRequest(): username: admin
2020-05-07 19:06:36.533 DEBUG SecurityService: SecurityService: login
2020-05-07 19:06:36.533 DEBUG SecurityService: SecurityService:
LocalAuthenticator::login, role 3 loginSuccess 1
2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService:
SessionStateNtfy: len 69
2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService:
SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0
2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService: getPwdStatusAux password can not expire node security.authentication.accounts.adminremote.passwordpolicy
2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService: login login, pwStatus 2
2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService: setCurrentLoginInfo set login status: lastLoginTime 1588877728, lastClientType 3, lastClient 192.168.137.1, failedLogins 0
2020-05-07 19:06:36.536 DEBUG SecurityService: SecurityService: setSuccessfulLoginInfoToConfig successful login, current time 1588878396
2020-05-07 19:06:36.537 DEBUG SecurityService: SecurityService:
LoginNtfy: len 30
2020-05-07 19:06:36.537 DEBUG SecurityService: SecurityService:
SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0
2020-05-07 19:06:36.537 DEBUG SecurityService: SecurityService: securityserviceproto.cpp SecurityIFLoginStatusPack
Logout:
2020-05-07 19:17:29.313 DEBUG SecurityService: AuthenticationManager:
AuthenticationManager::logout(): username: admin
2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:
LogoutNtfy: len 21
147
Troubleshooting
2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:
SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0
2020-05-07 19:17:29.313 DEBUG SecurityService: SessionManager: deleteItem(): deleting the session PSllKtLtRoFp
2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService: updateSessionCount: Decrement session count for client type '3' to 0
2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:
SessionDeleteNtfy: len 52
2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:
SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0
2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService: securityserviceproto.cpp errorResponsePack
SNMP Reporting
The system supports SNMP versions 1, 2c, and 3.
SNMP can provide the following event information about your system:
▪ Alert conditions located on the system alert screen
▪ Details of jitter, latency, and packet loss
▪ Low battery power in the remote control
▪ System power on
▪ Successful or unsuccessful administrator login
▪ Call fail for a reason other than a busy line
▪ User help request
▪ Video or audio call connection or disconnection
Note: Poly doesn’t support SNMP write operations for configuring or provisioning systems.
SNMPv3 does the following:
▪ Provides secure connections between the SNMP manager and agent
▪ Supports IPv4 networks
▪ Logs all configuration change events
▪ Supports a user-based security model
▪ Supports trap destination addresses
Related Links
on page 58
Configure SNMP
You can monitor your system remotely with SNMP.
Procedure
1.
In the system web interface, go to Servers > SNMP .
148
2.
Configure the following settings:
Setting
Enable SNMP
Enable Notifications
Version1
Version2c
Version3
Read-Only Community
Contact Name
Location Name
System Description
User Name
Authentication Algorithm
Authentication Password
Troubleshooting
Description
Enables administrators to monitor the system remotely using SNMP.
Enables MIB notifications.
Enables your system to use the SNMPv1 protocol.
Due to security issues, Poly recommends that you don’t enable this setting.
Enables your system to use the SNMPv2c protocol.
Due to security issues, Poly recommends that you don’t enable this setting.
Enables your system to use the SNMPv3 protocol.
Enabled by default, you can’t configure other
SNMPv3 settings unless this is on.
Specifies the SNMP community string for your system. For security reasons, don’t use the default community string ( public ).
Note: Poly doesn’t support SNMP write operations for configuring or provisioning systems. The community string is for read operations and outgoing SNMP traps.
Specifies the name of the person responsible for remotely managing the system.
Specifies the system location.
Provides details about the system.
Specifies the User Security Model (USM) account name for SNMPv3 message transactions. The maximum length is 64 characters.
Specifies the type of SNMPv3 authentication algorithm used.
▪ SHA
▪ MD5
Specifies the SNMPv3 authentication password.
The maximum length is 48 characters.
149
Troubleshooting
Setting
Privacy Algorithm
Privacy Password
Engine ID
Listening Port
Transport Protocol
Destination Address1
Destination Address2
Destination Address3
Description
Specifies the cryptographic privacy algorithm for
SNMPv3 packets.
▪ CFB-AES128
▪ CBC-DES
Specifies the SNMPv3 privacy (encryption) password. The maximum length is 48 characters.
Specifies the unique ID of the SNMPv3 engine. You might need this information to match the configuration of an SNMP console application. The
ID is automatically generated, but you can create your own as long as it is between 10 and 32 hexadecimal digits. You can separate each group of two hex digits by a colon (:) to form a full 8-bit value. A single hex digit delimited on each side with a colon is equivalent to the same hex digit with a leading zero (for example, :F: is equivalent to :
0f: ).
The ID can’t be all zeros or Fs.
Specifies the port SNMP uses to listen for system messages (the default is port 161).
Specifies the transport protocol used.
▪ TCP
▪ UDP
Specifies the IP addresses of SNMP managers where SNMP traps are sent.
Each address has four settings:
▪ Server address (accepts IPv4 addresses, hostnames, and FQDNs)
▪ Message type ( Trap or Inform )
▪ Protocol (SNMP v1 , v2c , or v3 )
▪ Port where SNMP traps are sent (default is 162 )
3.
Select Save .
Download MIBs
You can download MIB data for your system.
A MIB helps your SNMP management console resolve SNMP traps and provide human-readable descriptions of those traps.
Procedure
1.
In the system web interface, go to Servers > SNMP .
150
Troubleshooting
2.
Select Download MIB .
Checking System Status
You can verify the status of your system in the local and system web interfaces. Status information also include details about connected devices and system services.
The system displays statuses using three colors:
▪ Green indicates the device or service is working or registered
▪ Red indicates an alert
▪ Gray indicates the device or service is unavailable or unregistered
Some statuses are available only after you connect the corresponding device, such as a camera, to the system.
Check Status in the Local Interface
Verify your system status in the local interface.
Procedure
1.
Do one of the following:
▪ In a call: Menu > More > Settings > Status .
▪ Out of a call: Menu > Settings > Status .
2.
View a system status page:
You must enter the system’s local administrator credentials to access status pages displaying a
Lock .
Setting
Active Alerts
Call Control
LAN Properties
Servers
Peripheral Devices
Description
Displays the status of any device or service with an error status. If there’s an alert, an Alert displays next to the system time.
Displays status of the Auto-Answer Point-to-
Point Video setting.
Displays network connection status.
▪ Displays the gatekeeper and SIP registrar server status.
▪ Displays the active global directory server or
LDAP server status.
▪ Displays the provisioning or calendaring service status (if enabled).
Connection status of peripheral devices.
151
Troubleshooting
Check Status in the System Web Interface
Verify your system status in the system web interface.
Procedure
1.
In the system web interface, go to Diagnostics > System Status .
2.
Optional: Select Details next to each device or service for more information.
3.
Optional: Select Adjust <Feature> Settings to access the corresponding settings page.
View Call Statistics
You can look at in-call data to help you troubleshoot system issues or problems experienced by call participants.
Procedure
1.
In the system web interface, go to Diagnostics .
2.
Go to Call Statistics .
If you’re in a call, a link to call statistics is also available on the Dashboard and Active Call page.
A list of participants displays, including their names, numbers, and the quality of their connections.
3.
Select the participant you want to see more call information about.
The following additional details about the participant display:
▪ System or application the participant is using
▪ Call type
▪ Call speed
▪ Encryption status
▪ Call streams (for your system and the participant)
Depending on the nature of your call, you may also see the transmitted and received streams of audio, video, and content.
4.
Optional: Select a call stream for additional information.
The following additional details about the stream display:
▪ Stream type
▪ Stream quality
▪ Protocol used
▪ Format (may not display on some mobile devices)
▪ Rate used
▪ Frame rate
▪ Packets lost
▪ Packet loss percentage
▪ Jitter
▪ Error concealment
152
Troubleshooting
Check Provisioning Results
To verify your settings are provisioned the way you want, you can see if the configuration parameters were applied successfully to your system.
Make sure your system is registered with a provisioning service, such as RealPresence Resource
Manager.
Procedure
1.
In the system web interface, go to Servers > Provisioning Server .
2.
Select Show Results and verify if parameters applied successfully the last time you provisioned your system.
The Result column displays one of the following statuses:
▪ SUCCESS : The parameter was applied.
▪ IGNORED : The parameter didn’t apply because a configuration that controls this feature is disabled, not applicable, or wasn’t provisioned.
▪ FAILURE : If you see this, the Error Message column can help you identify the issue.
For a list of available system parameters and their permitted values, see the Poly VideoOS Configuration
Parameters Reference Guide .
Related Links
Register the System with RealPresence Resource Manager Provisioning Service
on page 37
Paired IP Devices
Use the following information to troubleshoot issues with paired IP devices.
IP Device Can’t Pair to the Video System
Symptom:
You may notice one or both of the following depending on the device:
▪ After powering on the TC8 device, it doesn’t automatically pair with the video system.
▪ You can’t manually pair the device from the Available Devices list in the video system web interface.
Problem:
There are a few possible causes for this issue:
▪ Network traffic on TCP port 18888 is blocked.
▪ Your system and TC8 aren't on the same VLAN.
Workaround:
Complete each step until the device pairs with your system:
Procedure
1.
Allow traffic on TCP port 18888.
153
Troubleshooting
2.
On your TC8 device, verify that the TC8 VLAN ID matches the VLAN ID on your system.
IP Device Doesn’t Display On the Available Devices List
Symptom:
Even though the device you want to pair is connected to the network, you don’t see it under Available
Devices in the video system web interface.
Problem:
There are a few possible causes for this issue:
▪ The device and video system aren’t on the same subnet.
▪ The network switch isn’t allowing UDP broadcast traffic forwarded to multicast address 224.0.0.200
on port 2000.
▪ The device is paired with another video system.
Workaround:
Complete each step until you see the device on the Available Devices list:
Procedure
1.
Make sure the device and video system are on the same subnet.
If needed, work with your network administrator.
2.
Allow traffic to 224.0.0.200 on UDP port 2000.
3.
Make sure the device isn’t paired with another video system. If it is, unpair the device.
4.
In the TC8 device interface, go to Settings > Reset and select Reset .
Your device resets to its default configuration settings, which unpairs it from the video system.
Paired IP Device is Disconnected
Symptom:
You paired a device with your video system but can’t use it. On the system web interface Device
Management page, you see that the device is Disconnected .
Problem:
A paired device must have a Connected status to use. A Disconnected status may mean there’s a physical connection issue or your device or system is malfunctioning.
Workaround:
Complete each step until you fix the issue.
Procedure
1.
Check the device’s LAN cable connection.
2.
Restart the device.
3.
Restart the video system.
4.
Make sure network traffic on TCP port 18888 is unblocked.
154
Troubleshooting
5.
Perform a factory restore on the device.
6.
Perform a factory restore on the system.
IP Device Paired to Inaccessible Video System
Symptom:
Your device was paired with a video system you can no longer access (for example, the video system lost its network connection or was moved to another location). Whatever the situation, the device screen now indicates it’s waiting to pair.
Problem:
The device is still paired to the video system but can't connect to it.
Workaround:
When this happens, there’s a reset button in the device Settings menu to unpair the device from the video system.
If you can eventually access the video system it was paired with, you also should unpair the device from the Device Management page. Otherwise, the device continues to display in the Connected Devices list but is Unavailable .
Once unpaired, you can pair the device with the same video system or another video system.
Procedure
1.
In the TC8 device interface, go to Settings > Reset and select Reset .
Your device resets to its default configuration settings, which unpairs it from the video system.
2.
In the system web interface, go to General Settings > Device Management .
3.
Under Connected Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Unpair .
The device you’re unpairing should have an Unavailable status.
IP Audio Device is Disconnected from G7500
Symptom:
You paired an IP audio device with your G7500 system but can’t use it. On the system web interface
Device Management page, you see that the device is Disconnected .
Problem:
A paired device must have a Connected status to use. A Disconnected status may mean there’s a physical connection issue or your device or system is malfunctioning.
Workaround:
Reconnect cables or factory restore your hardware. Complete each step until you fix the issue.
Procedure
1.
Check the device LED. If it isn’t blinking blue, reconnect the LAN cable to the device and system.
2.
If the device is a Poly Microphone IP Adapter, also reconnect its power supply cables.
155
Troubleshooting
3.
Perform a factory restore on the device.
4.
Perform a factory restore on the system.
Audio Tests
You can test your system speakers, audio levels, and Polycom StereoSurround setup.
Test Speakers
Verify that you correctly connected the speakers to your system.
You must enable Polycom StereoSurround to test both speakers at once.
The following setups don’t support stereo audio:
▪ Standalone Studio X30 systems
▪ G7500, Studio X50, and Studio X30 systems paired with Poly Trio systems
Procedure
1.
In the system web interface, go to Diagnostics > Audio Test .
2.
Do one of the following:
▪ Select Start .
▪ Select Left to test the left speaker.
▪ Select Right to test the right speaker.
▪ Select Both to test both speakers (if you enable Polycom StereoSurround).
If you run a test during a call, people on the far site also hear the test tone.
A 473 Hz tone indicates that the local audio connections are correct.
Related Links
Configure General Audio Settings
on page 93
on page 157
Test Audio Levels
Audio meters show you real-time audio input and output signals for your system, including microphones, far-site audio, and other connected audio devices.
Procedure
1.
Do one of the following:
▪ In the system web interface, go to Diagnostics > Audio Tests > Audio Meters .
▪ In the local interface, go to Settings > System Information > Diagnostics > Audio Meter .
2.
To test the audio levels, do one of the following:
▪ To check the near-site audio, speak into your microphones.
▪ To check the far-site audio, ask a call participant to speak or call a phone in the far-site room to hear it ring.
Occasional peaks of +12 dB to +16 dB with loud transient noises are acceptable. If you see +20 on the audio meter, the audio signal is 0 dBFS and the audio might be distorted. A meter reading
156
Troubleshooting of +20dB corresponds to 0dBFS in the room system audio. A signal at this level is likely clipping the audio system.
Test Polycom StereoSurround
After you configure the system to use Polycom StereoSurround, you can place a test call to see if it works.
Make sure the microphones are positioned correctly.
The following setups don’t support stereo audio:
▪ Standalone Studio X30 systems
▪ G7500, Studio X50, and Studio X30 systems paired with Poly Trio systems
Procedure
1.
In the system web interface, go to Audio/Video > Audio > Audio Input .
2.
Gently blow on the left and right leg of each microphone while watching the audio meters to identify the left and right inputs.
3.
Test the speakers to check volume and verify that audio cables are connected.
If the system is in a call, the far site hears the tone.
4.
Optional: Exchange the right and left speakers if they are reversed.
5.
Adjust the volume control on your external audio amplifier so that the test tone sounds as loud as a person speaking in the room. If you use a Sound Pressure Level (SPL) meter, it should measure approximately 80 to 90 dBA in the middle of the room.
6.
Repeat these steps for Audio Output .
Related Links
Configure General Audio Settings
on page 93
on page 156
Can’t Wake the System by Touching the Monitor
Symptom:
Touching the monitor doesn’t wake your system.
Problem:
If your system’s Display setting is on No Signal , your monitor may be powering down its USB ports when the system goes to sleep and disabling its touch capabilities.
Workaround:
1.
Configure your monitor to wake when touched.
2.
If your monitor doesn’t have this kind of setting, switch your system’s Display setting to Black .
157
Troubleshooting
LED Status Indicators for the System LAN Ports
You can verify network connectivity by looking at the LAN port LEDs on the back of your system.
Each LAN port has two LEDs: The left LED indicates network connectivity and traffic, while the right LED indicates Power over Ethernet (PoE) status for connected devices.
The G7500 system has four LAN ports: one for the system’s network connection (farthest left) and three link-local network (LLN) connections for peripheral devices.
LED Status Indicators for the System LAN Ports
Indicator
Off
Solid green
Blinking green
Solid orange
Left LED Status (Network Traffic) Right LED Status (Power)*
No connection No device connected
Connected with no traffic
Connected with traffic
N/A
Connected and functioning normally
N/A
Connected but malfunctioning
* - The right LED is not used on the primary network connection port (farthest left on the back of the system).
Related Links
Configuring Wired LAN Settings on page 40
Poly G7500 System Ports on page 13
Fix Polycom Acoustic Fence Issues with G7500
If you’re using Polycom Acoustic Fence technology with your G7500 system and notice it isn’t working, you may have to reconnect your microphones.
Procedure
1.
Disconnect all microphones from the LLN ports on the back of your system.
2.
Reconnect the microphones (connect the primary microphone first).
Test the Call Experience
Run a near end loop test to verify what others see and hear in a call with your system.
This test isn’t available in a call, on the TC8 device, and the system web interface.
Procedure
1.
In the local interface, go to Menu > Settings > Diagnostics .
2.
Go to Near End Loop .
3.
Select Start .
158
Troubleshooting
Monitor 1 displays the video and plays the audio sent to a far site during a call.
Test Connection with Another System
With a ping test, you can check if your system can call another system.
This test isn’t available on the TC8 device and the system web interface.
Procedure
1.
In the local interface, go to Menu > Settings > Diagnostics .
2.
Go to Ping .
3.
Enter the IP address or URL of the system you want to call.
4.
Select Start .
If the test is successful, an abbreviated Internet Control Message Protocol (ICMP) message displays. You see H.323 or SIP information depending on how the far-site system is configured.
Run a Trace Route
You can run a trace route to identify network connectivity issues with your system.
This test isn’t available on the TC8 device and the system web interface.
Procedure
1.
In the local interface, go to Menu > Settings > Diagnostics .
2.
Go to Trace Route .
3.
Enter the IP address or URL with which to run the trace route.
4.
Select Start .
If the test is successful, the hops between your system and the specified destination display.
LDAP Directory Server Ignores the Minimum TLS
Version Setting
Symptom:
You’ve changed your system configuration to use TLS version 1.1 at minimum, but the system still connects to your LDAP directory server with TLS 1.0.
Workaround:
Restart your system after configuring the Minimum TLS Version setting.
Related Links
Register with an LDAP Directory Server
on page 117
Configure Minimum TLS on page 77
159
Troubleshooting
Checking the Web Proxy Configuration
If you experience issues with your automatic or semi-automatic web proxy configuration, check the status and contents of your proxy auto-configuration (PAC) file.
For manual configurations, verify that the information you used to connect your system to the proxy is accurate.
Related Links
PAC File Status
Your system displays the status of the proxy auto-configuration (PAC) file used for web proxy communication. See the following table for more information about these statuses, which you see on the
Web Proxy Settings page of the system web interface.
PAC File Status
Status
Success
In Progress
WPAD Failed
Download Failed
Expired
Description
File successfully downloaded to your system.
File is downloading to your system.
File download URL wasn’t discovered using DHCP option 252.
File didn’t download.
File is expired.
Verify the PAC File Contents
You can check the contents of the PAC file on your system.
Procedure
1.
In the system web interface, go to Network > Primary Network > Web Proxy Settings .
2.
Select Download PAC File .
This option isn’t available if the PAC File Status doesn’t indicate Success .
Zero Touch Onboarding Connection Fails During
Initial Setup or After Reset
Symptom:
The system fails to connect to the Zero Touch Onboarding (ZTO) service during initial setup or after a system reset.
160
Troubleshooting
Problem:
The system can’t communicate with the ZTO service because of a firewall and/or web proxy setting.
Workaround:
Configure your firewall and/or web proxy so that the system can communicate with the ZTO service
( zto.poly.com
) on port 443.
Verify Poly Lens Registration Status
You can check if your system is registered with Poly Lens.
Procedure
» In the system web interface, go to Servers > Cloud to check the Registration Status .
Related Links
Register During System Setup on page 19
on page 19
RealPresence Resource Manager Provisioning Fails
After Downgrading Software
Procedure
1.
In the system web interface, go to Servers > Provisioning Servers .
2.
In the Server Type field, select RealPresence Resource Manager .
3.
In the Server Address field, remove https:// from the beginning of the server address and remove /ucservice from the end of the server address.
4.
Select Save .
Related Links
Downgrading Software on page 135
Register the System with RealPresence Resource Manager Provisioning Service
on page 37
Lighting Conditions Impact Picture Quality
Symptom:
When using the system in a personal environment, where lighting may not be optimal, the picture quality is impacted.
Problem:
The default video input settings are tuned for well-lit office environments.
161
Troubleshooting
Workaround:
Adjust the camera settings in the system web interface. Each environment differs; the amount you adjust the brightness and sharpness depends on your unique lighting and placement situations.
Procedure
1.
In the system web interface, go to Audio/Video > Video Inputs .
2.
From the list of inputs, adjust the camera’s Brightness slider.
Increase brightness in low light environments and decrease brightness in environments with strong single sources of light.
Note: Increasing and decreasing brightness may cause you to lose fine detail in areas with excess lighting or shadows.
3.
Adjust the Sharpness slider.
Increasing the sharpness provides more detail.
4.
Adjust the Color Saturation slider.
Increasing color saturation can correct washed out colors in low light situations.
5.
Select Save .
Issues When the System is Sleeping or Waking
Symptom:
Your system sometimes restarts while sleeping or waking up.
Problem:
This is caused by manipulating the connected HDMI output while your system is asleep.
Workaround:
While your system is asleep, don’t change the HDMI source on your monitor, switch out HDMI cables, or turn off your monitor.
If your sleep Display setting is configured to No Signal , try the following to avoid these issues:
▪ Turn off the input auto-select feature on your monitor.
▪ Set the sleep Display setting to Black .
▪ Disable sleep mode on your system by setting Time Before System Goes to Sleep to Off .
Related Links
Configure Sleep Settings on page 32
162
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement
Key features
4K Ultra-HD video
Automatic framing
Noise-blocking microphones
USB connectivity
Bluetooth connectivity
Wi-Fi connectivity
Sleek design
Easy to use
Frequently asked questions
The Poly Studio X50's camera has a maximum resolution of 4K Ultra-HD (3840 x 2160 pixels).
Yes, the Poly Studio X50 has automatic framing, which automatically adjusts the camera to frame the participants in your meeting.
The Poly Studio X50 has two noise-blocking microphones.
The Poly Studio X50 supports USB, Bluetooth, and Wi-Fi connectivity.
Yes, the Poly Studio X50 is easy to use. It has a simple and intuitive interface that makes it easy to set up and use.