Konftel 800 Installation Guide
Annonce
Annonce
K O N F T E L . C O M
Installation & Administration of Konftel 800
E N G L I S H
Konftel AB hereby declares that this conference phone is in conformity with all the essential requirements and other relevant provisions of Directive 1999/5/EC.
Please visit www.konftel.com
to view the complete declaration of conformity.
Warning!
Do not expose the Konftel 800 to water or moisture.
Warning!
Do not open the casing of the Konftel 800.
Table of contents
Notices 2
Purpose.......................................................... 6
Change history................................................7
Phone overview............................................ 10
Safety guidelines.......................................... 10
Physical layout..............................................12
Connection layout......................................... 13
Dimensions................................................... 14
Icons............................................................. 14
Prerequisites.................................................18
Server configuration checklist.......................19
Power supply connectivity............................ 20
Connection to other devices......................... 20
Specifications................................................20
Initial setup and configuration 23
Configuration of Konftel 800......................... 23
Setting the password for Konftel 800............23
Setting up a DHCP server............................ 24
Connecting to a network with DHCP............ 24
Viewing the IP address................................. 24
Setting a static IP address............................ 25
Logging in to the web interface of
Konftel 800............................................. 26
Logging out from Konftel 800........................26
Registering an account on the phone........... 26
Registering an account through the web interface..................................................28
Settings configuration and management 29
Configuration of settings on Konftel 800.......29
Phone settings.............................................. 29
Configuring the phone settings on the phone..................................................... 29
Configuring the phone settings through the web interface.................................... 30
Phone settings description............................30
Configuring Daylight Saving Time through the web interface.......................37
Daylight Saving Time state........................... 38
Minute offset................................................. 39
Configuring the minute offset through the web interface.................................... 39
Configuring the minute offset using the configuration file..................................... 39
Time format...................................................40
Configuring the time format using the configuration file..................................... 40
Provision of the NTP server address............ 40
Sleep mode...................................................41
Enabling Sleep mode....................................41
Network settings........................................... 42
Configuring the Network settings through the web interface.......................43
Network settings description.........................43
LLDP Data Units........................................... 48
Media settings...............................................50
Configuring the media settings on the phone..................................................... 51
Configuring the media settings through the web interface.................................... 51
Media settings description............................ 51
Voice quality monitoring................................54
Quality estimate metrics............................... 56
Analog parameters....................................... 56
Configuring RTCP XR...................................57
LDAP settings............................................... 58
Configuring the LDAP settings......................59
LDAP settings description.............................59
Configuring the LDAP number attributes through the web interface.......................62
SIP settings...................................................63
Configuring the SIP settings on the phone... 64
Configuring the SIP settings through the web interface.......................................... 64
SIP settings description................................ 64
Caller information presentation.....................74
Certificates application..................................75
Downloading the root certificate................... 75
Creating the server certificate.......................75
Installing the certificate................................. 76
Table of contents
Exporting the private key.............................. 77
Converting the certificates to .PEM format... 77
Standard encryption algorithms.................... 77
Standard encryption for 802.1x.....................78
Enabling EAP MD5 for 802.1x on the phone..................................................... 79
Enabling EAP MD5 for 802.1x through the web interface.................................... 80
Standard encryption for media encryption with SRTP............................. 80
Legacy encryption mode...............................81
Configuring Legacy encryption mode on the phone............................................... 81
Configuring Legacy encryption mode through the web interface.......................82
Configuring Legacy encryption mode using the configuration file......................82
FIPS mode....................................................83
FIPS mode for media encryption with
SRTP...................................................... 83
Configuring FIPS mode on the phone.......... 83
Configuring FIPS mode through the web interface..................................................84
Configuring FIPS mode using the configuration file..................................... 84
USB only user mode.....................................85
USB only user mode icons........................... 86
Konftel Unite................................................. 88
Pairing and connecting devices.................... 88
Disconnecting devices.................................. 89
Deleting pairing.............................................90
Configuring the Konftel Unite settings.......... 90
Konftel Unite settings....................................90
Expansion of the phone coverage................ 92
Arranging a daisy chain................................ 94
Defining the mode of the phone....................94
Disabling Daisy Chain mode.........................95
Expansion microphone firmware upgrade.... 95
Upgrading expansion microphone firmware..................................................96
Upgrading two expansion microphones........97
Terminating expansion microphone upgrade.................................................. 98
Microphone manually............................. 98
Bluetooth® connection..................................99
Bluetooth® Classic profiles.........................100
Pairing and connecting Bluetooth® devices................................................. 101
Removing Bluetooth® pairing..................... 101
Connection between paired Bluetooth® devices................................................. 102
Bluetooth® radio......................................... 102
Disabling Bluetooth® radio......................... 103
Provisioning on Konftel 800........................ 104
Firmware upgrade and downgrade.............104
Uploading a firmware file............................ 104
Firmware upgrade using check-sync.......... 105
Firmware upgrade and downgrade using a USB mass storage device....... 106
Configuration file.........................................108
Configuration file structure..........................109
Exporting the configuration file................... 125
Importing the configuration file....................125
Validation and migration of configuration....125
Device Management...................................126
Registration with the ZTI device management service............................ 128
Configuring Device Management settings on the phone........................... 128
Configuring Device Management settings through the web interface....... 128
Device Management settings..................... 129
Files on the provisioning server.................. 131
Global configuration file.............................. 131
Creating the global configuration file.......... 131
Device-specific configuration file................ 132
Creating the device-specific configuration file................................... 132
Certificate configuration files.......................133
Certificate configuration file structure......... 134
Firmware binary.......................................... 138
Firmware metadata file............................... 138
Table of contents
Upgrading multiple devices.........................139
Configuring multiple devices.......................140
Remote syslog server................................. 141
Configuring remote syslog settings.............141
Fall back server support............................. 142
Factory reset...............................................142
Performing factory reset............................. 142
System recovery......................................... 143
Performing system recovery....................... 143
Web interface settings................................ 144
Protection against cross-site request forgery.................................................. 144
Device status view...................................... 145
Device status.............................................. 145
Viewing the phone status............................146
System logs................................................ 146
Viewing system logs................................... 147
Network logs............................................... 147
Viewing network logs.................................. 147
Licenses......................................................148
Appendix A. Encryption methods in Legacy encryption mode 149
Encryption methods in Legacy encryption mode...................................149
INTRODUCTION
PURPOSE
This document provides checklists and procedures for installing, configuring, and administering Konftel 800. It is intended primarily for implementation engineers and administrators.
6
INTRODUCTION
CHANGE HISTORY
Issue Date Summary of changes
Release
1.0.5
June 2021 •
Updated Icons on page 14 with the
Clear call history button.
•
Updated Logging in to the web interface of Konftel
on page 26 with the information about lockout after incorrect login attempts.
•
Updated Phone settings description on page 30
with the default phone name and FIPS mode settings.
•
Updated Network settings description
on page 43 with the information about IP address in the 802.1x
slider section.
•
Updated SIP settings description
on page 64 with the information about allow via header rewrite, use of static source ports, and USB only user mode.
•
Updated Standard encryption algorithms
on page
77 with the information about FIPS mode.
•
Updated Legacy encryption mode
on page 81 with the information about firmware upgrade.
•
Added new section FIPS mode on page 83.
•
Added new section USB only user mode
on page
85.
•
Updated Expansion of the phone coverage
on page
92 with the information about disabling the unused daisy chain ports during active calls.
•
on page 99 with the information about USB only user mode.
•
Added new section Firmware upgrade and downgrade using a USB mass storage device on
page 106.
•
Updated Configuration file structure on page 109
with new parameters.
•
Added new section Protection against cross-site request forgery
on page 144.
•
with the information about the list of encryption methods enabled and disabled in
Legacy encryption mode.
Table continued…
7
INTRODUCTION
Issue
Release
1.0.4
Date
February
2021
Release
1.0.3
October
2020
Summary of changes
•
Updated Phone settings description on page 30
with the Allow Legacy Encryption settings.
•
Added Provision of the NTP server address
on page 40.
•
Updated Voice quality monitoring on page 54 with
the quality estimate metrics and analog parameters.
•
Added Standard encryption algorithms
on page
77.
•
Updated Konftel Unite on page 88 in line with the
change in MD5 usage.
•
Added Expansion microphone firmware upgrade
on page 95.
•
on page 99 with information on switching between the Bluetooth modes.
•
Updated Configuration file structure on page 109
with new parameters.
•
Updated Phone settings description on page 30
with the date, date format, time, time format,
Daylight Saving Time (DST) mode, timezone and
Custom DST settings.
•
on page 39.
•
•
on page 102.
•
Added Firmware upgrade using check-sync
on page 105.
•
Updated Configuration file structure on page 109
with new parameters.
•
Updated Certificate configuration files on page 133
with the information about the paths to the certificates, MD5 checksum, and certificate configuration file structure.
Table continued…
8
INTRODUCTION
Issue
Release
1.0.2
Date
August
2020
Summary of changes
•
on page 41.
•
Added Voice quality monitoring on page 54.
•
on page 99.
•
Added LDAP settings on page 58.
•
Updated Configuration file structure on page 109
with new parameters.
Release
1.0.1
March 2020 • Updated the
Media settings description on page
51 with SRTP disablement.
•
Added Firmware upgrade and downgrade on page
104.
•
Added Validation and migration of configuration
on page 125 to the Maintenance chapter.
•
Added Upgrading multiple devices
on page 139.
•
Added Remote syslog server on page 141 to the
Device Management section.
9
OVERVIEW
PHONE OVERVIEW
Konftel 800 is a SIP conference phone that you can use to make calls and hold conferences with a great audio quality. It provides an improved user experience and ensures an easier connection to audio conference bridges. The phone is based on a multi-connectivity platform to leverage the “Bring your own device” approach.
The features of the conference phone include a simple-to-use 4.3 inch graphical
LCD with a backlight and volume control and mute buttons. Two more mute key buttons are located along the perimeter of the device. You can attach additional expansion microphones or cascade three Konftel 800 devices in a daisy chain to expand the audio distribution and pickup in the room.
SAFETY GUIDELINES
Ensure that you are familiar with the following safety guidelines before using, installing, configuring, and administering Konftel 800.
• Read, understand, and follow all the instructions.
• Do not drop, knock, or shake the device. Rough handling can break internal circuit boards.
• Ensure that the power cord or plug is not damaged.
• Do not overload wall outlets and extension cords as this can result in the risk of fire or electric shock.
• Avoid wetting the device to prevent fire or electrical shock hazard.
• Unplug the device from the wall outlet before cleaning. Do not use liquid or aerosol cleaners, harsh chemicals, cleaning solvents, or strong detergents to clean the device. Use a damp cloth for cleaning.
• Avoid exposing the device to high temperatures above 40°C (104°F), low temperatures below 0°C (32°F), or high humidity.
• Do not block or cover slots and openings of the device. These openings are provided for ventilation, to protect the phone from overheating.
• Never push objects of any kind into this device through cabinet slots as they might touch dangerous voltage points or short out parts that could result in a risk of fire or electric shock.
• Do not disassemble this product to reduce the risk of electric shock. Opening or removing covers may expose you to dangerous voltages or other risks.
Incorrect reassembly can cause electric shock during subsequent use.
10
OVERVIEW
• Do not use the device to report a gas leak in the vicinity of the leak.
• Do not use the device near intensive care medical equipment or close to persons with pacemakers.
• Do not place the device too close to electrical equipment such as answering machines, TV sets, radios, computers, and microwave ovens to avoid interference.
In case Konftel 800 and the corresponding accessories are damaged, the device does not operate normally or exhibits a distinct change in performance, refer for servicing to the qualified service personnel.
11
OVERVIEW
PHYSICAL LAYOUT
12
OVERVIEW
5
6
Callout number
3
4
Description
Volume up button
NFC tag
Touch screen
LED status indicators
CONNECTION LAYOUT
Figure 2: Connection layout of Konftel 800
The following table lists the sockets and ports available on Konftel 800 for connection.
13
OVERVIEW
5
6
3
4
Callout number
1
2
Description
PoE/Ethernet connection socket
USB Type A
Micro-USB Type B
Audio expansion ports
Kensington® security lock port
NFC tag for Bluetooth ®
DIMENSIONS
The following table shows the dimensions of Konftel 800.
Parameter
Width
Length
Height
Dimension
326.41 mm
369.87 mm
74.7 mm
ICONS
Icons on the home screen of Konftel 800
Icon Name
Recent
Description
To check the call list. The phone provides the following information about the calls:
• Number . View the phone number of the contact.
14
OVERVIEW
Icon Name
Unite
Description
• Date . View the information when the phone received the call. This applies only to the calls preceding the current day.
• Time . For the current day, the phone shows the time of the call in the convenient time format.
• Direction . View the incoming, outgoing and missed calls.
To access the Konftel Unite settings.
Call
Settings
To dial phone numbers and codes for telephone operations or Konftel Unite connection.
To check and configure the settings from the phone.
View the phone status and reach the menu.
To mute and unmute the phone.
Microphone
Muted
Volume Up To increase the phone volume level.
Volume Down To decrease the phone volume level.
NFC To indicate the built-in NFC tag.
Other icons of Konftel 800
Icon Name
Make Call or
Answer
Description
To indicate the phone off-hook status and answer an incoming call.
15
OVERVIEW
Icon Name
Hang Up
Incoming
Description
To indicate the phone on-hook status and end a call.
To show an incoming call.
Outgoing To show an outgoing call.
To indicate a missed call.
Missed
Hold or On
Hold
Conference
To put a call on hold or to indicate that a call is on hold.
To arrange a conference call.
Split To split a conference call into several separate calls.
Add
Participant
Talk Private
Caps
To add a participant to a conference call.
To arrange a private discussion with a participant of a conference call.
To type in capital letters.
Delete
Visibility
To delete an unneeded number or letter.
To mark whether the characters must stay visible to the user, for example, when logging in with the password.
16
OVERVIEW
Icon Name
Invisibility
Logged In
Description
To mark whether the characters must stay invisible to the user, for example, when logging in with the password.
To indicate that the user logged in as the administrator.
Microphone
Muted
Enter
To indicate that the phone is in muted state.
To confirm the input of information.
Confirm To confirm the information.
To discard the information.
Reject
Arrow Down To move to the sections below.
Arrow Up To move to the sections above.
Arrow Left To return to the previous page.
Arrow Right To move to subsections of a section.
USB
Connected
To indicate an active USB connection.
Konftel Unite connected
To show the connection of the phone to Konftel Unite.
17
OVERVIEW
Icon Name
Daisy Chain
Mode
Loading
Description
To indicate that the phone is in a daisy chain mode.
Contacts
To show that the phone is loading the new version of the firmware.
To show that the LDAP external phone book is available.
To indicate an active Bluetooth ® Classic connection.
Bluetooth connection
Call Transfer
Clear call history
To show that it is possible to transfer an ongoing call to another contact person.
To clear all the call history in the call list.
PREREQUISITES
Konftel 800 is based on a multi-connectivity platform to support the “Bring your own device” use case. Connect your Konftel 800 to a SIP server using the
Ethernet.
The following table describes the tasks you must perform before setting up your
Konftel 800:
No.
Task Notes
1 Review prerequisite information.
If you do not have all the required software and hardware, Konftel 800 might not function as expected.
Table continued…
18
OVERVIEW
No.
Task Notes
2
3
4
Gather preinstallation data.
Ensure that the
Konftel 800 package contains all the required components and accessories.
Connect optional components and accessories to Konftel 800. Perform this task to use the optional components and accessories with your device.
Connect Konftel 800 to a power supply and to the network.
Pre-installation data is required to perform initial parameter setup and to create user accounts for Konftel 800.
Software and hardware prerequisites
Install and configure:
• A DHCP server for providing dynamic IP addresses
• A file server, an HTTP/HTTPS for downloading software distribution packages and the settings file
• Konftel Unite
Konftel 800 requires the current version of Konftel Unite to be installed.
Server configuration checklist
The following table describes the tasks related to server configuration that you must perform for the initial installation of Konftel 800.
No.
Task Notes
1.
Ensure that you have all required licenses for the
DHCP and file server software.
Contact your server software vendors to obtain information about server licensing.
Table continued…
19
OVERVIEW
No.
Task Notes
2.
3.
Ensure that a DHCP server is installed and configured.
Contact your DHCP server vendor to obtain installation documentation.
Ensure that a file server is installed and configured.
Contact your file server vendor to receive installation documentation.
Power supply connectivity
Konftel 800 uses 10/100/1000 Mbit Ethernet and supports PoE Type 1 and Type 2 power supply, which means either 15W or 30W at the power distribution unit.
Operation modes:
• PoE 802.3af 15W
• PoE 802.3at 30W
If your LAN does not support the PoE 802.3af 15W/PoE 802.3at 30W specification, use the AC power adapter, which you can purchase with the device.
Connection to other devices
Konftel 800 is based on a multi-connectivity platform and uses the following features and ports to connect to devices such as a personal computer, expansion microphones, and another Konftel 800:
• Bluetooth ® Classic
• Bluetooth ® LE
• Built-in NFC tag
• USB Type A
• Micro-USB Type B
• Audio expansion ports
SPECIFICATIONS
The following table lists the specifications that Konftel 800 supports:
20
OVERVIEW
Name
Power
Connectivity
Screen
Acoustics
Music
Speech
USB
Bluetooth
Accessories
Description
• PoE 802.3af
• PoE 802.3at
• PoE injector available as an accessory
• Ethernet RJ45 10/100/1000 Mbps, PoE 802.3af, and
PoE 802.3at
• USB 3.0 device
• Built-in Bluetooth ® LE and NFC
• Bluetooth ® Classic (HFP, A2DP)
• Daisy Chain (audio) ports (6-pin RJ-type)
Graphical touch screen with a resolution of approximately 480 x 800 and size of 4.3”
• 3 symmetrically placed MEMS microphones
• Full range speaker in the sealed enclosure
• PoE 802.3at: 91 dB and bass boost
• PoE 802.3af: 87 dB
• Daisy Chain: 91 dB
• PoE 802.3at: 91 dB
• PoE 802.3af: 87 dB
• Daisy Chain: 91 dB
• Micro USB 3.0 device Type B
• USB Type A
• Bluetooth ® LE
• Bluetooth ® Classic (HFP, A2DP)
You can additionally purchase the following accessories:
• Konftel PoE kit
• Konftel Smart Microphones
• Konftel Daisy Chain kit
21
OVERVIEW
Name
User interface
Description
• Simplified user interface
• Functional keypad and dial pad
• LED indicators for call and connectivity status
Mobile app Konftel Unite. With the app, you can access your mobile phone contact book and calendar. The app is available for free at AppStore and Google Play
Device Configuration • Global .xml or MAC specific .xml configuration files
• Web GUI administration
22
INITIAL SETUP AND CONFIGURATION
CONFIGURATION OF KONFTEL 800
Configure Konftel 800 directly from the phone or adjust the settings through the web interface. Use the web browser of a PC connected to the same network to conduct the initial setup of the phone, its registration in the network, and settings in Konftel 800. Through the web interface, you can view logs, update software, and create configuration files.
Konftel 800 officially supports only the Google Chrome browser.
The administrator can always change the administrator password. By default, the administrator password is not set. You must set it when you first activate Konftel
800 or after you reset the phone to the factory settings.
You must enter correct administrator password to change configuration of the phone. For that, you must always remember your password. If you forget the password, you can perform manual device recovery.
Setting the password for Konftel 800
Use this procedure to set the password for your Konftel 800 when you first activate the phone or after a reset to the factory settings.
Connect the PoE cable to ensure the phone power supply.
Wait for the following message to appear on the phone screen:
For full functionality, please set administration password .
Tap Yes to set the password.
Optional: Tap Skip to avoid setting the password.
In this case, Konftel 800 will be functioning in the administration mode, and you will be able to configure settings on the phone. However, you will not be able to access the web interface.
Using the keyboard on the phone screen, type your password. It can contain letters, numbers, and special characters.
The password must contain at least 4 characters. As you enter the password, the phone informs if the password has acceptable length.
Type the password again to confirm it.
Tap the icon three times to return to the home screen.
The phone reboots.
23
INITIAL SETUP AND CONFIGURATION
Setting up a DHCP server
Konftel 800 supports any DHCP server software as long as the software is correctly configured.
Contact your server software vendor to obtain server software installation and configuration instructions.
Install the DHCP server software according to the server software vendor’s instructions.
Configure the IP address for the phone.
You must configure the required DHCP options to connect to the network with
DHCP.
Related concepts
Network settings description on page 43
Connecting to a network with DHCP
Use this procedure to connect to a network with DHCP from your phone or through the web interface.
• To connect to the network with DHCP from Konftel 800, do the following: a) Log in as the administrator.
b) Tap Network .
c) Enable DHCP .
d) Tap the icon twice to return to the home screen.
The phone reboots.
• To connect to the network with DHCP through the web interface, do the following: a) On the web interface, click Network .
b) Enable DHCP .
c) Click Save .
The phone reboots.
Viewing the IP address
View the IP address of your Konftel 800. Use this address to log into the web interface of the conference phone and manage the settings in the device through the web browser.
On the phone screen, tap Settings .
24
INITIAL SETUP AND CONFIGURATION
Tap Status or the icon.
The phone displays the following hardware details:
• IP Address
• MAC Address
• Bluetooth MAC Address
• Hardware Revision
• Software Version
• Smart Mic 1 Version
• Smart Mic 2 Version
Tap the icon twice to return to the home screen.
Setting a static IP address
Use this procedure to connect to the network using a static IP address, and not with DHCP.
Disable DHCP.
Obtain the IP address, netmask, gateway, DNS 1, and DNS 2.
• To set the static IP address from the phone, do the following: a) Log in as the administrator and tap Network . If the administrator password is not set for the phone, on the phone screen, tap Settings > Network .
b) Tap Static IP , and enter the following:
• IP address
• Netmask
• Gateway c) Return to the home screen to save the changes.
• To set the static IP address through the web interface, do the following: a) On the web interface, click Network .
b) In the Static IP section, enter the following:
• IP address
• Network mask
• Gateway c) Click Save .
The phone reboots.
25
INITIAL SETUP AND CONFIGURATION
Logging in to the web interface of Konftel 800
Use this procedure to log in to the web interface of your Konftel 800. You can access the web interface only if you set the administrator password for your phone.
After five incorrect login attempts, the web interface becomes blocked for 15 minutes. The web interface shows the following message: Login has been suspended for 15 minutes due to too many invalid password entries.
If you enter the invalid password less than five times, then you have another five attempts after five minutes break.
Konftel 800 officially supports only the Google Chrome browser.
The phone supports only HTTPS communication protocol.
Obtain the IP address and the administrator password for the phone.
On the web browser, type the IP address of your phone in the following format: https://111.222.33.44/ .
Enter the password in the Password field.
The password is the administrator password for your phone.
Click Login to log in to the webserver of your Konftel 800.
Logging out from Konftel 800
Use this procedure to log out from the web server of your Konftel 800 from your web browser.
You must be logged in to the web interface of your conference phone.
On the web browser, click Logout .
You are forwarded to the Login page and see the prompt that you are not logged in.
Registering an account on the phone
Use this procedure to register an account on the phone.
Konftel 800 supports three accounts: the primary account, the secondary account and the fallback account. The phone uses the primary account to make and receive calls. You can register the secondary account simultaneously with the primary account but the phone uses it only to receive calls. The secondary account can be used to make call if the phone fails to register to the primary
26
INITIAL SETUP AND CONFIGURATION account. You must register the fallback account only if the phone fails to register to both primary and secondary accounts.
You must have access to the account information and all necessary settings that the SIP PBX requires.
Log in as the administrator and tap SIP . If the administrator is not set for the phone, tap Settings > SIP .
Tap Primary Account , and enter information in the following fields:
• Account Name : The name that the phone uses locally on the screen. You can set it based on your corporate standards.
• User : The SIP account name. The phone uses the content of this field to construct the user Universal Resource Identifier (URI). Do not include the
@sipdomain .
This is a mandatory parameter.
• Registrar Address : The IP address or a fully qualified domain name
(FQDN) of the SIP server where the account is registered. It can be in
10.10.1.100
format for a local SIP server or in the sip.company.net
format for a public VoIP service provider or FQDN.
This is a mandatory parameter.
• Proxy : The proxy server the company uses for Internet communication. The address can be in 10.10.1.100:1234 format for a local proxy with the port specified or in the proxy.company.net:port format for FQDN.
The port value is optional. You can leave this field blank.
To ensure a persistent connection for the account, enable Keep Alive .
This will ensure a persistent connection for this account.
Tap Credentials , and enter information in the following fields:
• Realm . Realm identifies the SIP domain for Konftel 800 to accept incoming calls from.For example, company.net
.
You can leave this field blank or put an asterisk (*) to accept all incoming call invites from any SIP domain.
• Authentication Name . If this parameter is not specified, the phone uses the content of the User field to authenticate and register the account.
• Password . The phone uses this password for the authentication with the
Registrar. This is a mandatory parameter.
Tap the icon to return to the account registration menu.
Optional: Enter Registration Timeout value in seconds.
27
INITIAL SETUP AND CONFIGURATION
This is a request to the SIP server that specifies when the registration must expire. Konftel 800 automatically renews the registration within the set period if the phone is still on and connected to the server. By default, it is 300 seconds.
Tap the icon to return to the SIP menu.
Repeat Steps above for the secondary and fallback accounts.
Registering an account through the web interface
Use this procedure to register an account for Konftel 800 through the web interface.
You must have access to the account information and all necessary settings that the SIP PBX requires.
On the web interface, click SIP .
In the Primary Account section, enter information in the following fields:
• Account Name
• User
• Registrar
• Proxy : This field can be left blank.
• Registration Timeout
• Realm : A protection domain where the SIP authentication name and password is valid.
The realm is usually the same as the registrar. If you enter an asterisk (*), the phone responds to any realm. If there is a specific realm, the phone responds only to that realm when asked for credentials.
• Authentication Name
• Password : The password for the Realm authentication.
Enable Keep Alive .
Optional: Repeat Steps above for the secondary and fallback accounts.
Click Save .
The phone restarts the application to apply the changes.
28
SETTINGS CONFIGURATION AND
MANAGEMENT
CONFIGURATION OF SETTINGS ON KONFTEL 800
You can configure almost all settings directly on your Konftel 800. For that you need to navigate through the menu and select the options you need. Using the web interface makes the settings configuration easier. This guide explains both options for you to choose the more convenient one.
The basic settings, such as the phone name, language, and ring level, can be modified by any user. To configure other settings you must log in as the
Administrator.
PHONE SETTINGS
You can configure the phone settings during the installation of Konftel 800 or any time after it. The phone settings include the following:
• Phone Name
• Phone Language
• Security
• Ringtone Level
• Key Tone
• Reboot Device
• Webapp Debug
• Daisy Chain Mode
• Factory Reset
• Admin Password
• Time and Region
• Startup Sound
Related concepts
on page 30
Configuring the phone settings on the phone
Use this procedure to configure the phone settings on the phone.
On the phone screen, tap Settings > Phone .
29
SETTINGS CONFIGURATION AND MANAGEMENT
Choose the parameter that you want to configure and proceed to the options available.
You must log in as the administrator to change the password, set time settings, choose Daisy Chain mode or reset the phone to factory settings.
After you made the choices, return to the home screen.
Depending on what parameters you change, the phone restarts the application or reboots.
Configuring the phone settings through the web interface
Use this procedure to configure the phone settings through the web interface of your Konftel 800. Note that only administrator can configure all the settings.
Log in to the web interface.
Click Phone .
Choose the parameter that you want to configure and proceed to the options available.
Click Save .
Phone settings description
The following table lists the basic settings of Konftel 800 available through the web interface in the Phone tab or on the phone in Settings > Phone and Settings >
Admin Login > Phone .
Name Description
Phone
Phone Name To specify the name of the phone, which is visible on the home screen when the phone is in a stand-by or on-hook mode. The default name is Konftel 800 .
Table continued…
30
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Phone Language
Description
To select the language. The options are:
• English . This is the default setting.
• Swedish
• Danish
• Norwegian
• Finnish
• Italian
• German
• French
• Spanish
• Portuguese
• Dutch
• Simplified Chinese
The characters on the Konftel 800 keyboard match the selected language for all languages except Simplified
Chinese. For Simplified Chinese, Konftel 800 uses English keyboard layout.
Security
Allow Legacy
Encryption
FIPS Mode
To enable or disable legacy encryption for backward compatibility.
By default, Legacy encryption mode is enabled.
You can configure this parameter if you log in with the administrator password.
To enable or disable FIPS compliance.
By default, FIPS mode is disabled.
You can configure this parameter if you log in with the administrator password.
Table continued…
31
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Admin Password
Ringtone Level
Key Tone
Reboot Device
Webapp Debug
Daisy Chain
Description
To change the administrator password.
You can configure this parameter if you log in with the administrator password.
For security reasons, you can change the administrator password only on the phone.
To choose from six volume levels and a Silent mode. The default setting is Level 4 .
If you select Silent mode, only the green LEDs on the phone flash when a call is received.
To enable or disable the key click sound as you tap the phone screen buttons.
By default, the key tone is on.
To reboot the phone when needed.
You can use this function only through the web interface.
To enable or disable the debugging function for the web application. It activates the web application logging available in the System Logs tab. By default, Webapp Debug is off.
You can use this function only through the web interface.
To choose a mode, in which your Konftel 800 operates in case of a daisy chain arrangement. The options are:
• Master . This is the default setting.
• Slave
You can configure this parameter on the phone if you log in with the administrator password. The administrator can also configure this parameter using the .xml configuration file.
Table continued…
32
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Factory Reset
Startup Sound
Description
To reset the phone to its factory settings. By resetting the phone to its factory settings, you remove all the configurations set, imported and installed in course of the phone use.
You can do the factory reset only if you log in with the administrator password and only on the phone.
To enable or disable the phone's branded startup sound. By default, the startup sound is on.
The change of this setting does not require a restart or reboot of the phone.
Time and Region
NTP Enable
NTP Server
Date
To enable or disable the Network Time Protocol (NTP). By default, NTP is enabled.
You can configure this parameter if you log in with the administrator password.
To specify the NTP server when NTP is enabled. By default the phone uses the following NTP server:
0.pool.ntp.org
.
You can configure this parameter if you log in with the administrator password.
To set the current date.
You can set the current date manually only if NTP is in disabled state.
Specify the date by doing the following:
• Manually enter the date in the field by clicking the day, month, and year to change the value.
• Select a date from the date picker.
You can use this function only through the web interface.
Table continued…
33
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Date Format
Description
To set the date format.
The following date formats are available:
• dd M, D - Date, short name for the month and day of the week. For example, 10 Jan, Mon .
• dd MM, DD - Date, full name for the month and day of the week. For example, 10 January, Monday .
• M dd, D - Short name for the month, date, and short name for the day of the week. For example, Jan 10,
Mon .
• MM dd, DD - Full name for the month, date, and full name for the day of the week. For example, January 10,
Monday .
• D, dd M - Short name for the day of the week, date, and short name for the month. For example, Mon, 10
Jan .
• DD, MM dd - Full name for the day of the week, full name for the month, and date. For example, Monday,
January 10 .
• dd/mm/yy - Date/month/short numerical designation of the year. For example, 10/01/20 .
• dd/mm/yyyy - Date/month/full numerical designation of the year. For example, 01/10/2020 .
• mm/dd/yy - Month/date/short numerical designation of the year. For example, 01/10/2020 .
• mm/dd/yyyy - Month/date/full numerical designation of the year. For example, 01/10/2020 .
• yy/mm/dd - Short numerical designation of the year/ month/date. For example, 20/01/10 .
• yyyy/mm/dd - Full numerical designation of the year/ month/date. For example, 2020/01/10 .
You can also leave the Default format of the date. In this case your Konftel 800 applies the date format that is standard for the selected language. For example, if your selected language is Finnish , the date format is dd.mm.yyyy
.
You can configure this parameter only through the web interface. The administrator can also configure this parameter using the .xml configuration file.
34 Table continued…
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Time
Time Format
Geo Timezone
(auto DST)
Description
To set the current time.
You can set the time manually only if NTP is in disabled state.
See the time on the home screen of the phone.
Set the time by doing the following:
• Manually enter the time value in the field by clicking the hours, minutes, and seconds to change the value.
• Select the time from the time picker.
You can use this function only through the web interface.
To set the time format.
When you select the language, the time format automatically changes to the standard time format for the chosen language. You can manually change the convenient time format.
The following time formats are available:
• Default
• 12 hours
• 24 hours
You can configure this parameter through the web interface. The administrator can also update settings with the .xml configuration file.
To enable or disable Daylight Saving Time (DST) mode based on the selected geographical timezone.
By default, DST is disabled.
You can use this function only through the web interface.
Table continued…
35
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Timezone
Daylight Saving
Time
Description
To specify a timezone and minute offset. The available timezone is based on Geo Timezone (auto DST) being enabled or disabled. With Geo Timezone (auto DST) disabled, the phone sets the time as a difference with the
Coordinated Universal Time (UTC). You can specify the minute offset for the selected UTC time zone. The possible minute offset values are 0, 15, 30, and 45.
With Geo Timezone (auto DST) enabled, the phone specifies the timezone based on the country and the city observing the DST.
The default setting is UTC.
You can configure this parameter through the web interface. The administrator can also update settings with the .xml configuration file.
To manually advance the clock during the specified period of time. Konftel 800 supports the Daylight Saving Time
(DST) feature together with the UTC time zones.
You can configure this parameter through the web interface. The administrator can also update settings with the .xml configuration file.
Custom DST To enable or disable the custom DST mode.
If Geo Timezone (auto DST) is enabled, Custom DST is automatically disabled.
You can use the custom DST functions only with the enabled Custom DST .
You can configure this parameter through the web interface. The administrator can also update settings with the .xml configuration file.
Custom DST Settings
Offset Hours To specify the time in hours between the standard time and the DST. The values are 1 and 2. The default setting is 1.
Table continued…
36
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Start Month
Start Day Mode
Start Day
Start Hour
Stop Month
Stop Day Mode
Stop Day
Description
To select the month when to apply Offset Hours .
To select the day mode when to apply Offset Hours .
To select the day when to apply Offset Hours .
To select the hour when to apply Offset Hours .
To select the month when to stop applying Offset Hours .
To select the day mode when to stop applying Offset Hours .
To select the day when to stop applying Offset Hours .
Stop Hour To select the hour when to stop applying Offset Hours .
After you click Save in the web interface, the phone saves the changes and restarts the application or reboots, depending on what parameters you changed.
To save changes on the phone, you must return to the home screen, and the phone restarts the application or reboots to apply them.
Configuring Daylight Saving Time through the web interface
Use this procedure to configure DST offset through the web interface.
When you use the DST start parameters, enable the comparable DST stop parameters.
Log in to the web interface.
Click Phone .
Enable Custom DST .
In the Offset Hours field, specify the time in hours between the standard time and the period when the DST parameter is active.
The values are 1 and 2. The default setting is 1 .
In the Start Month field, select the month to apply the DST offset.
In the Start Day Mode field, select the day mode to apply the DST offset.
In the Start Day field, specify the day to apply the DST offset.
37
SETTINGS CONFIGURATION AND MANAGEMENT
The value range depends on the selected Start Day Mode . For example, if you select Day of month as the day mode, the value range is from 1 to 31.
The value range for the weekday is from 0 to 7. Note that in this case, 0 and 7 mean Sunday.
When Start Day Mode is 0, the start day is a day of the month. In case of other values, the day is a day of the week: 1 is Monday, 5 is Friday. If Start
Day Mode is 2 and Start Day is 5, you define the second Friday in the month.
The values -1 to -5 show a weekday in the month from the month end. If Start
Day Mode is -1 and Start Day is 5, this is the last Friday in the month.
In the Start Hour field, specify the hour to apply the DST offset.
In the Stop Month field, select the month to stop applying the DST offset.
In the Stop Day Mode field, select the day mode to stop applying the DST offset.
In the Stop Day field, specify the day to stop applying the DST offset.
The value range depends on the selected Stop Day Mode . For example, if you select Day of month as the day mode, the value range is from 1 to 31.
In the Stop Hour field, specify the hour to stop applying the DST offset.
Click Save .
Daylight Saving Time state
Check the Daylight Saving Time state on the status page. The following options are available:
• On shows that the DST is active. This happens when you configure a UTC timezone, enable Custom DST , and the current date is between the DST start day and DST stop day. In this case, you can add the offset to the current time.
• Off demonstrates that the DST is not active. This happens when you configure a UTC timezone with the Custom DST disabled, or the current date is not between the DST start day and DST stop day. In this case, you cannot add the offset to the current time.
• Auto means that there is a Geo timezone set, and the phone ignores the
Custom DST settings. In this case, the DST settings are managed automatically.
• Unknown shows that the required information is currently unavailable. You must refresh the page and check it later.
38
SETTINGS CONFIGURATION AND MANAGEMENT
Minute offset
Konftel 800 supports the minute offset of the specified UTC time zone. You can set the UTC time zone offset to 0, 15, 30, or 45 minutes.
Configuring the minute offset through the web interface
Use this procedure to configure the minute offset through the web interface.
Log in to the web interface.
Click Phone .
In the Time and Region section, disable Geo Timezone (auto DST) .
In the Timezone field, configure the following: a) In the first drop-down list, select the UTC time zone.
b) In the second drop-down list, select the minute offset for the specified UTC time zone.
Click Save .
Configuring the minute offset using the configuration file
Use this procedure to configure the minute offset using the .xml configuration file.
Obtain the configuration .xml file for Konftel 800.
In the configuration file, go to the <time> section.
Set the value in the <timezone> tag to your preferred UTC time zone:
<timezone>UTC+7</timezone>
To specify the minute offset, add the minute offset value to the specified timezone.
<timezone>UTC+7:15</timezone>
The UTC time zone offset is set to 15 minutes.
Save the configuration file.
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
Related concepts
on page 108
Related tasks
Importing the configuration file on page 125
Configuring Device Management settings through the web interface
on page 128
39
SETTINGS CONFIGURATION AND MANAGEMENT
Exporting the configuration file on page 125
Time format
Konftel 800 supports various time formats so that the user get the convenient time presentation.
The following values are available for the time format parameter:
• hh:mm - Konftel 800 shows time using the 24-hour clock approach.
• hh:mm AP - Konftel 800 shows time using the 12-hour clock approach.
• Empty value - Konftel 800 shows the standard time format for the selected language.
Configuring the time format using the configuration file
Configure the time format using the .xml configuration file.
Obtain the .xml configuration file for Konftel 800.
In the configuration file, go to the <time> section.
Set the <time_format> parameter value.
Save the configuration file.
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
Related concepts
on page 108
Related tasks
Importing the configuration file on page 125
Configuring Device Management settings through the web interface
on page 128
Exporting the configuration file on page 125
Provision of the NTP server address
Use DHCP option 42 to provide NTP server address to Konftel 800 when using
802.1x certificates. In this case, you must have DHCP enabled on the phone to display the accurate time received from this NTP server address.
Do not update the value in the configuration file while receiving the NTP address from the DHCP option 42.
If there is a configured NTP setting on the phone, and you set DHCP option 42 to provide NTP server address, then the address from DHCP option 42 overrides this
40
SETTINGS CONFIGURATION AND MANAGEMENT setting in configuration. At that, Konftel 800 preserves the value in the configuration settings. The phone stores the NTP server address from DHCP option 42 separately in a volatile memory. So, when it reboots, the volatile memory becomes empty. If DHCP option 42 does not provide an NTP server address again, then the value from the configuration file becomes applicable.
Sleep mode
Konftel 800 supports Sleep mode feature, which saves power by turning the screen off after a specified period of inactivity. By default, Sleep mode is in disabled state. The phone administrator can enable Sleep mode and configure the time-out value.
The phone wakes up from Sleep mode when you do any of the following:
• Touch the screen
• Connect or disconnect the USB cable
• Connect or disconnect a daisy chain Slave device
• Connect or disconnect the Bluetooth ® Classic
The phone also wakes up from Sleep mode during screen activity, such as an incoming call, Konftel Unite connection, or error prompts.
The phone cannot enter Sleep mode during an active call or when it is in music streaming mode.
Enabling Sleep mode
Enable Sleep mode and configure the time-out value using the .xml configuration file. The default value is 0, which means that the feature is disabled. To enable
Sleep mode and to specify the time-out in minutes, set the value in the range from
1 to 500.
Obtain the .xml configuration file for Konftel 800.
In the configuration file, go to the <phone> section.
Set the <sleep_mode_timeout> parameter to a value in the range from 1 to
500.
Save the configuration file.
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
Related concepts
on page 108
41
SETTINGS CONFIGURATION AND MANAGEMENT
Related tasks
Importing the configuration file on page 125
Configuring Device Management settings through the web interface
on page 128
Exporting the configuration file on page 125
NETWORK SETTINGS
The network settings of Konftel 800 include the following:
• DHCP
• Hostname
• Domain
• Static IP
• DNS1
• DNS2
• VLAN
• VLAN ID
• LLDP
• 802.1x
• SIP DiffServ
• Media DiffServ
You can configure the network settings on the phone or through the web interface of Konftel 800.
Related concepts
Network settings description on page 43
Configuring the network settings on the phone
Use this procedure to configure the network settings of your Konftel 800 on the phone.
Log in as the administrator.
In the Settings menu, tap Network .
Choose the parameter that you want to configure and proceed to the options available.
Tap the icon twice to return to the home screen.
The phone reboots to apply the changes.
42
SETTINGS CONFIGURATION AND MANAGEMENT
Configuring the Network settings through the web interface
Use this procedure to configure the Network settings of your Konftel 800 through the web interface.
Log in to the web interface.
Click Network .
Choose the parameter that you want to configure and proceed to the options available.
Click Save .
The phone reboots to apply the changes.
Network settings description
The following table lists the network settings of Konftel 800 available through the web interface in the Network tab or on the phone in Settings > Network .
Name Description
Network
DHCP
Hostname
Domain
To enable or disable Dynamic Host Configuration Protocol
(DHCP) on your phone. Network devices use DHCP to obtain the parameters necessary for operation in the IP network. You must enable DHCP if no other specific information is given.
When the DHCP option is enabled, all other information on this page is set automatically.
To specify the hostname of your phone in the network. By default, it is set to konftel800 . You can change it to another name.
To specify the domain where the device is located.
You can leave this field blank.
Static IP
Table continued…
43
SETTINGS CONFIGURATION AND MANAGEMENT
Name
IP
Netmask
Gateway
DNS 1
DNS 2
VLAN
VLAN ID
SIP DiffServ
Description
To specify the IP address of the phone if DHCP is disabled.
Here, the network administrator or the service provider provides the address.
To specify the network mask for your phone. Usually, it is set to 255.255.255.0
to limit network traffic to the subnet.
To specify the gateway for your phone. The gateway is the address of the device or server used for Internet communication.
To specify the address to the primary Domain Name System
(DNS) server.
Leave the field blank for DHCP default settings.
To specify the address to an optional secondary DNS server.
Leave the field blank for DHCP default settings.
To enable or disable the Virtual Local Area Network (VLAN).
By enabling this option, all communication to and from
Konftel 800 goes through the specified VLAN.
The phone also uses this VLAN to communicate through the web interface.
To specify the ID number to be used for all IP telephony communication through VLAN on your phone.
To specify a value from 0 to 63 to prioritize the SIP messages as a part of the quality of service (QoS) mechanism.
You can configure this parameter through the web interface or the .xml configuration file.
Table continued…
44
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Media DiffServ
Description
To specify a value from 0 to 63 to prioritize the media packets (voice) as a part of the quality of service (QoS) mechanism.
You can configure this parameter through the web interface or the .xml configuration file.
LLDP
Enable
Country Code
Country
Subdivision
County
To enable and disable specification of the phone location settings.
Konftel 800 uses Link Layer Discovery Protocol—Media
Endpoint Discovery (LLDP-MED) as a data link protocol to send information about itself and receive data about other devices in the same network. You can specify a part of the parameters if some information is unavailable.
By default, LLDP is enabled after the first boot, factory reset, and configuration reset.
You can configure LLDP settings only through the web interface.
To specify the country.
To specify the part of the country.
City
City Division
Block
Street
To specify the county, parish, district, or other applicable administrative division.
To specify the city.
To specify the city district or area.
To specify the block within the city district.
To specify the street.
Table continued…
45
SETTINGS CONFIGURATION AND MANAGEMENT
Zip
Building
Unit
Floor
Room
Place Type
Script
ELIN
Name
Direction
Trailing Street
Suffix
Street Suffix
Number
Number Suffix
Landmark
Additional
Name
Description
To specify the direction of moving along the street.
To specify the trailing street suffix.
To specify the street suffix.
To specify the house number.
To specify the house number suffix.
To specify the reference point for the location.
To specify additional reference points.
To specify the name of the company.
By default, it is set to Konftel 800 . The administrator can change it to another name.
To specify the ZIP code of the location.
To specify the name or number of the building.
To specify the unit within the building.
To specify the floor of the building.
To specify the room in the building.
To specify the type of setting, for example, office.
To specify the script.
To specify Emergency Location Identification Number
(ELIN).
802.1.x
Table continued…
46
SETTINGS CONFIGURATION AND MANAGEMENT
Name
802.1x
slider
Description
To enable or disable 802.1x
. When enabled, the Konftel 800 asks an authentication server for permission when connected to the LAN.
Konftel 800 requests a new IP address when 802.1x
authentication succeeds for the first time. If you configure the phone to use DHCP, the phone does not request a new
IP address until the current DHCP lease expires.
To specify your name in the network.
Authentication
Name
EAP MD5
EAP TLS
To enable or disable the Extensible Authentication Protocol
(EAP) MD5 method.
To enable or disable the EAP Transport Layer Security
(TLS) method.
EAP MD5
EAP-MD5
Password
To set EAP password.
This parameter is available in the web interface if you enable EAP-MD5 Password .
EAP TLS
This section is available in the web interface if you enable EAP TLS .
Certificate
CA Certificate
Private Key
To specify the certificate for the phone to use for authentication if TLS is applied.
To specify the public key in the root certificate which the phone uses to verify other certificates in case of TLS applied. The root certificate is also known as the Certificate
Authority (CA) certificate.
To specify the private key which the phone uses to verify other certificates in case of TLS applied.
Table continued…
47
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Private Key
Password
Description
To specify the password for encryption of the private key when using TLS.
LLDP Data Units
When Konftel 800 uses LLDP, it sends the information as LLDP Data Units. Each
LLDP Data Unit is a sequence of Time-Length-Value (TLV) strings.
The phone supports LLDP on primary Ethernet interfaces. The following table lists the TLVs typical for Konftel 800:
Category TLV Name TLV String Value
CHASSIS ID
String length
7 BASIC
MANDATORY
BASIC
MANDATORY
BASIC
MANDATORY
BASIC
OPTIONAL
BASIC
OPTIONAL
BASIC
OPTIONAL
BASIC
OPTIONAL
PORT ID 7
TIME TO LIVE 2
SYSTEM NAME 22
SYSTEM
DESCRIPTION
28
SYSTEM
CAPABILITIES
4
MANAGEMENT
ADDRESS
12
MAC ADDRESS OF THE
PHONE
IP ADDRESS OF THE PHONE
LLDP_TTL
LLDP_SYSTEM_NAME
VENDOR INFORMATION AND
FIRMWARE VERSION
THE PHONE IS WITHIN THE
SYSTEM CAPABILITIES
OCTET. IF THE PHONE IS
REGISTERED, BIT 5 THAT IS
EQUAL TO THE PHONE IS
WITHIN THE ENABLED
CAPABILITIES OCTET.
MGMT ADDR STRING
LENGTH = 5; MGMT
48
SETTINGS CONFIGURATION AND MANAGEMENT
Category TLV Name
ORGANIZATIO
N SPECIFIC
IEEE - VLAN
NAME
11
ORGANIZATIO
N SPECIFIC
IEEE 802.3 -
LINK
AGGREGATIO
N
9
ORGANIZATIO
N SPECIFIC
IEEE 802.3
MAC/PHY/
CONFIGURATI
ON STATUS
9
TIA LLDP MED LLDP-MED
CAPABILITIES
7
String length
TLV String Value
ADDRESS SUBTYPE = 01;
(IPV4) MGMT ADDRESS =
IPADD; INTERFACE NUMBER
SUBTYPE = 2; INTERFACE
NUMBER = 3
OUC = 00-80-C2; IEEE 802.1
SUBTYPE = 3; VLAN
IDENTIFIER = VLAN ID; VLAN
NAME LENGTH = LENGTH
OF VLAN NAME; VLAN NAME
= NAME OF VLAN
OUC = 00-12-0F; IEEE 802.3
SUBTYPE = LINK
AGGREGATION 3;
AGGREGATION STATUS = 1;
AGGREGATED PORT ID = 0
802.3 OUC = 00-12-0F (HEX);
802.3 SUBTYPE = 1;
AUTONEGOTIATION
SUPPORT/ STATUS = VALUE
SENT DURING AUTO-
NEGOTIATION; OPTIONAL
MAU TYPE = LLDP_MAU
TIA OUC = 00-12-BB (HEX);
LLDP CAPABILITIES
SUBTYPE = 1; LLDP-MED
CAPABILITIES = 00-3F (MED
CAPS, NETWORK POLICY,
LOCATION ID, EXTENDED
POWER, INVENTORY); LLDP-
MED DEVICE TYPE = 3
(CLASS III)
49
SETTINGS CONFIGURATION AND MANAGEMENT
Category TLV Name String length
ORGANIZATIO
N SPECIFIC
CIVIC
LOCATION
IDENTIFICATIO
N
63
ORGANIZATIO
N SPECIFIC
ELIN
LOCATION
IDENTIFICATIO
N
5
TIA LLDP MED NETWORK
POLICY -
VOICE
8
TIA LLDP MED INVENTORY -
ORGANIZATIO
N SPECIFIC
BASIC
MANDATORY
SOFTWARE
REVISION
EXTENDED
POWER-VIA-
MDI
END-OF-
LLDPU
5–36
7
0
TLV String Value
TIA OUC = 00-12-BB;
LOCATION DATA FORMAT =
CIVIC ADDRESS LCI
TIA OUC = 00-12-BB;
LOCATION DATA FORMAT =
ECS ELIN
TIA OUC = 00-12-BB (HEX);
NETWORK POLICY
SUBTYPE = 2; APPLICATION
TYPE = 1 (VOICE) U = 0
(NETWORK POLICY IS
DEFINED) T = TAGGING X =
0 (RESERVED BIT) VLAN ID =
VLAN_IN_USE
TIA OUC = 00-12-BB (HEX);
SOFTWARE REVISION
SUBTYPE = 7; SOFTWARE
REVISION = VALUE
OUC = 00-12-BB; AVAILABLE
PARAMETERS = POWER
TYPE, POWER SOURCE,
POWER PRIORITY, POWER
VALUE
NA
MEDIA SETTINGS
You can configure the media settings during the installation of Konftel 800 or any time after it. The media settings include the following:
50
SETTINGS CONFIGURATION AND MANAGEMENT
• Security
• Audio codecs
• Voice Quality Monitor
Related concepts
on page 51
Configuring the media settings on the phone
Use this procedure to configure the media settings of your Konftel 800 on the phone.
Log in as the administrator.
In the Settings menu, tap Media .
Choose the parameter that you want to configure and proceed to the options available.
Tap the icon twice to return to the home screen.
The phone restarts the application to apply the changes.
Configuring the media settings through the web interface
Use this procedure to configure the media settings of your Konftel 800 through the web interface.
Log in to the web interface as the administrator.
Click Media .
Choose the parameter that you want to configure and proceed to the options available.
Click Save .
Media settings description
The following table lists the media settings of Konftel 800 available through the web interface in the Media tab or on the phone in Settings > Admin Login > Media .
Starting from Release 1.0.1, the SRTP , SRTCP , and Capability Negotiation settings are not supported on Konftel 800 phones sold in Russia, Belarus,
Kazakhstan, Kyrgyzstan, and Armenia to meet local restrictions on the use of encryption. On such phones, the settings related to SRTP , SRTCP , and
Capability Negotiation are excluded both from the phone interface and the web interface, and you, as the administrator, cannot enable these settings.
51
SETTINGS CONFIGURATION AND MANAGEMENT
Description Name
Security
SRTP
SRTCP
Capability
Negotiation
To select Secure Real-time Transport Protocol ( SRTP ) parameters to provide encryption, message authentication, and integrity for the audio and video streams. The options are:
• Disabled : Konftel 800 does not use SRTP .
• Optional : If selected, the phone uses SRTP if other devices support it.
• Mandatory : The call is not connected if other devices do not support SRTP .
By default, SRTP is disabled.
To enable or disable the Secure Real Time Control
Protocol ( SRTCP ). Enabled SRTCP means using the encrypted protocol.
By default, SRTCP is disabled.
To enable or disable the Session Description Protocol
(SDP) capability negotiation. If Capability Negotiation is enabled, the phone can negotiate transport protocols and attributes.
By default, Capability Negotiation is disabled.
Codec
Codec iLBC Priority
To set the priorities to your codec preferences, where 6 is high, 1 is low, and 0 is also possible.
This is a high-complexity speech codec suitable for robust voice communication over IP. ILBC is designed for narrow band speech. It uses a block-independent linearpredictive coding algorithm and has support for two basic frame lengths: 20 ms at 15.2 kbit/s and 30 ms at 13.33
kbit/s.
By default it is set to 0.
Table continued…
52
SETTINGS CONFIGURATION AND MANAGEMENT
Name
OPUS Priority
PCMU Priority
PCMA Priority
G722 Priority
Description
This is an audio coding format used in interactive realtime applications on the Internet. It can switch between various codecs depending on the bandwidth available.
OPUS adapts to low bit-rate, narrowband speech and to high-quality stereo music. Opus provides an excellent
Wideband and Narrowband performance versus bandwidth.
By default it is set to 0.
Determine if your engineering VoIP environment can use OPUS.
This is an ITU-T standard codec with U-law compression algorithm also known as G711 U-law. It is used in North
America and Japan.
By default it is set to 4.
This is an ITU-T standard codec with A-law compression algorithm also known as G711 A-law. It is used in Europe and the rest of the world, except North America and
Japan. Companding algorithms reduce the dynamic range of an audio signal. In analog systems, this can increase the signal-to-noise ratio achieved during transmission, and in the digital domain, it can reduce the quantization error.
By default it is set to 5.
This is an ITU-T standard codec that provides 7 kHz wideband audio at a data rate within 64 kbit/s. It offers an improved speech quality but requires a high quality network connection between the devices.
By default it is set to 6 (highest priority).
Consider OPUS to provide higher quality at a lower bandwidth.
Table continued…
53
SETTINGS CONFIGURATION AND MANAGEMENT
Name
G729 Priority
Description
This is an ITU-T standard codec that operates at 8 kbit/s.
It is mostly used in VoIP applications with low bandwidth requirement.
By default it is set to 3.
Consider OPUS for a higher audio quality at a lower bandwidth. OPUS is also more resilient to transcoding.
Voice Quality Monitor
Enable RTCP XR To enable or disable the sending of the Real Time Control
Protocol Extended Report ( RTCP XR ). If enabled, the quality parameters are sent as SIP PUBLISH messages to the specified report collector.
By default, this option is disabled.
RTCP XR Collector
URI
To specify the report collector.
After you click Save , the phone saves the changes and restarts application.
Voice quality monitoring
Configure Konftel 800 to generate quality metrics and evaluate the overall quality of the calls. You can use this information to troubleshoot various quality aspects of the phone calls.
Find the detailed description of the collected parameters in the following standards: RFC 6035 and RFC 3611.
RTCP XR as voice quality monitoring report
If you enable the voice quality monitoring feature, the phone collects the metrics, generates Real-Time Control Protocol Extended Report (RTCP XR), and sends
RTCP XR as a SIP PUBLISH message to the specified report collector. View the statistics of the established phone calls on a specific information collecting portal.
The phone collects the metrics in the following cases:
• One of the call parties ends the call.
• Call parameters, such as codec and far-end IP address or port, change.
54
SETTINGS CONFIGURATION AND MANAGEMENT
• One of the call parties puts the call on hold or resumes it.
RTCP XR parameters
The following table lists parameters that the RTCP XR contains:
Parameter Description
CallId
LocalId
RemoteId
OrigID
LocalGroup
LocalAddr
Party leg identifier
Reporting device for the media session
Remote device of the media session
Device that originated the session
Identification for aggregation of the local phone
Address information, including an IP address, a port number, and SSRC of the phone that receives the information
LocalMAC
RemoteAddr
Timestamps
SessionDesc
JitterBuffer
PacketLoss
BurstGapLoss
Delay
The Media Access Control (MAC) address of the local phone
Address information, including an IP address, a port number, and SSRC of the phone that is the source of information.
Call start and call end in Coordinated Universal Time (UTC)
A shortened version of the media session including codecs
(ILBC, Opus, PCMU, PCMA, G722, or G729), silence suppression status (on or off), and number of packets per second
Jitter Buffer metric definitions
Packet loss percentage and Jitter buffer discard rate percentage
Burst-to-Gap loss metric
Network delay between the call parties
Table continued…
55
SETTINGS CONFIGURATION AND MANAGEMENT
Parameter
Signal
QualityEst
Description
Non-packet elements of the voice over IP system. Includes a
Signal level (SL) metric, which typically has a negative value
Measures of the established call quality
Quality estimate metrics
The following table shows the direct measures of the quality of the established call or transmission. These metrics incorporate the effects of codec type, packet loss, discard, burstiness, and delay.
Metric
RLQ
RCQ
MOSLQ
MOSCQ
QoEEstAlg
Description
Listening Rating Factor (RLQ) metric based on burst packet loss and codec selection.
Conversational Rating Factor (RCQ) metric measures voice quality based on transmission delay, burst packet loss, and burst loss recency.
A mean opinion score for listening quality (MOSLQ). The scale of speech quality is one (bad) through five (excellent).
A mean opinion score for conversational quality (MOSCQ).
Includes recency and delay effects, which affect conversational quality.
A text description of the algorithm, which estimates all voice quality metrics.
Analog parameters
The following table lists the analog parameters that the RTCP XR does not provide, but they influence the call quality statistics:
56
SETTINGS CONFIGURATION AND MANAGEMENT
Name
NoiseLevel
Description
The average silence period noise level (expressed in dBm), reported by the speech processor.
LocalRERL The average local residual echo return loss (RERL) level (expressed in dB), reported by the echo canceller.
NewLocalLoopEPDela y
The local loop echo path delay (expressed in ms), calculated by the local echo canceller.
The analog parameter data are updated every second. The phone regularly collects the analog parameter data and sends them to generate the RTCP XR report.
Configuring RTCP XR
By default, the voice quality monitoring feature on Konftel 800 is disabled. To use this feature, enable it and specify the Uniform Resource Identifier (URI) of the
RTCP XR collector. You can do this on the phone, through the phone web interface, or using the configuration .xml file.
The acceptable formats for the collector URI are as follows:
• hostname
• hostname:port
• user@hostname
• user@hostname:port
Obtain the RTCP XR collector URI from your service provider.
• To configure RTCP XR from the phone interface, do the following: a) Log in as the administrator.
b) Navigate to Media > Voice Quality Monitor and move the Enable RTCP XR slider to the right to activate RTCP XR.
c) In the RTCP XR Collector URI field, specify the RTCP XR collector URI.
For example, [email protected]
.
d) Tap the icon three times to return to the home screen.
The phone restarts the application to apply the changes.
• To configure RTCP XR from the web interface, do the following: a) Log in to the phone web interface.
57
SETTINGS CONFIGURATION AND MANAGEMENT b) On the Media tab, in the Voice Quality Monitor section, move the Enable
RTCP XR slider to the right to activate RTCP XR.
c) In the RTCP XR Collector URI field, specify the RTCP XR collector URI.
For example, [email protected]
.
d) Click Save .
The phone restarts the application to apply the changes.
• To configure the RTCP XR using the configuration file, do the following: a) Obtain the configuration .xml file.
Find the RTCP XR settings under the <voice_quality_monitor> section.
b) In the <enable_rtcp_xr> tag, specify true to enable RTCP XR.
c) In the <rtcp_xr_collector_uri> tag, specify the collector URI.
For example, [email protected]
.
d) Save the configuration file.
e) Import the configuration file to the phone through the web interface or to the provisioning server to configure several phones simultaneously.
Related concepts
Related tasks
Exporting the configuration file on page 125
LDAP SETTINGS
Konftel 800 supports connection to an external phone book using the Lightweight
Directory Access Protocol (LDAP). When the LDAP feature is in the enabled state, you can browse and use the contact information stored in a remote company directory. The LDAP phone book is available in the Dialpad view of the phone interface.
An LDAP database can contain thousands of contacts. To facilitate the search through the directory server, Konftel 800 has a built-in search function, which filters the content from the LDAP database, based on the search parameters that you enter.
To make the LDAP phone book available, you must activate the LDAP feature by specifying the LDAP server to connect to and the search parameters. You can configure the LDAP settings during or after the installation of Konftel 800.
58
SETTINGS CONFIGURATION AND MANAGEMENT
Configuring the LDAP settings
Configure the LDAP settings through the web interface of your Konftel 800.
Log in to the web interface.
Navigate to the LDAP tab.
Choose the parameter that you want to configure and proceed to the options available.
Click Save .
The phone restarts the application to apply the changes.
LDAP settings description
The following table lists the LDAP settings of Konftel 800 available through the web interface in the LDAP tab.
Parameter Description
Connection
Enable
URL
Certificate
CA Certificate
Private Key
Username
To specify if the LDAP feature is enabled. By default it is disabled.
To specify the URL of the LDAP server host. The phone supports LDAP and LDAP over SSL (LDAPS). URL also can contain the port that the phone connects to.
To upload a certificate to the phone. This certificate is used for authentication on the LDAP server.
To upload a root certificate. It contains a public key, which is used to verify other certificates when using LDAP.
To upload a private key. It is used for authentication when using LDAP.
To specify the username if the LDAP server requires one.
Leave this field blank if the LDAP server does not require a username.
Table continued…
59
SETTINGS CONFIGURATION AND MANAGEMENT
Parameter
Password
Description
To specify the password if the LDAP server requires one.
Leave this field blank if the LDAP server does not require a password.
Search options
Search base
Name filter
Display name
Sort results
Max hits
To specify the distinguished name (DN) of the search base.
Example: dc=domain , dc=com .
To define how the phone applies the entered search characters. The filter complies with the string representation of LDAP search filters described in RFC2254. The search character entered by the user replaces % in the filter string.
Example:
(|(sn=%*)(cn=%*)) : the phone displays to the user all entries with the search characters in the beginning of the sn or cn attribute.
To specify how the phone displays the search hits.
Example: %cn shows the cn attribute.
%givenName %sn shows the givenName attribute and the sn attribute with a space in between.
To specify if the phone sorts the search hits based on the
Display name.
By default, this setting is enabled.
To specify the maximum number of hits to return for each
LDAP search.
The default value is 20.
Table continued…
60
SETTINGS CONFIGURATION AND MANAGEMENT
Parameter Description
Number attributes To define the attributes that the phone displays for a selected search hit. The phone receives the displayed information from the LDAP server.
The number of the Number attribute tags inside the Number attributes tag may be 0 – 30.
Each Number attribute consists of an identifier <id> and its value <value> . The identifier is the number attribute in the form in which the LDAP directory stores it. The <id> tag cannot be empty. The value is the short description or the label that the user sees on the phone screen for a specific number attribute. You can use the same label for several ids.
There are default and custom labels. The default labels are the following:
• Phone number
• Mobile
• Home
• Work
• Other
The Custom label are the labels that the user defines.
The phone translates each label from the default list to the language specified for the device. The phone does not translate the custom labels and displays them as user sets.
A custom label can be empty. In this case the phone gives it a default PHONENUMBER label and translates to the device language.
Example: the identifier mobile2 with the value MOBILE shows the second mobile phone number and the label on separate rows for the selected contact.
There are maximum 30 labels of the Number attributes in the web UI.
Dial options
Table continued…
61
SETTINGS CONFIGURATION AND MANAGEMENT
Parameter
Country code
Area code
External prefix
Min length for external prefix
Description
To specify the country code where the phone is located. In case the country code in any phone number attribute is identical to that code, the phone ignores it.
To specify the area code where the phone is located. In case the area code in any phone number attribute is identical to that code, the phone ignores it.
To specify a special prefix for dialing external numbers.
Example: 0 to get a dialing tone in some cases.
To restrict the external prefix that the phone adds only if the phone number is longer than the minimum length. This allows to use short internal numbers.
The default setting is 0.
Exact length for no external prefix
To specify that the phone must not add the external prefix if the phone number is exactly of the entered length.
The default setting is 0.
Number prefix for no external prefix
To specify the initial number for the phone numbers in case of using which the phone adds no external prefix. All numbers that start with this number will not have the external prefix added. You can use this option if all internal numbers start with a certain number.
The default setting is 0.
If complete information is unavailable, you can configure only the known parameters.
Configuring the LDAP number attributes through the web interface
Configure the LDAP number attributes through the web interface of your Konftel
800.
You can also configure the LDAP number attributes using a configuration file. For that you must define the corresponding parameter and then import the configuration file.
62
SETTINGS CONFIGURATION AND MANAGEMENT
Log in to the web interface.
Navigate to the LDAP tab.
Scroll down to the Number attributes section.
Add the number attribute label.
Fill in the title for a number attribute in the Attribute field.
Choose the description label from the Localized labels dropdown list.
Note that if the label stays empty, it uses the localized default label.
Optional: Enable the Custom control element to edit the label.
The Custom control element is in the enabled state automatically if the attribute is not in the list of the approved attributes.
Optional: You can also do one of the following:
• Add a number attribute entity by clicking the Add attribute label button. The default ID of the number attribute entity is telephoneNumber and the value is PHONENUMBER .
Note that there can be maximum 30 number attribute labels in the web UI.
• Delete a number attribute entity by clicking the Delete button next to the respective number attribute.
Click Save .
The phone restarts the application to apply the changes.
The order of the configured number attributes depends on the order of attributes defined on the LDAP server.
Related concepts
on page 108
Related tasks
Importing the configuration file on page 125
SIP SETTINGS
The SIP settings can be configured during the installation of Konftel 800. The SIP settings include the following:
• Primary account
• Secondary account
• Fallback account
• Source port
63
SETTINGS CONFIGURATION AND MANAGEMENT
• Transport protocol
• Transport Layer Security (TLS)
• Advanced SIP settings
• DTMF
• NAT Traversal
The SIP settings can be configured on the phone or through the web interface of
Konftel 800.
If you do not configure the SIP account for Konftel 800, the phone operates in
USB only user mode.
Configuring the SIP settings on the phone
Use this procedure to configure the SIP settings of your Konftel 800 on the phone.
Log in as the administrator.
In the Settings menu, tap SIP .
Choose the parameter that you want to configure and proceed to the options available.
Tap the icon to return to the home screen.
The phone restarts the application to apply the changes.
Configuring the SIP settings through the web interface
Use this procedure to configure the SIP settings of your Konftel 800 through the web interface.
Log in to the web interface as the administrator.
Click SIP .
Choose the parameter that you want to configure and proceed to the options available.
Click Save .
The phone restarts the application to apply the changes.
SIP settings description
The following table lists the SIP setting of Konftel 800 available through the web interface in the SIP tab or on the phone in Settings > Admin Login > SIP .
64
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Transport
Description
Transport
Protocol
Source port
To choose one of the following protocols:
• UDP . This is the default setting.
• TCP
• TLS
• SIPS
Even if you choose TLS, the Konftel 800 still accepts incoming UDP or TCP signaling.
To optionally specify the local port Konftel 800 will use for
SIP signaling.
TLS
This section is available in the web interface if you choose TLS or SIPS transport protocol.
TLS Method To choose the security methods to be applied. The options are:
• TLSv1
• TLSv1.1
• TLSv1.2
. This is the default setting.
Verify Client To enable or disable Verify Client . The options are:
• Yes: The phone activates peer verification for incoming secure SIP connections.
• No. This is the default setting.
Verify Server To enable or disable Verify Server . The options are:
• Yes: When Konftel 800 is acting as a client for outgoing connections with secure SIP, it always receives a certificate from the peer. If you select this, the phone ends the connection for a non-valid server certificate.
• No. This is the default setting.
Table continued…
65
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Require Client
Certificate
Negotiation
Timeout
Certificate
CA Certificate
Private Key
Description
To enable or disable client certificate verification. The options are:
• Yes: The phone rejects incoming secure SIP connections if the client does not have a valid certificate.
• No. This is the default setting.
To specify the time-out for the TLS settings negotiation during a call setup. You must define the time in seconds in this field. If this negotiation is not successful within the specified time, the phone stops the negotiation. To disable the time-out, enter 0 . The default setting is 0 seconds.
To upload a certificate for TLS or SIPS communication. A certificate is a file that combines a public key with information about the owner of the public key, signed by a trusted third party. If you trust the third party, you can be sure that the public key belongs to the person named in that file. You can also be sure that everything you decrypt with that public key is encrypted by the person named in the certificate.
This setting is available only through the web interface in the SIP section.
To upload a certificate for TLS or SIPS communication received from a Certificate Authority (CA). Use it to verify other certificates. You need the CA certificate if you have
Verify Server or Verify Client enabled.
This setting is available only through the web interface in the SIP section.
To upload a private key for TLS or SIPS communication. A private key is one of the keys in a key pair in asymmetric cryptography. Messages encrypted using the public key can only be decrypted using the private key.
This setting is available only through the web interface in the SIP section.
Table continued…
66
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Password
Description
To specify the password used for encryption of the private key if it is encrypted.
Primary Account
Account Name
User
Registrar
Proxy
Keep Alive
Realm
Authentication
Name
To set the name for the primary account displayed locally on the screen according to the existing corporate standards.
In USB only user mode the phone does not display the account name on the home screen in Idle mode.
To set the account or customer name for the primary account.
To specify the IP address or the FQDN of the SIP server where the primary account is registered. For example, use the 10.10.1.100
format for a local SIP server or the sip.company.net
format for a public VoIP service provider.
To specify the Universal Resource Identifier (URI) of the proxy server used by the primary account.
To make the phone maintain an active connection to the network. The options are:
• Yes: If you select this, the phone renews the connection of the phone primary account to the network.
• No. This is the default setting.
To specify the SIP domain where the SIP authentication of the primary account with the name and password is valid. If the field is left blank or marked with an asterisk (*), the phone responds to any realm. If specified, the phone only responds to the specific realm when asked for credentials.
To specify the SIP name to use in authentication.
Table continued…
67
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Password
Registration
Timeout
Secondary Account
Account Name
User
Registrar
Proxy
Keep Alive
To set the name for the secondary account displayed locally on the screen according to the existing corporate standards.
To set the account or customer name for the secondary account.
To specify the IP address or the FQDN of the SIP server where the secondary account is registered.
To specify the URI of the proxy server used by the secondary account.
To make the phone maintain an active connection to the network with the secondary account.
Realm
Authentication
Name
Description
To define the password for the Realm or domain authentication in the primary account.
You can configure this parameter if you log in with the administrator password.
On the phone, the password can be configured in Settings >
SIP > Primary Account > Credentials
To specify the time when the registration of the primary account expires and the SIP server is sent a corresponding request. Konftel 800 automatically renews the registration within the time interval if the phone is still on and connected to the server. The default value is 300 seconds.
To specify the SIP domain where the SIP authentication of the secondary account with the name and password is valid.
To specify the number that is assigned to the user in the secondary account.
Table continued…
68
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Password
Registration
Timeout
Fallback Account
Account Name To set the name for the fallback account displayed locally on the screen according to the existing corporate standards.
User
Description
To define the password for the Realm or domain authentication in the secondary account.
You can configure this parameter if you log in with the administrator password.
On the phone, the password can be configured in Settings >
SIP > Secondary Account > Credentials
To specify the time when the registration of the secondary account expires and the SIP server is sent a corresponding request. The default value is 300 seconds.
Registrar
Proxy
Keep Alive
Realm
Authentication
Name
To set the account or customer name for the fallback account.
To specify the IP address or the FQDN of the SIP server where the fallback account is registered.
To specify the URI of the proxy server used by the fallback account.
To make the phone maintain an active connection to the network with the fallback account.
To specify the SIP domain where the SIP authentication of the fallback account with the name and password is valid.
To specify the number that is assigned to the user in the fallback account.
Table continued…
69
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Password
Registration
Timeout
DTMF
DTMF Method To define the Dual-tone multi-frequency (DTMF) signaling method. The options are:
• RFC 4733 . With this method, DTMF signals are carried in RTP packets by using a separate RTP payload format. It is set by default.
• SIP Info . With this method, the DTMF signals are sent as SIP requests. The SIP switch creates the tones if the call is transferred to the PSTN.
• In-band . With this method, the phone generates the tones and sends them in the voice frequency band.
Use RFC 4733 or SIP Info as the preferred methods because they are more consistent with other tones available. Switch to In-band only when your SIP server does not support other DTMF signaling methods.
When RFC 4733 is configured as the DTMF method on
Konftel 800, but the other party does not accept such method during SIP negotiation, the phone falls back into using the In-band method.
RFC 4733 Payload
Type
To specify the type of audio traffic. By default, it is payload type 101.
Advanced
Description
To define the password for the Realm or domain authentication in the fallback account.
You can configure this parameter if you log in with the administrator password.
On the phone, the password can be configured in Settings >
SIP > Fallback Account > Credentials
To specify the time when the registration of the fallback account expires and the SIP server is sent a corresponding request. The default value is 300 seconds.
Table continued…
70
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Disable 'rport'
Session Timers
Description
To enable or disable remote port forwarding. By default, the setting is disabled.
To set a time-related mechanism to disconnect the sessions that the phone establishes. The options are:
• Disabled . This is the default setting.
• Optional
• Mandatory
To specify the session expiration time in seconds. The default setting is 1800 seconds.
To specify the IP address of the outbound proxy, if available.
Session
Expiration
Outbound Proxy
Enable SIP Traces To enable or disable provision of key information for troubleshooting. By default, the setting is disabled.
Allow Contact
Rewrite
To enable or disable storing the IP address from the response of the register request. If there is a change detected, the phone unregisters the available SIP URI
(contact) and updates it with the new address.
By default, the setting is enabled.
Allow Via Rewrite To enable or disable rewriting of the VIA header in the SIP
REGISTER requests. If there is a change detected, the phone overwrites the VIA header with the new data.
By default, the setting is enabled.
Enable SIP
Replaces
To enable or disable the SIP Replaces header.
Table continued…
71
SETTINGS CONFIGURATION AND MANAGEMENT
Name Description
Use Static Source
Port
To enable or disable using static source ports for the SIP signaling. When Konftel 800 has a configured SIP account, it can handle firewalls differently. The options are:
• Use static port number for outgoing TPC and TLS packets. The configuration parameter
<use_static_source_port> is set to true in the configuration file. You must configure the
<source_port> parameter to specify the source ports of TPC and TLS packets. By default, the source ports are the following:
• UDP/TCP: 5060.
• TLS: 5061.
• Use ephemeral source ports for outgoing TPC and TLS packets. Here the configuration parameter
<use_static_source_port> is set to false in the configuration file.
By default, the setting is disabled.
To configure this parameter, only use the configuration file.
NAT Traversal
Enable ICE To enable or disable the Interactive Connectivity
Establishment (ICE). ICE provides various techniques to allow SIP-based VoIP devices to successfully traverse the variety of firewalls that might exist between the devices. The protocol provides a mechanism for the endpoints to identify the most optimal path for the media traffic to follow.
By default, the setting is disabled.
Table continued…
72
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Enable STUN
STUN Server
Enable TURN
TURN Server
User
Description
To enable or disable the Simple Traversal of UDP through the NAT (STUN) is a protocol that assists devices behind a
NAT firewall or router with their packet routing. STUN is commonly used in real-time voice, video, messaging, and other interactive IP communication applications. The protocol allows applications operating through the NAT to discover the presence and specific type of the NAT and obtain a public IP address (NAT address) and port number that the NAT allocated for the application User Datagram
Protocol (UDP) connections to remote hosts. You must enable STUN if an external SIP server cannot connect to the phone behind a firewall NAT function and the SIP server supports STUN.
By default, the setting is disabled.
Another definition of STUN is the Session Traversal
Utilities for NAT.
To enter the IP address or the public name of the STUN server.
To enable or disable the Traversal Using Relay NAT
(TURN). TURN is an extension of the TURN protocol that enables NAT traversal when both endpoints are behind symmetric NAT. With TURN, media traffic for the session has to go to a relay server. Since relaying is expensive, in terms of bandwidth that must be provided by the provider, and additional delay for the media traffic, you must use
TURN as a last resort when endpoints cannot communicate directly.
By default, the setting is disabled.
To enable TURN, you must enable ICE.
To enter the IP address or the public name of the TURN server.
To specify the user authentication name on the TURN server.
Table continued…
73
SETTINGS CONFIGURATION AND MANAGEMENT
Name
Password
Description
To enter the user authentication password on the TURN server.
After you click Save , the phone saves the changes and restarts the application.
Caller information presentation
Konftel 800 displays the information about the calling person to show who is calling or demonstrate that the caller ID is unknown. This data is available on the
Incoming Call , Active Call , and Recent Call List screens.
The phone shows the information that it receives from the caller SIP invite message. It includes the following:
• CNAM: Usually specifies the contact name.
• CID: Usually specifies the caller phone number.
For example, when Konftel 800 receives the SIP invite message From: "John
Doe" <sip:[email protected]> , John Doe is the CNAM and 1234 is the
CID.
The following table lists the information on the screen, which Konftel 800 displays, depending on the parameters the server provides:
Screen Description
Incoming Call
Active Call
Konftel 800 displays the CNAM and the
CID. If the server does not provide the
CID, the phone displays the CNAM.
If the server does not provide neither the CNAM, nor the CID, the phone displays Unknown .
Konftel 800 displays the CNAM. If the server does not provide the CNAM, the phone displays the CID.
If the server does not provide neither the CNAM, nor the CID, the phone displays Unknown .
Table continued…
74
SETTINGS CONFIGURATION AND MANAGEMENT
Screen
Recent Call List
Description
Konftel 800 displays the CID. If the server does not provide the CID, the phone displays Unknown .
CERTIFICATES APPLICATION
Use certificates to authenticate Konftel 800 using TLS. You can apply certificates manually when configuring the advanced settings of your phone, or the phone can automatically download the certificates from the provisioning server if you enabled
Device Management.
The application of a certificate involves the following:
• Download of the root certificate from the Certificate Server
• Creation of the server certificate from the Certificate Server
• Generation of the private key
• Conversion of the certificates and the private key to .PEM format
• Import of the .PEM files to the phone
Related concepts
on page 104
Downloading the root certificate
Use this procedure to download the root certificate that the phone will apply for authentication by using TLS/SIPS and EAP-TLS.
Connect to Microsoft Server Certification Authority.
On the Microsoft Server Certification Authority page, click Download a CA certificate, certificate chain, or CRL .
Click Download CA certificate .
Creating the server certificate
Use this procedure to create the server certificate that the phone will apply for authentication by using TLS/SIPS and EAP-TLS.
Connect to Microsoft Server Certification Authority.
75
SETTINGS CONFIGURATION AND MANAGEMENT
On the Microsoft Server Certification Authority page, click Request a certificate .
Click Advanced certificate request .
Enter the following information: a) In Identifying information , specify the name, email, company name, department, and city, state, and country of your location.
b) In Type of Certificate Needed , click Client Authentication Certificate .
c) In Key option , click Create new key set .
d) In CSP , select Microsoft Enhanced Cryptographic Provider v 1.0
.
e) In Key usage , select Both .
f) In Key Size , specify 2048 .
g) Select Automatic key container name .
h) Select Mark keys as exportable .
i) Select Enable strong private key protection .
j) In Request Format , select PKCS10 .
k) In Hash Algorithm , select SHA-1 from the list.
l) Enter the short name of the phone.
Click Submit .
The system saves the certificate to the location specified while creating the CA.
Installing the certificate
Use this procedure to install the certificate that the phone will apply for authentication using TLS/SIPS and EAP-TLS. You can do it from your regular web browser. The following is the procedure for Google Chrome. For information about other web browser applications, see the instructions provided by the software manufacturers.
Open your web browser.
Click Settings > Advanced > Privacy and security > Manage certificates .
In the Certificates window, click Import .
In the Certificate Export Wizard window, click Next to proceed.
Specify the file you want to import and click Next .
Choose the key store for the certificate and click Next
Click Finish .
76
SETTINGS CONFIGURATION AND MANAGEMENT
Exporting the private key
Use this procedure to export the private key that the phone will apply for authentication using TLS/SIPS and EAP-TLS. You can use your regular web browser. The following is the procedure for Google Chrome. For information about other web browser applications, see the instructions provided by the software manufacturers.
Open your web browser.
Click Settings > Advanced > Privacy and security > Manage certificates .
In the Certificates window, select the certificate to export and click Export .
In the Certificate Export Wizard window, click Next to proceed.
Click Yes to export the private key.
Select the format in which you want to export the private key file and click Next .
Specify the file name, choose the location to export the certificate, and click
Next .
Click Finish .
Converting the certificates to .PEM format
Use this procedure to convert the certificates for the phone to .PEM format.
Konftel 800 supports certificates in the .PEM format only.
Use the following Openssl commands to convert the files: a) From .DER to .PEM: openssl x509 -inform der -in certificate.cer -out certificate.pem
b) From .PFX to .PEM: openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes
On the web interface, browse to the .PEM files to use TLS mode of authentication.
STANDARD ENCRYPTION ALGORITHMS
Konftel 800 uses encryption algorithms that comply with the current industry standards. Currently, the phone supports the data integrity algorithms with no publicly known vulnerabilities and are the US National Institute of Standards and
Technology approved.
77
SETTINGS CONFIGURATION AND MANAGEMENT
Standard encryption algorithms for the external connections to the system (for example, TLS) include the following:
• Symmetric Encryption:
• AES 256 (required)
• AES 192 and AES 128 (optional)
• Asymmetric Encryption:
• RSA: 2048 (required) and 4096 (optional)
• DH: 2048 (required) and 4096 (optional)
• ECC: secp384r1 and secp256r1 (required)
• Hash Algorithms
• SHA2 (required)
• SHA3 (optional)
• Hashed Message Authentication Code:
• HMAC-SHA2 (required)
• HMAC-SHA1 (used for integrity and routing)
Konftel 800 provides support to specific FIPS-related encryption algorithms, which makes it ready for operation in FIPS mode.
When you need legacy or non-standard encryption algorithms for the external connections, you can use Legacy encryption mode. In this case the phone works with the encryption algorithms applied before R.1.0.4.
Standard encryption application areas:
• Web pages for administration
• SIP with TLS
• Device management to HTTPS server
• LDAP with TLS
• Media encryption with SRTP
• 802.1x
Related information
Encryption methods in Legacy encryption mode
on page 149
Standard encryption for 802.1x
You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method.
If you need to use EAP MD5 method for 802.1x, ensure that you set the Allow
Legacy Encryption option to true and FIPS Mode to false. When you try to enable
78
SETTINGS CONFIGURATION AND MANAGEMENT
EAP MD5 while Allow Legacy Encryption is disabled, the phone warns you with the following message: EAP MD5 requires Allow Legacy Encryption to be enabled . When you try to enable Allow Legacy Encryption while FIPS Mode is enabled, the phone warns you with the following message: Allow Legacy
Encryption cannot be enabled while FIPS mode is enabled .
You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method on the phone, through the web interface, or using a configuration file.
When you upgrade the phone from a version without the legacy encryption option and enable EAP MD5 method, the phone automatically enables the Allow Legacy
Encryption option.
When you import a configuration file, the phone settings update in line with the imported configuration file. If the value of <eap_md5> is set to true , you must also set the value of <allow_legacy_encryption> to true .
Related tasks
Importing the configuration file on page 125
Related information
Configuration file structure on page 109
Network settings description on page 43
Enabling EAP MD5 for 802.1x on the phone
Use this procedure to configure 802.1x and EAP MD5 method for 802.1x on the phone.
• Disable FIPS Mode .
You cannot enable EAP MD5 Enable if FIPS Mode is enabled. If you try to enable it, the phone shows the following warning message: EAP MD5 requires FIPS mode to be disabled .
• Enable Allow Legacy Encryption .
You cannot enable EAP MD5 Enable if Allow Legacy Encryption is disabled. If you try to enable it, the phone shows the following warning message: EAP
MD5 requires Allow Legacy Encryption to be enabled .
Log in as the administrator.
Navigate to Network > 802.1x
, and move the 802.1x
slider to the right to enable
802.1x.
In the Authentication Name field, enter the authentication name.
Activate EAP MD5 Enable .
In the EAP-MD5 Password field, enter the password for EAP MD5.
79
SETTINGS CONFIGURATION AND MANAGEMENT
Tap the icon three times to return to the home screen.
The phone reboots to apply the changes.
Related tasks
Configuring Legacy encryption mode on the phone
on page 81
Enabling EAP MD5 for 802.1x through the web interface
Use this procedure to configure 802.1x and EAP MD5 method for 802.1x through the web interface.
• Disable FIPS Mode .
You cannot enable EAP MD5 if FIPS Mode is enabled. If you try to do it, the phone shows the following warning message: EAP MD5 requires FIPS mode to be disabled .
• Enable Allow Legacy Encryption .
You cannot enable EAP MD5 if Allow Legacy Encryption is disabled. If you try to do it, the phone shows the following warning message: EAP MD5 requires Allow Legacy Encryption to be enabled .
Log in as the administrator.
Choose the Network tab.
In the 802.1x
section, enable Enable 802.1x
.
In the Username field, enter the user name.
To activate EAP MD5 method for 802.1x, enable EAP MD5 Enable .
The EAP MD5 section becomes visible.
In the Password field, enter the password for EAP MD5.
Click Save .
The phone reboots to apply the changes.
Related tasks
Configuring Legacy encryption mode through the web interface
on page 82
Standard encryption for media encryption with SRTP
When the key exchange for media encryption with SRTP occurs, Konftel 800 supports the AES_256_CM_HMAC_SHA1_80 mandatory crypto.
Some servers do not support this mandatory crypto. In this case you must enable the Allow Legacy Encryption option to make an SRTP call. By default, it is disabled.
80
SETTINGS CONFIGURATION AND MANAGEMENT
In this case, with Legacy encryption mode enabled, the phone offers
AES_CM_128_HMAC_SHA1_80 crypto only.
Legacy encryption mode
Konftel 800 also supports specific legacy encryption algorithms. If you enable
Legacy encryption mode, the phone offers all the previously supported ciphers for the SSL negotiation and cryptos for SRTP. You can check the offered ciphers using a specialized network protocol analyzer. At that, the phone supports the legacy encryption algorithms only for backward compatibility.
By default, this feature is enabled.
Firmware upgrade
When you upgrade Konftel 800 from a version without the legacy encryption option, the phone automatically enables the Allow Legacy Encryption option.
When you reset Konftel 800 to the factory default state, the phone also enables the Allow Legacy Encryption option.
When upgrading, the phone automatically enables the Allow Legacy Encryption option, if 802.1x
with EAP MD5 is enabled.
Related information
Encryption methods in Legacy encryption mode
on page 149
Configuring Legacy encryption mode on the phone
Use this procedure to configure Legacy encryption mode of your Konftel 800 on the phone.
If you configure the phone to allow 802.1x authentication to use EAP MD5 method, you cannot disable legacy encryption. The phone warns you with a message: Allow Legacy Encryption cannot be turned off while
802.1x with EAP MD5 is enabled .
If you configure the phone to enable FIPS mode, you cannot enable Legacy encryption mode. The phone warns you with a message: Allow Legacy
Encryption cannot be enabled while FIPS Mode is enabled.
Log in as the administrator.
In the Settings menu, tap Phone > Security .
Enable Allow Legacy Encryption .
Tap the icon three times to return to the home screen.
The phone reboots to apply the changes.
81
SETTINGS CONFIGURATION AND MANAGEMENT
Configuring Legacy encryption mode through the web interface
Use this procedure to configure Legacy encryption mode of your Konftel 800 through the web interface.
If you configure the phone to allow 802.1x authentication to use EAP MD5 method, you cannot disable legacy encryption. The phone warns you with a message: Allow Legacy Encryption cannot be turned off while
802.1x with EAP MD5 is enabled .
If you configure the phone to enable FIPS mode, you cannot enable Legacy encryption mode. The phone warns you with a message: Allow Legacy
Encryption cannot be enabled while FIPS mode is enabled.
Log in to the web interface as the administrator.
Click Phone .
In the Advanced section, enable Allow Legacy Encryption .
Click Save .
The phone reboots to apply the changes.
Configuring Legacy encryption mode using the configuration file
Use this procedure to configure Legacy encryption mode of your Konftel 800 using the .xml configuration file. When you boot the phone after successful provisioning, the setting file changes, depending on the configuration of the standard encryption use.
Get the configuration .xml file for Konftel 800.
Open the configuration file.
In the <phone> section, locate <allow_legacy_encryption> tag and set the value to true.
Save the configuration file.
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
Related tasks
Importing the configuration file on page 125
Related information
Configuration file structure on page 109
82
SETTINGS CONFIGURATION AND MANAGEMENT
FIPS MODE
Konftel 800 supports a specific FIPS mode to make the encryption and cryptographic functions compliant with Federal Information Processing Standards
(FIPS). When you enable FIPS mode, the phone employs approved key exchange algorithms, cryptographic algorithms and authentication techniques to meet the
FIPS 140-2 requirements.
When Konftel 800 needs cryptographically secure numbers, it uses random number generator functions from FIPS 140-x compliant cryptographic libraries. A specific FIPS approved random number generator renders cryptographic number initialization vectors.
With FIPS mode enabled, the device management with HTTPS server occurs using the SSL encryption method.
By default, FIPS mode is disabled.
If you configure the phone to allow legacy encryption, you cannot enable FIPS mode. You will see a popup message: FIPS mode cannot be enabled while Allow Legacy Encryption is enabled.
If you configure the phone to use 802.1x with EAP MD5, you cannot enable
FIPS mode. The phone warns you with a message: FIPS mode cannot be enabled while 802.1x with EAP MD5 is enabled.
Related concepts
Standard encryption for 802.1x
on page 81
FIPS mode for media encryption with SRTP
When the key exchange for media encryption with SRTP occurs with FIPS mode enabled, Konftel 800 supports only one mandatory crypto
AES_256_CM_HMAC_SHA1_80 .
The conference phone supports only the same mandatory crypto
AES_256_CM_HMAC_SHA1_80 when both FIPS Mode and Allow Legacy
Encryption are disabled.
When the administrator disables FIPS Mode and enables Allow Legacy
Encryption , Konftel 800 supports only AES_CM_128_HMAC_SHA1_80 for media encryption with SRTP.
Configuring FIPS mode on the phone
Use this procedure to configure FIPS mode of your Konftel 800 on the phone.
83
SETTINGS CONFIGURATION AND MANAGEMENT
• Log in as the administrator.
• Disable Allow Legacy Encryption and EAP MD5 method for 802.1x.
In the Settings menu, tap Phone > Security .
Enable FIPS Mode .
Tap the icon three times to return to the home screen.
The phone reboots to apply the changes.
Related concepts
on page 81
Standard encryption for 802.1x
Configuring FIPS mode through the web interface
Use this procedure to configure FIPS mode of your Konftel 800 through the web interface.
• Log in as the administrator.
• Disable Allow Legacy Encryption and and EAP MD5 method for 802.1x.
Click Phone .
In the Advanced section, enable FIPS Mode .
Click Save .
The phone reboots to apply the changes.
Related concepts
on page 81
Standard encryption for 802.1x
Configuring FIPS mode using the configuration file
Use this procedure to configure FIPS mode of your Konftel 800 using the .xml
configuration file. When you boot the phone after successful provisioning, the setting file changes, depending on the configuration of the standard encryption use.
Get the configuration .xml file for Konftel 800.
Open the configuration file.
In the <phone> section, locate <fips_mode> tag and set the value to true.
By default, the value is false.
Save the configuration file.
84
SETTINGS CONFIGURATION AND MANAGEMENT
The phone reboots, if the FIPS mode value differs from the previously configured value.
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
Related tasks
Importing the configuration file on page 125
Related information
Configuration file structure on page 109
USB ONLY USER MODE
Konftel 800 supports USB only user mode. With this feature, the conference phone can operate with no SIP account and SIP register configured. In USB only user mode Konftel 800 acts as a speakerphone that the user can use to conduct virtual meetings and listen to audio files.
USB and Bluetooth® connection
In USB only user mode, the phone operates as a USB device connected to a USB host.
In this mode, the phone supports connection to Bluetooth ® devices using
Bluetooth ® Classic.
The administrator can use the configuration file to disable Bluetooth ® . The
Bluetooth button becomes inactive, and if the user taps it, the phone shows the following message: Bluetooth is disabled by the administrator .
When idle, Konftel 800 does not display Account Name on the home screen in
USB only user mode. The user can see the phone name and the connection option as follows:
• When the user connects the phone using USB, Konftel 800 indicates USB audio on the home screen.
• When the user uses Bluetooth ® to connect the phone, Konftel 800 indicates
Bluetooth® audio on the home screen.
• When the user uses both Bluetooth ® and USB for connection, Konftel 800 indicates Bluetooth® audio on the home screen.
85
SETTINGS CONFIGURATION AND MANAGEMENT
Time presentation in USB only user mode
When the phone has NTP server settings enabled but it cannot connect to the
NTP server in USB only user mode, Konftel 800 does not display time on the home screen and in the settings menu.
When the phone has NTP server settings disabled, the user can set the time manually. Then the options of the time presentation are the following:
• On the home screen when there is no active Bluetooth ® or USB connection.
• On the status bar when the user connects to Konftel 800 using Bluetooth ® or
USB.
Related concepts
Provision of the NTP server address on page 40
Firmware upgrade and downgrade
on page 104
USB only user mode icons
The following table shows the icons on the home screen of Konftel 800 in USB only user mode:
Icon Name
USB
Connected
Bluetooth connection
Settings
Description
To indicate an active USB connection.
The phone displays the USB Connected icon and shows USB audio on the idle home screen.
To configure Bluetooth ® Classic settings and to indicate an active Bluetooth ® Classic connection.
The phone shows the Bluetooth connection icon and
Bluetooth® audio indication on the idle home screen.
If the administrator uses the .xml configuration file to disable Bluetooth ® , then the Bluetooth connection icon is inactive.
To check and configure the settings from the phone.
View the phone status and reach the menu.
You get access to the settings, which are available in USB only user mode.
86
SETTINGS CONFIGURATION AND MANAGEMENT
When Konftel 800 shows either the USB Connected or the Bluetooth connection icon on the idle home screen, the phone displays time on the status bar.
87
FEATURES AND ACCESSORIES
KONFTEL UNITE
You can manage your Konftel 800 from a mobile phone or a tablet if you have
Konftel Unite installed on the device. Download and install Konftel Unite free from
App Store and Google Play like any other application. Use the NFC tag to easily start downloading the application. For that, you must bring the mobile device with the NFC enabled to the NFC tag on the conference phone, and the web browser on the mobile device opens the web page with the application in App Store or
Google Play.
With Konftel Unite, you can call contacts from your local address book, create conference groups, and control a call. For example, answer and hang up the call, mute and unmute the microphone, dial a number, adjust the volume level, and hold and resume the call.
The mobile device with Konftel Unite is connected to the phone over the built-in
Bluetooth ® LE. Konftel 800 is always discoverable for this connection.
Starting from R 1.0.4, Konftel 800 uses SHA256 method for challenge-response authentication to connect to Konftel Unite.
If your conference phone fails to connect to Konftel Unite, you must download a newer version of the application from App Store or Google Play. It works both with R 1.0.4 and earlier released firmware.
Configure Konftel Unite parameters on the phone and from the mobile device with the application installed.
Pairing and connecting devices
Use this procedure to pair your Konftel 800 with Konftel Unite on your mobile device the first time when you use them together. After that, they connect with one touch when you run the application near the conference phone.
The connection range is up to 20 meters. The connection breaks if this range is exceeded. You see a request to reconnect when Konftel Unite is within the range of Konftel 800. Reconnection requires only one touch.
You can pair up to 100 mobile phones or tablets with your Konftel 800. But only one user connection is active at a time.
Install Konftel Unite on your mobile device.
On your mobile device, open Konftel Unite.
88
FEATURES AND ACCESSORIES
The mobile phone displays the closest Konftel 800.
To select the phone you want to connect, perform one of the following actions:
• If your mobile device displays Konftel 800 you want to connect, tap
Connect on the mobile device screen.
• If your mobile device does not display Konftel 800 you want to connect, tap
Skip and then tap the connection symbol in the upper left corner of your mobile device screen.
The mobile device displays the list of available conference phones.
The mobile phone displays a pairing code for about 30 seconds.
Enter the code with the keypad on the conference phone.
Tap Enter on the conference phone to start pairing.
When the devices are paired, both Konftel Unite and Konftel 800 display the connection symbol.
The conference phone and Konftel Unite remain paired while they are close to one another.
You cannot connect Konftel 800 to a Bluetooth ® device for call handling or audio streaming while the Konftel Unite connection is active.
Disconnecting devices
Use this procedure to disconnect your Konftel 800 from the mobile device with
Konftel Unite installed.
Ensure that Konftel 800 is connected to a mobile device with Konftel Unite installed.
• To disconnect from the mobile device, do the following: a) In Konftel Unite, tap the connection symbol in the upper left corner of the screen.
b) Optional: Under Change device , select another conference phone to connect to.
You can do it if there are other conference phones available nearby.
The application starts connecting to the selected conference phone.
c) Tap the Disconnect button near the highlighted connected device name.
The connection symbol in the upper left corner of the screen becomes inactive.
• To disconnect from Konftel 800, do one of the following:
• Tap Konftel Unite > Disconnect Device .
89
FEATURES AND ACCESSORIES
• Tap Settings > Konftel Unite > Disconnect Device .
The phone displays the following question: Disconnect device <Device
Name>?
To confirm, tap Ok .
The phone shows the Konftel Unite icon and informs that the application is disconnected.
Deleting pairing
Use this procedure to delete the pairing between the conference phone and the mobile device. You can delete the paring only from the conference phone.
Pair Konftel 800 with a mobile device with Konftel Unite.
To delete the pairing from the conference phone, on the home screen, do one of the following:
• Tap Konftel Unite .
• Tap Settings > Konftel Unite .
Tap Remove Bonding Information .
Tap Ok to confirm removal of all bonding information from the device.
This function both disconnects the current connection and deletes the pairing.
You must start a new pairing process the next time you want to connect to the phone.
Configuring the Konftel Unite settings
Use this procedure to configure the Konftel Unite settings from the application installed on a mobile device.
Run Konftel Unite on your mobile device.
Optional: Connect to Konftel 800.
The phone displays a connection symbol on the screen.
Tap Settings and proceed with configuration.
Konftel Unite settings
The following table lists the parameters for Konftel 800, which you can set from the Konftel Unite interface:
90
FEATURES AND ACCESSORIES
Name
Connection
Moderator code
Dial prefix
My bridge
Meeting notification
Description
To enable or disable the connection to Konftel 800. The options are:
• On: The default option.
• Off: To use Konftel Unite without connection to any
Konftel 800. You can use the conferencing application from your mobile device within your mobile phone subscription.
To join the scheduled conference calls as a moderator. You must enter respective codes in the following fields:
• Use moderator code : To host conference calls over a bridge service. For every call you join, Konftel Unite uses your moderator code instead of your guest code.
• Instead of guest code : To specify the guest code instead of which Konftel Unite uses your moderator code.
To enter the prefix digits in the Use prefix field.
To enter the phone number and optional PIN code of the most frequently used conference service. You can use the
My bridge button to join the conference call.
The My bridge button appears in the calendar view.
To set a reminder about a call. The options are:
• 5 minutes before
• 10 minutes before
• 15 minutes before
• Never
Calendars to show To select the calendars in the mobile phone from which you want Konftel Unite to take the information.
Table continued…
91
FEATURES AND ACCESSORIES
Name
Tell a colleague
Description
To share information about Konftel Unite with a person that you want. You can do it by using an email application.
After you confirm that Konftel Unite can access your email application, you see a message created. Along with the description of the application, it contains links to Konftel
Unite in App Store and Google Play so that the person can easily start the download.
Read more about
Konftel Unite
To get additional information about Konftel Unite. The application forwards you to the web site with the corresponding information.
Feedback and support
Diagnostics
Show tutorial
To share your experience of using the application and request for support. The options are:
• A messenger, for example, Viber, WhatsApp, Telegram, and so on.
• An email application.
• Connection by Bluetooth ® .
To select a log of the events for Konftel Unite.
You can send the created log by tapping Send through an email application. The log can be used in troubleshooting.
You can also delete the logs from the application by tapping
Clear .
To read information about Konftel Unite features.
About Konftel
Unite
To check the version of the application installed on your mobile device.
EXPANSION OF THE PHONE COVERAGE
Use your Konftel 800 on larger conference tables or when the number of a meeting participants is greater than 10. In this case you can ensure high-level quality of audio signal by expanding the phone coverage in the room without a PA system. Do it by connecting Smart Mic expansion microphones to the phone or by cascading several Konftel 800 devices in a daisy chain.
92
FEATURES AND ACCESSORIES
Expansion of the phone coverage helps to improve the audio quality in large rooms. The conference phone and two Smart Mics increase the capture range from 30 square meters to up to 70 square meters. Three phones in a daisy chain increase the range from 30 square meters to up to 90 square meters.
Expansion coverage arrangement
Arrange a daisy chain with your conference phone and another Konftel 800 or connect Smart Mic expansion microphones. The maximum number of devices connected in a daisy chain is 3. One Konftel 800 phone acts as a central device (a
“master”) and one or two other units act as expansion devices (“slaves”).
The typical arrangements when the phone’s coverage is expanded are the following:
• Master phone — Slave phone
• Slave phone — Master phone — Slave phone
• Master phone — Expansion microphone
• Expansion microphone — Master phone — Expansion microphone
• Expansion microphone — Master phone — Slave phone
Functions of the Master and Slave devices
When Konftel 800 acts as a master, it performs all its configured functions.
When Konftel 800 is in a subordinate position (a “slave”), it performs the following functions:
• Play audio received from the master device. The master phone defines the audio characteristics.
• Send its microphone audio to the master device.
• Receive and indicate mute state changes made on the master device.
• Send information to the master device when you tap Microphone Muted .
• Send information to the master device when you adjust the volume on it.
You cannot make calls between the Master and the Slave devices.
In a daisy chain, the Slave device follows the signal from the Master device to enter Sleep mode or Active mode.
In a daisy chain, each phone is powered by its own PoE injector. The phone powers the Smart Mics when these are connected. The power available from each port is around 5 W.
Connection of the Slave devices to the Master phone
In a daisy chain, Konftel 800 disables all unused daisy chain ports during active calls to provide for the best possible audio experience. That means, that the time,
93
FEATURES AND ACCESSORIES when a Slave device activates, is dependent on the Master phone status as follows:
• The Master phone is in the Idle state. When the user connects an expansion microphone or a Slave phone to the Master phone, Konftel 800 immediately detects it, and the connected device becomes directly available for operation.
• The Master phone has an active call. When the user connects an expansion microphone or a Slave phone to the Master phone, the connected device becomes available for operation only after the call ends.
The same approach is applicable when the user disconnects and reconnects an expansion microphone or a Slave phone to the Master phone during an active call. In this case, the connected device also becomes available for operation only after the call ends.
Arranging a daisy chain
Use this procedure to arrange a daisy chain of one master Konftel 800 phone and one or two slave conference phones or expansion microphones.
If you arrange the daisy chain made of several conference phones, prepare the connection cables. The cables in the Daisy Chain kit are 5 and 10 meters long.
You can purchase the Daisy Chain kit as an accessory.
The cable of the Smart Mic is 3 m long.
Connect the cable to the audio expansion port on the phone.
There are 2 audio expansion ports on Konftel 800.
Connect the other end of the cable to the audio expansion port of the other phone.
In case of expansion microphones, the other end of the cable is fixed in the device.
Defining the mode of the phone
Use this procedure to define the mode of your Konftel 800 in a daisy chain.
• To define the mode of your Konftel 800 on the phone, do the following: a) Log in as the administrator.
b) In the Settings menu, tap Phone > Daisy Chain .
c) Select the required mode.
The options are:
• Master
94
FEATURES AND ACCESSORIES
• Slave d) Tap three times to return to the home screen.
The phone restarts the application to apply the changes.
• To define the mode of your Konftel 800 through the web interface, do the following: a) On the web interface, click Phone .
b) In Daisy Chain Mode , select the required mode from the drop-down list.
The options are:
• Master . This is the default mode.
• Slave c) Click Save .
The slave unit displays the Daisy Chain Mode icon and the following message:
Daisy Chain . This message remains for the period when the phone is in
Slave mode within the daisy chain arrangement.
Disabling Daisy Chain mode
Use this procedure to disable Daisy Chain mode through the web interface or from the phone.
Ensure that the phone displays the Daisy Chain icon.
• To disable Daisy Chain mode from the web interface, do the following: a) On the web interface, click Phone .
b) In Daisy Chain Mode , select Master .
c) Click Save .
• To disable Daisy Chain mode from the phone, do the following: a) Touch the phone screen and enter the administrator password.
b) Tap Phone > Daisy Chain .
c) Select Master mode.
d) Tap the icon three times to return to the home screen.
Application restarts and restores the Master status.
EXPANSION MICROPHONE FIRMWARE UPGRADE
You can upgrade the expansion microphone firmware to the Konftel 800 firmware version when your Smart Mic has an older firmware installed. Regularly updating
95
FEATURES AND ACCESSORIES the expansion microphone firmware to match the phone firmware ensures the best possible audio performance.
The phone suggests an automatic upgrade of the expansion microphone firmware when you connect your Smart Mic to Konftel 800. You can connect one or two
Smart Mics simultaneously.
You can also initiate the expansion microphone firmware upgrade manually.
If you connect the expansion microphone to Konftel 800 during an active call, the upgrade does not start until the call ends.
During the upgrade, the phone rejects all incoming and outgoing calls and does not activate the Call Transfer feature. At that Konftel 800 indicates that it is Busy .
Upgrading expansion microphone firmware
Use this procedure to upgrade the expansion microphone firmware when the
Smart Mic and your device have different firmware installed.
Make sure Konftel 800 is in Idle Mode.
Connect the expansion microphone to your conference phone using the available audio expansion port.
The expansion microphone LEDs flash red once.
A pop-up dialog window shows the following message: A connected microphone needs firmware upgrade. Upgrade now?
On the pop-up dialog window, tap Yes to start the upgrade.
The LEDs on the phone turn red to indicate that it is busy with the microphone upgrade. The expansion microphone LEDs start flashing green.
The phone displays the Upgrade in progress message and shows the upgrade progress in percentage (0%-100%).
When you connect one Smart Mic to Konftel 800, the phone shows the upgrade status for Smart Mic 2 as N/A .
Smart Mic 1: 10%
Smart Mic 2: N/A
Optional: To cancel the upgrade, tap No .
In this case, you postpone the upgrade until the phone reboots.
If the upgrade is complete, the microphone LEDs turn off, and Konftel 800 displays the following message:
96
FEATURES AND ACCESSORIES
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: N/A
In 10 seconds, the pop-up dialog window hides, and the phone enters Idle mode.
If the Smart Mic firmware upgrade fails, the microphone LEDs turn off, and the phone displays the Smart Mic 1: Failed message.
Upgrading two expansion microphones
Use this procedure to upgrade two expansion microphones connected to your device simultaneously.
Connect Smart Mic 1 to the first audio expansion port of your conference phone.
Connect Smart Mic 2 to your conference phone using the second audio expansion port.
The LEDs on the phone turn red to indicate that it is busy with the microphone upgrade. The Smart Mic 2 LEDs start flashing green.
A pop-up dialog window provides the expansion microphones upgrade status in the following format:
Smart Mic 1: 20%
Smart Mic 2: 10%
Optional: Terminate Smart Mic 2 upgrade by detaching the expansion microphone from the phone.
In this case, you postpone the upgrade until you connect Smart Mic 2 again.
When the upgrade is complete for Smart Mic 1 and Smart Mic 2 is still upgrading, the LED turns off on Smart Mic 1, and Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: 86%
When the upgrade is complete for both microphones, their LEDs turn off, and
Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: Done
In 10 seconds, the pop-up dialog window hides, and the phone enters Idle mode.
97
FEATURES AND ACCESSORIES
If the firmware upgrade for any of the expansion microphones fails, the microphone LEDs turn off, and the phone displays the message stating the
Failed status of the corresponding Smart Mic.
Terminating expansion microphone upgrade
Use this procedure to terminate the expansion microphone upgrade.
You can do it in the following cases:
• The phone has one Smart Mic 1 connected; or
• The phone has both Smart Mic 1 and Smart Mic 2 connected simultaneously.
Connect Smart Mic 1 and Smart Mic 2 to the phone and start the upgrade process for both expansion microphones.
Detach Smart Mic 2 from the phone.
Smart Mic 1 continues upgrading with the value for the upgrade progress being updated.
Smart Mic 2 upgrade dialog indicates an error and aborts the mic upgrade.
Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: 50%
Smart Mic 2: Failed
When Smart Mic 1 upgrade is complete, its LED turns off, and Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: Failed
This message disappears in 10 seconds.
Optional: To upgrade Smart Mic 2, connect it to the conference phone and proceed with the upgrade.
Upgrading Smart Expansion Microphone manually
Upgrade your expansion microphone manually when it is convenient to you.
Hold the Microphone Muted button on the Smart Mic while you connect the microphone cable, and keep holding the button for 5 seconds after you inserted the cable.
98
FEATURES AND ACCESSORIES
When you release the button, it flashes red one time and then starts flashing green to indicate that the upgrade process has started. The LEDs on the phone turn red to indicate that it is busy with the microphone upgrade. The upgrade process takes about 7 minutes. When the upgrade is completed, the microphone LEDs turn off.
Check the microphone version by doing one of the following:
• On the phone screen, tap Settings > Status .
• On the web interface, go to the Status tab.
BLUETOOTH® CONNECTION
Konftel 800 can establish wireless communication over Bluetooth ® with devices equipped with Bluetooth ® connectivity, such as mobile phones, tablets, or computers. With Bluetooth ® , you can use the phone as a speakerphone for call handling, or as an audio receiver for audio streaming.
The following table lists the Bluetooth ® technologies that Konftel 800 supports:
Bluetooth® technology
Bluetooth ® LE
Bluetooth ® Classic
Konftel
800 icon
Functionality
To connect to a mobile device with Konftel
Unite application installed on it. For more
information, see Konftel Unite
on page 88.
This is the default mode.
To connect to Bluetooth ® devices, such as mobile phones, tablets, and personal computers, for call handling or audio streaming.
Konftel 800 has a modified Pulse-code modulation (PCM) bus installed. This provides for a better audio transmission compared to the previous releases of the phone.
You cannot use Bluetooth ® LE and Bluetooth ® Classic connection simultaneously.
If you connect Konftel 800 to a Bluetooth ® device, you cannot connect it to a mobile device with the Konftel Unite application until you end the connection to the Bluetooth ® device.
99
FEATURES AND ACCESSORIES
If you connect Konftel 800 to a mobile device using the Konftel Unite application, you cannot connect it to another Bluetooth ® device until you end the connection to Konftel Unite.
In USB only user mode, the phone supports connection to Bluetooth ® devices using Bluetooth ® Classic.
Switching between the Bluetooth® modes
The default mode is Bluetooth ® LE. To switch to Bluetooth ® Classic, you must pair and connect Konftel 800 to a Bluetooth ® device. When you select Bluetooth ®
Classic mode, the phone turns off Bluetooth ® LE. If there is no Bluetooth ® Classic connection, the phone switches back to Bluetooth ® LE after a timeout.
In case of a successful Bluetooth ® Classic connection, Konftel 800 restores
Bluetooth ® LE mode when you end the Bluetooth ® Classic connection.
Bluetooth® Classic profiles
The following table describes the Bluetooth ® Classic profiles that Konftel 800 supports:
Bluetooth ® profile
Konftel 800 role
Functionality description
Hands-Free
Profile (HFP)
Speakerphone When Konftel 800 is paired with a Bluetooth ® device, and the two devices are connected, the phone acts as a speakerphone. You can use the phone to handle Bluetooth ® calls.
Konftel 800 synchronizes the volume level with the volume level of the Bluetooth ® device, and you can control the volume from both devices.
Advanced
Audio
Distribution
Profile (A2DP)
Audio receiver When Konftel 800 is paired with a Bluetooth ® device, and the two devices are connected,
Konftel 800 acts as an audio receiver. You can use the phone to stream multimedia audio from the Bluetooth ® device.
You cannot activate A2DP during SIP or
USB calls.
100
FEATURES AND ACCESSORIES
To use the Bluetooth ® Classic functionality on Konftel 800, your Bluetooth device must support HFP or A2DP or both.
®
Pairing and connecting Bluetooth® devices
To enable Bluetooth ® communication between Konftel 800 and another Bluetooth ® device, you must pair the two devices and ensure that they are in a connected state. The devices stay in a paired state until you remove the pairing.
You can connect only one device supporting Bluetooth ® at a time.
On the Konftel 800 screen, tap Settings > Bluetooth > Pair with device .
The LEDs start flashing blue, and the phone displays the following message:
This phone is now discoverable as “<Phone Name>” .
The time-out value for discoverable mode is 120 seconds.
Tap Cancel to cancel pairing, for example, if you do not want to make the phone discoverable. In this case, you return to the Bluetooth menu.
On your Bluetooth ® device, find Konftel 800 in the list of devices available for
Bluetooth ® connection and tap the phone name.
Konftel 800 establishes the connection with the Bluetooth ® device and displays the Bluetooth ® icon and one of the following messages:
• If Konftel 800 retrieves the device name from your Bluetooth ® device, it displays Connected to <your Bluetooth device name> . For example, Connected to My Smartphone .
• If Konftel 800 does not retrieve the device name from your Bluetooth ® device, it displays Connected to <your device Bluetooth address> . For example, Connected to 00:11:22:33:FF:EE .
Konftel 800 is not visible in the Konftel Unite application while the conference phone and the Bluetooth ® device are in the connected state.
Related concepts
on page 30
Removing Bluetooth® pairing
Use this procedure to remove the pairing between Konftel 800 and your other
Bluetooth ® device to delete unwanted pairings.
also deletes the Bluetooth ® pairing information when you reset the phone to factory settings or perform system recovery.
101
FEATURES AND ACCESSORIES
Removing Bluetooth ® pairing as described below does not affect Konftel Unite pairing information.
Ensure that Konftel 800 and the Bluetooth ® device are in the paired state.
Tap Settings > Bluetooth > Remove pairing .
The phone displays the following question: Do you want to remove all
Bluetooth pairing information from the phone?
To confirm that you want to delete the Bluetooth ® pairing information, tap Ok .
The phone restarts the application to apply the changes.
Related tasks
Logging in to the web interface of Konftel 800 on page 26
Setting the password for Konftel 800 on page 23
Connection between paired Bluetooth® devices
Connection
After you pair Konftel 800 and your Bluetooth ® device, the two devices establish the connection.
Disconnection
The connection ends if you manually disconnect Konftel 800 from the Bluetooth ® device or if the distance between the devices does not allow to maintain the communication.
When the Bluetooth ® device ends the connection, Konftel 800 displays the following message: Disconnected and then stops displaying the Bluetooth ® icon.
Reconnection
You can reconnect your Bluetooth ® device to Konftel 800 if the two devices are in a paired state. You can reconnect Konftel 800 to the paired Bluetooth ® device only from the paired Bluetooth ® device.
Bluetooth® radio
Konftel 800 supports the Bluetooth ® radio feature, which makes the device visible to other Bluetooth ® devices. By default, the Bluetooth ® radio is in the enabled state. The administrator can disable the Bluetooth ® radio. When disabled,
Bluetooth ® LE and Bluetooth ® Classic connection are not available on Konftel 800.
102
FEATURES AND ACCESSORIES
Related concepts
on page 99
Disabling Bluetooth® radio
Use this procedure to disable Bluetooth ® radio using the .xml configuration file.
The default value is true, which means that the feature is enabled.
Obtain the .xml configuration file for Konftel 800.
In the configuration file, go to the <bluetooth> section.
Set the <enable> parameter to false.
<bluetooth>
<enable type = "boo1">false</enable>
</bluetooth>
Save and import the configuration file.
The phone restarts the application.
Related concepts
on page 108
Related tasks
Importing the configuration file on page 125
103
MAINTENANCE
PROVISIONING ON KONFTEL 800
To ensure effective operation of your Konftel 800, you can upload to the phone the latest firmware version with the software update packages and configuration file with the necessary settings. You can upgrade and configure a single phone or multiple phones simultaneously.
Provisioning option
Upgrade and configuration description
Single phone Use the phone web interface to upload a firmware file as well as to export and import a configuration file to Konftel 800.
Multiple phones
Use the Device Management feature to upgrade and configure multiple Konftel 800 phones simultaneously over a provisioning server.
The Device Management settings are available both on the phone and through the web interface.
Firmware upgrade and downgrade
Starting from Release 1.0.1, you can both upgrade and downgrade the firmware of
Konftel 800 using the Device Management. The phone application installs the firmware whenever the firmware version found in the firmware file downloaded from the provisioning server differs from the version of the currently running firmware.
When the upgrade or downgrade process starts, Konftel 800 performs the firmware upgrade file validation to ensure that no file data is corrupted.
The downgrade causes a factory reset and sets all user settings, configurations, and data to factory default.
Uploading a firmware file
Upgrade or downgrade your Konftel 800 using a firmware file stored on the local hard disk. When the phone starts to install the firmware file you uploaded, it identifies the firmware version and follows the upgrade or downgrade scenario based on the firmware version.
104
MAINTENANCE
Download the appropriate firmware file and save it in a specified location on your personal computer.
On the web interface, click Provisioning .
In the Firmware section, click the Choose file button.
Locate and select the downloaded firmware file.
The name of the chosen file is near the Choose file button.
Click Save .
The system displays the upgrade in the browser window and on the screen of
Konftel 800.
Note that the phone must be in the idle state. If the phone is not in the idle state, you see the following message on the web interface: Phone is currently in “Busy” state, please retry later .
If DHCP is used in the network, the IP address might change. If the web browser loses contact with Konftel 800, check the IP address on the phone.
Related tasks
Viewing the IP address on page 24
Firmware upgrade using check-sync
Konftel 800 automatically starts the firmware upgrade procedure when it receives a check-sync event from your SIP server. To use this feature, you must enable
Device Management on your phone.
The phone checks the firmware and starts the firmware upgrade only if it the new firmware differs from the firmware installed.
If Konftel 800 receives a check-sync NOTIFY event in Idle Mode, it automatically starts the Device Management procedure, which includes downloading the firmware file. The phone is in Idle Mode when there are no active calls, it is not streaming music over USB or Bluetooth ® , and the idle screen is active. If the phone receives the check-sync NOTIFY event during an active call, it waits till the call ends and then immediately starts downloading the provisioning data.
Konftel 800 checks the check-sync message for the reboot parameter value:
Event: check-sync;reboot=true or
Event: check-sync;reboot=false
105
MAINTENANCE
If the reboot value is true , Konftel 800 reboots regardless of any available firmware upgrades or new configuration files. The phone applies the new configuration of firmware before the forced reboot. If the reboot value is false or not defined, the phone restarts the application, reboots, or does nothing depending on the requirements of the firmware upgrade or new configuration parameters in the configuration file.
Firmware upgrade and downgrade using a USB mass storage device
Konftel 800 uses the USB mass storage device to support firmware upgrade and downgrade without the web interface. When you connect the USB mass storage device to Konftel 800, the phone starts auto-mounting and finds the firmware file stored on the USB mass storage device. The auto-mounting and parsing process takes up to 30 seconds depending on your flash drive.
Before performing upgrade or downgrade, the phone does not compare the firmware version on the USB mass storage device and the currently used firmware version.
If the firmware file is invalid, the phone shows the following message: Invalid upgrade file .
The phone starts the upgrade or downgrade procedure immediately if it is in
Idle Mode. Otherwise, Konftel 800 ends an active operation and then starts the upgrade process.
It is impossible to make calls or enter any menu on the phone during the upgrade.
Konftel 800 blocks the upgrade procedure using the USB mass storage device, if the phone already starts the upgrading procedure using the Device
Management provisioning server.
The phone supports several USB flash drive file systems including FAT32 and
NTFS.
Konftel 800 supports only one partition USB flash drives for the upgrade.
If you set Admin Password in Settings > Phone , enter a valid administrator password before the phone starts the upgrade procedure.
You can upgrade or downgrade the out-of-the-box Konftel 800 during the initial boot if you connect the USB mass storage device to the phone and follow the upgrade procedure.
106
MAINTENANCE
Upgrading firmware using a USB mass storage device without the administrator password
Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have no administrator password set.
• Download the appropriate firmware file and save it in a specified location on your personal computer.
• Upload the firmware file from your personal computer to the USB mass storage device root folder. The file name must be upgrade.kt
.
• Make sure Konftel 800 is in Idle Mode.
Connect the USB mass storage device to Konftel 800 USB port.
When checking for the appropriate firmware upgrade file, the phone shows the following message: Checking upgrade file . Then the phone displays the following message: Firmware version x.x.x.x.x found on USB.
Upgrade now?
, where x.x.x.x.x
is the version of the valid firmware file.
Tap Yes to proceed with the upgrade.
The phone starts the upgrade procedure, showing the following message:
Upgrade in progress, please wait . When the upgrade procedure ends, the phone reboots to apply the changes.
Optional: Tap No to discontinue the upgrade.
If you tap No accidentally, to restart the procedure, reconnect a USB mass storage device to Konftel 800 USB port.
Related tasks
Uploading a firmware file on page 104
Upgrading the firmware using a USB mass storage device with the administrator password
Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have an administrator password set.
• Download the appropriate firmware file and save it in a specified location on your personal computer.
• Upload the firmware file from your personal computer to the USB mass storage device root folder. The file name must be upgrade.kt
.
• Make sure Konftel 800 is in Idle Mode.
Connect a USB mass storage device to Konftel 800 USB port.
107
MAINTENANCE
While checking for the appropriate firmware upgrade file, the phone shows the following message: Checking upgrade file . Then the phone displays the following message: Firmware version x.x.x.x.x found on USB.
Upgrade now?
, where x.x.x.x.x
is the version of the valid firmware file.
Tap Yes to proceed with the upgrade.
The phone displays the Admin Password popup.
In the Admin Password field, type the administrator password.
Optional: If you enter an incorrect administrator password, the phone displays the following message: Invalid password . Do the following: a) Tap Ok .
b) Type the correct administrator password.
Tap Upgrade .
The phone starts the upgrade procedure, showing the following message:
Upgrade in progress, please wait . When the upgrade procedure ends, the phone reboots to apply the changes.
Optional: Tap Cancel to discontinue.
If you tap Cancel accidentally, to restart the procedure, reconnect a USB mass storage device to Konftel 800 USB port.
Related tasks
Uploading a firmware file on page 104
Configuration file
Create an .xml configuration file on Konftel 800. This file contains information about all the settings that were configured on the phone as of the moment of the file creation.
The configuration file can be used as:
• Backup. This is applicable if the system has been reset to factory default.
• Configuration interface. Some settings are not configured through the web interface.
• Management tool. Export, edit, and import settings to several phones instead of configuring the settings on each phone.
• Configuration file for Device Management.
You can export and import a configuration file only through the web interface.
Related concepts
108
MAINTENANCE
Configuration file structure
The following table shows the default structure of the .xml file:
String
<xml>
<KT800>
<time>
<timezone>
<time_format>
<ntp>
<server>
<enable>
<date_format>
<custom_dst>
<enable>
Description
To specify the number of the phone configuration version and encoding.
To specify the model of the conference phone.
To specify the time and region parameters.
To specify the type of the time zone set for the phone. If you set the string value to the name of a time zone, for example, to
Europe/Amsterdam , it automatically enables the Geo Timezone (auto DST) parameter on the phone web UI.
To specify the time format for the phone.
To specify whether NTP is applied.
To specify the server which the phone uses to set the time.
To specify whether NTP is enabled. The default setting is true.
To specify the date format for the phone.
To specify the Daylight Saving Time parameters.
To specify whether the Daylight Saving Time is enabled. The default setting is false.
Table continued…
109
MAINTENANCE
String
<offset_hours>
<dst_start>
<month>
<day>
<day_mode>
<hour>
<dst_stop>
<month>
<day>
<day_mode>
<hour>
<media>
<security>
<srtp>
<srtcp>
Description
To specify the time in hours between the standard time and daylight saving time. The values are 1 and 2. The default setting is 1.
To specify when to apply the offset for daylight saving time.
To specify the month when to apply the offset.
To specify the day when to apply the offset.
To specify the day mode when to apply the offset.
To specify the hour when to apply the offset
To specify when to stop the offset for daylight saving time.
To specify the month when to stop the offset.
To specify the day when to stop the offset.
To specify the day mode when to stop the offset.
To specify the hour when to stop the offset.
To specify the media settings.
To specify the means of encryption configured for the phone.
To specify the SRTP parameters that the phone uses.
To specify whether SRTCP is enabled.
Table continued…
110
MAINTENANCE
String
<capneg>
<codec>
<iLBC>
<prio>
<mode>
<OPUS>
<prio>
<PCMU>
<prio>
<PCMA>
<prio>
<G722>
<prio>
<G729>
<prio>
<rtp_pt_98_ilbc>
<voice_quality_monitor>
Description
To specify whether Capability Negotiation is enabled.
To specify the codec settings.
To specify the internet Low Bitrate Codec
(iLBC) codec settings.
To specify the codec priority (0–6).
To specify the frame length in ms.
To specify the OPUS codec settings.
To specify the codec priority (0–6).
To specify the PCMU codec settings.
To specify the codec priority (0–6).
To specify the PCMA codec settings.
To specify the codec priority (0–6).
To specify the G722 codec settings.
To specify the codec priority (0–6).
To specify the G729 codec settings.
To specify the codec priority (0–6).
To specify that the server gets iLBC packets as payload type 98. By default it is set to
104. You can also set the value to 98 to ensure interoperability with specific systems.
To specify the Voice Quality Monitor settings.
Table continued…
111
MAINTENANCE
String
<enable_rtcp_xr>
<rtcp_xr_collector_uri>
<sip>
<primary_account>
<name>
<user>
<registrar>
<proxy>
<keep_alive>
<cred>
<realm>
<username>
<password>
Description
To specify whether the sending of RTCP XR is enabled.
To specify the Uniform Resource Identifier
(URI) of the RTCP XR collector.
To specify SIP settings.
To specify the primary account settings.
To specify the name of the account.
To specify the user-defined name of the account.
To specify the request URI for registration.
To specify the optional URI of the proxy to visit for all outgoing requests from the account.
To specify whether the keep-alive transmission for the account is enabled.
To specify the array of credentials. In case of registration, at least one credential must be available to successfully authenticate the service provider. If you want proxies to challenge the requests in the route set, you must specify more credentials.
To specify the realm.
To specify an authentication name.
To specify the password used for the account.
Table continued…
112
MAINTENANCE
String
<reg_timeout>
<secondary_account>
<name>
<user>
<registrar>
<proxy>
<keep_alive>
<cred>
<realm>
<username>
<password>
Description
To specify the optional interval for registration in seconds. If zero, the phone uses the default interval. The default setting is 300.
To specify the secondary account settings.
To specify the name of the account.
To specify the user-defined name of the account.
To specify the request URI for registration.
To specify the optional URI of the proxy to visit for all outgoing requests from the account.
To specify whether the keep-alive transmission for the account is enabled.
To specify the array of credentials. In case of registration, at least one credential must be available to successfully authenticate the service provider. If you want proxies to challenge the requests in the route set, you must specify more credentials.
To specify the realm.
To specify an authentication name.
To specify the password used for the account.
Table continued…
113
MAINTENANCE
String
<reg_timeout>
<fallback_account>
<name>
<user>
<registrar>
<proxy>
<keep_alive>
<cred>
<realm>
<username>
<password>
Description
To specify the optional interval for registration in seconds. If zero, the phone uses the default interval. The default setting is 300.
To specify the fallback account settings.
To specify the name of the account.
To specify the user-defined name of the account.
To specify the request URI for registration.
To specify the optional URI of the proxy to visit for all outgoing requests from the account.
To specify whether the keep-alive transmission for the account is enabled.
To specify the array of credentials. In case of registration, at least one credential must be available to successfully authenticate the service provider. If you want proxies to challenge the requests in the route set, you must specify more credentials.
To specify the realm.
To specify an authentication name.
To specify the password used for the account.
Table continued…
114
MAINTENANCE
String
<reg_timeout>
<source_port>
<transport_protocol>
<tls>
<tls_method>
<tls_neg_timeout>
<tls_password>
<verify_client>
<verify_server>
<require_client_cert>
<advanced>
<disable_rport>
Description
To specify the optional interval for registration in seconds. If zero, the phone uses the default interval. The default setting is 300.
To specify the source port to listen to.
To specify the transport protocol which the phone must use.
To specify that TLS is selected as the transport protocol. This is followed by the corresponding transport protocol settings.
To specify the TLS protocol method.
To specify the TLS negotiation time-out in seconds for both outgoing and incoming connections. If zero, the phone uses no timeout.
To specify the password for the private key.
To specify whether the phone must verify the client.
To specify whether the phone must verify the server.
To specify whether the phone requires the client certificate.
To specify the configured advanced SIP settings.
To specify whether the remote port forwarding is enabled. The default setting is disabled.
Table continued…
115
MAINTENANCE
String
<session_timers>
Description
To specify the chosen time-related mechanism to disconnect the sessions.
<session_expiration_minimum> To specify the minimum session expiration value in seconds. The default value is 90 seconds.
<session_expiration> To specify the session expiration value in seconds. The default setting is 1800 seconds.
<outbound_proxy>
<enable_sip_traces>
To specify the IP address of the outbound proxy.
To specify whether the provision of key information for troubleshooting is enabled.
The default setting is disabled.
<allow_contact_rewrite>
<allow_via_rewrite>
<enable_sip_replaces>
To specify whether the storing of the IP address from the response of the register request is enabled.
To specify whether rewriting of the VIA header in the SIP stack is enabled.
To specify whether the SIP Replaces header must be used.
<contact_use_src_port_even_wit h_dns>
To specify whether the SIP stack should continue to retrieve the local ephemeral port even if the stack is configured with DNS.
<enable_lock_codec>
<use_static_source_port>
To specify whether the lock codec feature is enabled.
To specify whether the use of static source port feature is enabled.
Table continued…
116
MAINTENANCE
<enable>
<stun>
<enable>
<server>
<turn>
<enable>
<server>
String
<dtmf>
<method>
<rfc4733_payload_type>
<nat_traversal>
<ice>
<user>
<password>
<phone>
Description
To specify DTMF signaling settings.
To specify the DTMF signaling method.
To specify the type of audio traffic.
To specify the configured NAT traversal settings.
To specify whether ICE is configured for the phone.
To specify whether ICE is enabled.
To specify whether STUN is configured for the phone.
To specify whether STUN is enabled.
To specify the IP address or the public name of the STUN server.
To specify whether TURN is configured for the phone.
To specify whether TURN is enabled.
To specify the IP address or the public name of the TURN server.
To specify the user authentication name on the TURN server.
To specify whether the user authentication password on the TURN server is set.
To specify the configured basic settings of the phone.
Table continued…
117
MAINTENANCE
String
<name>
<language>
<allow_legacy_encryption>
<password>
<ringlevel>
<key_tone>
<is_daisy_chain_slave>
<fips_mode>
<phone_status_api>
<sleep_mode_timeout>
<enable_startup_sound>
<bluetooth>
<enable>
<network>
<dhcp>
<hostname>
Description
To specify the name of the phone.
To specify the language selected.
To specify whether Legacy encryption mode is enabled. The default setting is true.
To specify the password used.
To specify the volume level configured.
To specify whether the key tone is enabled.
To specify the mode of the phone in case of a daisy chain arrangement.
To specify whether FIPS mode is enabled.
The default setting is false.
To specify whether the phone status API feature is enabled.
To specify the time-out value in minutes.
To specify whether the start-up sound is enabled. The default setting is true.
To specify the Bluetooth parameters.
To specify whether Bluetooth is enabled. The default setting is true.
To specify the network parameters.
To specify whether the phone uses DHCP to obtain network settings.
To specify the hostname of the phone.
Table continued…
118
MAINTENANCE
String
<domain>
<dns1>
<dns2>
<static_ip>
<ip>
<netmask>
<gateway>
<vlan>
<vlanid>
<ieee_8021x>
<enable>
<username>
<eap_md5>
<enable>
Description
To specify the domain name of the phone.
To specify Domain Name Server (DNS) 1 of the phone.
To specify DNS 2 of the phone. You can use maximum two DNS.
To specify the static IP settings.
To specify the IP address of the phone if
DHCP is disabled.
To specify the network mask for your phone.
To specify the gateway for the phone.
To specify whether VLAN is enabled. The default setting is disabled.
To specify the ID number that the phone uses for all IP telephony communication through VLAN.
To specify IEEE 802.1x parameters.
To specify whether IEEE 802.1x is enabled.
It is disabled by default.
To specify the phone username if IEEE
802.1x is enabled.
To specify whether the phone uses MD5
EAP method.
To specify whether MD5 EAP method is enabled.
Table continued…
119
MAINTENANCE
String
<password>
<eap_tls>
<enable>
<password>
<lldp>
<enable>
<country>
<country_subdivision>
<county>
<city>
<city_division>
<block>
<street>
<direction>
Description
To specify the password for MD5 EAP method.
To specify whether the phone uses TLS EAP method.
To specify whether TLS EAP method is enabled.
To specify the password for the TLS EAP method.
To specify the LLDP settings.
To specify whether the LLDP settings are enabled. These settings are disabled by default.
To specify the country of the phone location.
To specify the region of the country of the phone location.
To specify the county, parish, district, or other applicable administrative division.
To specify the city of the phone location.
To specify the city district or area of the phone location.
To specify the block within the city district.
To specify the street of the building where the phone is located.
To specify the direction of moving towards the location of the phone.
Table continued…
120
MAINTENANCE
String
<trailing_street_suffix>
<street_suffix>
<number>
<number_suffix>
<landmark>
<additional>
<name>
<zip>
<building>
<unit>
<floor>
<room>
<place_type>
<script>
Description
To specify the trailing street suffix.
To specify the street suffix.
To specify the number of the building where the phone is located.
To specify the building number suffix.
To specify the reference point for the location of the phone.
To specify any additional information related to the phone location.
To specify the name of the company that owns the phone.
To specify the ZIP-code of the phone location.
To specify the name or number of the building of the phone location.
To specify the unit within the building where the phone is located.
To specify the floor of the building for the location of the phone.
To specify the room in the building where the phone is located.
To specify the type of setting, for example, office.
To specify the script.
Table continued…
121
MAINTENANCE
String
<elin>
<qos>
<dscp_sip>
<dscp_media>
<device_management>
<enable>
<update_interval>
<update_max_wait>
<server>
<check_server_certificate>
<lowest_tls_version>
<dhcp_option>
<logging>
Description
To specify Emergency Location Identification
Number (ELIN).
To specify the quality of service (QoS) parameters.
To specify a value in the range from 0 to 63 to prioritize the SIP messages.
To specify a value in the range from 0 to 63 to prioritize the media packets.
To specify the Device Management settings.
To specify whether Device Management is enabled.
To specify the update interval in the range from 1 minute to 21,000 minutes. The default setting is 60 minutes.
To specify the maximum time in seconds the phone waits for the update.
To specify the Device Management server address if it is not provided by the DHCP option.
To specify whether the Check certificate is enabled.
To specify the lowest TLS version for the phone.
To select the DHCP option used for the
Device Management server address.
To specify the syslog settings.
Table continued…
122
MAINTENANCE
String
<remote_syslog_enable>
<remote_syslog_host>
<ldap>
<enable>
<name_filter>
<server_url>
<search_base>
<user_name>
<password>
<max_hits>
<country_code>
<area_code>
<external_prefix>
Description
To specify whether the remote syslog feature is enabled.
To specify the IP address or the host of the remote syslog server.
To configure the LDAP options.
To enable the LDAP feature. By default it is disabled.
To define how the phone applies the entered search characters.
To specify the URL of the LDAP server host.
It includes the protocol (LDAP/LDAPS) and the port number.
To specify the distinguished name of the search base.
To specify the username for the LDAP server.
To specify the password for the LDAP server.
To specify the maximum number of hits to return for each LDAP search.
To specify the country code of the phone location.
To specify the area code of the phone location.
To specify a special prefix for dialing external numbers.
Table continued…
123
MAINTENANCE
String
<min_length_for_ext_prefix>
<number_prefix_for_no_ext_prefi x>
To specify the initial number for the phone numbers in case of using which the phone adds no external prefix.
<exact_length_for_no_ext_prefix
>
To specify the exact length for the phone numbers if the phone adds no external prefix.
<number_attributes>
<number_attribute>
<id>
To specify if there are configured number attributes.
To define the attributes that the phone displays if it receives them from the server.
To define the identifier of the number attribute in the form in which the LDAP directory stores it.
<value>
Description
To restrict the external prefix that the phone adds only if the phone number is longer than the minimum length.
<display_name>
<sort_results>
To define the label that the user sees on the phone screen for a specific number attribute.
To specify how the phone displays the name it searched for.
To specify if the phone sorts the search hits based on the Display name.
<use_dm_certificates_for_ldaps> To specify if the phone uses any device management certificates for LDAPS.
<httpd> To configure the web server options.
Table continued…
124
MAINTENANCE
String
<min_allowed_tls_version>
Description
To specify the minimum allowed TLS version.
The default setting is 1.2.
To enable support of TLS v.1.0 and TLS v.1.1, set the value to all .
Exporting the configuration file
Use this procedure to export the configuration file from your Konftel 800.
Decide where the exported configuration file will be saved. By default, it is saved in the folder for downloaded files on your PC.
On the web interface, click Provisioning .
In the Configuration section, click Export Configuration button.
The web browser shows the configuration file.
Save the page in an .xml format in the dedicated folder.
Optional: Edit the .xml file in a suitable application.
Importing the configuration file
Use this procedure to import the previously saved configuration file to your Konftel
800.
On the web interface, click Provisioning .
Go to the Configuration section.
In Import Configuration , click the Choose file button.
Locate the configuration file in the folder where it is stored.
Select the file in an .xml format and open it.
The name of the chosen file is near the Choose file button.
Click Save .
The phone reboots or restarts to import the configuration if the configuration file application requires this reboot or restart.
Validation and migration of configuration
Starting from Release 1.0.1, Konftel 800 validates and migrates the phone configuration to ensure consistency of the configuration file with the firmware
125
MAINTENANCE version. With this feature, the phone provides reliable automatic migration of the configuration file to match the newer firmware version if necessary.
Configuration validation
Konftel 800 validates compatibility of the configuration with the firmware against an xml schema file based on the configuration file version.
Starting from Release 1.0.1, a configuration file has a version number attribute.
The phone application compares the configuration file version to the firmware version running on the phone to determine the migration steps required to make the configuration file consistent with the firmware.
All the configuration files that Konftel 800 generated before Release 1.0.1 acquire the <KT800 version="0"> attribute in the xml root element. The configuration files generated with Release 1.0.1 acquire the <KT800 version="1"> attribute.
With each new release, the configuration service increases the configuration file version number by one leaving the incompatible configuration changes attributed to previous file versions.
The phone does not support downgrade of a configuration file.
To avoid failure of the configuration file import or automatic provisioning, ensure that you do not change the version number in a configuration file manually.
Configuration migration
The migration feature ensures seamless import of the configuration data in the following cases:
• During the phone boot
• During the configuration file import using the web interface
• During automatic provisioning of the phone using Device Management
Configuration import can fail if the configuration file does not match the xml schema file. In this case, you see the following message on the phone web interface: Failed to migrate configuration file .
Device Management
The Device Management feature facilitates upgrade and configuration of multiple conference phones. To use this feature, you must configure it. By default, Device
Management is enabled.
Konftel 800 upgrades and sets configuration by using the Device Management files. The necessary files must be available on a server reachable from all the
126
MAINTENANCE phones. This server is called the provisioning server. The service provider is in charge of uploading the necessary files to the provisioning server.
The device controls the configuration and firmware download with a frequency of 1 hour.
Files on the provisioning server
The following files must be available on the provisioning server:
• Firmware file
• Firmware metadata file
• Global configuration file
• Device-specific configuration file (optional)
• Global certificate configuration file
• Device-specific certificate configuration file (optional)
Configuration priorities
The following table describes the priorities for files downloaded to the phone during the Device Management configuration upgrade:
File type Description
Configuration file
The global configuration file has the highest priority.
If the device-specific configuration file is present on the provisioning server, the phone downloads it after the global configuration file.
If the new configuration file contains the same parameters as already configured by the user, all user configurations are overridden during the Device Management update.
Certificate configuration file
The device-specific certificate configuration file has the highest priority.
The phone downloads the global configuration file only after it tried to download the device-specific configuration file.
The certificates the phone downloads from the provisioning server overwrite any certificates you downloaded manually using the phone web interface.
Konftel Zero Touch Installation
Zero Touch Installation (ZTI) is an add-in for automatic provisioning that Konftel
800 supports. It provides for the remote configuration of the phone by using a data
127
MAINTENANCE file with settings. The phone downloads the file from a Device Management server.
The user can apply ZTI when centrally upgrading the phone software.
Related concepts
Certificate configuration files on page 133
on page 108
Registration with the ZTI device management service
Use this procedure to register the phone with the device management service and receive the provisioning settings.
Connect the phone to the data network and start it.
In the web browser, enter https://www.konftel.com/zti-access .
Register the phone with Konftel ZTI by entering its MAC address and serial number.
The device management service provides the phone with the address of the provisioning server where the user can download the configuration file in .xml
format.
Confirm your choice.
The phone restarts and goes to the appropriate server to download the configuration file.
Configuring Device Management settings on the phone
Use this procedure to configure the Device Management settings on the phone.
Log in as the administrator.
On the phone screen, tap Settings > Device Management .
Choose the parameter that you want to configure and proceed to the options available.
After you made the choices, return to the home screen.
The phone reboots to apply the changes.
Configuring Device Management settings through the web interface
Use this procedure to configure the Device Management settings through the web interface.
Log in as the administrator.
On the web interface, click Provisioning .
128
MAINTENANCE
Make the appropriate configurations.
Click Save .
The phone reboots to apply the changes.
Device Management settings
The following table lists the Device Management settings of Konftel 800 available through the web interface in the Provisioning tab in the Device Management section or on the phone in Settings > Device Management .
Name Description
Enable
Update interval
To enable or disable Device Management. The options are:
• On: Device Management is enabled. This is the default setting.
• Off: Device Management is disabled.
To specify the update interval in minutes the phone waits to re-sync with the provisioning server. The default value is 60 minutes.
The phone accepts values in the range from 1 to 21,000.
You can configure this parameter through the web interface or through the .xml configuration file.
Maximum time to wait to update
To specify the maximum time in seconds the phone waits for the update. By default, it is 1 minute.
This time-out is not used during the first start of Device
Management. Device Management starts for the first time as soon as the network is configured. After that, Device
Management starts at the intervals you specified using the
Update interval parameter and uses the Maximum time to wait to update value.
You can configure this parameter through the web interface or through the .xml configuration file.
Provisioning
Server
To specify the Device Management server address if it is not provided by the DHCP option.
Table continued…
129
MAINTENANCE
Name
Check Server
Certificate
Lowest TLS
Version
DHCP Option
Certificate
CA Certificate
Description
To enable or disable the verification of the authentication with a certificate. The options are:
• On: Server certificates are checked.
• Off: Server certificates are not checked. This is the default setting.
To specify the lowest TLS version for the phone. The options are:
• 1
• 1.1
• 1.2
To select the DHCP option used for the Device
Management server address.
With all DHCP options, the phone obtains the URL and directory of the server where the configuration file is located.
The Device Management server then looks for kt800.xml
as a global configuration file, and kt800–<MAC>.xml
for a device-specific file.
The DHCP options are:
• 43 : Vendor specific.
• 56 : DHCP message.
• 60 : Class ID.
• 61 : Client ID.
• 66 : Server name.
• 67 : Bootfile name.
• 242 : The brand-specific option.
• Off
• Auto : This is the default setting.
To upload a certificate to the phone. This certificate is used for authentication in Device Management.
To upload a root certificate. It contains a public key, which is used to verify other certificates when using Device
Management.
Table continued…
130
MAINTENANCE
Name
Private Key
Description
To upload a private key. It is used for authentication when using Device Management.
Files on the provisioning server
The following files must be available on the provisioning server:
• Firmware file
• Firmware metadata file
• Global configuration file
• Device-specific configuration file (optional)
• Global certificate configuration file
• Device-specific certificate configuration file (optional)
Global configuration file
The global configuration file contains the basic configuration, that is, all settings that are common for all conference phones in your location. The easiest way to create this file is to configure Konftel 800 and export the configuration file, or use the built-in configuration file creator.
The default name for this file is kt800.xml
.
Instead of the .xml file format, you can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml format. If the phone fails to find the .xml file on the provisioning server, it searches for the configuration file in other formats specified above.
Creating the global configuration file
Use this procedure to create the global configuration file. This file contains the general information about the phone settings and must be created after you set all the basic configurations of Konftel 800.
Enable the Device Management option and ensure that all the required server information is filled in.
On the web interface, click Provisioning .
In the Configuration section, click Export Configuration .
The configuration file is created.
Optional: Edit the .xml file in a suitable editor.
131
MAINTENANCE
Save the file as kt800.xml
in the dedicated folder. The folder is located at the address specified in the Provisioning Server field.
Do not use a custom name for this file because the file name kt800 is hardcoded in Device Management configuration and it will not search for files with a different name.
Delete the local information from the global configuration file to avoid confusion in the future. Local information is information specific to the device, for example, account information.
Device-specific configuration file
The device-specific configuration file contains configuration parameters that are unique for every phone. The settings in this file have priority over the settings in the global configuration file.
The default name for this file is kt800-<MAC>.xml
, where <MAC> is the MAC address of the specific phone.
Instead of the .xml file format, you can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml format. If the phone cannot find the .xml file on the provisioning server, it searches for the configuration file in the other formats.
Creating the device-specific configuration file
Use this procedure to create the device-specific configuration files. They contain information about the unique settings of each Konftel 800.
Obtain MAC addresses of all your Konftel 800 phones. Ensure that you write the
MAC address without colons.
On the web interface, click Provisioning .
In the Configuration section, click Export Configuration .
The phone creates a configuration file.
Edit the .xml file in a suitable editor.
The file must contain only the elements that are unique for a specific phone.
Save the file as kt800-<MAC>.xml
in the dedicated folder located at the address specified in the Provisioning Server field.
Do not use a custom name for this file because the file name kt800-
<MAC> is hardcoded in Device Management configuration and it will not search for files with a different name.
132
MAINTENANCE
Certificate configuration files
Certificate configuration files stored on the provisioning server allow you to automatically download certificate files to Konftel 800. These files are required for the server validation by the phone and TLS authentication by the server.
The service provider can upload a global certificate configuration file and a devicespecific certificate configuration file.
The default name for the global configuration file is kt800_certcfg.xml
. The default name for the global configuration file is kt800_certcfg-<MAC>.xml
, where <MAC> is the MAC address of the specific phone.
Instead of the .xml file format, the service provider can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml
format. If the phone fails to find the .xml file on the provisioning server, it searches for the configuration file in other formats specified above.
The typical certificate configuration file consists of four sections:
• 802.1x: specifies the 802.1x certification arrangements of the phone.
• SIP: contains the Session Initiation Protocol (SIP) certification arrangements of the phone.
• Provisioning: runs through the provisioning server certification arrangements of the phone.
• LDAP: specifies the LDAP server certificate arrangements of the phone.
In some cases, the certificate configuration file can lack some sections. This happens if the relevant certificates are not available for the phone.
Each section includes the following certificate files:
• CA certificate
• Device certificate
• Device private key.
Each section contains the path details for the CA certificate, Device certificate, and
Device private key.
The path to the certificate can be a relative path or a complete URI. For example, a relative path can look like <ca_uri>ca.crt</ca_uri> or
<ca_uri>сerts/ca.crt</ca_uri> . In the first case, the phone looks for the ca.crt
file in the same catalog as the configuration file. In the second case, the phone looks for the ca.crt
file in the certs catalog relative to the configuration file.
133
MAINTENANCE
The file can have the path to the certificate in the form of a complete URI, like
<ca_uri>https://hostname.io/path/ca.crt</ca_uri> . In this case, the phone uses a specific URI to download the certification file.
The section also specifies a SHA256 or an MD5 checksum for each element in it.
This checksum (also called SHA256 hash algorithm or MD5 hash algorithm) is a type of digests of the specified certificates.
Konftel 800 uses MD5 checksum only when Allow Legacy Encryption is enabled. In this case, both SHA256 and MD5 hash algorithms are supported.
When Allow Legacy Encryption is disabled, Konftel 800 supports only
SHA256 hash algorithm. Then the phone does not use MD5 as the checksum for certificates if it downloads and stores them during provisioning.
The phone starts downloading the certificate if the hash algorithm value is different from the one of the certificate file that Konftel 800 stores. That means that the phone downloads one certificate file only once and subsequently checks that the certificate file is still the same.
Related concepts
on page 81
Certificate configuration file structure
The following table shows the format of the certificate file:
String Description
<certificates> To specify the certificates that the phone applies.
<ether_8021x>
<ca_uri>
<ca_hash algo="md5">
To specify the 802.1x
certification arrangements of the phone.
To specify the 802.1x path to check the CA certificate.
To specify the MD5 hash algorithm that the phone uses to verify the 802.1x CA certificate.
Table continued…
134
MAINTENANCE
String
<cert_uri>
<cert_hash algo="md5">
<privkey_uri>
<privkey_hash algo="md5">
<sip>
<ether_8021x>
<ca_uri>
<ca_hash algo="md5">
<cert_uri>
Description
To specify the 802.1x path to get the device certificate.
To specify the MD5 hash algorithm that the phone uses to verify the 802.1x device certificate.
To specify the 802.1x path to get the private key.
To specify the MD5 hash algorithm that the phone uses to verify the 802.1x private key.
To specify the SIP certification arrangements of the phone.
To specify the path to get the CA certificate for the SIP connection.
To specify the MD5 hash algorithm that the phone uses to verify the CA certificate for the
SIP connection.
To specify the path to get the device certificate for the SIP connection.
To specify the MD5 hash algorithm that the phone uses to verify the device certificate for the SIP connection.
Table continued…
135
MAINTENANCE
String
<cert_hash algo="md5">
<privkey_uri>
<provisioning>
<ether_8021x>
<ca_uri>
<ca_hash algo="md5">
<cert_uri>
<cert_hash algo="md5">
136
Description
To specify the path to get the private key for the SIP connection.
To specify the MD5 hash algorithm that the phone uses to verify the private key for the SIP connection.
To specify the provisioning server certification arrangements of the phone.
To specify the path to get the CA certificate for connection to the provisioning server.
To specify the MD5 hash algorithm that the phone uses to verify the CA certificate for connection to the provisioning server.
To specify the path to get the device certificate for connection to the provisioning server.
To specify the MD5 hash algorithm that the phone uses to verify the device certificate for connection to the provisioning server.
To specify the path to get the private key for connection to the provisioning server.
Table continued…
MAINTENANCE
String
<privkey_uri>
<ldap>
<ether_8021x>
<ca_uri>
<ca_hash algo="md5">
<cert_uri>
<cert_hash algo="md5">
<privkey_uri>
137
Description
To specify the MD5 hash algorithm that the phone uses to verify the private key for connection to the provisioning server.
To specify the LDAP server certificate arrangements of the phone.
To specify the path to get the CA certificate for connection to the
LDAP server.
To specify the MD5 hash algorithm that the phone uses to verify the CA certificate for connection to the LDAP server.
To specify the path to get the device certificate for connection to the LDAP server.
To specify the MD5 hash algorithm that the phone uses to verify the device certificate for connection to the LDAP server.
To specify the path to get the private key for connection to the
LDAP server.
To specify the MD5 hash algorithm that the phone uses to verify the private key for connection to the LDAP server.
MAINTENANCE
The following is an example of the certificate configuration file for Konftel 800.
Note that it contains only 2 out of 4 sections.
<certificates>
<ether_8021x>
<ca_uri>8021x_ca.crt</ca_uri>
<ca_hash algo="md5">c49d8fd0cbb6bfc26ef752296d6d17f7</ca_hash>
<cert_uri>8021x_dev.crt</cert_uri>
<cert_hash algo="md5">ca059972d02b2853a92704a7a7640f3f</ cert_hash>
<privkey_uri>8021x_priv.key</privkey_uri>
<privkey_hash algo="md5">f4728d6356204c6fcce91989ef733553</ privkey_hash>
</ether_8021x>
<provisioning>
<ca_uri>prov_ca.crt</ca_uri>
<ca_hash algo="md5">e5116932d3685ea18ead10a55b825145</ca_hash>
</provisioning>
</certificates>
If you enable Allow Legacy Encryption , the certificate configuration file can contain both MD5 and SHA256 hash algorithms. If you disable Allow Legacy
Encryption , then only the SHA256 hash algorithm is supported.
Related concepts
on page 81
Firmware binary
This file contains the firmware binary that is downloaded and installed by Konftel
800 if the metadata file shows that it is newer than the currently installed version.
Firmware metadata file
Firmware metadata file is file in .xml format with information of the firmware version in the binary file. The file is used to check whether the binary file must be downloaded to the phone.
• Firmware version
• Filename
• Checksum of the firmware binary
The following is the example of the firmware binary file:
138
MAINTENANCE
The name of this file is set as KT800_fw_version.xml
. The file contains the following elements in xml format: firmware version, filename, and checksum of the firmware binary. The following is the example of the firmware binary file:
<firmware_version>
<version>2.3.9</version>
<filename>KT800_v2.3.9.kt</filename>
<checksum>XXXX</checksum>
</firmware_version>
If the firmware binary file which is specified in the firmware metadata file is not uploaded to the provisioning server, the phone fails to upgrade and shows the following error message after reboot: Upgrade failed .
Creating firmware binary and metadata files
Use this procedure to create the firmware binary and metadata files manually.
Apply them to check if a newer firmware version for your Konftel 800 is available.
Collect the information about the version, file name, and checksum of the firmware binary for the phone.
Place the firmware binary file on the Device Management server.
Create a firmware metadata file containing the version, file name, and checksum of the firmware binary.
Save the file as <file name>.kt
in the dedicated folder located at the address specified in the Provisioning Server field.
Optional: Add the file type .kt to the MIME settings on the server after the files creation.
Upgrading multiple devices
You can upgrade firmware on multiple Konftel 800 devices using Device
Management instead of upgrading each phone individually. For this purpose,
Device Management must be enabled for the devices, the provisioning server must be specified for the devices, and the firmware binary file and the firmware metadata file must be available on the provisioning server.
Ensure that the firmware filename matches the <filename> value in the metadata file, and that the firmware version in both files is the same.
Check if Device Management is enabled on the phones you want to upgrade and enable if necessary.
139
MAINTENANCE
You can do this on the phone by logging in as an administrator and navigating to Settings > Device Management or through the web interface on the
Provisioning tab in the Device Management section.
Check if the provisioning server is configured for the phones you want to upgrade and configure if necessary.
You can do this on the phone by logging in as an administrator and navigating to Settings > Device Management or through the web interface on the
Provisioning tab in the Device Management section.
Upload the binary file and the firmware metadata file to the provisioning server.
When the phones contact the provisioning server, the upgrade process starts.
You can check the firmware version from the phone by navigating to Settings >
Status or through the web interface in the Status tab.
Related concepts
on page 129
on page 138
Configuring multiple devices
You can configure multiple Konftel 800 devices using the configuration file as a management tool instead of configuring the settings on each phone individually.
For this purpose, you need to export the configuration file, edit the settings as necessary, and then place the configuration file to the provisioning server.
Ensure that you or the service provider have configured the provisioning server for your phones.
Log in to the web interface.
Export the configuration file by clicking Export Configuration on the
Provisioning tab.
The phone generates the global configuration kt800.xml
file.
Optional: Edit the configuration file using a suitable application.
The settings file might not contain some settings if they represent a default value. To include such settings in the configuration file, you need to change them to a non-default value using the phone interface or the web interface.
Upload the file to the provisioning server.
During the next Device Management configuration upgrade, the system applies the configuration file to the phones. After the phones reboot, they all have the same settings specified in the configuration file.
140
MAINTENANCE
Related concepts
on page 108
Related tasks
Creating the global configuration file
on page 131
Remote syslog server
Konftel 800 supports syslog protocol to allow centralized log management. You can configure the phone so that it logs to a remote server and sends the syslog messages to your own system or a third-party system.
With the remote syslog feature enabled, the phone sends the syslog messages to the syslog server and also logs them in the local log.
By default, the remote logging feature on Konftel 800 is in the disabled state.
Configuring remote syslog settings
To use the remote syslog feature, you need to do the following:
• Enable your phone to deliver syslog messages to the syslog server.
• Configure the destination server which receives the syslog events.
You can do this using the configuration file stored on the Device Management server. You can find the syslog settings under the <logging> section of the configuration file.
The default syslog port is 514, and you cannot change this setting.
The <remote_syslog_host> tag can be missing in the <logging> section if you use a configuration file exported from the phone application. This can happen because the <remote_syslog_host> default value is blank, and the phone application does not export blank tags.
Obtain the configuration .xml file for Konftel 800.
In the configuration file, go to the <logging> section.
Set the value in the <remote_syslog_enable> tag to true as shown in the following example:
<remote_syslog_enable>true</remote_syslog_enable>
Specify the host URL in the <remote_syslog_host> tag as shown in the following example:
<remote_syslog_host>1.2.3.4</remote_syslog_host>
141
MAINTENANCE
Replace the 1.2.3.4 with the IP address or hostname of your remote syslog server.
Save the configuration file.
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
The phone sends syslog messages to the syslog server after the next reboot. The phone continues sending syslog messages until you set the
<remote_syslog_enable> parameter in the configuration file to false .
Related concepts
on page 108
Related tasks
Importing the configuration file on page 125
Configuring Device Management settings through the web interface
on page 128
Exporting the configuration file on page 125
Fall back server support
Konftel 800 registers concurrently with the primary and secondary proxy servers.
The phone also supports provisioning of a third-party fall back server when a connection with the primary or secondary server cannot be established. You can configure the third-party server details by using the web interface and the configuration file.
Factory reset
If for any reason, you must restore the factory settings on your Konftel 800, you can do it by means of the factory reset. In this case the phone removes all userspecific settings and returns to the factory settings. After the procedure is completed, you can repeatedly configure the settings.
Performing factory reset
You can reset your Konftel 800 to factory default. You can do the factory reset only on the phone after you log in as the administrator.
If you need to perform the factory reset without logging in as the administrator, follow the procedure described in
Performing system recovery on page 143.
Log in to the phone as the administrator.
On the phone screen, tap Settings > Phone .
Tap Factory Reset .
142
MAINTENANCE
The phone shows the following message: Reset configuration to factory default. Press OK to confirm .
Tap Ok to confirm the reset.
Optional: Tap Cancel to return to the Phone settings.
System recovery
As an administrator, you can perform system recovery on Konftel 800 to return the phone to operable state, for example, after a faulty upgrade or when the phone application fails. System recovery replaces the current firmware with the previously installed operable firmware version.
You can also perform system recovery to reset the administrator password.
System recovery erases all settings including the account information.
Performing system recovery
Ensure that you save the configuration file from your Konftel 800. System recovery erases all settings.
Power cycle the phone to start the boot process.
When the LEDs turn green, start tapping the Microphone Muted button on the phone and continue tapping until the LEDs turn off.
Tap the Microphone Muted button once again.
When the LEDs turn red, tap the Volume up button once to confirm the system recovery.
The LEDs turn off. The phone starts regular boot. After the boot up, the phone displays the following message: Upgrade the phone to complete recovery .
If you want to cancel the system recovery, do not tap Volume up button on the phone when the LEDs turn red.
After the phone boots up, set the administrator password.
Upgrade the phone to complete system recovery.
Upload the configuration file with necessary settings.
Related concepts
on page 104
Related tasks
Setting the password for Konftel 800 on page 23
143
MAINTENANCE
Web interface settings
The web server in Konftel 800 supports secure connections using HTTPS. You can configure this parameter only through the web interface.
The phone supports connection to the web interface only through https .
The following table shows the web interface settings that you can configure for
Konftel 800 in the Provisioning tab:
Name
Secure HTTP
Description
Webapp HTTPs
Certificate
To upload a .PEM certificate to Konftel 800 to use HTTPS.
Konftel 800 supports certificates in the .PEM format only. You must convert the certificates and private keys to .PEM before using in the phone. For more information, see
Converting the certificates to .PEM
on page 77
You can use the following command to generate a HTTPS web interface certificate: openssl req –new –x509 –keyout https _ web _ certificate.pem –out https _ web _ certificate.pem –day <number of days>-nodes
Protection against cross-site request forgery
When the user logs in to the web interface of Konftel 800 with the administrator password, the web application of the phone uses specific tokens to protect against
Cross-Site Request Forgery (CSRF) attacks.
CSRF is an attack that tricks the user into submitting a malicious request. The attacker takes the identity and privileges of the user to make undesired actions on the user’s behalf. CSRF attacks target functionality that causes a state change, for example changing the user's password. If the user stays authenticated to the website during the attack, the website can not distinguish between forged and legitimate requests.
Konftel 800 generates a new CSRF token on each request. Each link or parameter change in the web interface needs to have a CSRF token as a request parameter.
The web application checks if the token in the request is the correct one. For example, if the attacker copies an existing link from the open web interface of
144
MAINTENANCE
Konftel 800, the server responds with the following error code: HTTP status code 403, forbidden .
You are recommended to administer the settings in the web UI only from one computer and one browser simultaneously. This way you can minimize the risk of getting the error code message due to incorrect token use.
DEVICE STATUS VIEW
You can view the configured settings of your Konftel 800 through the web interface and get information about the device, logs, and licenses.
You can use this information for troubleshooting.
Device status
You can find the information about Konftel 800 status, including its current settings, through the web interface. This information can be useful for troubleshooting.
The following table describes the type of the information available in each of the
Status tab sections.
Section name
General
Network
Description
To show the status information of Konftel 800, including the following:
• Phone Name
• Product Name
• Build Version
• HW Revision
• Serial Number
• Smart Microphone 1 Version
• Smart Microphone 2 Version
To show the information about the network settings of the phone. You can see the following information:
• IP Address
• MAC Address
• Bluetooth MAC Address
145
MAINTENANCE
Section name
SIP
Time and Region
Description
• Hostname
• Network Mask
• Domain
• Gateway
• Primary DNS
• Secondary DNS
To show the information about the SIP settings of the phone. You can see the following information:
• Primary Account Status
• Secondary Account Status
• Fallback Account Status
To show the information about the time and region settings of the phone. You can see the following information:
• NTP Status
• Time
• Date
• Timezone
• Daylight Saving Time
You can not change settings in the Status tab.
Viewing the phone status
Use this procedure to view the status and settings of Konftel 800 through the web interface.
Log in to the web interface.
Select the Status tab.
System logs
Information about log messages is available through the web interface in the
System Logs tab. These log types can be useful for troubleshooting.
You can select the following log types:
146
MAINTENANCE
• All Logs . This is the default setting.
• System Logs
• PhoneApp Logs
• Linux Kernel Logs
• Bluetooth Stack Logs
• PJSIP logs
• Device Management
• SIP traces
• Device Management Debug
You can also specify custom logs type in the Custom logs type field.
You can not access logs through the phone user interface.
Viewing system logs
Use this procedure to choose and form the log messages through the web interface.
On the web interface, click System logs .
Under Select Logs Type , select the log from a drop-down list.
Click the Filter button.
You can see the logs of the selected type in the field below.
Optional: You can do the following:
• Click the Download All Logs button to download all the logs available. In this case the system downloads a .zip archive with the logs available.
• Click the Download Selected Logs button to download the logs of a selected type. In this case, the system downloads a .txt file with the logs of the selected type.
• Click the Clear All Logs button to clear the list of available logs.
Network logs
You can get the traces of the phone network activities through the web interface in the Network Logs tab. The network logs can be useful for troubleshooting.
You can get network logs only after the phone reboots into Network logs mode.
Viewing network logs
Use this procedure to choose and form the network log messages through the web interface.
147
MAINTENANCE
On the web interface, click Network logs .
You can do the following:
• Click the Reboot Into Network Log Mode button to reboot the phone into
Network log mode.
• Click the Download Network Logs button to download the archive with the available network logs.
LICENSES
On the Licenses web page, you can get the general information about the use and other conditions for the third party components. This web page also contains a copyright URL by using which you can find and download the document with a complete list of the third party components and licenses.
You can get the license information only through the web interface.
148
APPENDIX A. ENCRYPTION METHODS IN
LEGACY ENCRYPTION MODE
ENCRYPTION METHODS IN LEGACY ENCRYPTION
MODE
The following table lists the encryption methods enabled and disabled in Legacy encryption mode:
Cipher
TLS_DHE_DSS_WITH_3DES_
EDE_CBC_SHA256
Y
802.1X LDAP SIP
TLS
Y
Y TLS_DHE_DSS_WITH_AES_12
8_CBC_SHA
Y
TLS_DHE_RSA_WITH_AES_12
8_GCM_SHA256
Y
TLS_DHE_RSA_WITH_AES_25
6_GCM_SHA384
Y
Y
Y
Y
Y
Y Y TLS_ECDH_ECDSA_WITH_AE
S_128_GCM_SHA256
Y
TLS_ECDH_ECDSA_WITH_AE
S_256_GCM_SHA384
Y
TLS_ECDH_RSA_WITH_AES_
128_GCM_SHA256
Y
TLS_ECDH_RSA_WITH_AES_
256_GCM_SHA384
Y
TLS_ECDHE_ECDSA_WITH_A
ES_128_GCM_SHA256
Y
Y
Y
Y
Y
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
N
N
N
N
N
N
Table continued…
149
APPENDIX A. ENCRYPTION METHODS IN LEGACY
ENCRYPTION MODE
Cipher
TLS_ECDHE_ECDSA_WITH_A
ES_256_GCM_SHA384
Y
802.1X LDAP SIP
TLS
Y Y
Y Y TLS_ECDHE_RSA_WITH_AES
_128_GCM_SHA256
Y
TLS_ECDHE_RSA_WITH_AES
_256_GCM_SHA384
Y Y Y
TLS_RSA_WITH_AES_128_GC
M_SHA256
Y
TLS_RSA_WITH_AES_256_GC
M_SHA384
Y
Y
Y
Y
Y
TLS_DHE_RSA_WITH_3DES_
EDE_CBC_SHA
Y
TLS_DHE_RSA_WITH_AES_12
8_CBC_SHA
Y
TLS_DHE_RSA_WITH_AES_12
8_CBC_SHA256
Y
TLS_DHE_RSA_WITH_AES_25
6_CBC_SHA
Y
Y
Y
Y
Y
Y
Y
Y
TLS_DHE_RSA_WITH_AES_25
6_CBC_SHA256
Y
TLS_ECDH_ECDSA_WITH_3D
ES_EDE_CBC_SHA
Y
TLS_ECDH_ECDSA_WITH_AE
S_128_CBC_SHA
Y
Y
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y N
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
N
N
N
Y
Y
Y
Y
Y
Y
Y
Table continued…
150
APPENDIX A. ENCRYPTION METHODS IN LEGACY
ENCRYPTION MODE
Cipher
TLS_ECDH_ECDSA_WITH_AE
S_128_CBC_SHA256
Y
802.1X LDAP SIP
TLS
Y Y
Y Y TLS_ECDH_ECDSA_WITH_AE
S_256_CBC_SHA
Y
TLS_ECDH_ECDSA_WITH_AE
S_256_CBC_SHA384
Y Y Y
Y TLS_ECDH_RSA_WITH_3DES
_EDE_CBC_SHA
Y
TLS_ECDH_RSA_WITH_AES_
128_CBC_SHA
Y
TLS_ECDH_RSA_WITH_AES_
128_CBC_SHA256
Y
Y
Y
Y
Y
TLS_ECDH_RSA_WITH_AES_
256_CBC_SHA
Y
TLS_ECDH_RSA_WITH_AES_
256_CBC_SHA384
Y
TLS_ECDHE_ECDSA_WITH_3
DES_EDE_CBC_SHA
Y
Y
Y
Y
Y
Y
TLS_ECDHE_ECDSA_WITH_A
ES_128_CBC_SHA
Y
TLS_ECDHE_ECDSA_WITH_A
ES_128_CBC_SHA256
Y
TLS_ECDHE_ECDSA_WITH_A
ES_256_CBC_SHA
Y
Y
Y
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Table continued…
151
APPENDIX A. ENCRYPTION METHODS IN LEGACY
ENCRYPTION MODE
Cipher
TLS_ECDHE_ECDSA_WITH_A
ES_256_CBC_SHA384
Y
802.1X LDAP SIP
TLS
Y Y
Y TLS_ECDHE_RSA_WITH_3DE
S_EDE_CBC_SHA
Y
TLS_ECDHE_RSA_WITH_AES
_128_CBC_SHA
Y Y Y
Y Y TLS_ECDHE_RSA_WITH_AES
_128_CBC_SHA256
Y
TLS_ECDHE_RSA_WITH_AES
_256_CBC_SHA
Y
TLS_ECDHE_RSA_WITH_AES
_256_CBC_SHA384
Y
TLS_RSA_WITH_3DES_EDE_
CBC_SHA
Y
TLS_RSA_WITH_AES_128_CB
C_SHA
Y
TLS_RSA_WITH_AES_128_CB
C_SHA256
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
TLS_RSA_WITH_AES_256_CB
C_SHA
Y
TLS_RSA_WITH_AES_256_CB
C_SHA256
Y
TLS_DHE_DSS_WITH_3DES_
EDE_CBC_SHA
TLS_DHE_DSS_WITH_AES_12
8_CBC_SHA256
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
152
Index
Numerics
802.1x
A
analog parameters
RTCP XR
,
application to manage the phone
B
basic settings
Bluetooth audio streaming
paired devices connection
paired devices reconnection
Bluetooth Classic
Bluetooth radio
C
caller information
Caller name
certificate application converting the certificates to .PEM format
creating the server certificate
downloading the root certificate
exporting the private key
certificate configuration file
certificate configuration files 133
certificates application
153 changing password
check-sync NOTIFY event
configuration advance settings
Device Management settings
migration
network settings
web interface settings
configuration file export
import
structure
connecting to a network with DHCP
connection
cross-site request forgery
D
daisy chain
expansion microphones
master phone
daylight saving time
Daylight Saving Time configuring through web
INDEX
Daylight Saving Time (continued)
Device certificate
Device Management files on server
Device Management settings
configuring on the phone 128 through the web interface 128
device-specific configuration file creating
,
,
document changes
downgrade
E
encryption methods
expansion microphone firmware upgrade
,
termination
F
fall back server
fallback account
FIPS
FIPS mode configuring on the phone
through the web interface media encryption with SRTP
firmware
84 using configuration file 84
upgrade
154 firmware (continued) upgrade (continued) using mass storage device with administrator
without administrator
firmware binary
firmware downgrade
firmware upgrade
using check-sync
using the downloaded file
using USB mass storage
G
global configuration file
I
icons
installing the certificate
intended audience
L
language
LDAP configuring number attributes
settings
legacy encryption mode configuring through the web interface
using configuration file
configuring on the phone
INDEX
logging in
logs
M
media encryption with SRTP
media settings
configuring through the web interface
metadata file, creation
minute offset configuring through the web interface
using the configuration file
N
network logs
network settings
NTP server address
O
P
password reset
setting
phone management application configuring settings from the
mobile device 90 deleting pairing 90
disconnecting devices
pairing and connecting devices
phone name
phone settings configuration on the phone
155 physical layout
power supply
prerequisites
provisioning
R
registering
,
,
on the phone 26 primary account 26
,
secondary account
through the web interface
registration with the ZTI device management service
remote syslog
remote syslog server
reset
to previous firmware version
reset to factory settings
ringtone level
rollback
RTCP XR collector URI
parameters
S
safety guidelines
secondary account
setting static IP address
through the web interface
setting up, DHCP server
INDEX settings
Device Management
SIP invite
SIP NOTIFY
SIP settings configuring settings on the
sleep mode enabling
Smart Mic upgrade
,
termination
specifications
standard encryption
media encryption with SRTP
standard encryption for 802.1x
configuring on the phone
static IP
status through the web interface
viewing
system recovery procedure
T
time format configuring using the configuration file
TLS
transport protocol
U
usb only user mode icons
V
viewing
IP address
system logs
voice quality monitoring
W
web interface
webapp debug
156
157
K O N F T E L . C O M
Konftel is a leading company within collaboration endpoint solutions. Since 1988, our mission has been to help people in businesses around the world to have meetings regardless of distance. We know that remote collaboration is an effective way to save time, money and contribute to a more sustainable world. We are Climate Neutral
Certified, offering customers an option to purchase video conferencing equipment while keeping a clear climate conscience. Crystal clear audio and a sharp video image are essential for efficient meetings; this is why we only focus on cutting-edge technology in our Collaboration Solutions. Our audio technology OmniSound ® is built into all Konftel Conference phones and devices. The products are sold globally under the Konftel brand and our headquarters are based in Sweden. Read more about the company and our products at konftel.com.
Konftel AB, Box 268, SE-901 06 Umeå, Sweden
Tel: +46 90 70 64 89 E-mail: [email protected]
Download
Offentligt link opdateret
Det offentlige link til din chat er blevet opdateret. You may view and manage your chat links after registration here.
Dokument offentligt link
Annonce