▪ The Poly Online Support Center is the entry point to online product, service, and solution support information including Video Tutorials, Documents & Software, Knowledge Base, Community

Discussions, Poly University, and additional services.

▪ The Poly Document Library provides support documentation for active products, services, and solutions. The documentation displays in responsive HTML5 format so that you can easily access and view installation, configuration, or administration content from any online device.

▪ The Poly Community provides access to the latest developer and support information. Create an account to access Poly support personnel and participate in developer and support forums. You can find the latest information on hardware, software, and partner solutions topics, share ideas, and solve problems with your colleagues.

Before You Begin

▪ The Poly Partner Network is a program where resellers, distributors, solutions providers, and unified communications providers deliver high-value business solutions that meet critical customer needs, making it easy for you to communicate face-to-face using the applications and devices you use every day.

▪ The Poly Services help your business succeed and get the most out of your investment through the benefits of collaboration.

Getting Started

Topics:

▪

Product Overview of Poly Video Systems

▪

Powering the System On and Off

▪

Navigating the System

The Poly G7500, Studio X50, and Studio X30 systems provide video conferencing capabilities and collaboration tools for any size meeting space or room.

Product Overview of Poly Video Systems

Poly G7500, Studio X50, and Studio X30 systems in Poly Video Mode support Poly video conferencing and content sharing features.

Poly G7500 System Features and Capabilities

G7500 systems support the following features:

▪ Peripheral cameras and microphones make the system scalable for medium rooms and up to large integrated rooms

▪ Placing and joining video calls

▪ Viewing and joining scheduled calendar meetings

▪ Managing contacts, call lists, and directories

▪ Sharing wireless and wired content

▪ Collaborating with electronic blackboards

▪ Camera tracking technology that can automatically zoom in on the person talking or frame the group of people in the room (depending on the paired camera and system configuration)

▪ Poly NoiseBlockAI, which eliminates background and extraneous sound during calls in common working environments

▪ Polycom Acoustic Fence technology, which enables video conferencing in open workspaces by capturing only the voices in a defined area

▪ HDMI: Single input and dual output

▪ Serial port connection

▪ Using a wired or wireless USB mouse as an input device

Poly Studio X50 Features and Capabilities

Studio X50 systems support the following features:

▪ All-in-one collaboration system for huddle rooms and small-to-medium rooms

▪ No need for a separate PC, laptop, or codec to run video-conferencing software

▪ Placing and joining video calls

▪ Viewing and joining scheduled calendar meetings

Getting Started

▪ Managing contacts, call lists, and directories

▪ Sharing wireless and wired content

▪ Collaborating with electronic blackboards

▪ Built-in 4K camera with ultra-wide 120-degree field of view

▪ Camera tracking technology that automatically frames the group of people in the room

▪ Hi-fidelity, built-in stereo microphones that pick up sound within 7.62 m (25 ft) and use spatial audio for life-like presence and clarity

▪ Poly NoiseBlockAI, which eliminates background and extraneous sound during calls in common working environments

▪ Polycom Acoustic Fence technology, which enables video conferencing in open workspaces by capturing only the voices in a defined area

▪ Dual stereo speakers

▪ HDMI: Single input and dual output

▪ Using a wired or wireless USB mouse as an input device

Poly Studio X30 Features and Capabilities

Studio X30 systems support the following features:

▪ All-in-one collaboration system for huddle rooms and small-to-medium rooms

▪ No need for a separate PC, laptop, or codec to run video-conferencing software

▪ Placing and joining video calls

▪ Viewing and joining scheduled calendar meetings

▪ Managing contacts, call lists, and directories

▪ Sharing wireless and wired content

▪ Collaborating with electronic blackboards

▪ Built-in 4K camera with ultra-wide 120-degree field of view

▪ Camera tracking technology that automatically frames the group of people in the room

▪ High-fidelity, built-in stereo microphones that pick up sound within 4.57 m (15 ft) and use spatial audio for life-like presence and clarity

▪ Poly NoiseBlockAI, which eliminates background and extraneous sound during calls in common working environments

▪ Polycom Acoustic Fence technology, which enables video conferencing in open workspaces by capturing only the voices in a defined area

▪ Single mono speaker

▪ HDMI: Single input and output

▪ Using a wired or wireless USB mouse as an input device

Administrator Features and Capabilities

The G7500, Studio X50, and Studio X30 systems provide features for administrators to deploy, manage, and access systems.

These systems provide the following features and capabilities:

▪ Remote access for managing standalone systems

Getting Started

▪ Provisioning with Polycom RealPresence Resource Manager to support single system, small business, and large multisite enterprise deployments

▪ SNMP reporting and remote logging

▪ Industry-standard security techniques, including 802.1X authentication

▪ Polycom platform on-premises infrastructure and management solutions

▪ Standards-based video conferencing (SIP and H.323)

▪ Customizable home screen and monitor layouts

Powering the System On and Off

The system turns on when you plug it into a power source. The system doesn’t have a power button, so you must unplug the power cable to power it off.

Note: Don’t power off the system during maintenance activities (for example, while a software update is in progress).

Related Links

Restart the System on page 142

Navigating the System

You can navigate the system using the system web interface.

Access the System Web Interface

Access the system web interface to perform administrative tasks.

The system web interface enables you to do the following actions:

▪ Finish setting up your system.

▪ Remotely configure and manage your system. Unlike the local interface, you can configure every setting through the system web interface.

▪ Control certain user functions of the system (such as placing calls and ending content sessions).

▪ Manage contacts.

Procedure

Open a web browser and enter the system IP address.

When setting up your system, the onscreen instructions display the IP address to use.

Enter the username (the default is admin ).

Enter the password (the default is the last six characters of your system’s serial number).

Setting Up the System

Topics:

▪

Overview of Poly G7500, Studio X50, and Studio X30 Hardware

▪

LED Status Indicators

▪

Completing Initial System Setup

▪

Managing Peripheral Devices

See the setup sheets applicable to your video system and its peripheral devices, including cameras, monitors, microphones, and controllers.

Overview of Poly G7500, Studio X50, and Studio X30

Hardware

The following figures and tables provide information about hardware features available on your system.

Poly G7500 System Ports

The following illustration and table explain the ports on the back panel of your G7500 system.

G7500 System Back Panel Port Descriptions

Ref. Number

Port Description

3.5 mm audio line out

3.5 mm audio line in

Security lock

Mini-DIN/RS-232 serial port

USB 3.0 port (host)

USB-C port

HDCI input for Polycom cameras

Ref. Number

Port Description

HDMI input for sharing content (for example, from a laptop)

HDMI output for the primary monitor

HDMI output for the secondary monitor

LAN connection for the system

Link-local network (LLN) connections for IP-based peripheral devices

Power cord port

on page 99

LED Status Indicators for the System LAN Ports

on page 164

Poly Studio X50 System Ports

The following illustration and table explain the ports on your Poly Studio X50 system.

Setting Up the System

Poly Studio X50 System Port Descriptions

Ref. Number

Port Description

3.5 mm audio line in

3.5 mm audio line out

Polycom RealPresence Debut expansion microphone connection

USB-C port

USB ports

Factory restore pinhole

Security lock (on the back flat section of the system)

HDMI output for the secondary monitor

Ref. Number

Port Description

HDMI output for the primary monitor

HDMI input for sharing content (for example, from a laptop)

LAN connection for the system

Power cord port

Poly Studio X30 System Ports

The following illustration and table explain the ports on your Poly Studio X30 system.

Setting Up the System

Poly Studio X30 System Port Descriptions

Ref. Number

Port Description

Power cord port

Security lock

Factory restore pinhole

HDMI output for the primary monitor

USB-C port

HDMI input for sharing content (for example, from a laptop)

USB port

LAN connection for the system

Setting Up the System

LED Status Indicators

The following figures display the LEDs on your systems. The tables list each LED indicator and its associated status.

LED Status Indicators for the G7500 System

Use the LED on the front right corner of the codec to get information on the state of your system.

G7500 System LED Status Indicators

Indicator Status

Blinking white

Solid white

Solid green

Blinking amber

Powering on

Working normally

In a call

Update in progress

Solid amber

Blinking red

Solid red

Sleeping

Error preventing normal operation

Muted microphone

Related Links

Factory Restore the System on page 143

Setting Up the System

LED Status Indicators for the Studio X50 and Studio X30 Systems

The system provides an LED light bar above the camera to help you understand the system’s behaviors.

Basic Studio X50 and Studio X30 LED Indicators and Status

Indicator Position Status

Solid white

Blinking blue

Solid blue for 3 seconds

Blinking green

Solid green

All

Twelve in the middle

All

Four to eight (when in the middle), indicating the tracked speaker or the direction of the camera

Boot initialization in progress

Bluetooth in discovery

Bluetooth paired

Incoming call

Outgoing call

Working

The lights are green with supported applications in the following cases:

▪ Tracking people in group framing and speaker tracking mode

▪ Indicating the direction of the camera that you customize in pan-tilt-zoom (PTZ) mode

Solid amber

Pulsing red

Pulsing green

Solid white for 3 seconds

Solid red

Pulsing amber

Blinking red

Blinking amber

Twelve in the middle

All

Four in the middle

All

Twelve alternating

Standing by

The system is in sleep mode with no active video output.

Call on hold

Call on hold (by far site)

Saving a preset

Muted microphone

Muted camera. The muted microphone LEDs take precedence and cover the camera mute LEDs.

Firmware update in progress

Error preventing normal operation

In a POST sequence, at least one test resulted in a warning error. The system continues to blink amber, but initializes after the sequence is complete if no severe errors occur.

Setting Up the System

Indicator

Blinking red

Position

Twelve alternating

Status

In a POST sequence, at least one test resulted in a severe error. The system continues to blink red and doesn’t start up.

Completing Initial System Setup

When you power on the system for the first time (or after a system reset or factory restore), you must complete the system setup process.

This process involves the system contacting the Poly Zero Touch Onboarding (ZTO) server to determine its mode of operation: Poly Video Mode or Partner Mode.

Note the following requirements:

▪ During initial setup, you must have a DHCP server in your environment to ensure the system gets an IP address. (You can configure the system with a static IP address later if needed.)

▪ Configure your firewall, web proxy, or both so that the system can communicate with the following services on port 443:

◦ ZTO ( zto.poly.com

)

◦ Poly Lens ( lens.poly.com

)

◦ Software download site ( downloads.polycom.com

)

▪ You must have an NTP server on your network for the system to connect with the ZTO service.

▪ Your conferencing application may require a separate license or subscription for call-related features. Contact your conferencing partner for information.

If the system isn’t connected to a valid network at startup, it prompts you to connect to Ethernet or configure Wi-Fi.

Note: Only Zoom Rooms and Microsoft Teams support a Wi-Fi connection as the primary network. If you change to an unsupported conferencing application, a message displays indicating you must connect to the Ethernet.

After initial network setup, the system boots directly into a conferencing application. If the ZTO specified conferencing application isn’t available in the current software, the system performs a software update. If the specified conferencing application isn’t available after the update, the system defaults to Poly Video

Mode. To change the conferencing application, go to the system web interface Provider section and select an option.

Required Steps Following Initial System Setup

After going through the system setup process, you also must manually configure or provision the following system settings for an optimal deployment and user experience:

▪ Local administrator password : For security reasons, don’t use the default password.

▪ Country : If you use the default country setting, the system’s Wi-Fi settings may not be optimal for your country or region.

Setting Up the System

▪ Timezone : Depending on the system location, using the default timezone setting may display the incorrect time on the system (including for scheduled calendar events).

Registering the System with Poly Lens

Poly Lens provides cloud-based management and insights for your system.

You can register your system with Poly Lens during system setup or on the Poly Lens registration page.

For more information, see Poly Lens Help .

Register During System Setup

You can register with Poly Lens during system setup.

Procedure

When prompted to register with Poly Lens, do one of the following:

▪ Scan the registration QR code with your mobile device.

▪ Enter the registration URL in a browser.

▪ Select the registration link in the system web interface.

Follow the instructions to finish registering your system.

Your system remains registered with Poly Lens even after a reset or factory restore.

Related Links

on page 19

Verify Poly Lens Registration Status

on page 167

Register Later

If you don’t register during setup, you can do so on the Poly Lens registration page.

Procedure

Go to https://lens.poly.com/go .

Follow the instructions to register your system.

Related Links

Verify Poly Lens Registration Status

on page 167

Complete Setup with the System Web Interface

To finish setting up your system, manually configure the system’s local administrator password, country, and timezone.

Procedure

Power on the system and follow the onscreen instructions.

Go to Security > Local Accounts to change the local administrator password from the default value (the last six characters of your system’s serial number).

Go to General Settings > My Information > Location to specify the country where your system is located.

Go to General Settings > Date and Time to set the timezone for your system.

Setting Up the System

Initial system setup is complete. You can start using the system.

Create Local Administrator Credentials on page 60

Set the System Location on page 32

Set the Date and Time on page 31

Complete Setup with Provisioning

To finish setting up your system, provision the system’s local administrator password, country, and timezone.

Make sure to configure your provisioning server (for example, RealPresence Resource Manager) ahead of time so that it recognizes and works with your endpoint.

Procedure

Power on the system and follow the onscreen instructions.

Log in to the system web interface and go to Servers > Provisioning Server to register the system with your provisioning service.

In your provisioning template configuration file, set the following parameters:

See the Poly VideoOS Parameter Reference Guide on the Poly Documentation Library for detailed descriptions about configuration parameters and their permitted values.

▪ sec.auth.admin.password

▪ device.local.country

▪ device.local.timezone

The provisioning service automatically configures these settings on your system.

Initial system setup is complete. You can start using the system.

Related Links

on page 37

Download a Provisioning Template Configuration File on page 38

Managing Peripheral Devices

You can pair, monitor, and unpair the devices connected to your system in the system web interface.

The system can support up to five Poly TC8 devices simultaneously.

Pairing IP Devices on the Link-Local Network (LLN)

IP devices automatically pair with your system when connected to either of the system’s three link-local network (LLN) ports.

The Studio X50 and Studio X30 don't support LLN connections.

You can pair the following devices to your G7500 system with an LLN connection:

▪ Poly IP Table Microphone

▪ Poly IP Ceiling Microphone

▪ Poly Microphone IP Adapter

Setting Up the System

While not recommended, you can turn off automatic pairing and manually pair devices using the system web interface.

Automatically Pair an IP Device

By default, IP devices automatically pair when connected to a system LLN port. For example, when you plug in a Polycom IP Table Microphone to the back of the system, it’s ready to use.

Procedure

» Connect the device to an LLN port on the back of your system.

If paired successfully, the device displays under Connected Devices with a Connected status. If a device shows a Disconnected status, this indicates that pairing wasn’t successful.

Disable Automatic Pairing

You can disable automatic pairing with your system’s link-local network (LLN) connections.

If you disable automatic pairing, you must manually pair a device in the system web interface to use the device.

Procedure

In the system web interface, go to General Settings > Device Management .

Clear the Enable New Device Auto-Pairing check box.

Manually Pair an IP Device

If you turn off automatic pairing of link-local network (LLN) connections, you must manually pair an IP device to use it with your system.

Know the MAC address of the device you’re pairing.

Procedure

Connect the device to an LLN port on the back of your system.

In the system web interface, go to General Settings > Device Management .

Under Available Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Pair .

If paired successfully, the device displays under Connected Devices with a Connected status. If a device shows a Disconnected status, this indicates that pairing wasn’t successful.

Pairing IP Devices on the Local Area Network (LAN)

Supported IP devices can pair to your video system over your primary local area network (LAN).

Pairing a Poly Trio

You can use a Poly Trio system as a controller and audio device with a Poly Studio X50, Studio X30, or

G7500 video system. See your system’s latest Release Notes for supported Poly Trio models.

You pair the phone as an IP device over your primary network. When paired, from the video system web interface you can configure audio to play from the phone speakers, Studio X50 or Studio X30 system speakers, or monitors connected to the video system. The Poly Trio microphones are always on.

Setting Up the System

Configure a Poly Trio for Pairing

To pair with a video system, you must configure your Poly Trio system’s base profile and device role.

Procedure

On the phone’s local interface, go to Settings > Advanced > Administration Settings >

Network Configuration .

Set the Base Profile to Generic .

After the phone restarts, go to Settings > Advanced > Networked Devices .

Set Networked Device Role to Device .

The system automatically restarts.

Pair an IP Device on the Primary Network

Some devices connected to your primary network can pair with your video system. For example, this feature enables you to pair a Poly TC 8 device without a physical connection to the video system.

Note: Pairing IP audio devices and cameras over the primary network isn’t supported.

To pair, the device must be on the same subnet as the video system and the following network components must be unblocked:

▪ Multicast address 224.0.0.200

▪ TCP port 2000

▪ UDP port 18888

Know the MAC address of the device you’re pairing.

A device may pair automatically after connecting to the network. However, you may need to manually pair a device in the following situations:

▪ The device doesn’t automatically pair during setup with the system you purchased.

▪ You want to pair the device with a different system.

▪ You want to pair multiple similar devices (for example, to control the system with more than one

Poly TC8 device).

Note: The Enable New Device Auto-Pairing setting applies only to link-local network (LLN) devices; not devices connected to the primary network.

Procedure

Connect the device you want to pair to an Ethernet port in the room.

In the system web interface, go to General Settings > Device Management .

Under Available Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Pair .

If paired successfully, the device displays under Connected Devices with a Connected status. If a device shows a Disconnected status, this indicates that pairing wasn’t successful.

If pairing isn’t successful, check the network connection, the configuration of your device, and the system you’re pairing with.

Setting Up the System

Unpair an IP Device

You must unpair an IP device if you no longer want to use it with a particular video system.

Don’t unpair devices if you plan to use them with the same system. For example, if you move your videoconferencing equipment to another room, just disconnect and reconnect the devices in the new location.

Note: If you unpair a link-local network (LLN) device, it won’t automatically pair again with the same system.

Procedure

In the system web interface, go to General Settings > Device Management .

Under Connected Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Unpair .

The unpaired device moves from Connected Devices to Available Devices (which shows discovered devices you can pair with the system).

Connect a USB Device

You can use some devices, such as a Windows or Mac laptop, with a USB connection to your video system. See the latest Release Notes for supported USB devices.

Procedure

» Connect the device to a USB port on the back of your system.

Poly Bluetooth Remote Control

You can use the Poly Bluetooth Remote Control with your system.

Use the system web interface to perform the following tasks:

▪ Configure a remote control’s button behavior.

▪ Pair and unpair a remote control.

Note: The remote control included with your G7500 system purchase is paired and ready to use without any extra setup.

▪ View the remote control name, pairing status, and battery level.

Related Links

Disable Wireless Options on page 57

Update the Poly Bluetooth Remote Control Firmware

on page 140

Configure Remote Control Behavior

You can customize how the remote control paired to your system behaves.

Procedure

In the system web interface, go to General Settings > System Settings .

Setting Up the System

Configure the following settings:

Setting

Keypad Audio Confirmation

Numeric Keypad Function While In a Call

#/@ Button function

Description

Specifies whether to play a voice confirmation of numbers selected with the remote control or keypad.

Specifies whether pressing number buttons on the remote control or keypad moves the camera to presets or generates touch tones (DTMF tones). If you set this option to Presets , you can generate

DTMF tones by pressing the # key on the remote control while in a call.

Specifies the behavior of the # button on the remote control.

▪ #, then @ : Pressing the # button once displays the hash symbol. Pressing the # button twice quickly displays the @ symbol.

▪ @, then # : Pressing the # button once displays the @ symbol. Pressing the # button twice quickly displays the # symbol.

*/. Button function Specifies the behavior of the * button on the remote control:

▪ * then .

: Pressing the * button once displays the

* symbol. Pressing the * button twice quickly displays a period.

▪ . then * : Pressing the * button once displays a period. Pressing the * button twice quickly displays the * symbol.

Select Save .

Pair a Remote Control

In most cases, you must pair the remote control after setting up your system. To use a different remote control, you must pair it with the system.

The system doesn’t support multiple remote controls. You can pair only one at a time.

Procedure

Depending on your system, do one of the following:

▪ (All systems) In the system web interface, go to General Settings > Remote Control and select Start Discovery Mode .

▪ (G7500 systems only) On the front of the system, press the Bluetooth button.

Setting Up the System

On your remote control, press Mute for seven seconds.

In Poly Video Mode, the screen displays either a successful or unsuccessful pairing notification. In

Partner Mode, the blue LED indicator stops blinking blue and returns to white.

Depending on the pairing result, do one of the following:

▪ Successful pairing : The remote control is ready to use. You can view the remote control name, battery level, and status of the device in the system web interface.

▪ Unsuccessful pairing : Try the following solutions:

◦ Remove the batteries from the remote control and reinsert after 5 seconds.

◦ Move your remote control closer to the system than other remote controls and try to pair again.

Unpair a Remote Control

You can unpair a remote control if you no longer want to use it with your system.

Procedure

In the system web interface, go to Remote Control .

Select Unpair Remote .

The remote control unpairs.

IP Microphones

You can use a combination of IP-based Polycom table and ceiling microphones with your G7500 system.

These microphones also support Polycom Acoustic Fence technology.

The Studio X50 and Studio X30 don’t support IP microphones.

You can connect up to three of the following microphones directly to your system:

▪ Poly IP Table Microphone

▪ Poly IP Ceiling Microphone

Factory Restore a Ceiling Microphone on page 144

Poly IP Table Microphone Ports

The following illustration and table explain the ports on the table microphone.

Setting Up the System

Poly IP Table Microphone Port Descriptions

Ref. Number

Port Description

Micro-USB debugging port

Factory restore pinhole

Link-local network (LLN) connection

Poly IP Ceiling Microphone Ports

The following illustration and table explain the ports on the ceiling microphone.

Poly IP Table Microphone Port Descriptions

Ref. Number

Port Description

Link-local network (LLN) connection

Microphone cable connector

Setting Up the System

LED Status Indicators for IP Microphones

Use the LED on the IP table and ceiling microphones to get information on the state of each device.

IP Microphone LED Status Indicators

Indicator

Solid then blinking white

Solid red

Solid green

Status

Powering on

Muted microphone

To avoid distraction, the ceiling microphone doesn’t display red when muted.

In a call and microphone not muted

To avoid distraction, the ceiling microphone doesn’t display green in a call.

Out of a call and microphone not muted

Update in progress

LED is off

Alternating blinking and solid amber

Blinking amber

Blinking blue

Solid blue

Factory restore in progress

Ready to pair

Paired successfully

Poly Microphone IP Adapter

The Poly Microphone IP Adapter lets you connect non-IP Polycom audio devices with your system. For example, if your Polycom microphone uses a Walta-Walta cable, you can connect it to your system through the microphone adapter.

The Studio X50 and Studio X30 don’t support the microphone adapter.

See the latest video system Release Notes for which audio devices work with the microphone adapter.

Note: You can’t use the microphone adapter with IP microphones connected to your system.

Factory Restore a Microphone Adapter

on page 146

Microphone Adapter Ports

The following illustration and table explain the ports on the microphone adapter.

Setting Up the System

Microphone Adapter Port Descriptions

Ref. Number

Port Description

USB 2.0 debugging port

Polycom microphone Walta-Walta connector

Power

Link-local network (LLN) connection

LED status indicator

Factory restore pinhole

LED Status Indicators for the Microphone Adapter

Use the LED to get information on the state of your microphone adapter.

Microphone Adapter LED Status Indicators

Indicator Status

Blinking white Powering on

Setting Up the System

Indicator

Solid white

Blinking blue

Solid blue

Blinking green and blue

Status

Ready to pair

Paired successfully

Update in progress

Factory restore in progress

Powering the Microphone Adapter On and Off

When plugged in to a power source, the microphone adapter is on. The system doesn’t have a power button, so you must unplug the power cable to power it off.

Don’t power off the system during maintenance activities (for example, while a software update is in progress).

Connecting Microphones to the Microphone Adapter

To connect a non-IP Polycom microphone to the microphone adapter, use a RealPresence Group Series microphone array Walta-Walta cable. You can then daisy chain up to three more microphones to the one directly connected to the adapter.

For more information, see the Polycom Microphone IP Adapter Setup Sheet .

Move a Microphone Adapter to Another Location

You might need to move your microphone adapter from a system in one room to a system in another room.

Procedure

In the system web interface, unpair the microphone adapter from the system.

Move the microphone adapter to the new location.

Use the system web interface to pair the microphone adapter to the new system.

Related Links

Unpair an IP Device

on page 23

Configuring General Settings

Topics:

▪

Name the System and Room

▪

Provide Contact Information

▪

Set the Date and Time

▪

Set the System Location

▪

Set the Local Interface Language

▪

Configure Sleep Settings

▪

Configure Out of Office Settings

▪

Change Studio X50 and Studio X30 LED Bar Brightness

▪

Change the Conferencing Partner Application

▪

Set the Conferencing Provider to Device Mode

▪

Disable Poly Device Mode

▪

System Usage Data Collected by Poly

General settings include your system name, location, and language preferences.

Name the System and Room

Name your system and assign it a room name.

The room name displays on call participants’ screens.

Procedure

In the system web interface, go to General Settings > System Settings .

Edit the Device Name , Room Name , or both.

The system supports double-byte characters. The Device Name field accepts all alphanumeric and special character formats (including foreign language characters) and has a maximum limit of

40 characters.

Select Save .

Provide Contact Information

Enter contact information for your system so that users know whom to call when they need assistance.

Procedure

In the system web interface, go to General Settings > My Information .

Go to Contact Information .

Configure the following settings:

Configuring General Settings

▪ Contact Person

▪ Contact Number

▪ Contact Email

▪ Contact Fax

▪ Tech Support : Specifies a second contact in case someone needs additional support.

▪ Site

▪ Organization

▪ City

▪ State/Province

▪ Country

Select Save .

Set the Date and Time

Change the date and time settings in the system web interface.

Procedure

In the system web interface, go to General Settings > Date and Time .

Configure the following settings (your changes save automatically):

Setting

Date Format

Time Format

Auto Adjust for Daylight Saving Time

Time Zone

Time Server

Primary Time Server Address

Secondary Time Server Address

Current Date and Current Time

Description

Specifies how the date displays.

Specifies how the time displays.

When enabled, the system clock automatically adjusts for daylight saving time.

Specifies the time difference between GMT and your location.

Specifies if you want to automatically or manually configure the system to use a time server. You can also select Off to manually enter the date and time.

Specifies the address of the primary time server your system uses when you set Time Server to

Manual .

Specifies the address of the time server your system uses when the Primary Time Server

Address doesn’t respond. This is an optional field.

If you set Time Server to Manual or Auto , the system doesn’t display these settings.

If you set Time Server to Off , you can configure

Current Date and Current Time .

Configuring General Settings

Set the System Location

Specify the country and country code where the system is located.

Procedure

In the system web interface, go to General Settings > My Information .

Go to Location .

Configure the following settings (your changes save automatically):

Setting

Country

Description

Specifies the country where the system is located.

Changing the country automatically adjusts the country code associated with your system.

Country Code Displays the country code associated with the system location.

Set the Local Interface Language

Change the language that users see on the system local interface.

Procedure

In the system web interface, go to General Settings .

Select System Language and choose a language.

Configure Sleep Settings

Configure when you want your device to go to sleep after a period of inactivity. Sleep mode can help prevent monitor burn-in.

Procedure

In the system web interface, go to General Settings > System Settings .

Configure the following settings:

Setting

Display

Description

Choose if the system displays a black screen or a no signal message.

Configuring General Settings

Setting

Time Before System Goes to Sleep

Description

▪ Select how long the device can be idle before it goes to sleep.

▪ Select Off to disable system sleep mode.

Enable Mic Mute in Sleep Mode Select the check box to mute your microphones while the system is asleep.

Select Save .

Configure General Audio Settings

on page 95

Configure General Camera Settings

on page 109

Configure Out of Office Settings

Configure when your system goes to sleep after normal office hours. The system goes to sleep 3 minutes after out of office hours begin.

Putting the system to sleep prevents screen burn-in and excess power consumption.

Procedure

In the system web interface, go to General Settings > System Settings .

Select the Out of Office Hours check box and configure the following settings:

Setting

Start Time

End Time

Select Save .

Description

When out of office hours begin

When out of office hours end

Change Studio X50 and Studio X30 LED Bar

Brightness

If you’re sitting close to the system and monitor, bright LEDs can affect the video white balance, causing odd coloration of the video output.

To correct issues such as this, adjust your system's LED bar brightness.

Procedure

In the system web interface, go to General Settings > System Settings .

Slide the LED Bar Brightness slider to the left to lower the brightness and to the right to increase the brightness.

Select Save .

Configuring General Settings

Change the Conferencing Partner Application

Change your conferencing partner to use the partner’s native conferencing app on your system to make and receive calls.

When you change the conferencing provider, the system retains previously configured settings. It also updates the provider setting for the Zero Touch Onboarding (ZTO) profile associated with your system.

Procedure

In the system web interface, go to General Settings > Provider .

Select the provider you want to change to.

Select Save , then select Restart .

The system restarts and launches the selected conferencing provider application.

Related Links

Reset System Settings on page 142

Set the Conferencing Provider to Device Mode

Choosing Device Mode as your provider locks your system in Poly Device Mode. When you set the conferencing provider to Device Mode, the local interface displays only the Device Mode interface.

Connect the system to your network using an Ethernet cable, and complete the initial system setup. The system requires an active network connection after switching your provider to Device Mode.

Changing the provider to Device Mode disables Airplay and Miracast in the system web interface.

Procedure

In the system web interface, go to General Settings > Provider .

In the Provider drop-down menu, choose Device Mode .

Select Save , then select Restart .

The system restarts and launches Device Mode. Connect a computer to the system to join meetings or place calls using the system as an audio and video peripheral.

Disable Poly Device Mode

Disable Device Mode to stop the system from being used as an external camera, microphone, and speaker for a USB-connected laptop.

Disabling Device Mode requires a system restart.

Procedure

In the system web interface, go to General Settings > System Settings > Collaboration Tools .

Clear the Enable Device Mode check box and select Save .

Configuring General Settings

System Usage Data Collected by Poly

By default, your system sends usage data to Poly to help improve its products and services.

For information about the data that Poly collects, see the system Privacy Guide .

Send Usage Data to Polycom

You can help Polycom improve its products and services by allowing the collection of usage data from your system.

With your agreement, the system sends the following information to Polycom Cloud Services and the

Device Analytics service:

▪ Basic device information, including hardware and software versions

▪ Basic device configuration data

▪ Data and statistics related to device or feature usage

▪ Device health data, including CPU and memory usage

Procedure

In the system web interface, go to Servers > Cloud > Preferences .

Click the link to read the “Terms and Conditions”.

Select the check box to agree to the data collection.

Using a Provisioning Service

Topics:

▪

Download a Provisioning Template Configuration File

▪

Provisioning services, such as Poly Lens or Polycom RealPresence Resource Manager, enable you to deploy enterprise-wide configurations to your systems.

You can use a provisioning service to perform the following actions with your system and some of its paired devices:

▪ Automatically configure settings

▪ Automatically update software

Remember the following when you register your system to a provisioning service:

▪ Provisioned settings are read-only in the system web interface. Settings that are dependent on provisioned values are read-only or unavailable.

▪ The system automatically checks for and runs software updates every time it restarts and at an interval set by the service.

▪ If a registered system fails to detect the service when it restarts or checks for updates, an alert displays on System Status .

▪ If the system loses registration with the service, it continues to use the most recent configuration it received.

▪ The system looks for provisioning options during initial system setup in the following order: Zero

Touch Onboarding, Poly Lens, then DHCP. If the system doesn’t find provisioning information for an option, it automatically goes to the next one.

Note: To maintain call connection, you can't configure provisioning settings during a call.

For a list of configuration parameters, see the Poly VideoOS Configuration Parameters Reference Guide on the Poly Documentation Library .

Related Links

Updating Software

on page 135

PKI Certificates

on page 69

Choose How to Get Software Updates

on page 136

Using a Provisioning Service

Register the System with RealPresence Resource

Manager Provisioning Service

Before you can provision a system, you must register it with a provisioning service.

Note: Make sure to configure your provisioning server (for example, RealPresence Resource Manager) ahead of time so that it recognizes and works with your endpoint.

For information on how to provision your system with RealPresence Resource Manager, see the Polycom

RealPresence Resource Manager System Operations Guide .

Procedure

In the system web interface, go to Servers > Provisioning Server .

Select Enable Provisioning .

Select Load Discovered Information .

The registration fields update automatically if your system detects a provisioning server.

Optional: If your system didn’t detect a provisioning server, complete the following fields (contact your network administrator for help):

Setting Description

Authentication Type

Server Address

Domain Name

The type of authentication the system uses to connect to the provisioning server.

Address of the system running the provisioning service. The format is https://< server >/ucservice . For example, https:// video.myrpp.poly.com/ucservice .

Domain for registering with the provisioning service. This option doesn’t display if you select Basic as the authentication type.

User Name User ID for registering with the provisioning service.

Password Password for registering with the provisioning service.

Select Save .

Verify that Registration Status changes from Pending to Registered .

It might take a minute or two for the status to change.

Related Links

Check Provisioning Results on page 159

Complete Setup with Provisioning

on page 20

Downgrading Software on page 140

RealPresence Resource Manager Provisioning Fails After Downgrading Software

on page 167

Using a Provisioning Service

Download a Provisioning Template Configuration File

Template configuration files show how parameters are set on your system. You can use this template to modify parameters and import the changes to your provisioning server.

If you’re provisioning your system with a RealPresence Resource Manager system, you can use the template to create a UC endpoint configuration profile to associate with your systems. For more information, see the Polycom RealPresence Resource Manager System Operations Guide .

Procedure

In the system web interface, go to Servers > Provisioning Server .

Select Download Profile Template .

The template saves to your local device as a .cfg

file.

Related Links

Complete Setup with Provisioning

on page 20

Register the System with the Poly Lens Provisioning

Service

Provision your system with Poly Lens to easily configure and manage your systems.

For information on how to provision your system with Poly Lens, see the Poly Lens Help Documentation .

Procedure

In the system web interface, go to Servers > Provisioning Server .

Select Enable Provisioning .

In the Authentication Type field, select Basic .

Optional: If your system didn’t detect a provisioning server, complete the following fields (contact your network administrator for help):

Setting Description

Server Address Address of the system running the provisioning service.

User Name User ID for registering with the provisioning service.

Password Password for registering with the provisioning service.

Select Save .

Verify that Registration Status changes from Pending to Registered .

It might take a minute or two for the status to change.

Using a Provisioning Service

Register the System Using DHCP Auto Discovery

You can use DHCP to automatically register your system to a provisioning service before initial system setup or after a system reset.

The system looks for option number 160 and 66 (in that order) in the response received from the DHCP server. The DHCP server should send address information that matches one of the address formats.

Procedure

» Configure your DHCP server to send the username, password, and URL of your provisioning service in the following format:

▪ For Polycom RealPresence Resource Manager use https://

<shareduserID>:<sharedpassword>@<server>/ucservice

For example, https://mySharedID:[email protected]/ucservice

▪ For Poly Lens use https://

For example, https://

ServerUser:[email protected]

Configuring Network Settings

Topics:

▪

Configuring Wired LAN Settings

•

LLDP and LLDP-MED Support

▪

Configure Wi-Fi Settings

▪

Configure Network Quality Settings

▪

Configure H.323 Settings

▪

Configure SIP Settings

•

AS-SIP Settings

▪

Enable Point-to-Point Call Escalation to a RealPresence DMA Conference Call

▪

Wireless Devices

Network settings include the system primary (wired LAN) and secondary (Wi-Fi) network configurations.

You also can register your system with SIP and H.323 for calling.

Configuring Wired LAN Settings

You can set the wired LAN properties for your system.

on page 164

Automatically Obtain IPv4 Address Settings

Your system by default gets its IP address information automatically. If this behavior is turned off, you can turn it back on.

You must have a DHCP server deployed in your environment.

Procedure

In the system web interface, go to Network > LAN Network > IP Addresses .

For IP Address , select Obtain IP address automatically .

Some of your IP address settings populate automatically and are read-only.

Select Save .

Manually Configure IPv4 Address Settings

You can manually specify the system’s IPv4 address settings.

Procedure

In the system web interface, go to Network > LAN Network > IP Addresses .

For IP Address , select Enter IP address manually .

Configuring Network Settings

Configure the following settings:

Setting

Your IP Address is

Subnet Mask

Default Gateway

Description

Specifies the system IP address.

Specifies the subnet mask assigned to your system.

Specifies the default gateway assigned to your system.

Select Save .

Automatically Obtain IPv6 Address Settings

You can enable your system to use IPv6 addresses and get IP address information automatically.

You must have a DHCP server deployed in your environment.

Warning: If your network environment only supports IPv6, you must manually configure a static IPv4 address. For example, manually configure the IPv4 IP address to 192.168.0.4.

Procedure

In the system web interface, go to Network > LAN Network > IP Addresses .

Select the Enable IPV6 checkbox.

For IP Address , select Obtain IP address automatically .

Optional: Select the Enable SLAAC checkbox to enable the system to use stateless address autoconfiguration (SLAAC) to automatically obtain IP address.

Manually Configure IPv6 Address Settings

You can manually configure the system’s IPv6 address settings.

Warning: If your network environment only supports IPv6, you must manually configure a static IPv4 address. For example, manually configure the IPv4 IP address to 192.168.0.4.

Procedure

In the system web interface, go to Network > LAN Network > IP Addresses .

Select the Enable IPV6 checkbox.

For IP Address , select Enter IP address manually .

Configure the following settings:

Setting

Link-Local

Description

Specifies the IPv6 address to use for local communication within the subnet.

Configuring Network Settings

Setting

Site-Local

Global Address

Default Gateway

Description

Specifies the IPv6 address to use for communication within the site or organization.

Specifies the IPv6 internet address.

Specifies the default gateway assigned to your system.

Select Save .

Manually Assign a Host Name and Domain Name

You can manually enter the host name and domain name for your system. You also can modify these settings even if your network automatically assigns them.

Procedure

In the system web interface, go to Network > LAN Network > LAN Options .

Enter or modify the system Host Name .

Indicates your system name. If the system discovers a valid name during setup or a software update, the system automatically creates the host name. However, if an invalid name is found, such as a name with a space, the system creates a host name using the following format:

SystemType-xxxxxx , where xxxxxx is a set of random alphanumeric characters.

IPv4 networks : The system sends the host name to the DHCP server to attempt to register the name with the local DNS server or look up the domain where the system is registered (if supported).

Optional: Enter or modify the Domain Name that the system belongs to.

Select Save .

Manually Configure DNS Settings

You can manually configure the DNS server settings for your system.

If your system gets its IP address automatically using DHCP, you can’t configure these settings. They display as read-only.

Procedure

In the system web interface, go to Network > DNS .

Enter the DNS server addresses your system uses (you can enter up to four addresses).

Select Save .

Configure System VLAN Settings

You can configure your system’s virtual LAN (VLAN) settings.

Note: VLAN isn’t supported in IPv6 environments.

Procedure

In the system web interface, go to Network > LAN Network > LAN Options .

Configuring Network Settings

Optional: Select the Enable LLDP check box so that the system can advertise itself on the network using Link Layer Discovery Protocol (LLDP).

If you enable LLDP and then enter a VLAN ID, the VLAN ID you enter supersedes the autodiscovered VLAN ID from LLDP.

Select the 802.1p/Q check box and enter a VLAN ID .

You can use values from 1 to 4094 .

Enter a Video Priority to set the link layer priority of video traffic on the wired LAN.

Video traffic is RTP traffic consisting of video data and associated RTCP traffic. You can use any value from 0 to 7 , although Poly recommends not using 6 and 7 .

Enter an Audio Priority to set the link layer priority of audio traffic on the wired LAN.

Audio traffic is RTP traffic consisting of audio data and associated RTCP traffic. You can use any value from 0 to 7 , although Poly recommends not using 6 and 7 .

Enter a Control Priority to set the link layer priority of control traffic on the wired LAN.

Control traffic consists of control information associated with a call:

▪ H.323

: H.225.0 Call Signaling, H.225.0 RAS, H.245, Far-End Camera Control (FECC)

▪ SIP : SIP Signaling, FECC, Binary Floor Control Protocol (BFCP)

You can use any value from 0 to 7 , although Poly recommends not using 6 and 7 .

Select Save .

Related Links

LLDP and LLDP-MED Support

on page 45

Configure System 802.1X Settings

You can configure your system to use 802.1X authentication when connecting to the wired LAN.

Install the PKI certificates on your system required for authenticating with your network.

Note: 802.1X isn’t supported in IPv6 environments.

The system supports the following authentication protocols:

▪ EAP-MD5

▪ EAP-TLS

▪ EAP-TTLS

◦ EAP-MSCHAPv2

◦ EAP-GTC

▪ EAP-PEAPv0 (MSCHAPv2)

◦ EAP-MSCHAPv2

◦ EAP-GTC

Procedure

In the system web interface, go to Network > LAN Network > LAN Options .

Select the Enable EAP/802.1X

check box.

Select an EAP/802.1X authentication method.

Optional: For EAP-TTLS or EAP-PEAPv0, choose an EAP/802.1X Phase 2 Authentication .

Configuring Network Settings

Enter an EAP/802.1X Identity for your system.

You can’t leave this field blank.

Enter an EAP/802.1X Password for your system.

This setting is required when you use EAP-MD5, EAP-PEAPv0, or EAP-TTLS.

Select Save .

Related Links

PKI Certificates

on page 69

Configure Wired LAN Options

You can configure other LAN properties for your system in the local interface or the system web interface.

Procedure

In the system web interface, go to Network > LAN Network > LAN Options .

Configure the following settings:

Setting

Autonegotiation

(under General Settings in the local interface)

LAN Speed

(under General Settings in the local interface)

Duplex Mode

(under General Settings in the local interface)

Ignore Redirect Messages

Description

Specifies whether the system should automatically negotiate the LAN speed and duplex mode per

IEEE 802.3 autonegotiation procedures. If you enable this setting, the system sets LAN Speed and Duplex Mode to read-only.

Poly recommends that you use autonegotiation to avoid network issues.

Specifies whether to use 10 Mbps , 100 Mbps , or

1000 Mbps for the LAN speed. Note that the switch must support the speed you choose. If you enable the Autonegotiation setting, this setting is readonly.

Specifies the duplex mode to use. Note that the switch must support the speed you choose. If you enable the Autonegotiation setting, this setting is read-only.

Enables the system to ignore ICMP redirect messages.

Polycom recommends that you enable this setting in most circumstances.

Configuring Network Settings

Setting

ICMP Transmission Rate Limit (millisec)

Generate Destination Unreachable Messages

Respond to Broadcast and Multicast Echo

Requests

Description

Specifies the minimum number of milliseconds between transmitted packets. Enter a number between 0 and 60000 . The default value of 1000 means the system sends 1 packet per second. If you enter 0 , the system disables the transmission rate limit.

This setting applies only to “error” ICMP packets.

This setting has no effect on “informational” ICMP packets, such as echo requests and replies.

Generates an ICMP Destination

Unreachable message if the system can’t deliver a packet to its destination for reasons other than network congestion.

When enabled, your system sends an ICMP Echo

Reply message in response to a broadcast or multicast Echo Request that isn’t specifically addressed to the system.

Select Save .

LLDP and LLDP-MED Support

Link Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol Media Endpoint Discovery

(LLDP-MED) are supported on your systems. LLDP is a vendor-neutral link layer protocol in the Internet

Protocol Suite used by network devices to advertise their identity and capabilities on an IEEE 802 local area network (LAN). This protocol runs over the data-link layer only, allowing connected systems running different network layer protocols to discover information about each other. LLDP-MED is an extension of

LLDP.

Examples of applications that use information discovered by LLDP include:

• Network topology - A network management system (NMS) can accurately represent a map of the network topology.

• Inventory - A management system can query a switch to learn about all the devices connected to that switch. The LLDP protocol is formally specified in standards document IEEE 802.1AB.

LLMP-MED Information Discovery

LLDP-MED enables the following information discovery for your systems:

• Auto discovery of LAN policies enabling plug and play networking

• Inventory management, which allows network administrators to track their network devices.

Configuring Network Settings

Behavior When LLDP is Enabled

When LLDP is enabled on a system, it discovers VLANs advertised by the network switch and automatically configures the system for one of the VLANs. If the room system discovers any of the following VLAN types in LLDP data from the network switch, the system automatically configures itself for one of them. The chosen VLAN type is based on the order of precedence, as follows:

• Video Conferencing VLAN

• Voice VLAN

• Voice Signaling VLAN

If none of the above VLAN types are found, the room system configures itself for the default or native

LAN of the switch port to which it is connected.

LLDP packets are transmitted regularly so that the network switch (and the neighboring endpoints) are aware of the system presence on the network.

Enable LLDP

Enable Link Layer Discovery Protocol (LLDP) to automatically configure your system to a VLAN with data received from your network switch.

Procedure

In the system web interface, go to Network > LAN Network > LAN Options .

Select the Enable LLDP check box so that the system can advertise itself on the network using

LLDP.

If you enable LLDP and then enter a VLAN ID, the VLAN ID you enter supersedes the autodiscovered VLAN ID from LLDP.

Select Save .

Configure Wi-Fi Settings

In addition to a LAN, you can also connect your system to a Wi-Fi network so that guests can share content to the system using an AirPlay-certified device or the Polycom Content App.

Procedure

In the system web interface, go to Network > Wi-Fi Network .

From the Choose Network Type drop-down menu, select Wi-Fi .

Do one of the following:

▪ Select a network from Available Wi-Fi Networks . (The system lists networks in order of signal strength.)

▪ Enter the network name in the SSID field.

Selecting a new SSID erases the previous SSID and relevant Wi-Fi settings from the system.

Configure the following settings:

Available settings vary with your selections.

Configuring Network Settings

Setting

Security

Key (Passphrase/PSK)

EAP Method

Phase 2 Authentication

User Name

Password

IP Address

Description

Specifies the encryption protocol:

▪ None

▪ WEP

▪ WPA/WPA2/FT PSK

▪ 802.1x EAP

Specifies an encryption passphrase (like a password) for the Wi-Fi network.

You must enter the passphrase to connect to the Wi-Fi network.

Specifies the extensible authentication protocol (EAP) for WPA-Enterprise

(802.1xEAP):

▪ PEAP

▪ TLS

▪ PWD

Specifies Phase 2 authentication method:

▪ MSCHAPV2

▪ GTC

Specifies the login user name for WPA-Enterprise (802.1xEAP).

Specifies the login password for WPA-Enterprise (802.1xEAP).

▪ To set your system Wi-Fi network IP address, select Obtain IP address automatically . (You must have a DHCP server in your environment to use this option.)

▪ To enter a specific Wi-Fi network IP address, select Enter IP address manually .

Your IP Address is

Subnet Mask

Default Gateway

DNS Server

Specifies the IP address for the Wi-Fi network.

This setting is read-only if your system gets its IP address automatically.

Specifies the subnet mask address for the Wi-Fi network.

This setting is read-only if your system gets its IP address automatically.

Specifies the IP gateway for the Wi-Fi network.

This setting is read-only if your system gets its IP address automatically.

Specifies the DNS server address for the Wi-Fi network.

This setting is read-only if your system gets its IP address automatically.

DNS Alternate Server Specifies the alternate DNS server address for the Wi-Fi network.

This setting is read-only if your system gets its IP address automatically.

Configuring Network Settings

Configure Network Quality Settings

You can specify how your system responds to network quality issues by controlling how your network handles packets during video calls.

Procedure

In the system web interface, go to Network > LAN Network > Network Quality .

Configure the following settings:

Setting

Quality Preference

Type of Service

Video

Audio

Control

Description

Specifies which video stream has precedence when attempting to compensate for network loss:

▪ Both people and content streams

▪ People streams

▪ Content streams

The stream option you select experiences less quality degradation during network loss compensation than the other. Choosing Both means each stream experiences roughly equal degradation.

This setting is not available if you enable

Automatically Adjust People/Content

Bandwidth .

Specifies the type of service (ToS), which lets you prioritize packets sent to your system for video, audio, Far End Camera Control (FECC), and

OA&M:

▪ IP Precedence : Represents a priority level between 0 and 7.

▪ DiffServ : Represents a priority level between 0 and 63.

Specifies the IP Precedence or DiffServ priority level for video RTP and associated RTCP traffic.

Specifies the IP Precedence or DiffServ priority level for audio RTP and associated RTCP traffic.

Specifies the IP Precedence or DiffServ priority level for control traffic on the following channels:

▪ H.323

: H.225.0 Call Signaling, H.225.0 RAS, H.

245, and FECC

▪ SIP : SIP Signaling, FECC, and Binary Floor

Control Protocol (BFCP)

(The system enables FECC by Allow Other

Participants in a Call to Control Your Camera .)

Configuring Network Settings

Setting

OAM

Maximum Transmission Unit Size

Maximum Transmission Unit Size Bytes

Enable Lost Packet Recovery

Enable RSVP

Dynamic Bandwidth

Maximum Transmit Bandwidth

Maximum Receive Bandwidth

Description

Specifies the IP Precedence or DiffServ value for traffic unrelated to video, audio, or FECC.

Specifies whether to use the default Maximum

Transmission Unit (MTU) size for IP calls or let you select it.

Specifies the MTU size (in bytes) used in calls.

▪ If video quality is poor or you experience network errors, packets might be too large.

Decrease the MTU.

▪ If the network is burdened with unnecessary overhead, packets might be too small. Increase the MTU.

If you enable this setting, the system uses the Lost

Packet Recovery (LPR) protocol to help compensate for packet loss if it occurs.

If you enable this setting, the system can use the

Resource Reservation Setup Protocol (RSVP) to request that routers reserve bandwidth along an IP connection path. (To use this feature, the near and far site must support RSVP.)

Enable this setting if you want the system to automatically determine the optimal call rate.

Specifies the maximum transmit call rate between

64 kbps and the system’s maximum line rate.

Use this setting when the system connects to the network using an access method with different transmit and receive bandwidths.

Specifies the maximum receive call rate between

64 kbps and the system’s maximum line rate.

Use this setting when the system connects to the network using an access method with different transmit and receive bandwidths.

Select Save .

Configure H.323 Settings

If your network uses an H.323 gatekeeper, the system can automatically register its H.323 name and extension. Others can then call the system using its H.323 name or extension instead of its IP address.

Procedure

In the system web interface, go to Call Configuration > H.323

Configure the following settings:

Setting

Enable IP H.323

Registration Status

H.323 Name

H.323 Extension (E.164)

Use Gatekeeper

Require Authentication

User Name

Password

Configuring Network Settings

Description

Enables the system to display H.323 settings and configuration options.

Read-only setting shows if your system is registered with an H.323 gatekeeper.

How gatekeepers and gateways identify your system. You can make point-to-point calls using H.

323 names if both systems are registered to a gatekeeper.

The H.323 Name is the same as the device name unless you change it.

Your organization’s dial plan might define the name you can use.

You can place point-to-point calls using this extension if both systems are registered with a gatekeeper. Gatekeepers and gateways also use the extension to identify your system.

Your organization’s dial plan might define the extensions you can use.

Specifies if you want to use a gatekeeper for H.323

services.

▪ Off : Calls don’t use a gatekeeper.

▪ Auto : System tries to automatically find an available gatekeeper.

▪ Specify : Calls use the specified gatekeeper.

You must select this setting to enable H.235

Annex D Authentication.

If you don’t configure this setting to Off , a registration status displays.

Enables support for H.235 Annex D Authentication.

When you enable H.235 Annex D Authentication, the H.323 gatekeeper ensures that only trusted H.

323 endpoints can access the gatekeeper.

This setting is available when you set Use

Gatekeeper to Specify .

Specifies a user name if the gatekeeper requires authentication for registration.

Specifies a password if the gatekeeper requires authentication for registration.

Configuring Network Settings

Setting

Current Gatekeeper IP Address

Primary Gatekeeper IP Address

Description

Displays the IP address that the gatekeeper is using.

If you select Off for the Use Gatekeeper field, the

Current Gatekeeper IP Address field doesn’t display.

The gatekeeper IPv4 address the system registers with. As part of the registration process, the gatekeeper might return alternate gatekeepers. If your system loses communication with the primary gatekeeper, your system registers with the alternate gatekeeper but continues to poll the primary gatekeeper. If the system re-establishes communication with the primary gatekeeper, it unregisters from the alternate gatekeeper.

▪ If you set the Use Gatekeeper field to Off , the

Primary Gatekeeper IP Address field doesn’t display.

▪ If you use an automatically selected gatekeeper, this area displays the gatekeeper’s

IP address.

▪ If you specify a gatekeeper, enter the gatekeeper IP address or name (for example,

10.11.12.13

or gatekeeper.companyname.usa.com

Select Save .

Related Links

Configuring Call Settings

on page 90

Configure SIP Settings on page 51

Configure SIP Settings

If your network supports SIP, you can use it to connect calls on your system.

Procedure

In the system web interface, go to Call Configuration > SIP .

Configure the following settings:

Setting

Enable SIP

Registration Status

Description

Enables the system to make and receive SIP calls.

Read-only setting shows if your system is registered to a SIP server.

Setting

SIP Server Configuration

Transport Protocol

Force Connection Reuse

Configuring Network Settings

Description

Specifies whether to automatically or manually set the SIP server’s IP address.

If you select Auto , you can’t edit the Transport

Protocol , Registrar Server , and Proxy Server settings. If you select Specify , you can edit these settings.

Sets the protocol your system uses for SIP signaling (your SIP network determines which protocol is required).

▪ Auto : Enables automatic negotiation of protocols in the following order: TLS, TCP, and

UDP. This is applicable only when using a proxy server.

For unregistered systems, if you set the

Transport Protocol to Auto , the order is TCP then UDP. TLS is not included.

▪ TLS : Provides secure SIP signaling. TLS is available only when you register your system with a SIP server that supports it. If you set this option, your system ignores TCP/UDP port

5060. Poly recommends you use the TLS setting when possible.

▪ TCP : Provides reliable transport via TCP.

▪ UDP : Provides best-effort transport via UDP.

Disabled by default (recommended).

When disabled, the system uses an ephemeral source port for outgoing SIP messages. When enabled, the system uses the active SIP listening port as the source port (5060 or 5061, depending on the negotiated SIP transport protocol in use).

You can use this setting to establish correct operation with remote SIP peer devices, which require that the source port match the contact port in SIP messages.

Setting

BFCP Transport Preference

Sign-in Address

User Name

Password

Registrar Server

Configuring Network Settings

Description

Controls content sharing negotiation behavior.

When you use the Binary Floor Control Protocol

(BFCP), a relationship is established between the floor control server and its clients. What you set here determines how network traffic flows between the server and clients.

Note: TCP is typically slightly slower but more reliable than UDP. Some deployments don’t support it, such as with session border controllers (SBCs).

▪ Prefer UDP : (Default) Starts resource sharing using UDP but falls back to TCP if needed.

▪ Prefer TCP : Starts resource sharing using TCP but falls back to UDP if needed.

▪ UDP Only : Shares resources only using UDP. If

UDP is unavailable, your system can’t share content in a separate video stream.

▪ TCP Only : Shares resources only through TCP.

If TCP is unavailable, your system can’t share content in a separate video stream.

The SIP address or name of the system (for example, [email protected]

If you leave this blank, the system IP address is used for authentication.

The user name for authenticating your system with a SIP registrar server (for example, marySmith ).

If the SIP proxy requires authentication, you can’t leave the user name and password blank.

The password associated with the user name for authenticating your system with a SIP registrar server.

The IP address or FQDN of the SIP registrar server. If you register a remote system with an edge server, use that server’s FQDN.

By default, the system sends SIP signaling to ports

5060 (TCP) and 5061 (TLS) on the registrar server.

Enter the address and port using the following format: <IP_Address>:<Port> .

The <IP_Address> can be an IPv4 address or an FQDN such as servername.company.com:5060 .

Configuring Network Settings

Setting

Proxy Server

Description

The IP address or FQDN of the SIP proxy server. If you leave this field blank, the system uses the registrar server address. If you also leave the SIP registrar server field blank, there is no SIP proxy server to configure.

By default, the system sends SIP signaling to ports

5061 (TLS) and 5060 (TCP) on the proxy server.

The syntax for this setting is the same as the registrar server.

Specifies the type of SIP registrar server you’re using.

Registrar Server Type

Select Save .

Related Links

Configuring Call Settings

on page 90

Configure H.323 Settings on page 49

Call Encryption on page 77

AS-SIP Settings

Your system supports the Assured Services Session Initiation Protocol (AS-SIP), which meets the requirements defined in Unified Capabilities Requirements (UCR) 2013 Change 3.

Developed by the U.S. Department of Defense (DoD), AS-SIP includes secure signaling and media encryption, Quality of Service (QoS), and IPv6 support.

Enable AS-SIP Settings

In the AS-SIP settings, you can choose the default network domain for your system’s outbound calls. You also can add and delete custom domains.

Procedure

In the system web interface, go to Call Configuration > SIP .

Select the Enable AS-SIP check box.

Add a Network Domain for Outbound Calls

While your system’s AS-SIP outbound call settings include the standard DoD network domains Defense

Switched Network (DSN) and Unified Capabilities (UC), you can also add a custom domain.

Procedure

In the system web interface, go to Call Configuration > SIP .

Under Outbound Precedence Configuration , select Add .

Enter the name of the domain you want to add and select Save .

Configuring Network Settings

Delete a Network Domain for Outbound Calls

You can remove a custom network domain associated with your system’s AS-SIP settings. You can’t delete the preconfigured domains DSN and UC.

Procedure

In the system web interface, go to Call Configuration > SIP .

Under Outbound Precedence Configuration , locate the domain you want to remove and select

Delete in the same row as the domain.

Select the Default Network Domain for Outbound Calls

You can choose the default network domain for your system’s AS-SIP outbound calls.

Procedure

In the system web interface, go to Call Configuration > SIP .

Under Outbound Precedence Configuration , select a domain from the list (for example, dsn ).

Enable Point-to-Point Call Escalation to a

RealPresence DMA Conference Call

When you register your system with a Polycom RealPresence DMA system, you can enable a point-topoint call on your system to escalate to an impromptu conference call on an external Polycom MCU.

You must configure your system’s SIP settings to register with your RealPresence DMA system.

For information about working with a RealPresence DMA system, specifically SIP conference factories, see the Polycom RealPresence DMA Operations Guide .

Procedure

In the system web interface, go to Call Configuration > SIP .

Go to Adhoc Call Escalation .

Select the Enable automatic call escalation of point-to-point to an external MCU check box.

For the Conference Factory ID , enter the ID associated with the SIP conference factory on your

RealPresence DMA system.

Note: The conference factory ID must come from the same RealPresence DMA system your video conferencing system uses for SIP registration. Calls don’t escalate if your

RealPresence DMA system doesn’t recognize the ID you provide.

Select Save .

Calls converted through a RealPresence DMA system gateway (H.323 to SIP or vice versa) don’t join an impromptu conference call.

Configuring Network Settings

Wireless Devices

The system includes Wi-Fi and Bluetooth wireless communication options so your users can discover the system on the network with the Polycom Content App or their AirPlay- or Miracast-certified device. Your remote control also connects to the system using Bluetooth.

You can enable or disable these features as needed.

Note: If you have a no-radio system, wireless connections are unavailable including the Bluetooth remote control.

Specify the Wireless Operating Channel for Miracast-Certified Devices

You can choose the wireless LAN (WLAN) operating channel the system uses for connecting with

Miracast-certified devices. Changing the operating channel can, for example, help minimize network interference and video quality issues when sharing content.

Available operating channels are within the 2.4 GHz signal range. During initial setup, the system picks an operating channel based on the country you choose. If you don’t choose a country during setup, the system selects a random operating channel in the 2.4 GHz signal range.

The listening channel, which is used by the system to advertise it can connect with nearby Miracastcertified devices, is selected automatically in the 2.4 GHz signal range. You can’t configure the listening channel.

For more information on Miracast, see the Poly VideoOS Miracast Performance Technical Reference on the Poly Online Support Center .

Procedure

In the system web interface, go to Security > Wireless Security .

Choose an Operating Channel .

Remember the following when selecting an operating channel:

▪ To avoid content quality issues (such as latency or packet loss), select the same operating channel configured on your wireless access point (WAP).

▪ You can’t change the operating channel during an ongoing content mirroring session.

Enable Miracast Over Infrastructure

Miracast over infrastructure enables devices to communicate with your system using existing network infrastructure, including wired and wireless LAN connections.

▪ Only Windows 10 devices with build 1903 or later support this feature.

▪ The Windows 10 firewall automatically allows inbound TCP ports 7250 and 7236. If a third-party firewall application blocks these ports, you may need to add these two inbound ports.

▪ Your system and the Miracast casting source device must be on the same enterprise network via

Ethernet or a secure Wi-Fi connection

For more information on Miracast, see the Poly VideoOS Miracast Performance Technical Reference on the Poly Online Support Center .

Configuring Network Settings

Procedure

In the system web interface, go to Security > Wireless Security .

Select the Miracast Over Infrastructure check box.

Disable Wireless Options

You can disable the wireless features on your system. Wireless features are enabled by default.

Remember the following when disabling wireless features:

▪ Disabling wireless connectivity turns off screen mirroring with Miracast-certified devices and prevents the system from using Wi-Fi to connect to a secondary network.

▪ Disabling Bluetooth turns off screen mirroring with AirPlay-certified devices and prevents those devices and the Polycom Content App from automatically discovering your system. (You can still connect with the Polycom Content App using the system IP address.)

▪ Disabling Bluetooth also disables your remote control.

Procedure

In the system web interface, go to Security > Wireless Security .

Do one of the following:

▪ Clear the Enable Wireless Connectivity check box.

▪ Clear the Enable Bluetooth check box.

Poly Bluetooth Remote Control on page 23

Update the Poly Bluetooth Remote Control Firmware

on page 140

Securing the System

Topics:

•

Managing System Access

•

Detecting Intrusions

▪

PKI Certificates

▪

Disable the Polycom Content App Port

▪

Disable the Security Code

▪

Enable or Disable Content Saving

▪

System Allow List

•

Call Encryption

▪

H.460 Firewall/NAT Traversal

▪

Set Up a Security Banner

▪

Web Proxies

▪

View Connections to the System

▪

System Port Usage

▪

Wireless Port Usage with Miracast-Certified Devices

Your system includes features and settings to help you meet security requirements.

Related Links

SNMP Reporting on page 154

Managing System Access

An administrator can configure systems to grant access using network accounts that are authenticated through an Active Directory (AD) server such as the Microsoft Active Directory server. In this case, the account information is stored on the AD server and not on the room system. The AD administrator assigns accounts to AD groups, one for the room system admin access and one for user access. For this reason, external authentication is also referred to as Active Directory authentication.

The room system administrator configures the external authentication settings on the system to specify the address of an AD Server for authenticating user logins, AD group for user access, and AD group for admin access on the room system. The system can map only one Active Directory group to a given role.

Users can enter their network account credentials to access the system on the following interfaces:

• Web interface (admin access only)

• Local interface ( user and admin role accounts when Require Login for System Access is enabled; admin accounts when admin-only areas of the local interface are accessed)

When External Authentication is enabled in PKI environments where Always Validate Peer Certificates from Server is enabled on the system, configure the Active Directory Server Address on the system using the address information that is in the Active Directory Server identity certificate. This allows the system to

Securing the System validate the identity certificate. As an example, if the Active Directory Server identity certificate contains its

DNS name only, and no specific IP address, configuring the Active Directory Server Address on the system using the server's IP address results in certificate validation failure, and consequently authentication failure. The system configuration would have to specify the server by DNS name, in this case, to successfully match the server certificate data.

The system local user account is disabled when Enable Active Directory External Authentication is enabled. The admin account is active and usable, however.

Local Accounts

The system stores local account IDs and passwords.

Configure Password Policies

You can specify requirements for administrator, remote access, and SNMP passwords for your system.

Poly strongly recommends that you create an administrator password for your system. Administrators set password policies and minimum requirements.

Procedure

In the system web interface, go to Security > Password Requirements .

Configure the following settings for the Admin Room , Remote Access , or SNMP passwords:

Note: You must configure the Admin Room and Remote Access password settings separately.

Setting

Minimum Length

Require Lowercase Letters

Require Uppercase Letters

Require Numbers

Require Special Characters

Reject Previous Passwords

Minimum Password Age in Days

Maximum Password Age in Days

Description

The minimum number of characters required for a valid password.

The minimum number of lowercase letters required for a valid password.

The minimum number of uppercase letters required for a valid password.

The minimum number of numerals required for a valid password.

The minimum number of special characters required for a valid password. Supported characters include: @ - _ ! ; $ , \ / & . # *

The number of most recent passwords that you can’t reuse. If you set this to Off , all previous passwords are valid.

The minimum number of days before the password can change.

The maximum number of days before the password must change.

Securing the System

Setting Description

Minimum Changed Characters

Maximum Consecutive Repeated Characters

The number of characters that must be different or change position in a new password. For example, if you set this to 3 , 123abc can change to 345cde but not to 234bcd .

The maximum number of consecutive repeated characters allowed in a password. For example, if you set this to 3 , aaa123 is a valid password but aaaa123 is not.

Password Expiration Warning Specifies how many days in advance a warning displays indicating that the password expires soon

(if you set a maximum password age).

Can Contain ID or Its Reverse Form Specifies whether the associated ID or its reverse can be part of a password. If you enable this setting and the ID is admin , passwords admin and nimda are allowed.

Select Save .

Changes to most password policy settings don’t take effect until the next time the password is changed.

Changes take effect immediately for Minimum Password Age in Days , Maximum Password Age in

Days , and Password Expiration Warning .

Create Local Administrator Credentials

You can require local administrator credentials for in-room and remote access to the system.

Passwords for logging in to the system are case sensitive and can’t contain more than 40 characters.

Procedure

In the system web interface, go to Security > Local Accounts .

Configure the following settings:

Setting

Admin ID

Room Password

Remote Access Password

Description

The local administrator account name (default is admin ).

You must enter this password to change administrator settings in the local interface.

The default password is the last six characters of the serial number listed in System Details and on the back of the device.

If you set this option, you must enter this password to access the system through the system web interface or command-line API (SSH or telnet).

This password lets you perform device management tasks, such as updating the system’s software.

Securing the System

Optional: Do one of the following:

• To use the local administrator Room Password for remote logins, leave the Use Room

Password for Remote Access option enabled.

Note: Password requirements for the local administrator password and remote access password must be configured separately.

• If you don’t want to use the local administrator Room Password for remote logins, disable the Use Room Password for Remote Access option.

This setting specifies that the system uses the local administrator Room Password for remote logins. This setting is enabled by default.

Select Save .

Change Administrator Credentials

You can change the administrator username and password to access the system web interface and administrator sections of the local interface.

The default username is admin and the default password is the last six characters of the system’s serial number.

Procedure

In the system web interface, go to Security > Local Accounts .

Enter the new administrator username in the Admin ID field.

Select Change Password .

Enter the current password and then the new password.

Entering an incorrect current password too many times causes the system to automatically log out and close the session.

Select Save .

Configure Account Lockout Settings

Account lockout controls prevent unauthorized access to your system.

Procedure

In the system web interface, go to Security > Local Accounts .

Configure the following settings (your changes save automatically):

Setting

Lock Admin Account after Failed Logins

Description

Specifies the number of failed login attempts allowed before the system locks the account. You can turn this setting Off .

Securing the System

Setting

Admin Account Lock Duration

Reset Admin Account Lock Counter After

Description

Specifies the amount of time an account is locked because of failed login attempts. After this period expires, the system resets the failed login attempts counter to zero, and users can again log in with that account.

Determines how many hours the failed login window lasts. The window is a period of time starting with the first failed login attempt and during which the system counts subsequent failed attempts against the number allowed.

The counter resets to zero at the end of the window

(if the account is not locked because of failed attempts) and after a successful login.

Enable External Authentication

Set up external authentication through Active Directory for your system. You can then access the system with an Active Directory account or the system’s local administrator credentials.

Configure the Domain Name setting on the Network > LAN Network > LAN Options page with your

Active Directory domain.

Note: The system can map only one Active Directory group to a given role.

Procedure

In the system web interface, go to Security > Global Security .

Configure the following settings:

Setting

Enable Active Directory External Authentication

Description

Specifies whether to authenticate users with the

Active Directory server. When you enable Active

Directory authentication, users can log in to the system with their network credentials using this format: domain\user . With this format, users can have accounts on multiple domains.

Securing the System

Setting

Active Directory Server Address

Active Directory Admin Group

Active Directory User Group

Select Save .

Configure System Access Settings

Configure how you and others access the system.

Procedure

In the system web interface, go to Security > Access .

Configure the following settings:

Description

Specifies the Active Directory server’s FQDN or IP address. If you are using subdomains, append port number 3268 as follows: ad.domain.com:

3268 .

You can alternatively use RealPresence Resource

Manager as an Active Directory server and enter its address here.

If you enable Always Validate Peer Certificates from Server on the Certificates page, make sure this value matches what is in the Active Directory server certificate. For example, if you enter the

Active Directory server IP address here, but the certificate only has the server’s FQDN, external authentication fails.

Specifies the Active Directory group whose members should have administrator access to the system. This name must exactly match the name in the Active Directory server for successful authentication.

Specifies the Active Directory group whose members should have user access to the system.

This name must exactly match the name in the

Active Directory server for successful authentication.

Setting Description

Enable Network Intrusion Detection System (NIDS) When you enable this setting, the system creates security log entries when it detects a possible network intrusion.

Enable Web Access

Enable Diagnostics Port Idle Session Timeout

Specifies whether you can access the system using the system web interface.

Specifies whether to allow the diagnostics port to time out and close the active session at the configured time interval of no activity or not. You set the timeout at Idle Session Timeout in Minutes .

Securing the System

Setting

Enable API Port Idle Session Timeout

Enable SNMP Access

Idle Session Timeout in Minutes

Maximum Number of Active Sessions

Description

Specifies whether to allow the API port to time out and close the active session at the configured time interval of no activity or not. You set the timeout at

Idle Session Timeout in Minutes .

Specifies whether to allow SNMP access.

Specifies the number of minutes a session can be idle before it times out.

Specifies the maximum number of users logged in through the system web interface or command-line

API (SSH or telnet).

Max Session Timeout in Minutes Specifies the maximum number of minutes a session can be open before it times out, regardless of session activity.

Minimum TLS Version Specifies the system minimum TLS version. You can restrict your system from using earlier versions of TLS for secure communications. For example, if you set your minimum TLS version to 1.1, you’re disabling TLS 1.0.

Select Save .

Related Links

on page 121

LDAP Directory Server Ignores the Minimum TLS Version Setting on page 166

Detecting Intrusions on page 68

Command-Line API Access for G7500

You can access your G7500 system’s command-line API over SSH, telnet, or through a serial port connection.

Enable Command-Line API Access Over SSH

Use SSH on port 22 if you want encrypted access to the system command-line API.

Procedure

In the system web interface, go to Security > Access .

Select the Enable Legacy API Over SSH check box if it’s cleared.

Select the Enable Telnet Access check box.

Configure the SSH Port Lock

You can limit the number of failed SSH login attempts to your system command-line API to protect against brute-force attacks.

Enable command-line API access over SSH to access these settings.

Securing the System

Procedure

In the system web interface, go to Security > Access .

Configure the following settings:

Setting

Lock SSH Port After Failed Logins

SSH Port Lock Duration

Reset SSH Port Lock Counter After

Description

Specifies the number of failed login attempts allowed before the system locks SSH access to the

API.

Specifies the amount of time that SSH access to the API remains locked due to failed login attempts.

After this period expires, the system resets the failed login attempts counter, and you can again try to log in again.

Specifies the number of hours, starting with the first failed login attempt, during which subsequent failed login attempts are counted against the maximum number allowed ( Lock SSH Port after Failed

Logins ).

The counter resets when the set period of time expires or a user successfully logs in.

Select Save .

Enable Command-Line API Access Over Telnet

Use port 24 or 23 to access the system command-line API using telnet.

Procedure

In the system web interface, go to Security > Access .

Select the Enable Telnet Access check box.

Choose an API Port for telnet connections: 24 (default) or 23 .

Disable the Telnet Password

By default, you must enter a password to connect to the command-line API using telnet. You can disable it.

Procedure

In the system web interface, go to Security > Access .

Clear the Telnet Authentication check box.

Securing the System

Locking the Telnet Port

Other than disabling telnet access to the system command-line API, you can’t restrict telnet access in other ways, such as locking its port for too many failed login attempts (like you can with web or SSH access).

Note: Remember the following about telnet access: A telnet session disconnects after three failed login attempts. If you start a new session, the system allows another three attempts.

Configure Serial Port Settings

You can configure RS-232 serial port settings for your system.

The Studio X50 and Studio X30 don’t have a serial port.

Procedure

In the system web interface, go to General Settings > Serial Ports .

Configure the following settings:

Setting

RS-232 Mode

Description

Specifies the mode used for the RS-232 serial port.

• Off : Disables the serial port.

• Control : Receives control signals from a touchpanel control. Allows any device connected to the RS-232 port to control the system using API commands.

Set these options to the same values configured on the serial device.

Baud Rate

Parity

Stop Bits

Data Bits

RS-232 Flow Control

This setting is read-only.

Specifies if you want to use hardware flow control between the connected device and your system.

Securing the System

Setting

Description

Specifies the credentials necessary for a control system to connect to the RS-232 port.

• Admin password only : (Default) Requires the administrator password (if you set one) when the control system connects.

• User Name/Password : Requires the user name and administrator password (if you set one) when the control system connects.

• None : The system doesn’t require a user name or password when the control system connects.

Note: This setting only displays when you set

RS-232 Mode to Control .

Select Save .

Disable Command-Line API Access

To disable command-line API access to your system, close network ports 22, 23, and 24 and the RS-232 serial port.

Procedure

In the system web interface, go to Security > Access .

Clear the Enable Telnet Access check box.

Network ports 22, 23, and 24 on your system are closed.

In the system web interface, go to General Settings > Serial Ports .

For RS-232 Mode , select Off .

The serial port is closed.

Command-line API access to your system is disabled.

Configure the System Web Interface Port Lock

You can limit the number of failed login attempts to the system web interface to protect against brute-force attacks.

Procedure

In the system web interface, go to Security > Access .

Configure the following settings:

Setting

Lock Port after Failed Logins

Description

The number of failed login attempts allowed before the web interface locks. You can set this to Off .

Securing the System

Setting

Port Lock Duration

Reset Port Lock Counter After

Description

Specifies the amount of time that the web interface remains locked due to failed login attempts. When this period expires, the failed login attempts counter resets and you can try to log in again.

Specifies the number of hours, starting with the first failed login attempt, during which subsequent failed login attempts are counted against the maximum number allowed ( Lock Port After Failed Logins ).

The counter resets when the set period of time expires or a user successfully logs in.

Select Save .

Disable USB Ports

You can configure your system so no one can use its USB ports.

Note: You can’t completely turn off the USB-C port; it still provides power.

If you disable the system’s USB ports, you can’t use the system as an external camera, microphone, and speaker accessory (i.e., Poly Device Mode).

Procedure

In the system web interface, go to Security > Access .

Select Disable All USB Ports .

Detecting Intrusions

When the system detects a possible network intrusion, it logs an entry to the security log.

The Enable Network Intrusion Detection System (NIDS) setting controls the logging behavior. The security log prefix identifies the type of packet detected, as shown in the following table:

Prefix

SECURITY: NIDS/unknown_tcp

SECURITY: NIDS/unknown_udp

SECURITY: NIDS/invalid_tcp

SECURITY: NIDS/invalid_icmp

SECURITY: NIDS/unknown

SECURITY: NIDS/flood

Packet Type

Packet that attempts to connect or probe a closed TCP port

Packet that probes a closed UDP port

TCP packet in an invalid state

ICMP or ICMPv6 packet in an invalid state

Packet with an unknown protocol number in the IP header

Stream of ICMP or ICMPv6 ping requests or TCP connections to an opened TCP port

Securing the System

Following the message prefix, the security log entry includes the time stamp and the IP, TCP, UDP, ICMP, or ICMPv6 headers. For example, the following security log entry shows an unknown_udp intrusion:

2009-05-08 21:32:52 WARNING kernel: SECURITY: NIDS/unknown_udp IN=eth0

OUT= MAC=00:e0:db:08:9a:ff:00:19:aa:da:11:c3:08:00 SRC=172.18.1.80

DST=172.18.1.170 LEN=28 TOS=0x00 PREC=0x00 TTL=63 ID=22458 PROTO=UDP

SPT=1450 DPT=7788 LEN=8

Related Links

Configure System Access Settings

on page 63

PKI Certificates

If your organization uses a public key infrastructure (PKI) for securing network connections, Poly recommends that you have a strong understanding of certificate management and how it applies to your system.

PKI certificates authenticate secure network connections to and from the system. The system uses standard PKI techniques to configure and manage certificates and certificate signing requests (CSRs).

ANSI X.509 standards regulate the certificate characteristics.

Your system can generate CSRs to send to a certificate authority (CA), a trusted entity that validates and officially issues, or signs, PKI certificates. Your system uses those certificates for client and server authentication.

If your system is in an environment without PKI, you don’t need a CA-signed certificate; the system comes with a self-signed certificate for its TLS connections. When you deploy PKI, however, self-signed certificates aren’t trusted and you must use CA-signed certificates.

Root certificates installed on your system automatically transfer to a paired TC8 device. If you delete root certificates from the system, they’re automatically deleted from the TC8. System certificates are unique to each system and don’t transfer to paired devices.

Here are some examples of how you use PKI certificates:

▪ If your environment uses the 802.1X authentication framework for wired connections, create a CSR and install the resulting CA-signed certificate on your system so it’s trusted on the network.

▪ If you want to navigate with a browser over a secure connection to your system web interface, create a CSR and install the resulting CA certificate chain on your system to replace its factoryinstalled certificate, which isn’t trusted.

▪ Provisioning your system using RealPresence Resource Manager in a secure environment.

Note: Your system must have a Host Name in this situation.

Related Links

Using a Provisioning Service on page 36

Configure System 802.1X Settings

on page 43

Securing the System

Create a Certificate Signing Request

If you deploy a PKI in your environment, create a CSR to make sure your system or device is trusted by its network peers.

Note: Only one CSR can exist at a time. After a CSR is generated, get it signed and installed on your system before creating another. If you generate a CSR and generate a second CSR before you install the first one, the device discards the previous one.

Procedure

In the system web interface, go to Security > Certificates .

Select Create Certificate Signing Request (CSR) .

In the Certificate Details form, complete the following fields:

CSR Information

Hash Algorithm

Common Name (CN)

Organizational Unit (OU)

Description

Specifies the hash algorithm for the CSR: SHA-256 (recommended) or SHA-1 (not recommended).

Specifies the system name. This is a required field. Maximum characters: 64 (truncated if necessary).

Poly recommends the following guidelines for this field:

▪ For systems registered in DNS, use the system's FQDN.

▪ For systems not registered in DNS, use the system's IP address.

Specifies the unit of business defined by your organization. Default is blank. Maximum characters: 64.

Note: The system supports only one OU field. If you want the signed certificate to include more than one OU field, you must download and edit the CSR manually.

Organization (O)

City or Locality (L)

State or Province (ST)

Country (C)

SAN: FQDN

SAN: Additional Name

Specifies your organization’s name. Default is blank. Maximum characters: 64.

Specifies the city where your organization is located. Default is blank.

Maximum characters: 128.

Specifies the state or province where your organization is located.

Default is blank. Maximum characters: 128.

Displays the country selected in the setup wizard. You can’t change this setting here.

Specifies the FQDN assigned to the system. This is the same as the

Common Name (CN) , but it isn’t truncated. Default is blank.

Maximum characters: 253.

Specifies an additional name. Default is blank. Maximum characters:

253.

Securing the System

CSR Information Description

SAN: IPv4 Address Default is the IPv4 address of the system. Maximum characters: 15.

User Principle Name (UPN) Specifies the user and domain name to log in to a Windows domain

(for example, [email protected]

). This is the userPrincipalName attribute of the account object in Active

Directory.

Relate this setting to the 802.1X identity and password you specified on the Network > LAN Options page. Default is blank.

Select Create .

If the CSR was created successfully, select CSR Available for Download to download the CSR file to send to a CA, which issues your signed certificate.

Create a TC8 Certificate Signing Request

If you deploy a PKI in your environment, create a CSR to make sure your system or device is trusted by its network peers.

Only one CSR can exist on your device at a time. After you generate a CSR, get it signed and install it on your device before generating another. If you generate a second CSR before you install the first one, the device discards the previous CSR.

Procedure

In the system web interface, go to Security > Certificates .

Select Poly TC8 > Create and Download CSR .

In the Certificate Details form, complete the following fields:

CSR Information

Hash Algorithm

Common Name (CN)

Organizational Unit (OU)

Description

Specifies the hash algorithm for the CSR: SHA-256 (recommended) or SHA-1 (not recommended).

Specifies the system name. This is a required field. Maximum characters: 64 (truncated if necessary).

Poly recommends the following guidelines for this field:

▪ For systems registered in DNS, use the system’s FQDN.

▪ For systems not registered in DNS, use the system’s IP address.

Specifies the unit of business defined by your organization. Default is blank. Maximum characters: 64.

Note: The system supports only one OU field. If you want the signed certificate to include more than one OU field, you must download and edit the CSR manually.

Organization (O) Specifies your organization’s name. Default is blank. Maximum characters: 64.

Securing the System

CSR Information Description

City or Locality (L)

State or Province (ST)

Country (C)

SAN: FQDN

SAN: Additional Name

Specifies the city where your organization is located. Default is blank.

Maximum characters: 128.

Specifies the state or province where your organization is located.

Default is blank. Maximum characters: 128.

Displays the country selected in the setup wizard. You can’t change this setting here.

Specifies the FQDN assigned to the system. This is the same as the

Common Name (CN) , but it isn’t truncated. Default is blank.

Maximum characters: 253.

Specifies an additional name. Default is blank. Maximum characters:

253.

SAN: IPv4 Address Default is the IPv4 address of the system. Maximum characters: 15.

User Principle Name (UPN) Specifies the user and domain name to log in to a Windows domain

(for example, [email protected]

). This is the userPrincipalName attribute of the account object in Active

Directory.

Relate this setting to the 802.1X identity and password you specified on the Network > LAN Options page. Default is blank.

Select Create .

If the system successfully creates the CSR, it automatically downloads the file.

Send the CSR file to a CA, which issues your signed certificate.

Configure Certificate Validation Options

The system can automatically validate user-installed certificates when establishing an authenticated network connection.

To perform this validation, you must install certificates from the CAs that are part of the trust chain on the system.

For a full list of preinstalled certificates on your system, see the Poly VideoOS and TC8 Certificates

Update on the Poly Online Support Center .

Procedure

In the system web interface, go to Security > Certificates .

Configure the following settings (your changes save automatically):

Setting

Maximum Peer Certificate Chain Depth

Description

Specifies how many links a certificate chain can have. The term peer certificate refers to any certificate sent by the far-end host when a network connection is being established between the two systems.

Securing the System

Setting

Always Validate Peer Certificates From Server

Always Validate Peer Certificates From Browser

Description

Determines whether your system requires a remote server to present a valid certificate when connecting to it for services, such as provisioning.

Determines whether your system requires a web browser to present a valid certificate when connecting to it.

Note: If you are using private PKI certificates in your environment and want HTTPS software downloads to work, you must install the trusted root certificate from your internal certificate authority (CA) on the system since certificate validation is always performed.

Disable Preinstalled Certificates Disables preinstalled root certificate CA chains.

Install a Certificate

Once you receive a signed certificate from the CA that processed your CSR, you can install it on your system.

Note: System certificates must be created on the Poly system and signed by an external CA before installation. Externally created device certificates won't work properly.

This option isn’t available if your certificate is provisioned to the system.

Procedure

In the system web interface, go to Security > Certificates .

Select the System tab or Connected Device tab.

Select Install Certificate to browse for the CA-signed certificate you want to install and select

Open .

Your system accepts the following certificate file formats: .pem

, .der

, and PKCS #7 (which typically has a .p7b

file name extension).

The system checks the certificate data and, if the upload is successful, adds it to the page.

With your CA-signed certificate installed, your system is trusted by its network peers (provided that a root certificate has established a chain of trust). This allows you to navigate with your web browser over a secure connection to the system web interface and perform administrative tasks.

View a Certificate

The system lists user-installed certificates in the system web interface, where you also can view the contents of those certificates.

Procedure

In the system web interface, go to Security > Certificates .

Securing the System

The Certificates page lists your user-installed certificates. It includes information about which entity a certificate is issued to, who issued it, when it expires, and the certificate type (server, client, or CA).

To view the contents of a certificate, select Visibility in the same row as the certificate.

The certificate contents display in plain text.

View a TC8 Certificate

The system lists user-installed TC8 certificates in the system web interface, where you also can view the contents of those certificates.

Procedure

In the system web interface, go to Security > Certificates .

Select the connected device tab.

Delete a Certificate

You can remove user-installed certificates through the system web interface.

When you delete all user-installed certificates, your system reverts to using the factory-installed certificate. This option isn’t available if your certificate is provisioned to the system.

Note: Deleting system settings by default retains your user-installed certificates, but performing a factory reset removes these certificates.

Procedure

In the system web interface, go to Security > Certificates .

Locate the certificate you want to delete and select Delete in the same row as the certificate.

Caution: You can’t undo this action.

Confirm by selecting Delete .

A message indicates that the system deleted the certificate.

Certificate Revocation

During certificate validation, your system checks whether certificates used for secure communications are revoked by their issuing CAs.

Your system can check certificate revocation status with the following standard method:

▪ Certificate Revocation List (CRL) : File containing a list of certificates revoked by their issuing CA.

You must manually upload CRLs to your system.

Securing the System

Manually Upload a CRL

You can use CRLs to perform certificate revocation checks on your system.

Uploading a CRL fails unless you install all of the certificates in the issuing CA’s chain of trust for that

CRL.

This option is not available if your CRL is provisioned to the system.

Procedure

In the system web interface, go to Security > Certificates .

Configure the following settings:

Setting Description

Revocation Method To use the CRL revocation method, select CRL .

Allow Incomplete Revocation Checks When enabled, a certificate in the chain of trust validates without a revocation check if no corresponding CRL from the issuing CA is installed.

Select Save .

Select Upload CRL File to add a CRL.

You aren’t limited to how many CRLs you can install, but you can only upload 10 at a time.

Successfully-uploaded CRLs display on the page and include information about the issuing CA, when the

CRL was updated, and when it’s scheduled to update again.

Delete a CRL

You can remove CRLs that were previously uploaded on the system.

This option is not available if your CRL is provisioned to the system.

Procedure

In the system web interface, go to Security > Certificates .

Under Revocation , select Delete next to the CRL you want to delete.

Disable the Polycom Content App Port

To prevent the Content App from connecting to your system and providing a video and audio content stream, disable the content sharing application in the system web interface.

This option stops TCP/TLS traffic on port 5001.

Procedure

In the system web interface, go to General Settings > System Settings .

Clear the Enable Poly Content App Sharing check box.

Select Save .

Securing the System

Disable the Security Code

By default, you must enter a security code to connect to the system to share or save content, but you can disable it.

Procedure

» In the system web interface, go to Security > Security Code and clear the Enable Security

Code check box.

Related Links

Sharing Content

on page 128

Enable or Disable Content Saving

Enable or disable content saving from the Pano App for users who connect to the primary or secondary network.

Procedure

In the system web interface, go to Security > Content .

Select or deselect Allow users to save content from Primary Network and Allow users to save content from Wi-Fi Network .

Related Links

Sharing Content

on page 128

System Allow List

The allow list enables access to your system web interface and SNMP ports only to IP addresses you specify.

An allow list supports up to 30 addresses (including IPv4 and IPv6 formats) and can only be configured in the system web interface.

Note: If your IP addresses are dynamically assigned, make sure the allow list is updated so those hosts can connect to your system.

Add IP Addresses to the Allow List

You can add and edit specific IP addresses to an allow list for your system.

Warning: Once you save the IP allow list, you can access the system web interface of only those devices on the list. If your current device isn’t on the list, you can’t access the system web interface for that device. You may have to factory restore the system to regain access.

Procedure

In the system web interface, go to Security > Access .

Securing the System

Select Enable Allow List , then Edit Allow List .

Select address type IPv4 or IPv6 .

In the IP Address field, enter the address of the system you want to add to the allow list.

Select Add .

Optional: Repeat steps 4 and 5 for the other IP addresses you want to add to the allow list.

Select Save .

Delete IP Addresses from the Allow List

You can delete specific IP addresses from the allot list for your system.

Procedure

In the system web interface, go to Security > Access .

Select Edit Allow List .

Select the check box next to any IP address you want to delete and select Remove .

IPv4 Address Formats

The configuration requires a single IP address, a range of addresses, or an IP and netmask. (The netmask represents the number of valid bits of the IPv4 address to use.)

The following are valid IPv4 formats for your system:

• 10.12.128.7

• 172.26.16.0/24

IPv6 Address Formats

For IPv6 addresses, you can use a Classless Inter-Domain Routing (CIDR) notation to represent a range of IP addresses.

The following are valid IPv6 formats for your system:

• ::1

• 2001:db8:abc:def:10.242.12.23

• 2001:db8::/48

• 2001:db8:abcd:0012::0/64

• 2001:0db8:85a3:0000:0000:1234:0abc:cdef

Call Encryption

AES is standard on your system. When enabled, your system automatically encrypts calls with other systems using AES.

A locked padlock icon displays on the connected monitor(s) when a call is encrypted. If a call is unencrypted, you see an unlocked padlock. The padlock may not accurately indicate encryption status if the call is cascaded or includes an audio-only endpoint. To avoid security ambiguity, participants can verbally communicate the state of their padlock icon at the beginning of a call.

The following AES cryptographic algorithms ensure flexibility when negotiating secure media transport:

Securing the System

• H.323 (per H.235.6)

◦ AES-CBC-128 / DH-1024

◦ AES-CBC-256 / DH-2048

• SIP (per RFCs 3711, 4568, 6188)

◦ AES_CM_128_HMAC_SHA1_32

◦ AES_CM_128_HMAC_SHA1_80

◦ AES_CM_256_HMAC_SHA1_32

◦ AES_CM_256_HMAC_SHA1_80

Related Links

Configure SIP Settings on page 51

Configure Call Encryption

You can encrypt calls on your system.

Procedure

In the system web interface, go to Call Configuration > Call Settings .

For the Require AES Encryption for Calls setting, choose how you want to encrypt calls:

• Off : AES encryption is disabled.

• When Available : AES encryption is used with systems that support it, but the system also allows unencrypted calls.

• Required for Video Calls Only : AES encryption is used in all video calls. Calls with systems that don’t support it fail.

• Required for All Calls : AES encryption is used in all types of calls. Calls with systems that don’t support it fail.

H.460 Firewall/NAT Traversal

Configure your system for firewall or network address translation (NAT) traversal using the H.460.18 and

H.460.19 standards. This includes environments with session border controllers (SBCs).

For example, an endpoint outside your network that’s initiating a SIP call connects to an SBC as a remote endpoint. The incoming SIP traffic then traverses a firewall before connecting to the endpoint it’s calling inside your network.

Real-time media streams often use UDP for their speeds. If your system is behind a firewall that restricts access to UDP ports, however, you can configure your system for only TCP connections.

Caution: Systems deployed outside a firewall are potentially vulnerable to unauthorized access. Visit the Polycom Security section of the Knowledge Base at the Poly Online Support Center for timely security information. You can also register to receive periodic updates and advisories.

Securing the System

Configure the System for H.460 Firewall/NAT Traversal

H.460 firewall/NAT traversal can be necessary if you’re calling with a cloud-based conferencing service or your system is outside a corporate network (for example, a home office).

Make sure you register your system with a network device that supports H.460.18 and H.460.19

standards (for example, a RealPresence Access Director system or a Polycom VBP device).

Procedure

In the system web interface, go to Network > LAN Network .

Go to Firewall .

Make sure that the Enable H.460 Firewall Traversal check box is selected.

Verify the firewalls that you traverse allow your system to use outbound TCP and UDP connections.

▪ Firewalls with a stricter rule set must allow the system to use at least the following outbound

TCP and UDP ports: 1720 (TCP), 14085-15084 (TCP), 1719 (UDP), and 16386-25386

(UDP).

▪ Firewalls must allow inbound traffic to the TCP and UDP ports used for outbound traffic.

Configure the following settings:

Setting

Fixed Ports

Description

Defines which TCP and UDP ports your system uses for firewall traversal.

Enable this option if your firewall isn’t H.323

compatible. The system assigns a port range starting with the TCP and UDP ports you specify

(port 3230 is where the range begins by default).

Note: For the fixed ports you configure, you must open the corresponding ports on your firewall. For H.323, open TCP port

1720. For SIP, open UDP port 5060, TCP

5060, or TCP 5061 depending on if you’re using UDP, TCP, or TLS, respectively, as the SIP transport protocol.

Disable this option if your firewall is H.323

compatible or the system isn’t behind a firewall.

Setting

TCP Ports

UDP Ports

NAT Configuration

NAT Public (WAN) Address

NAT is H.323 Compatible

Address Displayed in Global Directory

Securing the System

Description

The starting value for the range of TCP and UDP ports the system uses. The system automatically configures the range based on the beginning value you set here.

To allow H.323 traffic, you need two TCP and eight

UDP ports per connection. You must also open

TCP port 1720 on the firewall.

To allow SIP traffic, you need TCP port 5060 and eight UDP ports per connection.

UDP port range : Because systems support ICE, the range of fixed UDP ports is 32. The system cycles through the available ports from call to call.

Fixed ports range and filters : You might notice that the source port of a SIP signaling message is not in the fixed ports range. When your firewall is filtering on source ports, in the system web interface, go to the SIP page and enable Force

Connection Reuse . When enabled, the system uses port 5060 and 5061 for the source and destination port (these must be open on the firewall).

Specifies if the system automatically determines the NAT public (WAN) address.

▪ If the system isn’t behind a NAT or is connected to the network through a VPN, set this option to

Off .

▪ If the system is behind a NAT that allows HTTP traffic, set this option to Auto .

▪ If the system is behind a NAT that doesn’t allow

HTTP traffic, set this option to Manual .

The address callers from outside the LAN use to call your system. If you configured the NAT manually, enter the NAT public address here.

You can configure this option only when you set

NAT Configuration to Manual .

Identifies whether the system is behind a NAT that can translate H.323 traffic.

This option is available only when you set NAT

Configuration to Auto or Manual .

Choose whether to display the system’s public or private address in the global directory.

This option is available only when you set NAT

Configuration to Auto or Manual .

Securing the System

Setting

Enable SIP Keep-Alive Messages

Description

Specifies whether to regularly transmit keep-alive messages on the SIP signaling channel and on

RTP sessions part of SIP calls. Keep-alive messages maintain connections through firewall/NAT devices that are often used at network edges.

If your system is in an Avaya SIP environment, it’s recommended that you disable this setting to enable calls to fully connect.

Select Save .

Set Up a Security Banner

You can create a security banner, which is a message that displays before users log in to the system remotely.

Procedure

In the system web interface, go to Security > Security Banner .

Select Enable Security Banner .

Configure the following settings and select Save .

Setting

Banner Text

Remote Access Banner Text

Description

▪ Custom : Enter any text for the banner.

▪ DoD : A default U.S. Department of Defense security banner. You can’t change this text.

The security banner that displays on the system web interface and command-line API (SSH or telnet). Enter up to 2408 single-byte or 1024 double-byte characters. The text wraps to the next line as you type, but you can press Enter anywhere to force a line break.

Web Proxies

A web proxy can help your system communicate outside your network securely and with increased performance. For example, you can direct your system’s outbound requests through an enterprise proxy.

Configure your system to use a proxy one of the following ways:

▪ Automatic : Specify only the proxy credentials (if needed). Using DHCP, your system obtains a URL to automatically download a proxy auto-configuration (PAC) file.

▪ Semi-automatic : Specify the proxy credentials and URL for automatically downloading a PAC file.

▪ Manual : Specify the proxy address, port, and credentials. (This method lets you configure your system with only one proxy.)

Securing the System

If your configuration includes automatically downloading a PAC file, there must be an expiration associated with the file so the system knows when to download a new one. Make sure your PAC file server includes an Expires header in its HTTP response (for example, Expires: Wed, 30 Oct

2016 09:30:00 GMT ).

Your system can authenticate with a proxy using the following methods:

▪ Digest authentication (with either MD-5 or SHA-256 digest)

▪ NTLM authentication (only NTLMv2 is supported)

▪ Basic authentication (this insecure method is disabled by default)

▪ No authentication (or null authentication, meaning the proxy server doesn’t require credentials)

Your system supports the following services when configured to use a web proxy:

▪ Directory servers

▪ Provisioning service

▪ Software updates

Related Links

Checking the Web Proxy Configuration

on page 166

Sample PAC File

on page 84

Enable the System to Use a Web Proxy

By default, your system configuration doesn’t use web proxies.

Procedure

In the system web interface, go to Network > LAN Network > Web Proxy Settings .

Select Enable Web Proxy .

Set Up Automatic Web Proxy Configuration

With automatic web proxy configuration, your system obtains a URL for downloading a proxy autoconfiguration (PAC) file through DHCP option 252.

Procedure

In the system web interface, go to Network > LAN Network > Web Proxy Settings .

Select Automatic Configuration .

Select Enable WPAD .

This option enables the web proxy auto-discovery protocol (WPAD), which helps your system automatically download the PAC file on your network using DHCP option 252.

Enter the Proxy User Name and Proxy Password .

Select Save .

Your system automatically downloads and reads the PAC file specifying the proxy rules. The system also automatically downloads subsequent files before the current file expires.

Securing the System

Set Up Semi-Automatic Web Proxy Configuration

With semiautomatic web proxy configuration, you must specify the URL your system uses to download a proxy auto-configuration (PAC) file.

Procedure

In the system web interface, go to Network > LAN Network > Web Proxy Settings .

Select Automatic Configuration .

If checked, clear the Enable WPAD check box.

Enter the Proxy User Name and Proxy Password .

Enter the PAC URL from which your system downloads the PAC file.

Select Save .

Your system automatically downloads and reads the PAC file specifying the proxy rules. The system also automatically downloads subsequent files before the current file expires.

Manually Update the PAC File on the System

Even if you set up your system for automatic or semi-automatic web proxy configuration, you can still manually download a new PAC file from the server.

The PAC file may update on the server much sooner than its expiration date. In this situation, you don’t have to wait for the system to automatically download the latest version.

Procedure

In the system web interface, go to Network > LAN Network > Web Proxy Settings .

Select Update PAC File to fetch the latest version of the file from the server.

Related Links

Sample PAC File

on page 84

Manually Configure a Web Proxy

You can manually configure your system to communicate with a web proxy by providing a proxy address, port, and credentials (if required).

This method lets you configure your system with only one proxy.

Procedure

In the system web interface, go to Network > LAN Network > Web Proxy Settings .

If checked, clear the Automatic Configuration check box.

Enter the Proxy Address and Proxy Port .

Enter the Proxy User Name and Proxy Password .

Select Save .

Securing the System

Sample PAC File

A proxy auto-configuration (PAC) file is a text file that instructs your system to forward traffic to a proxy server.

The following code shows a sample PAC file.

function FindProxyForURL(url, host)

{ if ( url.substring (0, 5) == "http:" )

{return "PROXY 10.221.77.3:8080; PROXY 10.221.76.7:8080;DIRECT";} else if ( url.substring (0, 6) == "https:" )

{return "PROXY 10.221.77.3:8080; PROXY 10.221.76.7:8080;DIRECT";} else

{return "DIRECT";}

}

The Function “ function FindProxyForURL(url, host) ” returns a string with one or more access method specifications. These specifications cause your system to use a particular proxy server or connect directly.

This function instructs your system to retrieve information for http / https protocols using the first proxy, that is “PROXY 10.221.77.3:8080”.

If “PROXY 10.221.77.3:8080” is unreachable/unresponsive, then your system tries the second proxy, that is “PROXY 10.221.76.7:8080”.

For more examples on PAC syntax, refer to Proxy Auto-Configuration (PAC) file .

PAC file limitations:

▪ If the first specified proxy is reachable and the authentication is unsuccessful, your system doesn’t try a different proxy path.

▪ The PAC file must contain pure JavaScript.

▪ Poly recommends your PAC files use the .pac

or .proxy

extension.

▪ Poly supports PAC JavaScript functions that return “ PROXY host:port ” and “ DIRECT ”. Poly doesn’t support return values of “ SOCKS ”, “ HTTP host:port ”, or “ HTTPS host:port ”.

Web Proxies on page 81

View Connections to the System

Access a list of current connections to your system.

The list provides the following information:

▪ Type of connection (for example, web)

▪ ID associated with the session (for example, admin or user)

▪ Remote address (IP addresses of the hosts accessing your system)

This list doesn’t show details related to sharing content. For example, if someone shares a video from an

HDMI-connected laptop, you don’t see that this device is connected to the system.

Securing the System

Procedure

» In the system web interface, go to Diagnostics > Sessions .

System Port Usage

The following table lists the inbound, outbound, and bidirectional ports used by your system.

G7500, Studio X50, and Studio X30 System Port Usage

Port Direction Type Protocol

123

161

Inbound

Outbound

Inbound

Outbound

Inbound

Static

SSH

TCP

UDP

TCP

UDP

Function Open by

Default?

No Command-line

API access over

SSH

Command-line

API access over telnet

NTP (automatic time synchronization)

SNMP reporting

Command-line

API access over telnet

DNS

HTTP web server listener that provides access to the web interface.

Redirects all sessions to

HTTPS on port

443. Also used by AirPlay.

Yes

Configurable

Port?

Yes

Securing the System

Port

443

Direction Type

Bidirectional Static

514

554

601

1718

1719

1720

Outbound

Inbound

Outbound

Bidirectional

Static

Protocol

TCP/SCTP

UDP

TCP, UDP

TCP

UDP

Function

Static TCP

HTTPS web server listener that provides

TLS access to the web interface.

AirPlay

Microsoft

Exchange Server

Zero Touch

Onboarding

Provisioning (for example,

RealPresence

Resource

Manager)

Video system control using a

Poly TC8 device

Video system control using a

Poly Trio system

REST API

Polycom Content

App

Poly Lens

Remote logging

AirPlay (Real-

Time Streaming

Protocol [RTSP])

Remote logging

H.255.0

gatekeeper discovery

H.255.0 RAS signaling

Open by

Default?

Yes

TCP H.255.0 call signaling

Yes

Configurable

Port?

Yes

(outbound)

No (inbound)

Securing the System

Port

1900

2000

3689

5001

5060

6514

7000

7080

7081

5061

5297

5298

5353

Direction

Inbound

Type

Static

4100–

4115

4100–

4115

4443

Bidirectional Static

Inbound Static

Bidirectional Static

Inbound

Bidirectional

Inbound

Outbound

Inbound

Static

Protocol

UDP

TCP

UDP

TCP/TLS

Function Open by

Default?

Yes AirPlay/Bonjour

(Simple Service

Discovery

Protocol [SSDP])

Multicast pairing iTunes Music

Sharing/AirPlay

(Digital Audio

Access Protocol

[DAAP])

AirPlay (audio control)

AirPlay (audio data)

Web server for peripheral device software downloads and log uploads

Polycom Content

App

SIP

Yes

Yes TCP or UDP, depending the on configuration

TLS

TCP

UDP

TLS

TCP

SIP

Bonjour

Bonjour/AirPlay

(multicast

Domain Name

System [mDNS])

Remote logging

AirPlay standard services

Web services

Yes

Configurable

Port?

Yes

Securing the System

Port

7100

16384–

32764

18888

44444

47000

49152–

65535

49159

Direction Type

Inbound Static

Bidirectional Dynamic

Inbound

Static

Bidirectional Dynamic

Inbound Static

49163 Inbound Static

TCP

UDP

Protocol

TCP

UDP

Function Open by

Default?

Yes AirPlay mirroring services

RTP/RTCP

(video and audio streams)

Modular room messaging

Content stream

AirPlay casting services

H.245

Yes

Bonjour/AirPlay

(mDNS

[Windows])

Bonjour/AirPlay

(mDNS

[Windows])

Yes

Configurable

Port?

Yes

Wireless Port Usage with Miracast-Certified Devices

A Miracast-certified device uses an ad-hoc, peer-to-peer Wi-Fi connection (known as Wi-Fi Direct) to share content on your system.

The following tables describe the Wi-Fi network ports used by 1) Miracast-certified devices connected to your system and 2) the system when connected to a Miracast-certified device.

Note: Highly secure environments may restrict network activity using client firewalls or Group Policy

(GPO), which can block access to Miracast functionality and cause connection issues. To avoid these problems, your GPO must explicitly allow Wi-Fi Direct groups and connections to ad-hoc networks.

It’s also recommended that you don't restrict the following ports on the Wi-Fi adapter of a Miracastcertified device intended to share content.

Miracast-Certified Device Ports for Wi-Fi Direct Connections

Port

1024-65535

Direction

Outbound

Type

Dynamic

Protocol

UDP

Function

RTP (video and audio mirroring)

Note

Randomly assigned by the client.

Securing the System

Port

1024-65535

7236

Direction

Bidirectional

Type

Dynamic

Static

Protocol

UDP

TCP

Function

RTCP (RTP transportation quality report)

RTSP (Miracast display negotiation)

Note

Randomly assigned by the client.

System Ports for Wi-Fi Direct Connections

Port Direction Type

1024-65535 Bidirectional Dynamic

14000, 14002,

14004, 14006

Inbound

14001, 14003,

14005, 14007

Bidirectional

Static

Protocol

TCP

UDP

Function

RTSP (Miracast display negotiation)

RTP (video and audio mirroring)

RTCP (RTP transportation quality report)

Note

Randomly assigned by the system.

Ports 14002,

14004, and

14006 are used when there’s more than one device connected to your system.

Ports 14003,

14005, and

14007 are used when there’s more than one device connected to your system.

Configuring Call Settings

Topics:

▪

Configure Call Settings

▪

Configure Dialing Options

▪

Set Call Answering Mode

▪

Set Preferred Call Speeds

▪

Configure the Recent Calls List

▪

Clear Recent Calls

Specify how you want your system to handle and manage calls.

Related Links

Configure H.323 Settings on page 49

Configure SIP Settings on page 51

Configure Call Settings

You can configure call settings in the system web interface.

Procedure

In the system web interface, go to Call Configuration > Call Settings .

Configure the following settings:

Setting

Maximum Time in Call

Auto Answer Point-to-Point Call

Description

Sets the maximum number of hours allowed for a call.

When the maximum time expires, the system prompts the user to hang up. If the user doesn’t answer within one minute, the call automatically ends. If the user chooses to stay in the call, the system doesn’t prompt the user again.

Specifies whether the system answers an incoming call when not in a call. Choose one of the following options:

▪ Yes : The system automatically answers incoming point-to-point calls.

▪ No : Users must answer incoming calls manually.

▪ Do Not Disturb : The system rejects incoming calls without notification.

Setting

Auto-Merge Incoming Call to Current Call

Display Icons in a Call

Enable Flashing Incoming Call Notification

Preferred 'Place a Call' Navigation

Configuring Call Settings

Description

Specifies whether the system automatically answers, provides a notification on the local interface, or ignores an incoming audio or video call while you’re in an active call. When you merge an incoming call, it joins the incoming call with the current active call participants. This is only applicable to incoming SIP and H.323 calls.

Choose one of the following options:

▪ Yes : The system automatically answers and merges an incoming audio or video call to the existing call. Incoming video calls are audio only once they merge with the active call. You can only merge a single incoming call with an active call. If the system receives additional incoming calls, they’re rejected without notification.

▪ No : The system doesn’t automatically answer the incoming call, and the system displays a notification on the local interface prompting you to answer or ignore the call.

▪ Do Not Disturb : The system rejects incoming calls without notification.

Specifies whether to display onscreen graphics, including icons and help text, during calls.

Specifies whether you see an incoming call notification.

Specifies the default options that display on the local interface Place a Call screen. Choose one of the following options:

▪ Keypad : Displays recently-dialed numbers and a dialpad.

▪ Contacts : Displays a screen for searching a directory. The multitiered directory (LDAP) root entry displays at the top of the Contacts list, which combines your search results and favorites.

▪ Recent Calls : Lists previous calls in chronological order.

Configuring Call Settings

Setting

Require AES Encryption for Calls

Description

Specify how you want to encrypt calls:

▪ Off : AES encryption is disabled.

▪ When Available : AES encryption is used with systems that support it, but the system also allows unencrypted calls.

▪ Required for Video Calls Only : AES encryption is used in all video calls. Calls with systems that don’t support it fail.

▪ Required for All Calls : AES encryption is used in all types of calls. Calls with systems that don’t support it fail.

Select Save .

Related Links

Configure General Audio Settings

on page 95

Configure Dialing Options

You can specify video and audio dialing preferences for your system.

Procedure

In the system web interface, go to Call Configuration > Dialing Preference .

Configure the following settings (your changes save automatically):

Setting

Scalable Video Coding Preference (H.264)

Description

This read-only setting indicates your system uses only AVC conferencing.

Note: Scalable video coding (SVC) conferencing isn’t supported.

Enable H.239

Enable Audio-Only Calls

Call Type Order

Enables the use of a standards-based specification for parallel video streams (people and content).

Enable this setting if you know call participants support H.239.

Enables you to place audio-only calls on the system.

Specifies an order preference for video or voice calls. Select either Video then Phone , or Phone then Video . This setting is read-only if the video system has no phone connections.

Configuring Call Settings

Setting

Video Dialing Order Preferences

Audio Dialing Order Preferences

Description

Specifies how the system places video calls to directory entries with more than one type of number.

Select one of the following protocols for each preference:

▪ SIP

▪ IP H.323

This setting also determines how the system places video calls from the Place a Call screen when your set the call protocol to Auto or if it’s unavailable.

For example, if a call doesn’t connect with H.323, the system tries using SIP.

Specifies how the system places audio calls to directory entries with more than one type of number.

Select one of the following protocols for each preference:

▪ SIP

▪ H.323

Set Call Answering Mode

You can configure how users answer calls on the system.

Procedure

In the system web interface, go to Call Configuration > Call Settings .

Select one of the following for Auto Answer Point-to-Point Call :

▪ Yes : The system automatically answers incoming calls.

▪ No : Users must answer incoming calls manually.

▪ Do Not Disturb : The system rejects incoming calls without notification.

Set Preferred Call Speeds

You can configure call speeds in the system web interface.

Procedure

In the system web interface, go to Call Configuration > Dialing Preference .

Configure the following settings (your changes save automatically):

Configuring Call Settings

Setting

Preferred Speed for Placed Calls

Maximum Speed for Received Calls

Description

Determines the IP call speed your system uses when either of the following occurs:

▪ A user sets the call speed to Auto on the Place a Call screen.

▪ A user places a call from the directory.

If the far-site system doesn’t support the selected speed, the system automatically negotiates a lower speed.

The system doesn’t receive calls at a higher rate than the speed you set here.

Configure the Recent Calls List

You can display recent calls on the Place a Call page in the system web interface.

The recent calls list includes the following information:

▪ Name or number

▪ If the system placed or received the call

▪ Date and time

Procedure

In the system web interface, go to Call Configuration > Recent Calls .

Configure the following settings (your changes save automatically):

Setting

Call Detail Report

Enable Recent Calls

Maximum Number to Display

Description

Call detail record (CDR) information is in the system logs. When disabled, the system doesn’t write call information.

Specifies whether to show recent calls on the local interface and the system web interface.

The maximum number of calls the system displays in the recent calls list.

Clear Recent Calls

You can clear the recent calls list from the system web interface.

Procedure

In the system web interface, go to Call Configuration > Recent Calls .

For Clear Recent Calls , select Clear and confirm your choice.

Configuring Audio Settings

Topics:

▪

Configure General Audio Settings

▪

Audio Input

▪

Audio Output

▪

USB Audio

You can configure audio settings in the system web interface.

Configure General Audio Settings

You can specify general audio settings for your system.

If you are in a call with a far site that is sending audio in stereo mode, you can receive in stereo. In calls where some sites can send and receive stereo but some can’t, any site set up to send or receive stereo can do so.

Note: Some audio settings are unavailable when you connect a SoundStructure digital mixer to your system.

Procedure

In the system web interface, go to Audio/Video > Audio > General Audio Settings .

Configure the following settings (your changes save automatically):

Setting

Polycom StereoSurround

Sound Effects Volume

Ringtone

Description

Enables Polycom StereoSurround software for all calls.

Note: Enabling this setting disables Polycom

Acoustic Fence technology and vice versa.

This feature isn’t available on the Studio X30 system. It also isn’t available when using a Poly

Microphone IP Adapter your system.

Sets the volume level of the ringtone.

Specifies the ringtone for incoming calls.

Configuring Audio Settings

Setting

Audio Mute Auto-Answered Calls

Enable M-Mode

Enable NoiseBlockAI

Enable Join and Leave Tones

Transmission Audio Gain (dB)

Enable Audio Mute Reminder

Description

Specifies whether to automatically mute incoming calls.

Note: You must first enable Auto Answer Pointto-Point Video in Call Settings to use this feature.

Specifies whether the system transmits audio using a configuration that best reproduces interactive and live performance music picked up by microphones.

This feature provides the highest-possible bandwidth for audio.

When you enable M-Mode, even the faintest musical notes come through clearly.

Enables Poly NoiseBlockAI, which during a call eliminates background and extraneous sounds in common working environments.

Note: This setting is disabled when you enable

M-Mode. If you use an external echo canceller, keyboard noise reduction isn’t available.

The system plays a tone when someone joins or leaves a conference call.

Specifies the audio level (in decibels) that the system transmits sound. Unless otherwise advised, you should set this value to 0 dB.

Specifies if the system displays a notification that the microphones are muted when it detects someone speaking.

Related Links

Configure Sleep Settings on page 32

Configure Call Settings

on page 90

Test Speakers

on page 162

Test Polycom StereoSurround

on page 163

Audio Input

You can connect several types of microphones to your system.

The following audio inputs are supported:

▪ IP-based Poly microphone peripherals (for the G7500 system only):

◦ Poly IP Table Microphone

Configuring Audio Settings

◦ Poly IP Ceiling Microphone

◦ Poly Microphone IP Adapter

▪ X50 Microphones and X30 Microphones : The built-in microphones that come with the Studio X50 and Studio X30 systems.

▪ Polycom RealPresence Debut Expansion Microphone (for the Studio X50 system only)

▪ 3.5 mm (not available on Studio X30 system): 3.5 mm stereo input used to share audio from a device or microphone. Depending on your setup, you can specify if sound from this input plays in the room and at far sites or just at far sites.

▪ HDMI : Used to share audio (along with content) from a device. Sound from this input plays in the room and at far sites.

Configure IP Microphones

You can configure IP table and ceiling microphone settings for your system.

The Studio X50 and Studio X30 don’t support IP microphones.

Procedure

In the system web interface, go to Audio/Video > Audio > Audio Input .

Configure the following settings (your changes save automatically):

Setting

Stereo Mode

Autorotation

Description

Positions the audio input within the left and right channels. Left sends all of the audio to the left channel. Right sends all of the audio to the right channel. For Poly table microphone and ceiling microphones, Left+Right sends audio from one microphone element to the left channel and audio from a second element to the right channel.

Specifies whether the system uses autorotation for

Poly microphones. If you enable this feature, the system automatically assigns left and right channels for the microphone based on the sound it senses from the left and right speakers.

Configuring the Microphone Adapter

The video system automatically configures Poly Microphone IP Adapter when you pair it.

The Studio X50 and Studio X30 systems don’t support the microphone adapter.

Note the following when using the microphone adapter:

▪ You can’t use Poly IP table and ceiling microphones.

▪ Polycom StereoSurround isn’t available.

▪ The audio input level (mono channel meter) displays in the local interface and system web interface.

▪ Polycom Acoustic Fence technology isn't supported.

Configuring Audio Settings

▪ The RealPresence Group Series microphone array configuration uses stereo audio by default, but the microphone adapter supports only mono mode.

Related Links

Poly Microphone IP Adapter on page 27

Polycom Acoustic Fence

Polycom Acoustic Fence technology creates a virtual audio fence that blocks sounds from outside the fence. It suppresses background noise during calls to enhance audio quality for call participants.

Polycom Acoustic Fence works in mono mode only and disables Polycom StereoSurround when enabled.

Polycom Acoustic Fence technology provides the following:

▪ Mutes sounds outside the fence when no one is speaking inside it

▪ Lowers sounds outside the fence by 12 dB when someone is speaking inside it

▪ Mutes speakers when someone leaves the fenced area

▪ Enables you to adjust the width of the audio fence beam to define the area where sounds are picked up

For Studio X50 and Studio X30 Systems:

Once you enable Polycom Acoustic Fence on your Studio X50 or Studio X30 system, you can also adjust the width of the audio fence beam so that the system’s built-in microphones pick up sound in the area you want.

For G7500 Systems:

Once you enable Polycom Acoustic Fence, you must set up additional hardware to use this feature with your G7500 system. You need a primary microphone and at least one more microphone to create the fence.

The boundary radius can be two to several feet around the following Poly peripheral devices:

▪ Table microphone

▪ Ceiling microphone

Note: Microphones connected to a Poly Microphone IP Adapter currently don’t support Polycom

Acoustic Fence.

Once you set up the microphones, you can adjust the width of the audio fence beam to limit or expand where sounds are picked up inside the fence.

For more details on Polycom Acoustic Fence, search the Polycom Knowledge Base for acoustic fence .

Configure Polycom Acoustic Fence

You can enable and configure the Polycom Acoustic Fence feature to help define the audio fence around the system.

Note: This option isn’t available if you enable Polycom StereoSurround .

Procedure

In the system web interface, go to Audio/Video > Audio > General Audio Settings .

Configuring Audio Settings

Select the Enable Acoustic Fence check box.

Set Acoustic Fence Sensitivity to adjust the width of the audio fence beam.

▪ For Studio X50 and Studio X30 systems : Higher values increase the width of the audio fence beam. Use 1 for the narrowest beam (12 degrees) or 10 for the widest beam (120 degrees). If Acoustic Fence Sensitivity is set to 0 , the system mutes the microphone(s).

The total angles is the setting number multiplied by 12.

▪ For G7500 systems : Higher values increase the width of the audio fence beam between the primary and fence microphone(s). Use 0 for the narrowest beam (20 degrees) or 10 for the widest beam (120 degrees).

Specify the Primary and Fence Microphones

To use Polycom Acoustic Fence technology with your G7500 system, you need a primary microphone to pick up audio and one or more fence microphones to define the audio boundary.

The system considers the first microphone you pair as the primary microphone. By default, a microphone pairs to the system when you connect it (unless you’ve disabled automatic pairing). You can connect up to three microphones directly to your system.

Note: If you use a mix of table and ceiling microphones, the primary microphone must be a table microphone. The primary microphone can be a ceiling microphone if you use only that type of microphone.

Procedure

Connect the primary microphone to an LLN port on the back of your system.

Important: When using Polycom Acoustic Fence technology, remember which microphone is the primary one. If you disconnect this microphone, Polycom Acoustic Fence no longer works and you must reconnect all microphones (starting with the primary microphone) for it to work again.

Connect the other microphone(s).

Related Links

Poly G7500 System Ports on page 13

Specify a Different Primary Microphone

If you want to change the primary microphone you’re using for Polycom Acoustic Fence technology, you must first disconnect all the microphones from your G7500 system.

Note: If you use a mix of table and ceiling microphones, the primary microphone must be a table microphone. The primary microphone can be a ceiling microphone if you use only that type of microphone.

Procedure

Disconnect all microphones from the LLN ports on the back of your system.

Reconnect the microphone you want to be the primary.

Your primary microphone is set up.

Connect the other microphone(s).

Configuring Audio Settings

Your system is ready to use Polycom Acoustic Fence with a new primary microphone.

Live Microphone Switching on Studio X50

Configure your system to automatically toggle the microphone input between the system’s built-in microphones and a RealPresence Debut expansion microphone.

The system detects which microphone is picking up the strongest audio input from the speaker and automatically changes to that microphone. For example, if you frequently walk behind your unit you can place the RealPresence Debut expansion microphone behind your system to catch your voice as you walk around.

Configure Studio X50 Microphone

You can enable the ability to switch between a built-in microphone that comes with the Studio X50 and a

RealPresence Debut expansion microphone.

Procedure

In the system web interface, go to Audio/Video > Audio > General Audio Settings .

Select the Enable Auto Mic Switching check box (your changes save automatically).

Configure HDMI Audio Input

You can specify the audio input level for your system’s HDMI connections (for example, audio from an

HDMI-connected laptop).

Procedure

In the system web interface, go to Audio/Video > Audio > Audio Input > HDMI .

For Audio Input Level , set the left and right channel levels by choosing a value from 0 to 10 .

The audio meters display the input’s left and right channel levels.

Configure 3.5 mm Audio Input

You can specify how the system routes and controls audio from the 3.5 mm stereo input.

The Studio X30 doesn't support 3.5 mm audio input.

Procedure

In the system web interface, go to Audio/Video > Audio > Audio Input > 3.5 mm .

For Audio Input Level , set the left and right channel levels by choosing a value from 0 to 10 .

The audio meters display the input’s left and right channel levels.

Choose one of the following Playback Options :

100

Configuring Audio Settings

Playback Options

Option

Playback to All Locations

Playback to Far Sites, Mute

Controlled

Playback to Far Sites, Mute

Controlled, Echo Cancelled

Description

Select this option if you’re sending audio from a device.

Select this option if you’re using an external digital signal processor (DSP), such as

Polycom SoundStructure, which provides mute controls and echo cancellation.

Select this option if you want to perform activities like sharing music from a mobile phone to call participants.

Select this option if you’re using a line-level microphone.

Note: The microphone must provide the line-level signal to work.

Result

▪ Near and far sites hear the

3.5 mm stereo input.

▪ You can’t mute audio or control echo cancellation.

▪ Only far sites hear the 3.5

mm stereo input (there is no associated video content).

▪ You can’t mute audio or control echo cancellation through the system.

▪ Only far sites hear the 3.5

mm stereo input (there is no associated video content).

▪ You can mute audio but can’t control echo cancellation.

▪ Only far sites hear the 3.5

mm stereo input (there is no associated video content).

▪ You can mute audio and control echo cancellation.

▪ Mic-level inputs aren’t supported.

Using Poly Trio Microphones

The video system automatically configures Poly Trio microphones when you pair the phone.

You can only use the following microphones in addition to the Poly Trio microphones:

▪ Poly Trio Expansion Microphones

▪ Studio X50 and Studio X30 built-in microphones (speaker locating only)

Also note the following when using Poly Trio microphones with your video system:

▪ You can’t use Poly IP audio devices, including table and ceiling microphones and the microphone adapter.

▪ Polycom Acoustic Fence technology isn’t available.

▪ Polycom StereoSurround isn’t available.

▪ The audio input level (mono channel meter) displays in the local interface and system web interface.

▪ You can only pair a single Trio with your system.

101

Configuring Audio Settings

Configure NoiseBlockAI When Paired with Poly Trio

To use Poly NoiseBlockAI when paired with a Poly Trio, enable the setting on your video system. There’s nothing to configure on the phone.

Procedure

In the system web interface, go to Audio/Video > Audio > General Audio Settings .

Select the Enable Keyboard Noise Reduction and NoiseBlock check box.

Configuring the Microphone Adapter

The video system automatically configures Poly Microphone IP Adapter when you pair it.

The Studio X50 and Studio X30 systems don’t support the microphone adapter.

Note the following when using the microphone adapter:

▪ You can’t use Poly IP table and ceiling microphones.

▪ Polycom StereoSurround isn’t available.

▪ The audio input level (mono channel meter) displays in the local interface and system web interface.

▪ Polycom Acoustic Fence technology isn't supported.

▪ The RealPresence Group Series microphone array configuration uses stereo audio by default, but the microphone adapter supports only mono mode.

Related Links

Poly Microphone IP Adapter on page 27

Audio Output

You have different options to play audio on your system to fit your setup.

You can use the primary monitor’s built-in speakers, the Studio X50 and Studio X30 systems’ built-in speakers, or you can connect an external speaker system (such as Polycom StereoSurround kit) to the

G7500 system to provide more volume and comprehensive sound in large rooms.

See your system setup sheet for connection details. Make sure that you power off the system before connecting anything to it.

Configure Audio Output Settings

You can configure the audio output settings for your system.

Procedure

In the system web interface, go to Audio/Video > Audio > Audio Output .

Configure the following settings (your changes save automatically):

Setting

Primary Audio Volume

Description

Sets the main audio output volume level going to the speakers.

102

Configuring Audio Settings

Setting

Bass

Treble

Speaker Options

Description

Sets the volume level for low frequencies without changing the primary audio volume.

Sets the volume level for high frequencies without changing the primary audio volume.

Specifies the speaker output.

▪ TV Speakers : Use only the speakers on your connected monitors.

▪ System Speakers : Use only the built-in speakers on a Studio X50 or Studio X30 system.

Using Poly Trio Speakers

When you pair a Poly Trio system with your video system, you can use the phone’s speakers as the audio output for the room.

Choose Speakers When Paired with Poly Trio

In or out of a call, you can toggle whether you want to use Poly Trio, connected monitor, or video system speakers.

Procedure

In the system web interface, go to Audio/Video > Audio > Audio Output .

Choose one of the following Speaker Options :

▪ Phone Speakers : Use only your Poly Trio system speakers.

▪ TV Speakers : Use only the speakers on your connected monitors.

▪ System Speakers : Use only the built-in speakers on a Studio X50 or Studio X30 system.

Configure 3.5 mm Audio Output

If you want to use the 3.5 mm stereo line output to hear audio in the room, make sure you mute the monitor(s) connected to your system through HDMI.

The Studio X30 doesn’t support 3.5 mm audio output.

Procedure

In the system web interface, go to Audio/Video > Audio > Line Out .

To specify how volume is controlled for a device connected to the line out port, choose one of the following Output Mode options:

▪ Variable : Enables users to change the volume.

▪ Fixed : Sets the volume to the audio level configured for the system.

103

Configuring Audio Settings

USB Audio

Your system supports audio input and output sources through USB connections. When enabled, non-USB audio connections aren’t supported.

Using USB and Bluetooth Headsets

You can use USB and Bluetooth headsets with your system (Bluetooth headsets require a USB adapter).

When connected, you can control your headset audio but not the system audio (such as mute or volume control).

Only headsets with the following specifications are supported:

▪ 48 kHz sample rate

▪ Dual channels

▪ 16-bit pulse-code modulation (PCM)

Using the Shure IntelliMix P300

You can connect a Shure IntelliMix P300 audio conferencing processor to your G7500 or Studio X50 system using a USB-A port (USB-C isn’t supported).

Note the following when using this audio processor:

▪ Once connected to the system, the processor handles all audio.

▪ You can’t use speakers and microphones that aren’t connected to the processor.

▪ The video system automatically disables its internal echo cancellation processing.

Using the EagleEye Cube USB Camera Microphone

With a G7500 system, you can use the Poly EagleEye Cube USB camera as a microphone if you don’t connect other microphones to the system.

Enable USB Audio

USB audio connections (for example, a USB headset) don’t work by default.

Procedure

In the system web interface, go to Audio/Video > Audio > General Audio Settings .

Select the Enable USB Audio check box.

104

Configuring Video and Camera Settings

Topics:

▪

HDMI I/O

▪

Supported HDCI Input Resolutions

▪

Configure Monitor Settings

▪

Configure a Touch Monitor

•

Monitors with CEC

▪

Configure General Camera Settings

▪

Reset Camera Settings to Defaults

▪

Calibrate EagleEye Producer Group Framing

▪

Supported USB Cameras

▪

Selecting the Primary Camera

▪

Configuring Video Input Settings

▪

Video Codec Capabilities

You can configure video settings for your system, including monitors and cameras.

Use the information about supported HDMI I/O resolutions and codec capabilities to optimize your video experience based on your deployment requirements.

HDMI I/O

Your system has HDMI input and output ports.

Your system has the following HDMI connections:

▪ Output for connecting the primary system monitor (Monitor 1)

▪ Output for connecting the secondary system monitor (Monitor 2)

The Studio X30 system doesn’t have a second HDMI output.

▪ Input for content sharing, including audio streaming

Note the following:

▪ The system supports only HDMI-to-HDMI connections and doesn’t support display conversions, such as VGA-to-HDMI or HDMI-to-DVI cable converters.

▪ The HDMI specifications don’t provide maximum cable length definitions. The requirements defined in the specification implicitly give rise to length limitations that are based on the cable’s construction.

▪ As with other Polycom hardware, the HDMI ports on your system meet HDMI specification requirements. HDMI signal quality is dependent on every cable and connector in the HDMI path.

Passive HDMI extenders, female-female couplers, and wall plates are potential points of failure and signal loss.

105

Configuring Video and Camera Settings

▪ A high-quality passive cable of minimum length provides the most repeatable solution. As the power level of HDMI output devices can vary greatly, keep the distance from the HDMI source to the system input as short as possible.

Polycom claims no responsibility or liability for the quality, performance, or reliability of third-party HDMI cables, HDMI splitters, or HDMI USB adapters.

Polycom recommends working with your A/V integrator or partner who understands the unique requirements in your environment.

Supported HDMI Output Resolutions for Single-Monitor Setups

Your system supports the following HDMI output resolutions and frame rates when using one monitor.

Supported HDMI Output Resolutions and Frame Rates for Single-Monitor Setups

Output

UHD (4K)

FHD

Resolution

3840 × 2160p

1920 × 1080p

Frame Rates (fps)

25, 30, 50, 60

50, 60

Supported HDMI Output Resolutions for Dual-Monitor Setups

The G7500 and Studio X50 systems support the following HDMI output resolutions and frame rates when using two monitors.

Note: 4K resolution (3840 × 2160p) isn’t supported when you configure your system for dual monitors. If you want to use 4K, set Monitor 2 to Off in the system web interface.

Supported HDMI Output Resolutions and Frame Rates for Dual-Monitor Setups

Output Resolution Frame Rates (fps)

FHD 1920 × 1080p 50, 60

Supported HDMI Input Resolutions

The content sharing HDMI interface supports audio streaming. Sharing content from personal computing devices refers to sharing content using a computer with an HDMI connection. The system supports a variety of resolutions.

Supported HDMI Input Resolutions and Frame Rates

Input Resolution

UHD

QHD

FHD

WSXGA+

3840 x 2160p

2560 x 1440p

1920 x 1080p

1680 x 1050

Frame Rate(s)

24, 25, 30

50, 60

106

Configuring Video and Camera Settings

Input

UXGA

SXGA

XGA

SVGA

Resolution

1600 x 1200

1280 x 1024

1280 x 720p

1024 x 768

800 x 600

Frame Rate(s)

50, 60

Supported HDCI Input Resolutions

The HDCI input resolution is fixed based on the supported Poly camera.

HDCI input applies only to the G7500 system.

Configure Monitor Settings

You can optimize your system video output for single- and dual-monitor setups.

The Studio X30 system doesn’t support dual monitors.

Interlaced modes aren’t supported.

Procedure

In the system web interface, go to Audio/Video > Monitors .

Configure the following settings (your changes save automatically):

Setting

Configure Monitor

Description

Specifies monitor settings.

▪ Automatic : (Default) Detects the highestsupported resolution of the connected monitors.

When you select this option, the Resolution setting is disabled.

▪ Manual : You can choose the monitor

Resolution .

▪ Off : Disable this monitor (not available for

Monitor 1).

Note: To use 4K resolution, make sure you set

Monitor 2 to Off .

107

Configuring Video and Camera Settings

Setting

Resolution

Description

Specifies the monitor resolution. This setting is unavailable when you select Automatic for the

Configure Monitor setting.

Note: The system uses the resolution you select even if the monitor doesn’t support it.

There is no dynamic resolution adjustment in this situation.

Related Links

Configure a Touch Monitor on page 108

Configure Dual Monitor Display Settings on page 131

Configure a Touch Monitor

In a dual-monitor setup, you must configure the touch monitors to work in the system local interface.

Note: Touch monitors in single-monitor setups don’t require configuration. For example, there’s no additional touch monitor configuration required if you have a Studio X30 system.

Procedure

Do one of the following:

▪ In a call: Go to Menu > More > Settings > Diagnostics > Touch Configuration .

▪ Out of a call: Go to Menu > Settings > Diagnostics > Touch Configuration .

On each screen, select the Hand icon.

Select Finish Configuration .

Related Links

Configure Monitor Settings on page 107

Configure Dual Monitor Display Settings on page 131

Monitors with CEC

You can use some Consumer Electronics Control (CEC) features with HDMI-connected monitors that support the CEC protocol.

Your system supports the following CEC commands:

• System Standby : When the system goes to sleep, connected monitors switch to standby mode to save power.

• One Touch Play : You can wake connected monitors with your system remote control.

Remember the following when enabling CEC on your system:

108

Configuring Video and Camera Settings

• If you connect a monitor with an HDMI splitter, the splitter must support CEC. Due to HDMI splitter limitations, monitors behind a 1xM (one-input multiple-output) splitter might not switch to the correct input when waking up.

• The system doesn’t respond to CEC commands from a monitor remote control.

• If a monitor is connected to two endpoints, the monitor displays the active endpoint when the other is sleeping.

Disable CEC

You can disable CEC in the system web interface.

Procedure

In the system web interface, go to Audio/Video > Monitors .

Clear the Enable Consumer Electronics Control check box.

Enable CEC

You can enable CEC in the system web interface.

Make sure your monitor’s CEC settings are configured correctly (see your monitor’s documentation).

Procedure

In the system web interface, go to Audio/Video > Monitors .

Select the Enable Consumer Electronics Control check box.

Configure General Camera Settings

You can configure settings for cameras connected to your system. The system automatically discovers your camera model and displays the relevant settings in the system web interface.

See the latest Release Notes for specific information about the cameras you can use with your system.

Note: If you connect an unsupported camera, the system still attempts to show video. Poly can’t guarantee that the results are optimal or that the available settings are the same as a supported camera.

Procedure

In the system web interface, go to Audio/Video > Video Inputs > General Camera Settings .

Configure the following settings:

Setting

Allow Other Participants in a Call to Control Your

Camera

Description

Specifies whether the far site can pan, tilt, or zoom the near-site camera. When you enable this setting, a user at the far site can control the framing and angle of the camera for the best view of the near site. This is also called Far End Camera Control

(FECC).

109

Configuring Video and Camera Settings

Setting

Power Frequency

Enable Camera Preset Snapshot Icons

Camera Sleep Mode

Description

Specifies the power-line frequency for your system.

Your system typically defaults to the correct powerline frequency based on the video standard used in the country where it’s located. This setting helps you adapt the system to areas where the frequency doesn’t match the video standard. You might also need to change this setting to avoid flicker from fluorescent lights in the room.

Enables the use of snapshot icons that represent camera presets.

To see a preset icon, you must enable this setting before configuring the preset.

Specifies a sleep mode for your camera.

Fast Wake Up : The camera provides an image as soon as the monitor wakes. While asleep, the camera faces forward.

▪ When you set sleep Display to Black , an image more quickly displays, but be aware that this uses maximum power.

▪ When you set sleep Display to No Signal , the display synchronizes with the system. This can take a few seconds but may conserve energy depending on the monitor.

Save Energy : Puts the camera into standby mode to save power (the camera spins to the rear and faces down).

▪ When you set sleep Display to Black , it takes a few seconds for the camera to send an image.

▪ When you set sleep Display to No Signal , the camera is already sending an image by the time the display synchronizes with the system.

Current People Camera Select the camera or HDMI input to be used for conferencing.

Enable User Camera Selection Allow the user to select primary camera from the

TC8 or the local interface.

Select Save .

Related Links

Update Poly HDCI Cameras on page 140

Configure Sleep Settings on page 32

System Web Interface Is Displaying Invalid or Disabled Camera Settings on page 170

110

Configuring Video and Camera Settings

Reset Camera Settings to Defaults

After changing camera settings, you can quickly reset all camera settings to the default configuration.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

Select Reset to Defaults .

Select Continue .

Camera settings reset to the default configuration.

Calibrate EagleEye Producer Group Framing

Calibrate your EagleEye Producer camera to align with your EagleEye camera using the RealPresence

Group Series remote (the RealPresence Group Series remote is different from the remote that came with your system). Calibrating the cameras ensures the best view of the room for group framing.

Verify that the EagleEye camera is properly attached to the EagleEye Producer as described in the

Polycom EagleEye Producer Setup Sheet .

The EagleEye Producer camera must align with the EagleEye IV camera. If the alignment changes, group framing isn’t accurate.

Procedure

In the local interface, go to Menu > Camera > Select Camera .

Select EagleEye Producer as the primary camera.

On the RealPresence Group Series remote, press the Home button for five seconds.

The EagleEye Producer LED changes to a fast blue blink.

Using the video preview on your monitor, press the Up and Down arrow buttons on the

RealPresence Group Series remote control to align the EagleEye Producer camera with the

EagleEye camera.

Note: Use the video preview on your monitor to show the best room view when group framing.

Do one of the following:

▪ On the RealPresence Group Series remote, press the Home button to exit calibration mode.

▪ Don’t press any buttons 5 seconds to automatically exit calibration mode.

Supported USB Cameras

You can connect a supported USB camera to your G7500 or Studio X50 system to use as a primary or secondary camera.

Poly supports the following USB cameras:

▪ Poly EagleEye Cube USB camera

▪ Polycom EagleEye IV USB camera

▪ Poly Studio USB video bar

111

Configuring Video and Camera Settings

▪ Polycom EagleEye Mini USB camera

▪ Vaddio ConferenceSHOT AV

▪ Huddly IQ Conference Camera

▪ Logitech Rally Ultra HD PTZ Camera

Poly supports the INOGENI 4K2USB3 4K HDMI to USB 3.0 Capture Device.

Note: The INOGENI 4K2USB3 defaults to a 4K output resolution. Poly recommends updating the device to firmware release 8.39 or higher, and using the INOGENI Control App v2.81 or higher.

Configure the maximum resolution to match the HDMI input source you intend to connect to the

INOGENI 4K2USB3. For example, if the HDMI input source to be connected to the INOGENI

4K2USB3 is outputting 1920x1080, the INOGENI 4K2USB3 must be configured with a maximum resolution of 1920x1080. A mismatch between the HDMI input resolution of the source connected to the INOGENI 4K2USB3 and the device's maximum resolution results in no video.

Selecting the Primary Camera

In Poly Video Mode and Zoom Rooms, if you have more than one camera attached to the system, you can select the primary camera in or out of a call.

Camera Priority

When you connect or disconnect a camera, camera priority determines the primary or active camera.

▪ When you attach a camera to a system that’s powered on, it automatically becomes the current people camera.

▪ If you attach a camera during a call, it automatically becomes the current people camera.

▪ If you disconnect the current people camera, the system falls back to the next priority camera.

The system observes the following camera type priority:

Embedded camera

HDCI camera

USB camera

HDMI source set to display as people

Maximum Number of Supported Camera Connections

Your systems support a limited number of cameras for use in and out of calls.

Each system supports the following number of cameras:

112

Configuring Video and Camera Settings

Maximum Number of Connected Cameras

System

G7500

Studio X50

Studio X30

Cameras

Supports a maximum of four connected cameras at a time.

▪ Three USB-A cameras

▪ One HDCI camera

Supports a maximum of two connected cameras at a time.

▪ Two USB-A cameras

▪ Built-in camera

Doesn't support multicamera connections.

Configuring Video Input Settings

You can customize your video input settings, such as enabling connected cameras, adjusting camera orientation, or specifying whether people or content display on connected monitors.

Your system supports two video inputs. For example, a People source has pan, tilt, zoom, and near/far camera control settings, while a Content source doesn’t.

Configure General Video Input Settings

Available settings vary depending on your video input sources.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

Go to the input of a connected camera.

Configure the following settings:

Setting

Input Format

Name

Model

Description

Specifies the source type of the device. This setting is read-only unless the system doesn’t detect the device.

Enter a name for the camera or device.

Displays the type of device connected to the system.

113

Configuring Video and Camera Settings

Setting

Optimized for

Orientation

Backlight Compensation

Skin Enhancement

Wide Dynamic Range

Framing Size

Sharpness

Brightness

Color Saturation

Maximum Digital Zoom Factor

Description

Specifies optimization preferences for the video input.

▪ Sharpness : Gives preference to resolution over frames per second. With this setting, moderateto-heavy motion at low call rates can cause some frames to drop.

▪ Motion : Gives preference to frames per second over resolution.

Specifies whether to invert the camera display for a

Studio X30 system that’s mounted below a monitor.

Specifies if the camera automatically adjusts for a bright background. Use backlight compensation when the subject appears darker than the background.

Enables or disables natural skin color enhancements for participants.

Enables or disables re-exposure according to the framed area instead of full view.

Specifies the framing view.

▪ Wide : Establishes a wide view of meeting participants.

▪ Medium : (Default group framing view)

Establishes a medium view of meeting participants.

▪ Tight : Establishes a close-up view of meeting participants.

Adjusts the video’s overall clarity.

Adjusts the video brightness.

Adjusts the color saturation.

Specifies the maximum digital zoom factor for the camera.

Select Save .

Configure HDMI Input Settings

Configuring HDMI input as people input enables you to take full advantage of the system’s available transmit bandwidth and provides better picture quality for shared content.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

114

Configuring Video and Camera Settings

Configure the following HDMI Input settings:

Setting

Display as

Name

Optimized for

Description

Specifies the display type. You can’t change this setting if the system is in Device Mode or if the

HDMI input is set to People and the system is currently using the source as the people camera.

▪ People : Sends content as a camera source with the highest levels of transmit bandwidth.

This feature isn’t available on Studio X30 systems.

▪ Content : Sends content as a content source with a lower bandwidth and enables you to use the system’s annotation tools.

Enter a custom name for the HDMI input.

Specifies optimization preferences for the video input.

▪ Sharpness : Gives preference to resolution over frames per second. With this setting, moderateto-heavy motion at low call rates can cause some frames to drop.

▪ Motion : Gives preference to frames per second over resolution.

Select Save .

Adjust the White Balance

The white balance setting specifies how the camera compensates for light source variations in the room.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

Choose one of the following options for the White Balance setting (available options depend on the camera you’re using):

▪ Auto : Recommended for most situations. It calculates the best white balance setting based on lighting conditions in the room.

▪ Manual : Use this setting for rooms where the Auto and fixed values don’t provide acceptable color reproduction.

When you set to Manual , fill the camera’s field of view with a flat white object, such as a piece of paper. For best results, the object should be uniformly illuminated with light that is representative of the room lighting used in the conference, rather than light from a display, another area, or a shadow. After the object is in place, select Calibrate .

▪ Color Temperature Value : The color temperature values, measured in degrees Kelvin, correspond to the color of ambient light in a room. Use lower values for warmer lighting and higher values for cooler lighting.

▪ Color Temperature Term : Some cameras provide text descriptions of available color temperatures (for example, Fluorescent or Shade ).

115

Configuring Video and Camera Settings

▪ Off

Select Save .

Configure Camera Tracking Settings for Studio X50 or Studio X30

With Studio X50 and Studio X30 systems, Poly camera tracking technology can automatically frame groups of people and follow conversations in small and medium rooms.

Tracking options and behavior depend on your connected camera. For example, if you use a standalone

EagleEye IV camera with your system, you won’t see tracking options.

Note: If you select a framing option, it automatically enables tracking on Studio X50 and Studio X30 systems.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

Go to the camera’s settings and specify a Tracking Mode .

▪ Frame Group : The camera automatically locates and frames all the people in the room.

▪ Frame Speaker : The camera includes everyone in the current conversation. For example:

◦ The camera focuses on people actively talking.

◦ When someone is talking for a prolonged period of time, the camera assumes that this person is presenting and only focuses on them.

◦ If there’s a period in which no one has said anything or the far side is doing most of the talking, the camera frames everyone in the room.

Note: When you mute your microphone, the camera tracking mode automatically switches to Frame Group .

▪ Presenter Mode : The camera tracks an active speaker who’s talking and moving. Presenter mode is a preview feature on the Studio X30 that may be removed or changed in a future release.

▪ Off : Disables automatic tracking. You must control the camera manually.

Select Save .

Related Links

Presenter Mode on page 117

Configure Camera Tracking Settings for G7500

With a G7500 system, Poly camera tracking technology can automatically frame groups of people or the active speaker in medium and large rooms.

Tracking options and behavior depend on your connected camera. For example, if you use a standalone

EagleEye IV camera with your system, you won’t see tracking options.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

Go to the camera’s settings and specify a Tracking Mode .

▪ Frame Group : The camera automatically locates and frames all the people in the room.

116

Configuring Video and Camera Settings

▪ Frame Group with Transition : The camera automatically locates and frames people in the room while moving the camera. For example, if someone enters the room, you might see the camera pan until that person is in view. This option is available only using an EagleEye

Producer camera.

▪ Frame Speaker : The camera automatically locates and frames the active speaker. When someone else starts speaking, the camera switches to that person.

Note: When you mute your microphone, the camera tracking mode automatically switches to Frame Group .

▪ Off : Disables automatic tracking. You must control the camera manually.

Optional: Turn on the Picture in Picture setting.

This setting is available only with the EagleEye Director II camera. When enabled, a picture-inpicture window displays showing a wide angle of the room in addition to the main window showing the primary speaker(s).

Select Save .

Related Links

Presenter Mode on page 117

Presenter Mode

Presenter mode frames the main speaker in your meeting room and follows the speaker when the speaker moves.

You can enable presenter mode for meetings where one person is the primary presenter or for distance learning so the camera always shows the instructor. When using presenter mode, you need to talk for 3 to

5 seconds before the camera starts tracking your movement.

Presenter mode ends automatically in the following situations:

▪ The presenter stops talking for a while.

▪ The presenter walks off camera.

To ensure the best performance of presenter mode, do the following:

▪ Place the device within 3 m (10 ft) of the speaker.

▪ Position the device so the camera is level with the speaker’s upper chest instead of eye level. This enables the camera to capture most of the speaker’s body along with the presentation background.

If you position the camera at the speaker’s eye level, the device may be positioned too high to capture all the content on the screen. If you position the camera lower than the speaker’s upper chest, the speaker’s head may not appear in the camera view.

▪ If other people are in camera view, ensure they’re not speaking and minimize background noises.

▪ Provide sufficient lighting on the presenter while avoiding excessive backlighting or glare from ceiling lights or windows.

▪ The system can track the presenter when they’re facing away from the camera, but tracking works best when the presenter faces the camera.

▪ The system can track presenters wearing face coverings or glasses.

▪ If the camera tracking isn’t functioning as expected, try turning presenter mode tracking off and back on again.

on page 116

117

Configuring Video and Camera Settings

Configure Camera Tracking Settings for G7500 on page 116

Video Codec Capabilities

Your system supports H.265 High Efficiency Video Coding (HEVC), H.264 Advanced Video Coding

(AVC), and H.263 codec standards.

H.265 High Efficiency Video Coding

From a video call quality standpoint, H.265 gives you up to 4K at 30 fps for people streams and 4K at 15 fps for content streams.

Note: Your system only supports H.265 during point-to-point SIP calls with any of the following Poly video systems: G7500, Studio X50, or Studio X30.

Supported H.265 People Stream Resolutions During Calls

The following tables include the H.265 resolutions and frame rates for people streams observed in SIP calls between two Poly video systems (G7500, Studio X50, or Studio X30).

Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)

Due to the complexities of system capabilities and the call types and scenarios in your environment, it isn’t possible to provide the resolutions and frame rates for calls between a system and a different type of endpoint. The systems attempt to provide the highest resolutions and best frame rates in all types of calls.

The information in the following table is based on a camera source capable of 4K at 30 fps (for example, the Studio X50 or Studio X30’s built-in camera).

Supported H.265 People Stream Resolutions During Calls (4K at 30 fps Camera Source)

Call Speed (kbps)

1137–1308

1309–1468

1469–2110

≥2111

Motion/Sharpness

Both

Resolution

2560 × 1440

2880 × 1620

3200 × 1800

3840 × 2160

Max Frame Rate (fps)

The information in the following table is based on a camera source capable of 1080p at 60 fps.

Supported H.265 People Stream Resolutions During Calls (1080p at 60 fps Camera Source)

Call Speed (kbps)

370–479

480–109

Motion/Sharpness

Motion

Resolution

1024 × 576

1280 × 720

Max Frame Rate (fps)

118

Configuring Video and Camera Settings

Call Speed (kbps)

≥110

300–600

600–1199

≥1200

Motion/Sharpness

Motion

Sharpness

Resolution

1920 × 1080

1280 × 720

1920 × 1080

Max Frame Rate (fps)

Supported H.265 Content Stream Resolutions During Calls

The following table includes the H.265 resolutions and frame rates for content streams observed in SIP calls between two Poly video systems (G7500, Studio X50, or Studio X30).

Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)

Supported H.265 Content Stream Resolutions During Calls

Resolution

1920 × 1080

2560 × 1440

2880 × 1620

3200 × 1800

3840 × 2160

Sharpness Max Frame Rate (fps)

Motion Max Frame Rate (fps)

H.264 Advanced Video Coding

Your system supports H.264 during H.323 and SIP calls.

Supported H.264 People Stream Resolutions During Calls

The following table includes the H.264 resolutions and frame rates for people streams observed in H.323

calls between two Poly video systems (G7500, Studio X50, or Studio X30).

Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)

The information in the following table is based on a camera source capable of 1080p at 60 fps.

119

Configuring Video and Camera Settings

Supported H.264 People Stream Resolutions During Calls

Call Speed (kbps) Motion/Sharpness Resolution

<160

160–511

512–831

832–895

896–1727

≥1728

<128

128–511

512–1023

≥1024

Motion

Sharpness

512 × 288

640 × 368

848 × 480

720 × 832

1280 × 720

1920 × 1080

640 × 368

1024 × 576

1280 × 720

1920 × 1080

Max Frame Rate (fps)

Supported H.264 Content Stream Resolutions During Calls

The following table includes the H.264 resolutions and frame rates for content streams observed in H.323

calls between two Poly video systems (G7500, Studio X50, or Studio X30).

Resolutions and frame rates are based on the call speed and the Optimized for setting of your video input. (For example, Motion or Sharpness .)

Supported H.264 Content Stream Resolutions During Calls

Resolution Sharpness Max Frame Rate (fps)

800 × 600

1024 × 768

1280 × 720

1280 × 1024

1920 × 1080

Motion Max Frame Rate (fps)

120

Setting Up a Directory

Topics:

▪

Managing Contacts and Favorites

You can register your system with a directory to call contacts in your organization.

The system supports the following directory features:

▪ Up to 2,000 local contacts

▪ Up to 2,000 Favorites

▪ Up to 200 Favorites groups

▪ Global groups (local groups aren’t supported)

▪ Up to 4,000 contacts from a Polycom GDS server

Register with the Polycom Global Directory Server

You can register your system with the Polycom Global Directory Server (GDS).

Enable H.323 on your system before you register it with this directory server.

Procedure

In the system web interface, go to Servers > Directory Servers .

In the Server Type field, select Polycom GDS .

Configure the following settings:

Setting

Server Address

Password

Select Save .

Description

Specifies the IP or DNS address of the Polycom

GDS.

The Polycom GDS password, if one exists.

Register with an LDAP Directory Server

You can register your system with an LDAP directory server.

Procedure

In the system web interface, go to Servers > Directory Servers .

In the Server Type field, select LDAP .

Configure the following settings:

121

Setting Up a Directory

Setting

Server Address

Server Port

Base DN (Distinguished Name)

Multitiered Directory Default Group DN

Authentication Type

Description

Specifies the address of the LDAP directory server.

When provisioned, this setting is read-only.

Specifies the port for connecting with the LDAP server. When provisioned, this setting is read-only.

Specifies the top level of the LDAP directory where searches begin. When provisioned, this setting is read-only.

To avoid LDAP registration issues, make sure the base DN is at least one level deeper than your domain. For example, enter ou=users,dc=example,dc=com instead of dc=example,dc=com .

Specifies the top-level group of the LDAP directory required to access its hierarchical structure. When provisioned, this setting is read-only.

Specifies the protocol for authenticating with the

LDAP server:

▪ NTLM

▪ Basic

▪ Anonymous

Bind DN (Distinguished Name)

Use SSL (Secure Socket Layer)

Domain Name

User Name

Specifies the bind DN when using basic authentication. Available only when you set

Authentication Type to Basic . When provisioned, this setting is read-only.

When enabled, encrypts data to and from the

LDAP server.

Specifies the domain name for registering with the

LDAP server.

Specifies the user name for registering with LDAP server.

Password Specifies the password for registering with the

LDAP server.

Select Save .

Related Links

Configure System Access Settings

on page 63

LDAP Directory Server Ignores the Minimum TLS Version Setting on page 166

122

Setting Up a Directory

Managing Contacts and Favorites

You can create local contacts and designate favorites for your system.

Types of Favorites

The system web interface displays several types of favorites.

Directory Server Registration

Polycom GDS

LDAP with H.350

Types of Contacts

▪ Directory entries created locally by the user.

▪ References to Polycom GDS entries added to

Favorites by the user.

These entries are available only if you successfully register the system with Polycom GDS. Users can delete these entries from Favorites , but they can’t edit these entries. Users can copy these entries to other

Favorites and remove them from those groups.

▪ Directory entries created locally by the user.

▪ References to LDAP directory entries added to

Favorites by the user.

These entries are available only if the system can successfully access the LDAP server. Users can delete these entries from Favorites , but they can’t edit these entries. Users can copy these entries to other

Favorites and remove them from those groups.

Manage Contacts

You can add contacts individually or in bulk in the system web interface.

Procedure

Do one of the following:

▪ Go to Dashboard > Contacts .

▪ Go to Place a Call > Contacts .

Select More and choose one of the following options:

▪ New Contact : Create a single contact.

▪ Import : Upload contacts in bulk using an XML file (can’t exceed 3 MB).

▪ Export : Download local contacts to an XML file (doesn’t include contacts available through a directory server).

123

Unfavorite a Contact

Unfavorite a contact to remove the contact from your Favorites list.

Procedure

Go to Place a Call > Favorites .

Choose a favorite card, then select Unfavorite .

The contact is removed from the Favorites list.

Setting Up a Directory

124

Calendaring Service

Topics:

•

Configure a Calendaring Service

systems can connect to Microsoft Exchange Server 2013 to retrieve calendar information for a specific

Microsoft Outlook or a Microsoft Office 365 individual or system account. The system connects to

Microsoft Exchange Server using the credentials you provide or by automatically discovering the connection information based on an email address or SIP server address.

Connection to a calendaring service allows the system to:

• Display the day's scheduled meetings, along with details about each

• Display a Join button on all scheduled meetings for the current day

• Let users join the meeting without knowing the connection details

• Hide or show details about meetings marked Private, depending on the configuration of the system

• Display a meeting reminder before each scheduled meeting, along with a reminder tone

Professional Services for Microsoft integration is mandatory for Polycom Conferencing for Microsoft

Outlook and Microsoft Office Communications Server integrations. For additional information and details, please refer to http://www.poly.com/us/en/products/services or contact your local Polycom representative.

Configure a Calendaring Service

You must configure your system to use a calendaring service so users can see scheduled meetings on the local interface.

Procedure

In the system web interface, go to Servers > Calendaring Service .

Select the Enable Calendaring Service check box.

Configure the following settings:

Setting

Description

Specifies the email address used when scheduling the system for a meeting (for instance, you can use your system as a mechanism to reserve a meeting space). This email address must match the Primary

SMTP Address for the account on Microsoft

Exchange Server, which displays as the value of the mail attribute in the account properties.

125

Setting

Domain

User Name

Password

Auto Discover Using

Calendaring Service

Description

Specifies the domain to register to the Microsoft

Exchange Server in NETBIOS or DNS notation (for example, company.local

or COMPANY ).

If you are using the Auto Discover Using setting in the system web interface, don’t provide a value here.

Specifies the user name to register to the Microsoft

Exchange Server. This can be the name of the system or an individual (for example, [email protected]

If you want to use the calendar associated with an

Office 365 account, enter the user name for that account here.

Specifies the system password to register to the

Microsoft Exchange Server. This can be the system's or an individual’s password.

If you want to use the calendar associated with an

Office 365 account, enter the password for that account here.

Specifies how the system obtains the Microsoft

Exchange Server address. If you select Email

Address , the system uses the value provided in the Email field. If you select SIP Server , the system uses the registered SIP server domain name configured for the system.

With either option, you must complete the Email ,

User Name , and Password fields that correspond to the account you want the system to use for the calendaring service. The system may prompt you to confirm the password.

Note: This feature is unavailable if the Microsoft

Exchange Server address is provisioned.

If after configuring the calendaring service a message displays that the system is unable to discover the service, verify that the information you provided is correct.

You can also use an API command to automatically discover the Microsoft Exchange Server address.

For more information, go to the Poly Online

Support Center .

126

Calendaring Service

Setting

Microsoft Exchange Server

Meeting Reminder Time in Minutes

Play Reminder Tone When Not in a Call

Description

Specifies the FQDN of the Microsoft Exchange

Client Access server. If your organization has multiple servers behind a network load balancer, this is the FQDN of the server’s virtual IP address.

If required, you can use an IP address instead of an FQDN, but it’s recommended you use the same

FQDN for Outlook clients.

Provide a value here only if you want to manually provide connection information to the Microsoft

Exchange Server. Otherwise, use the Auto

Discover Using setting to automatically populate this field.

Specifies the number of minutes before the meeting that a reminder displays on the system.

Specifies whether to play a sound along with the text reminder (when the system is not in a call).

Show Information for Meetings Set to Private Specifies whether to display details about meetings marked private.

Select Save .

After you register your system to the calendaring service, users can join scheduled meetings from the

Home and Calendar screens on the local interface.

127

Sharing Content

Topics:

▪

Default Options for Sharing Content

▪

Disable Screen Mirroring Options

Your system provides several ways to share and annotate content.

Related Links

End a Session on page 134

Disable the Security Code

on page 76

Enable or Disable Content Saving

on page 76

Default Options for Sharing Content

Once your system is running and configured for your environment, users can share content from their personal devices with no additional setup using the following methods.

▪ Wireless screen mirroring :

◦ A Miracast-certified device screen is mirrored onto the system display.

◦ An AirPlay-certified device screen and any accompanying audio is mirrored onto the system display.

You can disable these options in the system web interface.

▪ Wired input : A laptop or desktop connected to the system through HDMI.

▪ Polycom Content App : Installed on a Microsoft Windows or Apple Mac system for wireless screen or application sharing. Poly recommends that you install Polycom Content App for Windows 1.3.1 or later to avoid issues connecting the client to the system.

For more information on Miracast, see the Miracast Performance Technical Reference on the Poly Online

Support Center .

The system allows up to four simultaneous content sources out of a call and three in a call (a source can include content shared from a device in the room or by a far-end participant).

For example, if you’re in a call with three content sources and you share your desktop using the Content

App, the oldest wireless or far-end content source in the session is replaced by your content. HDMI content, however, is never replaced.

Related Links

Disable Wireless Options on page 57

Video Codec Capabilities

on page 118

Disable the Polycom Content App Port on page 75

128

Sharing Content

Disable Screen Mirroring Options

You can disable content sharing with Miracast- or AirPlay-certified devices (screen mirroring) without turning off wireless connectivity or Bluetooth on your system. Screen mirroring options are enabled by default.

Procedure

In the system web interface, go to Security > Wireless Security .

Do one of the following:

▪ Clear the Enable AirPlay check box to disable screen mirroring with AirPlay-certified devices.

▪ Clear the Enable Miracast check box to disable screen mirroring with Miracast-certified devices.

129

Customizing the Local Interface

Topics:

▪

Change the Home Screen Background Image

▪

Restore the Default Background Image

▪

Customize the Address Bar

▪

Display Meetings or Favorites on the Home Screen

▪

Configure Dual Monitor Display Settings

You can configure some of the system local interface settings according to your preferences.

Change the Home Screen Background Image

You can upload a custom background image to display on your system.

The image must have a 16:9 resolution between 1280 × 720 and 3840 × 2160 (1920 × 1080, 2560 ×

1440, or 3840 × 2160 is recommended). The system supports .jpg

and .png

formats with a file size of less than 10 MB.

Note: This option is unavailable if your image is provisioned to the system.

Procedure

In the system web interface, go to General Settings > Home Screen .

Select Choose File , navigate to the image file, then select Upload .

The custom image displays.

Restore the Default Background Image

You can switch back to the default background image to display on your system.

Procedure

In the system web interface, go to General Settings > Home Screen .

Select Use Default Background .

Customize the Address Bar

You can customize what displays in the address bar of the system’s local interface Home screen.

The address bar is under the room name. You can list two of the following details:

▪ Primary IP Address

▪ Guest Wi-Fi IP Address

130

Customizing the Local Interface

▪ H.323 Extension

▪ SIP Address

▪ None

Procedure

In the system web interface, go to General Settings > Home Screen .

Choose options for Primary Element and Secondary Element (your changes save automatically).

Display Meetings or Favorites on the Home Screen

You can display meeting information or favorite contacts on the home screen of the system local interface.

Procedure

In the system web interface, go to General Settings > Home Screen .

Select one of the following options in the Home Screen Widget field:

Setting

None

Calendar

Favorites

Description

Hides the home screen widget.

Displays meeting information on the home screen.

Displays favorites on the home screen.

Configure Dual Monitor Display Settings

You can choose your self view and content display preferences when you connect two monitors to your system.

Even if your system has only one monitor, you can still configure second monitor settings. These settings take effect once you connect a second monitor.

The Studio X30 system supports only one monitor.

Procedure

In the system web interface, go to Audio/Video > Monitors .

Configure the following settings (your changes save automatically):

131

Setting

Self View Size

Content Display

Related Links

Configure Monitor Settings on page 107

Configure a Touch Monitor on page 108

Customizing the Local Interface

Description

Specifies how the self view window displays when others join a call.

▪ Corner : Displays the self view in the corner of

Monitor 2.

▪ Full Screen : Displays the self view on the entire screen of Monitor 2.

Specifies whether to display content on one or two monitors.

▪ Single : Display content on Monitor 2 and people on Monitor 1.

▪ Dual : Display people and content on Monitor 1 and content only on Monitor 2.

132

Controlling the System Remotely

Topics:

▪

Control the Camera Remotely

▪

Wake the System Remotely

▪

Place a Call from the System Web Interface

▪

End a Session

You can control the system without a remote control.

Control the Camera Remotely

You can monitor and adjust both the far-end and the near-end video by controlling the cameras from the system web interface.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

In the Current People Camera field, select the near-end camera you want to view.

Go to Diagnostics > Remote Monitoring and do the following:

▪ To move the camera, select the direction keys.

▪ To zoom the camera view, select + or .

▪ To mute or unmute the near-end camera, select Camera below the video feed.

▪ To load a preset, go to Presets and select the preset you need.

Wake the System Remotely

You can wake the system from the system web interface.

Procedure

In the system web interface, go to Diagnostics > Remote Monitoring .

Go to System Wake and select Wake the System .

Place a Call from the System Web Interface

The system web interface gives you many of the same calling features and controls that are in the local interface.

You can also place video and audio-only calls directly from the Dashboard .

Note: You can’t make calls from the system web interface when Poly Device Mode is enabled.

133

Controlling the System Remotely

Procedure

In the system web interface, go to Place a Call .

Do one of the following:

▪ Select Dial to manually dial a number or name.

▪ Select Contacts to search local and directory contacts to call.

▪ Select Favorites to search contacts marked as Favorites.

▪ Select Recent to select a number or name you’ve called in the past.

End a Session

Use this tool to close a sharing session. All live content is stopped, and all blackboards and whiteboards are deleted.

Procedure

» Select . A message appears informing you that the session will end in 15 seconds.

Related Links

Sharing Content

on page 128

134

System Maintenance

Topics:

▪

Unlock System Settings

▪

Updating Software

▪

Downgrading Software

▪

Restart the System

▪

Reset System Settings

▪

Factory Restore the System

▪

Factory Restore a Table Microphone

▪

Factory Restore a Ceiling Microphone

▪

Factory Restore a Microphone Adapter

You can perform several functions to keep your system running properly.

Unlock System Settings

Some settings in the local interface are locked by default. You can unlock these settings with your system’s local administrator credentials.

Procedure

Do one of the following:

▪ In a call, select Menu > More > Settings .

▪ Out of a call, select Menu > Settings .

Select a setting with a Lock .

Enter your local administrator credentials to unlock the setting.

Note: Settings lock again if you exit the Settings screen, restart the system, or power off the system.

Updating Software

You can update your system software a few different ways.

Use one of the following methods to update system software:

▪ Poly download server

▪ Custom server URL

▪ Software package you obtain from the Poly Online Support Center and upload with a USB flash drive

135

System Maintenance

▪ Provisioning service (for example, Poly Lens or RealPresence Resource Manager)

Related Links

Using a Provisioning Service on page 36

Updating Paired Devices

When you update your system, you also update some of its paired devices (if those devices have a new version available). Depending on your setup, these devices might include:

▪ Poly IP Table Microphone

▪ Poly IP Ceiling Microphone

▪ Poly Microphone IP Adapter

▪ Poly Bluetooth Remote Control (firmware)

▪ Poly EagleEye Cube USB camera

▪ Poly TC8 device

Updating a Paired Poly Trio

You can update a Poly Trio system that’s supposed to work with a video system in various ways.

See the Poly Trio administrator documentation for information on updating the phone using the following methods.

Automatic Updates

Provision your phone with Poly UC Software. This method works when the phone is paired with the video system.

Manual Updates

Upgrade the phone with a USB flash drive. You must first set the phone to Hub mode before you can update.

Note: Unlike some other peripherals, you can’t update a paired Poly Trio from the Device Management page in the system web interface.

Updating Software in the G7500 System Web Interface

You can manually update software or set up automatic updates in the G7500 system web interface.

Note: The Studio E70 camera does not have a separate web user interface. All management of the camera is performed via the G7500 system web interface

Choose How to Get Software Updates

You may have several options to update your system software, depending on your environment.

Note: If you provision your system, the software update methods in the system web interface are unavailable. You must configure the software update method using your chosen provisioning method.

136

Procedure

In the system web interface, go to General Settings > Device Management .

Select one of the following options in the Download Update From field:

Software Update Method

Poly Online Support Center

Description

A software server hosted by Poly.

System Maintenance

137

Software Update Method

Custom Server URL

System Maintenance

Description

A server on your network that supports HTTP or HTTPS downloads.

▪

The URL is the path to the latest software build folder (for example, https://<system_build_folder> ). It includes update packages for some of your connected devices (for example, a TC8 device) and the video system.

To successfully update everything, you must have this exact folder structure:

◦

◦ eecube

Config image.zip

◦

◦ version videocodec

Config poly-video-<version>.zip

◦

◦ release.json

version

◦ ipmic

Config image.zip

version

◦

◦ micadapter

Config image.zip

version

◦

◦ touchctrl

Config poly-tc8-<version>.zip

version

◦ release.json

softwareupdate.cfg

138

System Maintenance

Software Update Method Description

Provisioning Server Receive updates from a provisioning service, such as

RealPresence Resource Manager.

If you choose to download software from a Custom Server URL , enter the path to the software build folder on your network in the Update Server Address field.

Once you select from where to download software updates, you can manually or automatically update the system.

Related Links

Using a Provisioning Service on page 36

Manually Update Software

You can manually update the software of your system and some of its paired devices.

Procedure

In the system web interface, go to General Settings > Device Management .

Select Check for Updates .

If the system finds updates, select Update All .

Automatically Update Software

You can automatically update the software of your system and some of its paired devices.

Procedure

In the system web interface, go to General Settings > Device Management .

Select Enable Automatic Updates .

Unless you specify a maintenance window, your system tries to update a minute after you enable this setting. If an update isn’t available at the time, the system tries again every four hours.

Optional: Select Only Check for Updates During Maintenance Hours to specify a range of time to automatically update the software.

Optional: Choose times for Maintenance Hours Begin and Maintenance Hours End .

The system calculates a random time within the defined maintenance window to check for updates.

Note: If these settings are provisioned, the provisioning profile defines the polling interval. The default interval is one hour.

Update System Software from a USB Flash Drive

Procedure

Obtain the software package from the Poly Online Support Center .

Save the software upgrade package to the root directory of a USB flash drive.

Connect the USB flash drive to the USB 2.0 port on the back of the device. This is the top USB port. The device detects the USB flash drive and displays a prompt on the monitor for you to confirm that you want to update the software.

139

System Maintenance

Select OK . Follow the setup wizard instructions to complete the update.

Update the Poly Bluetooth Remote Control Firmware

A system update may include new firmware for your Poly Bluetooth Remote Control.

You must be actively using the remote control for an available update to take effect. After 30 seconds of inactivity, the remote control disconnects from the system until you pick it up or press a button.

Procedure

Update your system software.

Pick up the remote control or press a button.

The remote control automatically updates if it detects a new firmware version.

Disable Wireless Options on page 57

Update Poly HDCI Cameras

You can automatically update an HDCI-connected Poly camera, but not in the same way you update the system and other connected devices (such as IP microphones).

HDCI cameras only apply to the G7500 system.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

Select Enable Camera Update .

If the system detects a newer software version than what the camera is currently running, the camera updates automatically when the system isn’t in a call. However, if during a call you connect a camera that isn’t running the latest software, the call ends and the camera software update starts.

Related Links

Configure General Camera Settings

on page 109

Downgrading Software

Manually downgrade software using a USB flash drive or the system web interface if your system doesn’t use a provisioning server.

Make sure that system supports the selected provider in the version you’re downgrading to.

Warning: When downgrading software to versions earlier than 3.3.2, use the system's dashboard to check that the hardware version meets the requirement for the software version. If you attempt to downgrade to an unsupported software version the downgrade fails.

Supported Hardware Versions

System

Poly Studio X50

Poly VideoOS 3.3.1 and Earlier

Poly VideoOS 3.3.2 and Later

All

140

System Maintenance

System

Poly Studio X50 No Radio

Poly G7500

Poly G7500 No Radio

Poly VideoOS 3.3.1 and Earlier

1 to 7

Poly VideoOS 3.3.2 and Later

All

Note: Poly Studio X30 has no restrictions on downgrading.

Related Links

on page 37

RealPresence Resource Manager Provisioning Fails After Downgrading Software

on page 167

Manually Downgrade Software in the System Web Interface

You can downgrade your system software and the software of some of its paired devices from a custom download server.

Before you downgrade, Poly recommends doing the following:

▪ Check the software version you’re running. You can find the software version on the system web interface Dashboard .

▪ Make sure automatic updates are disabled on General Settings > Device Management .

Procedure

Go to General Settings > Device Management .

Manually downgrade your software to an older version located on your download server.

Downgrade Software with a USB Flash Drive

You can downgrade your system software and some of its paired devices (not a TC8 device) using a USB flash drive.

Before you downgrade, Poly recommends doing the following:

▪ Check the software version you’re running. You can find the software version on the system web interface Dashboard .

▪ Make sure automatic updates are disabled on General Settings > Device Management .

Procedure

Download an older software version to a USB flash drive.

Connect the USB flash drive to your system.

141

System Maintenance

Restart the System

If you encounter issues, you can try restarting your system.

Procedure

» Do one of the following:

▪ (G7500 only) On the front of the system, press and hold the Restart button for five seconds.

▪ (All systems) In the system web interface, go to Diagnostics > System Reset and select

Restart .

Reset System Settings

You can reset your system to its default configuration settings.

You may need to perform a system reset for a variety of reasons, for example, when moving a device to a new location.

Resetting your system deletes all but the following data:

▪ Current software version

▪ User-installed PKI certificates

▪ Local directory entries

▪ Logs

▪ Call detail record (CDR)

You also can choose not to retain some of this data after the system resets.

Note: A system reset restores your system to its original mode of operation (for example, Poly Video

Mode or Poly Partner Mode).

Procedure

In the system web interface, go to Diagnostics > System Reset .

Select Reset All System Configurations .

Optional: Clear any of the following check boxes for data you want to delete as part of the reset:

▪ Keep installed certificates.

▪ Keep the directory entries.

142

System Maintenance

▪ Keep the system logs.

▪ Keep the system call detail reports.

Select Reset .

Factory Restore the System

A factory restore completely erases the system's flash memory and restores it to a stable software version. See the Poly VideoOS Release Notes , Version History section for the current factory restore version.

The system doesn’t save the following data with a factory restore:

▪ Current software version

▪ Logs

▪ User-installed PKI certificates

▪ Local directory entries

▪ Call detail record (CDR)

Procedure

Disconnect the power supply to turn off the system.

Do one of the following:

▪ On the front of the G7500, insert a straightened paper clip through the factory restore pinhole.

▪ On the side of the Studio X50, insert a straightened paper clip through the factory restore pinhole.

▪ On the bottom of the Studio X30, insert a straightened paper clip through the factory restore pinhole.

143

System Maintenance

While continuing to hold the restore button, reconnect the power supply to turn the system on.

When the system LED indicator light turns amber, stop pressing the restore button.

You can only see the restore progress on a display connected to the secondary monitor HDMI output port.

Note: You can't see the restore progress for a Studio X30 system because it has only one monitor connection.

on page 16

Factory Restore a Table Microphone

You can restore a microphone to its default settings. This process refreshes the device by deleting its configurations except the current version of software.

Procedure

Ensure that the microphone is powered on.

On the back of the table microphone insert a straightened paper clip through the factory restore pinhole.

Press and hold the restore button for 5 seconds, then release it when the microphone LED blinks amber.

Note: Don’t power off the microphone during this process. It restarts when complete.

Related Links

IP Microphones

on page 25

Factory Restore a Ceiling Microphone on page 144

Factory Restore a Ceiling Microphone

You can restore a microphone to its default settings. This process refreshes the device by deleting its configurations except the current version of software.

Factory restoring the ceiling microphone requires the following tools:

▪ A small, thin block N45 magnet (for example, 76.2 mm [3 in.] × 12.7 mm [1/2 in.] × 3.18 mm [1/8 in.])

▪ Yardstick or adjustable floor-to-ceiling pole (so you don’t have to use a ladder)

▪ Duct tape

Procedure

Tape the magnet to one end of the pole with one of the 3.18 mm (1/8 in.) edges facing up.

Caution: If you have a suspended ceiling, tape the magnet securely to avoid it coming loose and sticking to a ceiling support grid.

Ensure that the microphone is powered on.

144

System Maintenance

Locate the factory reset sensor.

Looking at the bottom edge of the microphone connector along a longer side of the electronics enclosure, the sensor is approximately 63.5 mm (2.5 in.) towards the end opposite to the enclosure’s RJ-45 connector.

If you can’t see the RJ-45 connector, look for the small black button on the microphone cable.

Facing that button at the 12 o’clock position, the sensor is located toward the 9 o’clock position.

Line up the center of the magnet with the sensor and hold it no more than 19 mm (3/4 in.) away from the enclosure for approximately 7 seconds.

The microphone LED blinks amber during a factory restore.

Note: Don’t power off the microphone during this process. It restarts when complete.

Related Links

IP Microphones

on page 25

Factory Restore a Table Microphone on page 144

145

System Maintenance

Factory Restore a Microphone Adapter

If your microphone adapter isn’t functioning correctly, you might need to factory restore it. A factory restore completely erases the microphone adapter’s flash memory and restores it to the latest major software version (x.0).

The factory restore button is on the side of the microphone adapter.

Procedure

Disconnect the power supply to turn off the microphone adapter.

2. Optional for USB flash drive method : Download the software package you want to install from

Polycom Support and save the package to the root directory of a USB flash drive. Insert the USB flash drive into a USB port.

Note: Poly recommends formatting your USB flash drive with the FAT32 file system.

Insert a straightened paper clip through the factory restore button pinhole.

While continuing to hold the restore button, reconnect the power supply to turn the microphone adapter on.

Hold the restore button for 10 more seconds, then release it.

The microphone adapter LED blinks green and blue during a factory restore.

Note: Don’t power off the microphone adapter during this process. It restarts when complete.

Related Links

Poly Microphone IP Adapter on page 27

146

Troubleshooting

Topics:

•

Logs

▪

SNMP Reporting

▪

Checking System Status

▪

View Call Statistics

▪

Check Provisioning Results

▪

Paired IP Devices

▪

Audio Tests

▪

Can’t Wake the System by Touching the Monitor

▪

LED Status Indicators for the System LAN Ports

▪

Fix Polycom Acoustic Fence Issues with G7500

▪

Test the Call Experience

▪

Test Connection with Another System

▪

Run a Trace Route

▪

LDAP Directory Server Ignores the Minimum TLS Version Setting

▪

Checking the Web Proxy Configuration

▪

Zero Touch Onboarding Connection Fails During Initial Setup or After Reset

▪

Verify Poly Lens Registration Status

▪

RealPresence Resource Manager Provisioning Fails After Downgrading Software

▪

Lighting Conditions Impact Picture Quality

▪

Issues When the System is Sleeping or Waking

▪

Poly Trio Audio Meter Not Displaying in System Web Interface

▪

A Portion of the EagleEye Cube USB Camera Name Is Cut Off

▪

Contacts with the Same Name Don't Display in the Contact List

▪

Monitor Loses Signal After Monitor Swap

▪

System Web Interface Is Displaying Invalid or Disabled Camera Settings

▪

Can’t Connect to Secondary Network After Changing Country Code

Refer to the following topics to help you diagnose and fix problems while using your system.

147

Troubleshooting

Logs

Logs contain information about system activities and configurations to help you troubleshoot issues.

Note: If your system experiences a sudden loss of power, your system loses all logs since the last system reboot or log download.

Consolidated System and Peripheral Device Logs

Event information about your system and some of its connected devices are available in a single log package.

The system log package includes details about the following devices:

• Cameras (see your video system’s latest Release Notes for supported models)

• Poly TC8 device

• Poly Trio system (see your video system’s latest Release Notes for supported models)

• Poly IP Table Microphone (G7500 only)

• Poly IP Ceiling Microphone (G7500 only)

• Poly Microphone IP Adapter (G7500 only)

Configure Log Preferences

You can manage some basic aspects of your system logs, including how logs are transferred to a USB flash drive.

Your system has limited storage space for logs. If you want logs to be overwritten less frequently, attach a

USB flash drive to the system.

When the system log fills past your configured threshold, the system triggers the following actions:

• Transfers the log to a USB flash drive if you set Transfer Frequency to Auto At Threshold .

• Creates a log entry indicating that the system reached the threshold.

Procedure

In the system web interface, go to Diagnostics > Logs > Log Management .

Configure the following settings:

Setting

Current Percent Filled

Percent Filled Threshold

Description

Displays as a percentage how full the logs are.

When the logs are full, system deletes the oldest entries.

Reaching the threshold you configure here creates a log entry and automatically transfers logs if you set Transfer Frequency to Auto At Threshold .

148

Troubleshooting

Setting

Folder Name

Storage Type

Transfer Frequency

Description

Specifies the folder name for log transfers. Select one of the following:

• System Name and Timestamp : Folder name is the system name and the timestamp of the log transfer. For example, if the system name is

Marketing , the folder name might be marketing_<date_and_time> .

• Timestamp : Folder name is the timestamp of the log transfer (for example,

<yyyyMMddhhmmssSSS> ).

• Custom : Lets you specify a folder name for manual log transfers.

Specifies the type of storage device used for log file transfers.

Specifies when the system transfers logs:

• Manual : The transfer starts when you select the

Start button, which is visible only in the local interface. If the log fills before you transfer, new events overwrite the oldest events.

• Auto at Threshold : The transfer starts automatically when the system reaches the

Percent Filled Threshold .

Select Save .

Configure Log Level

You can determine how much detail you want in your system logs.

Procedure

In the system web interface, go to Diagnostics > Logs > System Log Settings .

Configure the following settings:

149

Troubleshooting

Setting

Log Level

Enable H.323 Trace

Enable SIP Trace

Description

Sets the minimum log level of messages stored in the system’s flash memory. Poly recommends that you use the default value.

When you enable remote logging, the log level is the same for both remote and local logging.

Set one of the following log levels. Poly recommends that you enable automatic transfer of logs to a USB flash drive when using one of these setting.

• Debug : Logs all messages.

• Info

• Warning

• Critical : Logs the fewest number of messages

Logs additional H.323 connectivity information.

Poly recommends that you enable automatic transfer of logs to a USB flash drive when using this setting.

Logs additional SIP connectivity information. Poly recommends that you enable automatic transfer of logs to a USB flash drive when using this setting.

Select Save .

Retrieve Log Files

You can use the web interface to download log files to a location on your computer.

Note: The date and time of the system log entries for devices are shown in GMT.

Procedure

Access the web interface by opening a web browser and entering the IP address of the system using the format https://IPaddress (for example, https://10.11.12.13), and go to Diagnostics >

Logs .

Select Download system logs . A dialog window opens for you to specify how you want to open or save the .tgz file.

Transfer Logs to a USB Flash Drive

You can transfer logs to a USB flash drive to free up space on your system.

Note: Poly recommends formatting your USB flash drive with the FAT32 file system.

Procedure

In the local interface, go to Menu > Settings > Diagnostics .

150

Troubleshooting

Select Log Management and enter the system’s local administrator credentials.

Select Start .

Note: Wait until the system displays a message that the log transfer has completed successfully before you remove the USB flash drive.

The system saves a file in the USB flash drive named according to the settings in the system web interface.

Configure Remote Logging

You can configure your system to send the event details it collects to a remote logging server (using syslog or a similar mechanism).

Remember the following about remote logging with your system:

• The system sends logs to remote logging servers over a secure TLS connection. Your system may use a version of TLS that you configured your system not to use. This happens because your system sends logs using the TLS version configured on your remote logging server. This doesn't affect the use of the configured TLS version for other parts of your system. For example, if you set your system's minimum version of TLS to 1.2, but the server only uses 1.0, it still receives the logs.

• You can use more than one remote logging server.

• Logs can be consumed by an intrusion detection system (IDS) and a security information and event management (SIEM) system.

Procedure

In the system web interface, go to Diagnostics > Logs .

Configure the following settings:

Setting

Enable Remote Logging

Description

Specifies whether remote logging is enabled.

Enabling this setting causes the system to send each log message to the specified server.

The system immediately begins forwarding its log messages after you click Save .

The system supports remote logging encryption using TLS. If you use UDP or TCP transport, Poly recommends remote logging only on secure, local networks.

151

Troubleshooting

Setting

Remote Log Server Address

Remote Log Server Transport Protocol

Description

Specifies the server address and port. If you don’t specify the port, the system uses a default destination port. The system determines the default port by how you configure Remote Log Server

Transport Protocol :

• UDP: 514

• TCP: 601

• TLS: 6514

You can specify the address and port in the following formats:

• IPv4 address: 192.0.2.0: <port> , where

<port> is the elective destination port number in the 1-65535 range.

• FQDN: logserverhost.company.com: <port

> , where <port> is the elective destination port number in the 1-65535 range.

Specifies the transport protocol for sending logs to a remote server:

• UDP

• TCP

• TLS (secure connection)

Select Save .

Configure Logging to System Internal Storage

Enable logging to the system’s internal storage to help troubleshoot critical issues that are causing normal logging operations to fail.

Caution: Poly recommends logging to the system’s internal storage only when tracking critical issues.

Enabling for extended periods of time causes wear on the system’s storage and may cause the system to fail.

Procedure

In the system web interface, go to Diagnostics > Logs > System Log Settings .

Select the Save Logs to Internal Storage check box.

Note: The system saves logs to the internal storage for 2 weeks. After 2 weeks, the system reverts to the previously configured logging method and deletes the logs in the internal storage. Download the logs before the time expires.

Select Save .

152

Troubleshooting

Sample Log File

The following code shows examples from a system log file.

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: securityserviceproto.cpp SecurityServiceCreateSessionRequest clienttype: 3 location: 192.168.137.1 clientName: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/

537.36 request: clienttype: kWeb

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: createSession ClientType is 3 location: 192.168.137.1 name:Mozilla/5.0

(Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)

Chrome/81.0.4044.129 Safari/537.36

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: In createSession sessionId=PSLgZBGvGw7I

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: createSession The password is not empty, setting the user as anonymous

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService: updateSessionCount: Increment session count for client type '3' to 1

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService:

SessionAddNtfy: len 268

2020-05-07 19:06:36.526 DEBUG SecurityService: SecurityService:

SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0

2020-05-07 19:06:36.533 DEBUG SecurityService: SecurityService:

SecurityServiceLoginRequest(): username: admin

2020-05-07 19:06:36.533 DEBUG SecurityService: SecurityService: login

2020-05-07 19:06:36.533 DEBUG SecurityService: SecurityService:

LocalAuthenticator::login, role 3 loginSuccess 1

2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService:

SessionStateNtfy: len 69

2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService:

SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0

2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService: getPwdStatusAux password can not expire node security.authentication.accounts.adminremote.passwordpolicy

2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService: login login, pwStatus 2

2020-05-07 19:06:36.535 DEBUG SecurityService: SecurityService: setCurrentLoginInfo set login status: lastLoginTime 1588877728, lastClientType 3, lastClient 192.168.137.1, failedLogins 0

2020-05-07 19:06:36.536 DEBUG SecurityService: SecurityService: setSuccessfulLoginInfoToConfig successful login, current time 1588878396

2020-05-07 19:06:36.537 DEBUG SecurityService: SecurityService:

LoginNtfy: len 30

2020-05-07 19:06:36.537 DEBUG SecurityService: SecurityService:

SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0

2020-05-07 19:06:36.537 DEBUG SecurityService: SecurityService: securityserviceproto.cpp SecurityIFLoginStatusPack

Logout:

2020-05-07 19:17:29.313 DEBUG SecurityService: AuthenticationManager:

AuthenticationManager::logout(): username: admin

2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:

LogoutNtfy: len 21

153

Troubleshooting

2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:

SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0

2020-05-07 19:17:29.313 DEBUG SecurityService: SessionManager: deleteItem(): deleting the session PSllKtLtRoFp

2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService: updateSessionCount: Decrement session count for client type '3' to 0

2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:

SessionDeleteNtfy: len 52

2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService:

SecurityServiceSendNotification(): finished sending the notification, msg_sendnotification() returned 0

2020-05-07 19:17:29.313 DEBUG SecurityService: SecurityService: securityserviceproto.cpp errorResponsePack

SNMP Reporting

The system supports SNMP versions 1, 2c, and 3.

SNMP can provide the following event information about your system:

▪ Alert conditions located on the system alert screen

▪ Details of jitter, latency, and packet loss

▪ Low battery power in the remote control

▪ System power on

▪ Successful or unsuccessful administrator login

▪ Call fail for a reason other than a busy line

▪ User help request

▪ Video or audio call connection or disconnection

Note: Poly doesn’t support SNMP write operations for configuring or provisioning systems.

SNMPv3 does the following:

▪ Provides secure connections between the SNMP manager and agent

▪ Supports IPv4 networks

▪ Logs all configuration change events

▪ Supports a user-based security model

▪ Supports trap destination addresses

Related Links

Securing the System

on page 58

Configure SNMP

You can monitor your system remotely with SNMP.

Procedure

In the system web interface, go to Servers > SNMP .

154

Configure the following settings:

Setting

Enable SNMP

Enable Notifications

Version1

Version2c

Version3

Read-Only Community

Contact Name

Location Name

System Description

User Name

Authentication Algorithm

Authentication Password

Troubleshooting

Description

Enables administrators to monitor the system remotely using SNMP.

Enables MIB notifications.

Enables your system to use the SNMPv1 protocol.

Due to security issues, Poly recommends that you don’t enable this setting.

Enables your system to use the SNMPv2c protocol.

Due to security issues, Poly recommends that you don’t enable this setting.

Enables your system to use the SNMPv3 protocol.

Enabled by default, you can’t configure other

SNMPv3 settings unless this is on.

Specifies the SNMP community string for your system. For security reasons, don’t use the default community string ( public ).

Note: Poly doesn’t support SNMP write operations for configuring or provisioning systems. The community string is for read operations and outgoing SNMP traps.

Specifies the name of the person responsible for remotely managing the system.

Specifies the system location.

Provides details about the system.

Specifies the User Security Model (USM) account name for SNMPv3 message transactions. The maximum length is 64 characters.

Specifies the type of SNMPv3 authentication algorithm used.

▪ SHA

▪ MD5

Specifies the SNMPv3 authentication password.

The maximum length is 48 characters.

155

Troubleshooting

Setting

Privacy Algorithm

Privacy Password

Engine ID

Listening Port

Transport Protocol

Destination Address1

Destination Address2

Destination Address3

Description

Specifies the cryptographic privacy algorithm for

SNMPv3 packets.

▪ CFB-AES128

▪ CBC-DES

Specifies the SNMPv3 privacy (encryption) password. The maximum length is 48 characters.

Specifies the unique ID of the SNMPv3 engine. You might need this information to match the configuration of an SNMP console application. The

ID is automatically generated, but you can create your own as long as it is between 10 and 32 hexadecimal digits. You can separate each group of two hex digits by a colon (:) to form a full 8-bit value. A single hex digit delimited on each side with a colon is equivalent to the same hex digit with a leading zero (for example, :F: is equivalent to :

0f: ).

The ID can’t be all zeros or Fs.

Specifies the port SNMP uses to listen for system messages (the default is port 161).

Specifies the transport protocol used.

▪ TCP

▪ UDP

Specifies the IP addresses of SNMP managers where SNMP traps are sent.

Each address has four settings:

▪ Server address (accepts IPv4 addresses, hostnames, and FQDNs)

▪ Message type ( Trap or Inform )

▪ Protocol (SNMP v1 , v2c , or v3 )

▪ Port where SNMP traps are sent (default is 162 )

Select Save .

Download MIBs

You can download MIB data for your system.

A MIB helps your SNMP management console resolve SNMP traps and provide human-readable descriptions of those traps.

Procedure

In the system web interface, go to Servers > SNMP .

156

Troubleshooting

Select Download MIB .

Checking System Status

You can verify the status of your system in the local and system web interfaces. Status information also include details about connected devices and system services.

The system displays statuses using three colors:

▪ Green indicates the device or service is working or registered

▪ Red indicates an alert

▪ Gray indicates the device or service is unavailable or unregistered

Some statuses are available only after you connect the corresponding device, such as a camera, to the system.

Check Status in the Local Interface

Verify your system status in the local interface.

Procedure

Do one of the following:

▪ In a call: Menu > More > Settings > Status .

▪ Out of a call: Menu > Settings > Status .

View a system status page:

You must enter the system’s local administrator credentials to access status pages displaying a

Lock .

Setting

Active Alerts

Call Control

LAN Properties

Servers

Peripheral Devices

Description

Displays the status of any device or service with an error status. If there’s an alert, an Alert displays next to the system time.

Displays status of the Auto-Answer Point-to-

Point Video setting.

Displays network connection status.

▪ Displays the gatekeeper and SIP registrar server status.

▪ Displays the active global directory server or

LDAP server status.

▪ Displays the provisioning or calendaring service status (if enabled).

Connection status of peripheral devices.

157

Troubleshooting

Check Status in the System Web Interface

Verify your system status in the system web interface.

Procedure

In the system web interface, go to Diagnostics > System Status .

Optional: Select Details next to each device or service for more information.

Optional: Select Adjust <Feature> Settings to access the corresponding settings page.

View Call Statistics

You can look at in-call data to help you troubleshoot system issues or problems experienced by call participants.

Procedure

In the system web interface, go to Diagnostics .

Go to Call Statistics .

If you’re in a call, a link to call statistics is also available on the Dashboard and Active Call page.

A list of participants displays, including their names, numbers, and the quality of their connections.

Select the participant you want to see more call information about.

The following additional details about the participant display:

▪ System or application the participant is using

▪ Call type

▪ Call speed

▪ Encryption status

▪ Call streams (for your system and the participant)

Depending on the nature of your call, you may also see the transmitted and received streams of audio, video, and content.

Optional: Select a call stream for additional information.

The following additional details about the stream display:

▪ Stream type

▪ Stream quality

▪ Protocol used

▪ Format (may not display on some mobile devices)

▪ Rate used

▪ Frame rate

▪ Packets lost

▪ Packet loss percentage

▪ Jitter

▪ Error concealment

158

Troubleshooting

Check Provisioning Results

To verify your settings are provisioned the way you want, you can see if the configuration parameters were applied successfully to your system.

Make sure your system is registered with a provisioning service, such as RealPresence Resource

Manager.

Procedure

In the system web interface, go to Servers > Provisioning Server .

Select Show Results and verify if parameters applied successfully the last time you provisioned your system.

The Result column displays one of the following statuses:

▪ SUCCESS : The parameter was applied.

▪ IGNORED : The parameter didn’t apply because a configuration that controls this feature is disabled, not applicable, or wasn’t provisioned.

▪ FAILURE : If you see this, the Error Message column can help you identify the issue.

For a list of available system parameters and their permitted values, see the Poly VideoOS Configuration

Parameters Reference Guide .

Related Links

on page 37

Paired IP Devices

Use the following information to troubleshoot issues with paired IP devices.

IP Device Can’t Pair to the Video System

Symptom:

You may notice one or both of the following depending on the device:

▪ After powering on the TC8 device, it doesn’t automatically pair with the video system.

▪ You can’t manually pair the device from the Available Devices list in the video system web interface.

Problem:

There are a few possible causes for this issue:

▪ Network traffic on TCP port 18888 is blocked.

▪ Your system and TC8 aren't on the same VLAN.

Workaround:

Complete each step until the device pairs with your system:

Procedure

Allow traffic on TCP port 18888.

159

Troubleshooting

On your TC8 device, verify that the TC8 VLAN ID matches the VLAN ID on your system.

IP Device Doesn’t Display On the Available Devices List

Symptom:

Even though the device you want to pair is connected to the network, you don’t see it under Available

Devices in the video system web interface.

Problem:

There are a few possible causes for this issue:

▪ The device and video system aren’t on the same subnet.

▪ The network switch isn’t allowing UDP broadcast traffic forwarded to multicast address 224.0.0.200

on port 2000.

▪ The device is paired with another video system.

Workaround:

Complete each step until you see the device on the Available Devices list:

Procedure

Make sure the device and video system are on the same subnet.

If needed, work with your network administrator.

Allow traffic to 224.0.0.200 on UDP port 2000.

Make sure the device isn’t paired with another video system. If it is, unpair the device.

In the TC8 device interface, go to Settings > Reset and select Reset .

Your device resets to its default configuration settings, which unpairs it from the video system.

Paired IP Device is Disconnected

Symptom:

You paired a device with your video system but can’t use it. On the system web interface Device

Management page, you see that the device is Disconnected .

Problem:

A paired device must have a Connected status to use. A Disconnected status may mean there’s a physical connection issue or your device or system is malfunctioning.

Workaround:

Complete each step until you fix the issue.

Procedure

Check the device’s LAN cable connection.

Restart the device.

Restart the video system.

Make sure network traffic on TCP port 18888 is unblocked.

160

Troubleshooting

Perform a factory restore on the device.

Perform a factory restore on the system.

IP Device Paired to Inaccessible Video System

Symptom:

Your device was paired with a video system you can no longer access (for example, the video system lost its network connection or was moved to another location). Whatever the situation, the device screen now indicates it’s waiting to pair.

Problem:

The device is still paired to the video system but can't connect to it.

Workaround:

When this happens, there’s a reset button in the device Settings menu to unpair the device from the video system.

If you can eventually access the video system it was paired with, you also should unpair the device from the Device Management page. Otherwise, the device continues to display in the Connected Devices list but is Unavailable .

Once unpaired, you can pair the device with the same video system or another video system.

Procedure

In the TC8 device interface, go to Settings > Reset and select Reset .

Your device resets to its default configuration settings, which unpairs it from the video system.

In the system web interface, go to General Settings > Device Management .

Under Connected Devices , find the device by its MAC address (for example, 00e0db4cf0be ) and select Unpair .

The device you’re unpairing should have an Unavailable status.

IP Audio Device is Disconnected from G7500

Symptom:

You paired an IP audio device with your G7500 system but can’t use it. On the system web interface

Device Management page, you see that the device is Disconnected .

Problem:

A paired device must have a Connected status to use. A Disconnected status may mean there’s a physical connection issue or your device or system is malfunctioning.

Workaround:

Reconnect cables or factory restore your hardware. Complete each step until you fix the issue.

Procedure

Check the device LED. If it isn’t blinking blue, reconnect the LAN cable to the device and system.

If the device is a Poly Microphone IP Adapter, also reconnect its power supply cables.

161

Troubleshooting

Perform a factory restore on the device.

Perform a factory restore on the system.

Paired IP Device Doesn’t Complete Software Update

Symptom:

The paired IP microphone won’t update to the latest software when performing a system update.

Problem:

The IP microphone has gotten in a bad state where the configuration is preventing successful completion of a software update.

Workaround:

Perform a factory restore on the microphone.

Procedure

Ensure that the microphone is powered on.

On the back of the table microphone, insert a straightened paper clip through the factory restore pinhole.

Press and hold the restore button for 5 seconds, then release it and the microphone LED blinks amber.

Note: Don’t power off the microphone during this process. It restarts when complete.

Audio Tests

You can test your system speakers, audio levels, and Polycom StereoSurround setup.

Test Speakers

Verify that you correctly connected the speakers to your system.

You must enable Polycom StereoSurround to test both speakers at once.

The following setups don’t support stereo audio:

▪ Standalone Studio X30 systems

▪ G7500, Studio X50, and Studio X30 systems paired with Poly Trio systems

Procedure

In the system web interface, go to Diagnostics > Audio Test .

Do one of the following:

▪ Select Start .

▪ Select Left to test the left speaker.

▪ Select Right to test the right speaker.

▪ Select Both to test both speakers (if you enable Polycom StereoSurround).

162

Troubleshooting

If you run a test during a call, people on the far site also hear the test tone.

A 473 Hz tone indicates that the local audio connections are correct.

Related Links

Configure General Audio Settings

on page 95

Test Polycom StereoSurround

on page 163

Test Audio Levels

Audio meters show you real-time audio input and output signals for your system, including microphones, far-site audio, and other connected audio devices.

Procedure

Do one of the following:

▪ In the system web interface, go to Diagnostics > Audio Tests > Audio Meters .

▪ In the local interface, go to Settings > System Information > Diagnostics > Audio Meter .

To test the audio levels, do one of the following:

▪ To check the near-site audio, speak into your microphones.

▪ To check the far-site audio, ask a call participant to speak or call a phone in the far-site room to hear it ring.

Occasional peaks of +12 dB to +16 dB with loud transient noises are acceptable. If you see +20 on the audio meter, the audio signal is 0 dBFS and the audio might be distorted. A meter reading of +20dB corresponds to 0dBFS in the room system audio. A signal at this level is likely clipping the audio system.

Test Polycom StereoSurround

After you configure the system to use Polycom StereoSurround, you can place a test call to see if it works.

Make sure the microphones are positioned correctly.

The following setups don’t support stereo audio:

▪ Standalone Studio X30 systems

▪ G7500, Studio X50, and Studio X30 systems paired with Poly Trio systems

Procedure

In the system web interface, go to Audio/Video > Audio > Audio Input .

Gently blow on the left and right leg of each microphone while watching the audio meters to identify the left and right inputs.

Test the speakers to check volume and verify that audio cables are connected.

If the system is in a call, the far site hears the tone.

Optional: Exchange the right and left speakers if they are reversed.

Adjust the volume control on your external audio amplifier so that the test tone sounds as loud as a person speaking in the room. If you use a Sound Pressure Level (SPL) meter, it should measure approximately 80 to 90 dBA in the middle of the room.

Repeat these steps for Audio Output .

Related Links

Configure General Audio Settings

on page 95

163

Troubleshooting

Test Speakers

on page 162

Can’t Wake the System by Touching the Monitor

Symptom:

Touching the monitor doesn’t wake your system.

Problem:

If your system’s Display setting is on No Signal , your monitor may be powering down its USB ports when the system goes to sleep and disabling its touch capabilities.

Workaround:

Configure your monitor to wake when touched.

If your monitor doesn’t have this kind of setting, switch your system’s Display setting to Black .

LED Status Indicators for the System LAN Ports

You can verify network connectivity by looking at the LAN port LEDs on the back of your system.

Each LAN port has two LEDs: The left LED indicates network connectivity and traffic, while the right LED indicates Power over Ethernet (PoE) status for connected devices.

The G7500 system has four LAN ports: one for the system’s network connection (farthest left) and three link-local network (LLN) connections for peripheral devices.

LED Status Indicators for the System LAN Ports

Indicator

Off

Left LED Status (Network Traffic)

No connection

Right LED Status (Power)*

No device connected

Solid green

Blinking green

Solid orange

Connected with no traffic

Connected with traffic

N/A

Connected and functioning normally

N/A

Connected but malfunctioning

* - The right LED is not used on the primary network connection port (farthest left on the back of the system).

Poly G7500 System Ports on page 13

164

Troubleshooting

Fix Polycom Acoustic Fence Issues with G7500

If you’re using Polycom Acoustic Fence technology with your G7500 system and notice it isn’t working, you may have to reconnect your microphones.

Procedure

Disconnect all microphones from the LLN ports on the back of your system.

Reconnect the microphones (connect the primary microphone first).

Test the Call Experience

Run a near end loop test to verify what others see and hear in a call with your system.

This test isn’t available in a call, on the TC8 device, and the system web interface.

Procedure

In the local interface, go to Menu > Settings > Diagnostics .

Go to Near End Loop .

Select Start .

Monitor 1 displays the video and plays the audio sent to a far site during a call.

Test Connection with Another System

With a ping test, you can check if your system can call another system.

This test isn’t available on the TC8 device and the system web interface.

Procedure

In the local interface, go to Menu > Settings > Diagnostics .

Go to Ping .

Enter the IP address or URL of the system you want to call.

Select Start .

If the test is successful, an abbreviated Internet Control Message Protocol (ICMP) message displays. You see H.323 or SIP information depending on how the far-site system is configured.

Run a Trace Route

You can run a trace route to identify network connectivity issues with your system.

This test isn’t available on the TC8 device and the system web interface.

Procedure

In the local interface, go to Menu > Settings > Diagnostics .

Go to Trace Route .

165

Troubleshooting

Enter the IP address or URL with which to run the trace route.

Select Start .

If the test is successful, the hops between your system and the specified destination display.

LDAP Directory Server Ignores the Minimum TLS

Version Setting

Symptom:

You’ve changed your system configuration to use TLS version 1.1 at minimum, but the system still connects to your LDAP directory server with TLS 1.0.

Workaround:

Restart your system after configuring the Minimum TLS Version setting.

Related Links

on page 121

Configure System Access Settings

on page 63

Checking the Web Proxy Configuration

If you experience issues with your automatic or semi-automatic web proxy configuration, check the status and contents of your proxy auto-configuration (PAC) file.

For manual configurations, verify that the information you used to connect your system to the proxy is accurate.

Related Links

Web Proxies on page 81

PAC File Status

Your system displays the status of the proxy auto-configuration (PAC) file used for web proxy communication. See the following table for more information about these statuses, which you see on the

Web Proxy Settings page of the system web interface.

PAC File Status

Status

Success

In Progress

WPAD Failed

Download Failed

Expired

Description

File successfully downloaded to your system.

File is downloading to your system.

File download URL wasn’t discovered using DHCP option 252.

File didn’t download.

File is expired.

166

Troubleshooting

Verify the PAC File Contents

You can check the contents of the PAC file on your system.

Procedure

In the system web interface, go to Network > LAN Network > Web Proxy Settings .

Select Download PAC File .

This option isn’t available if the PAC File Status doesn’t indicate Success .

Zero Touch Onboarding Connection Fails During

Initial Setup or After Reset

Symptom:

The system fails to connect to the Zero Touch Onboarding (ZTO) service during initial setup or after a system reset.

Problem:

The system can’t communicate with the ZTO service because of a firewall and/or web proxy setting.

Workaround:

Configure your firewall and/or web proxy so that the system can communicate with the ZTO service

( zto.poly.com

) on port 443.

Verify Poly Lens Registration Status

You can check if your system is registered with Poly Lens.

Procedure

» In the system web interface, go to Servers > Cloud to check the Registration Status .

Related Links

on page 19

RealPresence Resource Manager Provisioning Fails

After Downgrading Software

Procedure

In the system web interface, go to Servers > Provisioning Servers .

In the Server Type field, select RealPresence Resource Manager .

In the Server Address field, remove https:// from the beginning of the server address and remove /ucservice from the end of the server address.

167

Troubleshooting

Select Save .

Related Links

Downgrading Software on page 140

on page 37

Lighting Conditions Impact Picture Quality

Symptom:

When using the system in a personal environment, where lighting may not be optimal, the picture quality is impacted. When the room lighting is lower than 200 lux, you may see video noise in the video sent from

Studio X50 or Studio X30 systems.

Problem:

The default video input settings are tuned for well-lit office environments.

Workaround:

Adjust the camera settings in the system web interface. Each environment differs; the amount you adjust the brightness and sharpness depends on your unique lighting and placement situations.

Procedure

In the system web interface, go to Audio/Video > Video Inputs .

From the list of inputs, adjust the camera’s Brightness slider.

Increase brightness in low light environments and decrease brightness in environments with strong single sources of light.

Note: Increasing and decreasing brightness may cause you to lose fine detail in areas with excess lighting or shadows.

Adjust the Sharpness slider.

Increasing the sharpness provides more detail.

Adjust the Color Saturation slider.

Increasing color saturation can correct washed out colors in low light situations.

Select Save .

Issues When the System is Sleeping or Waking

Symptom:

Your system sometimes restarts while sleeping or waking up.

Problem:

This is caused by manipulating the connected HDMI output while your system is asleep.

168

Troubleshooting

Workaround:

While your system is asleep, don’t change the HDMI source on your monitor, switch out HDMI cables, or turn off your monitor.

If your sleep Display setting is configured to No Signal , try the following to avoid these issues:

▪ Turn off the input auto-select feature on your monitor.

▪ Set the sleep Display setting to Black .

▪ Disable sleep mode on your system by setting Time Before System Goes to Sleep to Off .

Related Links

Configure Sleep Settings on page 32

Poly Trio Audio Meter Not Displaying in System Web

Interface

You can't see the audio meter for paired Poly Trio microphones in the system web interface. However, you can still see the audio meter in the local interface.

Procedure

» Reset the system and pair the Poly Trio.

A Portion of the EagleEye Cube USB Camera Name Is

Cut Off

Names created using the Polycom Companion app can be up to 60 characters long, but your system cuts off the name after 32 characters.

Procedure

» Use a camera name that isn't longer than 32 characters.

Contacts with the Same Name Don't Display in the

Contact List

When uploading contacts from an XML file, the system doesn't display more than one contact with the same name even if the uniqueid attribute is different.

Procedure

» Create contacts with unique names.

169

Troubleshooting

Monitor Loses Signal After Monitor Swap

Swapping a 4K monitor for a 1080p monitor while your system is asleep results in losing the monitor signal.

Procedure

» Do one of the following:

▪ Swap the monitor while your system isn’t sleeping.

▪ Restart the system after you lose signal.

System Web Interface Is Displaying Invalid or Disabled

Camera Settings

If you’ve provisioned a USB camera with your system, you must disable provisioning before removing the camera. If you don’t disable provisioning before removing the camera, previously provisioned settings may continue to display in the system web interface and you’re unable to change them.

Procedure

Connect the USB camera that was previously provisioned to your system.

In the system web interface, go to Servers > Provisioning Server .

Clear the Enable Provisioning check box.

Select Save .

Disconnect the USB camera from your system.

Reenable provisioning on your system.

Related Links

Configure General Camera Settings

on page 109