Konftel 800 Installation Guide
Below you will find brief information for 800 Conference Phone. It enhances conferencing with high-quality audio, a user-friendly 4.3-inch touch screen, and convenient volume and mute controls. It connects via USB or Bluetooth to devices and uses PoE for power. It expands coverage with additional microphones and offers centralized management for configuration and firmware updates.
Advertisement
Advertisement
K O N F T E L . C O M
Installation & Administration of Konftel 800
E N G L I S H
Konftel AB hereby declares that this conference phone is in conformity with all the essential requirements and other relevant provisions of Radio Equipment Directive
2014/53/EU (RED). Please visit www.konftel.com to view the complete declaration of conformity.
Warning!
Do not expose the Konftel 800 to water or moisture.
Warning!
Do not open the casing of the Konftel 800.
Table of contents
Purpose.......................................................... 6
Change history................................................6
Phone overview............................................ 10
Deployment options...................................... 10
Physical layout..............................................12
Connection layout......................................... 13
Icons............................................................. 14
Dimensions................................................... 18
Safety guidelines.......................................... 19
Chapter 3: Initial setup and configuration 20
Out-of-box experience.................................. 20
Configuration of Konftel 800......................... 21
Setting the password for Konftel 800............21
DHCP configuration options......................... 22
Connecting to a network with DHCP............ 23
Konftel 800 .xml configuration files............... 24
Modification of an .xml configuration file.......25
Validation of a configuration file.................... 27
Administration through the web interface..... 28
Viewing the IP address................................. 29
Setting a static IP address............................ 30
Logging in to the web interface of
Konftel 800............................................. 31
Configuring the settings through the web interface.......................................... 31
Logging out from Konftel 800........................32
Administration by using the phone's touch screen...........................................32
Logging in to Konftel 800.............................. 33
Configuring the settings on the phone.......... 33
Chapter 4: Settings configuration and management 35
Configuration parameters............................. 35
Input validation and data type restrictions.... 98
Phone settings.............................................. 99
Rebooting the phone.................................. 100
Configuring Daylight Saving Time through the web interface.....................100
Daylight Saving Time state......................... 101
Provision of the NTP server address.......... 102
Sleep mode.................................................102
Media settings.............................................103
Voice quality monitoring..............................103
Quality estimate metrics............................. 105
Configuring RTCP XR.................................105
Configuration of the media port range........ 107
SIP settings.................................................109
SIP account registration status................... 109
Caller information presentation................... 110
Hostname to IP address mapping...............112
Messaging the proxy without adding a record route.......................................... 112
SNI support................................................. 113
Network settings......................................... 114
LLDP Data Units......................................... 115
DNS mapping..............................................118
Chapter 5: Bluetooth and USB connection 120
Bluetooth® connection................................120
Bluetooth® Classic profiles.........................121
Pairing and connecting Bluetooth® devices................................................. 122
Removing Bluetooth® pairing..................... 122
Connection between paired Bluetooth® devices................................................. 123
Automatic reconnection to a Bluetooth device................................................... 123
Bluetooth® radio......................................... 124
Disabling Bluetooth® radio......................... 124
USB only user mode...................................125
Time presentation in USB only user mode. 125
USB only user mode icons......................... 126
Volume control and synchronization........... 126
USB ports configuration..............................128
Chapter 6: Firmware upgrade and downgrade 129
Firmware upgrade and downgrade.............129
Exporting the configuration file................... 129
Contents
Editing the configuration file........................130
Importing the configuration file....................130
Uploading a firmware file............................ 131
Validation and migration of configuration....132
Firmware upgrade and downgrade using a USB mass storage device....... 133
Configuration retention after downgrade.... 136
Device Management...................................136
Registration with the ZTI device management service............................ 138
Upgrading multiple devices.........................138
Configuring multiple devices.......................139
Chapter 7: Security and protection 141
Security methods and protocols ................ 141
Certificates..................................................142
Certificate configuration file structure......... 143
Certificates application................................147
Certificates management............................149
Support of the PKCS12 file.........................150
Standard encryption algorithms.................. 152
Standard encryption for 802.1x...................153
Standard encryption for media encryption with SRTP........................... 154
Legacy encryption mode.............................154
FIPS mode..................................................155
FIPS mode for media encryption with
SRTP.................................................... 155
SCEP support............................................. 156
Auto-renewal...............................................157
Configuring SCEP renewal request............ 158
Provisioning of the CA certificate through SCEP...................................... 158
Web interface settings................................ 159
Disabling web access................................. 159
Protection against cross-site request forgery.................................................. 160
Chapter 8: Calls handling application 162
Konftel Unite............................................... 162
Pairing and connecting devices.................. 162
Disconnecting devices................................ 163
Deleting pairing...........................................164
Configuring the Konftel Unite settings........ 164
Konftel Unite settings..................................165
Chapter 9: Coverage expansion 168
Expansion of the phone coverage.............. 168
Physical layout............................................168
Smart Mic characteristics............................169
Expansion coverage arrangement..............170
Functions of the Primary and Secondary devices................................................. 171
Connection of the Secondary devices to the Primary phone................................ 171
Arranging a daisy chain.............................. 172
Defining the mode of the phone..................172
Disabling Daisy Chain mode.......................173
Headset lecture mode.................................173
Configuring Headset lecture mode............. 174
Ceiling audio mode overview......................175
Configuring the ceiling audio mode parameter............................................. 175
Expansion microphone firmware upgrade.. 176
Upgrading expansion microphone firmware................................................176
Upgrading two expansion microphones......177
Terminating expansion microphone upgrade................................................ 178
Microphone manually........................... 179
System recovery......................................... 180
Performing system recovery....................... 180
Remote syslog server................................. 181
Configuring remote syslog settings.............181
Fall back server support............................. 182
Factory reset...............................................182
Performing factory reset............................. 182
Device status view...................................... 183
Device status.............................................. 183
Viewing the phone status............................184
System logs................................................ 185
Viewing system logs................................... 185
PJSIP log levels..........................................186
Contents
Setting PJSIP log level through the web interface................................................186
Setting PJSIP log level using the configuration file................................... 187
Network logs............................................... 188
Viewing network logs.................................. 188
Licenses......................................................188
Chapter 11: Specifications 189
Device specifications.................................. 189
Encryption methods in Legacy encryption mode...................................191
INTRODUCTION
PURPOSE
This document provides checklists and procedures for installing, configuring, and administering Konftel 800. It is intended primarily for implementation engineers and administrators.
CHANGE HISTORY
Issue Date Summary of changes
Release
1.0.8
September
2022
•
Updated Icons on page 14 with the
Lecture mode and Keyboard layout switch icons.
•
Updated Configuration parameters on page 35
with new parameters.
•
Added new section SNI support on page 113.
•
Added Messaging the proxy without adding a record route
on page 112.
•
Updated Volume control and synchronization
on page 126 with the information about volume level indication.
•
Updated Configuration retention after downgrade
on page 136 with information about retention of the DHCP option after downgrade.
•
on page 149.
•
Added Support of the PKCS12 file on page 150.
•
Updated Expansion coverage arrangement on
page 170 with information about the most common arrangement types.
•
Added new section Headset lecture mode
on page 173.
•
Added new section Ceiling audio mode overview on page 175.
Table continued…
6
INTRODUCTION
Issue Date Summary of changes
Release
1.0.7.1
April 2022 •
Updated Configuration parameters on page 35
with information about new supported languages.
•
on page 118.
Release
1.0.7
March 2022 •
on page 10 with information about the connection to other devices.
•
Updated Icons on page 14 with the
Volume Off icon.
•
Added Deployment options on page 10.
•
Added Out-of-box experience on page 20.
•
Added DHCP configuration options on page 22.
•
Updated Configuration parameters on page 35
with new parameters.
•
Added new section Configuration of the media port range
on page 107.
•
Added Configuring the Use Static Source Port setting
on page 111.
•
Added Hostname to IP address mapping on
page 112.
•
Updated Bluetooth® Classic profiles on page 121
with information about the LEDs behavior during
A2DP streaming.
•
Added Automatic reconnection to a Bluetooth device on page 123.
•
Added new section Volume control and synchronization
on page 126.
•
Added new section USB ports configuration on
page 128.
•
Added Configuration retention after downgrade
on page 136.
•
Added Provisioning of the CA certificate through
on page 158.
•
on page 159.
Table continued…
7
INTRODUCTION
Issue Date Summary of changes
Release
1.0.6
September
2021
•
Updated Icons on page 14 with the
Warning icon.
•
Added new section Rebooting the phone on
page 100.
•
Added Input validation and data type restrictions on
page 98.
•
Added new section SIP account registration status on page 109.
•
Updated Configuration parameters on page 35
with new parameters.
•
Added new section SCEP support on page 156.
Release
1.0.5
June 2021 •
Updated Icons on page 14 with the
Clear call history button.
•
Updated Standard encryption algorithms
on page 152 with the information about FIPS mode.
•
Updated Legacy encryption mode
on page 154 with the information about firmware upgrade.
•
Added new section FIPS mode on page 155.
•
Added new section USB only user mode
on page 125.
•
Updated Expansion of the phone coverage
on page 168 with the information about disabling the unused daisy chain ports during active calls.
•
on page 120 with the information about USB only user mode.
•
Added new section Firmware upgrade and downgrade using a USB mass storage device on
page 133.
•
Updated Configuration parameters on page 35
with new parameters.
•
Added new section Protection against cross-site request forgery
on page 160.
•
with the information about the list of encryption methods enabled and disabled in
Legacy encryption mode.
Table continued…
8
INTRODUCTION
Issue
Release
1.0.4
Release
1.0.3
Release
1.0.2
Date
February
2021
October
2020
August
2020
Summary of changes
•
Added Provision of the NTP server address
on page 102.
•
Updated Voice quality monitoring on page 103
with the quality estimate metrics and analog parameters.
•
Added Standard encryption algorithms
on page 152.
•
Updated Konftel Unite on page 162 in line with the
change in MD5 usage.
•
Added Expansion microphone firmware upgrade
on page 176.
•
on page 120 with information on switching between the Bluetooth modes.
•
Updated Configuration parameters on page 35
with new parameters.
•
on page 124.
•
Updated Configuration parameters on page 35
with new parameters.
•
Updated Certificates on page 142 with the
information about the paths to the certificates,
MD5 checksum, and certificate configuration file structure.
•
on page 102.
•
Added Voice quality monitoring on page 103.
•
on page 120.
•
Updated Configuration parameters on page 35
with new parameters.
Release
1.0.1
March 2020 •
Added Firmware upgrade and downgrade on
page 129.
•
Added Validation and migration of configuration
on page 132.
•
Added Upgrading multiple devices
on page 138.
•
Added Remote syslog server on page 181.
9
OVERVIEW
PHONE OVERVIEW
Konftel 800 is a SIP conference phone that you can use to make calls and hold conferences with great audio quality. It improves user experience and ensures an easier connection to audio conference bridges.
The conference phone features include a simple-to-use 4.3 inch graphical LCD with a backlight, volume control, and mute buttons. Two more mute key buttons are located along the perimeter of the device. There are 3 microphones in the base of Konftel 800, which support 10 users in a 30 square meters room. You can attach additional expansion microphones to increase the conference phone coverage to 70 square meters or daisy chain three Konftel 800 devices to cover up to 90 square meters.
Konftel 800 can act as an Audio Media Device connected to a personal computer or a laptop via USB and activated through soft client software. The conference phone can also use Bluetooth to connect to a mobile device, a personal computer, or a laptop as it supports Hands-Free and A2DP Bluetooth profiles.
Konftel 800 uses 10/100 Mbit Ethernet and supports PoE Class 1 and Class 2 power.
DEPLOYMENT OPTIONS
Konftel 800 provides several deployment options to match the scope and complexity of your operating environment.
USB or Bluetooth media device
You can use your Konftel 800 as a USB or Bluetooth media device with a personal computer, a laptop, a video conference system, and many other devices. The phone has a USB connector and ensures Bluetooth connection.
Konftel 800 receives power through the Ethernet power injector (there is no power supply via USB supported).
SIP Endpoint
Konftel 800 can function as a SIP device. For this deployment option, you must have the IP network engineered to support the excellent voice quality transmission. You must configure IPv4 via DHCP or manual configuration and specify its IP address, network mask, and gateway.
10
OVERVIEW
Konftel 800 functions as a SIP device when your communication system has SIP accounts provisioned with the following minimum parameters available:
• SIP registrar address (IP address or a fully qualified domain name (FQDN))
• SIP registrar protocol (UDP, TCP, or TLS) and SIP registrar port
• SIP account name
• SIP account password
To enable additional features, including more complex security options, you may require to have other parameters configured.
Individual device management
If you deploy a small number of devices and do not plan to establish a centralized management HTTP server, you can access the configuration of Konftel 800 through the web interface or using the phone user interface.
Configure the parameters through the web interface as it allows convenient logging, easy data input and enhanced status information.
Centralized device management
If you deploy multiple Konftel 800 devices, to simplify their configuration, use a centralized server that provides software, generic and MAC-specific configuration and certificate files. You must specify the IP address or FQDN of the HTTP/
HTTPS file server manually or through DHCP.
When the phone checks the file server, it compares its running firmware and the one available on the file server and performs an upgrade or downgrade if the versions are different. You can automate the configuration update process. Konftel
800 can poll the file server at a defined interval for changes and apply the changes when in Idle mode.
Related concepts
DHCP configuration options on page 22
on page 120
USB only user mode on page 125
11
OVERVIEW
PHYSICAL LAYOUT
12
OVERVIEW
5
6
Callout number
3
4
Description
Volume up button
NFC tag
Touch screen
LED status indicators
CONNECTION LAYOUT
Figure 2: Connection layout of Konftel 800
The following table lists the sockets and ports available on Konftel 800 for connection.
13
OVERVIEW
4
5
6
2
3
Callout number
1
Description
PoE/Ethernet connection socket
USB Type A
Micro-USB Type B
Audio expansion ports
Kensington® security lock port
NFC tag for Bluetooth
ICONS
Icons on the home screen of Konftel 800
Icon Name
Recent
Unite
Description
To check the call list. The phone provides the following information about the calls:
• Number . View the phone number of the contact.
• Date . View the information when the phone received the call. This applies only to the calls preceding the current day.
• Time . For the current day, the phone shows the time of the call in the convenient time format.
• Direction . View the incoming, outgoing and missed calls.
To access the Konftel Unite settings.
Call To dial phone numbers and codes for telephone operations or Konftel Unite connection.
14
OVERVIEW
Icon Name
Settings
Warning
Microphone
Muted
Description
To check and configure the settings from the phone.
View the phone status and reach the menu.
To notify that the SIP account registration failed.
When you tap the Warning icon, the phone shows the following pop-up message: No sip service registered (Wrong username/password or registrar?) .
To mute and unmute the phone.
Volume Up To increase the phone volume level.
Volume Down To decrease the phone volume level.
Volume Off
NFC
To provide a phone screen indication that the volume on the phone is off when you change the volume to the lowest level on the connected USB host.
To indicate the built-in NFC tag.
Other icons of Konftel 800
Icon Name
Make Call or
Answer
Description
To indicate the phone off-hook status and answer an incoming call.
Hang Up To indicate the phone on-hook status and end a call.
Incoming To show an incoming call.
15
OVERVIEW
Icon Name
Outgoing
Description
To show an outgoing call.
To indicate a missed call.
Missed
Hold or On
Hold
Conference
To put a call on hold or to indicate that a call is on hold.
To arrange a conference call.
Split
Delete
To split a conference call into several separate calls.
Add
Participant
Talk Private
Caps
To add a participant to a conference call.
To arrange a private discussion with a participant of a conference call.
To type in capital letters.
To delete an unneeded number or letter.
Visibility
Invisibility
Logged In
To mark whether the characters must stay visible to the user, for example, when logging in with the password.
To mark whether the characters must stay invisible to the user, for example, when logging in with the password.
To indicate that the user logged in as the administrator.
16
OVERVIEW
Icon Name
Microphone
Muted
Description
To indicate that the phone is in muted state.
Enter To confirm the input of information.
Confirm To confirm the information.
To discard the information.
Reject
Arrow Down To move to the sections below.
Arrow Up To move to the sections above.
Arrow Left To return to the previous page.
Arrow Right To move to subsections of a section.
USB
Connected
To indicate an active USB connection.
Konftel Unite connected
To show the connection of the phone to Konftel Unite.
Daisy Chain
Mode
To indicate that the phone is in a daisy chain mode.
Loading To show that the phone is loading the new version of the firmware.
17
OVERVIEW
Icon Name
Contacts
Description
To show that the LDAP external phone book is available.
To indicate an active Bluetooth ® Classic connection.
Bluetooth connection
Call Transfer To show that it is possible to transfer an ongoing call to another contact person.
To clear all the call history in the call list.
Clear call history
Lecture mode To indicate that the user connected a headset.
Here, the audio signal from the built-in speakers and microphones of the phone mixes with the audio signal from the headset.
Keyboard layout switch
To switch between the Cyrillic and Latin keyboard layouts on the phone screen.
The keyboard does not save the switched state.
When you reopen the keyboard, the layout corresponds to the selected phone language.
DIMENSIONS
The following table shows the dimensions of Konftel 800.
Parameter
Width
Length
Height
Dimension
326.41 mm
369.87 mm
74.7 mm
18
OVERVIEW
SAFETY GUIDELINES
Ensure that you are familiar with the following safety guidelines before using, installing, configuring, and administering Konftel 800.
• Read, understand, and follow all the instructions.
• Do not drop, knock, or shake the device. Rough handling can break internal circuit boards.
• Ensure that the power cord or plug is not damaged.
• Do not overload wall outlets and extension cords as this can result in the risk of fire or electric shock.
• Avoid wetting the device to prevent fire or electrical shock hazard.
• Unplug the device from the wall outlet before cleaning. Do not use liquid or aerosol cleaners, harsh chemicals, cleaning solvents, or strong detergents to clean the device. Use a damp cloth for cleaning.
• Avoid exposing the device to high temperatures above 40°C (104°F), low temperatures below 0°C (32°F), or high humidity.
• Do not block or cover slots and openings of the device. These openings are provided for ventilation, to protect the phone from overheating.
• Never push objects of any kind into this device through cabinet slots as they might touch dangerous voltage points or short out parts that could result in a risk of fire or electric shock.
• Do not disassemble this product to reduce the risk of electric shock. Opening or removing covers may expose you to dangerous voltages or other risks.
Incorrect reassembly can cause electric shock during subsequent use.
• Do not use the device to report a gas leak in the vicinity of the leak.
• Do not use the device near intensive care medical equipment or close to persons with pacemakers.
• Do not place the device too close to electrical equipment such as answering machines, TV sets, radios, computers, and microwave ovens to avoid interference.
In case Konftel 800 and the corresponding accessories are damaged, the device does not operate normally or exhibits a distinct change in performance, refer for servicing to the qualified service personnel.
19
INITIAL SETUP AND CONFIGURATION
OUT-OF-BOX EXPERIENCE
When you power Konftel 800 and connect it to a routable Ethernet connection for the first time, the phone conducts the following actions:
• Internal self-tests: Konftel 800 confirms the hardware status and firmware sanity.
• DHCP Discovery: the phone attempts to obtain the basic IP parameters as well as the HTTP server, TLS server, HTTP Directory, and VLAN ID parameters, which can be in the enabled or disabled state.
• LLDP Negotiation: the phone communicates the default LLDP parameters and parses any LLDP parameters provided by the L2/L3 network device to which
Konftel 800 connects via Ethernet.
If Konftel 800 receives a VLAN ID via DHCP or LLDP, the phone releases the received IP address and performs DHCP Discovery with all packets tagged with the VLAN ID. Konftel 800 only accepts ingress packets tagged with the VLAN ID.
After the phone obtains the IP address and a routable path or VLAN, it tries to reach the Network Time Protocol server to set the correct time. This attempt may require the device to query the DNS for the following default server address:
0.pool.ntp.org
.
When Konftel 800 has the provisioning or Device Management server IP address or Fully Qualified Domain Name (FQDN) provided via DHCP, it attempts to establish a connection and request the following files from the server:
• Generic global certificate file kt800_certcfg.xml
.
• Device-specific certificate file kt800_certcfg-<MAC>.xml
.
If a certificate file is obtained, the phone uses the paths from certcfg.xml to download the list of files specified therein.
• Generic configuration file kt800.xml
. If the device fails to find it with .xml file ending, it searches the configuration file with the following file endings: .cgi, .php, .asp, .enc, .js, or .jsp.
• Device-specific configuration file kt800-<MAC>.xml
. If the device fails to find it with .xml file ending, it searches the configuration file with the following file endings: .cgi, .php, .asp, .enc, .js, or .jsp.
Konftel 800 compares these configuration files with the maximum version of the configuration file acceptable on the device. If the file from the HTTP server has a lower or equal value, the device reads, parses, and prepares to apply it.
20
INITIAL SETUP AND CONFIGURATION
If this file has a higher value, the phone ignores it as it may contain unknown or changed parameter formats.
For example, <KT800 version="7"> on the top of the 1.0.7 firmware compliant .xml file for the device with 1.0.6 firmware installed indicates that the file received has a higher value than the file available on the device. Konftel
800 rejects such a file.
The phone stores the configuration in its non-volatile memory.
• Generic firmware version file kt800_fw_version.xml
. The device also compares this file with the current running firmware. If there is a difference,
Konftel 800 requests the firmware identified in the kt800_fw_version.xml file from the HTTP server.
After upgrade or downgrade, the phone reboots and repeats all the described actions. If there are no changes in the content of the various .xml files, the device ignores them and applies the configuration stored in its non-volatile memory.
If the device does not obtain an IP address and the configuration file does not specify an administrator password, Konftel 800 prompts you to set the administrator password. You need this password to access the phone admin menu and the web-based admin menu using an Internet browser.
Related concepts
Firmware upgrade and downgrade
on page 129
Related information
on page 35
CONFIGURATION OF KONFTEL 800
Konftel 800 can use the following methods to obtain the required configuration parameters:
• Centralized HTTP/HTTPS server.
• Konftel 800 web interface when you log in as the administrator.
• Konftel 800 phone interface.
Setting the password for Konftel 800
About this task
Use this procedure to set your Konftel 800 password when you first activate the phone or after a reset to the factory settings. By default, the administrator password is not set.
21
INITIAL SETUP AND CONFIGURATION
You must enter the correct administrator password to change the phone configuration. For that, always remember your password. If you forget the password, you can perform manual device recovery.
Before you begin
Connect the PoE cable to ensure the phone power supply.
Procedure
Wait for the following message to appear on the phone screen:
For full functionality, please set administration password .
Tap Yes to set the password.
Optional: Tap Skip to avoid setting the password.
Here, Konftel 800 functions in the administration mode, and you can configure phone settings. However, you cannot access the web interface.
Using the keyboard on the phone screen, type your password. It can contain letters, numbers, and special characters.
The password must contain at least 4 characters. As you enter the password, the phone indicates if the password has an acceptable length.
Type the password again to confirm it.
Tap the Arrow Left icon three times to return to the home screen.
The phone reboots.
Related concepts
DHCP configuration options
You can configure Konftel 800 to automatically obtain critical configuration parameters from a DHCP server. You can use a DHCP Site Specific Option
Number (SSON) to provide specific information for the Konftel 800 configuration.
The following values are available: 43, 56, 60, 61, 66, 67, and 242. By default, the
SSON value is 242. By default, the device scans all the SSON numbers to detect the availability of the parameters below.
Konftel 800 uses values of the following parameters from the DHCP option specified by SSON:
• HTTPSRVR
• TLSSRVR
• HTTPDIR
22
INITIAL SETUP AND CONFIGURATION
• L2QVLAN
DHCP Site Specific Option Number parameters
The following table describes the parameters that DHCP SSON contains:
Parameter
HTTPSRVR
TLSSRVR
HTTPDIR
L2QVLAN
Description
The IP Address or FQDN of an HTTP file server, which the device uses to obtain configuration, firmware, or certificates.
The IP Address or FQDN of a file server, which the device uses to obtain configuration, firmware, or certificates using the Transport Layer Security (TLS) protocol as the security protocol.
The path name to prepend to all file names that the device uses in HTTP and HTTPS GET operations during its start-up. The path is relative to the root of the TLS or
HTTP file server.
The path length is from 0 to 127 ASCII characters without spaces.
The VLAN ID of the voice Virtual Local Area Network
(VLAN). The default value is 0 which means “untagged”.
The following is an example of the syntax of the DHCP SSON Option as provided within a DHCP
Offer: L2QVLAN=114,HTTPSRVR=111.222.232.234,HTTPDIR=KT800,
DES_STAT=0 .
Connecting to a network with DHCP
About this task
Use this procedure to connect to a network with DHCP from your phone or through the web interface.
Procedure
• To connect to the network with DHCP from Konftel 800, do the following:
Log in as the administrator.
23
INITIAL SETUP AND CONFIGURATION
Tap Network .
Enable DHCP .
Tap the Arrow Left icon twice to return to the home screen.
The phone reboots.
• To connect to the network with DHCP through the web interface, do the following:
On the web interface, click Network .
Enable DHCP .
Click Save .
The phone reboots.
Konftel 800 .xml configuration files
Konftel 800 uses .xml files through the centralized management server during provisioning. Sample .xml configuration files are available at www.konftel.com
.
The following table lists the available .xml configuration files:
.xml file kt800_certcfg.xml
kt800_certcfg-<MAC>.xml
kt800.xml
kt800-<MAC>.xml
Description
This is the first file that Konftel 800 requests. The phone obtains 802.1X, SIP, provisioning server, and LDAP certificates from this file.
This is the second file that Konftel 800 requests.
Here, <MAC> is the MAC address of the specific phone. Ensure that the input MAC address contains only letters and numbers and no colons. This file replaces the default 802.1X, SIP, provisioning server, and LDAP certificates with device-specific certificates.
A global configuration file that contains the basic configuration.
A configuration file where <MAC> is the MAC address of the specific phone. Ensure that the input MAC address contains only letters and numbers and no colons. Parameters available in this device-specific file override the default configuration file settings.
Table continued…
24
INITIAL SETUP AND CONFIGURATION
.xml file Description kt800_fw_version.xml
A file that contains details about the firmware version of the phone. This file comes with each
Konftel 800 firmware build download.
Do not modify this file.
Related concepts
Related information
on page 35
Modification of an .xml configuration file
You can open and edit a .xml configuration file using an application to import and export XML files. You can also choose the editor that can read .xsd files to verify the syntax and content of the modified .xml file. You can use such software as
Notepad++, Coda, TextWrangler, or any other that you find suitable.
The following screenshot is an example of a .xml configuration file in the Notepad+
+ editor:
25
INITIAL SETUP AND CONFIGURATION
When you open a default Konftel 800 configuration file, the second line, <KT800 version="6"> , indicates the firmware version. This number automatically increases when the Konftel 800 firmware version is upgraded.
Do not modify the version number.
In the configuration file, the "-" icons indicate the beginning of a branch. When you click this icon, the branch collapses. Clicking the "-" icon does not delete the branch. To expand the branch back to the original view, click the "+" icon.
The name of the example configuration file is kt800_default_config.xml
. To deploy this configuration file through a centralized management server, change the file name to kt800.xml
or kt800-<MAC>.xml
. If you upload the file through the web interface, you can use any file name.
You can modify the .xml file to configure the parameters of your Konftel 800. Here, add specific data to the file section. In the example you can see the expanded SIP
Primary account section with the parameters set:
26
INITIAL SETUP AND CONFIGURATION
Here, the specified parameters are the following:
SIP Domain: acmewidget.com
SIP Registrar: sip.acmewidget.com
using UDP on port 5060
Outbound Proxy: no outbound proxy
SIP User: [email protected]
SIP User Authentication Name: 123456
SIP User Password: 654321
Keep Alive: 300 second timer enabled
Validation of a configuration file
The release-specific firmware contains a .xsd file for the configuration file review for errors in the parameters set. Konftel 800 performs a .xsd file validation when a configuration file is uploaded through the web interface or a management server. If the validation fails, the device rejects the complete configuration file.
27
INITIAL SETUP AND CONFIGURATION
You can also use the editor to validate the configuration file. For example, in Notepad++, install the XMLTools plugin in the Plugin Manager and validate the .xsd file.
Administration through the web interface
You can access the Konftel 800 administration pages by using the HTTPS web interface from your laptop, PC, or tablet.
Use the Google Chrome browser to optimize the Konftel 800 web pages.
The prerequisite steps for logging in to the web administration pages are the following:
You must obtain the IP address of Konftel 800 by using the phone's touch screen. You can use a dynamic or a static IP address to connect to the network.
You must configure the administrator password by using the .xml configuration file or the phone's touch screen. By default, there is no password for web administration set.
Ensure that Konftel 800 is in Idle mode, that is it shows the normal idle screen, before attempting to log in to the web administration server. It is not possible to be in the configuration menu on the phone and through the web interface at the same time.
The web administration portal contains the following pages:
• Status
• Phone
• Network
• Media
• LDAP
• SIP
• Provisioning
• System Logs
• Network Logs
• Licenses
• Logout
You can open the required page by clicking the corresponding tab in the
Navigation pane on the top.
The web administration server launches on the Status page. If you log in to the web interface when the conference phone is still booting and establishing
28
INITIAL SETUP AND CONFIGURATION connectivity, this page may require updating. You can update it by pressing F5 on your keyboard.
When you make a configuration change on a page, click Save in the bottom right to save the configuration to the non-volatile memory. To apply the change, Konftel
800 may restart a specific software layer or reboot. If the device reboots, you must wait until the procedure completion, press F5 to refresh the web page, and log in again.
Configuration import and export
When you finalize the conference phone configuration, Konftel 800 reliable operates in the required environment, you can save a copy of this configuration on the Provisioning tab. Here, the device exports a copy of the nonvolatile configuration capturing the non-default parameters and forms an .xml configuration file. Whenever you decide to restore the configuration parameters, import this file, and save the configuration. Then the device reads and attempts to parse the configuration file. If there is an error in the configuration file, or the web application cannot parse the file, Konftel 800 shows a corresponding error message.
The device does not export passwords in the configuration file.
Related concepts
Firmware upgrade and downgrade
on page 129
Related information
on page 35
Viewing the IP address
About this task
Use this procedure to view the IP address of your Konftel 800.
Procedure
On the phone screen, tap Settings > Admin Login .
Enter the administrator password.
Tap Status or the Arrow Right icon.
The phone displays the following hardware details:
• IP Address
• MAC Address
• Bluetooth MAC Address
• Hardware Revision
• Software Version
29
INITIAL SETUP AND CONFIGURATION
• Smart Mic 1 Version
• Smart Mic 2 Version
• SIP Registration
Tap the Arrow Left icon twice to return to the home screen.
Setting a static IP address
About this task
Use this procedure to connect to the network using a static IP address, and not with DHCP.
Before you begin
Disable DHCP.
Obtain the IP address, netmask, gateway, DNS 1, and DNS 2.
Procedure
• To set the static IP address from the phone, do the following:
Log in as the administrator and tap Network . If the administrator password is not set for the phone, on the phone screen, tap Settings > Network .
Tap Static IP , and enter the following:
• IP address
• Netmask
• Gateway
Return to the home screen to save the changes.
• To set the static IP address through the web interface, do the following:
On the web interface, click Network .
In the Static IP section, enter the following:
• IP address
• Network mask
• Gateway
Click Save .
The phone reboots.
30
INITIAL SETUP AND CONFIGURATION
Logging in to the web interface of Konftel 800
About this task
Use this procedure to log in to the web interface of your Konftel 800. You can access the web interface only if you set the administrator password for your phone.
After five incorrect login attempts, the web interface becomes blocked for 15 minutes. The web interface shows the following message: Login has been suspended for 15 minutes due to too many invalid password entries.
If you enter the invalid password less than five times, then you have another five attempts after five minutes break.
Konftel 800 officially supports only the Google Chrome browser.
The phone supports only HTTPS communication protocol.
Before you begin
Obtain the IP address and the administrator password for the phone.
Procedure
On the web browser, type the IP address of your phone in the following format: https://111.222.33.44/ .
Enter the password in the Password field.
The password is the administrator password for your phone.
Click Login to log in to the webserver of your Konftel 800.
Configuring the settings through the web interface
About this task
Use this procedure to configure the settings through the web interface of your
Konftel 800.
Procedure
Log in to the web interface.
On the Navigation pane, click the required tab.
Choose the parameter that you want to configure and proceed to the options available.
Click Save .
31
INITIAL SETUP AND CONFIGURATION
Logging out from Konftel 800
About this task
Use this procedure to log out from the web server of your Konftel 800 from your web browser.
Before you begin
You must be logged in to the web interface of your conference phone.
Procedure
On the web browser, click Logout .
You are forwarded to the Login page and see the prompt that you are not logged in.
Administration by using the phone's touch screen
Konftel 800 allows for configuration by using its touch screen once the user logs in with the administration password. When you modify a parameter, the device verifies its syntax and then automatically saves it to the non-volatile memory. After you exit the menu levels to the idle screen, the conference phone restarts or reboots as required to apply the configuration.
The Settings menu that you can access from your Konftel 800 is as follows:
Settings
Status
Phone
Name, Language, Security, Admin Password, Ring Level, Key Tone, Call Log,
Ceiling Audio Mode, Daisy Chain, Startup Sound, Factory Reset, Reboot,
Media
SRTP, SRTCP, Codec, Capability Negotiation, Voice Quality Monitor
Advanced
First Media Port, Last Media Port
SIP
Primary Account, Secondary Account, Fallback Account, Port, Transport
Protocol, TLS, SNI, DTMF, NAT Traversal
Advanced
Disable 'rport', Session Timers, Session Expiration, Outbound Proxy, Allow
Contact Rewrite, Allow Via Rewrite, Enable SIP Replaces, Use Static Source
Port
Network
DHCP, Hostname, Domain, Static IP, DNS1, DNS2, VLAN, VLAN ID
32
INITIAL SETUP AND CONFIGURATION
802.1x
802.1x Enable/Disable, Auth Name, EAP MD5, EAP MD5 Password, EAP TLS
Enable/Disable, Private Key Password
Time
Enable NTP, NTP Server
Device Management
Enable, Provisioning Server, Check Server Certification, Lowest TLS Version,
DHCP Option, , Web Access
Unite
Disconnect Device, Remove Bonding Information
Bluetooth
Pair Device, Disconnect Device, Remove Pairing
You must enter the admin password to configure most of the device's settings.
Related concepts
on page 99
on page 103
on page 109
on page 120
on page 162
Related information
on page 35
Logging in to Konftel 800
About this task
Use this procedure to log in as the administrator by using the touch screen of your
Konftel 800.
Procedure
On the touch screen, type Settings > Admin Login .
Enter the administration password.
Configuring the settings on the phone
About this task
Use this procedure to configure the settings of your Konftel 800 on the phone.
33
INITIAL SETUP AND CONFIGURATION
Before you begin
Log in as the administrator.
Procedure
In the Settings menu, tap the required Settings group.
Choose the parameter that you want to configure and proceed to the options available.
Tap the Arrow Left icon twice to return to the home screen.
The phone reboots to apply the changes.
34
SETTINGS CONFIGURATION AND
MANAGEMENT
CONFIGURATION PARAMETERS
The following table contains all configurable parameters in the order of the default configuration file. You can see the XML variable name definition for each parameter in the left column. The right column shows a brief description of the parameter and provides the title in the web administration and the Konftel 800
User Interface (the touch screen administration menus).
String
<KT version = "x">
<time>
<time_format>
Description
Here x is the version number of the .xml parameters list.
Do not modify.
The top line of the time management section.
To specify the time format for the phone as follows:
• hh:mm - Konftel 800 shows time using the 24hour clock approach.
• hh:mm AP - Konftel 800 shows time using the
12-hour clock approach.
• Empty value - Konftel 800 shows the standard time format for the selected language.
Terminology reference
Web interface : Time Format
Phone UI : Not configurable
Table continued…
35
SETTINGS CONFIGURATION AND MANAGEMENT
String
<timezone>
<ntp>
<server>
<enable>
Description
To specify the Region/City location in line with the definitions from the common Timezone databases.
For more information, see https://en.wikipedia.org/ wiki/List_of_tz_database_time_zones . If you set the string value to the name of a time zone, for example, to Europe/Amsterdam , it automatically enables the Geo Timezone (auto DST) parameter.
Terminology reference
Web interface : Timezone
Phone UI : Not configurable
The top line of the NTP configuration section.
To specify the IP address or FQDN of an NTP server. If DHCP Option 42 provides the NTP server value, Konftel 800 uses the DHCP provided value.
If DHCP Option 42 is not available, the phone applies this XML parameter.
Terminology reference
Web interface : NTP Server
Phone UI : NTP Server
To specify whether NTP is enabled. The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : NTP Enable
Phone UI : Enable NTP
Table continued…
36
SETTINGS CONFIGURATION AND MANAGEMENT
String
<date_format>
Description
To specify the date format which consists of the day, month and year. Here, dd indicates the day of the month, D is a shortened version of the day of week, DD is the full version of the day of the week,
M is a shortened version of the month, MM is the full version of the month, yy is the last 2 digits of the calendar year, yyyy is the full calendar year.
You can configure this parameter only through the web interface.
The following date format options are available:
• dd M, D - Date, short name for the month and day of the week. For example, 10 Jan, Mon .
• dd MM, DD - Date, full name for the month and day of the week. For example, 10 January,
Monday .
• M dd, D - Short name for the month, date, and short name for the day of the week. For example, Jan 10, Mon .
• MM dd, DD - Full name for the month, date, and full name for the day of the week. For example, January 10, Monday .
• D, dd M - Short name for the day of the week, date, and short name for the month. For example, Mon, 10 Jan .
• DD, MM dd - Full name for the day of the week, full name for the month, and date. For example,
Monday, January 10 .
• dd/mm/yy - Date/month/short numerical designation of the year. For example, 10/01/20 .
• dd/mm/yyyy - Date/month/full numerical designation of the year. For example,
10/01/2020 .
• mm/dd/yy - Month/date/short numerical designation of the year. For example, 01/10/20 .
Table continued…
37
SETTINGS CONFIGURATION AND MANAGEMENT
String
<custom_dst>
<enable>
<offset_hours>
Description
• mm/dd/yyyy - Month/date/full numerical designation of the year. For example,
01/10/2020 .
• yy/mm/dd - Short numerical designation of the year/month/date. For example, 20/01/10 .
• yyyy/mm/dd - Full numerical designation of the year/month/date. For example, 2020/01/10 .
• The default value. Here, your Konftel 800 applies the date format that is standard for the selected language. For example, if you choose
Finnish , the date format is dd.mm.yyyy
.
The top line of the DST section.
To specify whether the Daylight Saving Time (DST) configuration is enabled. The options are the following:
• True.
• False. This is the default setting.
The phone ignores the Custom DST parameter if you configure the Timezone parameter, and the
NTP server provides it. Thus, you must disable Geo
Timezone (auto DST) to enable Custom DST .
Terminology reference
Web interface : Custom DST
Phone UI : Not configurable
To specify the DST hours offset. The options are the following:
• 1. This is the default setting.
• 2.
Terminology reference
Web interface : Offset Hours
Phone UI : Not configurable
Table continued…
38
SETTINGS CONFIGURATION AND MANAGEMENT
String
<dst_start>
<month>
<day>
<day_mode>
<hour>
Description
The top line of DST start date and time section.
To indicate when the DST parameters become applicable.
To specify the month to apply the DST parameters.
Month number as an integer with the values of 1 to
12.
Terminology reference
Web interface : Start Month
Phone UI : Not configurable
To specify the day to apply the DST parameters.
Day number as an integer with the values of 1 to
31.
Terminology reference
Web interface : Start Day
Phone UI : Not configurable
To specify the advance or delay to apply the DST parameters. The value range is from -5 to 5.
Terminology reference
Web interface : Start Day Mode
Phone UI : Not configurable
To specify the hour to apply the DST parameters.
The hour format is a 24-hour format with values from 0 to 23.
Terminology reference
Web interface : Start Hour
Phone UI : Not configurable
Table continued…
39
SETTINGS CONFIGURATION AND MANAGEMENT
String
<dst_stop>
<month>
<day>
<day_mode>
Description
The top line of DST stop date and time section.
To indicate when the DST parameters become inapplicable.
To specify the month to end the DST parameters application.
Month number as an integer with the values of 1 to
12.
Terminology reference
Web interface : Stop Month
Phone UI : Not configurable
To specify the day to end the DST parameters application.
Day number as an integer with the values of 1 to
31.
Terminology reference
Web interface : Stop Day
Phone UI : Not configurable
To specify the advance or delay to end the DST parameters application. The value range is from -5 to 5.
Terminology reference
Web interface : Stop Day Mode
Phone UI : Not configurable
Table continued…
40
SETTINGS CONFIGURATION AND MANAGEMENT
String
<hour>
<media>
<security>
<srtp>
<srtcp>
Description
To specify the hour to end the DST parameters application.
The hour format is a 24-hour format with values from 0 to 23.
Terminology reference
Web interface : Stop Hour
Phone UI : Not configurable
The top line of the media and codec section.
The top line of the media security section.
To enable or disable the ability to negotiate Secure
Real-time Transport Protocol ( SRTP ) parameters to provide encryption, message authentication, and integrity for the audio and video streams. The options are the following:
• Disabled . This is the default option.
• Optional .
• Mandatory .
Terminology reference
Web interface : SRTP
Phone UI : SRTP
To enable the ability to generate secure RTCP reports. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : SRTCP
Phone UI : SRTCP
Table continued…
41
SETTINGS CONFIGURATION AND MANAGEMENT
String
<capneg>
<codec>
<iLBC>
<prio>
<mode>
Description
To determines if during the SIP offer and answer procedure the SDP protocols and attributes can be negotiated.
• True.
• False. This is the default setting.
Terminology reference
Web interface : Capability Negotiation
(RFC5939)
Phone UI : Capability Negotiation
The top line of the codec selection and priority section. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
You must enable at least 1 codec.
The top line of the iLBC codec section.
To specify the iLBC priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Terminology reference
Web interface : ILBC
Phone UI : ILBC Priority
To specify the iLBC coded frame length in milliseconds. The options are the following:
• 20 for 15.2 kbps. This is the default setting.
• 30 for 13.33 kbps.
Terminology reference
Web interface : ILBC Mode
Phone UI : Not configurable
Table continued…
42
SETTINGS CONFIGURATION AND MANAGEMENT
String
<OPUS>
<prio>
<PCMU>
<prio>
<PCMA>
Description
The top line of the OPUS codec section.
OPUS offers excellent bandwidth versus audio quality performance. It supports bandwidths up to wide-band fidelity. Konftel recommends using it whenever possible.
To specify the OPUS priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Terminology reference
Web interface : OPUS
Phone UI : OPUS Priority
The top of the PCMU section. PCMU is a narrow-band codec operating at 64kbps with 20ms payload. The other name of this codec is G.711 ulaw .
To specify the PCMU priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Terminology reference
Web interface : PCMU
Phone UI : PCMU Priority
The top of the PCMA section. PCMA is a narrow-band codec operating at 64kbps with 20ms payload. The other name of this codec is G.711 alaw .
Table continued…
43
SETTINGS CONFIGURATION AND MANAGEMENT
String
<prio>
<G722>
<prio>
<G729>
<prio>
<voice_quality_monitor>
Description
To specify the PCMA priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Terminology reference
Web interface : PCMA
Phone UI : PCMA Priority
The top of the G722 section. G722 is a wide-band codec providing excellent quality.
To specify the G722 priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Terminology reference
Web interface : G722
Phone UI : G722 Priority
The top of the G729 section. G729 is a narrowband codec providing good audio quality under good network conditions.
OPUS is a preferred option.
To specify the G729 priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Terminology reference
Web interface : G729
Phone UI : G729 Priority
The top of the Voice Quality Monitor configuration section. Voice Quality Monitor is a physical or Cloud server or a collector that you can use to track call audio quality information.
Table continued…
44
SETTINGS CONFIGURATION AND MANAGEMENT
String
<enable_rtcp_xr>
<rtcp_xr_collector_uri>
<rtp_pt_98_ilbc>
<advanced>
<first_media_port>
<last_media_port>
<sip>
Description
To enable the Real-Time Transport Control Protocol with the Extended Reports capability. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable RTCP XR
Phone UI : Enable RTCP XR
To specify the Uniform Resource Identifier (URI) of the RTCP collector.
Terminology reference
Web interface : RTCP XR Collector URI
Phone UI : RTCP XR Collector URI
To set iLBC to use payload type 98. The options are the following:
• True.
• False. This is the default setting.
This parameter is only available in the .xml configuration file.
The top line of the advanced media settings section.
To specify the First Media Port value. The value range is from 2048 to 65528. The default value is
4000.
To specify the Last Media Port value. The value range is from 2055 to 65535. The default value is
65535.
The top line of the SIP parameters section.
Table continued…
45
SETTINGS CONFIGURATION AND MANAGEMENT
String
<primary_account>
<name>
<user>
<registrar>
Description
The top line of the primary account section. After registration, the primary account is applicable for inbound and outbound calls.
To specify the name visible on the phone screen on the primary line. This name is not a part of the SIP messaging.
This is a mandatory setting.
Terminology reference
Web interface : Account Name
Phone UI : Account Name
To specify the SIP account name as configured on the SIP Registrar. The phone uses the content of this field to construct the user URI.
Do not include @sipdomain data.
This is a mandatory setting.
Terminology reference
Web interface : User
Phone UI : User
To specify the IP address or a fully qualified domain name (FQDN) of the SIP server where you register the account. The format options are the following: 10.10.1.100
and 10.10.1.100:5060 for a local SIP server, or sip.company.net
for a
FQDN.
This is a mandatory setting.
Terminology reference
Web interface : Registrar
Phone UI : Registrar Address
Table continued…
46
SETTINGS CONFIGURATION AND MANAGEMENT
String
<proxy>
<keep_alive>
<cred>
Description
To specify the proxy server which the company uses for SIP peer communication. The format options are the following: 10.10.1.100:1234 for a local proxy with an optionally specified port or proxy.company.net:port for a FQDN.
If you append ;hide to the end of the proxy string, Konftel 800 avoids adding a record route to the SIP messaging. For more information, see
Messaging the proxy without adding a record route
on page 112.
Terminology reference
Web interface : Proxy
Phone UI : Proxy
To specify if the phone maintains an active connection to the network. The device can use
Keep Alive messages to ensure that the IP path to the Registrar is always available by sending periodic SIP messages. If the network fails and there are no messages received, the phone attempts to switch to the Secondary account for outbound calls, or the Fallback account.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Keep Alive
Phone UI : Keep Alive
The top of the SIP credentials for the primary account section.
Table continued…
47
SETTINGS CONFIGURATION AND MANAGEMENT
String
<realm>
<username>
<password>
Description
To specify the network domain which the phone accepts incoming calls from. For example, company.com
. The other name is the SIP domain .
You can leave this field blank or put an asterisk
(*) to accept all incoming call invites from any SIP domain.
Terminology reference
Web interface : Realm
Phone UI : Realm
To specify the SIP authentication name. If you leave it blank, the phone uses the content of the <user> parameter to authenticate and register the account.
Terminology reference
Web interface : Authentication Name
Phone UI : Authentication Name
To specify the SIP password for authentication with the Registrar.
This is a mandatory setting.
When you export a configuration file for the device, the system comments the password out for security reasons.
Terminology reference
Web interface : Password
Phone UI : Password
Table continued…
48
SETTINGS CONFIGURATION AND MANAGEMENT
String
<reg_timeout>
<secondary_account>
<name>
<user>
Description
To specify the period in seconds after which the
SIP registration expires. The phone automatically renews the registration within the set period if it is still on and connected to the server.
The default setting is 300 seconds.
Terminology reference
Web interface : Registration Timeout
Phone UI : Registration Timeout
The top line of the secondary account section.
After registration, the secondary account is normally applicable for inbound calls only, but it also makes outbound calls if the primary account becomes unregistered or fails.
To specify the name visible on the phone screen on the primary line. This name is not a part of the SIP messaging.
This is a mandatory setting.
Terminology reference
Web interface : Account Name
Phone UI : Account Name
To specify the SIP account name as configured on the SIP Registrar. The phone uses the content of this field to construct the user URI.
Do not include @sipdomain data.
This is a mandatory setting.
Terminology reference
Web interface : User
Phone UI : User
Table continued…
49
SETTINGS CONFIGURATION AND MANAGEMENT
String
<registrar>
<proxy>
Description
To specify the IP address or a fully qualified domain name (FQDN) of the SIP server where you register the account. The format options are the following: 10.10.1.100
and 10.10.1.100:5060 for a local SIP server, or sip.company.net
for a
FQDN.
This is a mandatory setting.
Terminology reference
Web interface : Registrar
Phone UI : Registrar Address
To specify the proxy server which the company uses for SIP peer communication. The format options are the following: 10.10.1.100:1234 for a local proxy with an optionally specified port or proxy.company.net:port for a FQDN.
If you append ;hide to the end of the proxy string, Konftel 800 avoids adding a record route to the SIP messaging. For more information, see
Messaging the proxy without adding a record route
on page 112.
Terminology reference
Web interface : Proxy
Phone UI : Proxy
Table continued…
50
SETTINGS CONFIGURATION AND MANAGEMENT
String
<keep_alive>
<cred>
<realm>
Description
To specify if the phone maintains an active connection to the network. The device can use
Keep Alive messages to ensure that the IP path to the Registrar is always available by sending periodic SIP messages. If the network fails and there are no messages received, the phone attempts to switch to the Secondary account for outbound calls, or the Fallback account.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Keep Alive
Phone UI : Keep Alive
The top of the SIP credentials for the Secondary account section.
To specify the network domain which the phone accepts incoming calls from. For example, company.com
. The other name is the SIP domain .
You can leave this field blank or put an asterisk
(*) to accept all incoming call invites from any SIP domain.
Terminology reference
Web interface : Realm
Phone UI : Realm
Table continued…
51
SETTINGS CONFIGURATION AND MANAGEMENT
String
<username>
<password>
<reg_timeout>
<fallback_account>
Description
To specify the SIP authentication name. If you leave it blank, the phone uses the content of the <user> parameter to authenticate and register the account.
Terminology reference
Web interface : Authentication Name
Phone UI : Authentication Name
To specify the SIP password for authentication with the Registrar.
This is a mandatory setting.
When you export a configuration file for the device, the system comments the password out for security reasons.
Terminology reference
Web interface : Password
Phone UI : Password
To specify the period in seconds after which the
SIP registration expires. The phone automatically renews the registration within the set period if it is still on and connected to the server.
The default setting is 300 seconds.
Terminology reference
Web interface : Registration Timeout
Phone UI : Registration Timeout
The top line of the fallback account section. After registration, the fallback account is applicable for inbound and outbound calls only if the primary and secondary accounts become unregistered or fail.
Table continued…
52
SETTINGS CONFIGURATION AND MANAGEMENT
String
<name>
<user>
<registrar>
Description
To specify the name visible on the phone screen on the primary line. This name is not a part of the SIP messaging.
This is a mandatory setting.
Terminology reference
Web interface : Account Name
Phone UI : Account Name
To specify the SIP account name as configured on the SIP Registrar. The phone uses the content of this field to construct the user URI.
Do not include @sipdomain data.
This is a mandatory setting.
Terminology reference
Web interface : User
Phone UI : User
To specify the IP address or a fully qualified domain name (FQDN) of the SIP server where you register the account. The format options are the following: 10.10.1.100
and 10.10.1.100:5060 for a local SIP server, or sip.company.net
for a
FQDN.
This is a mandatory setting.
Terminology reference
Web interface : Registrar
Phone UI : Registrar Address
Table continued…
53
SETTINGS CONFIGURATION AND MANAGEMENT
String
<proxy>
<keep_alive>
<cred>
Description
To specify the proxy server which the company uses for SIP peer communication. The format options are the following: 10.10.1.100:1234 for a local proxy with an optionally specified port or proxy.company.net:port for a FQDN.
If you append ;hide to the end of the proxy string, Konftel 800 avoids adding a record route to the SIP messaging. For more information, see
Messaging the proxy without adding a record route
on page 112.
Terminology reference
Web interface : Proxy
Phone UI : Proxy
To specify if the phone maintains an active connection to the network. The device can use
Keep Alive messages to ensure that the IP path to the Registrar is always available by sending periodic SIP messages. If the network fails and there are no messages received, the phone attempts to switch to the Secondary account for outbound calls, or the Fallback account.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Keep Alive
Phone UI : Keep Alive
The top of the SIP credentials for the Fallback account section.
Table continued…
54
SETTINGS CONFIGURATION AND MANAGEMENT
String
<realm>
<username>
<password>
Description
To specify the network domain which the phone accepts incoming calls from. For example, company.com
. The other name is the SIP domain .
You can leave this field blank or put an asterisk
(*) to accept all incoming call invites from any SIP domain.
Terminology reference
Web interface : Realm
Phone UI : Realm
To specify the SIP authentication name. If you leave it blank, the phone uses the content of the <user> parameter to authenticate and register the account.
Terminology reference
Web interface : Authentication Name
Phone UI : Authentication Name
To specify the SIP password for authentication with the Registrar.
This is a mandatory setting.
When you export a configuration file for the device, the system comments the password out for security reasons.
Terminology reference
Web interface : Password
Phone UI : Password
Table continued…
55
SETTINGS CONFIGURATION AND MANAGEMENT
String
<reg_timeout>
<source_port>
<transport_protocol>
<tls>
Description
To specify the period in seconds after which the
SIP registration expires. The phone automatically renews the registration within the set period if it is still on and connected to the server.
The default setting is 300 seconds.
Terminology reference
Web interface : Registration Timeout
Phone UI : Registration Timeout
To specify the source port which indicates the UDP,
TCP, or TLS port or socket that the phone uses during outbound SIP signaling.
• UDP and TCP: 5060 .
• TLS and SIPs: 5061 .
Terminology reference
Web interface : Source Port
Phone UI : Port
To specify the SIP Messaging protocol which the phone must use. It must match the capabilities of the communications server for the Primary,
Secondary and Fallback accounts. UDP and
TCP typically do not require any further adjunct configuration. Being secure and encrypted, TLS and SIPs may require adjustment of the supported
TLS versions of certificate installation.
Terminology reference
Web interface : Transport Protocol
Phone UI : Transport Protocol
The top of the TLS configuration section.
The parameters in this section are applicable if you choose TLS or SIPs as the transport_protocol.
Table continued…
56
SETTINGS CONFIGURATION AND MANAGEMENT
String
<sni>
<tls_method>
<tls_neg_timeout>
Description
To enable or disable using the Server Name
Indication (SNI) extension for TLS connections to a SIP server.
The options are the following:
• True.
• False. This is the default value.
Terminology reference
Web interface : SNI
Phone UI : SNI
To identify the lowest version of the TLS protocol that the phone supports.
The options are:
• TLSv1
• TLSv1_1
• TLSv1_2
Terminology reference
Web interface :TLS Method
Phone UI : TLS Method
To specify the TLS negotiation time-out in seconds for both outgoing and incoming connections during call setup. If this negotiation is not successful within the specified time defined in seconds, the phone stops the negotiation. You can disable the timer by entering 0 .
Terminology reference
Web interface : Negotiation Timeout
Phone UI : TLS Negotiation
Table continued…
57
SETTINGS CONFIGURATION AND MANAGEMENT
String
<tls_password>
<verify_client>
<verify_server>
Description
To specify the password for the private key if it is encrypted.
Terminology reference
Web interface : Device Private Key Password
Phone UI : TLS Password
To specify whether the phone challenges and verifies the peer during each incoming SIP connection attempt. This is a required feature when the SIP realm is not defined and the device accepts incoming call requests from any domain.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Verify Client
Phone UI : Verify Client
To specify whether the phone challenges and verifies the peer during each incoming SIP connection attempt. This is a required feature when the SIP realm is not defined and the device accepts incoming call requests from any domain.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Verify Server
Phone UI : Verify Server
Table continued…
58
SETTINGS CONFIGURATION AND MANAGEMENT
String
<require_client_cert>
<advanced>
<disable_rport>
<session_timers>
Description
To enable validation of the client certificate during each incoming call attempt.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Require Client Certificate
Phone UI : Require Client Certificate
The top line of the Advanced settings section which contains miscellaneous SIP configuration parameters. These parameters often contain the default values.
To enable the remote port forwarding. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Disable rport
Phone UI : Disable ‘rport’
To specify whether the phone uses SIP timers during SIP negotiation. The options are the following:
• 0 - Disabled . This is the default setting.
• 1 - Optional
• 2 - Mandatory
Terminology reference
Web interface : Session Timers
Phone UI : Session Timers
Table continued…
59
SETTINGS CONFIGURATION AND MANAGEMENT
String
<session_expiration_mini mum>
<session_expiration>
<outbound_proxy>
<enable_sip_traces>
Description
To specify the minimum timer value which the phone negotiates during SIP negotiation. The default value is 90 seconds.
This parameter is only available in the .xml configuration file. Do not modify.
To specify the target session timer which the phone negotiates during SIP negotiation. The default setting is 1800 seconds (30 minutes).
Terminology reference
Web interface : Session Expiration
Phone UI : Session Expiration
To specify the IP address or FQDN of the outbound call proxy.
Terminology reference
Web interface : Outbound Proxy
Phone UI : Outbound Proxy
To enable provision of key information for troubleshooting. The default setting is disabled. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable SIP Traces
Phone UI : Not configurable
Table continued…
60
SETTINGS CONFIGURATION AND MANAGEMENT
String
<allow_contact_rewrite>
<allow_via_rewrite>
<enable_sip_replaces>
Description
To enable storing the IP address from the response of the register request. If there is any change detected, the phone unregisters the available SIP
URI and updates it with a new address.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Allow Contact Rewrite
Phone UI : Allow Contact Rewrite
To enable rewriting of the VIA header in the SIP
Register requests. If there is any change detected, the phone overwrites the VIA header with the new data.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Enable Via Rewrite
Phone UI : Allow Via Rewrite
To enable the use of the SIP Replaces header.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable SIP Replaces
Phone UI : Enable SIP Replaces
Table continued…
61
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<contact_use_src_port_ev en_with_dns>
To enable ignoring of the DNS provided source port.
The options are the following:
• True.
• False. This is the default setting.
This parameter is only available in the .xml configuration file.
<enable_lock_codec> To enable the lock codec feature. The options are the following:
• True. This is the default setting.
• False.
This parameter is only available in the .xml configuration file.
<use_static_source_port> To enable the phone to use the port identified in <source_port> or the default values for
<source_port> . When disabled, the device uses ephemeral ports from the port usage table.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Use Static Source Port
Phone UI : Use Static Source Port
<dtmf> The top of the DTMF section.
Table continued…
62
SETTINGS CONFIGURATION AND MANAGEMENT
String
<method>
Description
To configure the Dual-tone multi-frequency (DTMF) signaling method. The options are the following:
• RFC 4733 . With this method, DTMF signals are carried in RTP packets by using a separate RTP payload format. This is the default option.
• SIP Info . With this method, the DTMF signals are sent as SIP requests. The SIP switch creates the tones if the call is transferred to the
PSTN.
• In-band . With this method, the phone generates the tones and sends them in the voice frequency band. This is the least preferred method for interoperability.
Terminology reference
Web interface : DTMF Method
Phone UI : DTMF Method
<rfc4733_payload_type> To specify the DTMF payload media value to use in SIP negotiations. The value range is from 96 to
127. The default setting is 101.
Terminology reference
Web interface : RFC 4733 payload type
Phone UI : RFC 4733 payload type
<nat_traversal> The top line of the Network Address Translation
Traversal (NAT) section.
<ice> The top line of the Interactive Connectivity
Establishment (ICE) section.
Table continued…
63
SETTINGS CONFIGURATION AND MANAGEMENT
String
<enable>
<stun>
<enable>
Description
To enable ICE. ICE uses various techniques to allow SIP-based VoIP devices to successfully traverse the variety of firewalls that may exist between the devices. The protocol provides a mechanism for the endpoints to identify the most optimal path for the media traffic to follow.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : ICE
Phone UI : Enable ICE
The top line of the Simple Traversal of UDP through the NAT (STUN) section.
STUN is a protocol to assist devices behind a NAT firewall or router with packet routing. The protocol allows applications operating through the NAT to discover the presence and type of the NAT and obtain a public IP address (NAT address) and port number that the NAT allocates for the application
User Datagram Protocol (UDP) connections to remote hosts. You must enable STUN if an external
SIP server cannot connect to the phone behind a firewall NAT function and the SIP server supports
STUN .
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : STUN
Phone UI : Enable STUN
Table continued…
64
SETTINGS CONFIGURATION AND MANAGEMENT
String
<server>
<turn>
<enable>
<server>
Description
To configure the IP address or FQDN of the STUN
Server.
Terminology reference
Web interface : STUN Server
Phone UI : STUN Server
The top line of the Traversal Using Relay NAT
(TURN) section.
To enable TURN. TURN is an extension of the
ICE protocol that enables NAT traversal when both endpoints are behind symmetric NAT. With TURN, media traffic for the session has to go to a relay server. Since relaying is expensive, in terms of bandwidth that must be provided by the provider, and additional delay for the media traffic, you must use TURN as a last resort when endpoints cannot communicate directly.
The options are the following:
• True.
• False. This is the default setting.
To enable TURN, you must enable ICE.
Terminology reference
Web interface : TURN
Phone UI : Enable TURN
To specify the IP address:port or FQDN of the
TURN server.
Terminology reference
Web interface : TURN Server
Phone UI : TURN Server
Table continued…
65
SETTINGS CONFIGURATION AND MANAGEMENT
String
<user>
<password>
<phone>
<name>
Description
To specify the TURN server user authentication name.
Terminology reference
Web interface : User
Phone UI : TURN User
To TURN server user authentication password.
Terminology reference
Web interface : Password
Phone UI : TURN Password
The top line of the phone general parameters section.
To enter the name to be displayed on the phone screen above the line appearances. This name is available in any SIP messaging. The maximum input length is 28 characters.
Terminology reference
Web interface : Phone Name
Phone UI : Name
Table continued…
66
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<language> To select the language. The options are:
• en - English . This is the default setting.
• se - Swedish
• da - Danish
• no - Norwegian
• fi - Finnish
• it - Italian
• de - German
• fr - French
• sp - Spanish
• br - Portuguese
• nl - Dutch
• zh - Simplified Chinese
• ru - Russian
• tr - Turkish
Terminology reference
Web interface : Phone Language
Phone UI : Language
<allow_legacy_encryption
>
To enable or disable legacy encryption for backward compatibility. The phone's R 1.0.4 firmware is disabled by default for older less secure encryption algorithms.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Allow Legacy Encryption
Phone UI : Allow Legacy Encryption
Table continued…
67
SETTINGS CONFIGURATION AND MANAGEMENT
String
<password>
<ringlevel>
<key_tone>
Description
To specify the Administrator password. Maximum input length is 32 characters.
Terminology reference
Web interface : Not configurable
Phone UI : Admin Password
To configure the default ringing level after reboot.
The levels are the following:
• Level 0 - The phone stays silent. LED flash indication only.
• Level 1
• Level 2
• Level 3
• Level 4 . This is the default setting.
• Level 5
• Level 6 . The loudest ringing level.
Terminology reference
Web interface : Ringtone Level
Phone UI : Ring Level
To specify whether the phone provides audible feedback of key presses. The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Key Tone
Phone UI : Key Tone
Table continued…
68
SETTINGS CONFIGURATION AND MANAGEMENT
String
<is_daisy_chain_slave>
<phone_status_api>
<sleep_mode_timeout>
Description
To specify the mode of the phone in case of a daisy chain arrangement. When using multiple devices cabled to provide increased room coverage, you must configure the Main (Leader) and Expansion
(Follower) arrangement.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Daisy Chain Mode
Phone UI : Daisy Chain
To enable WebApp Debug which is a debug tool for development and troubleshooting the Web Admin pages via the System Logs.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Webapp Debug
Phone UI : Not configurable
To enable Sleep mode and configure the time-out value. The default value is 0, which means that the feature is disabled. To enable Sleep mode and to specify the time-out in minutes, set the value in the range from 1 to 500.
This parameter is only available in the .xml configuration file.
Table continued…
69
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<enable_startup_sound> To specify whether the branded start-up sound plays when the device boots.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Startup Sound
Phone UI : Startup Sound
<fips_mode> To enable FIPS mode which uses encryption and cryptographic functions compliant with the
Federal Information Processing Standards (FIPS).
When you enable FIPS mode, the phone employs approved key exchange algorithms, cryptographic algorithms and authentication techniques to meet the FIPS 140-2 and 140-x requirements.
The options are the following:
• True. This is the default setting.
• False.
Legacy Encryption or EAP MD5 can not operate with FIPS enabled.
Terminology reference
Web interface : FIPS Mode
Phone UI : FIPS Mode
Table continued…
70
SETTINGS CONFIGURATION AND MANAGEMENT
String
<call_log_enable>
<ceiling_audio_mode>
<bluetooth>
Description
To enable the Call Log. The options are the following:
• True. This is the default setting.
• False.
With Call Log enabled, you can view the Recent call list on the phone. If you set this setting to false , the Recent application becomes unavailable. Here, if you press Recent , the phone displays the following message: Call log is disabled by administrator . When Call Log is disabled, the phone does not save the call records to call log.
Disabling Call Log does not delete the call records from the call log.
Terminology reference
Web interface : Call Log
Phone UI : Call Log
To enable or disable Ceiling audio mode. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Ceiling Audio Mode
Phone UI : Ceiling Audio Mode
The top line of the Bluetooth section.
Table continued…
71
SETTINGS CONFIGURATION AND MANAGEMENT
String
<enable>
Description
To enable the Bluetooth Radio and functionality.
The options are the following:
• True. This is the default setting.
• False.
This parameter is only available in the .xml configuration file.
When you enable Bluetooth, the ability to pair, disconnect and remove pairing becomes available in the phone's Bluetooth menu.
<usb>
<enable>
The top line of the USB section.
To specify whether USB ports are enabled. The default setting is True.
This parameter is only available in the .xml configuration file.
<echo_cancelling_speaker phone>
To specify whether the phone is used as an
Echo Cancelling Speakerphone. When you set this setting to true , Windows considers Konftel
800 as default speaker and communication device.
Here, Windows Device Manager shows the phone as one device with the name Echo Cancelling
Speakerphone. Here, the USB Product ID (PID) is
095C.
When you set this setting to false , Windows
Device Manager shows the phone as two separate devices with different names: Speakers and
Microphone. Here, the USB Product ID (PID) is
0970.
The default setting is True.
This parameter is only available in the .xml configuration file.
<network> The top line of the Network section.
Table continued…
72
SETTINGS CONFIGURATION AND MANAGEMENT
String
<dhcp>
<hosts_map>
<host>
<ip>
<name>
Description
To enable DHCP process. The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Enable DHCP
Phone UI : DHCP
To specify the FQDN/IP mapping information that stays persistent for the device. This arrangement provides for the SIP operation even if DNS is not available.
This parameter is only available in the .xml configuration file.
To specify the FQDN to IP mapping.
The administrator can add several host entities or leave the parameter empty.
The device supports the mappings for the primary, secondary and fallback SIP accounts.
This parameter is only available in the .xml configuration file.
To specify an IP address for the FQDN to IP mapping.
This parameter is only available in the .xml configuration file.
To specify a name for the FQDN to IP mapping in the following format: sipserver1.com
.
This parameter is only available in the .xml configuration file.
Table continued…
73
SETTINGS CONFIGURATION AND MANAGEMENT
String
<hostname>
<domain>
<dns1>
Description
To specify the hostname of the phone to use when performing DHCP, DNS and other network transactions.The default name is Konftel 800 .
Terminology reference
Web interface : Network Hostname
Phone UI : Hostname
To specify the domain name of the phone to be used to indicate the network domain Konftel 800 is part of.
With DHCP enabled, DHCP server may provide this parameter, and therefore you can leave this field blank.
Terminology reference
Web interface : Domain Hostname
Phone UI : Domain
To specify the IP Address of the primary Domain
Name Server.
With DHCP enabled, DHCP server may provide this parameter, and therefore you can leave this field blank.
Terminology reference
Web interface : DNS1
Phone UI : DNS 1
Table continued…
74
SETTINGS CONFIGURATION AND MANAGEMENT
String
<dns2>
<static_ip>
<ip>
<netmask>
<gateway>
Description
To specify the IP Address of the secondary Domain
Name Server.
With DHCP enabled, DHCP server may provide this parameter, and therefore you can leave this field blank.
Terminology reference
Web interface : DNS2
Phone UI : DNS 2
The top line of the static IP configuration section.
To specify the IPv4 address for the phone to use.
Terminology reference
Web interface : IP
Phone UI : IP
To specify the network mask for your phone to determine on subnet versus off subnet addresses and when the gateway is the path to use.
Terminology reference
Web interface : Network Mask
Phone UI : Netmask
To specify the IPv4 address of the subnet gateway.
Terminology reference
Web interface : Gateway
Phone UI : Gateway
Table continued…
75
SETTINGS CONFIGURATION AND MANAGEMENT
String
<vlan>
<vlanid>
<ieee_8021x>
<enable>
Description
To enable the VLAN tagging of the Ethernet packets. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : VLAN Enable
Phone UI : VLAN
To specify the VLAN ID for the phone to use when tagging Ethernet packets. The device accepts only ingress packets tagged with the configured VLAN.
The options are the following: from 0 to 4094.
With LLDP enabled, the L2/3 switch may broadcast a Network Policy LLDP packet that sets the VLAN ID for the phone. The
LLDP broadcast packet overrides the manually configured VLAN value.
Terminology reference
Web interface : VLAN ID
Phone UI : VLAN ID
The top line of the 802.1x section.
To enable 802.1x that is a network security and authentication mechanism aimed to ensure that only authorized IP devices obtain access to the network.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable 802.1X
Phone UI : 802.1x
Table continued…
76
SETTINGS CONFIGURATION AND MANAGEMENT
String
<username>
<eap_md5>
<enable>
<password>
<eap_tls>
Description
To specify the 802.1x username as provision in the security server for the network.
Terminology reference
Web interface : Username
Phone UI : Authentication Name
The top line of the EAP MD5 section.
To enable the EAP MD5 authentication method for the phone to use with the 802.1x authentication server.
You must enable Legacy Encryption to use
EAP MD5 .
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : EAP MD5 Enable
Phone UI : EAP MD5
To specify the EAP MD5 password for the phone to use during authentication.
Terminology reference
Web interface : Password
Phone UI : EAP-MD5 Password
The top line of the EAP TLS section.
Table continued…
77
SETTINGS CONFIGURATION AND MANAGEMENT
String
<enable>
<password>
<lldp>
Description
To enable the EAP TLS authentication method. The
TLS is a state-of-art method which is considered more secure than the MD5 method.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable EAP TLS
Phone UI : EAP TLS
To specify the EAP TLS password to be used during authentication.
Terminology reference
Web interface : Device Private Key Password
Phone UI : Private Key Password
The top line of the LLDP section.
There are character limitations (number of characters and type of characters) for a number of the parameters below. Konftel recommends to validate the .xml configuration file using the .vsd file provided.
Table continued…
78
SETTINGS CONFIGURATION AND MANAGEMENT
String
<enable>
<country>
<country_subdivision>
Description
To enable the Link Layer Discovery Protocol
(LLDP). When enabled, the phone broadcasts information about itself to the neighboring devices.
The device also receives and may act in line with the LLDP information broadcast from Layer 2 or 3 devices managing the subnet.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable
Phone UI : Not configurable
To specify the country of the phone installation. The country indication may be 2 or 3 uppercase letters or 3 digits as defined by the ISO-3166 format.
Terminology reference
Web interface : Country Code
Phone UI : Not configurable
To specify the region, province, state or other country subdivision of the phone installation. The country indication may be 2 or 3 uppercase letters or 3 digits as defined by the ISO-3166 format.
Terminology reference
Web interface : Country Subdivision
Phone UI : Not configurable
Table continued…
79
SETTINGS CONFIGURATION AND MANAGEMENT
String
<county>
<city>
<city_division>
<block>
<street>
Description
To specify the county, parish, district, or other applicable administrative division. Maximum input length is 50 characters.
Terminology reference
Web interface : County
Phone UI : Not configurable
To specify the city of installation. The maximum input length is 40 characters.
Terminology reference
Web interface : City
Phone UI : Not configurable
To specify the subdivision or section of the city. The maximum input length is 60 characters.
Terminology reference
Web interface : City Division
Phone UI : Not configurable
To specify the block name within the city.
Terminology reference
Web interface : Block
Phone UI : Not configurable
To specify the street name.
Terminology reference
Web interface : Street
Phone UI : Not configurable
Table continued…
80
SETTINGS CONFIGURATION AND MANAGEMENT
String
<direction>
<trailing_street_suffix>
<street_suffix>
<number>
<number_suffix>
Description
To specify the direction or orientation of the street.
Terminology reference
Web interface : Direction
Phone UI : Not configurable
To specify the trailing street suffix. The maximum input length is 10 characters.
Terminology reference
Web interface : Trailing Street Suffix
Phone UI : Not configurable
To specify the freeform or standard street suffix. For example, Alley, ALY, CENTER, CTR. The maximum input length is 15 characters.
Terminology reference
Web interface : Street Suffix
Phone UI : Not configurable
To specify the building number with relation to the street.
Terminology reference
Web interface : Number
Phone UI : Not configurable
To specify the subdivision of the street number such as a unit. For example, B to indicate that the phone is at 16B Street. The maximum input length is 20 characters.
Terminology reference
Web interface : Number Suffix
Phone UI : Not configurable
Table continued…
81
SETTINGS CONFIGURATION AND MANAGEMENT
String
<landmark>
<additional>
<name>
<zip>
<building>
Description
To specify the reference or commonly known location or landmark. The maximum input length is
30 characters.
Terminology reference
Web interface : Landmark
Phone UI : Not configurable
To specify any additional reference points. The maximum input length is 30 characters.
Terminology reference
Web interface : Additional
Phone UI : Not configurable
To specify the device name. The default name is Konftel800 . The maximum input length is 60 characters.
Terminology reference
Web interface : Name
Phone UI : Not configurable
To specify the ZIP or postal code of the location.
The maximum input length is 20 characters.
Terminology reference
Web interface : Zip
Phone UI : Not configurable
To specify the name of the building. The maximum input length is 60 characters.
Terminology reference
Web interface : Building
Phone UI : Not configurable
Table continued…
82
SETTINGS CONFIGURATION AND MANAGEMENT
String
<unit>
<floor>
<room>
<place_type>
<script>
Description
To specify a unit within a building. The maximum input length is 30 characters.
Terminology reference
Web interface : Unit
Phone UI : Not configurable
To specify the floor within the building. The value range is from -5 to 250.
Terminology reference
Web interface : Floor
Phone UI : Not configurable
To specify the room name. The maximum input length is 60 characters.
Terminology reference
Web interface : Room
Phone UI : Not configurable
To specify the premises type. For example, office or laboratory . The maximum input length is 60 characters.
Terminology reference
Web interface : Place Type
Phone UI : Not configurable
To specify the script. The maximum input length is
60 characters.
Terminology reference
Web interface : Script
Phone UI : Not configurable
Table continued…
83
SETTINGS CONFIGURATION AND MANAGEMENT
String
<elin>
<qos>
<dscp_sip>
<dscp_media>
<device_management>
Description
To specify the Emergency Location Identification
Number (ELIN) to support e911 systems that utilize
LLDP for location gathering and monitoring. The maximum input length is 31 characters.
Terminology reference
Web interface : ELIN
Phone UI : Not configurable
The top line of the Quality of service section.
To specify the diffserv codepoint to tag SIP messages. The options are the following: from 0 to
63 in line with IETF RFC-4594. The default setting is 0, which is untagged.
Terminology reference
Web interface : SIP DiffServ
Phone UI : Not configurable
To specify the diffserv codepoint to tag RTP/SRTP audio packets. The options are the following: from
0 to 63 in line with IETF RFC-4594. The default setting is 0, which is untagged.
Terminology reference
Web interface : Media DiffServ
Phone UI : Not configurable
The top line of the Device Management section
Table continued…
84
SETTINGS CONFIGURATION AND MANAGEMENT
String
<enable>
<update_interval>
<update_max_wait>
<server>
Description
To enable Device Management service within the phone.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Enable
Phone UI : Enable
To indicate how often the phone contacts the server to see if an update is available. The value range is from 1 minute to 21,000 minutes. The default setting is 60 minutes.
Terminology reference
Web interface : Update Interval
Phone UI : Not configurable
To specify a waiting time that expires if the server and the phone cannot complete the provisioning check due to network failure. The default setting is
1 second.
Terminology reference
Web interface : Maximum Time To Wait To
Update
Phone UI : Not configurable
To specify the IP address, FQDN or URL of the provisioning server unless DHCP provides the data.
The string can be complex. Here, the phone uses
TLS to reach port 443 and specifies the path to the files.
Table continued…
85
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<check_server_certificate> To enable the Check certificate when the phone validates the server certificate credentials each time it contacts the server.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Check Certificate
Phone UI : Check Server Certificate
<lowest_tls_version> To specify the lowest TLS version for the phone to use during secure communications with the provisioning server. The options are the following:
• TLSv1 . This is the default setting.
• TLSv1_1
• TLSv1_2
Terminology reference
Web interface : Lowest TLS Version
Phone UI : Lowest TLS Version
Table continued…
86
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<dhcp_option>
<SCEP>
To select the DHCP option which indicates with
DHCP Option number how the system parses packets to obtain the phone specific configuration parameters.
The options are the following:
• 43.
• 56.
• 60.
• 61.
• 66.
• 67.
• 242.
• Off.
• Auto. This is the default setting. Here, it searches the DHCP provided offer for the correct parameters.
For more information, see
on page 22.
Terminology reference
Web interface : DHCP Option
Phone UI : DHCP Option
The top line of the Simple Certificate Enrollment
Protocol(SCEP) section.
<SCEP_ENTITY_CLASS> To identify the entity class for which the SCEP server generates the identity certificates.
Terminology reference
Web interface : Entity Class
Phone UI : Not configurable
Table continued…
87
SETTINGS CONFIGURATION AND MANAGEMENT
String
<PASSWORD>
<MYCERTURL>
<MYCERTRENEW>
<MYCERTKEYLEN>
Description
To specify the SCEP system password. The default is the phone's serial number.
Terminology reference
Web interface : Password
Phone UI : Not configurable
To enter the URL of the SCEP server.
Terminology reference
Web interface : SCEP Server
Phone UI : Not configurable
The phone generates a certificate renewal request prior to the expiry of the current certificate based on the following formula: (Date of Expiry
– Date of Issue) * Key Renew Percentage.
The MYCERTKEYRENEW parameter indicates the percentage of certificate life that passes prior to a renewal request. The value range is from 1 to 99.
The default value is 90.
Terminology reference
Web interface : Initiate renewal on % of Validity
Interval
Phone UI : Not configurable
To specify the length of the public and private keys.
The options are the following:
• 1024. This is the default setting.
• 2048.
Terminology reference
Web interface : Key Length
Phone UI : Not configurable
Table continued…
88
SETTINGS CONFIGURATION AND MANAGEMENT
String
<MYCERTDN>
<MYCERTCN>
<MYCERTCAID>
Description
To specify the DN which is the Subject of the certificate request. For example, /C=US/ST=NJ/
L=MyTown/O=MyCompany is a DN for a New
Jersey based company in the United States, in
MyTown at MyCompany.subject
of the SCEP certificate request.
Terminology reference
Web interface : Subject
Phone UI : Not configurable
To enter the Common Name (CN) for the phone to use when requesting a certificate. By default, the
CN is the Konftel 800 serial number.
Terminology reference
Web interface : Common Name
Phone UI : Not configurable
To specify the CA identifier. The phone generates the SCEP certificate request and signs it with a certificate on the device. The CA ID tells the SCEP server which CA the certificate used at generation of the request. The default value is CAIdentifier .
Terminology reference
Web interface : CA Identifier
Phone UI : Not configurable
Table continued…
89
SETTINGS CONFIGURATION AND MANAGEMENT
String
<SCEPENCALG>
Description
To specify the SCEP encryption algorithm. If the value is 0, then SCEP operates using the DES encryption. If the value is 1, then SCEP operates using the AES-256 encryption. If you put any other value than 0 or 1, or skip the parameter, then SCEP also operates using the DES encryption.
Terminology reference
Web interface : Encryption Algorithm
Phone UI : Not configurable
<logging> The top line of the Logging section.
<remote_syslog_enable> To enable the use of a remote syslog server. The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Not configurable
Phone UI : Not configurable
<remote_syslog_host> To specify the IP address or FQDN of the syslog server.
Terminology reference
Web interface : Not configurable
Phone UI : Not configurable
Table continued…
90
SETTINGS CONFIGURATION AND MANAGEMENT
String
<pjsip_log_level>
<ldap>
<enable>
Description
To change the level of logging for the SIP application in the phone. The options are the following:
• 0 - Fatal
• 1 - Error
• 2 - Warning
• 3 - Info. This is the default setting.
• 4 - Debug.
• 5 - Trace.
Terminology reference
Web interface : PJSIP Log Level
Phone UI : Not configurable
The top line of the Lightweight Directory Access
Protocol (LDAP) section.
To enable the LDAP service in the phone.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Enable
Phone UI : Not configurable
Table continued…
91
SETTINGS CONFIGURATION AND MANAGEMENT
String
<name_filter>
<server_url>
<search_base>
Description
When the phone uses the LDAP search, it contacts the LDAP server with the search parameter as defined by the name filter. The default is (|
(sn=%*)(cn=%*)) which uses the search text and requests a search against the Surname (SN) and the Common Name (CN) values on the LDAP server.
Terminology reference
Web interface : Name Filter
Phone UI : Not configurable
To enter the URL that specifies the protocol (LDAP or LDAPS), the FQDN and the port to be used when communicating with the phone. For example, ldaps://cd.lab.acme.com:636 .
Terminology reference
Web interface : URL
Phone UI : Not configurable
To specify the search base that indicates the range or domain of the searchable base. The default value is dc=example, dc=com that shows the domain components of example.com
.
Terminology reference
Web interface : Search base
Phone UI : Not configurable
Table continued…
92
SETTINGS CONFIGURATION AND MANAGEMENT
String
<user_name>
<password>
<max_hits>
Description
The phone needs a username and a password to authenticate with the LDAP server to perform searches. The username format can be simple such as JohnDoe which stands for a user network, or it can base on the LDAP directory structure such as uid=400130352125,dc=acme,dc=com .
Terminology reference
Web interface : Username
Phone UI : Not configurable
To specify the password that the phone uses when authenticating with the LDAP server.
Terminology reference
Web interface : Password
Phone UI : Not configurable
This parameter is not in .xml configuration files if you export them through the web interface.
To determine the number of search results to request. The value range is from 0 to 1000. The default value is 20 which nicely displays on the phone.
Terminology reference
Web interface : Max hits
Phone UI : Not configurable
Table continued…
93
SETTINGS CONFIGURATION AND MANAGEMENT
String
<country_code>
<area_code>
<external_prefix>
Description
To specify the country code based on ISO 3166.
If you enter it, the LDAP searches, that match the country code, remove it from the displayed search results.
When you specify the country code, all number_attributes must be void of non-number characters before the number conversion starts.
Terminology reference
Web interface : Country code
Phone UI : Not configurable
To specify the Numbering Plan Area (NPA) or Area
Code. If you enter it, the LDAP searches, that match the area code, remove it from the displayed search results. The maximum input length is 10 digits.
Terminology reference
Web interface : Area code
Phone UI : Not configurable
To specify a special prefix for dialing external numbers. If you define it, the phone appends it at the start of all outbound calls when making calls to external numbers. For example, 9 to seize an outbound trunk.
Terminology reference
Web interface : External prefix
Phone UI : Not configurable
Table continued…
94
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<min_length_for_ext_prefi x>
To restrict the external prefix that the phone adds only if the phone number is longer than the minimum length. If you set this parameter, the phone only adds the external prefix to the dialed number if the dialed digits exceed the minimal length for external prefix value. For example, parameter value 8 allows for 7 digit direct internal dialing. The value range is from 0 to 32. The default value is 0.
Terminology reference
Web interface : Min length for external prefix
Phone UI : Not configurable
<exact_length_for_no_ext
_prefix>
To specify the exact length for the external prefix.
If you define it, the phone does not append the external prefix. For example, parameter value 11 allows if the outbound user dials 012225551212 which includes the trunk access code, country code and NPA-NXX.
Terminology reference
Web interface : Exact length for no external prefix
Phone UI : Not configurable
<number_prefix_for_no_ex t_prefix>
To specify the initial number for the phone numbers in case of using which the phone adds no external prefix.
Terminology reference
Web interface : Number prefix for no external prefix
Phone UI : Not configurable
Table continued…
95
SETTINGS CONFIGURATION AND MANAGEMENT
String
<number_attributes>
Description
A successful LDAP query results in a number of details for the requested contact. The Default telephone number related LDAP IDs reflect the following:
• Phone number
• Mobile phone
• Home phone
• Work phone
• Other
The LDAP administrator can also use custom parameters. The number attributes parameter matches the needed LDAP <id> and sets the text to display <value> as follows:
<number_attributes type="xml">
<number_attribute>
<id>telephoneNumber</id>
<value>PHONENUMBER</value>
</number_attribute>
<number_attribute>
<id>mobile</id>
<value>MOBILE</value>
</number_attribute>
</number_attributes>
Number attributes are attributes containing phone numbers and their value forms part of the "INVITE" message during a SIP call. The attributes must only contain number characters to make a SIP call.
Terminology reference
Web interface : Number Attributes → Add attribute label
Phone UI : Not configurable
Table continued…
96
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<display_name>
<sort_results>
To define which parameter that the LDAP query returns is used as the Display Name. Default is %cn
(Common Name).
Terminology reference
Web interface : Display name
Phone UI : Not configurable
To enable sorting of the query results in alphabetical order based on the Display name.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Sort results
Phone UI : Not configurable
<use_dm_certificates_for_l daps>
To enable the use of the Device Management certificates when communicating with the LDAP server securely.
The options are the following:
• True.
• False. This is the default setting.
Terminology reference
Web interface : Not configurable
Phone UI : Not configurable
<httpd> The top line of http daemon section.
Table continued…
97
SETTINGS CONFIGURATION AND MANAGEMENT
String Description
<enable> To enable the Web Admin access to access the phone through the web interface.
The options are the following:
• True. This is the default setting.
• False.
Terminology reference
Web interface : Enable
Phone UI : Web Access
<min_allowed_tls_version
>
To define the minimum allowed TLS version which the web server uses for Web Admin capability. The default setting is 1.2.
The options are the following:
• all. This allows TLS 1.0 and TLS 1.1 connections.
• 1.2. This is the default setting.
This parameter is only available in the .xml configuration file.
INPUT VALIDATION AND DATA TYPE RESTRICTIONS
The user's input validation takes place during the configuration of the settings on the phone, through the web interface, and by using the configuration file.
When the user tries to input invalid data on the phone or through the web interface, the phone does not accept or save the changed settings.
When the user tries to input invalid data during the configuration file import using the web interface or automatic provisioning of the phone, the server does not accept or save the invalid input. Konftel 800 does not accept configuration of the settings when:
• The user tries to import a file with invalid content for its type using the web interface or automatic provisioning.
• The user tries to import a large file using the web interface or automatic provisioning.
98
SETTINGS CONFIGURATION AND MANAGEMENT
Input Data Type and Length Restrictions
Konftel 800 provides input data type and length validation. All validation rules take a stand on the existing requirements. For example, if the data input is a URL, validation rules are based on RFC for URLs.
When the user inputs data that do not meet the requirements, the system highlights the fields with the invalid data. The phone and the web server do not accept or process any data that does not meet the defined data type and length requirements.
If you input valid data, the phone reboots and applies the new configuration.
You can find the specific requirements and rules for valid data input in the settings description sections.
Related information
on page 35
PHONE SETTINGS
The Konftel 800 phone settings include the following:
• Phone Name
• Phone Language
• Security
• Ringtone Level
• Key Tone
• Reboot Device
• Webapp Debug
• Daisy Chain Mode
• Factory Reset
• Admin Password
• Time and Region
• Startup Sound
You can configure the phone settings during the installation of Konftel 800 or any time after it.
Related information
on page 35
99
SETTINGS CONFIGURATION AND MANAGEMENT
Rebooting the phone
About this task
Use this procedure to reboot your Konftel 800 using the user interface of the phone. Here you can reboot the phone without making additional power cycles.
You can reboot Konftel 800 from the user interface of the phone only if you log in as the administrator.
You can also reboot the phone from the web user interface.
Procedure
On the phone screen, tap Settings > Admin Login > Phone .
Tap Reboot .
The phone shows the following pop-up message: Reboot the phone.
Press OK to confirm for 2 minutes and then hides it.
To confirm the reboot, tap Ok .
The phone starts the reboot process and shows the following message:
Rebooting phone .
Optional: To return to the Phone settings, tap Cancel .
Related information
on page 35
Configuring Daylight Saving Time through the web interface
About this task
Use this procedure to configure DST offset through the web interface.
When you use the DST start parameters, enable the comparable DST stop parameters.
Procedure
Log in to the web interface.
Click Phone .
Enable Custom DST .
In the Offset Hours field, specify the time in hours between the standard time and the period when the DST parameter is active.
The values are 1 and 2. The default setting is 1 .
In the Start Month field, select the month to apply the DST offset.
100
SETTINGS CONFIGURATION AND MANAGEMENT
In the Start Day Mode field, select the day mode to apply the DST offset.
In the Start Day field, specify the day to apply the DST offset.
The value range depends on the selected Start Day Mode . For example, if you select Day of month as the day mode, the value range is from 1 to 31.
The value range for the weekday is from 0 to 7. Note that in this case, 0 and 7 mean Sunday.
When Start Day Mode is 0, the start day is a day of the month. In case of other values, the day is a day of the week: 1 is Monday, 5 is Friday. If Start
Day Mode is 2 and Start Day is 5, you define the second Friday in the month.
The values -1 to -5 show a weekday in the month from the month end. If Start
Day Mode is -1 and Start Day is 5, this is the last Friday in the month.
In the Start Hour field, specify the hour to apply the DST offset.
In the Stop Month field, select the month to stop applying the DST offset.
In the Stop Day Mode field, select the day mode to stop applying the DST offset.
In the Stop Day field, specify the day to stop applying the DST offset.
The value range depends on the selected Stop Day Mode . For example, if you select Day of month as the day mode, the value range is from 1 to 31.
In the Stop Hour field, specify the hour to stop applying the DST offset.
Click Save .
Related information
on page 35
Daylight Saving Time state
Check the Daylight Saving Time state on the status page. The following options are available:
• On shows that the DST is active. This happens when you configure a UTC timezone, enable Custom DST , and the current date is between the DST start day and DST stop day. In this case, you can add the offset to the current time.
• Off demonstrates that the DST is not active. This happens when you configure a UTC timezone with the Custom DST disabled, or the current date is not between the DST start day and DST stop day. In this case, you cannot add the offset to the current time.
• Auto means that there is a Geo timezone set, and the phone ignores the Custom DST settings. In this case, the DST settings are managed automatically.
101
SETTINGS CONFIGURATION AND MANAGEMENT
• Unknown shows that the required information is currently unavailable. You must refresh the page and check it later.
Related information
on page 35
Provision of the NTP server address
Use DHCP option 42 to provide NTP server address to Konftel 800 when using
802.1x certificates. In this case, you must have DHCP enabled on the phone to display the accurate time received from this NTP server address.
When DHCP includes option 42 providing a valid NTP server address, Konftel 800 uses this value even if you configure the NTP server in the .xml configuration file.
When the DHCP option 42 does not provide an NTP server address, the value from the configuration file becomes applicable.
Related concepts
DHCP configuration options on page 22
Related information
on page 35
Sleep mode
Konftel 800 supports Sleep mode feature, which saves power by turning the screen off after a specified period of inactivity. By default, Sleep mode is in disabled state.
The phone administrator can enable Sleep mode and configure the time-out value.
The phone wakes up from Sleep mode when you do any of the following:
• Touch the screen
• Connect or disconnect the USB cable
• Connect or disconnect the Bluetooth ® Classic
The phone also wakes up from Sleep mode during screen activity, such as an incoming call, Konftel Unite connection, or error prompts.
The phone cannot enter Sleep mode during an active call or when it is in music streaming mode.
You can configure Sleep mode only using the configuration file. The default value is 0, which means that the feature is disabled. To enable Sleep mode and to specify the time-out in minutes, set the value in the range from 1 to 500.
102
SETTINGS CONFIGURATION AND MANAGEMENT
Related information
on page 35
MEDIA SETTINGS
The Konftel 800 media settings include the following:
• Security
• Audio codecs
• Voice Quality Monitor
• Advanced settings including the media ports range.
Related information
on page 35
Voice quality monitoring
Configure Konftel 800 to generate quality metrics and evaluate the overall quality of the calls. You can use this information to troubleshoot various quality aspects of the phone calls.
Find the detailed description of the collected parameters in the following standards: RFC 6035 and RFC 3611.
RTCP XR as voice quality monitoring report
If you enable the voice quality monitoring feature, the phone collects the metrics, generates Real-Time Control Protocol Extended Report (RTCP XR), and sends
RTCP XR as a SIP PUBLISH message to the specified report collector. View the statistics of the established phone calls on a specific information collecting portal.
The phone collects the metrics in the following cases:
• One of the call parties ends the call.
• Call parameters, such as codec and far-end IP address or port, change.
• One of the call parties puts the call on hold or resumes it.
RTCP XR parameters
The following table lists parameters that the RTCP XR contains:
Parameter Description
CallId Party leg identifier
Table continued…
103
SETTINGS CONFIGURATION AND MANAGEMENT
Parameter
LocalId
RemoteId
OrigID
LocalGroup
LocalAddr
LocalMAC
RemoteAddr
Timestamps
SessionDesc
Description
Reporting device for the media session
Remote device of the media session
Device that originated the session
Identification for aggregation of the local phone
Address information, including an IP address, a port number, and SSRC of the phone that receives the information
The Media Access Control (MAC) address of the local phone
Address information, including an IP address, a port number, and SSRC of the phone that is the source of information.
Call start and call end in Coordinated Universal Time (UTC)
A shortened version of the media session including codecs
(ILBC, Opus, PCMU, PCMA, G722, or G729), silence suppression status (on or off), and number of packets per second
JitterBuffer
PacketLoss
BurstGapLoss
Delay
Jitter Buffer metric definitions
Packet loss percentage and Jitter buffer discard rate percentage
Burst-to-Gap loss metric
Network delay between the call parties
Signal Non-packet elements of the voice over IP system. Includes a
Signal level (SL) metric, which typically has a negative value
QualityEst Measures of the established call quality
Related information
on page 35
104
SETTINGS CONFIGURATION AND MANAGEMENT
Quality estimate metrics
The following table shows the direct measures of the quality of the established call or transmission. These metrics incorporate the effects of codec type, packet loss, discard, burstiness, and delay.
Metric
RLQ
RCQ
MOSLQ
MOSCQ
QoEEstAlg
Description
Listening Rating Factor (RLQ) metric based on burst packet loss and codec selection.
Conversational Rating Factor (RCQ) metric measures voice quality based on transmission delay, burst packet loss, and burst loss recency.
A mean opinion score for listening quality (MOSLQ). The scale of speech quality is one (bad) through five (excellent).
A mean opinion score for conversational quality (MOSCQ).
Includes recency and delay effects, which affect conversational quality.
A text description of the algorithm, which estimates all voice quality metrics.
Related information
on page 35
Configuring RTCP XR
About this task
By default, the voice quality monitoring feature on Konftel 800 is disabled. To use this feature, enable it and specify the Uniform Resource Identifier (URI) of the RTCP XR collector. You can do this on the phone, through the phone web interface, or using the configuration .xml file.
The acceptable formats for the collector URI are as follows:
• hostname
• hostname:port
• user@hostname
• user@hostname:port
105
SETTINGS CONFIGURATION AND MANAGEMENT
Before you begin
Obtain the RTCP XR collector URI from your service provider.
Procedure
• To configure RTCP XR from the phone interface, do the following:
Log in as the administrator.
Navigate to Media > Voice Quality Monitor and move the Enable RTCP XR slider to the right to activate RTCP XR.
In the RTCP XR Collector URI field, specify the RTCP XR collector URI.
For example, [email protected]
.
Tap the Arrow Left icon three times to return to the home screen.
The phone restarts the application to apply the changes.
• To configure RTCP XR from the web interface, do the following:
Log in to the phone web interface.
On the Media tab, in the Voice Quality Monitor section, move the Enable
RTCP XR slider to the right to activate RTCP XR.
In the RTCP XR Collector URI field, specify the RTCP XR collector URI.
For example, [email protected]
.
Click Save .
The phone restarts the application to apply the changes.
• To configure the RTCP XR using the configuration file, do the following:
Obtain the configuration .xml file.
Find the RTCP XR settings under the <voice_quality_monitor> section.
In the <enable_rtcp_xr> tag, specify true to enable RTCP XR.
In the <rtcp_xr_collector_uri> tag, specify the collector URI.
For example, [email protected]
.
Save the configuration file.
Import the configuration file to the phone through the web interface or to the provisioning server to configure several phones simultaneously.
Related concepts
Related tasks
Exporting the configuration file on page 129
Related information
on page 35
106
SETTINGS CONFIGURATION AND MANAGEMENT
Configuration of the media port range
When the Konftel 800 system operates, it assigns two media ports - RTP and
RTCP - to each session. The phone uses the media port values from the specified media port range. To configure this parameter, you must enter the First Media Port and the Last Media Port values. The acceptable values are the following:
• For First Media Port : from 2048 to 65528.
• For Last Media Port : from 2055 to 65535.
When you specify the values for the first and the last media ports, the phone uses two consecutive unoccupied ports from this media port range: RTP port to transfer audio signal and RTCP to send statistic data. For each new call the device applies the next two ports, even if you end the previous session and its ports become available. Konftel 800 uses the ports this way until it reaches the last port within the configured media port range, and then it switches to the first port. For example, if you set the First Media Port parameter to 4000 and the Last
Media Port to 4007, Konftel 800 uses the following port pairs: 4000 for RTP and
4001 for RTCP, 4002 for RTP and 4003 for RTCP, and further.
For successful configuration, the media port range must be at least 8 as this is the number of ports Konftel 800 uses for a conference call with the maximum allowed number of participants. If it is less than 8, the phone shows the following error message: There should be at least 8 media ports in total.
As a result, the device does not accept the configuration and uses the following default values:
• First Media Port: 4000 .
• Last Media Port: 65535 .
As the phone always uses two ports, it prefers to have an even media port range to correctly form port pairs. Thus, if the check shows that the number is odd,
Konftel 800 shows the following warning message: Number of media ports is expected to be even . Here, the device ignores the last value of the range to make the number of media ports even.
You must take into consideration that, unlike Konftel 800, some implementations do not follow RFC 3605 and do not recognize when the peer specifies its RTCP port separately. If such an implementation receives an odd RTP port number from your conference device, it follows the RFC 3550 rule to change the RTP port to the next lower even number, and this results in the loss of RTP. Thus, you must account for this possibility of a session failure if you enter an odd First Media Port number. If so, the phone warns you with the following message: First Media
Port is expected to be an even number.
Nevertheless, the device accepts an odd RTP port value and continues its operation.
107
SETTINGS CONFIGURATION AND MANAGEMENT
There is no dependencies check for the media port range during the .xml configuration file import.
When you specify the media port range correctly, Konftel 800 accepts it and restarts to apply changes.
You can configure the Media Port Range parameter on the phone, through the web interface, by importing the .xml configuration file, or through autoprovisioning.
Related information
on page 35
Configuring the media port range on the phone
About this task
Use this procedure to configure the media port range on your .
Procedure
Log in as administrator.
In the Settings menu, tap Media > Advanced .
Set the First Media Port parameter.
Set the Last Media Port parameter.
Tap the Arrow Left icon three times to return to the home screen.
If the parameters values are valid, the phone restarts to apply changes.
Related information
on page 35
Configuring the media port range through the web interface
About this task
Use this procedure to configure the media port range through the web interface of your .
Procedure
Log in as administrator.
Navigate to Media > Advanced .
Set the First Media Port parameter.
Set the Last Media Port parameter.
Click Save .
108
SETTINGS CONFIGURATION AND MANAGEMENT
If the parameters values are valid, the phone restarts to apply changes.
Related information
on page 35
SIP SETTINGS
The Konftel 800 SIP settings include the following:
• Primary account
• Secondary account
• Fallback account
• Source port
• Transport protocol
• Transport Layer Security (TLS)
• Advanced SIP settings
• DTMF
• NAT Traversal
If you do not configure the SIP account for Konftel 800, the phone operates in
USB only user mode.
Related information
on page 35
SIP account registration status
SIP account is a specifically configured set of credentials that provides access to
SIP telephony and allows users to make calls from the phone. The SIP settings on
Konftel 800 provide for configuring the primary account, the secondary account, and the fallback account.
If the phone has several configured SIP accounts, but there is only one registered account, the phone displays the name of the registered account on its idle home screen.
You can tell if the phone has a configured and registered SIP account or problems with the SIP account registration by looking at its home screen. The following options are available:
• The phone has no SIP account configured. Konftel 800 displays the phone name, the Bluetooth and Settings buttons on its idle home screen. The phone does not display the account name.
109
SETTINGS CONFIGURATION AND MANAGEMENT
• The phone has the SIP account configured but not registered. For example, this can be due to invalid credentials of the SIP account or network problems.
Konftel 800 displays the Warning icon, the account name, the Recent , Call ,
Unite , and Settings buttons on its idle home screen. When you tap the account name or the Warning icon, the phone displays the following pop-up message: No sip service registered (Wrong username/password or registrar?) . It disappears automatically after a certain timeout, or you can tap Ok to return to the home screen.
• The phone has the SIP account configured and registered. The phone displays the phone name, the account name, the Recent , Call , Unite , and Settings buttons on the idle home screen.
You can use Konftel 800 via USB regardless of the SIP account registration status. When the phone has no SIP account configured or registered, it acts as a speakerphone that you can use to conduct virtual meetings and listen to audio files.
Related information
on page 35
Caller information presentation
Konftel 800 displays the calling person information to show who is calling or display that the caller ID is unknown. This data is available on the Incoming Call ,
Active Call , and Recent Call List screens.
The phone shows the information that it receives from the caller's SIP invite message. It includes the following:
• CNAM: Usually specifies the contact name.
• CID: Usually specifies the caller's phone number.
For example, when Konftel 800 receives the SIP invite message From: "John
Doe" <sip:[email protected]> , John Doe is the CNAM and 1234 is the
CID.
The following table lists the screen information, which Konftel 800 displays, depending on the parameters the server provides:
110
SETTINGS CONFIGURATION AND MANAGEMENT
Screen
Incoming Call
Description
Konftel 800 displays the CNAM and the CID. If the server does not provide the CID, the phone displays the CNAM.
If the server does not provide the CNAM or the CID, the phone displays Unknown .
Active Call Konftel 800 displays the CNAM. If the server does not provide the CNAM, the phone displays the CID.
If the server does not provide the CNAM or the CID, the phone displays Unknown .
Recent Call List Konftel 800 displays the CID. If the server does not provide the CID, the phone displays Unknown .
When the administrator disables the Call Log functionality, the Recent Call List becomes unavailable.
Related information
on page 35
Configuring the Use Static Source Port setting
About this task
Use this procedure to configure the Use Static Source Port setting through the web interface or on the phone.
Procedure
• To configure the Use Static Source Port setting through the web interface, do the following:
Log in as the administrator.
On the web interface, navigate to SIP > Advanced .
Enable Use Static Source Port .
Optional: Disable Use Static Source Port .
• To configure the Use Static Source Port setting on the phone, do the following:
Log in as the administrator.
Tap SIP > Advanced .
Enable Use Static Source Port .
111
SETTINGS CONFIGURATION AND MANAGEMENT
Optional: Disable Use Static Source Port .
When you change the Use Static Source Port value though the web interface or on the phone, the value in the configuration file changes accordingly.
Related information
on page 35
Hostname to IP address mapping
Konftel 800 supports hostname to IP address mapping to resolve configured IP address from hostnames. In case you do not have a DNS server configured, you can manually map a hostname to the IP address using the configuration file.
You can configure host entities for the following services:
• NTP server
• RTCP XR Collector URI
• LDAP server
• SIP Registrar
• SIP Proxy
• STUN server
• TURN server
• Konftel ZTI server
• Provisioning server
• SCEP server
• Syslog server
If you use a Fully Qualified Domain Name (FQDN) in the SIP Registrar field for the Primary, Secondary or Fallback SIP account, the SIP URI contains the configured FQDN instead of the IP address of the SIP Registrar.
If you plan to use a fictional SIP Registrar hostname, you must add it to the
SIP server for its subsequent identification in SIP URI. SIP server checks if the received hostname from SIP URI matches the hostname configured on the server. If the hostnames do not match, the SIP server rejects the configuration with the following error code: code 403, Forbidden .
Messaging the proxy without adding a record route
About this task
In the SIP peer communication, Konftel 800 adds a record route to registration or any other message to the proxy. This appending indicates another device in the SIP path. If you want your conference phone not to send this message
112
SETTINGS CONFIGURATION AND MANAGEMENT and correctly register in the environment of a communication solution, you must configure the SIP settings for the device in a special way.
Before you begin
Ensure that your Konftel 800 has the following settings for its deployment:
Domain: name.com
Registrar: sip.name.com
User Name: [email protected]
Procedure
Log in to the web interface.
On the Navigation pane, click the SIP tab.
Configure the parameters as follows:
Registrar: name.com
Proxy: sip.name.com;hide
Appending the ;hide parameter results in messaging the proxy without a record route added.
Optional: To control the inbound calls, configure Realm as follows:
Realm: name.com
You can also configure the SIP settings on the phone.
SNI support
Konftel 800 supports using the Server Name Indication (SNI) extension for TLS connections to a SIP server.
There are setups when several customers share one physical SIP server. The customers get unique domain names, which resolve to the same IP address.
When the phone attempts to connect to one of these domain names via TLS, it needs to specify the exact FQDN for connection for the SIP server to present the corresponding TLS certificate. Here, the SNI extension serves as the means for
FQDN specification.
When the phone starts a TLS connection with the SIP server, it sends a request with an extension that specifies the required hostname. The SIP server responds with a certificate containing the requested FQDN for Konftel 800 to verify. If the received data matches the requested FQDN, the phone proceeds with the TLS connection. Otherwise, the phone terminates the TLS connection.
113
SETTINGS CONFIGURATION AND MANAGEMENT
Related information
on page 35
Configuring the SNI setting
About this task
Use this procedure to configure the Server Name Indication (SNI) setting on the phone or through the web interface.
You can also use the configuration file to enable or disable the SNI parameter.
Before you begin
Ensure that your phone uses TLS as the transport protocol.
Procedure
• To enable the SNI setting on the phone, do the following:
Log in as the administrator.
On the phone screen, tap Settings > SIP > TLS .
Enable SNI .
Tap the Arrow Left icon three times to return to the home screen.
The phone restarts the application to apply the changes.
• To enable the SNI setting through the web interface, do the following:
Log in to the web interface.
Click SIP .
In the TLS section, enable SNI .
Click Save .
The phone restarts the application to apply the changes.
When you configure the SNI setting through the web interface or phone, the value in the configuration file changes accordingly.
Related information
on page 35
NETWORK SETTINGS
The network settings of Konftel 800 include the following:
• DHCP
• Hostname
• Domain
114
SETTINGS CONFIGURATION AND MANAGEMENT
• Static IP
• DNS1
• DNS2
• VLAN
• VLAN ID
• LLDP
• 802.1x
• SIP DiffServ
• Media DiffServ
When you type in values (text-based input), do not use the following characters: !@#$%^?/\-_ .
Related information
on page 35
LLDP Data Units
When Konftel 800 uses LLDP, it sends the information as LLDP Data Units. Each
LLDP Data Unit is a sequence of Time-Length-Value (TLV) strings.
The phone supports LLDP on primary Ethernet interfaces. The following table lists the TLVs typical for Konftel 800:
TLV String Value Category TLV Name
BASIC
MANDATORY
BASIC
MANDATORY
BASIC
MANDATORY
BASIC
OPTIONAL
BASIC
OPTIONAL
CHASSIS ID
PORT ID 7
TIME TO LIVE 2
SYSTEM NAME 22
SYSTEM
DESCRIPTION
28
String length
7 MAC ADDRESS OF THE
PHONE
IP ADDRESS OF THE PHONE
LLDP_TTL
LLDP_SYSTEM_NAME
VENDOR INFORMATION AND
FIRMWARE VERSION
115
SETTINGS CONFIGURATION AND MANAGEMENT
Category
BASIC
OPTIONAL
BASIC
OPTIONAL
ORGANIZATIO
N SPECIFIC
ORGANIZATIO
N SPECIFIC
ORGANIZATIO
N SPECIFIC
IEEE 802.3
TLV Name
SYSTEM
CAPABILITIES
4
String length
MANAGEMENT
ADDRESS
IEEE - VLAN
NAME
IEEE 802.3 -
LINK
AGGREGATIO
N
MAC/PHY/
CONFIGURATI
ON STATUS
12
11
9
9
TLV String Value
THE PHONE IS WITHIN
THE SYSTEM CAPABILITIES
OCTET. IF THE PHONE IS
REGISTERED, BIT 5 THAT
IS EQUAL TO THE PHONE
IS WITHIN THE ENABLED
CAPABILITIES OCTET.
MGMT ADDR STRING
LENGTH = 5; MGMT
ADDRESS SUBTYPE = 01;
(IPV4) MGMT ADDRESS =
IPADD; INTERFACE NUMBER
SUBTYPE = 2; INTERFACE
NUMBER = 3
OUC = 00-80-C2; IEEE
802.1 SUBTYPE = 3; VLAN
IDENTIFIER = VLAN ID; VLAN
NAME LENGTH = LENGTH
OF VLAN NAME; VLAN NAME
= NAME OF VLAN
OUC = 00-12-0F; IEEE
802.3 SUBTYPE =
LINK AGGREGATION 3;
AGGREGATION STATUS = 1;
AGGREGATED PORT ID = 0
802.3 OUC = 00-12-0F
(HEX); 802.3 SUBTYPE
= 1; AUTONEGOTIATION
SUPPORT/ STATUS =
VALUE SENT DURING AUTO-
NEGOTIATION; OPTIONAL
MAU TYPE = LLDP_MAU
116
SETTINGS CONFIGURATION AND MANAGEMENT
Category TLV Name
TIA LLDP MED LLDP-MED
CAPABILITIES
7
String length
TLV String Value
TIA OUC = 00-12-BB
(HEX); LLDP CAPABILITIES
SUBTYPE = 1; LLDP-MED
CAPABILITIES = 00-3F (MED
CAPS, NETWORK POLICY,
LOCATION ID, EXTENDED
POWER, INVENTORY); LLDP-
MED DEVICE TYPE = 3
(CLASS III)
TIA OUC = 00-12-BB;
LOCATION DATA FORMAT =
CIVIC ADDRESS LCI
ORGANIZATIO
N SPECIFIC
CIVIC
LOCATION
IDENTIFICATIO
N
63
ORGANIZATIO
N SPECIFIC
ELIN
LOCATION
IDENTIFICATIO
N
5
TIA LLDP MED NETWORK
POLICY -
VOICE
8
TIA OUC = 00-12-BB;
LOCATION DATA FORMAT =
ECS ELIN
TIA LLDP MED
ORGANIZATIO
N SPECIFIC
INVENTORY -
SOFTWARE
REVISION
EXTENDED
POWER-VIA-
MDI
5–36
7
TIA OUC = 00-12-BB
(HEX); NETWORK POLICY
SUBTYPE = 2; APPLICATION
TYPE = 1 (VOICE) U =
0 (NETWORK POLICY IS
DEFINED) T = TAGGING X =
0 (RESERVED BIT) VLAN ID =
VLAN_IN_USE
TIA OUC = 00-12-BB (HEX);
SOFTWARE REVISION
SUBTYPE = 7; SOFTWARE
REVISION = VALUE
OUC = 00-12-BB; AVAILABLE
PARAMETERS = POWER
TYPE, POWER SOURCE,
POWER PRIORITY, POWER
VALUE
117
SETTINGS CONFIGURATION AND MANAGEMENT
Category TLV Name String length
0
TLV String Value
BASIC
MANDATORY
END-OF-
LLDPU
NA
Related information
on page 35
DNS mapping
If Konftel 800 operates in an environment with no DNS available or the DNS server has no connectivity, you can configure settings to pass the device FQDNto-IP mapping information. The phone stores and retains these parameters persistently, and a DNS failure does not impact the Konftel 800 operation.
Konftel 800 considers the configured host table part of its active configuration.
When the phone boots up or performs a Device Management polling, it first searches for the DNS server configuration. If host entries change, the phone updates the host table with the new values. When the phone receives new settings for the host entities, it reboots to apply the changes.
To configure the host table, you must use the .xml configuration file. It contains the <hosts_map> parameter, which has the following two elements for each host entity:
• <ip> . This is the IP address of the server.
• <name> . This is the hostname, that you assign to the host entity. After the phone reboots and applies the configuration, you can specify this value in any
FQDN data field in the web interface. For example, in the Registrar field of a
SIP account.
You can add several host entities or leave the parameter empty.
If the parameter stays blank or is not available in the .xml configuration file, the phone deletes all existing FQDN-to-IP mapping settings.
The following is an example of the configured <hosts_map> parameter.
<hosts_map type="xml">
<host>
<ip>192.168.1.101</ip>
<name>sipserver1.com</name>
</host>
118
SETTINGS CONFIGURATION AND MANAGEMENT
<host>
<ip>192.168.1.102</ip>
<name>sipserver2.com</name>
</host>
<host>
<ip>192.168.1.103</ip>
<name>sipserver3.com</name>
</host>
</hosts_map>
Along with configuring the hostname and IP address on your Konftel 800, you must add the same host entry values into the SIP server configuration. During SIP operation, SIP URI uses the specified Registrar parameter value, which contains the hostname from the configured host entity. SIP server checks if it knows the hostname and IP address it receives in SIP URI. When the values do not match the parameters of the server, it does not resolve the hostname to the IP address and responds with an error message.
119
BLUETOOTH AND USB CONNECTION
BLUETOOTH® CONNECTION
Konftel 800 can establish wireless communication over Bluetooth ® with devices equipped with Bluetooth ® connectivity, such as mobile phones, tablets, or computers. With Bluetooth ® , you can use the phone as a speakerphone for call handling, or as an audio receiver for audio streaming.
The following table lists the Bluetooth ® technologies that Konftel 800 supports:
Bluetooth® technology
Bluetooth ® LE
Bluetooth ® Classic
Konftel
800 icon
Functionality
To connect to a mobile device with Konftel
Unite application installed on it. For more
information, see Konftel Unite
on page 162.
This is the default mode.
To connect to Bluetooth ® devices, such as mobile phones, tablets, and personal computers, for call handling or audio streaming.
You cannot use Bluetooth ® LE and Bluetooth ® Classic connection simultaneously.
If you connect Konftel 800 to a Bluetooth ® device, you cannot connect it to a mobile device with the Konftel Unite application until you end the connection to the Bluetooth ® device.
If you connect Konftel 800 to a mobile device using the Konftel Unite application, you cannot connect it to another Bluetooth ® device until you end the connection to Konftel Unite.
In USB only user mode, the phone supports connection to Bluetooth ® devices using Bluetooth ® Classic.
Switching between the Bluetooth® modes
The default mode is Bluetooth ® LE. To switch to Bluetooth ® Classic, you must pair and connect Konftel 800 to a Bluetooth ® device. When you select Bluetooth ®
120
BLUETOOTH AND USB CONNECTION
Classic mode, the phone turns off Bluetooth ® LE. If there is no Bluetooth ® Classic connection, the phone switches back to Bluetooth ® LE after a timeout.
When you end a successful Bluetooth ® Classic connection, Konftel 800 restores
Bluetooth ® LE mode.
Bluetooth® Classic profiles
The following table describes the Bluetooth ® Classic profiles that Konftel 800 supports:
Bluetooth ® profile
Konftel 800 role
Functionality description
Hands-Free
Profile (HFP)
Speakerphone When Konftel 800 is paired with a Bluetooth ® device and connected to it, the phone acts as a speakerphone. You can use the phone to handle Bluetooth ® calls. Konftel 800 synchronizes the volume level with that of the
Bluetooth ® device, and you can control the volume from both devices.
Advanced
Audio
Distribution
Profile (A2DP)
Audio receiver When Konftel 800 is paired with a Bluetooth ® device and connected to it, Konftel 800 acts as an audio receiver. You can use the phone to stream multimedia audio from the
Bluetooth ® device.
The volume level of the streamed audio does not change. Konftel 800 keeps the volume level it had before it started playing audio.
When Konftel 800 is in Idle mode, and you start A2DP streaming from the connected
Bluetooth ® device, the LEDs on the phone remain turned off.
You cannot activate A2DP during SIP or
USB calls.
To use the Bluetooth ® Classic functionality on Konftel 800, your Bluetooth ® device must support HFP or A2DP or both.
121
BLUETOOTH AND USB CONNECTION
Pairing and connecting Bluetooth® devices
About this task
To enable Bluetooth ® communication between Konftel 800 and another Bluetooth ® device, you must pair the two devices and ensure that they are in a connected state. The devices stay in a paired state until you remove the pairing.
You can connect only one device supporting Bluetooth ® at a time.
Procedure
On the Konftel 800 screen, tap Settings > Bluetooth > Pair with device .
The LEDs start flashing blue, and the phone displays the following message:
This phone is now discoverable as “<Phone Name>” .
The time-out value for discoverable mode is 120 seconds.
Tap Cancel to cancel pairing, for example, if you do not want to make the phone discoverable. In this case, you return to the Bluetooth menu.
On your Bluetooth ® device, find Konftel 800 in the list of devices available for
Bluetooth ® connection and tap the phone name.
Konftel 800 establishes the connection with the Bluetooth ® device and displays the Bluetooth ® icon and one of the following messages:
• If Konftel 800 retrieves the device name from your Bluetooth ® device, it displays Connected to <your Bluetooth device name> . For example, Connected to My Smartphone .
• If Konftel 800 does not retrieve the device name from your Bluetooth ® device, it displays Connected to <your device Bluetooth address> . For example, Connected to 00:11:22:33:FF:EE .
Konftel 800 is not visible in the Konftel Unite application while the conference phone and the Bluetooth ® device are in the connected state.
Related information
on page 35
Removing Bluetooth® pairing
About this task
Use this procedure to remove the pairing between Konftel 800 and your other
Bluetooth ® device to delete unwanted pairings.
also deletes the Bluetooth ® pairing information when you reset the phone to factory settings or perform system recovery.
122
BLUETOOTH AND USB CONNECTION
Removing Bluetooth ® pairing as described below does not affect Konftel Unite pairing information.
Before you begin
Ensure that Konftel 800 and the Bluetooth ® device are in the paired state.
Procedure
Tap Settings > Bluetooth > Remove pairing .
The phone displays the following question: Do you want to remove all
Bluetooth pairing information from the phone?
To confirm that you want to delete the Bluetooth ® pairing information, tap Ok .
The phone restarts the application to apply the changes.
Related tasks
Logging in to the web interface of Konftel 800 on page 31
Setting the password for Konftel 800 on page 21
Connection between paired Bluetooth® devices
Connection
After you pair Konftel 800 and your Bluetooth ® device, the two devices establish the connection.
Disconnection
The connection ends if you manually disconnect Konftel 800 from the Bluetooth ® device or if the distance between the devices does not allow to maintain the communication.
When the Bluetooth ® device ends the connection, Konftel 800 displays the following message: Disconnected and then stops displaying the Bluetooth ® icon.
Reconnection
You can reconnect your Bluetooth ® device to Konftel 800 if the two devices are in a paired state. You can reconnect Konftel 800 to the paired Bluetooth ® device from the paired Bluetooth ® device.
Automatic reconnection to a Bluetooth device
You can use Konftel BT30 which is a Bluetooth USB dongle to connect your
Konftel One Cable Connect (OCC) Hub or computer to Konftel 800 . When the
123
BLUETOOTH AND USB CONNECTION conference phone loses power, it needs time to boot up. During this period, it has no connection to the Bluetooth ® device. When Konftel 800 enters Idle mode after reboot, it automatically tries to reconnect to Konftel BT30 being the last paired Bluetooth ® device. If the reconnection fails, Konftel 800 tries to reconnect in 30 seconds. If the device does not respond, the phone stops the reconnection attempts.
Bluetooth® radio
Konftel 800 supports the Bluetooth ® radio feature, which makes the device visible to other Bluetooth ® devices. By default, the Bluetooth ® radio is in the enabled state. The administrator can disable the Bluetooth ® radio. When disabled,
Bluetooth ® LE and Bluetooth ® Classic connection are not available on Konftel 800.
Related concepts
on page 120
Disabling Bluetooth® radio
About this task
Use this procedure to disable Bluetooth ® radio using the .xml configuration file.
The default value is true, which means that the feature is enabled.
Before you begin
Obtain the .xml configuration file for Konftel 800.
Procedure
In the configuration file, go to the <bluetooth> section.
Set the <enable> parameter to false.
<bluetooth>
<enable type = "boo1">false</enable>
</bluetooth>
Save and import the configuration file.
The phone restarts the application.
Related concepts
on page 120
Related tasks
Importing the configuration file on page 130
124
BLUETOOTH AND USB CONNECTION
USB ONLY USER MODE
Konftel 800 supports USB only user mode. With this feature, the conference phone can operate with no SIP account and SIP register configured. In USB only user mode Konftel 800 acts as a speakerphone that the user can use to conduct virtual meetings and listen to audio files.
USB and Bluetooth® connection
In USB only user mode, the phone operates as a USB device connected to a USB host.
In this mode, the phone supports connection to Bluetooth
Bluetooth ® Classic.
® devices using
The administrator can use the configuration file to disable Bluetooth ® .
The Bluetooth button becomes inactive, and if the user taps it, the phone shows the following message: Bluetooth is disabled by the administrator .
When idle, Konftel 800 does not display Account Name on the home screen in
USB only user mode. The user can see the phone name and the connection option as follows:
• When the user connects the phone using USB, Konftel 800 indicates USB audio on the home screen.
• When the user uses Bluetooth ® to connect the phone, Konftel 800 indicates
Bluetooth® audio on the home screen.
• When the user uses both Bluetooth ® and USB for connection, Konftel 800 indicates Bluetooth® audio on the home screen.
Related concepts
Provision of the NTP server address on page 102
Firmware upgrade and downgrade
on page 129
Time presentation in USB only user mode
When the phone has NTP server settings enabled but it cannot connect to the
NTP server in USB only user mode, Konftel 800 does not display time on the home screen and in the settings menu.
When the phone has NTP server settings disabled, the user can set the time manually. Then the options of the time presentation are the following:
• On the home screen when there is no active Bluetooth ® or USB connection.
• On the status bar when the user connects to Konftel 800 using Bluetooth ® or
USB.
125
BLUETOOTH AND USB CONNECTION
USB only user mode icons
The following table shows the icons on the home screen of Konftel 800 in USB only user mode:
Icon Name
USB
Connected
Bluetooth connection
Settings
Description
To indicate an active USB connection.
The phone displays the USB Connected icon and shows USB audio on the idle home screen.
To configure Bluetooth ® Classic settings and to indicate an active Bluetooth ® Classic connection.
The phone shows the Bluetooth connection icon and
Bluetooth® audio indication on the idle home screen.
If the administrator uses the .xml configuration file to disable Bluetooth ® , then the Bluetooth connection icon is inactive.
To check and configure the settings from the phone.
View the phone status and reach the menu.
The following settings are available in USB only user mode:
• Status
• Phone
• Konftel Unite
• Bluetooth
• Admin Login
When Konftel 800 shows the USB Connected or the Bluetooth connection icon on the idle home screen, the phone displays time on the status bar.
Volume control and synchronization
Volume level indication
Konftel 800 provides the following volume levels: Level 0 to Level 12. Here, Level
0 is volume off, and Level 12 is the loudest volume level. You can turn the volume
126
BLUETOOTH AND USB CONNECTION down to Level 0 only when the phone is connected to a USB host. Here, the phone displays the Volume Off icon and the audio on the phone is muted.
When you start a call, the phone automatically sets the volume to Level 10. During an active call, to manually increase the volume up to Level 12, tap the Volume Up or Volume Down icons. The phone shows the volume bar on the screen to reflect the volume change.
If you set the volume lower than Level 10, the next call starts with this new level. If you increase the volume to Level 11 or Level 12, the phone automatically decreases the volume to Level 10 for the next call.
The phone does not show the volume bar when it automatically sets the volume to Level 10 for a call.
Volume synchronization with USB host
When you connect Konftel 800 to the USB host and select it as an audio device, the phone synchronizes its volume level with the connected USB host.
Konftel 800 also synchronizes the volume level with the USB host when it switches between Playback and Call mode. If you receive a call during audio playback, the phone automatically changes the volume level for the call. The phone synchronizes the volume with the USB host and applies the Call mode volume. When the call ends, the phone changes the volume back to the Playback mode volume.
Konftel 800 supports volume synchronization if the USB host has Windows 10 as its operating system.
You can adjust the volume level either on the phone or on the connected USB host. When you set the maximum or the minimum volume level, the USB host responds as follows:
• If you decrease the phone volume to the lowest level, the volume on the USB host turns off.
• If you increase the phone volume to the highest level, the volume on the USB host changes to 100. This is the highest level for the USB host permitted.
Volume synchronization in Daisy chain mode
If you adjust the volume on the USB host for Konftel 800 acting as the main phone in a Daisy chain, the volume on the expansion phone changes accordingly. The expansion phone reflects the change showing the volume bar on the screen.
If you change the volume level on Konftel 800 acting as an expansion phone in a Daisy chain, the volume on the main phone and the USB host changes accordingly.
127
BLUETOOTH AND USB CONNECTION
If you turn the volume down to the lowest level, the Primary and Secondary phones display the Volume Off icon.
Related concepts
Expansion of the phone coverage
on page 168
Related information
on page 14
USB ports configuration
You can enable or disable the USB ports of your Konftel 800. When the USB ports on the phone are enabled, you can use the USB audio port for audio transmission and the USB upgrade port for a device upgrade.
To configure this parameter, you can insert the required value in the <usb> -
<enable> section of the configuration file as follows:
• True to enable the USB ports. This is the default setting.
• False to disable the USB ports.
The power supply does not switch off when you disable the USB ports.
128
FIRMWARE UPGRADE AND DOWNGRADE
FIRMWARE UPGRADE AND DOWNGRADE
Starting from Release 1.0.1, you can both upgrade and downgrade the firmware of Konftel 800 using the web administration interface or a centralized file server.
The phone application installs the firmware whenever the firmware version in the downloaded firmware file differs from the version of the currently running firmware.
You must select the file to upgrade the firmware on your device. The filename ends with .kt
, for example, firmware-1.0.6.1.0-release.kt
. With the firmware selected, Konftel 800 immediately starts the installation process. It performs the firmware upgrade file validation to ensure absence of corrupted data as well as that the firmware version is higher than the current one. If the firmware version is higher than the running version (it is an upgrade), the phone imports the configuration in full. Starting from Release 1.0.7, if the firmware version is older than the running version (it is a downgrade), Konftel 800 retains some of the configured parameters including the administrator password.
A downgrade to the firmware version lower than 1.0.1.0.2 causes a factory reset and sets all user settings, configurations, and data to factory default.
Exporting the configuration file
About this task
Use this procedure to export the configuration file from your Konftel 800.
When you exporting the running configuration, the resulting .xml file contains the following:
• All configured non-default values.
• Lines with the commented out passwords.
Before you begin
Decide where the exported configuration file will be saved. By default, it is saved in the folder for downloaded files on your PC.
Procedure
On the web interface, click Provisioning .
In the Configuration section, click Export Configuration button.
The web browser shows the configuration file.
Save the page in an .xml format in the dedicated folder.
129
FIRMWARE UPGRADE AND DOWNGRADE
Optional: Edit the .xml file in a suitable application.
Editing the configuration file
About this task
Use this procedure to edit the exported configuration file.
Before you begin
To edit the configuration file, install a source-code editor that supports the import and export of .xml files. To verify the syntax and content of a .xml file, choose an editor that also supports .xsd files.
Procedure
Open the configuration file using a suitable editor.
Locate the parameter to change and type the required value.
For example, to specify the name of a SIP account, in the SIP section, locate the <name type="string"></name> line and type the account name:
<name type="string">Westview</name> .
Optional: To add a comment, enter your text below the first line.
<?xml version="1.0" encoding="UTF-8"?>
<!--Acme Widgets Konftel 800 config file for Westview Conference Room
Created Nov 2021-->
<KT800 version="6">
Click Save to save the modified file with the required file name.
To deploy the configuration file through a centralized management server, change the default file name to kt800.xml
or kt800-<MAC>.xml
.
Importing the configuration file
About this task
Use this procedure to import the previously saved configuration file to your Konftel
800.
Procedure
On the web interface, click Provisioning .
Go to the Configuration section.
In Import Configuration , click the Choose file button.
Locate the configuration file in the folder where it is stored.
130
FIRMWARE UPGRADE AND DOWNGRADE
Select the file in an .xml format and open it.
The name of the chosen file is near the Choose file button.
Click Save .
The phone reboots or restarts to import the configuration if the configuration file application requires this reboot or restart.
Uploading a firmware file
About this task
Upgrade or downgrade your Konftel 800 using a firmware file stored on the local hard disk. When the phone starts to install the firmware file you uploaded, it identifies the firmware version and follows the upgrade or downgrade scenario based on the firmware version.
Before you begin
Download the appropriate firmware file and save it in a specified location on your personal computer.
Procedure
On the web interface, click Provisioning .
In the Firmware section, click the Choose file button.
Locate and select the downloaded firmware file.
The name of the chosen file is near the Choose file button.
Click Save .
The system displays the upgrade in the browser window and on the screen of
Konftel 800.
Note that the phone must be in the idle state. If the phone is not in the idle state, you see the following message on the web interface: Phone is currently in “Busy” state, please retry later .
Next steps
If DHCP is used in the network, the IP address might change. If the web browser loses contact with Konftel 800, check the IP address on the phone.
Related tasks
Viewing the IP address on page 29
131
FIRMWARE UPGRADE AND DOWNGRADE
Validation and migration of configuration
Starting from Release 1.0.1, Konftel 800 validates and migrates the phone configuration to ensure consistency of the configuration file with the firmware version. With this feature, the phone provides reliable automatic migration of the configuration file to match the newer firmware version if necessary.
Configuration validation
Konftel 800 validates compatibility of the configuration with the firmware against an xml schema file based on the configuration file version.
Starting from Release 1.0.1, a configuration file has a version number attribute.
The phone application compares the configuration file version to the firmware version running on the phone to determine the migration steps required to make the configuration file consistent with the firmware.
All the configuration files that Konftel 800 generated before Release 1.0.1 acquire the <KT800 version="0"> attribute in the xml root element. The configuration files generated with Release 1.0.1 acquire the <KT800 version="1"> attribute.
With each new release, the configuration service increases the configuration file version number by one leaving the incompatible configuration changes attributed to previous file versions.
The phone does not support importing a configuration file from a newer version of firmware. The .xml configuration file version must be the same or lower than the firmware version.
Firmware release XML file index No.
1.0.0 and Maintenance releases (MRs) 0
1.0.1 and MRs 1
1.0.2
1.0.3
2
3
1.0.4
1.0.5
1.0.6
4
5
6
Table continued…
132
FIRMWARE UPGRADE AND DOWNGRADE
1.0.7
1.0.8
7
8
To avoid failure of the configuration file import or automatic provisioning, ensure that you do not change the version number in a configuration file manually.
Configuration migration
The migration feature ensures seamless import of the configuration data in the following cases:
• During the phone boot
• During the configuration file import using the web interface
• During automatic provisioning of the phone using Device Management
Configuration import can fail if the configuration file does not match the .xml schema file. In this case, you see the following message on the phone web interface: Failed to migrate configuration file .
Firmware upgrade and downgrade using a USB mass storage device
Konftel 800 uses the USB mass storage device to support firmware upgrade and downgrade without the web interface. For that, the USB parameter must be enabled in the configuration file. If you have the USB parameter disabled, USB is inaccessible and unavailable for upgrade or downgrade.
When you connect the USB mass storage device to Konftel 800, the phone starts auto-mounting and finds the firmware file stored on the USB mass storage device.
The auto-mounting and parsing process takes up to 30 seconds depending on your flash drive.
Before performing upgrade or downgrade, the phone does not compare the firmware version on the USB mass storage device and the currently used firmware version.
If the firmware file is invalid, the phone shows the following message: Invalid upgrade file .
The phone starts the upgrade or downgrade procedure immediately if it is in
Idle Mode. Otherwise, Konftel 800 ends an active operation and then starts the upgrade process.
It is impossible to make calls or enter any menu on the phone during the upgrade.
133
FIRMWARE UPGRADE AND DOWNGRADE
Konftel 800 blocks the upgrade procedure using the USB mass storage device, if the phone already starts the upgrading procedure using the Device
Management provisioning server.
The phone supports several USB flash drive file systems including FAT32 and
NTFS.
Konftel 800 supports only one partition USB flash drives for the upgrade.
If you set Admin Password in Settings > Phone , enter a valid administrator password before the phone starts the upgrade procedure.
You can upgrade or downgrade the out-of-the-box Konftel 800 during the initial boot if you connect the USB mass storage device to the phone and follow the upgrade procedure.
Upgrading firmware using a USB mass storage device without the administrator password
About this task
Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have no administrator password set.
Before you begin
• Download the appropriate firmware file and save it in a specified location on your personal computer.
• Upload the firmware file from your personal computer to the USB mass storage device root folder. The file name must be upgrade.kt
.
• Make sure Konftel 800 is in Idle Mode.
Procedure
Connect the USB mass storage device to Konftel 800 USB port.
When checking for the appropriate firmware upgrade file, the phone shows the following message: Checking upgrade file . Then the phone displays the following message: Firmware version x.x.x.x.x found on USB.
Upgrade now?
, where x.x.x.x.x
is the version of the valid firmware file.
Tap Yes to proceed with the upgrade.
The phone starts the upgrade procedure, showing the following message:
Upgrade in progress, please wait . When the upgrade procedure ends, the phone reboots to apply the changes.
Optional: Tap No to discontinue the upgrade.
134
FIRMWARE UPGRADE AND DOWNGRADE
If you tap No accidentally, to restart the procedure, reconnect a USB mass storage device to Konftel 800 USB port.
Related tasks
Uploading a firmware file on page 131
Upgrading the firmware using a USB mass storage device with the administrator password
About this task
Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have an administrator password set.
Before you begin
• Download the appropriate firmware file and save it in a specified location on your personal computer.
• Upload the firmware file from your personal computer to the USB mass storage device root folder. The file name must be upgrade.kt
.
• Make sure Konftel 800 is in Idle Mode.
Procedure
Connect a USB mass storage device to Konftel 800 USB port.
While checking for the appropriate firmware upgrade file, the phone shows the following message: Checking upgrade file . Then the phone displays the following message: Firmware version x.x.x.x.x found on USB.
Upgrade now?
, where x.x.x.x.x
is the version of the valid firmware file.
Tap Yes to proceed with the upgrade.
The phone displays the Admin Password popup.
In the Admin Password field, type the administrator password.
Optional: If you enter an incorrect administrator password, the phone displays the following message: Invalid password . Do the following:
Tap Ok .
Type the correct administrator password.
Tap Upgrade .
The phone starts the upgrade procedure, showing the following message:
Upgrade in progress, please wait . When the upgrade procedure ends, the phone reboots to apply the changes.
Optional: Tap Cancel to discontinue.
135
FIRMWARE UPGRADE AND DOWNGRADE
If you tap Cancel accidentally, to restart the procedure, reconnect a USB mass storage device to Konftel 800 USB port.
Related tasks
Uploading a firmware file on page 131
Configuration retention after downgrade
When you downgrade the firmware of your Konftel 800, the phone retains some of the configured parameters. The phone keeps configuration for the following:
• DHCP. Konftel 800 keeps the previously configured DHCP option value if you downgrade the firmware.
• Static IP Address
• Static IP Gateway
• Static IP Network mask
• DNS
• VLAN
• Administrator password
• Provisioning address
• Provisioning certificates
• NTP
The phone does not save the configured parameters if you downgrade the firmware to a version lower than 1.0.1.0.2. The downgrade causes a factory reset and sets all user settings, configurations, and data to factory default.
Device Management
Konftel 800 provides the Device Management feature to facilitate upgrade and configuration of multiple conference phones. When enabled and configured correctly, Device Management obtains firmware and configuration automatically by polling the centralized server on a defined basis. This server is called the provisioning server. The service provider is in charge of uploading the necessary files to the provisioning server.
The device controls the configuration and firmware download with a frequency of 1 hour.
Configure the Device Management feature in line with the description in
on page 35. By default, Device Management is enabled.
Files on the provisioning server
The following files must be available on the provisioning server:
136
FIRMWARE UPGRADE AND DOWNGRADE
• Firmware file (filename ends in .kt
)
• Firmware metadata file (as provided in the Konftel Firmware bundle)
• Global configuration file
• Device-specific configuration file (optional)
• Global certificate configuration file
• Device-specific certificate configuration file (optional)
Configuration priorities
The following table describes the priorities for files downloaded to the phone during the Device Management configuration upgrade:
File type
Global configuration file
Description
If available, the device obtains the global configuration file kt800.xml
and parses it. During the Device
Management update all parameters from the file are loaded into the Konftel 800 running configuration.
Device-specific configuration file
Global certificate configuration file
If the device-specific configuration file kt800-
<MAC>.xml
is available on the provisioning server, the phone downloads and parses it. The parameters from this file overwrite the parameters set by the global configuration file.
If available, the device obtains the global certificate configuration file and uses it for its operations.
The certificates the phone downloads from the provisioning server overwrite any certificates you downloaded manually using the phone web interface.
Device-specific certificate configuration file
The device-specific certificate configuration file has priority over the global certificate configuration file. All its parameters overwrite the parameters loaded by the global certificate configuration file.
After Konftel 800 obtains the configuration from the provisioning server, parses it, adds and saves the parameters in a local configuration file, all changes you make using the web interface or the phone UI replace the parameters stored as the current running configuration. To clear a manually set parameter, the administrator must first provide a configuration file with the parameter having no value assigned to it, and then push a configuration that contains the new parameter.
137
FIRMWARE UPGRADE AND DOWNGRADE
Konftel Zero Touch Installation
Zero Touch Installation (ZTI) is an add-in for automatic provisioning that Konftel
800 supports. It provides for the remote configuration of the phone by using a data file with settings. The phone downloads the file from a Device Management server.
The user can apply ZTI when centrally upgrading the phone software.
Related concepts
Konftel 800 .xml configuration files on page 24
Registration with the ZTI device management service
About this task
Use this procedure to register the phone with the device management service and receive the provisioning settings.
Before you begin
Connect the phone to the data network and start it.
Procedure
In the web browser, enter https://www.konftel.com/zti-access .
Register the phone with Konftel ZTI by entering its MAC address and serial number.
The device management service provides the phone with the address of the provisioning server where the user can download the configuration file in .xml format.
Confirm your choice.
The phone restarts and goes to the appropriate server to download the configuration file.
Upgrading multiple devices
About this task
You can upgrade firmware on multiple Konftel 800 devices using Device
Management instead of upgrading each phone individually. For this purpose,
Device Management must be enabled for the devices, the provisioning server must be specified for the devices, and the firmware binary file and the firmware metadata file must be available on the provisioning server.
Note that you must have separate kt800-<MAC>.xml
configuration files for each
Konftel 800. Here, <MAC> is the MAC address of a specific phone.
138
FIRMWARE UPGRADE AND DOWNGRADE
Before you begin
Ensure that the firmware filename matches the <filename> value in the metadata file, and that the firmware version in both files is the same.
Procedure
Check if Device Management is enabled on the phones you want to upgrade and enable if necessary.
You can do this on the phone by logging in as an administrator and navigating to Settings > Device Management or through the web interface on the
Provisioning tab in the Device Management section.
Check if the provisioning server is configured for the phones you want to upgrade and configure if necessary.
You can do this on the phone by logging in as an administrator and navigating to Settings > Device Management or through the web interface on the
Provisioning tab in the Device Management section.
Upload the binary file and the firmware metadata file to the provisioning server.
When the phones contact the provisioning server, the upgrade process starts.
Next steps
You can check the firmware version from the phone by navigating to Settings >
Status or through the web interface in the Status tab.
Configuring multiple devices
About this task
You can configure multiple Konftel 800 devices using the configuration file as a management tool instead of configuring the settings on each phone individually.
For this purpose, you need to export the configuration file, edit the settings as necessary, and then place the configuration file to the provisioning server.
Before you begin
Ensure that you or the service provider have configured the provisioning server for your phones.
Procedure
Log in to the web interface.
Export the configuration file by clicking Export Configuration on the
Provisioning tab.
The phone generates the global configuration kt800.xml
file.
139
FIRMWARE UPGRADE AND DOWNGRADE
Optional: Edit the configuration file using a suitable application.
The settings file might not contain some settings if they represent a default value. To include such settings in the configuration file, you need to change them to a non-default value using the phone interface or the web interface.
Upload the file to the provisioning server.
During the next Device Management configuration upgrade, the system applies the configuration file to the phones. After the phones reboot, they all have the same settings specified in the configuration file.
Related concepts
140
SECURITY AND PROTECTION
SECURITY METHODS AND PROTOCOLS
Konftel 800 supports a number of security methods and protocols to protect the integrity of its configuration and operation.
802.1X Ethernet Authentication
With 802.1X Ethernet authentication enabled, Konftel 800 must authenticate as a recognized device before getting an authorization to communicate on the network.
You can secure the 802.1X Ethernet authentication process by configuring one of the following options:
• EAP TLS . The device uses the applicable TLS version to communicate with the
802/1X authentication server. You can manually install TLS certificates can on
Konftel 800 by using the web administration interface or the certificates .xml file.
• EAP MD5 . The device uses the MD5 method to communicate with the 802/1X authentication server. You must enable Legacy Encryption to use EAP MD5 .
It is possible to configure both TLS and MD5, and then the authentication server
(RADIUS server) selects the protocol to use.
FIPS
Enabling the Federal Information Processing Standards (FIPS) results in the use of an enhanced suite of encryption algorithms as well as supporting timers and processes to meet the FIPS 140-2 requirements. With FIPS enabled, you can not have the Legacy Encryption methods enabled at the same time.
TLS
The device uses Transport Layer Security (TLS) protocols for SIP authentication,
HTTPS connectivity for the centralized file server, and LDAP authentication and communication. The following TLS protocols are available:
• SIP-TLS to secure the communications with the SIP Registrar.
• LDAP-TLS to secure the communications with the LDAP server. The device uses this protocol by default.
You can manually install TLS certificates can on Konftel 800 by using the web administration interface or the certificates .xml file.
141
SECURITY AND PROTECTION
CERTIFICATES
There are several factory-installed security certificates on the Konftel 800. You can install additional certificates through the centralized configuration server, , SCEP or manually through the web interface.
Pre-installed certificates
Konftel 800 has a factory-installed device specific private key. You cannot view or delete this private certificate.
Installable certificates
Certificate configuration files stored on the provisioning server allow you to automatically download certificate files to Konftel 800. These files are required for the server validation by the phone and TLS authentication by the server.
The service provider can upload a global certificate configuration file and a devicespecific certificate configuration file.
The default name for the global configuration file is kt800_certcfg.xml
. The default name for the global configuration file is kt800_certcfg-<MAC>.xml
, where <MAC> is the MAC address of the specific phone.
Instead of the .xml file format, the service provider can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml format. If the phone fails to find the .xml file on the provisioning server, it searches for the configuration file in other formats specified above.
The typical certificate configuration file consists of four sections:
• 802.1x: specifies the 802.1x certification arrangements of the phone.
• SIP: contains the Session Initiation Protocol (SIP) certification arrangements of the phone.
• Provisioning: runs through the provisioning server certification arrangements of the phone.
• LDAP: specifies the LDAP server certificate arrangements of the phone.
There is no requirement to populate all four sections in the .xml file. Insert the data only to the sections used.
Each section includes the following certificate files:
• CA certificate
• Device certificate
• Device private key.
Each section contains the path details for the CA certificate, Device certificate, and
Device private key.
142
SECURITY AND PROTECTION
The path to the certificate can be a relative path or a complete URI. For example, a relative path can look like <ca_uri>ca.crt</ca_uri> or
<ca_uri>сerts/ca.crt</ca_uri> . In the first case, the phone looks for the ca.crt
file in the same catalog as the configuration file. In the second case, the phone looks for the ca.crt
file in the certs catalog relative to the configuration file.
The file can have the path to the certificate in the form of a complete URI, like
<ca_uri>https://hostname.io/path/ca.crt</ca_uri> . In this case, the phone uses a specific URI to download the certification file.
The section also specifies a SHA256 or an MD5 checksum for each element in it.
This checksum (also called SHA256 hash algorithm or MD5 hash algorithm) is a type of digests of the specified certificates.
Konftel 800 uses MD5 checksum only when Allow Legacy Encryption is enabled. In this case, both SHA256 and MD5 hash algorithms are supported.
When Allow Legacy Encryption is disabled, Konftel 800 supports only
SHA256 hash algorithm. Then the phone does not use MD5 as the checksum for certificates if it downloads and stores them during provisioning.
When you have the Device Management enabled or after the restart, the phone starts downloading the certificate if the hash algorithm value is different from the one of the certificate file that Konftel 800 stores. That means that the phone downloads one certificate file only once and subsequently checks that the certificate file is still the same.
Related concepts
on page 154
Certificate configuration file structure
The following table shows the format of the certificate file:
String
<certificates>
<ether_8021x>
<ca_uri>
Description
To specify the certificates that the phone applies.
To specify the 802.1x certification arrangements of the phone.
To specify the 802.1x path to check the CA certificate.
Table continued…
143
SECURITY AND PROTECTION
String
<ca_hash algo="SHA256">
<cert_uri>
<cert_uri format>
<cert_hash algo="SHA256">
<privkey_uri>
<privkey_hash algo="SHA256">
Description
To specify the SHA256 hash algorithm that the phone uses to verify the 802.1x CA certificate.
To specify the 802.1x path to get the device certificate.
To specify the file format. You can add a file in .p12 or .PEM format.
To specify the SHA256 hash algorithm that the phone uses to verify the 802.1x device certificate.
To specify the 802.1x path to get the private key.
To specify the SHA256 hash algorithm that the phone uses to verify the 802.1x private key.
<cert_pkcs12_passwo rd>
To specify password for the PKCS12 file.
<sip> To specify the SIP certification arrangements of the phone.
<ca_uri>
<ca_hash algo="SHA256">
<cert_uri>
To specify the path to get the CA certificate for the SIP connection.
To specify the SHA256 hash algorithm that the phone uses to verify the CA certificate for the SIP connection.
To specify the path to get the device certificate for the
SIP connection.
<cert_uri format>
<cert_hash algo="SHA256">
To specify the file format. You can add a file in .p12 or .PEM format.
To specify the SHA256 hash algorithm that the phone uses to verify the device certificate for the SIP connection.
Table continued…
144
SECURITY AND PROTECTION
String
<privkey_uri>
Description
To specify the path to get the private key for the SIP connection.
<privkey_hash algo="SHA256">
To specify the SHA256 hash algorithm that the phone uses to verify the private key for the SIP connection.
<cert_pkcs12_passwo rd>
To specify password for the PKCS12 file.
<provisioning>
<ca_uri>
<ca_hash algo="SHA256">
<cert_uri>
<cert_uri format>
<cert_hash algo="SHA256">
<privkey_uri>
<privkey_hash algo="SHA256">
To specify the provisioning server certification arrangements of the phone.
To specify the path to get the CA certificate for connection to the provisioning server.
To specify the SHA256 hash algorithm that the phone uses to verify the CA certificate for connection to the provisioning server.
To specify the path to get the device certificate for connection to the provisioning server.
To specify the file format. You can add a file in .p12 or .PEM format.
To specify the SHA256 hash algorithm that the phone uses to verify the device certificate for connection to the provisioning server.
To specify the path to get the private key for connection to the provisioning server.
To specify the SHA256 hash algorithm that the phone uses to verify the private key for connection to the provisioning server.
<cert_pkcs12_passwo rd>
To specify password for the PKCS12 file.
Table continued…
145
SECURITY AND PROTECTION
String
<ldap>
<ca_uri>
<ca_hash algo="SHA256">
<cert_uri>
<cert_uri format>
Description
To specify the LDAP server certificate arrangements of the phone.
To specify the path to get the CA certificate for connection to the LDAP server.
To specify the SHA256 hash algorithm that the phone uses to verify the CA certificate for connection to the
LDAP server.
To specify the path to get the device certificate for connection to the LDAP server.
To specify the file format. You can add a file in .p12 or .PEM format.
<cert_hash algo="SHA256">
<privkey_uri>
To specify the SHA256 hash algorithm that the phone uses to verify the device certificate for connection to the
LDAP server.
To specify the path to get the private key for connection to the LDAP server.
<privkey_hash algo="SHA256">
To specify the SHA256 hash algorithm that the phone uses to verify the private key for connection to the
LDAP server.
<cert_pkcs12_passwo rd>
To specify password for the PKCS12 file.
The following is an example of the certificate configuration file for Konftel 800.
Note that it contains only 2 out of 4 sections.
<certificates>
<ether_8021x>
<ca_uri>8021x_ca.crt</ca_uri>
<ca_hash algo="SHA256">c49d8fd0cbb6bfc26ef752296d6d17f7</ ca_hash>
<cert_uri>8021x_dev.crt</cert_uri>
146
SECURITY AND PROTECTION
<cert_hash algo="SHA256">ca059972d02b2853a92704a7a7640f3f</ cert_hash>
<privkey_uri>8021x_priv.key</privkey_uri>
<privkey_hash algo="SHA256">f4728d6356204c6fcce91989ef733553</ privkey_hash>
</ether_8021x>
<provisioning>
<ca_uri>prov_ca.crt</ca_uri>
<ca_hash algo="SHA256">e5116932d3685ea18ead10a55b825145</ ca_hash>
</provisioning>
</certificates>
With Allow Legacy Encryption enabled, the certificate configuration file can contain MD5 and SHA256. If you disable Allow Legacy Encryption, then only the SHA256 hash algorithm is supported.
Related concepts
on page 154
Certificates application
Use certificates to authenticate Konftel 800 using TLS. You can apply certificates manually when configuring the advanced settings of your phone, or the phone can automatically download the certificates from the provisioning server if you enabled
Device Management.
The application of a certificate involves the following:
• Download of the root certificate from the Certificate Server
• Creation of the server certificate from the Certificate Server
• Generation of the private key
• Conversion of the certificates and the private key to .PEM format
• Import of the .PEM files to the phone
Related concepts
Downloading the root certificate
About this task
The administrator must obtain a root certificate from a Certificate Authority (CA).
This CA certificate has the key size of 2048, is in PKCS10 format and is generated using SHA-1 hash algorithm.
147
SECURITY AND PROTECTION
Use this procedure to download the Microsoft generated root certificate that the phone will apply for authentication by using TLS/SIPS and EAP-TLS.
Before you begin
Connect to Microsoft Server Certification Authority.
Procedure
On the Microsoft Server Certification Authority page, click Download a CA certificate, certificate chain, or CRL .
Click Download CA certificate .
Installing the certificate
About this task
Use this procedure to install the certificate that the phone will apply for authentication using TLS/SIPS and EAP-TLS. You can do it from your regular web browser. The following is the procedure for Google Chrome. For information about other web browser applications, see the instructions provided by the software manufacturers.
Before you begin
Open your web browser.
Procedure
Click Settings > Advanced > Privacy and security > Manage certificates .
In the Certificates window, click Import .
In the Certificate Export Wizard window, click Next to proceed.
Specify the file you want to import and click Next .
Choose the key store for the certificate and click Next
Click Finish .
Exporting the private key
About this task
Use this procedure to export the private key that the phone will apply for authentication using TLS/SIPS and EAP-TLS. You can use your regular web browser. The following is the procedure for Google Chrome. For information about other web browser applications, see the instructions provided by the software manufacturers.
148
SECURITY AND PROTECTION
Before you begin
Open your web browser.
Procedure
Click Settings > Advanced > Privacy and security > Manage certificates .
In the Certificates window, select the certificate to export and click Export .
In the Certificate Export Wizard window, click Next to proceed.
Click Yes to export the private key.
Select the format in which you want to export the private key file and click Next .
Specify the file name, choose the location to export the certificate, and click
Next .
Click Finish .
Converting the certificates to .PEM format
About this task
Use this procedure to convert the certificates for the phone to .PEM format.
Before you begin
Ensure that you have OpenSSL installed on your computer. If you don't have it, you can download this toolkit from the OpenSSL Project web page and install on
Windows OS or MAC OS.
Procedure
Run OpenSSL.
Use the following Openssl commands to convert the files:
From .DER to .PEM: openssl x509 -inform der -in certificate.cer -out certificate.pem
From .PFX to .PEM: openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes
On the web interface, browse to the .PEM files to use TLS mode of authentication.
Certificates management
In the web interface of your Konftel 800, you can view the information about the certificates available on the phone. The web interface displays the fields of
149
SECURITY AND PROTECTION the Root Certificate (CA) and Device Certificate for TLS connections, web selfgenerated certificate and SCEP.
The following certificate fields are available for display:
• Serial Number
• Subject Name
• Issuer Name
• Validity Period. This includes notBefore and notAfter dates.
• Thumbprint. This is the hash of the certificate.
• Basic Constraints
• Subject Alternative Name
• Key Usage Extensions
• Extended Key Usage
You cannot view the information about the Device Private Key. When you press View , the web interface shows the following message: Device
Private Key Content Hidden .
Support of the PKCS12 file
You can import the Identity certificate and the Private key for any TLS connection in a single PKCS12 file format. The encrypted PKCS12 file contains both the private key and the corresponding certificate.
In the certificate .xml configuration file, provide a valid PKCS12 file, password, and hash for the required TLS connection. The configured parameters are the following:
• <cert_uri format>
• <cert_hash algo>
• <cert_pkcs12_password>
The following is the example of the corresponding section in the certificate .xml configuration file:
<certificates>
…
<sip>
<ca_uri></ca_uri>
<ca_hash algo="md5"></ca_hash>
<cert_uri format="pkcs12/pem"></cert_uri>
<cert_hash algo="md5"></cert_hash>
<privkey_uri></privkey_uri>
150
SECURITY AND PROTECTION
<privkey_hash algo="md5"></privkey_hash>
<cert_pkcs12_password></cert_pkcs12_password >
</sip>
…
</certificates>
Ensure that the firmware version of your Konftel 800 supports the import of the
PKCS12 file. If the firmware version is lower than 1.0.8, the phone does not install the certificate configured with the PKCS12 file.
Configuration of the file format
To configure imported file format, locate the <cert_uri format> parameter in the certificate .xml configuration file. The format can be .p12 (for the PKCS12 file) or .PEM, but you can specify only one format for this parameter in the certificate .xml configuration file.
The following are examples of the configured <cert_uri format> parameter for different file formats:
• To install the certificate in the .p12 format, specify “pkcs12” as in the following example:
<certificates>
<sip>
<cert_uri format="pkcs12">file.p12</cert_uri>
</sip>
</certificates>
• To install the certificate in the .PEM format, specify “pem” as in the following example:
<certificates>
<sip>
<cert_uri format="pem">file.pem</cert_uri>
</sip>
</certificates>
You can also leave this parameter empty to install the certificate in the .PEM format.
Configuration of the PKCS12 file and the private key
In the certificate .xml configuration file, you can add the PKCS12 file and the private key. After the phone reboots, it imports the PKCS12 file and ignores the private key.
151
SECURITY AND PROTECTION
The following is an example of the certificate .xml file for the SIP connection configured with the PKCS12 file format and the private key:
<certificates>
<sip>
<cert_uri format = "pkcs12">file.p12</cert_uri>
<cert_hash algo="SHA256">11b121edc782f81aa9852bd8455a8824b7f2471419761eadae221
7a4e9b58408</cert_hash>
<privkey_uri>priv.key</privkey_uri>
<privkey_hash algo="SHA256">11b121edc782f81aa9852bd8455a8824b7f2471419761eadae221
7a4e9b58408</privkey_hash>
<cert_pkcs12_password>5678</cert_pkcs12_password>
</sip>
</certificates>
STANDARD ENCRYPTION ALGORITHMS
Konftel 800 uses encryption algorithms that comply with the current industry standards. Currently, the phone supports the data integrity algorithms with no publicly known vulnerabilities and are the US National Institute of Standards and
Technology approved.
Standard encryption algorithms for the external connections to the system (for example, TLS) include the following:
• Symmetric Encryption:
• AES 256 (required)
• AES 192 and AES 128 (optional)
• Asymmetric Encryption:
• RSA: 2048 (required) and 4096 (optional)
• DH: 2048 (required) and 4096 (optional)
• ECC: secp384r1 and secp256r1 (required)
• Hash Algorithms:
• SHA2 (required)
• SHA3 (optional)
• Hashed Message Authentication Code:
• HMAC-SHA2 (required)
• HMAC-SHA1 (used for integrity and routing)
152
SECURITY AND PROTECTION
Konftel 800 provides support to specific FIPS-related encryption algorithms, which makes it ready for operation in FIPS mode.
When you need legacy or non-standard encryption algorithms for the external connections, you can use Legacy encryption mode. In this case the phone works with the encryption algorithms applied before R.1.0.4.
Standard encryption application areas:
• Web pages for administration
• SIP with TLS
• Device management to HTTPS server
• LDAP with TLS
• Media encryption with SRTP
• 802.1x
Related information
Encryption methods in Legacy encryption mode
on page 191
Standard encryption for 802.1x
You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method.
If you need to use EAP MD5 method for 802.1x, ensure that you set the Allow
Legacy Encryption option to true and FIPS Mode to false. When you try to enable
EAP MD5 while Allow Legacy Encryption is disabled, the phone warns you with the following message: EAP MD5 requires Allow Legacy Encryption to be enabled . When you try to enable Allow Legacy Encryption while FIPS Mode is enabled, the phone warns you with the following message: Allow Legacy
Encryption cannot be enabled while FIPS mode is enabled .
You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method on the phone, through the web interface, or using a configuration file.
When you upgrade the phone from a version without the legacy encryption option and enable EAP MD5 method, the phone automatically enables the Allow Legacy
Encryption option.
When you import a configuration file, the phone settings update in line with the imported configuration file. If the value of <eap_md5> is set to true , you must also set the value of <allow_legacy_encryption> to true .
Related tasks
Importing the configuration file on page 130
153
SECURITY AND PROTECTION
Related information
on page 35
Standard encryption for media encryption with SRTP
When the key exchange for media encryption with SRTP occurs, Konftel 800 supports the AES_256_CM_HMAC_SHA1_80 mandatory crypto.
Some servers do not support this mandatory crypto. In this case you must enable the Allow Legacy Encryption option to make an SRTP call. By default, it is disabled.
In case you enable the Capability Negotiation setting for the phone to negotiate transport protocols and attributes, the phone supports one crypto only. The supported crypto depends on the Legacy encryption mode configuration as follows:
• If you disable the Legacy encryption mode, the phone offers
AES_256_CM_HMAC_SHA1_80 crypto only.
• If you enable the Legacy encryption mode, the phone offers
AES_CM_128_HMAC_SHA1_80 crypto only.
When you disable the Capability Negotiation setting, there are several crypto solutions available for the SRTP negotiation. The options are the following:
• With the Allow Legacy Encryption setting disabled, the phone supports the
AES_CM_128_HMAC_SHA1_80 and AES_256_CM_HMAC_SHA1_80 cryptos.
• With the Allow Legacy Encryption setting enabled, the phone supports the
AES_CM_128_HMAC_SHA1_80 and AES_256_CM_HMAC_SHA1_80 cryptos.
In the configuration file the configured parameters are <capneg> and
<allow_legacy_encryption>
Legacy encryption mode
Konftel 800 also supports specific legacy encryption algorithms. If you enable
Legacy encryption mode, the phone offers all the previously supported ciphers for the SSL negotiation and cryptos for SRTP. You can check the offered ciphers using a specialized network protocol analyzer. At that, the phone supports the legacy encryption algorithms only for backward compatibility.
By default, Legacy encryption is enabled.
Firmware upgrade
When you upgrade Konftel 800 from a version without the legacy encryption option, the phone automatically enables the Allow Legacy Encryption option.
154
SECURITY AND PROTECTION
When you reset Konftel 800 to the factory default state, the phone also enables the Allow Legacy Encryption option.
When upgrading, the phone automatically enables the Allow Legacy Encryption option, if 802.1x
with EAP MD5 is enabled.
Related information
Encryption methods in Legacy encryption mode
on page 191
FIPS MODE
Konftel 800 supports a specific FIPS mode to make the encryption and cryptographic functions compliant with Federal Information Processing Standards
(FIPS). When you enable FIPS mode, the phone employs approved key exchange algorithms, cryptographic algorithms, and authentication techniques to meet the
FIPS 140-2 requirements.
When Konftel 800 needs cryptographically secure numbers, it uses random number generator functions from FIPS 140-x compliant cryptographic libraries. A specific FIPS-approved random number generator renders cryptographic number initialization vectors.
With FIPS mode enabled, the device management with HTTPS server occurs using the SSL encryption method.
By default, FIPS mode is disabled.
If you configure the phone to allow legacy encryption, you cannot enable
FIPS mode. You see the following popup message: FIPS mode cannot be enabled while Allow Legacy Encryption is enabled.
If you configure the phone to use 802.1x with EAP MD5, you cannot enable
FIPS mode. The phone warns you with the following message: FIPS mode cannot be enabled while 802.1x with EAP MD5 is enabled.
Related concepts
Standard encryption for 802.1x
on page 154
FIPS mode for media encryption with SRTP
When the key exchange for media encryption with SRTP occurs with FIPS mode enabled, Konftel 800 supports one mandatory crypto
AES_256_CM_HMAC_SHA1_80 .
155
SECURITY AND PROTECTION
The conference phone supports the same mandatory crypto
AES_256_CM_HMAC_SHA1_80 when FIPS Mode and Allow Legacy Encryption are disabled.
When the administrator disables FIPS Mode and enables Allow Legacy
Encryption , Konftel 800 supports AES_CM_128_HMAC_SHA1_80 for media encryption with SRTP.
SCEP SUPPORT
Konftel 800 supports Simple Certificate Enrollment Protocol (SCEP) required for managing digital certificate obtainment. SCEP is used to contact a SCEP server to get an Identity certificate. The device uses this certificate for all TLS connections if they do not have manually configured certificates (SIP TLS, 802.1x EAP-TLS,
Provisioning via TLS, LDAP). You can also obtain a CA certificate if the SCEP server has corresponding configurations.
SCEP enrollment
You can configure SCEP through the web interface and importing the configuration file with the specific SCEP settings. After Konftel 800 reboots, it attempts to connect the specified SCEP server. If the server is reachable, it provides the certificates with the settings matching the server configuration. If the received certificate is valid and the SCEP enrollment is successful, the phone saves the configuration and reboots.
When the device requests an SCEP server to get or renew a certificate, the request must be approved. The following types of request approval are available:
• Manual approval. The SCEP server receives your request, and then the SCEP server administrator must approve it. The next request of the device results in the certificate provision.
• Automatic approval. The SCEP server checks your request for validity, then if the parameters are accurate, approves the request and sends you the certificate.
The enrollment fails if the settings configuration on the phone and the server do not match. Here, Konftel 800 triggers the next enrollment in 24 hours.
If you upload a certificate to the phone through the web interface or using automatic provisioning only for one connection, for example, for the LDAP connection, that connection continues to use the configured certificate. Other connections use the SCEP Identity certificate received from the SCEP server.
156
SECURITY AND PROTECTION
Mandatory SCEP parameters
Successful enrollment is only possible if you configure the relevant SCEP server and valid SCEP settings. When you enter the URL of the dedicated SCEP server, you must specify the following parameters:
• Common Name
• CA Identifier
• Initiate renewal on % of Validity interval
• Key Length
• Password
There is no check of mandatory parameters in automatic provisioning and configuration file import. You must always provide valid data.
Background polling
If you configure SCEP with the valid data, the phone attempts to connect to the SCEP server. If the server is reachable, it immediately starts processing the enrollment or renewal request. If the connection fails, Konftel 800 attempts to contact the SCEP server in the background.
For manual approval of a certificate, the phone sends the first request after the reboot and repeats it 20 times within 300 seconds. If the request stays unapproved, the phone tries to connect again in 24 hours.
Auto-renewal
The SCEP server provides a device certificate with a specified validity period, meaning that the device certificate expires in a pre-set amount of days. After it expires, you must get a new device certificate from the SCEP server. You can configure the date and time to send the renewal request for the certificate. You must specify the renewal date and time in percent of the expired validity period of the valid certificate. For example, you can configure to send the renewal request when the current certificate validity period expires by 95%. You must enter 95 in the Initiate renewal on % of Validity Interval field.
When the auto-renewal of the certificates is complete, the phone reboots as soon as it enters Idle mode. After the reboot, Konftel 800 starts using the new device certificate.
The phone can also boot up with an expired certificate. If you have the renewal request parameter configured, the phone sends the renewal request after the phone boots up.
157
SECURITY AND PROTECTION
Configuring SCEP renewal request
About this task
When Konftel 800 receives a device certificate from a SCEP server, the certificate has a specified validity period, after which the certificate expires. Use this procedure to configure a SCEP renewal request through the web interface.
Before you begin
Log in to the web interface as administrator.
Procedure
On the web interface, click Provisioning .
In the SCEP section, enter the value in Initiate renewal on % of Validity
Interval .
The value range is from 1 to 99 . The default value is 90 .
Click Save .
The phone reboots to apply the changes.
The web interface shows Save Succeeded pop-up message.
Related concepts
Provisioning of the CA certificate through SCEP
The SCEP server supports the provisioning of CA certificates, which Konftel 800 uses as the default CA certificates for all TLS connections.
If any of the TLS connections requires a specific CA certificate, you can do the following:
• Install the certificate manually. Here, the phone uses the manually installed CA certificate and ignores the certificate received from the SCEP server.
• Request and receive the certificate from the SCEP server.
If you have a CA certificate from the SCEP server and initiate the SCEP renew enrollment process, the phone continues using this CA certificate after the SCEP renew enrollment process ends.
Related concepts
158
SECURITY AND PROTECTION
WEB INTERFACE SETTINGS
The web server in Konftel 800 supports secure connections using HTTPS. You can configure this parameter only through the web interface.
The phone supports connection to the web interface only through https .
The following table shows the web interface settings that you can configure for
Konftel 800 in the Provisioning tab:
Name Description
Secure HTTP
Webapp HTTPs
Certificate
To upload a .PEM certificate to Konftel 800 to use HTTPS.
You must convert the certificates and private keys to .PEM before using in the phone. For more information, see
Converting the certificates to .PEM format
on page 149
You can use the following command to generate a HTTPS web interface certificate: openssl req –new –x509 –keyout https _ web _ certificate.pem –out https _ web _ certificate.pem –day <number of days>-nodes
DISABLING WEB ACCESS
About this task
Use this procedure to disable the web access setting of your Konftel 800 for security reasons. By default, web access is enabled.
After you disable this setting, you cannot access your phone through the web interface. You can restore access to the web interface by enabling the web access setting on the phone or through auto-provisioning.
Before you begin
Ensure that you have the administrator password configured on the phone.
Obtain the .xml configuration file.
Procedure
• To disable web access on the phone, do the following:
159
SECURITY AND PROTECTION
Log in as the administrator.
On the phone screen tap Settings > Admin > Device Management .
Disable Web Access .
Tap the Arrow Left icon twice to return to the home screen.
The phone reboots to apply the changes.
• To disable web access through the web interface, do the following:
Log in to the web interface.
Click Provisioning .
In the Device Management section, disable Web Access .
You can see the following warning message: You will not be able to access phone administration web interface after disabling Web Access.
Click Save .
• To disable web access by using the .xml configuration file, do the following:
Locate the <httpd> section in the configuration file.
In the <enable> line, change the value to false .
Save the file.
Import the configuration file through the web interface.
The phone reboots to apply the changes.
PROTECTION AGAINST CROSS-SITE REQUEST
FORGERY
When the user logs in to the web interface of Konftel 800 with the administrator password, the web application of the phone uses specific tokens to protect against
Cross-Site Request Forgery (CSRF) attacks.
CSRF is an attack that tricks the user into submitting a malicious request. The attacker takes the identity and privileges of the user to make undesired actions on the user’s behalf. CSRF attacks target functionality that causes a state change, for example changing the user's password. If the user stays authenticated to the website during the attack, the website can not distinguish between forged and legitimate requests.
Konftel 800 generates a new CSRF token on each request. Each link or parameter change in the web interface needs to have a CSRF token as a request parameter.
The web application checks if the token in the request is the correct one. For example, if the attacker copies an existing link from the open web interface of
160
SECURITY AND PROTECTION
Konftel 800, the server responds with the following error code: HTTP status code 403, forbidden .
You are recommended to administer the settings in the web UI only from one computer and one browser simultaneously. This way you can minimize the risk of getting the error code message due to incorrect token use.
161
CALLS HANDLING APPLICATION
KONFTEL UNITE
You can manage your Konftel 800 from a mobile phone or a tablet if you have
Konftel Unite installed on the device. Download and install Konftel Unite free from
App Store and Google Play like any other application. Use the NFC tag to easily start downloading the application. For that, you must bring the mobile device with the NFC enabled to the NFC tag on the conference phone, and the web browser on the mobile device opens the web page with the application in App Store or
Google Play.
With Konftel Unite, you can call contacts from your local address book, create conference groups, and control a call. For example, answer and hang up the call, mute and unmute the microphone, dial a number, adjust the volume level, and hold and resume the call.
The mobile device with Konftel Unite is connected to the phone over the built-in
Bluetooth ® LE. Konftel 800 is always discoverable for this connection.
Starting from R 1.0.4, Konftel 800 uses SHA256 method for challenge-response authentication to connect to Konftel Unite.
If your conference phone fails to connect to Konftel Unite, you must download a newer version of the application from App Store or Google Play. It works both with R 1.0.4 and earlier released firmware.
Configure Konftel Unite parameters on the phone and from the mobile device with the application installed.
Pairing and connecting devices
About this task
Use this procedure to pair your Konftel 800 with Konftel Unite on your mobile device the first time when you use them together. After that, they connect with one touch when you run the application near the conference phone.
The connection range is up to 20 meters. The connection breaks if this range is exceeded. You see a request to reconnect when Konftel Unite is within the range of Konftel 800. Reconnection requires only one touch.
You can pair up to 100 mobile phones or tablets with your Konftel 800. But only one user connection is active at a time.
162
CALLS HANDLING APPLICATION
Procedure
On your mobile device, open Konftel Unite.
The mobile phone displays the closest Konftel 800.
To select the phone you want to connect, perform one of the following actions:
• If your mobile device displays Konftel 800 you want to connect, tap
Connect on the mobile device screen.
• If your mobile device does not display Konftel 800 you want to connect, tap
Skip and then tap the connection symbol in the upper left corner of your mobile device screen.
The mobile device displays the list of available conference phones.
The mobile phone displays a pairing code for about 30 seconds.
Enter the code with the keypad on the conference phone.
Tap Enter on the conference phone to start pairing.
When the devices are paired, both Konftel Unite and Konftel 800 display the connection symbol.
The conference phone and Konftel Unite remain paired while they are close to one another.
You cannot connect Konftel 800 to a Bluetooth ® device for call handling or audio streaming while the Konftel Unite connection is active.
Disconnecting devices
About this task
Use this procedure to disconnect your Konftel 800 from the mobile device with
Konftel Unite installed.
Before you begin
Ensure that Konftel 800 is connected to a mobile device with Konftel Unite installed.
Procedure
• To disconnect from the mobile device, do the following:
In Konftel Unite, tap the connection symbol in the upper left corner of the screen.
Tap the Disconnect button near the highlighted connected device name.
The connection symbol in the upper left corner of the screen becomes inactive.
163
CALLS HANDLING APPLICATION
• To disconnect from Konftel 800, do one of the following:
• Tap Konftel Unite > Disconnect Device .
• Tap Settings > Konftel Unite > Disconnect Device .
The phone displays the following question: Disconnect device <Device
Name>?
To confirm, tap Ok .
The phone shows the Konftel Unite icon and informs that the application is disconnected.
Deleting pairing
About this task
Use this procedure to delete the pairing between the conference phone and the mobile device. You can delete the paring only from the conference phone.
Before you begin
Pair Konftel 800 with a mobile device with Konftel Unite.
Procedure
To delete the pairing from the conference phone, on the home screen, do one of the following:
• Tap Konftel Unite .
• Tap Settings > Konftel Unite .
Tap Remove Bonding Information .
Tap Ok to confirm removal of all bonding information from the device.
Konftel 800 restarts the application to apply the changes.
This function both disconnects the current connection and deletes the pairing.
You must start a new pairing process the next time you want to connect to the phone.
Configuring the Konftel Unite settings
About this task
Use this procedure to configure the Konftel Unite settings from the application installed on a mobile device.
Procedure
Run Konftel Unite on your mobile device.
164
CALLS HANDLING APPLICATION
Optional: Connect to Konftel 800.
The phone displays a connection symbol on the screen.
Tap Settings and proceed with configuration.
Konftel Unite settings
The following table lists the parameters for Konftel 800, which you can set from the Konftel Unite interface:
Name
Connection
Moderator code
Dial prefix
My bridge
Description
To enable or disable the connection to Konftel 800. The options are:
• On: The default option.
• Off: To use Konftel Unite without connection to any
Konftel 800. You can use the conferencing application from your mobile device within your mobile phone subscription.
To join the scheduled conference calls as a moderator. You must enter respective codes in the following fields:
• Use moderator code : To host conference calls over a bridge service. For every call you join, Konftel Unite uses your moderator code instead of your guest code.
• Instead of guest code : To specify the guest code instead of which Konftel Unite uses your moderator code.
To enter the prefix digits in the Use prefix field.
To enter the phone number and optional PIN code of the most frequently used conference service. You can use the
My bridge button to join the conference call.
The My bridge button appears in the calendar view.
Table continued…
165
CALLS HANDLING APPLICATION
Name
Meeting notification
Description
To set a reminder about a call. The options are:
• 5 minutes before
• 10 minutes before
• 15 minutes before
• Never
Calendars to show To select the calendars in the mobile phone from which you want Konftel Unite to take the information.
Tell a colleague To share information about Konftel Unite with a person that you want. You can do it by using an email application.
After you confirm that Konftel Unite can access your email application, you see a message created. Along with the description of the application, it contains links to Konftel
Unite in App Store and Google Play so that the person can easily start the download.
Read more about
Konftel Unite
To get additional information about Konftel Unite. The application forwards you to the web site with the corresponding information.
Feedback and support
To share your experience of using the application and request for support. The options are:
• A messenger, for example, Viber, WhatsApp, Telegram, and so on.
• An email application.
• Connection by Bluetooth ® .
Diagnostics
Show tutorial
To select a log of the events for Konftel Unite.
You can send the created log by tapping Send through an email application. The log can be used in troubleshooting.
You can also delete the logs from the application by tapping
Clear .
To read information about Konftel Unite features.
Table continued…
166
CALLS HANDLING APPLICATION
Name
About Konftel
Unite
Description
To check the version of the application installed on your mobile device.
167
COVERAGE EXPANSION
EXPANSION OF THE PHONE COVERAGE
Use your Konftel 800 on larger conference tables or when the number of meeting participants is greater than 10. In this case, to ensure the high-level quality of audio signal, you can expand the phone coverage in the room without a PA system. To expand the phone coverage, connect Konftel Smart Mic expansion microphones to the phone or cascade several Konftel 800 devices in a daisy chain.
Expansion of the phone coverage helps to improve the audio quality in large rooms. The conference phone and two Konftel Smart Mics increase the capture range from 30 square meters to up to 70 square meters. Three phones in a daisy chain increase the range from 30 square meters to up to 90 square meters.
Physical layout
You can connect up to two Konftel Smart Mic expansion microphones to get an extended pick-up area. Each microphone has a pick-up range of 4 meters.
168
COVERAGE EXPANSION
3
2
1
Figure 1: Front view of Konftel Smart Mic.
The following table lists the buttons and the other elements of Konftel Smart Mic:
2
3
Callout number
1
Description
Mute button
LED status indicator
Connection cable
Smart Mic characteristics
The following table shows the dimensions, weight, and other characteristics of
Konftel Smart Mic:
169
COVERAGE EXPANSION
Parameter
Width
Length
Height
Weight
Pick-up range
Connection
Value
160 mm
190 mm
60 mm
220 g
4 m
Modular 6/6 jack
Expansion coverage arrangement
You can arrange a daisy chain with your conference phone and another Konftel
800 or connect Smart Mic expansion microphones. The maximum number of devices in a daisy chain is three. One Konftel 800 phone acts as a central device
(the “Primary” phone), and one or two other units act as expansion devices (the
"Secondary" devices).
The expansion coverage arrangement depends on the size and the furnishing of the conference room and the number of participants. The most common are the following arrangements:
• Expansion microphone — Primary phone — Expansion microphone. This arrangement is typical for middle conference rooms and best suits meetings with up to 20 participants.
• Secondary phone — Primary phone — Secondary phone. This arrangement is typical for large and very large conference rooms with more than 20 people present.
Depending on your needs and preferences, you can also use one of the following less common arrangements:
• Primary phone — Secondary phone
• Primary phone — Expansion microphone
• Expansion microphone — Primary phone — Secondary phone
To connect several Konftel 800 phones, use one or two daisy-chain cables.
To connect Konftel Smart Mic to the Primary phone, use the connecting cable supplied with the expansion microphone.
170
COVERAGE EXPANSION
Functions of the Primary and Secondary devices
When Konftel 800 acts as the Primary device, it performs all its configured functions.
When Konftel 800 is in a subordinate position (a Secondary device), it performs the following functions:
• Plays audio received from the Primary device. The Primary phone defines the audio characteristics.
• Sends its microphone audio to the Primary device.
• Receives and indicates mute state changes made on the Primary device.
• Sends information to the Primary device when you tap Microphone Muted on it.
• Sends information to the Primary device when you adjust the volume on it.
You cannot make calls between the Primary and the Secondary devices.
In a daisy chain, the Secondary device follows the signal from the Primary device to enter Sleep mode or Active mode.
In a daisy chain, each phone is powered by its own PoE injector. The phone powers the Smart Mics when these are connected. The power available from each port is around 5 W.
Connection of the Secondary devices to the Primary phone
In a daisy chain, Konftel 800 disables all unused daisy chain ports during active calls to ensure the best possible audio experience. That means, that the time, when a Secondary device activates, is dependent on the Primary phone status as follows:
• The Primary phone is in the Idle state. When the user connects an expansion microphone or a Secondary device to the Primary phone, Konftel 800 immediately detects it, and the connected device becomes directly available for operation.
• The Primary phone has an active call. When the user connects an expansion microphone or a Secondary device to the Primary phone, the connected device becomes available for operation only after the call ends.
The same approach is applicable when the user disconnects and reconnects an expansion microphone or a Secondary device to the Primary phone during an active call. Here, the connected device also becomes available for operation only after the call ends.
171
COVERAGE EXPANSION
Arranging a daisy chain
About this task
Use this procedure to arrange a daisy chain of one main Konftel 800 phone and one or two expansion conference phones or expansion microphones.
Before you begin
If you arrange the daisy chain made of several conference phones, prepare the connection cables. The cables in the Daisy Chain kit are 5 and 10 meters long.
You can purchase the Daisy Chain kit as an accessory.
The cable of the Smart Mic is 3 m long.
Procedure
Connect the cable to the audio expansion port on the phone.
There are 2 audio expansion ports on Konftel 800.
Connect the other end of the cable to the audio expansion port of the other phone.
In case of expansion microphones, the other end of the cable is fixed in the device.
Defining the mode of the phone
About this task
Use this procedure to define the mode of your Konftel 800 in a daisy chain.
Procedure
• To define the mode of your Konftel 800 on the phone, do the following:
Log in as the administrator.
In the Settings menu, tap Phone > Daisy Chain .
Select the required mode.
The options are:
• Primary
• Secondary
Tap the Arrow Left icon three times to return to the home screen.
The phone restarts the application to apply the changes.
• To define the mode of your Konftel 800 through the web interface, do the following:
On the web interface, click Phone .
172
COVERAGE EXPANSION
In Daisy Chain Mode , select the required mode from the drop-down list.
The options are:
• Primary . This is the default mode.
• Secondary
Click Save .
The expansion unit displays the Daisy Chain Mode icon and the following message: Daisy Chain . This message remains for the period when the phone is in Slave mode within the daisy chain arrangement.
Disabling Daisy Chain mode
About this task
Use this procedure to disable Daisy Chain mode through the web interface or from the phone.
Before you begin
Ensure that the phone displays the Daisy Chain icon.
Procedure
• To disable Daisy Chain mode from the web interface, do the following:
On the web interface, click Phone .
In Daisy Chain Mode , select Primary .
Click Save .
• To disable Daisy Chain mode from the phone, do the following:
Touch the phone screen and enter the administrator password.
Tap Phone > Daisy Chain .
Select Primary .
Tap the Arrow Left icon three times to return to the home screen.
Application restarts and restores the Primary phone status.
Headset lecture mode
You can use your Konftel 800 in various setups that require remote lecturing and presentation during an active call. In this Headset lecture mode, the lecturer gets primary attention, and all other call participants can actively participate.
To enable Headset lecture mode, you must connect the headset to the USB host port of the phone. Here, Headset lecture mode activates, and Konftel 800 transmits audio signals from the speakers and microphones of the phone and from
173
COVERAGE EXPANSION the headset. The priority of the audio signal from the headset is higher, and the lecturer's words override all other sounds.
Headset lecture mode activates only with the enabled USB ports. Here, you must have the <USB enable> parameter set to true . If you disable the USB ports on the phone, Headset lecture mode becomes unavailable.
Konftel 800 activates Headset lecture mode only when you connect the supported headset model. For supported headsets, please see: https://www.konftel.com/en/ products/konftel-800 .
When you connect the headset, Konftel 800 shows the Headset lecture mode icon on the status bar to indicate the active Headset lecture mode.
In a daisy chain, if you connect the headset to a Secondary device, Konftel
800 does not show the Headset lecture mode icon on the status bar. Here, the connection of the headset to the Secondary phone does not activate Headset lecture mode. You must connect the headset to the Primary device to enable
Headset lecture mode.
Volume level adjustments
In Headset lecture mode, when you adjust the volume level on your Konftel 800, the volume level of the headset does not change. Volume level change on the headset does not affect the volume level on the device. This is true for audio signals from the speakers and microphones of your conference phone.
If during a call in Headset lecture mode you press the Mute button on your Konftel
800, the phone mutes itself and audio from the headset microphone. If you mute audio on the headset, the phone remains unmuted.
Configuring Headset lecture mode
About this task
Use this procedure to enable or disable Headset lecture mode on your Konftel 70.
Before you begin
Obtain a Jabra Engage 65 headset. The minimum supported headset firmware version is 5.6.0.
Procedure
To enable Headset lecture mode, connect the headset to the phone through
USB.
On the status bar, Konftel 800 displays the Lecture mode icon.
174
COVERAGE EXPANSION
Optional: To disable Headset lecture mode, disconnect the headset from the phone.
Ceiling audio mode overview
You can install Konftel 800 in the ceiling or on walls for more flexible configuration of tables. Use the Konftel 800 Ceiling Mount Kit for installation. For instructions, please see https://www.konftel.com/en/accessories/konftel-800-ceiling-mount-kit .
To use this feature, you must configure the ceiling audio mode after you install the
Konftel 800.
Configuring the ceiling audio mode parameter
About this task
Use this procedure to configure the ceiling audio mode parameter from the web application and the phone user interface. The default parameter is false, which is a disabled state. When your phone is installed in a ceiling, you can get better music and audio quality.
Before you begin
Ensure that you have your administrator credentials.
Procedure
To enable or disable the ceiling audio mode parameter from the web application, do the following:
On the Phone tab, navigate to Advanced section.
To enable the ceiling audio mode, toggle the Ceiling Audio Mode from disabled to enabled .
Press Save .
The phone restarts the application to apply the changes.
To enable the ceiling audio mode parameter for the phone user interface, do the following:
Go to the phone user interface settings.
Log in as administrator.
Navigate to the Phone section.
To enable the ceiling audio mode, toggle the Ceiling Audio Mode from disabled to enabled .
Exit the phone user interface settings.
The application restarts and uses the latest value.
175
COVERAGE EXPANSION
EXPANSION MICROPHONE FIRMWARE UPGRADE
You can upgrade the expansion microphone firmware to the Konftel 800 firmware version when your Smart Mic has an older firmware installed. Regularly updating the expansion microphone firmware to match the phone firmware ensures the best possible audio performance.
The phone suggests an automatic upgrade of the expansion microphone firmware when you connect your Smart Mic to Konftel 800. You can connect one or two
Smart Mics simultaneously.
You can also initiate the expansion microphone firmware upgrade manually.
If you connect the expansion microphone to Konftel 800 during an active call, the upgrade does not start until the call ends.
During the upgrade, the phone rejects all incoming and outgoing calls and does not activate the Call Transfer feature. At that Konftel 800 indicates that it is Busy .
Upgrading expansion microphone firmware
About this task
Use this procedure to upgrade the expansion microphone firmware when the
Smart Mic and your device have different firmware installed.
Before you begin
Make sure Konftel 800 is in Idle Mode.
Procedure
Connect the expansion microphone to your conference phone using the available audio expansion port.
The expansion microphone LEDs flash red once.
A pop-up dialog window shows the following message: A connected microphone needs firmware upgrade. Upgrade now?
On the pop-up dialog window, tap Yes to start the upgrade.
The LEDs on the phone turn red to indicate that it is busy with the microphone upgrade. The expansion microphone LEDs start flashing green.
The phone displays the Upgrade in progress message and shows the upgrade progress in percentage (0%-100%).
When you connect one Smart Mic to Konftel 800, the phone shows the upgrade status for Smart Mic 2 as N/A .
176
COVERAGE EXPANSION
Smart Mic 1: 10%
Smart Mic 2: N/A
Optional: To cancel the upgrade, tap No .
In this case, you postpone the upgrade until the phone reboots.
Result
If the upgrade is complete, the microphone LEDs turn off, and Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: N/A
In 10 seconds, the pop-up dialog window hides, and the phone enters Idle mode.
If the Smart Mic firmware upgrade fails, the microphone LEDs turn off, and the phone displays the Smart Mic 1: Failed message.
Upgrading two expansion microphones
About this task
Use this procedure to upgrade two expansion microphones connected to your device simultaneously.
Before you begin
Connect Smart Mic 1 to the first audio expansion port of your conference phone.
Procedure
Connect Smart Mic 2 to your conference phone using the second audio expansion port.
The LEDs on the phone turn red to indicate that it is busy with the microphone upgrade. The Smart Mic 2 LEDs start flashing green.
A pop-up dialog window provides the expansion microphones upgrade status in the following format:
Smart Mic 1: 20%
Smart Mic 2: 10%
Optional: Terminate Smart Mic 2 upgrade by detaching the expansion microphone from the phone.
In this case, you postpone the upgrade until you connect Smart Mic 2 again.
177
COVERAGE EXPANSION
Result
When the upgrade is complete for Smart Mic 1 and Smart Mic 2 is still upgrading, the LED turns off on Smart Mic 1, and Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: 86%
When the upgrade is complete for both microphones, their LEDs turn off, and
Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: Done
In 10 seconds, the pop-up dialog window hides, and the phone enters Idle mode.
If the firmware upgrade for any of the expansion microphones fails, the microphone LEDs turn off, and the phone displays the message stating the
Failed status of the corresponding Smart Mic.
Terminating expansion microphone upgrade
About this task
Use this procedure to terminate the expansion microphone upgrade.
You can do it in the following cases:
• The phone has one Smart Mic 1 connected; or
• The phone has both Smart Mic 1 and Smart Mic 2 connected simultaneously.
Before you begin
Connect Smart Mic 1 and Smart Mic 2 to the phone and start the upgrade process for both expansion microphones.
Procedure
Detach Smart Mic 2 from the phone.
Smart Mic 1 continues upgrading with the value for the upgrade progress being updated.
Smart Mic 2 upgrade dialog indicates an error and aborts the mic upgrade.
Konftel 800 displays the following message:
178
COVERAGE EXPANSION
Upgrade in progress
Smart Mic 1: 50%
Smart Mic 2: Failed
When Smart Mic 1 upgrade is complete, its LED turns off, and Konftel 800 displays the following message:
Upgrade in progress
Smart Mic 1: Done
Smart Mic 2: Failed
This message disappears in 10 seconds.
Optional: To upgrade Smart Mic 2, connect it to the conference phone and proceed with the upgrade.
Upgrading Smart Expansion Microphone manually
About this task
Upgrade your expansion microphone manually when it is convenient to you.
Procedure
Hold the Microphone Muted button on the Smart Mic while you connect the microphone cable, and keep holding the button for 5 seconds after you inserted the cable.
When you release the button, it flashes red one time and then starts flashing green to indicate that the upgrade process has started. The LEDs on the phone turn red to indicate that it is busy with the microphone upgrade. The upgrade process takes about 7 minutes. When the upgrade is completed, the microphone LEDs turn off.
Check the microphone version by doing one of the following:
• On the phone screen, tap Settings > Status .
• On the web interface, go to the Status tab.
179
MAINTENANCE
SYSTEM RECOVERY
As an administrator, you can perform system recovery on Konftel 800 to return the phone to operable state, for example, after a faulty upgrade or when the phone application fails. System recovery replaces the current firmware with the previously installed operable firmware version.
You can also perform system recovery to reset the administrator password.
System recovery erases all settings including the account information.
Performing system recovery
Before you begin
Ensure that you save the configuration file from your Konftel 800. System recovery erases all settings.
Procedure
Power cycle the phone to start the boot process.
When the LEDs turn green, start tapping the Microphone Muted button on the phone and continue tapping until the LEDs turn off.
Tap the Microphone Muted button once again.
When the LEDs turn red, tap the Volume up button once to confirm the system recovery.
The LEDs turn off. The phone starts regular boot. After the boot up, the phone displays the following message: Upgrade the phone to complete recovery .
If you want to cancel the system recovery, do not tap Volume up button on the phone when the LEDs turn red.
After the phone boots up, set the administrator password.
Upgrade the phone to complete system recovery.
Next steps
Upload the configuration file with necessary settings.
Related tasks
Setting the password for Konftel 800 on page 21
180
MAINTENANCE
REMOTE SYSLOG SERVER
Konftel 800 supports syslog protocol to allow centralized log management. You can configure the phone so that it logs to a remote server and sends the syslog messages to your own system or a third-party system.
With the remote syslog feature enabled, the phone sends the syslog messages to the syslog server and also logs them in the local log.
By default, the remote logging feature on Konftel 800 is in the disabled state.
Configuring remote syslog settings
About this task
To use the remote syslog feature, you need to do the following:
• Enable your phone to deliver syslog messages to the syslog server.
• Configure the destination server which receives the syslog events.
You can do this using the configuration file stored on the Device Management server. You can find the syslog settings under the <logging> section of the configuration file.
The default syslog port is 514, and you cannot change this setting.
The <remote_syslog_host> tag can be missing in the <logging> section if you use a configuration file exported from the phone application. This can happen because the <remote_syslog_host> default value is blank, and the phone application does not export blank tags.
Before you begin
Obtain the configuration .xml file for Konftel 800.
Procedure
In the configuration file, go to the <logging> section.
Set the value in the <remote_syslog_enable> tag to true as shown in the following example:
<remote_syslog_enable>true</remote_syslog_enable>
Specify the host URL in the <remote_syslog_host> tag as shown in the following example:
<remote_syslog_host>1.2.3.4</remote_syslog_host>
Replace the 1.2.3.4 with the IP address or hostname of your remote syslog server.
181
MAINTENANCE
Save the configuration file.
Next steps
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
The phone sends syslog messages to the syslog server after the next reboot. The phone continues sending syslog messages until you set the
<remote_syslog_enable> parameter in the configuration file to false .
Related tasks
Importing the configuration file on page 130
Exporting the configuration file on page 129
Related information
on page 35
FALL BACK SERVER SUPPORT
Konftel 800 registers concurrently with the primary and secondary proxy servers.
The phone also supports provisioning of a third-party fall back server when a connection with the primary or secondary server cannot be established. You can configure the third-party server details by using the web interface and the configuration file.
FACTORY RESET
If for any reason, you must restore the factory settings on your Konftel 800, you can do it by means of the factory reset. In this case the phone removes all user-specific settings and returns to the factory settings. After the procedure is completed, you can repeatedly configure the settings.
Performing factory reset
About this task
You can reset your Konftel 800 to factory default. You can do the factory reset only on the phone after you log in as the administrator.
If you need to perform the factory reset without logging in as the administrator, follow the procedure described in
Performing system recovery on page 180.
182
MAINTENANCE
Procedure
Log in to the phone as the administrator.
On the phone screen, tap Settings > Phone .
Tap Factory Reset .
The phone shows the following message: Reset configuration to factory default. Press OK to confirm .
Tap Ok to confirm the reset.
Optional: Tap Cancel to return to the Phone settings.
DEVICE STATUS VIEW
You can view the configured settings of your Konftel 800 through the web interface and get information about the device, logs, and licenses.
You can use this information for troubleshooting.
Device status
You can find the information about Konftel 800 status, including its current settings, through the web interface. This information can be useful for troubleshooting.
The following table describes the type of the information available in each of the
Status tab sections.
Section name
General
Description
To show the status information of Konftel 800, including the following:
• Phone Name
• Product Name
• Build Version
• HW Revision
• Serial Number
• Smart Microphone 1 Version
• Smart Microphone 2 Version
183
MAINTENANCE
Section name
Network
SIP
Time and Region
Description
To show the information about the network settings of the phone. You can see the following information:
• IP Address
• MAC Address
• Bluetooth MAC Address
• Hostname
• Network Mask
• Domain
• Gateway
• Primary DNS
• Secondary DNS
To show the information about the SIP settings of the phone. You can see the following information:
• Primary Account Status
• Secondary Account Status
• Fallback Account Status
To show the information about the time and region settings of the phone. You can see the following information:
• NTP Status
• Time
• Date
• Timezone
• Daylight Saving Time
You can not change settings in the Status tab.
Viewing the phone status
About this task
Use this procedure to view the status and settings of Konftel 800 through the web interface.
184
MAINTENANCE
Procedure
Log in to the web interface.
Select the Status tab.
System logs
Information about log messages is available through the web interface in the
System Logs tab. These log types can be useful for troubleshooting.
You can select the following log types:
• All Logs . This is the default setting.
• System Logs
• PhoneApp Logs
• Linux Kernel Logs
• Bluetooth Stack Logs
• PJSIP logs
• Device Management
• SIP traces
• Device Management Debug
You can also specify custom logs type in the Custom logs type field.
You can not access logs through the phone user interface.
Viewing system logs
About this task
Use this procedure to choose and form the log messages through the web interface.
Procedure
On the web interface, click System logs .
Under Select Logs Type , select the log from the list.
Click the Filter button.
You can see the logs of the selected type in the field below.
Optional: You can do the following:
• Click the Download All Logs button to download all the logs available.
Here, the system downloads a .zip archive with the logs available.
185
MAINTENANCE
• Click the Download Selected Logs button to download the logs of a selected type. Here, the system downloads a .txt file with the logs of the selected type.
• Click the Clear All Logs button to clear the list of available logs.
PJSIP log levels
Konftel 800 uses the PJSIP library in its real-time media communication. PJSIP is a free and open-source multimedia communication library working with standardbased protocols such as SIP, STUN, and TURN. This library also combines three main components of real-time multimedia communication: signaling, media features, and NAT traversal.
You can use PJSIP logs for information and troubleshooting.
Konftel 800 provides the following PJSIP log levels:
• Fatal. This is the least detailed printout. You can see those events that are fatal for the operation.
• Error. You can see the list of error events.
• Warning.
You can see the list of warnings relevant to the device operation.
• Info.
You can see information about the actions of the device. This is the default option.
• Debug.
You can get information about specific actions of the device and use it for debugging.
• Trace.
This is the most detailed printout. You can see all the actions made by the device.
You can set the PJSIP log level through the web interface or using a configuration .xml file.
Setting PJSIP log level through the web interface
About this task
Use this procedure to manually set the PJSIP log level to generate a log message printout with the required details. For example, when you enable a higher log level, you receive useful information for troubleshooting.
Before you begin
Log in to the web interface.
Procedure
On the web interface, click the System logs tab.
Choose the required value from the PJSIP Log Level list.
186
MAINTENANCE
The value depends on the level of printout details provision you need.
Click Save .
The phone restarts the application to apply the changes.
Next steps
Check the PJSIP printout information.
Setting PJSIP log level using the configuration file
About this task
Set PJSIP log level using the .xml configuration file to generate a detailed log message printout. For example, when you set a higher log level, you receive useful information for troubleshooting. When you boot the phone after provisioning, the setting file is changed depending on the configuration of the standard encryption use.
Before you begin
Obtain the configuration .xml file for Konftel 800.
Procedure
Open the configuration file.
In the <logging> section, locate the <pjsip_log_level> tag and set the necessary value.
The value range is from 0 to 5. The values correspond to the following five levels with different printout detalization:
• 0: Fatal
• 1: Error
• 2: Warning
• 3: Info
• 4: Debug
• 5: Trace. This is the most detailed printout.
Save the configuration file.
The phone reboots if the PJSIP log level value differs from the previously configured value.
On the web interface, the PJSIP Log Level value changes to reflect the value from the configuration file.
187
MAINTENANCE
Next steps
Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface.
Related information
on page 35
Network logs
You can get the traces of the phone network activities through the web interface in the Network Logs tab. The network logs can be useful for troubleshooting.
You can get network logs only after the phone reboots into Network logs mode.
Viewing network logs
About this task
Use this procedure to choose and form the network log messages through the web interface.
Procedure
On the web interface, click Network logs .
You can do the following:
• Click the Reboot Into Network Log Mode button to reboot the phone into
Network log mode.
• Click the Download Network Logs button to download the archive with the available network logs.
LICENSES
On the Licenses web page, you can get the general information about the use and other conditions for the third party components. This web page also contains a copyright URL by using which you can find and download the document with a complete list of the third party components and licenses.
You can get the license information only through the web interface.
188
SPECIFICATIONS
DEVICE SPECIFICATIONS
The following table lists the specifications that Konftel 800 supports:
Name
Power
Connectivity
Screen
Acoustics
Music
Speech
USB
Description
• PoE 802.3af
• PoE 802.3at
• PoE injector available as an accessory
• Ethernet RJ45 10/100 Mbps, PoE 802.3af, and PoE
802.3at
• USB 2.0 device
• Built-in Bluetooth ® LE and NFC
• Bluetooth ® Classic (HFP, A2DP)
• Daisy Chain (audio) ports (6-pin RJ-type)
Graphical touch screen with a resolution of approximately 480 x 800 and size of 4.3”
• 3 symmetrically placed MEMS microphones
• Full range speaker in the sealed enclosure
• PoE 802.3at: 91 dB and bass boost
• PoE 802.3af: 87 dB (audio output reduced due to lower PoE power level)
• Daisy Chain: 91 dB
• PoE 802.3at: 91 dB
• PoE 802.3af: 87 dB (audio output reduced due to lower PoE power level)
• Daisy Chain: 91 dB
• Micro USB 2.0 device Type B
• USB Type A
189
SPECIFICATIONS
Name
Bluetooth ®
Accessories
User interface
Description
• Bluetooth ® LE
• Bluetooth ® Classic (HFP, A2DP)
You can additionally purchase the following accessories:
• Konftel PoE kit
• Konftel Smart Microphones
• Konftel Daisy Chain kit
• Simplified user interface
• Functional keypad and dial pad
• LED indicators for call and connectivity status
Mobile app Konftel Unite. With the app, you can access your mobile phone contact book and calendar. The app is available for free at AppStore and Google Play
Device Configuration • Global .xml or MAC specific .xml configuration files
• Web GUI administration
190
APPENDIX A. ENCRYPTION METHODS IN
LEGACY ENCRYPTION MODE
ENCRYPTION METHODS IN LEGACY ENCRYPTION
MODE
The following table lists the encryption methods enabled and disabled in Legacy encryption mode:
Cipher
TLS_DHE_DSS_WITH_3DES_
EDE_CBC_SHA256
Y
802.1X LDAP SIP
TLS
Y
Y TLS_DHE_DSS_WITH_AES_12
8_CBC_SHA
Y
TLS_DHE_RSA_WITH_AES_12
8_GCM_SHA256
Y
TLS_DHE_RSA_WITH_AES_25
6_GCM_SHA384
Y
Y
Y
Y
Y
Y Y TLS_ECDH_ECDSA_WITH_AE
S_128_GCM_SHA256
Y
TLS_ECDH_ECDSA_WITH_AE
S_256_GCM_SHA384
Y
TLS_ECDH_RSA_WITH_AES_
128_GCM_SHA256
Y
TLS_ECDH_RSA_WITH_AES_
256_GCM_SHA384
Y
TLS_ECDHE_ECDSA_WITH_A
ES_128_GCM_SHA256
Y
Y
Y
Y
Y
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
N
N
N
N
N
N
Table continued…
191
APPENDIX A. ENCRYPTION METHODS IN LEGACY
ENCRYPTION MODE
Cipher
TLS_ECDHE_ECDSA_WITH_A
ES_256_GCM_SHA384
Y
802.1X LDAP SIP
TLS
Y Y
Y Y TLS_ECDHE_RSA_WITH_AES
_128_GCM_SHA256
Y
TLS_ECDHE_RSA_WITH_AES
_256_GCM_SHA384
Y Y Y
TLS_RSA_WITH_AES_128_GC
M_SHA256
Y
TLS_RSA_WITH_AES_256_GC
M_SHA384
Y
Y
Y
Y
Y
TLS_DHE_RSA_WITH_3DES_
EDE_CBC_SHA
Y
TLS_DHE_RSA_WITH_AES_12
8_CBC_SHA
Y
TLS_DHE_RSA_WITH_AES_12
8_CBC_SHA256
Y
TLS_DHE_RSA_WITH_AES_25
6_CBC_SHA
Y
Y
Y
Y
Y
Y
Y
Y
TLS_DHE_RSA_WITH_AES_25
6_CBC_SHA256
Y
TLS_ECDH_ECDSA_WITH_3D
ES_EDE_CBC_SHA
Y
TLS_ECDH_ECDSA_WITH_AE
S_128_CBC_SHA
Y
Y
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y N
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
N
N
N
N
Y
Y
Y
Y
Y
Y
Y
Table continued…
192
APPENDIX A. ENCRYPTION METHODS IN LEGACY
ENCRYPTION MODE
Cipher
TLS_ECDH_ECDSA_WITH_AE
S_128_CBC_SHA256
Y
802.1X LDAP SIP
TLS
Y Y
Y Y TLS_ECDH_ECDSA_WITH_AE
S_256_CBC_SHA
Y
TLS_ECDH_ECDSA_WITH_AE
S_256_CBC_SHA384
Y Y Y
Y TLS_ECDH_RSA_WITH_3DES
_EDE_CBC_SHA
Y
TLS_ECDH_RSA_WITH_AES_
128_CBC_SHA
Y
TLS_ECDH_RSA_WITH_AES_
128_CBC_SHA256
Y
Y
Y
Y
Y
TLS_ECDH_RSA_WITH_AES_
256_CBC_SHA
Y
TLS_ECDH_RSA_WITH_AES_
256_CBC_SHA384
Y
TLS_ECDHE_ECDSA_WITH_3
DES_EDE_CBC_SHA
Y
Y
Y
Y
Y
Y
TLS_ECDHE_ECDSA_WITH_A
ES_128_CBC_SHA
Y
TLS_ECDHE_ECDSA_WITH_A
ES_128_CBC_SHA256
Y
TLS_ECDHE_ECDSA_WITH_A
ES_256_CBC_SHA
Y
Y
Y
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Table continued…
193
APPENDIX A. ENCRYPTION METHODS IN LEGACY
ENCRYPTION MODE
Cipher
TLS_ECDHE_ECDSA_WITH_A
ES_256_CBC_SHA384
Y
802.1X LDAP SIP
TLS
Y Y
Y TLS_ECDHE_RSA_WITH_3DE
S_EDE_CBC_SHA
Y
TLS_ECDHE_RSA_WITH_AES
_128_CBC_SHA
Y Y Y
Y Y TLS_ECDHE_RSA_WITH_AES
_128_CBC_SHA256
Y
TLS_ECDHE_RSA_WITH_AES
_256_CBC_SHA
Y
TLS_ECDHE_RSA_WITH_AES
_256_CBC_SHA384
Y
TLS_RSA_WITH_3DES_EDE_
CBC_SHA
Y
TLS_RSA_WITH_AES_128_CB
C_SHA
Y
TLS_RSA_WITH_AES_128_CB
C_SHA256
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
TLS_RSA_WITH_AES_256_CB
C_SHA
Y
TLS_RSA_WITH_AES_256_CB
C_SHA256
Y
TLS_DHE_DSS_WITH_3DES_
EDE_CBC_SHA
TLS_DHE_DSS_WITH_AES_12
8_CBC_SHA256
Y
Y
Y
Y
HTTPS Legacy
Cipher
Y Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
194
Index
Special Characters
.xml file editing
modification
Numerics
802.1x
A
administration by using the touch screen
application to manage the phone
area code
B
Bluetooth audio streaming
paired devices connection
paired devices reconnection
Bluetooth device
Bluetooth radio
C
,
,
provisioning through SCEP
195
ceiling mode 175 ceiling mode for phone UI 175
ceiling mode for web application
centralized device management
converting the certificates
downloading the root certificate
certificate configuration file structure
certificate configuration files
changing password
configuration advance settings
centralized http/https server 22
HTTP/HTTPS server
migration
settings
usb ports
web interface
web interface settings
configuration file
export
import
INDEX configuration file (continued)
validation
configuring
Configuring the ceiling audio mode
connecting to a network with DHCP
connection using Bluetooth
connection layout
cross-site request forgery 160
D
daisy chain arranging
cascading
defining mode
disabling mode
expansion microphones 168 master phone 168
primary phone 171 secondary phone 171
slave phone
daisy chain arrangement
daisy chain mode
data input
length restriction
validation
Daylight Saving Time configuring through web interface
Device certificate
Device Management
device private key
,
,
196
DHCP configuration options
DHCP SSON
dimensions
,
,
DNS resiliency
DNS server
secondary
DTMF
E
EAP MD5 settings
encryption methods legacy encryption mode
expansion microphone automatic firmware upgrade
firmware upgrade termination
expansion microphones
F
factory reset
,
FIPS mode
media encryption with SRTP
firmware downgrading
firmware downgrade
configuration retention
firmware upgrade
INDEX firmware upgrade (continued) using mass storage device with
using mass storage device without administrator password
using USB mass storage device
G
G722 Priority
G729 Priority
H
headset lecture mode
configuring
host table mapping
hostname to ip address mapping
I
,
usb only user mode
iLBC Priority
individual device management 10
installing the certificate 148
K
key tone
L
LDAP
connection 35 dial options 35 settings 35
lecture mode
legacy encryption
encryption methods
licenses
197
M
media encryption with SRTP
FIPS mode
standard encryption
media port range configuration
,
,
N
NAT Traversal
network domain
hostname
network settings
O
Out-of-box experience
outbound Proxy
overview
P
password
PCMU Priority
phone management application configuring settings from the mobile device
deleting pairing
pairing and connecting devices
settings
phone reboot
INDEX phone reboot (continued) from the phone's user interface
phone settings
,
pick-up range
PJSIP log level
setting through web interface
setting using configuration file
PJSIP logs
PKCS12
power-saving mode
primary account
protection against CSRF
purpose
R
reboot device
rebooting the phone from the phone's user interface
registration with the ZTI device
remote port
remote syslog configuring
reset to factory default
to previous firmware version
root certificate
RTCP XR
enabling
quality estimate metrics
198
S
safety guidelines
SCEP
background polling
CA certificate provisioning 158
certificate management
configuring renewal request
secondary account
secondary phone
security methods 141 security protocols 141
Server Name Indication (SNI)
session Expiration
session Timers
setting PJSIP log level
using configuration file
setting static IP address
through the web interface
settings configuring on the phone
settings configuration through the web interface
registration status
SIP endpoint
,
SIP traces enable
Site Specific Option Number
manual upgrade
,
upgrade
,
SNI
INDEX
SNI (continued) configuring
,
specifications
SRTP
media encryption with SRTP
static IP
status
viewing
procedure
T
TLS
touch screen administration
transport protocol
TURN Server
U
USB media device
usb only user mode
volume control and synchronization
usb ports
Use Static Source Port configuring
V
valid input
viewing firmware version
MAC address
199 viewing (continued)
system logs
VLAN
VLAN ID
voice quality monitor settings
W
web access configuring on the phone
configuring through the web
configuring using the configuration file
web administration
web administrator
web interface
webapp debug
K O N F T E L . C O M
Konftel is a leading company within collaboration endpoint solutions. Since 1988, our mission has been to help people in businesses around the world to have meetings regardless of distance. We know that remote collaboration is an effective way to save time, money and contribute to a more sustainable world. We are Climate Neutral
Certified, offering customers an option to purchase video conferencing equipment while keeping a clear climate conscience. Crystal clear audio and a sharp video image are essential for efficient meetings; this is why we only focus on cutting-edge technology in our Collaboration Solutions. Our audio technology OmniSound ® is built into all Konftel Conference phones and devices. The products are sold globally under the Konftel brand and our headquarters are based in Sweden. Read more about the company and our products at konftel.com.
Konftel AB, Box 268, SE-901 06 Umeå, Sweden
Tel: +46 90 70 64 89 E-mail: [email protected]
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement
Key features
SIP conference phone with exceptional audio quality
4.3-inch touch screen LCD for easy navigation
Expansion microphone support for larger rooms
Bluetooth connectivity for mobile and PC devices
USB port for PC and video conference system connection
Centralized device management for simplified configuration
PoE support eliminates the need for a separate power supply
Frequently asked questions
When you power on the phone for the first time or after a factory reset, the phone will prompt you to set an administrator password. You can also set it through the web interface or the phone's touch screen.
You can upgrade or downgrade the firmware by using the web interface, a centralized management server, or a USB mass storage device.
Enable Bluetooth on your phone and the Bluetooth device. Then, pair and connect your phone with the Bluetooth device.
Connect the additional expansion microphones to the audio expansion ports on the conference phone.