Cisco Systems C90 manual Security settings

Page 53

Cisco TelePresence System Codec C90 and Profile 65” Dual using C90

Administrator guide

Contents

Introduction

Web interface

Advanced configuration

Password protection

Appendices

Contact us

Provisioning ExternalManager Address

Enter the IP Address to the External Manager/Management system. If an External Manager address and a path is configured, the system will post an HTTP message to this address when starting up. When receiving this HTTP posting the External Manager (typically a management system) can return configurations/commands to the unit as a result. If the DHCP Option 242 is returned in the DHCP response from the DHCP server the system will interpret this as the External Manager address to use.

Requires user role: ADMIN

Value space: <S: 0, 64>

Format: Only the valid IP address format is accepted. An IP address that contains letters (192.a.2.0) or unvalid IP addresses (192.0.1234.0) will be rejected.

Example: Provisioning ExternalManager Address: ""

Provisioning ExternalManager Protocol

Determine whether or not to use secure management.

Requires user role: ADMIN

Value space: <HTTP/HTTPS>

HTTP: Set to HTTP to disable secure management. Requires HTTP to be enabled in the NetworkServices HTTP Mode setting.

HTTPS: Set to HTTPS to enable secure management. Requires HTTPS to be enabled in the NetworkServices HTTPS Mode setting.

Example: Provisioning ExternalManager Protocol: HTTP

Provisioning ExternalManager Path

Set the path to the External Manager/Management system. If an External Manager address and a path is configured, the system will post an HTTP message to this address when starting up. When receiving this HTTP posting the External Manager (typically a management system) can return configurations/commands to the unit as a result. If the DHCP Option 242 is returned in the DHCP response from the DHCP server the system will interpret this as the External Manager address to use.

Requires user role: ADMIN

Value space: <S: 0, 255>

Format: String with a maximum of 255 characters.

Example: Provisioning ExternalManager Path: "tms/public/external/management/

SystemManagementService.asmx"

The Security settings

Security Audit Server Address

Enter the external/global IP-address to the audit syslog server.

Requires user role: AUDIT

Value space: <S: 0, 64>

Format: String with a maximum of 64 characters.

Example: Security Audit Server Address: ""

Security Audit Server Port

Enter the port of the syslog server that the system shall send its audit logs to. A user with AUDIT rights is required to change this setting.

Requires user role: AUDIT

Value space: <0..65535>

Range: Select a value from 0 to 65535.

Example: Security Audit Server Port: 514

Security Audit OnError Action

Describes what actions will be taken if connection to the syslog server is lost. A user with AUDIT rights is required to change this setting.

Requires user role: AUDIT

Value space: <Halt/Ignore>

Halt: If the connection to the syslog server is lost for more than a few seconds, the system will reboot and try to establish connection. If connection is restored, the audit logs are respooled to the syslog server, and the system starts up again.

Ignore: The system will continue its normal operation, and rotate internal logs when full. When connection is restored it will again sends its audit logs to the syslog server.

Example: Security Audit OnError Action: Ignore

Provisioning ExternalManager Domain

Enter the SIP domain for the provisioning server.

Requires user role: ADMIN

Value space: <S: 0, 64>

Format: String with a maximum of 64 characters.

Example: Provisioning ExternalManager Domain: "any.domain.com"

D14635.05 Profile C90 and Codec C90 Administrator Guide TC4.1, February 2011.

53

www.cisco.com

Copyright © 2010-2011 Cisco Systems, Inc. All rights reserved.

Image 53 Contents
Administrator guide Table of Contents How to use this guideAdministrator guide Chapter IntroductionUser documentation IntroductionWhat’s new­in this version New features and improvementsSoftware release notes Software download User documentationAdvanced configuration menu Touch controller Profile 65 Dual at a glanceApplication features Design featuresPerformance features Codec C90 at a glanceWeb interface Web interface Password protectionConnect to the codec SigningInteractive menus Menu optionsSystem Information System informationCall Making calls from the web interfaceSnapshot Making a snapshotSecurity mode Default user accountUser management User rolesPress Create new user About password and PIN-codeChange Password Changing your passwordFile format and picture size Custom wallpaperUpload and activate the wallpaper WallpaperLogon Banner Adding a logon bannerUpload the Trusted CA certificates list Uploading certificatesUpload Certificates Upload the SSL certificate Certificates for secure logging Enable secure audit loggingAbout audit logging Audit Certificate Upload the Audit certificate listCurrent log files Support log filesLogs Historical log files XML Files Viewing XML filesSoftware release notes and upgrade files Software upgradeUpgrade Software Option key Software versionsAdvanced Configuration Advanced configurationRestart Restarting the systemAdvanced configuration settings Advanced configuration overview Network 1..1 RemoteAccess Allow Administrator guide Administrator guide Audio settings Audio Input Line 1..4 Mode Audio Input Microphone 1..8 EchoControl ModeAudio Input Line 1..4 Channel Audio Input Line 1..4 LevelAudio Input Microphone 1..8 Level Audio Output Hdmi 1, 3 ModeAudio Input Microphone 1..8 Type Audio Output Hdmi 1, 3 LevelAudio Output Line 1..6 Equalizer Mode Audio Output Line 1..6 ModeAudio SoundsAndAlerts KeyTones Mode Audio Output Line 1..6 ChannelCameras settings Cameras Camera 1..7 Whitebalance Mode Cameras Camera 1..7 Focus ModeCameras Camera 1..7 Flip Cameras Camera 1..7 IrSensorConference settings Conference 1..1 FarEndControl Mode Conference 1..1 DoNotDisturb ModeConference 1..1 Encryption Mode Conference 1..1 DefaultCall ProtocolConference 1..1 PacketLossResilience Mode Conference 1..1 VideoBandwidth ModeConference 1..1 VideoBandwidth MainChannel Weight Conference 1..1 VideoBandwidth PresentationChannel WeightH323 settings Gpio settingsH323 Profile 1..1 Authentication Password H323 Profile 1..1 Authentication LoginNameH323 Profile 1..1 CallSetup Mode H323 Profile 1..1 Gatekeeper DiscoveryNetwork settings Network 1..1 IPv4 Address Network 1..1 QoS ModeNetwork 1..1 IPv6 Assignment Network 1..1 IPv4 GatewayNetwork 1..1 IEEE8021X Mode Network 1..1 QoS Diffserv SignallingNetwork 1..1 IEEE8021X Password Network 1..1 QoS Diffserv DataNetwork 1..1 RemoteAccess Allow Network 1..1 TrafficControl ModeNetwork 1..1 IEEE8021X AnonymousIdentity Network 1..1 IEEE8021X Eap Md5Network 1..1 Vlan Voice Mode NetworkPort settingsNetworkPort 2 Mode Network 1..1 Vlan Voice VlanIdNetworkServices settings NetworkServices NTP Address NetworkServices NTP Mode NetworkServices SIP Mode NetworkServices Snmp ModeNetworkServices Telnet Mode NetworkServices Snmp SystemContactNetworkServices Snmp SystemLocation NetworkServices SSH ModeProvisioning settings Phonebook settingsSecurity settings Security Audit Logging Mode SerialPort settingsSerialPort Mode SerialPort BaudRate Security Session InactivityTimeoutSIP settings Standby settings SystemUnit settings SystemUnit CallLogging Mode Time settingsSystemUnit IrSensor Mode Time DateFormatVideo DefaultPresentationSource Video settingsTime Zone Video Input DVI 3, 5 TypeVideo Input Source 5 Connector Video Input Source 1 ConnectorVideo Input Source 2 Connector Video Input Source 3 ConnectorVideo Input Source 1..5 OptimalDefinition Threshold60fps Video Input Source 1..5 OptimalDefinition ProfileVideo Input Source 1..5 Quality Video Layout ScalingVideo Layout LocalLayoutFamily Video Layout ScaleToFrameVideo Layout ScaleToFrameThreshold Video SelfviewPositionVideo Monitors Video OSD ModeVideo OSD Output Video OSD TodaysBookingsVideo Output Hdmi 1, 3 Resolution Video OSD LoginRequiredVideo Output Hdmi 1, 3 OverscanLevel Video AllowWebSnapshotsVideo Output Composite 5 Resolution Video Output DVI 2, 4 ResolutionVideo Output DVI 2, 4 OverscanLevel Video Output Composite 5 OverscanLevelExperimental AudioTracking Camera 1..7 Mode Experimental settingsExperimental BrightnessGradient Camera 1..7 Mode Video WallPaperExperimental SoftwareUpgrade ServerAddress Experimental SoftwareUpgrade ModeExperimental SystemUnit Controller Address Experimental CapsetFilterExperimental NetworkServices UPnP Timeout Experimental NetworkServices UPnP ModeExperimental Audio Input Microphone 1..8 Channel Experimental Audio MicrophoneReinforcement GainExperimental Audio Panning MonitorRight Experimental Audio Panning ModeExperimental SystemUnit MenuType Experimental Audio Panning MaxAnglePassword protection Change your codec password Password protectionSet the Administrator settings menu password Set a root password Change the user passwordsAppendices Administrator guide Main monitor About monitors when you have a Codec C90# * # 0 2 # Dual monitorsVideo compositor Audio console TC consoleOptimal definition profiles for systems supporting 720p60 Optimal definition profilesClearPath Packet loss resilience Administrator guide Default configurations Configure the video inputsVideo input matrix About the matrixDnam Amplifier Dnam for ProfileDnam Loudspeaker Profile 65 Dual Technical specificationsSystem Management Approvals Codec C90 Network Interfaces Directory Services Approvals Contact us