Manuals / Polycom / Personal Care / Microscope & Magnifier

Polycom 3725-76302-001O manual Wait a few minutes to log back in. See also

Models: 3725-76302-001O

1 425

Download 425 pages 7.92 Kb

Page 62

System Security

5Wait a few minutes to log back in. See also:

System Security on page 39 Security Settings on page 50

The Consequences of Enabling Maximum Security Mode on page 55 Login Policy Settings on page 57

Access Policy Settings on page 60

Polycom, Inc.

62

Image 62

Polycom 3725-76302-001O manual Wait a few minutes to log back in. See also

Contents

Polycom RealPresence DMA 7000 System Page Contents Local Cluster Configuration System SecurityDevice Management MCU Management Integrations with Other Systems 152Superclustering Conference Manager ConfigurationCall Server Configuration Site Topology 278 System Management and Maintenance Users and GroupsContents Contents Page System Reports Polycom RealPresence DMA System Snmp Support419 Conference Manager Introduction to the Polycom RealPresence DMA SystemPolycom RealPresence DMA System’s Primary Functions Call Server RealPresence Platform APISVC Conferencing Support Polycom RealPresence DMA System’s Three Configurations Two-server Cluster ConfigurationSingle-server Configuration System Capabilities and Constraints Embedded DNS on System Port UsagePort Protocol Description Send Usage Data on Working in the Polycom RealPresence DMA System Polycom Solution SupportAccessing the Polycom RealPresence DMA System Field Input Requirements Settings Dialog BoxMenu/Icon Admin Provisioner Auditor Menu/Icon Admin Provisioner Auditor Menu/Icon Admin Provisioner Auditor Menu/Icon Admin Provisioner Auditor Modifying Open Source Code Open Source SoftwareLicense Information To replace an Lgpl library with your modified versionSystem configuration Confirming configurationAdditional DNS Records for SIP Proxy Additional DNS Records for the Optional Embedded DNS Feature Additional DNS Records for the H.323 GatekeeperLicense the Polycom RealPresence DMA System Verify That DNS Is Working for All AddressesLicense the RealPresence DMA System, Virtual Edition Set Up SignalingLicense the RealPresence DMA System, Appliance Edition Set Up Security Set Up MCUs Connect to Microsoft Active Directory Set Up Conference Templates Test the System Security Certificates Overview How Certificates WorkDER System Security Frequently Asked Questions Certificate Settings Column DescriptionField Description Certificate Information Dialog BoxCertificate Signing Request Dialog Box Section Description Add Certificates Dialog BoxCertificate Details Dialog Box To install a certificate for a trusted root CA Certificate ProceduresInstall a Certificate Authority’s Certificate Go to Admin Local Cluster CertificatesActions list, select Display Details To create a certificate signing requestActions list, select Add Certificates Actions list, select Create Certificate Signing RequestInstall a Certificate in the RealPresence DMA System Remove a Certificate from the RealPresence DMA System To remove a Trusted Root CA’s certificateSecurity Settings Actions list, select Delete CertificateCustom security Field Description Maximum securityHigh security Servers, not to allow ongoing use of unencrypted connections Subscribing endpoints are conference participants To change the security settings Go to Admin Local Cluster Security SettingsConsequences of Enabling Maximum Security Mode On the Troubleshooting Utilities menu, Top is removedSystem Security Login Policy Settings Password Complexity Local PasswordField Description Password Management SessionField Description Account Lockout Local User AccountUnlimited Account InactivityCustom Access Policy SettingsBanner Reset System Passwords To reset system passwordsWait a few minutes to log back in. See also Local Cluster Configuration Network SettingsField Description Server DhcpTurn on Auto-negotiation or set Speed and Duplex manually SettingsField Description Shared Management Network Shared Signaling Network General System NetworkRouting Configuration Dialog Box IPv6address%eth0Time Settings Field Description Active License LicensesLicenses for the Appliance Edition Activation KeysDMA Host Cluster Network SettingsLicenses for the Virtual Edition Licensing ServerSignaling Settings SIP SignalingUntrusted SIP Call Handling Configuration Device AuthenticationSIP Device Authentication Signaling Settings Fields Field Description SettingsSIP Settings Add Guest Port Dialog Box FieldEdit Guest Port Dialog Box Add Guest Prefix Dialog Box Prefix number for this entryEdit Guest Prefix Dialog Box Logging Settings Alert ID Threshold Condition Description Alerting SettingsLocal Cluster Configuration Procedures Select Product Activation Add LicensesTo request a software activation key code for each server Click GenerateGo to Admin Local Cluster Licenses Configure SignalingTo configure signaling Go to Admin Local Cluster Signaling SettingsUnder Unauthorized ports, click Add Under Unauthorized prefixes, click AddAutomatically Send Usage Data Configure LoggingTo configure logging To see the collected data Enable or Disable Automatic Data CollectionSee the Collected Data Device Management Active CallsCall Details Dialog Box Tab/Field/Column Description Call Info Call Events On the Call Server SettingsTab/Field/Column Description Bandwidth Subscription EventsQoS EndpointsTab/Field/Column Description Property Changes Registration policy script see Registration Policy on Registration Policy on Server Settings onCommand Description Names/Aliases in a Mixed H.323 and SIP Environment RegistrationsDevice Management Add Endpoint Dialog Box Edit Device Dialog Box Edit Devices Dialog Box Associate User Dialog Box Add Alias Dialog BoxEdit Alias Dialog Box Site Statistics Site Link StatisticsExternal Gatekeeper Add External Gatekeeper Dialog Box Column Description External GatekeeperPostliminary Authentication ModeEdit External Gatekeeper Dialog Box This script to open the Script Debugging Dialog Box for External SIP Peer Add External SIP Peer Dialog BoxField Description External SIP Peer UDPDomain List Temporarily select Use customized script AuthenticationField Description Postliminary To header optionsExternal Registration Lync IntegrationScheduled conferences is checked Edit External SIP Peer Dialog Box Host/domain name Field Description Domain List Field Description Authentication SIP Peer Postliminary Output Format Options To Header Format OptionsDefault To header for Microsoft. Equivalent to template Request-URI Header Format OptionsVariable Description Default Request-URI for Microsoft. Equivalent to templateFree Form Template Variables Original To Header Template Result Add Authentication Dialog BoxTo Header and Request-URI Header Examples Original Request-URI Header Template ResultEdit Authentication Dialog Box Add Outbound Registration Dialog BoxEdit Outbound Registration Dialog Box Template Variables onExternal H.323 SBC Device Management on Edit External H.323 SBC Dialog Box on Add External H.323 SBC Dialog Box Column Description External H.323 SBCEdit External H.323 SBC Dialog Box MCU Management MCUsPage Polycom, Inc 126 See SVC Conferencing Support on On page 234. It can register again Add MCU Dialog Box Field Description External MCU Prefix Dialog Box on Gateway Dialing Prefix Dialog Box on page 272. In this case, Profile. See Isdn Gateway Selection Process onMedia IP Addresses Edit MCU Dialog BoxField Description Gateway Profiles Polycom, Inc 134 Polycom, Inc 135 Direct dial-in prefixsession profile Polycom, Inc 137 Add Session Profile Dialog Box Edit Session Profile Dialog BoxTo view information about an MCU MCU ProceduresIsdn Gateway Selection Process To add an MCUTo edit an MCU To delete an MCU MCU Pools Edit MCU Pool Dialog Box CommandAdd MCU Pool Dialog Box ColumnTo edit an MCU Pool MCU Pool ProceduresTo add an MCU Pool To delete an MCU PoolMCU Pool Orders Add MCU Pool Order Dialog Box Edit MCU Pool Order Dialog Box MCU Selection ProcessMCU Availability and Reliability Tracking 24% To add an MCU Pool Order MCU Pool Order ProceduresTo view the MCU Pool Orders list To edit an MCU Pool OrderTo delete an MCU Pool Order Integrations with Other Systems Microsoft Active Directory IntegrationReport Microsoft Active DirectoryConnection Status Active Directory Connection Report reportUsers Report Understanding Base DN on Field Description Enterprise Conference Room ID Generation Enterprise Chairperson and Conference Passcode GenerationActive Directory Integration Procedure To integrate with Active DirectoryPolycom, Inc 158 Integrations with Other Systems Understanding Base DN Polycom, Inc 161 Adding Passcodes for Enterprise Users When you click Update on the Microsoft Active Directory About the System’s Directory QueriesGlobal Group Membership Search User SearchGroup Search Configurable Attribute Domain Search Attribute Replication SearchService Account Search Domain SearchScheduled Conferences Microsoft Lync 2013 IntegrationLync 2010 vs. Lync 2013 Integration Automatic Contact Creation and Configuration Lync and non-Lync Endpoint CollaborationPolycom, Inc 169 Lync 2010 and 2013 Client / Server Feature SupportConsiderations and Requirements for Lync 2013 Integration Integrate RealPresence DMA and Lync Required InformationSynchronize Lync Server and RealPresence DMA System Time Enable Windows Remote ShellInstall Certificates for the Lync Server Add the Lync Pool as an External SIP PeerEnable the Dial by Lync Conference ID Dial Rule To enable the Dial by Lync conference ID dial ruleConfigure System-wide Presence and Contact Creation Settings Add the RealPresence DMA System to the Lync Topology Diagnose Presence ProblemsOptional Edit Presence settings for Groups or Specific VMRs Microsoft Exchange Server Integration Microsoft Exchange Server Exchange Server Integration Procedure Resource Management System Integration Page Resource Management System Resource Management System Integration Procedures Join Resource Management System Dialog BoxTo integrate with a resource management system Juniper Networks SRC Integration Juniper Networks SRCJuniper Networks SRC Integration Procedure To configure SRC integrationConference Manager Configuration Conference SettingsConference Manager Configuration Presence Publishing Contacts presence settings belowCreate Polycom conference contacts check box is enabled Field Maximum Polycom conference contacts to publishGo to Admin Conference Manager Conference Settings Default Polycom conference contacts presence settingsTo specify conference settings Remove Contacts from Active Directory Dialog Box Select Publish presence for Polycom conference contactsStandalone Templates Conference TemplatesTwo Types of Templates Template Priority About Conference IVR Services About Cascading Cascading for BandwidthCascading for Size Conference Templates List Add Conference Template Dialog Box Field Description Common SettingsRMX General Settings See Two Types of Templates onVideo streams from each device to each device Field Description LPR RMX Gathering Settings Field Description RMX Video Quality Video switching is selected Conference mode is set to AVC only  TIP compatibility is set to either None or Video OnlyOptimized RMX Video SettingsTelepresence mode is Yes RMX Audio Settings RMX SkinsRMX Recording Field Description RMX Conference IVRSee Shared Number Dialing on Cisco Codian Edit Conference Template Dialog Box Polycom, Inc 207 Field Description LPR RMX Gathering Settings Field Description RMX Video Quality Polycom, Inc 212 Polycom, Inc 213 Field Description RMX Conference IVR Cisco Codian Select Layout Dialog Box Conference Templates ProceduresGo to Admin Conference Manager Conference Templates To select a video frames layoutTo change a conference template’s priority Click the RMX General Settings tabTo edit a conference template To delete a conference templateIVR Prompt Sets Prompt File Name Prompt Text Shared Number Dialing Polycom, Inc 221 Field Description Add Virtual Entry Queue Dialog Box Add Direct Dial Virtual Entry Queue Dialog Box Edit Virtual Entry Queue Dialog BoxEdit Direct Dial Virtual Entry Queue Dialog Box Superclustering About SuperclusteringRealPresence DMAs Polycom, Inc 228 Following table describes the fields on To create or join a supercluster Supercluster ProceduresJoin Supercluster Dialog Box Go to Network RealPresence DMAsActions list, click Join Supercluster To remove a cluster from the supercluster Actions list, select Remove from SuperclusterCall Server Configuration About the Call Server CapabilitiesModifications on Call Server SettingsField Description General Settings Call Server Configuration See External Gatekeeper on Gatekeeper Blacklist Settings DomainsMycompany domains, this would not match eng.mycompany.com Dial Rules Test Dial Rules Dialog Box Default Dial Plan and Suggestions for Modifications CallersipuriRule Effect Edit Site Dialog Box onH323xxxx@enterprisepartner.com Add Dial Rule Dialog Box Field Dial RuleField Description Preliminary Block Blocks the call Resolve to IP addressAvailable SIP peers / Selected SIP peers selection area Conference template configured in Admin Conference ManagerConference template  a Type of MicrosoftResolve to external address Edit Dial Rule Dialog Box Field Description Dial RuleBlock Blocks the call Resolve to IP address Polycom, Inc 250 Preliminary/Postliminary Scripting Variable Initial valueCallersitearea Usage example Dial Rule Action Output SIP HeadersScript Debugging Dialog Box for Preliminaries/Postliminaries Sample Preliminary and Postliminary Scripts Strip Prefix SIP Dialstring = Callersitecountrycode + Dialstring Hunt Groups Site Based Numeric Nicknames SIPHunt Group Members Add Hunt Group Dialog BoxField Description General Info Edit Hunt Group Dialog Box Shared Outbound Authentication Device AuthenticationInbound Authentication On the Inbound Authentication tab, you canField Description Inbound Authentication Field Description Shared Outbound Authentication Add Device Authentication Dialog BoxEdit Device Authentication Dialog Box Field Description Device AuthenticationRegistration Policy Registration Policy Scripting NoncompliantEpdefinedincma EPISIPV4 Script Debugging Dialog Box for Registration Policy Scripts Sample Registration Policy ScriptsIf EPH323DIALEDDIGITSALIAS0.length!= Return Noncompliant Polycom, Inc 270 Prefix Service Add Simplified Isdn Gateway Dialing Prefix Dialog Box Edit Vertical Service Code Dialog Box Edit Simplified Isdn Gateway Dialing Prefix Dialog BoxEmbedded DNS To enable DNS publishing Following table describes the fields on the Embedded DNSRecord Type Retention Limit When Limit Is Reached History Retention SettingsTo configure history record retention Number of Records PurgedCall Server Configuration on Site Topology About Site TopologySites Site Topology Device Types Site Information Dialog BoxField Site Info Description SubnetsTerritory Settings Field Description General Info General SettingsBandwidth Settings Add Site Dialog BoxField Description Isdn Number Assignment Isdn Outbound DialingRouting Isdn Range Assignment for did dialing methodIsdn Range Assignment for gateway extension dialing method Edit Site Dialog Box SIP RoutingField Description General Info General Settings Field Description Isdn Number Assignment Field Description Add Subnet Dialog Box Edit Subnet Dialog Box Site Links Add Site Link Dialog Box Edit Site Link Dialog BoxTo add a site-to-site exclusion Site-to-Site ExclusionsAdd Site-to-Site Exclusion Wizard Go to Network Site Topology Site-to-Site ExclusionsTerritories Column/Section DescriptionAssociated Sites pane Add Territory Dialog BoxTerritory Summary pane Field Description Territory InfoEdit Territory Dialog Box Field Cloud Info Network CloudsAdd Network Cloud Dialog Box See Add Site Link Dialog Box on Edit Network Cloud Dialog BoxField Description Associated Sites Field Cloud Info DescriptionGo to Network Site Topology Territories Site Topology Configuration ProceduresGo to Network Site Topology Sites Polycom, Inc 300 User Roles Overview Role DescriptionAdding Users Overview Users Are in the Local domain Add User Dialog Box See Add User Dialog Box onRooms Dialog Box on Associated EndpointsConference Passcodes Edit User Dialog BoxField Description Associated Roles Prompted see Authentication Required Dialog Box on Polycom, Inc 309 Conference Rooms Dialog Box Authentication Required Dialog BoxSelect Associated Endpoints Dialog Box Its conferences. See Conference Templates on Add Conference Room Dialog Box Conference Settings on Identity information to the right  Publish presence Defined on the Admin Conference Manager Conference SettingsConference Settings  Do not publish presenceConference see Edit Conference Template Dialog Box on User Dialog Box onEdit Conference Room Dialog Box Polycom, Inc 318 Polycom, Inc 319 Dial-out Participants list Edit Dial-out Participant Dialog Box Users ProceduresAdd Dial-out Participant Dialog Box To edit a user To find a user or usersTo add a local user Go to User UsersTo add a conference room to a user Conference Rooms ProceduresTo delete a local user To edit one of a user’s conference rooms To delete one of a user’s custom conference roomsGroups From the Search results box Import Enterprise Groups Dialog BoxConference Templates on See Conference Settings on Edit Group Dialog BoxSetting on the User Users Manage Conf Rooms dialog box Admin Conference Manager Conference SettingsManager Conference Settings Boxes on the Admin Conference Manager Conference SettingsEnterprise Groups Procedures Actions list, click Import Enterprise GroupsLogin Sessions To terminate a user’s login sessionChange Password Dialog Box Management and Maintenance Overview Administrator ResponsibilitiesAuditor Best Practices Administrative Best PracticesAuditor Responsibilities Provisioner Responsibilities Recommended Regular MaintenanceRegular archive of backups General system health and capacity checksSecurity configuration Microsoft Active Directory healthNetwork usage data export DashboardCertificates CDR exportActive Directory Integration Pane Call Server Active Calls PaneConference History Max Participants Pane Call Server Registrations PaneCluster Info Pane Conference Manager MCUs Pane Conference Manager Usage PaneResource Management System Integration Pane Exchange Server Integration PaneLicense Status Pane Territory Status Pane Signaling Settings PaneSupercluster Status Pane Alert User Login History PaneAlerts Cluster cluster is orphaned No clusters assigned to list of territoriesPolycom, Inc 344 Formatted string from server See also Alerts on Zero enterprise conference rooms exist on cluster cluster Polycom, Inc 348 Polycom, Inc 349 Polycom, Inc 350 Cluster cluster The server certificate has expired Certificates. See alsoCluster cluster One or more CA certificates have expired Polycom, Inc 353 Cannot connect to licensing server lserver for cluster DMA is not licensed for any callsCluster cluster a private network error exists on server Polycom, Inc 356 Polycom, Inc 357 Cluster cluster System version differs between servers Server server CPU utilization 50% and 75%Server server CPU utilization 75% Polycom, Inc 359 Cluster cluster Local users differ between servers MCU MCUname has count warnings MCU MCUname is currently out of serviceMCU MCUname is currently busied out MCU MCUname disconnected MCU mcu disconnect rate is 1MCU mcu call failure rate is MCU mcu disconnect rate isMCU mcu call failure rate is 0.4 MCU mcu is connected with no port capacity No territories configured to host conference rooms Conference VMR on MCU MCU failed to start reason Ongoing conference VMR on MCU MCU failed reasonPolycom, Inc 367 Polycom, Inc 368 Polycom, Inc 369 System Log Files Date and time that the log file archive was createdTo manually roll the system logs System Logs ProceduresTo download a log archive to your PC or workstation To delete a system log archiveTraceroute Troubleshooting UtilitiesPing TopNTP Status Diagnostics for your Dell ServerStats Backing Up and Restoring Confirm Restore Dialog Box SHA1Actions list, click Download Selected Backup and Restore ProceduresTo download a backup file Go to Maintenance Backup and Restore To create a new backup fileTo upload a backup file To restore from a backup file on the cluster Page Upgrading the Software Following table describes the parts of the Software Upgrade Go to Maintenance Software Upgrade Basic Upgrade ProceduresTo install an upgrade Return to Maintenance Software Upgrade To roll back an upgrade, restoring the previous version Polycom, Inc 385 Incompatible Software Version Supercluster Upgrades Factors to Consider for an Incremental Supercluster Upgrade Simplified Supercluster Upgrade Complete Service OutagePolycom, Inc 388 Polycom, Inc 389 Complex Supercluster Upgrade Some Service Maintained Adding a Second Server Expanding an Unpatched SystemExpanding a Patched System To replace a failed server in a two-server cluster Replacing a Failed ServerShutting Down and Restarting To start up a shut-down cluster Go to Maintenance Shutdown and RestartTo restart or shut down one or both servers in a cluster Alert History Call HistoryOriginator Dial String Destination Start Time End Time Conference History Export HistoryExport History Associated CallsConference Events Property ChangesCall Record Layouts Call Detail Records CDRsExporting CDR Data To download CDRsYYYY-MM-DDTHHMMSS.FFF+-ZHHMM 1024+768+384 Conference Room Dialog Box on 486BUSY Here720p30 Conference Record Layouts ConfConference room VMR see Edit Conference Room Dialog Box on Polycom RealPresence DMA System onValue from the Conference room pass-through to CDR field Registration History Report Registration History Procedures To find a device or devicesActive Directory Integration Report Groups with Partially Loaded or No Membership Information Active Directory IntegrationAll Domains To remove orphaned group data from the system Orphaned Groups and Users ProceduresOrphaned Groups and Users Report To remove orphaned user data from the systemConference Room Errors Report Exporting Conference Room Errors Data To download conference room errors dataEnterprise Passcode Errors Report Network Usage Report Exporting Enterprise Passcode Errors DataTo download enterprise passcode errors data Exporting Network Usage Data Field Description To download network usage data Snmp Overview Snmp FrameworkSnmp Versions Configure SnmpSnmp Notifications Go to Admin Local Cluster Snmp Settings Enable the Snmp AgentTo enable the Snmp agent Setting DescriptionTo add a notification user Go to Admin Local Cluster Snmp Settings Click Add UserAdd an Snmp Notification User To add an Snmp notification agent to the system Edit Notification User Dialog BoxAdd an Snmp Notification Agent Click Add AgentEdit Notification Agent Dialog Box Available Snmp MIBs Go to Admin Snmp Settings Click Download MIBsDownload MIBs To download the MIB package for a DMA system