Page 1 FortiVoice ™ Enterprise Phone System 4.0.0 Administration Guide...
Page 2 Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet's internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate.
Page 3: Table Of Contents
Viewing conference calls ................. 25 Viewing extension status ................. 25 Viewing hot desking configurations ..............26 Viewing trunk status..................27 Viewing unassigned phones ................27 Viewing DHCP client list .................. 28 Fortinet Technologies Inc. Page 3 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 4 Managing certificates..................... 88 Managing local certificates ................89 Obtaining and installing a local certificate ............90 Managing certificate authority certificates............95 Managing the certificate revocation list ............96 Fortinet Technologies Inc. Page 4 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 5 Working with virtual numbers ................165 Configuring Trunks..................167 Setting up VoIP trunks ..................167 Testing SIP trunks..................172 Creating a SIP trunk with FortiCall service ............ 173 Fortinet Technologies Inc. Page 5 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 6 Archiving faxes....................236 Modifying feature access codes................237 Configuring Logs and Reports ..............241 About FortiVoice logging ..................241 FortiVoice log types ..................241 Log message severity levels ................242 Fortinet Technologies Inc. Page 6 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 7 Reconnecting to the FortiVoice unit............... 261 Restoring the configuration................262 Verifying the configuration ................263 Upgrading ...................... 263 Clean installing firmware..................264 Appendix A: Installing Click-to-Dial software..........266 Index ......................267 Fortinet Technologies Inc. Page 7 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 8: Introduction
This document describes how to configure and use the FortiVoice phone system. Only the configuration procedures through the web-based manager are provided. For configuration...
Page 9: Documentation
Many Fortinet publications are available on the Fortinet Tools and Documentation CD shipped with your Fortinet product. The documents on this CD are current at shipping time. For current versions of Fortinet documentation, visit the Fortinet Technical Documentation web site, http://docs.fortinet.com.
Page 10: Cautions And Notes
RFC 1918: Address Allocation for Private Internets, available at http://ietf.org/rfc/rfc1918.txt?number-1918. Cautions and notes Fortinet technical documentation uses the following guidance and styles for cautions and notes. Warns you about commands or procedures that could have unexpected or undesirable results including loss of data or damage to equipment.
Page 11: Command Syntax Conventions
Table 1: Typographical conventions in Fortinet technical documentation Navigation Go to Monitor > Status > DHCP. Publication For details, see the FortiGate Administration Guide. Command syntax conventions The command line interface (CLI) requires that you use valid syntax, and conform to expected input constraints.
Page 12 • <xxx_int>: An integer number that is not another data type, such as 15 for the number of minutes. Fortinet Technologies Inc. Page 12 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 13 If the option adds to or subtracts from the existing list of options, instead of replacing it, or if the list is comma-delimited, the exception will be noted. Fortinet Technologies Inc. Page 13 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 14: Connecting To The Fortivoice System
“System Information widget” on page Until the FortiVoice unit is configured with an IP address and connected to your network, you may prefer to connect the FortiVoice unit directly to your management computer, or through a switch, in a peer network that is isolated from your overall network. However, isolation is not required.
Page 15: Connecting To The Web-Based Manager
HTTPS connection to the FortiVoice unit. When you connect, depending on your web browser and prior access of the FortiVoice unit, your browser might display two security warnings related to this certificate: •...
Page 16: Connecting To The Cli
To connect to the CLI using a local serial console connection, you must have: • a computer with a serial communications (COM) port • the RJ-45-to-DB-9 serial or null modem cable included in your FortiVoice package • terminal emulation software, such as HyperTerminal for Microsoft Windows To connect to the CLI using an SSH connection, you must have: •...
Page 17 The SSH client may display a warning if this is the first time you are connecting to the FortiVoice unit and its SSH key is not yet recognized by your SSH client, or if you have previously connected to the FortiVoice unit but it used a different IP address or SSH key. If your management computer is directly connected to the FortiVoice unit with no network hosts between them, this is normal.
Page 18: Setting Up The System Using The Wizard
If the SIP phone and the FortiVoice unit (PBX) are on different subnets, proper routing should be set to make them reachable If you make a office peer test call, make sure that your FortiVoice unit and the peer office PBX are mutually registered. For more information, see “Configuring office peers”...
Page 19: Configuring Setups For Phone Users
This section contains information that you may need to inform or assist your phone users so that they can use the FortiVoice features. This information is not the same as what is included in the help for FortiVoice user web portal. It is included in this guide because: •...
Page 20: Changing The User Pin
For the phone users to access the web portal, you need to inform phone users of: • the web portal URL (same with that of the FortiVoice unit except without /admin in the end) • their extension numbers, and • the default user PINs.
Page 21: Monitoring The Fortivoice System
Status > Dashboard displays first after you log in to the web-based manager. It contains a dashboard with widgets that each indicates performance level or other statistics. By default, widgets display the serial number and current system status of the FortiVoice unit, including uptime, system resource usage, service status, firmware version, system time, and statistics history.
Page 22 License Information widget The License Information widget displays the last queried license statuses for the number of extensions supported (if you use FortiVoice VM) and hotel management (if you have purchased this option). Depending on the license you have purchased, when you first access the FortiVoice web-based manager, you need to upload the license to enable the functions you need.
Page 23 Update license and browse for the license file. A full VMware license is required to upload a hotel management license onto the FortiVoice VM. To view the widget, go to Status > Dashboard. If the widget is not currently shown, click Add Content, and mark the check box for the widget.
Page 24: Viewing The Call Statistics
Reloading allows the FortiVoice unit to reload its configuration from its last saved version, and log you out. Any changes that were in progress but not yet saved, such as GUI pages that were not applied or CLI commands where you had not yet entered next or end, are lost. If you want to continue configuring the FortiVoice unit, refresh your browser and log in again.
Page 25: Viewing Parked Calls
Status > Phone System > Extensions displays all the extensions in realtime, including their statuses, IDs, numbers, display names, types, IPs for SIP extensions, and phone information. For more information, see “Configuring Extensions” on page 130. Fortinet Technologies Inc. Page 25 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 26: Viewing Hot Desking Configurations
The name displaying on the extension. This is usually the name of the extension user. Type The type for this extension, such as SIP or analog (for the FortiVoice 200D-T and 2000E-T2 models). The link to the IP address of the phone using the extension number. Click to interface with the extension and configure it remotely by entering the login information.
Page 27: Viewing Trunk Status
FortiVoice unit but not assigned to any extensions yet. Once an unassigned phone connects to the FortiVoice unit and is auto-discovered, the FortiVoice unit assigns an IP address to the phone and sends the basic PBX setup information to it.
Page 28: Viewing Dhcp Client List
Select to save the unassigned phone list in csv format. The Media Access Control address (MAC address) of the unassigned phone. The IP address of the unassigned phone assigned by the FortiVoice unit. Vendor The brand name of the unassigned phone.
Page 29 (Opt66) value. For more information, see “Configuring DHCP server” on page • If the FortiVoice unit and the SIP phone with an IP assigned by a DHCP server are on different subnets, proper route should be set to make them reachable.
Page 30: Viewing Call/Fax Storage
For information on configuring recording calls, see “Recording calls” on page 218. Viewing current fax accounts The Fax tab lists the fax accounts created on the FortiVoice unit. For more information about creating fax accounts, see “Configuring fax” on page 227.
Page 31: Viewing Fax Queues
You can also click Download PDF to save a fax. To search the locally archived faxes, click Search. Viewing fax queues The Fax Queue tab lists the faxes waiting to be sent on the FortiVoice unit. For more information about fax, see “Configuring fax” on page 227.
Page 32: Viewing Log Messages
Viewing log messages The Logs submenu displays locally stored log files. If you configured the FortiVoice unit to store log messages locally (that is, to the hard disk), you can view the log messages currently stored in each log file.
Page 33 However, when viewing this columnar display, you can also view the log message in raw format by hovering your mouse over the index number of the log message, in the # column, as shown in Figure Fortinet Technologies Inc. Page 33 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 34: Displaying And Arranging Log Columns
Columns to display the list of available columns, then mark the check boxes of columns that you want to display. Fortinet Technologies Inc. Page 34 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 35: Using The Right-Click Pop-Up Menus
Using the right-click pop-up menus When you right-click on a log message, a context menu appears. Figure 9: Using the right-click menus on log reports Right-click pop-up menus Fortinet Technologies Inc. Page 35 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 36: Searching Log Messages
Message Enter all or part of the Message log field. Log ID Enter all or part of the log ID in the log message. Fortinet Technologies Inc. Page 36 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 37: Viewing Phone Directories
• Contain: searches for the exact match. • Wildcard: supports wildcards in the entered search criteria. 5. Click Apply. The FortiVoice unit searches your currently selected log file for log messages that match your search criteria, and displays any matching log messages. Viewing phone directories The Directory tab displays the local, remote, and peer office extensions.
Page 38: Configuring System Settings
• Maintaining the system Configuring network settings The Network submenu provides options to configure network connectivity and administrative access to the web-based manager or CLI of the FortiVoice unit through each network interface. This topic includes: • About IPv6 Support •...
Page 39: About The Management Ip
• Trunk About the management IP The FortiVoice unit has an IP address for administrators to configure it through a network connection rather than a local console. The management IP address enables administrators to connect to the FortiVoice unit through port1 or other network ports, even when they are currently bridging.
Page 40: Configuring The Network Interfaces
The System > Network > Network tab displays the FortiVoice unit’s network interfaces. You must configure at least one network interface for the FortiVoice unit to connect to your network. Depending on your network topology and other considerations, you can connect the FortiVoice unit to your network using two or more of the network interfaces.
Page 41 HTTPS or SSH. Failure to restrict administrative access could compromise the security of your FortiVoice unit. You can restrict which IP addresses are permitted to log in as a FortiVoice administrator through network interfaces. For details, see “Configuring administrator accounts”...
Page 42 If you are editing an existing interface, this field displays the name (such as port2) and media access control (MAC) address for this network interface. If you are creating a logical interface, enter a name for the interface. Fortinet Technologies Inc. Page 42 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 43 • Manual: Select to enter the IP address or IPv6 address and netmask for the network interface in IP/Netmask or IPv6/Netmask. • DHCP: Select and click Update request to retrieve a dynamic IP address using DHCP. Fortinet Technologies Inc. Page 43 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 44 Access Enable protocols that this network interface should accept for connections to the FortiVoice unit itself. (These options do not affect connections that will travel through the FortiVoice unit.) • HTTPS: Enable to allow secure HTTPS connections to the web-based manager, and extension user account through this network interface.
Page 45: Configuring Static Routes
IP addresses. To determine which route a packet will be subject to, the FortiVoice unit compares the packet’s destination IP address to those of the static routes and forwards the packet to the route with the large prefix match.
Page 46: Configuring Dns
4. Select the interface that this route applies to. 5. In Gateway, type the IP address of the next-hop router to which the FortiVoice unit will forward packets subject to this static route. This router must know how to route packets to the destination IP addresses that you have specified in Destination IP/netmask.
Page 47 Interface Select an interface for the DHCP server from the drop-down list. If this FortiVoice is in HA mode, make sure that the slave unit has the same interface as the master unit. For information on HA, “Using high availability” on page...
Page 48: Capturing Voice And Fax Packets
• intermittent missing PING packets. If you are running a constant traffic application such as ping, packet sniffing can tell you if the traffic is reaching the destination, how the port enters and exits the FortiVoice unit, if the ARP Fortinet Technologies Inc.
Page 49 • Capture all: All network traffic will be captured. 8. For Exclusion, enter the IP addresses/host names and port numbers of which you do not want to capture voice traffic. 9. Click Create. Fortinet Technologies Inc. Page 49 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 50: Configuring Administrator Accounts And Access Profiles
Configuring administrator profiles Configuring administrator accounts The Administrators tab displays a list of the FortiVoice unit’s administrator accounts and the trusted host IP addresses administrators use to log in (if configured). By default, FortiVoice units have a single administrator account, admin. For more granular control over administrative access, you can create additional administrator accounts with restricted permissions.
Page 51 Associate extension Enter the extension for the administrator account. If you add an extension, a User portal icon appears at the top of the web-based manager when you log into the FortiVoice unit. Clicking the icon opens the user web portal.
Page 52: Configuring Administrator Profiles
Enter an IPv4 or IPv6 address or subnet from which this administrator can log in. If you want the administrator to access the FortiVoice unit from any IP address, use 0.0.0.0/0.0.0.0. Enter the IP address and netmask in dotted decimal format. For...
Page 53: Using High Availability
5. Click Create. Using high availability Go to System > High Availability to configure the FortiVoice unit to act as a high availability (HA) member in order to increase availability. For the general procedure of how to enable and configure HA, see “How to use HA”...
Page 54: About The Heartbeat And Synchronization" On Page
For example, FortiVoice 200D and 200D-T models cannot be in the same HA group due to hardware differences, but 200D and FortiVoice VM can be in the same group because neither of them has PRI or FXS/FXO ports.
Page 55: About The Heartbeat And Synchronization
Heartbeat and synchronization traffic consists of TCP packets transmitted between the FortiVoice units in the HA group through the primary and secondary heartbeat interfaces. Service monitoring traffic can also, for short periods, be used as a heartbeat. For details, see “Remote services as heartbeat”...
Page 56: How To Use Ha
Table 6: HA settings not synchronized Interface Each FortiVoice unit in the HA group must be configured with different configuration network interface settings for connectivity purposes. For details, see “Configuring the network interfaces” on page Exceptions include some active-passive HA settings which affect the interface configuration for failover purposes.
Page 57: Monitoring The Ha Status
The Status tab in the High Availability submenu shows the configured HA mode of operation of a FortiVoice unit in an HA group. You can also manually initiate synchronization and reset the HA mode of operation. A reset may be required if a FortiVoice unit’s effective HA mode of operation differs from its configured HA mode of operation, such as after a failover when a configured primary unit is currently acting as a secondary unit.
Page 58 For information on configuring the HA operating mode, see “Mode of operation” on page After a failure, the FortiVoice unit may not be acting in its configured HA operating mode. For details, see “Effective Operating Mode” on page...
Page 59 “Configuration settings that are not data sync synchronized” on page click HERE to Click to reset the FortiVoice unit to an effective HA operating restore mode that matches the FortiVoice unit’s configured operating configured mode. operating For example, for a configured primary unit whose effective HA...
Page 60: Configuring The Ha Mode And Group
(HA) options, including: • enabling HA • whether this individual FortiVoice unit will act as a primary unit or a secondary unit in the group • network interfaces that will be used for heartbeat and synchronization and virtual IP •...
Page 61 For more information on heartbeat and synchronization, see “About the heartbeat and synchronization” on page You can directly connect the heartbeat network interfaces of the two FortiVoice units using a crossover Ethernet cable. To configure HA options 1.
Page 62: Go To System > High Availability > Configuration
HA group. • off: The FortiVoice unit is not operating in HA mode. • master: The FortiVoice unit is the primary unit in an active-passive HA group. • slave: The FortiVoice unit is the secondary unit in an active-passive HA group.
Page 63: Configuring Interface Monitoring
Configuring interface monitoring Interface monitor checks the local interfaces on the primary unit. If a malfunctioning interface is detected, a failover will be triggered. Fortinet Technologies Inc. Page 63 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 64 HA group. When configuring the other FortiVoice unit in the HA group, use this value as the remote peer IP. 5. Select a row in the table and click Edit to configure the following HA settings on the interface.
Page 65 Similarly, for the secondary heartbeat network interface, enter the IP address of the other unit’s secondary heartbeat network interface. For information about configuration synchronization and what is not synchronized, see “About the heartbeat and synchronization” on page Fortinet Technologies Inc. Page 65 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 66: Configuring Service-Based Failover
Select whether and how to configure the IP addresses and netmasks of the action FortiVoice unit whose effective HA mode of operation is currently master. For example, a primary unit might be configured to receive phone call traffic through port1 and receive heartbeat and synchronization traffic through port3 and port4.
Page 67: Example: Failover Scenarios
Specify the number of consecutively failed tests that are allowed before the local interface or hard drive is deemed unresponsive and a failover occurs. Example: Failover scenarios This section describes basic FortiVoice active-passive HA failover scenarios. For each scenario, refer to the HA group shown in Figure 23.
Page 68 There is no data loss when failover happens although active calls are disconnected and line appearance and extension appearance take time to restore. Call data consists of the FortiVoice call detailed records, recorded calls, voicemail, call directories, fax, and voice prompts. The user web portal is not affected.
Page 69 On recovery, P1’s effective HA operating mode becomes slave, and S2 continues to assume the master role. P1 then synchronizes with the current master unit, S2. For information on manually restoring the FortiVoice unit to acting in its configured HA mode of operation, see “click HERE to restore configured operating mode” on page...
Page 70 If the primary heartbeat link fails, such as when the cable becomes accidentally disconnected, and if you have not configured a secondary heartbeat link, the FortiVoice units in the HA group cannot verify that other units are operating and assume that the other has failed. As a result, the Fortinet Technologies Inc.
Page 71 Because the hardware failure is not permanent (that is, the failure of the heartbeat link was caused by a disconnected cable, not a failed port on one of the FortiVoice units), you may want to return both FortiVoice units to operating in their configured modes when rejoining the failed primary unit to the HA group.
Page 72 S2. S2 can now deliver the calls. The HA group continues to operate in this manner until an administrator resets the effective HA modes of operation of the FortiVoice units. 1. The FortiVoice HA group is operating normally.
Page 73: Configuring System Time, System Options, Snmp, Email Setting, And Gui Appearance
10.P1 records the log messages (among others) indicating that P1 is switching to Failed mode. Recovering from a network connection failure Because the network connection failure was not caused by failure of either FortiVoice unit, you may want to return both FortiVoice units to operating in their configured modes when rejoining the failed primary unit to the HA group.
Page 74: Configuring The Time And Date
The System > Configuration > Time tab lets you configure the system time and date of the FortiVoice unit. You can either manually set the FortiVoice system time or configure the FortiVoice unit to automatically keep its system time correct by synchronizing with Network Time Protocol (NTP) servers.
Page 75: Configuring System Options
FortiVoice unit to synchronize its time with the NTP server. Set date Select this option to manually set the date and time of the FortiVoice unit’s clock, then select the Year, Month, Day, Hour, Minute, and Second fields before you click Apply.
Page 76 GUI field Description Idle timeout Enter the amount of time that an administrator may be inactive before the FortiVoice unit automatically logs out the administrator. For better security, use a low idle timeout value. Fortinet Technologies Inc. Page 76 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 77 • PIN special: Select to include * or # or both in the PIN. • Apply PIN policy to: Select Voicemail users to apply the policy to FortiVoice phone users’ user PIN. If any PIN does not conform to the policy, require that user to change the PIN at the next login.
Page 78: Configuring Snmp Queries And Traps
Configuring SNMP queries and traps Go to System > Configuration > SNMP to configure SNMP to monitor FortiVoice system events and thresholds, or a high availability (HA) configuration for failover messages. To monitor FortiVoice system information and receive FortiVoice traps, you must compile Fortinet proprietary MIBs as well as Fortinet-supported standard MIBs into your SNMP manager.
Page 79 GUI field Description SNMP agent Enable to activate the FortiVoice SNMP agent. This must be enabled enable to accept queries from SNMP managers or send traps from the FortiVoice unit. Description Enter a descriptive name for the FortiVoice unit. Location Enter the location of the FortiVoice unit.
Page 80 You can add up to three SNMP communities so that SNMP managers can connect to the FortiVoice unit to view system information and receive SNMP traps. You can configure each community differently for SNMP traps and to monitor different events. You can add the IP addresses of up to eight SNMP managers to each community.
Page 81 Configuring an SNMP v3 user SNMP v3 adds more security by using authentication and privacy encryption. You can specify an SNMP v3 user on FortiVoice so that SNMP managers can connect to the FortiVoice unit to view system information and receive SNMP traps.
Page 82 Your SNMP manager may already include standard and private MIBs in a compiled database that is ready to use. You must add the Fortinet proprietary MIB to this database. If the standard MIBs used by the Fortinet SNMP agent are already compiled into your SNMP manager you do not have to compile them again.
Page 83 The FortiVoice unit’s SNMP agent can send traps to SNMP managers that you have added to SNMP communities. To receive traps, you must load and compile the FortiVoice trap MIB into the SNMP manager. All traps sent include the trap message as well as the FortiVoice unit serial number and host name. MIB fields...
Page 84: Configuring Email Settings
The reason for the HA event. Configuring email settings You can configure the FortiVoice unit to send email notifications to phone users when they miss a phone call or receive a voicemail or fax. For phone users to receive the notifications, you need to add their email addresses when configuring the extensions.
Page 85 Local Host Host name Enter the host name of the FortiVoice unit, such as fortivoice-200D. Local domain name Enter the local domain name of the FortiVoice unit, such as example.com. Mail Queue Maximum time for Enter the maximum number of hours that deferred email...
Page 86: Customizing The Gui Appearance
Select the checkbox and click the arrow to expand the section Required: and configure: • User name: Enter the name of the FortiVoice unit’s account on the SMTP relay. • Password: Enter the password for the FortiVoice unit’s user name.
Page 87 Note: Uploading a graphic overwrites the current graphic. The FortiVoice unit does not retain previous or default graphics. If you want to revert to the current graphic, use your web browser to save a backup copy of the image to your management computer, enabling you to upload it again at a later time.
Page 88: Managing Certificates
4. Click Apply to save changes or Reset to return to the default settings. Managing certificates This section explains how to manage X.509 security certificates using the FortiVoice web-based manager. Using the Certificate submenu, you can generate certificate requests, install signed certificates, import CA root certificates and certificate revocation lists, and back up and restore installed certificates and private keys.
Page 89: Managing Local Certificates
On this tab, you can also generate certificate signing requests and import signed certificates in order to install them for local use by the FortiVoice unit. FortiVoice units require a local server certificate that it can present when clients request secure connections, including: •...
Page 90: Obtaining And Installing A Local Certificate
“Importing a certificate” on page 94 • Generate a certificate signing request on the FortiVoice unit, get the request signed by a CA, and import the signed certificate into the FortiVoice unit. For the second method, follow these steps: •...
Page 91 Generating a certificate signing request You can generate a certificate request file, based on the information you enter to identify the FortiVoice unit. Certificate request files can then be submitted for verification and signing by a certificate authority (CA). For other related steps, see “Obtaining and installing a local certificate”...
Page 92 FortiVoice unit has a static IP address, a fully-qualified domain name (FQDN), and by the primary intended use of the certificate. For example, if your FortiVoice unit has both a static IP address and a domain name, but you will primarily use the local certificate for...
Page 93 3. Follow your CA’s instructions to download their root certificate and Certificate Revocation List (CRL), and then install the root certificate and CRL on each remote client. 4. When you receive the signed certificate from the CA, install the certificate on the FortiVoice unit. For more information, see “Importing a certificate”...
Page 94 CA. The CA will then sign the certificate and return it to you for installation on the FortiVoice unit. To install the certificate, you must import it. For other related steps, see “Obtaining and installing a...
Page 95: Managing Certificate Authority Certificates
This option appears only when Type is PKCS12 certificate or Certificate. 5. Click OK. Downloading a PKCS #12 certificate You can export certificates from the FortiVoice unit to a PKCS #12 file for secure download and import to another platform, or for backup purposes. To download a PKCS #12 file 1.
Page 96: Managing The Certificate Revocation List
In addition to backing up your configuration manually, you can also configure a schedule to back up the configuration automatically to the FortiVoice local hard drive or a remote FTP/SFTP server.
Page 97: Downloading A Trace File
“Installing firmware” on page 259. Downloading a trace file If Fortinet Technical Support requests a trace log for system analysis purposes, you can download one using the web-based manager. Trace logs are compressed into an archive (.gz), and contain information that is supplementary to debug-level log files.
Page 98: Configuring Phone System Settings
Configuring Phone System Settings The Phone System menu lets you configure the FortiVoice PBX settings and other features for managing phone calls. This topic includes: • Configuring phone system settings • Configuring advanced phone system settings • Managing sound files and music on hold •...
Page 99: Configuring Pbx Options
The Phone System > Settings > Options tab lets you configure the pattern and number of digits you want the FortiVoice unit to use for phone numbers, speed dials, and prefixes as well as the default FortiVoice system settings. These settings apply to all extensions unless you change them when configuring the extensions.
Page 100 Matches any number that starts with 011 and has at least one more digit. To configure PBX options 1. Go to Phone System > Settings > Options. 2. Configure the following: Fortinet Technologies Inc. Page 100 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 101 Enter the allowed phone number prefix, such as 800. Click the + prefix sign to add up to 10. Operator extension Enter the extension for the operator of the FortiVoice unit. Supporting Enter the extension for technical support of the FortiVoice unit.
Page 102: Customizing Email History Report And Notification Email Templates
Go to Phone System > Settings > Custom Message to view and reword the default email history report and notification email templates. The FortiVoice unit sends out email history reports based on your call report configuration (see “Configuring report email notifications” on page 251) and notification email when you have a new voicemail or fax in your mailbox or missed a call.
Page 103 The phone number of the person who made the emergency call. NUM%% %%EMGCALL_DIAL_NUM The emergency number that was dialed. %%EMGCALL_VIA_ The trunk through which the emergency call was made. TRUNK%% Fortinet Technologies Inc. Page 103 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 104 The day, date, and time when the voicemail was left. %%VM_DATE%% The extension number of the mailbox where the voicemail was %%VM_MAILBOX%% left. The name of the person to whom the notification is sent. %%VM_NAME%% Fortinet Technologies Inc. Page 104 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 105 To add a color code, use HTML tags, such as <tr bgcolor="#3366ff">. You can select a color code, such as "#3366ff" in the HTML tag, from the color palette after selecting Insert Color Code. 5. Click OK. Fortinet Technologies Inc. Page 105 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 106: Configuring Advanced Phone System Settings
FortiVoice units support SIP communications. To configure FortiVoice SIP settings 1. Go Phone System > Advanced Settings > SIP. 2. Configure the following: Figure 31: SIP settings GUI field Description Fortinet Technologies Inc. Page 106 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 107 RTP port start Enter the starting Real-time Transport Protocol (RTP) port that the FortiVoice unit will use for phone call sessions. If the unit is behind a firewall, these ports should be open. Ensure there is a reasonable port range so that you have enough ports for all open calls.
Page 108: Configuring Sip Phone Auto-Provisioning
3. Click Apply. Configuring SIP phone auto-provisioning Phone System > Advanced Settings > Auto Provisioning allows the FortiVoice unit to discover the SIP phones on your network and send the configuration files to them. With auto-provisioning configured, when a supported FortiFone is connected to the network and powered on, it is automatically discovered and receives the configuration file from the FortiVoice unit.
Page 109 *17 (See “Modifying feature access codes” on page 237) on any FortiFone that connects to the FortiVoice unit and enter this password. You can then enter an existing extension to set it as the extension of this phone. Server Settings for Phone Configuration Fortinet Technologies Inc.
Page 110: Adding Prompt Languages
2. Click Apply. Adding prompt languages The prompt language affects all of the FortiVoice unit’s voice prompts, such as auto attendant and voicemail. Prompt languages are used when configuring the PBX settings. For more information, see “Setting PBX location and contact information”...
Page 111 To add a prompt language 1. Go to Phone System > Advanced Settings > Prompt Languages. 2. Click New. 3. In the Upload field, click Browse to upload the language file provided by Fortinet Technical Support. 4. Click OK. Recording in FortiVoice audio format A prompt language file must be recorded in the FortiVoice language package format.
Page 112: Managing Phone Configurations
Once you have modified the templates or uploaded a new firmware, they are saved on the FortiVoice unit. To send them to the phones, choose a low traffic time and reboot the phones. For information on rebooting the phones, see “Setting up local extensions”...
Page 113: Configuring System Capacity
5. Leave the Phone Type field as is. Currently, this feature only supports FortiFone. 6. Select Status. 7. Click Create. The new FortiFones are recognized by the FortiVoice unit. You can auto-provision them now. For more information, see Configuring system capacity The Phone System >...
Page 114 130. iii. When the extension rings, record the sound file and hang up. iv. On the FortiVoice web-based manager, click Yes on the Voice recording request sent to specified extension dialog box. If you select Music on hold for the profile type, you can click Upload to get an existing sound file, Record to make a sound file, Download to save a a sound file, and Play to listen to a uploaded or recorded file (with speakers or earphones).
Page 115: Working With Fortivoice Profiles
Working with FortiVoice profiles The Phone System > Profiles tab lets you create user privileges and SIP profiles for configuring extensions and SIP trunks. It also allows you to modify caller IDs, schedule the FortiVoice unit, and configure phone and LDAP profiles.
Page 116 • Monitor/Keep alive (SIP notify) interval: Enter the time interval in seconds for the FortiVoice unit to talk to the SIP server of your service provider to keep the connectivity and check its capability. 0 means no checking by the FortiVoice unit.
Page 117: Modifying Caller Ids
To make this option work, you need to select a SIP profile with TLS or TLS and SRTP selected for Encryption when configuring an extension. You also need to enable TLS on the FortiVoice unit by going to Phone System > Advanced Settings > SIP.
Page 118: Scheduling The Fortivoice Unit
5. Click Create. Scheduling the FortiVoice unit You can schedule the FortiVoice operation time and use the schedules when configuring dial plans, virtual numbers, or call management. The default schedules, namely after_hour, any_time, business_hour, and holiday, can be modified but cannot be deleted.
Page 119: Configuring Phone Profiles
The phone profiles configured here appear as Admin defined profiles when you configure a SIP extension. To configure a phone profile 1. Go to Phone System > Profiles > Phone. 2. Click New and configure the following: Fortinet Technologies Inc. Page 119 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 120 Select a phone model for the profile. Description Enter any notes you have for this profile. Configuration mode Select the profile mode. • Automatic: the FortiVoice unit will generate a phone configuration file based on the information you provide. “Automatic Configuration” on page 121.
Page 121 • 6: Internetwork Control • 7: Network Control If you select LLDP (Link Layer Discovery Protocol), the FortiVoice unit automatically generates the configuration file. You need to enable LLDP support on your network switch. Automatic Configuration This option is only available if you select Automatic for Configuration mode.
Page 122: Configuring Ldap Profiles
Digit map The FortiVoice unit uses digit map syntax definition to define the FortiFone dialing behavior. A phone needs to know when number entering is complete and therefore to initiate the call. You can enter the syntax or use the default syntax x.T|x+# where: •...
Page 123 You can add an LDAP profile to define a set of queries that the FortiVoice unit can use with an LDAP server. You might create more than one LDAP profile if, for example, you have more than one LDAP server, or you want to configure multiple, separate query sets for the same LDAP server.
Page 124 Optional. Enter the fully qualified domain name (FQDN) or IP address name/IP of an alternate LDAP server that the FortiVoice unit can query if the primary LDAP server is unreachable. Port: Enter the port number where the fallback LDAP server listens.
Page 125 128. Base DN Enter the distinguished name (DN) of the part of the LDAP directory tree within which the FortiVoice unit will search for user objects, such as ou=People,dc=example,dc=com. User objects should be child nodes of this location. Bind DN...
Page 126 DN as the base DN. Also enter the name of the user objects’ common bind DN name attribute, such as cn or uid into the field. Fortinet Technologies Inc. Page 126 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 127 (& (objectClass=inetOrgPerson) (telephonenumber=$u)) where $u is the FortiVoice variable for a user's extension. This option is preconfigured and read-only if you have selected from Schema any schema style other than User Defined.
Page 128 After you have created an LDAP profile, you should test each enabled query in the LDAP profile to verify that the FortiVoice unit can connect to the LDAP server, that the LDAP directory contains the required attributes and values, and that the query configuration is correct.
Page 129: Configuring User Privileges
This may be useful after, for example, you have updated parts of your LDAP directory that are used by that LDAP profile, and you want the FortiVoice unit to discard outdated cached query results and reflect changes to the LDAP directory. After the cache is emptied, any subsequent request for information from that LDAP profile causes the FortiVoice unit to query the updated LDAP server, refreshing the cache.
Page 130: Configuring Extensions
Select to save a copy of the extension list in CSV format. Import Select to upload a copy of the extension list in CSV format. For details, “Importing a list of extensions” on page 138. Fortinet Technologies Inc. Page 130 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 131 The selected phones will reboot and only the phones that meet the following conditions will receive the new configuration: • Phones supported by and registered to the FortiVoice unit. For the list of supported phones and auto provisioning prerequisites, “Configuring SIP phone auto-provisioning” on page 108.
Page 132 1. Go to Extensions > Extensions > IP Extensions. 2. Click New or double-click an existing extension. 3. Configure the following: Figure 40: IP extension configuration GUI field Description Extension Setting Fortinet Technologies Inc. Page 132 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 133 Enter the name displaying on the extension. This is usually the name of the extension user. External caller ID If you want to display a particular caller ID on a called phone instead of the FortiVoice main number (see “Main number” on page 99) or the trunk phone number (see “Phone Number”...
Page 134 Location Select Internal if the extension does not traverse through Network Address Translation (NAT) to connect to the FortiVoice unit, and External if the extension does. SIP setting Select the SIP profile for the extension. Click Edit to modify the current profile or New to configure a new one. For more information, see “Working with FortiVoice profiles”...
Page 135 FortiFone into the Phone type field. An orange exclamation mark icon also appears beside the Base MAC address field. Clicking this icon enters the base MAC address into the field. Fortinet Technologies Inc. Page 135 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 136 If you select the voice mailbox of another extension, you can click Edit to modify that extension. Notify message You can let the FortiVoice unit turn on the message waiting waiting light to light on the phones of a user or user group if you want to notify the user or group of a new voice message stored in the voice mailbox associated with this extension.
Page 137 The link to the IP address of the phone using the extension number. This address is retrieved from a SIP phone after it is registered with the FortiVoice unit. Clicking the link opens the login page of the web interface of the phone. You need the user name and password of the phone to log in.
Page 138 “Setting up local extensions” on page 130. 5. Close the Fix Numbers Issues in FortiVoice System page. Importing a list of extensions The import feature provides a simple way to add a list of new extensions in one operation. You can create a CSV file in any spreadsheet and import the data as long as the columns match the FortiVoice format.
Page 139: Modifying Analog Extension (200D-T Model Only)
A dialog appears showing the number of imported records. Modifying analog extension (200D-T model only) The FortiVoice 200D-T has one analog port and a default analog extension. You can edit the extension’s default configuration. Analog lines, also referred to as POTS (Plain Old Telephone Service), are used for standard phones, fax machines, and modems.
Page 140 “Fixing duplicate or missing numbers” on page 137. Enabled Select to activate the extension. Display name Enter the name displaying on the extension. This is usually the name of the extension user. Fortinet Technologies Inc. Page 140 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 141 Select the prompt language for the FortiVoice unit. The default is English. This setting affects all of the FortiVoice unit’s voice prompts, such as auto attendant and voicemail. However, if you change the sound file for an individual component, such as auto attendant, to use a different language, it will override the default prompt language for this component.
Page 142: Setting Up Remote Extensions
To configure a remote extension 1. Go to Extensions > Extensions > Remote Extensions. 2. Click New. 3. Configure the following: Fortinet Technologies Inc. Page 142 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 143 You can click the icon and fix the numbers. For more information, see “Fixing duplicate or missing numbers” on page 137. Fortinet Technologies Inc. Page 143 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 144 “Modifying caller IDs” on page 117. External caller ID If you want to display a particular caller ID on a called phone instead of the FortiVoice main number (see “Main number” on page 99) or the trunk phone number (see “Phone Number”...
Page 145: Configuring Fax Extensions
(such as OBIHAI OBi 200, Cisco SPA 112, or Grandstream HT 702) that supports T38 first before connecting it to the FortiVoice unit. T38 is a protocol designed to allow fax to travel over a VoIP network.
Page 146 1. Go to Extensions > Extensions > Fax Extensions. 2. Click New or double-click an existing extension. 3. Configure the following: Figure 46: Fax extension configuration GUI field Description Extension Setting Fortinet Technologies Inc. Page 146 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 147 Select to enable this extension to receive and send faxes that support T38 protocol. This applies to using a fax machine connected to the FortiVoice unit via an adapter that supports T38 protocol. For more information, see “Configuring fax” on page 227.
Page 148 Location Select Internal if the extension does not traverse through Network Address Translation (NAT) to connect to the FortiVoice unit, and External if the extension does. SIP setting Select the SIP profile for the extension. Click Edit to modify the current profile or New to configure a new one. For more information, see “Working with FortiVoice profiles”...
Page 149: Setting Extension User Preferences
The link to the IP address of the fax adapter using the extension number. This address is retrieved from the adapter after it is registered with the FortiVoice unit. Clicking the link opens the login page of the web interface of the adapter. You need the user name and password of the adapter to log in.
Page 150 Figure 48: Modifying extension user preferences Fortinet Technologies Inc. Page 150 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 151 Voicemail handling Select to enable reaching the operator by pressing 0 when (Caller press 0 you hear the announcement of a callee’s voicemail. during announcement) Notification Options Fortinet Technologies Inc. Page 151 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 152 110. Web GUI language Select the language for the FortiVoice user web portal. Theme Select the display theme for the FortiVoice user web portal. Time zone Select the time zone for the FortiVoice user web portal. Account Management Click Change PIN number to change the password for accessing the voice mailbox and the FortiVoice user web portal.
Page 153 This configuration serves as a profile for use in managing calls. See “Handling calls” on page 155. Call Handling For more information, see “Handling calls” on page 155. Fortinet Technologies Inc. Page 153 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 154 This configuration serves as a profile for use in managing calls. See “Handling calls” on page 155. To configure follow me settings: 1. Go to Extensions > Extensions > Preferences > Follow Me. Fortinet Technologies Inc. Page 154 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 155 For example, you can configure the process to forward a call to another number on a specific schedule. If the extension with configured call handling action is part of another FortiVoice function that also has configured call handling action (for example, a member of a ring group or used for a virtual number), then the call handling action of the other FortiVoice function overrides the extension call handling action.
Page 156: Resetting Voice Messages
For information on creating IP extension voice mailboxes, see “Configuring IP extensions” on page 130. Fortinet Technologies Inc. Page 156 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 157: Creating Extension Departments
111, 112, 113, and 114. When a customer calls the sales group, the first available salesperson answers for the group. To create a ring group 1. Go to Extension > Groups > Ring Group. 2. Click New. 3. Configure the following: Fortinet Technologies Inc. Page 157 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 158 137. Display Name Enter the name displaying on the extensions of the ring group, such as “HR”. Enabled Select to activate the ring group. Fortinet Technologies Inc. Page 158 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 159 Each status can only be used for one call management configuration. For the Busy status, if you set the ring group’s ring mode to All, the FortiVoice unit will declare the ring group busy only if all extensions in the group are busy; if you set the ring group’s ring mode to Sequential, the FortiVoice unit will declare the ring group busy only if...
Page 160: Creating Page Groups
You can click the icon and fix the numbers. For more information, see “Fixing duplicate or missing numbers” on page 137. 6. Enter the name displaying on the extensions of the group, such as “HR”. Fortinet Technologies Inc. Page 160 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 161: Creating Pickup Groups
To view the group voice mailbox, go to Extensions > General Voicemail > General Voicemail. Fortinet Technologies Inc. Page 161 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 162 1. Go to Extensions > General Voicemail > General Voicemail. 2. Click New or double-click an existing record. 3. Configure the following: Figure 52: Adding a general voice mailbox GUI field Description Fortinet Technologies Inc. Page 162 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 163 For information on LDAP profile, see “Configuring LDAP profiles” on page 122. You can click New to create a new profile or Edit to modify the selected one. Fortinet Technologies Inc. Page 163 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 164 • Notify message waiting light: If you select this option, the FortiVoice unit turns on the message waiting light on a user’s phone when a new voice message is left on this voice mailbox.
Page 165: Working With Virtual Numbers
If the virtual number with configured call handling action is part of another FortiVoice function that also has configured call handling action (for example, a member of a ring group), then the call handling action of the other FortiVoice function overrides the virtual number call handling action.
Page 166: Click Ok
Some actions require that you enter further information to complete the call process, such as Dial extension and General mailbox. 4. Click Create. 5. Click OK. Fortinet Technologies Inc. Page 166 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 167: Configuring Trunks
Configuring Trunks Setting up trunks enables the FortiVoice unit to connect to the outside world. You can configure trunks that go to your VoIP service provider for long-distance calls, trunks for your PSTN circuits, and trunks that connect your various offices together.
Page 168 To create a VoIP trunk 1. Go to Trunks > VoIP > SIP. 2. Click New. 3. Configure the following: Figure 56: New VoIP trunk GUI field Description Fortinet Technologies Inc. Page 168 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 169 Some VoIP providers may provide you with an authentication user name that is different from your user name for the FortiVoice unit to register with the SIP server. If tat is the case, enter the authentication user name here. Realm/domain Some VoIP service providers’...
Page 170 “User name” on page 169. Inband ringtone Select to enable the FortiVoice unit to send ring tone to the caller of an incoming call before the establishment of a call connection. This option is only editable if you enable early media in “Advanced Setting”...
Page 171 • Transport protocol: Select the transport protocol used for the registration. Configure fax and phone signal automatic detection and fax handling. Automatic fax Select for the FortiVoice unit to detect incoming fax signal on detection this trunk automatically. Fortinet Technologies Inc. Page 171...
Page 172: Testing Sip Trunks
Figure 57: Testing SIP trunk GUI field Description Test Dry Run Run a system SIP trunk test without making a real phone call. Destination number Enter a destination number to call. Fortinet Technologies Inc. Page 172 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 173: Creating A Sip Trunk With Forticall Service
From number Enter the number from which you want to call the destination number. The FortiVoice unit will connect this number with the destination number for the test. Test Click to start the dry run test and check the Test result.
Page 174: Modifying Pstn/Pri Trunks (200D-T And 2000E-T2 Only)
• T1/E1 voice circuit trunk - pri1 and pri2 that use ISDN PRI • analog CO (Central Office) trunk - line1 that uses four FXO ports The FortiVoice 2000E-T2 has duo PRI ports and supports two T1/E1 voice circuit trunks - pri1 and pri2 that use ISDN PRI.
Page 175 2. Click New. 3. Configure the following: Figure 60: Adding a T1/E1 trunk GUI field Description PRI Setting Name The name of this trunk. This is view only. Fortinet Technologies Inc. Page 175 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 176 “Configuring the T1/E1 span” on page 178. Configure fax and phone signal automatic detection and fax handling. Automatic fax Select for the FortiVoice unit to detect incoming fax signal on this detection trunk automatically. Forward fax to Some extensions have DID mappings. See “Mapping DIDs”...
Page 177 Select the FXO ports you want for this trunk and click -> to move them into the Selected ports field. Each FXO port provides an analog phone line for a FXO device, such as a phone or fax. Fortinet Technologies Inc. Page 177 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 178: Configuring The T1/E1 Span
Configure fax and phone signal automatic detection and fax handling. Automatic fax Select for the FortiVoice unit to detect incoming fax signal detection on this trunk automatically. eFax account Select the fax receiving account for the detected faxes. Phone Number Click New to add the phone number provided by your PSTN service provider.
Page 179 Select the signaling type of the ISDN PRI: • PRI signalling, CPE (Customer Premises Equipment) side • PRI signalling, Network Side • PRI R2 signalling Hardware Select to enable the FortiVoice echo cancellation function to echo improve the quality of voice communications. cancellation Hardware...
Page 180 • Full E1: 16 You can also set the channel numbers to others such as 1. The settings you configure must match the same settings of your PSTN service provider. Fortinet Technologies Inc. Page 180 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 181 The settings you configure must match the same settings of your PSTN service provider. PRI R2 Settings Since there is no single signaling standard for R2, the FortiVoice unit addresses this challenge by supporting many localized implementations of R2 signaling.
Page 182: Configuring The Analog Voice Trunk
For the office peers to call each other, make sure that your FortiVoice unit and the peer office PBX are mutually registered with each other’s IP address and SIP port number.
Page 183 Select a trunk and click this button to obtain the phone directory from Directory this office peer. This option only works if the PBX of the remote office is a FortiVoice unit and Fetch directory (see “Fetch Directory” on page 184) is selected on the remote unit.
Page 184 This option only works if the PBX of the remote office is a FortiVoice unit and the same option is selected on the remote unit. You can view the directory by going to Monitor > Directory and selecting this office in the Office field.
Page 185 After setting up the peer office, create outgoing and incoming dial plans for the local and peer offices. For more information, see “Configuring Call Routing” on page 186. Fortinet Technologies Inc. Page 185 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 186: Configuring Call Routing
Configuring Call Routing Dial plans define how calls flow into and out of the FortiVoice unit. Without dial plans, telephone communications among PBXs are impossible. This topic includes: • Configuring inbound dial plans • Configuring outbound dial plans • Configuring direct inward dialing Configuring inbound dial plans The Call Routing >...
Page 187 The called numbers matching this pattern will follow this dial plan rule. Create the number match following “Pattern-matching syntax” on page 196 “Pattern-matching examples” on page 196. Fortinet Technologies Inc. Page 187 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 188 • Dial local number: Select if you want to send incoming calls to the local destinations at any time. For example, you can enter 222xxxx as a pattern and strip 222. The FortiVoice unit will only dial the last four digits for all called numbers matching the pattern.
Page 189 0 means no action. For example, if your Match Pattern is 222XXXX and Strip is 3, the FortiVoice unit will only dial the last four digits for all called numbers matching the pattern. c. For Prefix, add a number before a pattern.
Page 190: Configuring Direct Inward Dialing
PBX system over limited rented physical lines (also called “trunk lines”). The phone numbers you rent may not be enough to provide a DID number for each workstation, because each DID can only be mapped to one extension. With the FortiVoice unit, you have 2 options to address this issue: •...
Page 191: Mapping Dids
1265. In both cases, the calling numbers will display on the extension. If a caller outside the configured caller list dialed the mapped DID number, the FortiVoice unit will react according to the selected fall back action. For details, see “Inbound fallback action”...
Page 192 Alternatively, you can choose the caller ID to display on the called phone when configuring an extension (see “External caller ID” on page 133). By default, both Inbound and Outbound are selected. Fortinet Technologies Inc. Page 192 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 193: Configuring Outbound Dial Plans
VoIP service provider. To route calls to an external phone system, you add dial plan rules that define the extra digits that extension users must dial to call out of the FortiVoice unit. The rules also control how the FortiVoice unit handles these calls including whether to block or allow the call, the destinations the calls are routed to and whether to add digits to the beginning of the dialed number.
Page 194 The dialed numbers matching this pattern will follow this dial plan rule. For information on adding a dialed number match, see “Creating dialed number match” on page 196. Fortinet Technologies Inc. Page 194 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 195: Testing Outbound Dial Plans
Destination number Enter a destination number to call. From number Enter the number from which you want to call the destination number. The FortiVoice unit will connect this number with the destination number for the test. Fortinet Technologies Inc. Page 195...
Page 196: Creating Dialed Number Match
Select the FortiVoice action once it calls the destination established number: • Play welcome message: The FortiVoice unit will play a message to the destination number. • Connect test call to number: In the Number field, enter the number from which you want to call the destination number.
Page 197 Enter a number to omit dialing the starting part of a pattern. 0 means no action. For example, if your Match Pattern is 9XXX and Strip is 1, you only need to dial the last three digits for this pattern. Fortinet Technologies Inc. Page 197 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 198: Configuring Call Handling Actions
Description Call Handling Schedule Select the FortiVoice operation schedule to implement this plan. Click Edit to modify the selected schedule or click New to configure a new one. For more information on PBX schedule, “Scheduling the FortiVoice unit” on page 118.
Page 199 113. Delay Optionally, if you want to discourage certain users for making outbound calls, enter the call delay time in seconds. 5. Click Create. Fortinet Technologies Inc. Page 199 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 200: Working With Property Management System
Businesses such as hotels use Property Management System (PMS) to manage their services. The PMS can be connected to a PBX such as the FortiVoice unit to configure a customer’s room phone by displaying the customer’s name on the phone, emptying voicemails when a new customer checks in, logging phone calls, setting wake-up calls, and other services.
Page 201: Configuring Hotel Room Status
Configuring hotel room status Hotel Management > Room Status lets you set hotel room statuses. Once the PMS and the FortiVoice unit is properly connected and the PMS is enabled on the FortiVoice unit, all hotel room extensions appear on the FortiVoice unit.
Page 202 Room condition Select the cleaning status of the room. You can add a new code or edit the current one. For more information, see “To set room condition codes” on page 200. 4. Click OK. Fortinet Technologies Inc. Page 202 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 203: Configuring Call Features
206. Delete Removes a selected auto attendant. You cannot remove an auto attendant that is used in another auto attendant configuration. Enabled Select to activate this auto attendant. Fortinet Technologies Inc. Page 203 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 204 2. Configure the following: Figure 77: New auto attendant GUI field Description Auto Attendant Name Enter a name for the auto attendant. Enabled Select to activate the auto attendant. Fortinet Technologies Inc. Page 204 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 205 If you select Default, the greeting message will be the same as what you set for the FortiVoice unit. For more information, see “Setting PBX location and contact information” on page You can also select other languages. The language files are created “Adding prompt languages”...
Page 206: Viewing Auto Attendant Hierarchies
3. Click Create. Viewing auto attendant hierarchies The FortiVoice unit provides a chart based on your auto attendant configurations to display the layers of auto attendant hierarchy and the key actions. You can save the chart and load it later.
Page 207 You can right-click an auto attendant node and select Edit to modify it or view the snapshot of an auto attendant (other than the main one) by right-clicking it and selecting Drill down. Fortinet Technologies Inc. Page 207 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 208: Configuring Key Actions
Select the extension. You can click Edit to modify an existing one or New to add a new one. For more information, see “Configuring Extensions” on page 130. Fortinet Technologies Inc. Page 208 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 209 For Language, if you select Default, the greeting message will be the same as what you set for the FortiVoice unit. For more information, “Setting PBX location and contact information” on page You can also select other languages. The language files are created “Adding prompt languages”...
Page 210: Configuring User Privileges
1. Go to Call Features > User Privileges > User Privileges and click New. 2. Configure the following: Figure 79: User privilege configuration GUI field Description Name Enter a name for this class of service. Basic Settings Fortinet Technologies Inc. Page 210 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 211 Once a FortiFone or supported DHCP-enabled phone connects to the FortiVoice unit and is auto-discovered, the FortiVoice unit assigns an IP address to the FortiFone and sends the basic PBX setup information to it. The full PBX configuration file will only be sent to the phone if this option is selected in the user privilege applied to the extension associated with the phone.
Page 212 4. Select the account/exempt code that needs to be dialed before making a call with this prefix. For information on account code, see “Configuring account codes” on page 215. 5. Click Create. Fortinet Technologies Inc. Page 212 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 213 To barge a call, you need to enter your user PIN. For information on user PIN, see “User PIN” on page 134. Call barge option If you select Allow barging, choose a barging method. Fortinet Technologies Inc. Page 213 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 214 • Disallow all with exempt: If you select this option, click New to enter the number(s) allowed to page. For more information on paging, see “Configuring auto attendants” on page 203. Fortinet Technologies Inc. Page 214 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 215: Configuring Account Codes
1-123-1234 is reached, and after two seconds, extension 5678 is automatically dialed. A semicolon pauses dialing for one second, for example, 1-123-222-1234; 5678#. In this Fortinet Technologies Inc. Page 215 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 216: Configuring Conference Calls
Select an extension number that callers can call and enter the user PIN to join a conference call. Display name Enter the name displaying on the conference call extension, such as “HR”. Fortinet Technologies Inc. Page 216 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 217 If the one time schedule conflicts with the recursive schedule, the one time schedule has priority. Fortinet Technologies Inc. Page 217 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 218: Recording Calls
Description Information of call recording configuration. To configure call recording 1. Go to Call Features > Call Recording > Policy. 2. Click New. GUI field Description Recording Policy Fortinet Technologies Inc. Page 218 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 219: Setting The Recorded File Format
“Configuring Trunks” on page 167. Direction Select the direction of which you want to record the calls. 3. Click Create. Setting the recorded file format Select the format for recording calls. Fortinet Technologies Inc. Page 219 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 220: Archiving Recorded Calls
You can access all rotated files through search. Archiving options Specify what the FortiVoice unit should do if it runs out of disk when disk quota is space. Select Overwrite to remove the oldest archived folder in...
Page 221: Creating Call Queues
IP address Enter the IP address of the remote storage server. User name Enter the user name of an account the FortiVoice unit will use to access the remote storage server, such as FortiVoice. Password Enter the password for the user name of the account on the remote storage server.
Page 222 The extensions of the agents enrolled in the queue. To create a call queue 1. Go to Call Features > Call Queue. 2. Click New. 3. Configure the following: Fortinet Technologies Inc. Page 222 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 223 Figure 84:Creating a call queue GUI field Description Queue Name Enter a name for the queue. Fortinet Technologies Inc. Page 223 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 224 (Action) for this call queue configuration (Target) in your default inbound dial plan, the call will hang up. For more information, see “Configuring inbound dial plans” on page 186. The maximum is 100. Fortinet Technologies Inc. Page 224 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 225 If you select Periodic, also configure “Periodic announcement prompt” on page 226 “Periodic announcement frequency” on page 226. If you select Random, do not configure “Periodic announcement frequency” on page 226. Fortinet Technologies Inc. Page 225 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 226: Configuring Call Parking
Configuring call parking Call park is a feature for placing a call on hold and then retrieving it from any other local extension. By default, the FortiVoice unit has 20 park orbits, 301–320. To view the parked calls, see “Viewing parked calls” on page To configure call parking 1.
Page 227: Configuring Fax
The FortiVoice unit supports fax in the following ways: • Use the FortiVoice unit to send and receive faxes. The FortiVoice unit contains a full featured fax server that is able to receive faxes and forward them in PDF format to an extension’s user web portal or a user’s email.
Page 228 You can click the icon and fix the numbers. For more information, see “Fixing duplicate or missing numbers” on page 137. Enabled Select to activate this fax. Fortinet Technologies Inc. Page 228 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 229: Sending Faxes
Configure the dial plans for sending faxes. The dialed fax numbers matching the configured number pattern will be subject to the call handling actions. The fax sending dial plans will not interfere with phone call dial plans since the FortiVoice unit deals with the dial plans separately.
Page 230 In addition, senders can always view the status of the fax sent in their FortiVoice user web portal. For more information, see the online help of the web user portal. To view the outbound dial plans, go to Call Features > Fax > Sending Rule.
Page 231 Destination number Enter a destination number to call. From number Enter the number from which you want to call the destination number. The FortiVoice unit will connect this number with the destination number for the test. Fortinet Technologies Inc. Page 231...
Page 232 Select the FortiVoice action once it calls the destination established number: • Play welcome message: The FortiVoice unit will play a message to the destination number. • Connect test call to number: In the Number field, enter the number from which you want to call the destination number.
Page 233 Enter a number to omit dialing the starting part of a pattern. 0 means no action. For example, if your Match Pattern is 9XXX and Strip is 1, you only need to dial the last three digits for this pattern. Fortinet Technologies Inc. Page 233 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 234 Description Call Handling Action Schedule Select the FortiVoice operation schedule to implement this plan. Click Edit to modify the selected schedule or click New to configure a new one. For more information on PBX schedule, “Scheduling the FortiVoice unit” on page 118.
Page 235: Configuring Other Fax Settings
Max retry times Enter the maximum number of times to resend a fax. This is useful if a fax cannot be sent due to busy lines or other reasons. Fortinet Technologies Inc. Page 235 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 236: Archiving Faxes
You can access all rotated files through search. Archiving options Specify what the FortiVoice unit should do if it runs out of disk when disk quota is space. Select Overwrite to remove the oldest archived folder in...
Page 237: Modifying Feature Access Codes
3. Click Apply. Modifying feature access codes By default, the FortiVoice unit defines the following codes for users to access certain features by dialing the codes. You can go to Call Features > Feature Code > Feature Code and double-click a feature name to modify its code and description, but that does not change the Fortinet Technologies Inc.
Page 238 'unassigned' by administrator. admin Dial *15 or the code you set on any FortiFone that connects to the FortiVoice unit and enter the phone configuration PIN. For information on setting the phone configuration PIN, see “Configuring SIP phone auto-provisioning” on page 108.
Page 239 Dial *17 or the code you set on any FortiFone that connects to the FortiVoice unit and enter the phone configuration PIN. You can then enter an existing extension to set it as the extension of this phone. For information on setting the phone configuration PIN, see “Configuring...
Page 240 FortiFone to turn DND on or off. Unpark This is for supporting the Unpark key on the FortiFones. Press this key on the FortiFone to unpark a call. Fortinet Technologies Inc. Page 240 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 241: Configuring Logs And Reports
For more information, see “Log message severity levels” on page 242. A FortiVoice unit can save log messages to its hard disk or a remote location, such as a Syslog server or a FortiAnalyzer™ unit. For more information, see “Configuring logging” on page 243.
Page 242: Log Message Severity Levels
Provides general information about system operations. 6 - Debug Provides information useful to debug a problem. For each location where the FortiVoice unit can store log files, you can define the severity threshold of the log messages to be stored there. Fortinet Technologies Inc.
Page 243: Configuring Logging
• specify where to store the logs You can configure the FortiVoice unit to store log messages locally (that is, in RAM or to the hard disk), remotely (that is, on a Syslog server or FortiAnalyzer unit), or at both locations.
Page 244: Choosing Which Events To Log
6. From Log level, select the severity level that a log message must equal or exceed in order to be recorded to this storage location. 7. From Log options when disk is full, select what the FortiVoice unit will do when the local disk is full and a new log message is caused, either: •...
Page 245: Configuring Logging To A Syslog Server Or Fortianalyzer Unit
You can add a maximum of three remote Syslog servers. Logs stored remotely cannot be viewed from the web-based manager of the FortiVoice unit. If you require the ability to view logs from the web-based manager, also enable local storage.
Page 246 Level Displays the minimum severity level for logging purposes. Facility Displays the facility identifier the FortiVoice unit uses to identify itself. 2. Click New to create a new entry or double-click an existing entry to modify it. A dialog appears.
Page 247: Configuring Report Profiles And Generating Call Reports
FortiAnalyzer Administration Guide. 5. To verify logging connectivity, from the FortiVoice unit, trigger a log message that matches the types and severity levels that you have chosen to store on the remote host. Then, on the remote host, confirm that it has received that log message.
Page 248 See “Generating a report manually” on page 252. View Reports Click to display the list of reports generated by the FortiVoice unit. You can delete, view, and/or download generated reports. For more information, see “Viewing generated reports” on page Report Name Displays the name of the report profiles.
Page 249: Configuring The Report Query Selection
Select the call region, such as international or long-distance. Report column Select the source of the call statistics: from caller or receiver. For details, see Figure 95 on page 250. Fortinet Technologies Inc. Page 249 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 250: Configuring The Report Time Period
Value field, as applicable. • Set a specific time range. Set the start date and hour in From field and end date and hour in To field. Fortinet Technologies Inc. Page 250 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 251: Configuring Report Email Notifications
Configuring report email notifications When configuring a report profile, you can have the FortiVoice unit email an attached copy of the generated report, in either HTML or PDF file format, to designated recipients. You can customize the report email notification. For more information, see “Customizing email...
Page 252: Generating A Report Manually
2. Click to select the report profile whose settings you want to use when generating the report. 3. Click Generate. The FortiVoice unit immediately begins to generate a report. To view the resulting report, see “Viewing generated reports” on page Setting call rates The Log &...
Page 253: Configuring Station Messaging Detail Record (Smdr)
253. 4. For Port, enter the port number that connects to the third party devices. 5. For Max clients, enter the number of third party devices to which the FortiVoice unit provides SMDR. The range is 1-10. 6. For Trusted hosts, enter the IP address and netmask of the third party device.
Page 254: Configuring Alert Email
“Configuring alert categories” on page 255). Alert email messages also require that you supply the FortiVoice unit with the IP address of at least one DNS server. The FortiVoice unit uses the domain name of the SMTP server to send alert email messages.
Page 255: Configuring Alert Recipients
Configuring alert categories Before the FortiVoice unit can send alert email messages, you must specify which events cause the FortiVoice unit to send an alert email message to your list of alert email recipients (see “Configuring alert recipients” on page 255).
Page 256 Enter a number between 1 and 10 000 to define the alert threshold, then enter the interval of time between each alert email message that the FortiVoice unit will send while the number of email messages in the deferred email queue remains over this limit.
Page 257: Installing Firmware
2. Initiate a connection from your management computer to the CLI of the FortiVoice unit. 3. Connect port1 of the FortiVoice unit directly or to the same subnet as a TFTP server. 4. Copy the new firmware image file to the root directory of the TFTP server.
Page 258 Immediately press a key to interrupt the system startup. You have only 3 seconds to press a key. If you do not press a key soon enough, the FortiVoice unit reboots and you must log in and repeat the execute reboot command.
Page 259: Installing Firmware
Reverting to an earlier version may cause the FortiVoice unit to remove parts of the configuration that are not valid for that earlier version. In some cases, you may lose all call data and configurations.
Page 260 5. Connect port1 of the FortiVoice unit directly or to the same subnet as a TFTP server. 6. Copy the new firmware image file to the root directory of the TFTP server.
Page 261: Reconnecting To The Fortivoice Unit
FortiVoice web-based manager and/or CLI. If your FortiVoice unit has not been reset to its default configuration, but you cannot connect to the web-based manager or CLI, you can restore the firmware, resetting the FortiVoice unit to its default configuration in order to reconnect using the default network interface IP address.
Page 262: Restoring The Configuration
2. Connect a network interface of the FortiVoice unit directly or to the same subnet as a TFTP server. 3. Copy the new firmware image file to the root directory of the TFTP server.
Page 263: Verifying The Configuration
4. Verify that the TFTP server is currently running, and that the FortiVoice unit can reach the TFTP server. To use the FortiVoice CLI to verify connectivity, enter the following command: execute ping 192.168.2.99 where 192.168.2.99 is the IP address of the TFTP server.
Page 264: Clean Installing Firmware
Clean installing firmware Clean installing the firmware can be useful if: • you are unable to connect to the FortiVoice unit using the web-based manager or the CLI • you want to install firmware without preserving any existing configuration • a firmware version that you want to install requires that you format the boot device (see the Release Notes accompanying the firmware) Unlike upgrading or downgrading firmware, clean installing firmware re-images the boot device.
Page 265 9. Immediately press a key to interrupt the system startup. You have only 3 seconds to press a key. If you do not press a key soon enough, the FortiVoice unit reboots and you must log in and repeat the execute reboot command.
Page 266: Appendix A: Installing Click-To-Dial Software
Appendix A: Installing Click-to-Dial software If you use MicroSoft Outlook, you can install the FortiVoice Click-to-Dial plugin to dial the phone numbers of your contacts. For information on installing the software, go to FortiVoice Click-to-Dial Software Installation. Step 4 in the instructions is specific to FortiVoice 40/70/100 models. For FortiVoice 200D/200D-T, do the following: •...
Page 267: Index
263 version 21 configured operating mode 58 formatted view connecting logs 34 web UI 15 formatting the boot device 264 conventions 9 FortiAnalyzer 243, 245 Fortinet Technologies Inc. Page 267 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 268 9 master 54 HA 56 master, HA mode 62 HTTP web-based manager 44 maximum transmission unit (MTU) 44 HTTPS 15, 44, 89, 92 media access control (MAC) 42 Fortinet Technologies Inc. Page 268 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 269 52 services LDAP 122 monitoring for HA 56 protocol 128 severity level 242 administrative access 52 shut down 23 public key 94 slave 54 slave, HA mode 62 Fortinet Technologies Inc. Page 269 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...
Page 270 128 customizing appearance 86 HTTP 44 Training Services 8 HTTPS 44 transport layer security (TLS) 95 language 87 traps, SNMP 83 widget 21 wild cards 12 Fortinet Technologies Inc. Page 270 FortiVoice Enterprise Phone System 4.0.0 Administration Guide...

Fortinet fortivoice Administrator's Manual

Table of Contents

Introduction

Connecting to the Fortivoice System

Monitoring the Fortivoice System

Configuring System Settings

Table of Contents

1 Go to System > High Availability > Configuration

3 Click Apply

Configuring Phone System Settings

Configuring Extensions

Resetting Voice Messages

If You Select User Defined, Click New to Define a Call Process According to a Schedule

Click OK

Configuring Trunks

Configuring Call Routing

Working with Property Management System

Configuring Call Features

Configuring Logs and Reports

Installing Firmware

Appendix A: Installing Click-To-Dial Software

Index

Quick Links

Chapters

Related Manuals for Fortinet fortivoice

Summary of Contents for Fortinet fortivoice