Konftel 800 Installation & Administration
  1. Manuals
  2. Brands
  3. Konftel Manuals
  4. Conference Phone
  5. 800
  6. Installation & administration

Konftel 800 Installation & Administration

Hide thumbs Also See for 800:
Table of Contents

Advertisement

Quick Links

Download this manual
K O N F T E L . C O M
Installation & Administration
of Konftel 800
E N G L I S H

Advertisement

Table of Contents
loading

Related Manuals for Konftel 800

Summary of Contents for Konftel 800

  • Page 1 K O N F T E L . C O M Installation & Administration of Konftel 800 E N G L I S H...

  • Page 2: Notices

    Konftel AB hereby declares that this conference phone is in conformity with all the essential requirements and other relevant provisions of Directive 1999/5/EC. Please visit www.konftel.com to view the complete declaration of conformity. Warning! Do not expose the Konftel 800 to water or moisture.

  • Page 3: Table Of Contents

    Initial setup and configuration Media settings..........50 Configuration of Konftel 800......23 Configuring the media settings on the Setting the password for Konftel 800....23 phone............. 51 Setting up a DHCP server......24 Configuring the media settings through Connecting to a network with DHCP.... 24 the web interface........
  • Page 4 Standard encryption for media Disabling Bluetooth® radio......103 encryption with SRTP......80 Maintenance Legacy encryption mode.......81 Provisioning on Konftel 800......104 Configuring Legacy encryption mode on Firmware upgrade and downgrade.....104 the phone..........81 Uploading a firmware file......104 Configuring Legacy encryption mode Firmware upgrade using check-sync..
  • Page 5 Table of contents Creating firmware binary and metadata files............139 Upgrading multiple devices......139 Configuring multiple devices.......140 Remote syslog server......... 141 Configuring remote syslog settings.....141 Fall back server support......142 Factory reset..........142 Performing factory reset......142 System recovery......... 143 Performing system recovery....... 143 Web interface settings........

  • Page 6: Introduction

    INTRODUCTION PURPOSE This document provides checklists and procedures for installing, configuring, and administering Konftel 800. It is intended primarily for implementation engineers and administrators.

  • Page 7: Change History

    14 with the Clear call 1.0.5 button. history • Updated Logging in to the web interface of Konftel on page 26 with the information about lockout after incorrect login attempts. • Updated Phone settings description on page 30 with the default phone name and FIPS mode settings.
  • Page 8 54 with the quality estimate metrics and analog parameters. • Added Standard encryption algorithms on page • Updated Konftel Unite on page 88 in line with the change in MD5 usage. • Added Expansion microphone firmware upgrade page 95. • Updated Bluetooth®...
  • Page 9 INTRODUCTION Issue Date Summary of changes Release August • Added Sleep mode on page 41. 1.0.2 2020 • Added Voice quality monitoring on page 54. • Added Bluetooth® connection on page 99. • Added LDAP settings on page 58. • Updated Configuration file structure on page 109...

  • Page 10: Overview

    OVERVIEW PHONE OVERVIEW Konftel 800 is a SIP conference phone that you can use to make calls and hold conferences with a great audio quality. It provides an improved user experience and ensures an easier connection to audio conference bridges. The phone is based on a multi-connectivity platform to leverage the “Bring your own device”...
  • Page 11 TV sets, radios, computers, and microwave ovens to avoid interference. In case Konftel 800 and the corresponding accessories are damaged, the device does not operate normally or exhibits a distinct change in performance, refer for servicing to the qualified service personnel.

  • Page 12: Physical Layout

    OVERVIEW PHYSICAL LAYOUT Figure 1: Front view of Konftel 800 The following table lists the buttons and the other elements of Konftel 800. Callout number Description Mute buttons Volume down button...

  • Page 13: Connection Layout

    OVERVIEW Callout number Description Volume up button NFC tag Touch screen LED status indicators CONNECTION LAYOUT Figure 2: Connection layout of Konftel 800 The following table lists the sockets and ports available on Konftel 800 for connection.

  • Page 14: Dimensions

    PoE/Ethernet connection socket USB Type A Micro-USB Type B Audio expansion ports Kensington® security lock port ® NFC tag for Bluetooth DIMENSIONS The following table shows the dimensions of Konftel 800. Parameter Dimension 326.41 mm Width 369.87 mm Length 74.7 mm...
  • Page 15 • . View the incoming, outgoing and missed Direction calls. To access the Konftel Unite settings. Unite To dial phone numbers and codes for telephone Call operations or Konftel Unite connection. To check and configure the settings from the phone.
  • Page 16 OVERVIEW Icon Name Description To indicate the phone on-hook status and end a call. Hang Up To show an incoming call. Incoming To show an outgoing call. Outgoing To indicate a missed call. Missed To put a call on hold or to indicate that a call is on hold. Hold Hold To arrange a conference call.
  • Page 17 To move to the sections above. Arrow Up To return to the previous page. Arrow Left To move to subsections of a section. Arrow Right To indicate an active USB connection. Connected Konftel Unite To show the connection of the phone to Konftel Unite. connected...

  • Page 18: Prerequisites

    PREREQUISITES Konftel 800 is based on a multi-connectivity platform to support the “Bring your own device” use case. Connect your Konftel 800 to a SIP server using the Ethernet. The following table describes the tasks you must perform before setting up your...

  • Page 19: Server Configuration Checklist

    • Konftel Unite Konftel 800 requires the current version of Konftel Unite to be installed. Server configuration checklist The following table describes the tasks related to server configuration that you must perform for the initial installation of Konftel 800.

  • Page 20: Power Supply Connectivity

    Power supply connectivity Konftel 800 uses 10/100/1000 Mbit Ethernet and supports PoE Type 1 and Type 2 power supply, which means either 15W or 30W at the power distribution unit. Operation modes: •...
  • Page 21 Classic (HFP, A2DP) • Daisy Chain (audio) ports (6-pin RJ-type) Screen Graphical touch screen with a resolution of approximately 480 x 800 and size of 4.3” Acoustics • 3 symmetrically placed MEMS microphones • Full range speaker in the sealed enclosure Music •...
  • Page 22 Functional keypad and dial pad • LED indicators for call and connectivity status Mobile app Konftel Unite. With the app, you can access your mobile phone contact book and calendar. The app is available for free at AppStore and Google Play Device Configuration •...

  • Page 23: Initial Setup And Configuration

    Setting the password for Konftel 800 Use this procedure to set the password for your Konftel 800 when you first activate the phone or after a reset to the factory settings. Connect the PoE cable to ensure the phone power supply.

  • Page 24: Setting Up A Dhcp Server

    Save The phone reboots. Viewing the IP address View the IP address of your Konftel 800. Use this address to log into the web interface of the conference phone and manage the settings in the device through the web browser.

  • Page 25: Setting A Static Ip Address

    INITIAL SETUP AND CONFIGURATION or the icon. Status The phone displays the following hardware details: • IP Address • MAC Address • Bluetooth MAC Address • Hardware Revision • Software Version • Smart Mic 1 Version • Smart Mic 2 Version Tap the icon twice to return to the home screen.

  • Page 26: Logging In To The Web Interface Of Konftel 800

    INITIAL SETUP AND CONFIGURATION Logging in to the web interface of Konftel 800 Use this procedure to log in to the web interface of your Konftel 800. You can access the web interface only if you set the administrator password for your phone.
  • Page 27 , and enter information in the following fields: Credentials • . Realm identifies the SIP domain for Konftel 800 to accept incoming Realm calls from.For example, company.net. You can leave this field blank or put an asterisk (*) to accept all incoming call invites from any SIP domain.

  • Page 28: Registering An Account Through The Web Interface

    Repeat Steps above for the secondary and fallback accounts. Registering an account through the web interface Use this procedure to register an account for Konftel 800 through the web interface. You must have access to the account information and all necessary settings that the SIP PBX requires.

  • Page 29: Settings Configuration And Management

    MANAGEMENT CONFIGURATION OF SETTINGS ON KONFTEL 800 You can configure almost all settings directly on your Konftel 800. For that you need to navigate through the menu and select the options you need. Using the web interface makes the settings configuration easier. This guide explains both options for you to choose the more convenient one.

  • Page 30: Configuring The Phone Settings Through The Web Interface

    Choose the parameter that you want to configure and proceed to the options available. Click Save Phone settings description The following table lists the basic settings of Konftel 800 available through the web interface in the tab or on the phone in Phone Settings > Phone Settings >...
  • Page 31 Portuguese • Dutch • Simplified Chinese The characters on the Konftel 800 keyboard match the selected language for all languages except Simplified Chinese. For Simplified Chinese, Konftel 800 uses English keyboard layout. Security To enable or disable legacy encryption for backward Allow Legacy compatibility.
  • Page 32 System Logs Webapp Debug You can use this function only through the web interface. To choose a mode, in which your Konftel 800 operates in Daisy Chain case of a daisy chain arrangement. The options are: • . This is the default setting.
  • Page 33 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To reset the phone to its factory settings. By resetting the Factory Reset phone to its factory settings, you remove all the configurations set, imported and installed in course of the phone use. You can do the factory reset only if you log in with the administrator password and only on the phone.
  • Page 34 For example, 2020/01/10. You can also leave the format of the date. In this Default case your Konftel 800 applies the date format that is standard for the selected language. For example, if your selected language is , the date format is Finnish dd.mm.yyyy.
  • Page 35 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To set the current time. Time You can set the time manually only if NTP is in disabled state. See the time on the home screen of the phone. Set the time by doing the following: •...
  • Page 36 .xml configuration file. To manually advance the clock during the specified period Daylight Saving of time. Konftel 800 supports the Daylight Saving Time Time (DST) feature together with the UTC time zones. You can configure this parameter through the web interface.

  • Page 37: Configuring Daylight Saving Time Through The Web Interface

    SETTINGS CONFIGURATION AND MANAGEMENT Name Description To select the month when to apply Start Month Offset Hours To select the day mode when to apply Start Day Mode Offset Hours To select the day when to apply Start Day Offset Hours To select the hour when to apply Start Hour Offset Hours...

  • Page 38: Daylight Saving Time State

    SETTINGS CONFIGURATION AND MANAGEMENT The value range depends on the selected . For example, if Start Day Mode you select as the day mode, the value range is from 1 to 31. Day of month The value range for the weekday is from 0 to 7. Note that in this case, mean Sunday.

  • Page 39: Minute Offset

    SETTINGS CONFIGURATION AND MANAGEMENT Minute offset Konftel 800 supports the minute offset of the specified UTC time zone. You can set the UTC time zone offset to 0, 15, 30, or 45 minutes. Configuring the minute offset through the web interface Use this procedure to configure the minute offset through the web interface.

  • Page 40: Time Format

    SETTINGS CONFIGURATION AND MANAGEMENT Exporting the configuration file on page 125 Time format Konftel 800 supports various time formats so that the user get the convenient time presentation. The following values are available for the time format parameter: • - Konftel 800 shows time using the 24-hour clock approach.

  • Page 41: Sleep Mode

    SETTINGS CONFIGURATION AND MANAGEMENT setting in configuration. At that, Konftel 800 preserves the value in the configuration settings. The phone stores the NTP server address from DHCP option 42 separately in a volatile memory. So, when it reboots, the volatile memory becomes empty.

  • Page 42: Network Settings

    Konftel 800. Related concepts Network settings description on page 43 Configuring the network settings on the phone Use this procedure to configure the network settings of your Konftel 800 on the phone. Log in as the administrator. In the menu, tap...

  • Page 43: Configuring The Network Settings Through The Web Interface

    SETTINGS CONFIGURATION AND MANAGEMENT Configuring the Network settings through the web interface Use this procedure to configure the Network settings of your Konftel 800 through the web interface. Log in to the web interface. Click Network Choose the parameter that you want to configure and proceed to the options available.
  • Page 44 To enable or disable the Virtual Local Area Network (VLAN). VLAN By enabling this option, all communication to and from Konftel 800 goes through the specified VLAN. The phone also uses this VLAN to communicate through the web interface. To specify the ID number to be used for all IP telephony VLAN ID communication through VLAN on your phone.
  • Page 45 To enable and disable specification of the phone location Enable settings. Konftel 800 uses Link Layer Discovery Protocol—Media Endpoint Discovery (LLDP-MED) as a data link protocol to send information about itself and receive data about other devices in the same network. You can specify a part of the parameters if some information is unavailable.
  • Page 46 Additional To specify the name of the company. Name By default, it is set to Konftel 800. The administrator can change it to another name. To specify the ZIP code of the location. To specify the name or number of the building.
  • Page 47 LAN. Konftel 800 requests a new IP address when 802.1x authentication succeeds for the first time. If you configure the phone to use DHCP, the phone does not request a new IP address until the current DHCP lease expires.

  • Page 48: Lldp Data Units

    Password LLDP Data Units When Konftel 800 uses LLDP, it sends the information as LLDP Data Units. Each LLDP Data Unit is a sequence of Time-Length-Value (TLV) strings. The phone supports LLDP on primary Ethernet interfaces. The following table lists...
  • Page 49 SETTINGS CONFIGURATION AND MANAGEMENT Category TLV Name String TLV String Value length ADDRESS SUBTYPE = 01; (IPV4) MGMT ADDRESS = IPADD; INTERFACE NUMBER SUBTYPE = 2; INTERFACE NUMBER = 3 ORGANIZATIO IEEE - VLAN OUC = 00-80-C2; IEEE 802.1 N SPECIFIC NAME SUBTYPE = 3;...

  • Page 50: Media Settings

    POWER-VIA- PARAMETERS = POWER TYPE, POWER SOURCE, POWER PRIORITY, POWER VALUE BASIC END-OF- MANDATORY LLDPU MEDIA SETTINGS You can configure the media settings during the installation of Konftel 800 or any time after it. The media settings include the following:...

  • Page 51: Configuring The Media Settings On The Phone

    Voice Quality Monitor Related concepts Media settings description on page 51 Configuring the media settings on the phone Use this procedure to configure the media settings of your Konftel 800 on the phone. Log in as the administrator. In the menu, tap...
  • Page 52 To select Secure Real-time Transport Protocol ( SRTP SRTP parameters to provide encryption, message authentication, and integrity for the audio and video streams. The options are: • : Konftel 800 does not use Disabled SRTP • : If selected, the phone uses if other Optional SRTP devices support it.
  • Page 53 SETTINGS CONFIGURATION AND MANAGEMENT Name Description This is an audio coding format used in interactive real- OPUS Priority time applications on the Internet. It can switch between various codecs depending on the bandwidth available. OPUS adapts to low bit-rate, narrowband speech and to high-quality stereo music.

  • Page 54: Voice Quality Monitoring

    , the phone saves the changes and restarts application. Save Voice quality monitoring Configure Konftel 800 to generate quality metrics and evaluate the overall quality of the calls. You can use this information to troubleshoot various quality aspects of the phone calls.
  • Page 55 SETTINGS CONFIGURATION AND MANAGEMENT • One of the call parties puts the call on hold or resumes it. RTCP XR parameters The following table lists parameters that the RTCP XR contains: Parameter Description CallId Party leg identifier LocalId Reporting device for the media session RemoteId Remote device of the media session OrigID...

  • Page 56: Quality Estimate Metrics

    SETTINGS CONFIGURATION AND MANAGEMENT Parameter Description Signal Non-packet elements of the voice over IP system. Includes a Signal level (SL) metric, which typically has a negative value QualityEst Measures of the established call quality Quality estimate metrics The following table shows the direct measures of the quality of the established call or transmission.

  • Page 57: Configuring Rtcp Xr

    Configuring RTCP XR By default, the voice quality monitoring feature on Konftel 800 is disabled. To use this feature, enable it and specify the Uniform Resource Identifier (URI) of the RTCP XR collector. You can do this on the phone, through the phone web interface, or using the configuration .xml file.

  • Page 58: Ldap Settings

    125 LDAP SETTINGS Konftel 800 supports connection to an external phone book using the Lightweight Directory Access Protocol (LDAP). When the LDAP feature is in the enabled state, you can browse and use the contact information stored in a remote company directory.

  • Page 59: Configuring The Ldap Settings

    Choose the parameter that you want to configure and proceed to the options available. Click Save The phone restarts the application to apply the changes. LDAP settings description The following table lists the LDAP settings of Konftel 800 available through the web interface in the tab. LDAP Parameter Description Connection To specify if the LDAP feature is enabled.
  • Page 60 SETTINGS CONFIGURATION AND MANAGEMENT Parameter Description To specify the password if the LDAP server requires one. Password Leave this field blank if the LDAP server does not require a password. Search options To specify the distinguished name (DN) of the search base. Search base Example: dc=domain, dc=com.
  • Page 61 SETTINGS CONFIGURATION AND MANAGEMENT Parameter Description To define the attributes that the phone displays for a Number attributes selected search hit. The phone receives the displayed information from the LDAP server. The number of the Number attribute tags inside the Number attributes tag may be 0 –...

  • Page 62: Configuring The Ldap Number Attributes Through The Web Interface

    If complete information is unavailable, you can configure only the known parameters. Configuring the LDAP number attributes through the web interface Configure the LDAP number attributes through the web interface of your Konftel 800. You can also configure the LDAP number attributes using a configuration file. For that you must define the corresponding parameter and then import the configuration file.

  • Page 63: Sip Settings

    Configuration file on page 108 Related tasks Importing the configuration file on page 125 SIP SETTINGS The SIP settings can be configured during the installation of Konftel 800. The SIP settings include the following: • Primary account • Secondary account •...

  • Page 64: Configuring The Sip Settings On The Phone

    The SIP settings can be configured on the phone or through the web interface of Konftel 800. If you do not configure the SIP account for Konftel 800, the phone operates in USB only user mode. Configuring the SIP settings on the phone Use this procedure to configure the SIP settings of your Konftel 800 on the phone.
  • Page 65 SIPS Even if you choose TLS, the Konftel 800 still accepts incoming UDP or TCP signaling. To optionally specify the local port Konftel 800 will use for Source port SIP signaling. This section is available in the web interface if you choose TLS or SIPS transport protocol.
  • Page 66 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To enable or disable client certificate verification. The Require Client options are: Certificate • Yes: The phone rejects incoming secure SIP connections if the client does not have a valid certificate. • No. This is the default setting. To specify the time-out for the TLS settings negotiation Negotiation during a call setup.
  • Page 67 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To specify the password used for encryption of the private Password key if it is encrypted. Primary Account To set the name for the primary account displayed locally on Account Name the screen according to the existing corporate standards. In USB only user mode the phone does not display the account name on the home screen in Idle mode.
  • Page 68 Registration account expires and the SIP server is sent a corresponding Timeout request. Konftel 800 automatically renews the registration within the time interval if the phone is still on and connected to the server. The default value is 300 seconds.
  • Page 69 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To define the password for the or domain Password Realm authentication in the secondary account. You can configure this parameter if you log in with the administrator password. On the phone, the password can be configured in Settings >...
  • Page 70 DTMF signaling methods. When is configured as the DTMF method on RFC 4733 Konftel 800, but the other party does not accept such method during SIP negotiation, the phone falls back into using the method. In-band To specify the type of audio traffic.
  • Page 71 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To enable or disable remote port forwarding. By default, the Disable 'rport' setting is disabled. To set a time-related mechanism to disconnect the sessions Session Timers that the phone establishes. The options are: • .
  • Page 72 Name Description To enable or disable using static source ports for the SIP Use Static Source signaling. When Konftel 800 has a configured SIP account, Port it can handle firewalls differently. The options are: • Use static port number for outgoing TPC and TLS packets.
  • Page 73 SETTINGS CONFIGURATION AND MANAGEMENT Name Description To enable or disable the Simple Traversal of UDP through Enable STUN the NAT (STUN) is a protocol that assists devices behind a NAT firewall or router with their packet routing. STUN is commonly used in real-time voice, video, messaging, and other interactive IP communication applications.

  • Page 74: Caller Information Presentation

    , the phone saves the changes and restarts the application. Save Caller information presentation Konftel 800 displays the information about the calling person to show who is calling or demonstrate that the caller ID is unknown. This data is available on the , and screens.

  • Page 75: Certificates Application

    Unknown. CERTIFICATES APPLICATION Use certificates to authenticate Konftel 800 using TLS. You can apply certificates manually when configuring the advanced settings of your phone, or the phone can automatically download the certificates from the provisioning server if you enabled Device Management.

  • Page 76: Installing The Certificate

    SETTINGS CONFIGURATION AND MANAGEMENT On the page, click Microsoft Server Certification Authority Request a certificate Click Advanced certificate request Enter the following information: , specify the name, email, company name, Identifying information department, and city, state, and country of your location. , click Type of Certificate Needed Client Authentication Certificate...

  • Page 77: Exporting The Private Key

    On the web interface, browse to the .PEM files to use TLS mode of authentication. STANDARD ENCRYPTION ALGORITHMS Konftel 800 uses encryption algorithms that comply with the current industry standards. Currently, the phone supports the data integrity algorithms with no publicly known vulnerabilities and are the US National Institute of Standards and...

  • Page 78: Standard Encryption For 802.1X

    Encryption methods in Legacy encryption mode on page 149 Standard encryption for 802.1x You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method. If you need to use EAP MD5 method for 802.1x, ensure that you set the...

  • Page 79: Enabling Eap Md5 For 802.1X On The Phone

    Allow Legacy Encryption cannot be enabled while FIPS mode is enabled. You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method on the phone, through the web interface, or using a configuration file.

  • Page 80: Enabling Eap Md5 For 802.1X Through The Web Interface

    82 Standard encryption for media encryption with SRTP When the key exchange for media encryption with SRTP occurs, Konftel 800 supports the AES_256_CM_HMAC_SHA1_80 mandatory crypto. Some servers do not support this mandatory crypto. In this case you must enable option to make an SRTP call.

  • Page 81: Legacy Encryption Mode

    When you upgrade Konftel 800 from a version without the legacy encryption option, the phone automatically enables the option. Allow Legacy Encryption When you reset Konftel 800 to the factory default state, the phone also enables option. Allow Legacy Encryption When upgrading, the phone automatically enables the...

  • Page 82: Configuring Legacy Encryption Mode Through The Web Interface

    The phone reboots to apply the changes. Configuring Legacy encryption mode using the configuration file Use this procedure to configure Legacy encryption mode of your Konftel 800 using the .xml configuration file. When you boot the phone after successful provisioning, the setting file changes, depending on the configuration of the standard encryption use.

  • Page 83: Fips Mode

    When the administrator disables and enables FIPS Mode Allow Legacy , Konftel 800 supports only AES_CM_128_HMAC_SHA1_80 for media Encryption encryption with SRTP. Configuring FIPS mode on the phone Use this procedure to configure FIPS mode of your Konftel 800 on the phone.

  • Page 84: Configuring Fips Mode Through The Web Interface

    Legacy encryption mode on page 81 Standard encryption for 802.1x on page 78 Configuring FIPS mode through the web interface Use this procedure to configure FIPS mode of your Konftel 800 through the web interface. • Log in as the administrator. •...

  • Page 85: Usb Only User Mode

    Konftel 800 supports USB only user mode. With this feature, the conference phone can operate with no SIP account and SIP register configured. In USB only user mode Konftel 800 acts as a speakerphone that the user can use to conduct virtual meetings and listen to audio files.

  • Page 86: Usb Only User Mode Icons

    Time presentation in USB only user mode When the phone has NTP server settings enabled but it cannot connect to the NTP server in USB only user mode, Konftel 800 does not display time on the home screen and in the settings menu.
  • Page 87 SETTINGS CONFIGURATION AND MANAGEMENT When Konftel 800 shows either the or the USB Connected Bluetooth icon on the idle home screen, the phone displays time on the connection status bar.

  • Page 88: Features And Accessories

    FEATURES AND ACCESSORIES KONFTEL UNITE You can manage your Konftel 800 from a mobile phone or a tablet if you have Konftel Unite installed on the device. Download and install Konftel Unite free from App Store and Google Play like any other application. Use the NFC tag to easily start downloading the application.

  • Page 89: Disconnecting Devices

    If your mobile device displays Konftel 800 you want to connect, tap on the mobile device screen. Connect • If your mobile device does not display Konftel 800 you want to connect, tap and then tap the connection symbol in the upper left corner of your Skip mobile device screen.

  • Page 90: Deleting Pairing

    Optional: Connect to Konftel 800. The phone displays a connection symbol on the screen. and proceed with configuration. Settings Konftel Unite settings The following table lists the parameters for Konftel 800, which you can set from the Konftel Unite interface:...
  • Page 91 FEATURES AND ACCESSORIES Name Description To enable or disable the connection to Konftel 800. The Connection options are: • On: The default option. • Off: To use Konftel Unite without connection to any Konftel 800. You can use the conferencing application from your mobile device within your mobile phone subscription.

  • Page 92: Expansion Of The Phone Coverage

    Unite EXPANSION OF THE PHONE COVERAGE Use your Konftel 800 on larger conference tables or when the number of a meeting participants is greater than 10. In this case you can ensure high-level quality of audio signal by expanding the phone coverage in the room without a PA system.
  • Page 93 Arrange a daisy chain with your conference phone and another Konftel 800 or connect Smart Mic expansion microphones. The maximum number of devices connected in a daisy chain is 3. One Konftel 800 phone acts as a central device (a “master”) and one or two other units act as expansion devices (“slaves”).

  • Page 94: Arranging A Daisy Chain

    Arranging a daisy chain Use this procedure to arrange a daisy chain of one master Konftel 800 phone and one or two slave conference phones or expansion microphones. If you arrange the daisy chain made of several conference phones, prepare the connection cables.

  • Page 95: Disabling Daisy Chain Mode

    The phone restarts the application to apply the changes. • To define the mode of your Konftel 800 through the web interface, do the following: a) On the web interface, click Phone b) In , select the required mode from the drop-down list.

  • Page 96: Upgrading Expansion Microphone Firmware

    The phone suggests an automatic upgrade of the expansion microphone firmware when you connect your Smart Mic to Konftel 800. You can connect one or two Smart Mics simultaneously. You can also initiate the expansion microphone firmware upgrade manually.

  • Page 97: Upgrading Two Expansion Microphones

    In this case, you postpone the upgrade until you connect Smart Mic 2 again. When the upgrade is complete for Smart Mic 1 and Smart Mic 2 is still upgrading, the LED turns off on Smart Mic 1, and Konftel 800 displays the following message: Upgrade in progress...

  • Page 98: Terminating Expansion Microphone Upgrade

    Konftel 800 displays the following message: Upgrade in progress Smart Mic 1: 50% Smart Mic 2: Failed When Smart Mic 1 upgrade is complete, its LED turns off, and Konftel 800 displays the following message: Upgrade in progress Smart Mic 1: Done Smart Mic 2: Failed This message disappears in 10 seconds.

  • Page 99: Bluetooth® Connection

    LE and Bluetooth ® Classic connection simultaneously. If you connect Konftel 800 to a Bluetooth ® device, you cannot connect it to a mobile device with the Konftel Unite application until you end the connection to the Bluetooth ® device.

  • Page 100: Bluetooth® Classic Profiles

    FEATURES AND ACCESSORIES If you connect Konftel 800 to a mobile device using the Konftel Unite application, you cannot connect it to another Bluetooth ® device until you end the connection to Konftel Unite. In USB only user mode, the phone supports connection to Bluetooth ®...

  • Page 101: Pairing And Connecting Bluetooth® Devices

    Related concepts Phone settings description on page 30 Removing Bluetooth® pairing Use this procedure to remove the pairing between Konftel 800 and your other ® Bluetooth device to delete unwanted pairings. also deletes the Bluetooth ®...

  • Page 102: Connection Between Paired Bluetooth® Devices

    After you pair Konftel 800 and your Bluetooth device, the two devices establish the connection. Disconnection The connection ends if you manually disconnect Konftel 800 from the Bluetooth ® device or if the distance between the devices does not allow to maintain the communication.

  • Page 103: Disabling Bluetooth® Radio

    .xml configuration file. The default value is true, which means that the feature is enabled. Obtain the .xml configuration file for Konftel 800. In the configuration file, go to the <bluetooth> section. Set the <enable> parameter to false.

  • Page 104: Maintenance

    MAINTENANCE PROVISIONING ON KONFTEL 800 To ensure effective operation of your Konftel 800, you can upload to the phone the latest firmware version with the software update packages and configuration file with the necessary settings. You can upgrade and configure a single phone or multiple phones simultaneously.

  • Page 105: Firmware Upgrade Using Check-Sync

    The phone checks the firmware and starts the firmware upgrade only if it the new firmware differs from the firmware installed. If Konftel 800 receives a check-sync NOTIFY event in Idle Mode, it automatically starts the Device Management procedure, which includes downloading the firmware file.

  • Page 106: Firmware Upgrade And Downgrade Using A Usb Mass Storage Device

    Firmware upgrade and downgrade using a USB mass storage device Konftel 800 uses the USB mass storage device to support firmware upgrade and downgrade without the web interface. When you connect the USB mass storage device to Konftel 800, the phone starts auto-mounting and finds the firmware file stored on the USB mass storage device.

  • Page 107: Upgrading Firmware Using A Usb Mass Storage Device Without The Administrator Password

    MAINTENANCE Upgrading firmware using a USB mass storage device without the administrator password Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have no administrator password set. • Download the appropriate firmware file and save it in a specified location on your personal computer.

  • Page 108: Configuration File

    Uploading a firmware file on page 104 Configuration file Create an .xml configuration file on Konftel 800. This file contains information about all the settings that were configured on the phone as of the moment of the file creation. The configuration file can be used as: •...

  • Page 109: Configuration File Structure

    MAINTENANCE Configuration file structure The following table shows the default structure of the .xml file: String Description To specify the number of the phone <xml> configuration version and encoding. To specify the model of the conference <KT800> phone. To specify the time and region parameters. <time>...
  • Page 110 MAINTENANCE String Description <offset_hours> To specify the time in hours between the standard time and daylight saving time. The values are 1 and 2. The default setting is 1. <dst_start> To specify when to apply the offset for daylight saving time. <month>...
  • Page 111 MAINTENANCE String Description <capneg> To specify whether Capability Negotiation is enabled. <codec> To specify the codec settings. <iLBC> To specify the internet Low Bitrate Codec (iLBC) codec settings. <prio> To specify the codec priority (0–6). <mode> To specify the frame length in ms. <OPUS>...
  • Page 112 MAINTENANCE String Description <enable_rtcp_xr> To specify whether the sending of RTCP XR is enabled. <rtcp_xr_collector_uri> To specify the Uniform Resource Identifier (URI) of the RTCP XR collector. To specify SIP settings. <sip> <primary_account> To specify the primary account settings. <name> To specify the name of the account.
  • Page 113 MAINTENANCE String Description <reg_timeout> To specify the optional interval for registration in seconds. If zero, the phone uses the default interval. The default setting is 300. <secondary_account> To specify the secondary account settings. <name> To specify the name of the account. <user>...
  • Page 114 MAINTENANCE String Description <reg_timeout> To specify the optional interval for registration in seconds. If zero, the phone uses the default interval. The default setting is 300. <fallback_account> To specify the fallback account settings. <name> To specify the name of the account. <user>...
  • Page 115 MAINTENANCE String Description <reg_timeout> To specify the optional interval for registration in seconds. If zero, the phone uses the default interval. The default setting is 300. <source_port> To specify the source port to listen to. <transport_protocol> To specify the transport protocol which the phone must use.
  • Page 116 MAINTENANCE String Description <session_timers> To specify the chosen time-related mechanism to disconnect the sessions. <session_expiration_minimum> To specify the minimum session expiration value in seconds. The default value is 90 seconds. <session_expiration> To specify the session expiration value in seconds. The default setting is 1800 seconds.
  • Page 117 MAINTENANCE String Description <dtmf> To specify DTMF signaling settings. <method> To specify the DTMF signaling method. <rfc4733_payload_type> To specify the type of audio traffic. <nat_traversal> To specify the configured NAT traversal settings. <ice> To specify whether ICE is configured for the phone.
  • Page 118 MAINTENANCE String Description <name> To specify the name of the phone. <language> To specify the language selected. <allow_legacy_encryption> To specify whether Legacy encryption mode is enabled. The default setting is true. <password> To specify the password used. <ringlevel> To specify the volume level configured. <key_tone>...
  • Page 119 MAINTENANCE String Description <domain> To specify the domain name of the phone. <dns1> To specify Domain Name Server (DNS) 1 of the phone. <dns2> To specify DNS 2 of the phone. You can use maximum two DNS. <static_ip> To specify the static IP settings. <ip>...
  • Page 120 MAINTENANCE String Description <password> To specify the password for MD5 EAP method. <eap_tls> To specify whether the phone uses TLS EAP method. <enable> To specify whether TLS EAP method is enabled. <password> To specify the password for the TLS EAP method.
  • Page 121 MAINTENANCE String Description <trailing_street_suffix> To specify the trailing street suffix. <street_suffix> To specify the street suffix. <number> To specify the number of the building where the phone is located. <number_suffix> To specify the building number suffix. <landmark> To specify the reference point for the location of the phone.
  • Page 122 MAINTENANCE String Description <elin> To specify Emergency Location Identification Number (ELIN). <qos> To specify the quality of service (QoS) parameters. <dscp_sip> To specify a value in the range from 0 to 63 to prioritize the SIP messages. <dscp_media> To specify a value in the range from 0 to 63 to prioritize the media packets.
  • Page 123 MAINTENANCE String Description <remote_syslog_enable> To specify whether the remote syslog feature is enabled. <remote_syslog_host> To specify the IP address or the host of the remote syslog server. To configure the LDAP options. <ldap> <enable> To enable the LDAP feature. By default it is disabled.
  • Page 124 MAINTENANCE String Description <min_length_for_ext_prefix> To restrict the external prefix that the phone adds only if the phone number is longer than the minimum length. <number_prefix_for_no_ext_prefi To specify the initial number for the phone x> numbers in case of using which the phone adds no external prefix.

  • Page 125: Exporting The Configuration File

    Exporting the configuration file Use this procedure to export the configuration file from your Konftel 800. Decide where the exported configuration file will be saved. By default, it is saved in the folder for downloaded files on your PC.

  • Page 126: Device Management

    All the configuration files that Konftel 800 generated before Release 1.0.1 acquire the <KT800 version="0"> attribute in the xml root element. The configuration files generated with Release 1.0.1 acquire the <KT800 version="1">...
  • Page 127 Konftel Zero Touch Installation Zero Touch Installation (ZTI) is an add-in for automatic provisioning that Konftel 800 supports. It provides for the remote configuration of the phone by using a data...

  • Page 128: Registration With The Zti Device Management Service

    Connect the phone to the data network and start it. In the web browser, enter https://www.konftel.com/zti-access. Register the phone with Konftel ZTI by entering its MAC address and serial number. The device management service provides the phone with the address of the provisioning server where the user can download the configuration file in .xml...

  • Page 129: Device Management Settings

    Make the appropriate configurations. Click Save The phone reboots to apply the changes. Device Management settings The following table lists the Device Management settings of Konftel 800 available through the web interface in the tab in the Provisioning Device Management section or on the phone in Settings >...
  • Page 130 MAINTENANCE Name Description To enable or disable the verification of the authentication Check Server with a certificate. The options are: Certificate • On: Server certificates are checked. • Off: Server certificates are not checked. This is the default setting. To specify the lowest TLS version for the phone. The Lowest TLS options are: Version...

  • Page 131: Files On The Provisioning Server

    The global configuration file contains the basic configuration, that is, all settings that are common for all conference phones in your location. The easiest way to create this file is to configure Konftel 800 and export the configuration file, or use the built-in configuration file creator.

  • Page 132: Device-Specific Configuration File

    Instead of the .xml file format, you can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml format. If the phone cannot find the .xml file on the provisioning server, it searches for the configuration file in the other formats.

  • Page 133: Certificate Configuration Files

    Instead of the .xml file format, the service provider can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml format. If the phone fails to find the .xml file on the provisioning server, it searches for the configuration file in other formats specified above.

  • Page 134: Certificate Configuration File Structure

    The phone starts downloading the certificate if the hash algorithm value is different from the one of the certificate file that Konftel 800 stores. That means that the phone downloads one certificate file only once and subsequently checks that the certificate file is still the same.
  • Page 135 MAINTENANCE String Description <cert_uri> To specify the 802.1x path to get the device certificate. <cert_hash algo="md5"> To specify the MD5 hash algorithm that the phone uses to verify the 802.1x device certificate. <privkey_uri> To specify the 802.1x path to get the private key.
  • Page 136 MAINTENANCE String Description <cert_hash algo="md5"> To specify the path to get the private key for the SIP connection. <privkey_uri> To specify the MD5 hash algorithm that the phone uses to verify the private key for the SIP connection. <provisioning> To specify the provisioning server certification arrangements of the phone.
  • Page 137 MAINTENANCE String Description <privkey_uri> To specify the MD5 hash algorithm that the phone uses to verify the private key for connection to the provisioning server. <ldap> To specify the LDAP server certificate arrangements of the phone. <ether_8021x> To specify the path to get the CA certificate for connection to the LDAP server.

  • Page 138: Firmware Binary

    Firmware binary This file contains the firmware binary that is downloaded and installed by Konftel 800 if the metadata file shows that it is newer than the currently installed version. Firmware metadata file Firmware metadata file is file in .xml format with information of the firmware version in the binary file.

  • Page 139: Creating Firmware Binary And Metadata Files

    Use this procedure to create the firmware binary and metadata files manually. Apply them to check if a newer firmware version for your Konftel 800 is available. Collect the information about the version, file name, and checksum of the firmware binary for the phone.

  • Page 140: Configuring Multiple Devices

    138 Configuring multiple devices You can configure multiple Konftel 800 devices using the configuration file as a management tool instead of configuring the settings on each phone individually. For this purpose, you need to export the configuration file, edit the settings as necessary, and then place the configuration file to the provisioning server.

  • Page 141: Remote Syslog Server

    With the remote syslog feature enabled, the phone sends the syslog messages to the syslog server and also logs them in the local log. By default, the remote logging feature on Konftel 800 is in the disabled state. Configuring remote syslog settings To use the remote syslog feature, you need to do the following: •...

  • Page 142: Fall Back Server Support

    Performing factory reset You can reset your Konftel 800 to factory default. You can do the factory reset only on the phone after you log in as the administrator. If you need to perform the factory reset without logging in as the administrator,...

  • Page 143: System Recovery

    Phone System recovery As an administrator, you can perform system recovery on Konftel 800 to return the phone to operable state, for example, after a faulty upgrade or when the phone application fails. System recovery replaces the current firmware with the previously installed operable firmware version.

  • Page 144: Web Interface Settings

    _ web _ certificate.pem –day <number of days>-nodes Protection against cross-site request forgery When the user logs in to the web interface of Konftel 800 with the administrator password, the web application of the phone uses specific tokens to protect against Cross-Site Request Forgery (CSRF) attacks.

  • Page 145: Device Status View

    DEVICE STATUS VIEW You can view the configured settings of your Konftel 800 through the web interface and get information about the device, logs, and licenses. You can use this information for troubleshooting.

  • Page 146: Viewing The Phone Status

    Daylight Saving Time You can not change settings in the tab. Status Viewing the phone status Use this procedure to view the status and settings of Konftel 800 through the web interface. Log in to the web interface. Select the tab.

  • Page 147: Viewing System Logs

    MAINTENANCE • . This is the default setting. All Logs • System Logs • PhoneApp Logs • Linux Kernel Logs • Bluetooth Stack Logs • PJSIP logs • Device Management • SIP traces • Device Management Debug You can also specify custom logs type in the field.

  • Page 148: Licenses

    MAINTENANCE On the web interface, click Network logs You can do the following: • Click the button to reboot the phone into Reboot Into Network Log Mode Network log mode. • Click the button to download the archive with the Download Network Logs available network logs.

  • Page 149: Appendix A. Encryption Methods In Legacy Encryption Mode

    APPENDIX A. ENCRYPTION METHODS IN LEGACY ENCRYPTION MODE ENCRYPTION METHODS IN LEGACY ENCRYPTION MODE The following table lists the encryption methods enabled and disabled in Legacy encryption mode: Cipher 802.1X LDAP HTTPS Legacy Cipher TLS_DHE_DSS_WITH_3DES_ EDE_CBC_SHA256 TLS_DHE_DSS_WITH_AES_12 8_CBC_SHA TLS_DHE_RSA_WITH_AES_12 8_GCM_SHA256 TLS_DHE_RSA_WITH_AES_25 6_GCM_SHA384 TLS_ECDH_ECDSA_WITH_AE...
  • Page 150 APPENDIX A. ENCRYPTION METHODS IN LEGACY ENCRYPTION MODE Cipher 802.1X LDAP HTTPS Legacy Cipher TLS_ECDHE_ECDSA_WITH_A ES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES _128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES _256_GCM_SHA384 TLS_RSA_WITH_AES_128_GC M_SHA256 TLS_RSA_WITH_AES_256_GC M_SHA384 TLS_DHE_RSA_WITH_3DES_ EDE_CBC_SHA TLS_DHE_RSA_WITH_AES_12 8_CBC_SHA TLS_DHE_RSA_WITH_AES_12 8_CBC_SHA256 TLS_DHE_RSA_WITH_AES_25 6_CBC_SHA TLS_DHE_RSA_WITH_AES_25 6_CBC_SHA256 TLS_ECDH_ECDSA_WITH_3D ES_EDE_CBC_SHA TLS_ECDH_ECDSA_WITH_AE S_128_CBC_SHA Table continued…...
  • Page 151 APPENDIX A. ENCRYPTION METHODS IN LEGACY ENCRYPTION MODE Cipher 802.1X LDAP HTTPS Legacy Cipher TLS_ECDH_ECDSA_WITH_AE S_128_CBC_SHA256 TLS_ECDH_ECDSA_WITH_AE S_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AE S_256_CBC_SHA384 TLS_ECDH_RSA_WITH_3DES _EDE_CBC_SHA TLS_ECDH_RSA_WITH_AES_ 128_CBC_SHA TLS_ECDH_RSA_WITH_AES_ 128_CBC_SHA256 TLS_ECDH_RSA_WITH_AES_ 256_CBC_SHA TLS_ECDH_RSA_WITH_AES_ 256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_3 DES_EDE_CBC_SHA TLS_ECDHE_ECDSA_WITH_A ES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_A ES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_A ES_256_CBC_SHA Table continued…...
  • Page 152 APPENDIX A. ENCRYPTION METHODS IN LEGACY ENCRYPTION MODE Cipher 802.1X LDAP HTTPS Legacy Cipher TLS_ECDHE_ECDSA_WITH_A ES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_3DE S_EDE_CBC_SHA TLS_ECDHE_RSA_WITH_AES _128_CBC_SHA TLS_ECDHE_RSA_WITH_AES _128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES _256_CBC_SHA TLS_ECDHE_RSA_WITH_AES _256_CBC_SHA384 TLS_RSA_WITH_3DES_EDE_ CBC_SHA TLS_RSA_WITH_AES_128_CB C_SHA TLS_RSA_WITH_AES_128_CB C_SHA256 TLS_RSA_WITH_AES_256_CB C_SHA TLS_RSA_WITH_AES_256_CB C_SHA256 TLS_DHE_DSS_WITH_3DES_ EDE_CBC_SHA TLS_DHE_DSS_WITH_AES_12 8_CBC_SHA256...
  • Page 153 Index Numerics changing password check-sync NOTIFY event 802.1x codecs standard encryption conference phone configuration analog parameters advance settings RTCP XR 54, 56, Device Management settings application to manage the phone media settings migration basic settings multiple devices Bluetooth network settings 42, audio streaming phone settings deleting pairing...
  • Page 154 INDEX Daylight Saving Time (continued) firmware (continued) state upgrade (continued) Device certificate using mass storage device information device Device Management with administrator files on server password Device Management Server without administrator Device Management settings password configuring on the phone upgrading through the web interface firmware binary device-specific configuration file...
  • Page 155 INDEX LLDP Data Units physical layout logging in power supply logs power-saving mode prerequisites primary account media encryption with SRTP protection against CSRF FIPS mode provisioning standard encryption files on server media settings purpose configuring on the phone configuring through the web interface reboot device metadata file, creation...
  • Page 156 INDEX settings Device Management usb only user mode SIP invite icons SIP NOTIFY SIP settings viewing configuring settings on the firmware version phone IP address sleep mode MAC address enabling network logs Smart Mic system logs upgrade voice quality monitoring automatic quality estimate metrics manual 95,...
  • Page 158 ® into all Konftel Conference phones and devices. The products are sold globally under the Konftel brand and our headquarters are based in Sweden. Read more about the company and our products at konftel.com. Konftel AB, Box 268, SE-901 06 Umeå, Sweden...

Table of Contents