Page 1
K O N F T E L . C O M Installation & Administration of Konftel 800 E N G L I S H...
Page 2
Konftel AB hereby declares that this conference phone is in conformity with all the essential requirements and other relevant provisions of Radio Equipment Directive 2014/53/EU (RED). Please visit www.konftel.com to view the complete declaration of conformity. Warning! Do not expose the Konftel 800 to water or moisture.
Hostname to IP address mapping....112 Out-of-box experience........20 Messaging the proxy without adding a record route.......... 112 Configuration of Konftel 800......21 Setting the password for Konftel 800....21 SNI support..........113 DHCP configuration options......22 Network settings......... 114 LLDP Data Units......... 115 Connecting to a network with DHCP....
Page 4
Importing the configuration file....130 Disconnecting devices........ 163 Uploading a firmware file......131 Deleting pairing...........164 Validation and migration of configuration..132 Configuring the Konftel Unite settings..164 Firmware upgrade and downgrade Konftel Unite settings........165 using a USB mass storage device..133 Chapter 9: Coverage expansion Upgrading firmware using a USB mass Expansion of the phone coverage....
Page 5
Contents Setting PJSIP log level through the web interface..........186 Setting PJSIP log level using the configuration file........187 Network logs..........188 Viewing network logs........188 Licenses............188 Chapter 11: Specifications Device specifications........189 Chapter 12: Appendix A. Encryption methods in Legacy encryption mode Encryption methods in Legacy encryption mode........
INTRODUCTION PURPOSE This document provides checklists and procedures for installing, configuring, and administering Konftel 800. It is intended primarily for implementation engineers and administrators. CHANGE HISTORY Issue Date Summary of changes Release September • Updated Icons on page 14 with the Lecture mode 1.0.8...
Page 7
INTRODUCTION Issue Date Summary of changes Release April 2022 • Updated Configuration parameters on page 35 1.0.7.1 with information about new supported languages. • Added DNS mapping on page 118. Release March 2022 • Updated Phone overview on page 10 with 1.0.7 information about the connection to other devices.
Page 8
INTRODUCTION Issue Date Summary of changes Release September • Updated Icons on page 14 with the icon. Warning 1.0.6 2021 • Added new section Rebooting the phone page 100. • Added Input validation and data type restrictions page 98. • Added new section SIP account registration status...
Page 9
• Added Standard encryption algorithms page 152. • Updated Konftel Unite on page 162 in line with the change in MD5 usage. • Added Expansion microphone firmware upgrade page 176. • Updated Bluetooth®...
OVERVIEW PHONE OVERVIEW Konftel 800 is a SIP conference phone that you can use to make calls and hold conferences with great audio quality. It improves user experience and ensures an easier connection to audio conference bridges. The conference phone features include a simple-to-use 4.3 inch graphical LCD with a backlight, volume control, and mute buttons.
Page 11
You can automate the configuration update process. Konftel 800 can poll the file server at a defined interval for changes and apply the changes when in Idle mode.
OVERVIEW PHYSICAL LAYOUT Figure 1: Front view of Konftel 800 The following table lists the buttons and the other elements of Konftel 800. Callout number Description Mute buttons Volume down button...
OVERVIEW Callout number Description Volume up button NFC tag Touch screen LED status indicators CONNECTION LAYOUT Figure 2: Connection layout of Konftel 800 The following table lists the sockets and ports available on Konftel 800 for connection.
USB Type A Micro-USB Type B Audio expansion ports Kensington® security lock port NFC tag for Bluetooth ICONS Icons on the home screen of Konftel 800 Icon Name Description To check the call list. The phone provides the following Recent information about the calls: •...
Page 15
Volume Off on the phone is off when you change the volume to the lowest level on the connected USB host. To indicate the built-in NFC tag. Other icons of Konftel 800 Icon Name Description To indicate the phone off-hook status and answer an Make Call incoming call.
Page 16
OVERVIEW Icon Name Description To show an outgoing call. Outgoing To indicate a missed call. Missed To put a call on hold or to indicate that a call is on hold. Hold Hold To arrange a conference call. Conference To split a conference call into several separate calls. Split To add a participant to a conference call.
Page 17
To move to subsections of a section. Arrow Right To indicate an active USB connection. Connected Konftel Unite To show the connection of the phone to Konftel Unite. connected To indicate that the phone is in a daisy chain mode. Daisy Chain Mode...
The keyboard does not save the switched state. When you reopen the keyboard, the layout corresponds to the selected phone language. DIMENSIONS The following table shows the dimensions of Konftel 800. Parameter Dimension 326.41 mm Width 369.87 mm Length 74.7 mm...
TV sets, radios, computers, and microwave ovens to avoid interference. In case Konftel 800 and the corresponding accessories are damaged, the device does not operate normally or exhibits a distinct change in performance, refer for servicing to the qualified service personnel.
LLDP parameters provided by the L2/L3 network device to which Konftel 800 connects via Ethernet. If Konftel 800 receives a VLAN ID via DHCP or LLDP, the phone releases the received IP address and performs DHCP Discovery with all packets tagged with the VLAN ID.
For example, <KT800 version="7"> on the top of the 1.0.7 firmware compliant .xml file for the device with 1.0.6 firmware installed indicates that the file received has a higher value than the file available on the device. Konftel 800 rejects such a file.
Skip Here, Konftel 800 functions in the administration mode, and you can configure phone settings. However, you cannot access the web interface. Using the keyboard on the phone screen, type your password. It can contain letters, numbers, and special characters.
About this task Use this procedure to connect to a network with DHCP from your phone or through the web interface. Procedure • To connect to the network with DHCP from Konftel 800, do the following: Log in as the administrator.
Save The phone reboots. Konftel 800 .xml configuration files Konftel 800 uses .xml files through the centralized management server during provisioning. Sample .xml configuration files are available at www.konftel.com. The following table lists the available .xml configuration files: .xml file Description kt800_certcfg.xml...
.xml file Description kt800_fw_version.xml A file that contains details about the firmware version of the phone. This file comes with each Konftel 800 firmware build download. Do not modify this file. Related concepts Device Management on page 136 Related information...
Page 26
You can modify the .xml file to configure the parameters of your Konftel 800. Here, add specific data to the file section. In the example you can see the expanded SIP...
The release-specific firmware contains a .xsd file for the configuration file review for errors in the parameters set. Konftel 800 performs a .xsd file validation when a configuration file is uploaded through the web interface or a management server. If...
By default, there is no password for web administration set. Ensure that Konftel 800 is in Idle mode, that is it shows the normal idle screen, before attempting to log in to the web administration server. It is not possible to be in the configuration menu on the phone and through the web interface at the same time.
To apply the change, Konftel 800 may restart a specific software layer or reboot. If the device reboots, you must wait until the procedure completion, press F5 to refresh the web page, and log in again.
INITIAL SETUP AND CONFIGURATION • Smart Mic 1 Version • Smart Mic 2 Version • SIP Registration Tap the icon twice to return to the home screen. Arrow Left Setting a static IP address About this task Use this procedure to connect to the network using a static IP address, and not with DHCP.
Logging in to the web interface of Konftel 800 About this task Use this procedure to log in to the web interface of your Konftel 800. You can access the web interface only if you set the administrator password for your phone.
INITIAL SETUP AND CONFIGURATION Logging out from Konftel 800 About this task Use this procedure to log out from the web server of your Konftel 800 from your web browser. Before you begin You must be logged in to the web interface of your conference phone.
Use this procedure to log in as the administrator by using the touch screen of your Konftel 800. Procedure On the touch screen, type Settings > Admin Login Enter the administration password. Configuring the settings on the phone About this task Use this procedure to configure the settings of your Konftel 800 on the phone.
Page 34
INITIAL SETUP AND CONFIGURATION Before you begin Log in as the administrator. Procedure In the menu, tap the required group. Settings Settings Choose the parameter that you want to configure and proceed to the options available. Tap the icon twice to return to the home screen. Arrow Left The phone reboots to apply the changes.
You can see the XML variable name definition for each parameter in the left column. The right column shows a brief description of the parameter and provides the title in the web administration and the Konftel 800 User Interface (the touch screen administration menus).
Page 36
To specify the IP address or FQDN of an NTP server. If DHCP Option 42 provides the NTP server value, Konftel 800 uses the DHCP provided value. If DHCP Option 42 is not available, the phone applies this XML parameter.
Page 37
SETTINGS CONFIGURATION AND MANAGEMENT String Description <date_format> To specify the date format which consists of the day, month and year. Here, dd indicates the day of the month, D is a shortened version of the day of week, DD is the full version of the day of the week, M is a shortened version of the month, MM is the full version of the month, yy is the last 2 digits of the calendar year, yyyy is the full calendar year.
Page 38
- Full numerical designation of the year/month/date. For example, 2020/01/10. • The default value. Here, your Konftel 800 applies the date format that is standard for the selected language. For example, if you choose , the date format is dd.mm.yyyy.
Page 39
SETTINGS CONFIGURATION AND MANAGEMENT String Description <dst_start> The top line of DST start date and time section. To indicate when the DST parameters become applicable. <month> To specify the month to apply the DST parameters. Month number as an integer with the values of 1 to Terminology reference : Start Month Web interface...
Page 40
SETTINGS CONFIGURATION AND MANAGEMENT String Description <dst_stop> The top line of DST stop date and time section. To indicate when the DST parameters become inapplicable. <month> To specify the month to end the DST parameters application. Month number as an integer with the values of 1 to Terminology reference : Stop Month Web interface...
Page 41
SETTINGS CONFIGURATION AND MANAGEMENT String Description <hour> To specify the hour to end the DST parameters application. The hour format is a 24-hour format with values from 0 to 23. Terminology reference : Stop Hour Web interface : Not configurable Phone UI The top line of the media and codec section.
Page 42
SETTINGS CONFIGURATION AND MANAGEMENT String Description <capneg> To determines if during the SIP offer and answer procedure the SDP protocols and attributes can be negotiated. • True. • False. This is the default setting. Terminology reference : Capability Negotiation Web interface (RFC5939) : Capability Negotiation Phone UI...
Page 43
The top line of the OPUS codec section. OPUS offers excellent bandwidth versus audio quality performance. It supports bandwidths up to wide-band fidelity. Konftel recommends using it whenever possible. <prio> To specify the OPUS priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation).
Page 44
SETTINGS CONFIGURATION AND MANAGEMENT String Description <prio> To specify the PCMA priority. Here, 6 stands for the highest priority, 1 - for the lowest, and 0 - for the disabled (not offered during negotiation). Terminology reference : PCMA Web interface : PCMA Priority Phone UI <G722>...
Page 45
SETTINGS CONFIGURATION AND MANAGEMENT String Description <enable_rtcp_xr> To enable the Real-Time Transport Control Protocol with the Extended Reports capability. The options are the following: • True. • False. This is the default setting. Terminology reference : Enable RTCP XR Web interface : Enable RTCP XR Phone UI <rtcp_xr_collector_uri>...
Page 46
SETTINGS CONFIGURATION AND MANAGEMENT String Description <primary_account> The top line of the primary account section. After registration, the primary account is applicable for inbound and outbound calls. <name> To specify the name visible on the phone screen on the primary line. This name is not a part of the SIP messaging.
Page 47
FQDN. If you append ;hide to the end of the proxy string, Konftel 800 avoids adding a record route to the SIP messaging. For more information, see Messaging the proxy without adding a record route on page 112.
Page 48
SETTINGS CONFIGURATION AND MANAGEMENT String Description <realm> To specify the network domain which the phone accepts incoming calls from. For example, company.com. The other name is the SIP domain. You can leave this field blank or put an asterisk (*) to accept all incoming call invites from any SIP domain.
Page 49
SETTINGS CONFIGURATION AND MANAGEMENT String Description <reg_timeout> To specify the period in seconds after which the SIP registration expires. The phone automatically renews the registration within the set period if it is still on and connected to the server. The default setting is 300 seconds. Terminology reference : Registration Timeout Web interface...
Page 50
FQDN. If you append ;hide to the end of the proxy string, Konftel 800 avoids adding a record route to the SIP messaging. For more information, see Messaging the proxy without adding a record route on page 112.
Page 51
SETTINGS CONFIGURATION AND MANAGEMENT String Description <keep_alive> To specify if the phone maintains an active connection to the network. The device can use Keep Alive messages to ensure that the IP path to the Registrar is always available by sending periodic SIP messages.
Page 52
SETTINGS CONFIGURATION AND MANAGEMENT String Description <username> To specify the SIP authentication name. If you leave it blank, the phone uses the content of the <user> parameter to authenticate and register the account. Terminology reference : Authentication Name Web interface : Authentication Name Phone UI <password>...
Page 53
SETTINGS CONFIGURATION AND MANAGEMENT String Description <name> To specify the name visible on the phone screen on the primary line. This name is not a part of the SIP messaging. This is a mandatory setting. Terminology reference : Account Name Web interface : Account Name Phone UI...
Page 54
FQDN. If you append ;hide to the end of the proxy string, Konftel 800 avoids adding a record route to the SIP messaging. For more information, see Messaging the proxy without adding a record route on page 112.
Page 55
SETTINGS CONFIGURATION AND MANAGEMENT String Description <realm> To specify the network domain which the phone accepts incoming calls from. For example, company.com. The other name is the SIP domain. You can leave this field blank or put an asterisk (*) to accept all incoming call invites from any SIP domain.
Page 56
SETTINGS CONFIGURATION AND MANAGEMENT String Description <reg_timeout> To specify the period in seconds after which the SIP registration expires. The phone automatically renews the registration within the set period if it is still on and connected to the server. The default setting is 300 seconds. Terminology reference : Registration Timeout Web interface...
Page 57
SETTINGS CONFIGURATION AND MANAGEMENT String Description <sni> To enable or disable using the Server Name Indication (SNI) extension for TLS connections to a SIP server. The options are the following: • True. • False. This is the default value. Terminology reference : SNI Web interface : SNI...
Page 58
SETTINGS CONFIGURATION AND MANAGEMENT String Description <tls_password> To specify the password for the private key if it is encrypted. Terminology reference : Device Private Key Password Web interface : TLS Password Phone UI <verify_client> To specify whether the phone challenges and verifies the peer during each incoming SIP connection attempt.
Page 59
SETTINGS CONFIGURATION AND MANAGEMENT String Description <require_client_cert> To enable validation of the client certificate during each incoming call attempt. The options are the following: • True. • False. This is the default setting. Terminology reference : Require Client Certificate Web interface : Require Client Certificate Phone UI <advanced>...
Page 60
SETTINGS CONFIGURATION AND MANAGEMENT String Description <session_expiration_mini To specify the minimum timer value which the mum> phone negotiates during SIP negotiation. The default value is 90 seconds. This parameter is only available in the .xml configuration file. Do not modify. <session_expiration>...
Page 61
SETTINGS CONFIGURATION AND MANAGEMENT String Description <allow_contact_rewrite> To enable storing the IP address from the response of the register request. If there is any change detected, the phone unregisters the available SIP URI and updates it with a new address. The options are the following: •...
Page 62
SETTINGS CONFIGURATION AND MANAGEMENT String Description <contact_use_src_port_ev To enable ignoring of the DNS provided source port. en_with_dns> The options are the following: • True. • False. This is the default setting. This parameter is only available in the .xml configuration file. <enable_lock_codec>...
Page 63
SETTINGS CONFIGURATION AND MANAGEMENT String Description <method> To configure the Dual-tone multi-frequency (DTMF) signaling method. The options are the following: • . With this method, DTMF signals are RFC 4733 carried in RTP packets by using a separate RTP payload format. This is the default option. •...
Page 64
SETTINGS CONFIGURATION AND MANAGEMENT String Description <enable> To enable ICE. ICE uses various techniques to allow SIP-based VoIP devices to successfully traverse the variety of firewalls that may exist between the devices. The protocol provides a mechanism for the endpoints to identify the most optimal path for the media traffic to follow.
Page 65
SETTINGS CONFIGURATION AND MANAGEMENT String Description <server> To configure the IP address or FQDN of the STUN Server. Terminology reference : STUN Server Web interface : STUN Server Phone UI <turn> The top line of the Traversal Using Relay NAT (TURN) section.
Page 66
SETTINGS CONFIGURATION AND MANAGEMENT String Description <user> To specify the TURN server user authentication name. Terminology reference : User Web interface : TURN User Phone UI <password> To TURN server user authentication password. Terminology reference : Password Web interface : TURN Password Phone UI The top line of the phone general parameters <phone>...
Page 67
SETTINGS CONFIGURATION AND MANAGEMENT String Description <language> To select the language. The options are: • en - . This is the default setting. English • se - Swedish • da - Danish • no - Norwegian • fi - Finnish •...
Page 68
SETTINGS CONFIGURATION AND MANAGEMENT String Description <password> To specify the Administrator password. Maximum input length is 32 characters. Terminology reference : Not configurable Web interface : Admin Password Phone UI <ringlevel> To configure the default ringing level after reboot. The levels are the following: •...
Page 69
SETTINGS CONFIGURATION AND MANAGEMENT String Description <is_daisy_chain_slave> To specify the mode of the phone in case of a daisy chain arrangement. When using multiple devices cabled to provide increased room coverage, you must configure the Main (Leader) and Expansion (Follower) arrangement. The options are the following: •...
Page 70
SETTINGS CONFIGURATION AND MANAGEMENT String Description <enable_startup_sound> To specify whether the branded start-up sound plays when the device boots. The options are the following: • True. This is the default setting. • False. Terminology reference : Startup Sound Web interface : Startup Sound Phone UI <fips_mode>...
Page 71
SETTINGS CONFIGURATION AND MANAGEMENT String Description <call_log_enable> To enable the Call Log. The options are the following: • True. This is the default setting. • False. With Call Log enabled, you can view the Recent call list on the phone. If you set this setting to false, the Recent application becomes unavailable.
Page 72
Echo Cancelling Speakerphone. When you set this setting to true, Windows considers Konftel 800 as default speaker and communication device. Here, Windows Device Manager shows the phone as one device with the name Echo Cancelling Speakerphone. Here, the USB Product ID (PID) is 095C.
Page 73
SETTINGS CONFIGURATION AND MANAGEMENT String Description <dhcp> To enable DHCP process. The options are the following: • True. This is the default setting. • False. Terminology reference : Enable DHCP Web interface : DHCP Phone UI <hosts_map> To specify the FQDN/IP mapping information that stays persistent for the device.
Page 74
: Hostname Phone UI <domain> To specify the domain name of the phone to be used to indicate the network domain Konftel 800 is part of. With DHCP enabled, DHCP server may provide this parameter, and therefore you can leave this field blank.
Page 75
SETTINGS CONFIGURATION AND MANAGEMENT String Description <dns2> To specify the IP Address of the secondary Domain Name Server. With DHCP enabled, DHCP server may provide this parameter, and therefore you can leave this field blank. Terminology reference : DNS2 Web interface : DNS 2 Phone UI <static_ip>...
Page 76
SETTINGS CONFIGURATION AND MANAGEMENT String Description <vlan> To enable the VLAN tagging of the Ethernet packets. The options are the following: • True. • False. This is the default setting. Terminology reference : VLAN Enable Web interface : VLAN Phone UI <vlanid>...
Page 77
SETTINGS CONFIGURATION AND MANAGEMENT String Description <username> To specify the 802.1x username as provision in the security server for the network. Terminology reference : Username Web interface : Authentication Name Phone UI <eap_md5> The top line of the EAP MD5 section. <enable>...
Page 78
The top line of the LLDP section. There are character limitations (number of characters and type of characters) for a number of the parameters below. Konftel recommends to validate the .xml configuration file using the .vsd file provided. Table continued…...
Page 79
SETTINGS CONFIGURATION AND MANAGEMENT String Description <enable> To enable the Link Layer Discovery Protocol (LLDP). When enabled, the phone broadcasts information about itself to the neighboring devices. The device also receives and may act in line with the LLDP information broadcast from Layer 2 or 3 devices managing the subnet.
Page 80
SETTINGS CONFIGURATION AND MANAGEMENT String Description <county> To specify the county, parish, district, or other applicable administrative division. Maximum input length is 50 characters. Terminology reference : County Web interface : Not configurable Phone UI <city> To specify the city of installation. The maximum input length is 40 characters.
Page 81
SETTINGS CONFIGURATION AND MANAGEMENT String Description <direction> To specify the direction or orientation of the street. Terminology reference : Direction Web interface : Not configurable Phone UI <trailing_street_suffix> To specify the trailing street suffix. The maximum input length is 10 characters. Terminology reference : Trailing Street Suffix Web interface...
Page 82
SETTINGS CONFIGURATION AND MANAGEMENT String Description <landmark> To specify the reference or commonly known location or landmark. The maximum input length is 30 characters. Terminology reference : Landmark Web interface : Not configurable Phone UI <additional> To specify any additional reference points. The maximum input length is 30 characters.
Page 83
SETTINGS CONFIGURATION AND MANAGEMENT String Description <unit> To specify a unit within a building. The maximum input length is 30 characters. Terminology reference : Unit Web interface : Not configurable Phone UI <floor> To specify the floor within the building. The value range is from -5 to 250.
Page 84
SETTINGS CONFIGURATION AND MANAGEMENT String Description <elin> To specify the Emergency Location Identification Number (ELIN) to support e911 systems that utilize LLDP for location gathering and monitoring. The maximum input length is 31 characters. Terminology reference : ELIN Web interface : Not configurable Phone UI <qos>...
Page 85
SETTINGS CONFIGURATION AND MANAGEMENT String Description <enable> To enable Device Management service within the phone. The options are the following: • True. This is the default setting. • False. Terminology reference : Enable Web interface : Enable Phone UI <update_interval> To indicate how often the phone contacts the server to see if an update is available.
Page 86
SETTINGS CONFIGURATION AND MANAGEMENT String Description <check_server_certificate> To enable the Check certificate when the phone validates the server certificate credentials each time it contacts the server. The options are the following: • True. • False. This is the default setting. Terminology reference : Check Certificate Web interface...
Page 87
SETTINGS CONFIGURATION AND MANAGEMENT String Description <dhcp_option> To select the DHCP option which indicates with DHCP Option number how the system parses packets to obtain the phone specific configuration parameters. The options are the following: • • • • • •...
Page 88
SETTINGS CONFIGURATION AND MANAGEMENT String Description <PASSWORD> To specify the SCEP system password. The default is the phone's serial number. Terminology reference : Password Web interface : Not configurable Phone UI <MYCERTURL> To enter the URL of the SCEP server. Terminology reference : SCEP Server Web interface...
Page 89
: Not configurable Phone UI <MYCERTCN> To enter the Common Name (CN) for the phone to use when requesting a certificate. By default, the CN is the Konftel 800 serial number. Terminology reference : Common Name Web interface : Not configurable Phone UI <MYCERTCAID>...
Page 90
SETTINGS CONFIGURATION AND MANAGEMENT String Description <SCEPENCALG> To specify the SCEP encryption algorithm. If the value is 0, then SCEP operates using the DES encryption. If the value is 1, then SCEP operates using the AES-256 encryption. If you put any other value than 0 or 1, or skip the parameter, then SCEP also operates using the DES encryption.
Page 91
SETTINGS CONFIGURATION AND MANAGEMENT String Description <pjsip_log_level> To change the level of logging for the SIP application in the phone. The options are the following: • 0 - Fatal • 1 - Error • 2 - Warning • 3 - Info. This is the default setting. •...
Page 92
SETTINGS CONFIGURATION AND MANAGEMENT String Description <name_filter> When the phone uses the LDAP search, it contacts the LDAP server with the search parameter as defined by the name filter. The default is (| (sn=%*)(cn=%*)) which uses the search text and requests a search against the Surname (SN) and the Common Name (CN) values on the LDAP server.
Page 93
SETTINGS CONFIGURATION AND MANAGEMENT String Description <user_name> The phone needs a username and a password to authenticate with the LDAP server to perform searches. The username format can be simple such as JohnDoe which stands for a user network, or it can base on the LDAP directory structure such as uid=400130352125,dc=acme,dc=com.
Page 94
SETTINGS CONFIGURATION AND MANAGEMENT String Description <country_code> To specify the country code based on ISO 3166. If you enter it, the LDAP searches, that match the country code, remove it from the displayed search results. When you specify the country code, all number_attributes must be void of non-number characters before the number conversion starts.
Page 95
SETTINGS CONFIGURATION AND MANAGEMENT String Description <min_length_for_ext_prefi To restrict the external prefix that the phone adds x> only if the phone number is longer than the minimum length. If you set this parameter, the phone only adds the external prefix to the dialed number if the dialed digits exceed the minimal length for external prefix value.
Page 96
SETTINGS CONFIGURATION AND MANAGEMENT String Description <number_attributes> A successful LDAP query results in a number of details for the requested contact. The Default telephone number related LDAP IDs reflect the following: • Phone number • Mobile phone • Home phone •...
Page 97
SETTINGS CONFIGURATION AND MANAGEMENT String Description <display_name> To define which parameter that the LDAP query returns is used as the Display Name. Default is %cn (Common Name). Terminology reference : Display name Web interface : Not configurable Phone UI <sort_results> To enable sorting of the query results in alphabetical order based on the Display name.
When the user tries to input invalid data during the configuration file import using the web interface or automatic provisioning of the phone, the server does not accept or save the invalid input. Konftel 800 does not accept configuration of the settings when: •...
Daisy Chain Mode • Factory Reset • Admin Password • Time and Region • Startup Sound You can configure the phone settings during the installation of Konftel 800 or any time after it. Related information Configuration parameters on page 35...
Use this procedure to reboot your Konftel 800 using the user interface of the phone. Here you can reboot the phone without making additional power cycles. You can reboot Konftel 800 from the user interface of the phone only if you log in as the administrator.
SETTINGS CONFIGURATION AND MANAGEMENT In the field, select the day mode to apply the DST offset. Start Day Mode In the field, specify the day to apply the DST offset. Start Day The value range depends on the selected . For example, if Start Day Mode you select as the day mode, the value range is from 1 to 31.
35 Provision of the NTP server address Use DHCP option 42 to provide NTP server address to Konftel 800 when using 802.1x certificates. In this case, you must have DHCP enabled on the phone to display the accurate time received from this NTP server address.
Configuration parameters on page 35 Voice quality monitoring Configure Konftel 800 to generate quality metrics and evaluate the overall quality of the calls. You can use this information to troubleshoot various quality aspects of the phone calls. Find the detailed description of the collected parameters in the following standards: RFC 6035 and RFC 3611.
Page 104
SETTINGS CONFIGURATION AND MANAGEMENT Parameter Description LocalId Reporting device for the media session RemoteId Remote device of the media session OrigID Device that originated the session LocalGroup Identification for aggregation of the local phone LocalAddr Address information, including an IP address, a port number, and SSRC of the phone that receives the information LocalMAC The Media Access Control (MAC) address of the local phone...
Configuring RTCP XR About this task By default, the voice quality monitoring feature on Konftel 800 is disabled. To use this feature, enable it and specify the Uniform Resource Identifier (URI) of the RTCP XR collector. You can do this on the phone, through the phone web interface, or using the configuration .xml file.
Page 106
SETTINGS CONFIGURATION AND MANAGEMENT Before you begin Obtain the RTCP XR collector URI from your service provider. Procedure • To configure RTCP XR from the phone interface, do the following: Log in as the administrator. Navigate to and move the Media >...
SETTINGS CONFIGURATION AND MANAGEMENT Configuration of the media port range When the Konftel 800 system operates, it assigns two media ports - RTP and RTCP - to each session. The phone uses the media port values from the specified media port range. To configure this parameter, you must enter the...
Page 108
There is no dependencies check for the media port range during the .xml configuration file import. When you specify the media port range correctly, Konftel 800 accepts it and restarts to apply changes. You can configure the Media Port Range parameter on the phone, through the web interface, by importing the .xml configuration file, or through auto-...
• Advanced SIP settings • DTMF • NAT Traversal If you do not configure the SIP account for Konftel 800, the phone operates in USB only user mode. Related information Configuration parameters on page 35 SIP account registration status SIP account is a specifically configured set of credentials that provides access to SIP telephony and allows users to make calls from the phone.
Settings buttons on the idle home screen. You can use Konftel 800 via USB regardless of the SIP account registration status. When the phone has no SIP account configured or registered, it acts as a speakerphone that you can use to conduct virtual meetings and listen to audio files.
SETTINGS CONFIGURATION AND MANAGEMENT Screen Description Konftel 800 displays the CNAM and the CID. If the Incoming Call server does not provide the CID, the phone displays the CNAM. If the server does not provide the CNAM or the CID, the phone displays Unknown.
Messaging the proxy without adding a record route About this task In the SIP peer communication, Konftel 800 adds a record route to registration or any other message to the proxy. This appending indicates another device in the SIP path. If you want your conference phone not to send this message...
When the phone starts a TLS connection with the SIP server, it sends a request with an extension that specifies the required hostname. The SIP server responds with a certificate containing the requested FQDN for Konftel 800 to verify. If the received data matches the requested FQDN, the phone proceeds with the TLS...
When you configure the SNI setting through the web interface or phone, the value in the configuration file changes accordingly. Related information Configuration parameters on page 35 NETWORK SETTINGS The network settings of Konftel 800 include the following: • DHCP • Hostname •...
35 LLDP Data Units When Konftel 800 uses LLDP, it sends the information as LLDP Data Units. Each LLDP Data Unit is a sequence of Time-Length-Value (TLV) strings. The phone supports LLDP on primary Ethernet interfaces. The following table lists...
Page 116
SETTINGS CONFIGURATION AND MANAGEMENT Category TLV Name String TLV String Value length BASIC SYSTEM THE PHONE IS WITHIN OPTIONAL CAPABILITIES THE SYSTEM CAPABILITIES OCTET. IF THE PHONE IS REGISTERED, BIT 5 THAT IS EQUAL TO THE PHONE IS WITHIN THE ENABLED CAPABILITIES OCTET.
Page 117
SETTINGS CONFIGURATION AND MANAGEMENT Category TLV Name String TLV String Value length TIA LLDP MED LLDP-MED TIA OUC = 00-12-BB CAPABILITIES (HEX); LLDP CAPABILITIES SUBTYPE = 1; LLDP-MED CAPABILITIES = 00-3F (MED CAPS, NETWORK POLICY, LOCATION ID, EXTENDED POWER, INVENTORY); LLDP- MED DEVICE TYPE = 3 (CLASS III) ORGANIZATIO...
35 DNS mapping If Konftel 800 operates in an environment with no DNS available or the DNS server has no connectivity, you can configure settings to pass the device FQDN- to-IP mapping information. The phone stores and retains these parameters persistently, and a DNS failure does not impact the Konftel 800 operation.
Page 119
</host> </hosts_map> Along with configuring the hostname and IP address on your Konftel 800, you must add the same host entry values into the SIP server configuration. During SIP operation, SIP URI uses the specified Registrar parameter value, which contains the hostname from the configured host entity.
Konftel Unite application until you end the connection to ® the Bluetooth device. If you connect Konftel 800 to a mobile device using the Konftel Unite ® application, you cannot connect it to another Bluetooth device until you end the connection to Konftel Unite.
The volume level of the streamed audio does not change. Konftel 800 keeps the volume level it had before it started playing audio. When Konftel 800 is in Idle mode, and you start A2DP streaming from the connected ® Bluetooth device, the LEDs on the phone remain turned off.
Related information Configuration parameters on page 35 Removing Bluetooth® pairing About this task Use this procedure to remove the pairing between Konftel 800 and your other Bluetooth ® device to delete unwanted pairings. also deletes the Bluetooth ®...
® from the paired Bluetooth device. Automatic reconnection to a Bluetooth device You can use Konftel BT30 which is a Bluetooth USB dongle to connect your Konftel One Cable Connect (OCC) Hub or computer to Konftel 800 . When the...
® has no connection to the Bluetooth device. When Konftel 800 enters Idle mode after reboot, it automatically tries to reconnect to Konftel BT30 being the last paired Bluetooth ® device. If the reconnection fails, Konftel 800 tries to reconnect in 30 seconds.
Konftel 800 supports USB only user mode. With this feature, the conference phone can operate with no SIP account and SIP register configured. In USB only user mode Konftel 800 acts as a speakerphone that the user can use to conduct virtual meetings and listen to audio files.
BLUETOOTH AND USB CONNECTION USB only user mode icons The following table shows the icons on the home screen of Konftel 800 in USB only user mode: Icon Name Description To indicate an active USB connection. Connected The phone displays the...
Page 127
100. This is the highest level for the USB host permitted. Volume synchronization in Daisy chain mode If you adjust the volume on the USB host for Konftel 800 acting as the main phone in a Daisy chain, the volume on the expansion phone changes accordingly. The expansion phone reflects the change showing the volume bar on the screen.
14 USB ports configuration You can enable or disable the USB ports of your Konftel 800. When the USB ports on the phone are enabled, you can use the USB audio port for audio transmission and the USB upgrade port for a device upgrade.
(it is an upgrade), the phone imports the configuration in full. Starting from Release 1.0.7, if the firmware version is older than the running version (it is a downgrade), Konftel 800 retains some of the configured parameters including the administrator password.
To deploy the configuration file through a centralized management server, change the default file name to kt800.xml or kt800-<MAC>.xml. Importing the configuration file About this task Use this procedure to import the previously saved configuration file to your Konftel 800. Procedure On the web interface, click...
Uploading a firmware file About this task Upgrade or downgrade your Konftel 800 using a firmware file stored on the local hard disk. When the phone starts to install the firmware file you uploaded, it identifies the firmware version and follows the upgrade or downgrade scenario based on the firmware version.
All the configuration files that Konftel 800 generated before Release 1.0.1 acquire the <KT800 version="0"> attribute in the xml root element. The configuration files generated with Release 1.0.1 acquire the <KT800 version="1">...
If you have the USB parameter disabled, USB is inaccessible and unavailable for upgrade or downgrade. When you connect the USB mass storage device to Konftel 800, the phone starts auto-mounting and finds the firmware file stored on the USB mass storage device.
Upgrading firmware using a USB mass storage device without the administrator password About this task Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have no administrator password set. Before you begin •...
Upgrading the firmware using a USB mass storage device with the administrator password About this task Use this procedure to upgrade or downgrade your Konftel 800 using a USB mass storage device if you have an administrator password set. Before you begin •...
Uploading a firmware file on page 131 Configuration retention after downgrade When you downgrade the firmware of your Konftel 800, the phone retains some of the configured parameters. The phone keeps configuration for the following: • DHCP. Konftel 800 keeps the previously configured DHCP option value if you downgrade the firmware.
Page 137
After Konftel 800 obtains the configuration from the provisioning server, parses it, adds and saves the parameters in a local configuration file, all changes you make using the web interface or the phone UI replace the parameters stored as the current running configuration.
Zero Touch Installation (ZTI) is an add-in for automatic provisioning that Konftel 800 supports. It provides for the remote configuration of the phone by using a data file with settings. The phone downloads the file from a Device Management server.
Configuring multiple devices About this task You can configure multiple Konftel 800 devices using the configuration file as a management tool instead of configuring the settings on each phone individually. For this purpose, you need to export the configuration file, edit the settings as necessary, and then place the configuration file to the provisioning server.
Page 140
FIRMWARE UPGRADE AND DOWNGRADE Optional: Edit the configuration file using a suitable application. The settings file might not contain some settings if they represent a default value. To include such settings in the configuration file, you need to change them to a non-default value using the phone interface or the web interface. Upload the file to the provisioning server.
SIP Registrar. SIP-TLS • to secure the communications with the LDAP server. The device LDAP-TLS uses this protocol by default. You can manually install TLS certificates can on Konftel 800 by using the web administration interface or the certificates .xml file.
Instead of the .xml file format, the service provider can also use cgi, php, asp, js, or jsp file formats. Konftel 800 first searches for the configuration file in .xml format. If the phone fails to find the .xml file on the provisioning server, it searches for the configuration file in other formats specified above.
When you have the Device Management enabled or after the restart, the phone starts downloading the certificate if the hash algorithm value is different from the one of the certificate file that Konftel 800 stores. That means that the phone downloads one certificate file only once and subsequently checks that the certificate file is still the same.
Page 144
SECURITY AND PROTECTION String Description <ca_hash To specify the SHA256 hash algorithm that the phone algo="SHA256"> uses to verify the 802.1x CA certificate. <cert_uri> To specify the 802.1x path to get the device certificate. <cert_uri format> To specify the file format. You can add a file in .p12 or .PEM format.
Page 145
SECURITY AND PROTECTION String Description <privkey_uri> To specify the path to get the private key for the SIP connection. <privkey_hash To specify the SHA256 hash algorithm that the phone algo="SHA256"> uses to verify the private key for the SIP connection. <cert_pkcs12_passwo To specify password for the PKCS12 file.
Page 146
LDAP server. <cert_pkcs12_passwo To specify password for the PKCS12 file. rd> The following is an example of the certificate configuration file for Konftel 800. Note that it contains only 2 out of 4 sections. <certificates> <ether_8021x> <ca_uri>8021x_ca.crt</ca_uri>...
154 Certificates application Use certificates to authenticate Konftel 800 using TLS. You can apply certificates manually when configuring the advanced settings of your phone, or the phone can automatically download the certificates from the provisioning server if you enabled Device Management.
Page 148
SECURITY AND PROTECTION Use this procedure to download the Microsoft generated root certificate that the phone will apply for authentication by using TLS/SIPS and EAP-TLS. Before you begin Connect to Microsoft Server Certification Authority. Procedure On the page, click Microsoft Server Certification Authority Download a CA certificate, certificate chain, or CRL Click...
On the web interface, browse to the .PEM files to use TLS mode of authentication. Certificates management In the web interface of your Konftel 800, you can view the information about the certificates available on the phone. The web interface displays the fields of...
SECURITY AND PROTECTION the Root Certificate (CA) and Device Certificate for TLS connections, web self- generated certificate and SCEP. The following certificate fields are available for display: • Serial Number • Subject Name • Issuer Name • Validity Period. This includes notBefore and notAfter dates. •...
Page 151
</sip> … </certificates> Ensure that the firmware version of your Konftel 800 supports the import of the PKCS12 file. If the firmware version is lower than 1.0.8, the phone does not install the certificate configured with the PKCS12 file. Configuration of the file format To configure imported file format, locate the <cert_uri format>...
</sip> </certificates> STANDARD ENCRYPTION ALGORITHMS Konftel 800 uses encryption algorithms that comply with the current industry standards. Currently, the phone supports the data integrity algorithms with no publicly known vulnerabilities and are the US National Institute of Standards and Technology approved.
Encryption methods in Legacy encryption mode on page 191 Standard encryption for 802.1x You can configure Konftel 800 to allow 802.1x authentication to use EAP MD5 method. If you need to use EAP MD5 method for 802.1x, ensure that you set the...
35 Standard encryption for media encryption with SRTP When the key exchange for media encryption with SRTP occurs, Konftel 800 supports the AES_256_CM_HMAC_SHA1_80 mandatory crypto. Some servers do not support this mandatory crypto. In this case you must enable option to make an SRTP call.
SECURITY AND PROTECTION When you reset Konftel 800 to the factory default state, the phone also enables option. Allow Legacy Encryption When upgrading, the phone automatically enables the Allow Legacy Encryption option, if with is enabled. 802.1x EAP MD5 Related information...
SCEP enrollment You can configure SCEP through the web interface and importing the configuration file with the specific SCEP settings. After Konftel 800 reboots, it attempts to connect the specified SCEP server. If the server is reachable, it provides the certificates with the settings matching the server configuration. If the received certificate is valid and the SCEP enrollment is successful, the phone saves the configuration and reboots.
Initiate renewal on % of Validity Interval When the auto-renewal of the certificates is complete, the phone reboots as soon as it enters Idle mode. After the reboot, Konftel 800 starts using the new device certificate. The phone can also boot up with an expired certificate. If you have the renewal request parameter configured, the phone sends the renewal request after the phone boots up.
Configuring SCEP renewal request About this task When Konftel 800 receives a device certificate from a SCEP server, the certificate has a specified validity period, after which the certificate expires. Use this procedure to configure a SCEP renewal request through the web interface.
DISABLING WEB ACCESS About this task Use this procedure to disable the web access setting of your Konftel 800 for security reasons. By default, web access is enabled. After you disable this setting, you cannot access your phone through the web interface.
The phone reboots to apply the changes. PROTECTION AGAINST CROSS-SITE REQUEST FORGERY When the user logs in to the web interface of Konftel 800 with the administrator password, the web application of the phone uses specific tokens to protect against Cross-Site Request Forgery (CSRF) attacks.
Page 161
SECURITY AND PROTECTION Konftel 800, the server responds with the following error code: HTTP status code 403, forbidden. You are recommended to administer the settings in the web UI only from one computer and one browser simultaneously. This way you can minimize the risk...
CALLS HANDLING APPLICATION KONFTEL UNITE You can manage your Konftel 800 from a mobile phone or a tablet if you have Konftel Unite installed on the device. Download and install Konftel Unite free from App Store and Google Play like any other application. Use the NFC tag to easily start downloading the application.
If your mobile device displays Konftel 800 you want to connect, tap on the mobile device screen. Connect • If your mobile device does not display Konftel 800 you want to connect, tap and then tap the connection symbol in the upper left corner of your Skip mobile device screen.
Settings > Konftel Unite > Disconnect Device The phone displays the following question: Disconnect device <Device Name>? To confirm, tap The phone shows the Konftel Unite icon and informs that the application is disconnected. Deleting pairing About this task Use this procedure to delete the pairing between the conference phone and the mobile device.
The phone displays a connection symbol on the screen. and proceed with configuration. Settings Konftel Unite settings The following table lists the parameters for Konftel 800, which you can set from the Konftel Unite interface: Name Description To enable or disable the connection to Konftel 800. The...
Page 166
To select the calendars in the mobile phone from which you Calendars to show want Konftel Unite to take the information. To share information about Konftel Unite with a person that Tell a colleague you want. You can do it by using an email application.
Page 167
CALLS HANDLING APPLICATION Name Description To check the version of the application installed on your About Konftel mobile device. Unite...
COVERAGE EXPANSION EXPANSION OF THE PHONE COVERAGE Use your Konftel 800 on larger conference tables or when the number of meeting participants is greater than 10. In this case, to ensure the high-level quality of audio signal, you can expand the phone coverage in the room without a PA system.
COVERAGE EXPANSION Figure 1: Front view of Konftel Smart Mic. The following table lists the buttons and the other elements of Konftel Smart Mic: Callout number Description Mute button LED status indicator Connection cable Smart Mic characteristics The following table shows the dimensions, weight, and other characteristics of...
800 or connect Smart Mic expansion microphones. The maximum number of devices in a daisy chain is three. One Konftel 800 phone acts as a central device (the “Primary” phone), and one or two other units act as expansion devices (the "Secondary"...
5 W. Connection of the Secondary devices to the Primary phone In a daisy chain, Konftel 800 disables all unused daisy chain ports during active calls to ensure the best possible audio experience. That means, that the time,...
COVERAGE EXPANSION Arranging a daisy chain About this task Use this procedure to arrange a daisy chain of one main Konftel 800 phone and one or two expansion conference phones or expansion microphones. Before you begin If you arrange the daisy chain made of several conference phones, prepare the connection cables.
Application restarts and restores the Primary phone status. Headset lecture mode You can use your Konftel 800 in various setups that require remote lecturing and presentation during an active call. In this Headset lecture mode, the lecturer gets primary attention, and all other call participants can actively participate.
In a daisy chain, if you connect the headset to a Secondary device, Konftel 800 does not show the Headset lecture mode icon on the status bar. Here, the connection of the headset to the Secondary phone does not activate Headset lecture mode.
Optional: To disable Headset lecture mode, disconnect the headset from the phone. Ceiling audio mode overview You can install Konftel 800 in the ceiling or on walls for more flexible configuration of tables. Use the Konftel 800 Ceiling Mount Kit for installation. For instructions, please see https://www.konftel.com/en/accessories/konftel-800-ceiling-mount-kit.
The phone suggests an automatic upgrade of the expansion microphone firmware when you connect your Smart Mic to Konftel 800. You can connect one or two Smart Mics simultaneously. You can also initiate the expansion microphone firmware upgrade manually.
Optional: To cancel the upgrade, tap In this case, you postpone the upgrade until the phone reboots. Result If the upgrade is complete, the microphone LEDs turn off, and Konftel 800 displays the following message: Upgrade in progress Smart Mic 1: Done Smart Mic 2: N/A In 10 seconds, the pop-up dialog window hides, and the phone enters Idle mode.
COVERAGE EXPANSION Result When the upgrade is complete for Smart Mic 1 and Smart Mic 2 is still upgrading, the LED turns off on Smart Mic 1, and Konftel 800 displays the following message: Upgrade in progress Smart Mic 1: Done...
COVERAGE EXPANSION Upgrade in progress Smart Mic 1: 50% Smart Mic 2: Failed When Smart Mic 1 upgrade is complete, its LED turns off, and Konftel 800 displays the following message: Upgrade in progress Smart Mic 1: Done Smart Mic 2: Failed This message disappears in 10 seconds.
MAINTENANCE SYSTEM RECOVERY As an administrator, you can perform system recovery on Konftel 800 to return the phone to operable state, for example, after a faulty upgrade or when the phone application fails. System recovery replaces the current firmware with the previously installed operable firmware version.
With the remote syslog feature enabled, the phone sends the syslog messages to the syslog server and also logs them in the local log. By default, the remote logging feature on Konftel 800 is in the disabled state. Configuring remote syslog settings...
Performing factory reset About this task You can reset your Konftel 800 to factory default. You can do the factory reset only on the phone after you log in as the administrator. If you need to perform the factory reset without logging in as the administrator,...
Cancel Phone DEVICE STATUS VIEW You can view the configured settings of your Konftel 800 through the web interface and get information about the device, logs, and licenses. You can use this information for troubleshooting. Device status You can find the information about Konftel 800 status, including its current settings, through the web interface.
• Date • Timezone • Daylight Saving Time You can not change settings in the tab. Status Viewing the phone status About this task Use this procedure to view the status and settings of Konftel 800 through the web interface.
MAINTENANCE Procedure Log in to the web interface. Select the tab. Status System logs Information about log messages is available through the web interface in the tab. These log types can be useful for troubleshooting. System Logs You can select the following log types: •...
Clear All Logs PJSIP log levels Konftel 800 uses the PJSIP library in its real-time media communication. PJSIP is a free and open-source multimedia communication library working with standard- based protocols such as SIP, STUN, and TURN. This library also combines three main components of real-time multimedia communication: signaling, media features, and NAT traversal.
Before you begin Obtain the configuration .xml file for Konftel 800. Procedure Open the configuration file. In the <logging> section, locate the <pjsip_log_level> tag and set the necessary value.
MAINTENANCE Next steps Upload the configuration file to the Device Management server or import the configuration file to the phone using the web interface. Related information Configuration parameters on page 35 Network logs You can get the traces of the phone network activities through the web interface in tab.
SPECIFICATIONS DEVICE SPECIFICATIONS The following table lists the specifications that Konftel 800 supports: Name Description Power • PoE 802.3af • PoE 802.3at • PoE injector available as an accessory Connectivity • Ethernet RJ45 10/100 Mbps, PoE 802.3af, and PoE 802.3at •...
Page 190
Functional keypad and dial pad • LED indicators for call and connectivity status Mobile app Konftel Unite. With the app, you can access your mobile phone contact book and calendar. The app is available for free at AppStore and Google Play Device Configuration •...
Page 195
Index Special Characters caller information Caller name .xml configuration files capability negotiation .xml file ceiling mode editing ceiling mode for phone UI modification ceiling mode for web application Numerics 802.1.x settings Ceiling mode overview 802.1x centralized device management standard encryption certificate application converting the certificates to .PEM format...
Page 196
INDEX configuration file (continued) DHCP configuration options structure DHCP SSON validation dimensions 12, 18, 168, configuration parameters DNS resiliency configuring DNS server Use Static Source Port mapping Configuring the ceiling audio mode primary parameter secondary connecting to a network with DHCP document changes downgrade connection...
Page 197
INDEX firmware upgrade (continued) LLDP settings using mass storage device with logging in administrator password logs using mass storage device without administrator password media encryption with SRTP FIPS mode using the downloaded file standard encryption using USB mass storage media port range device configuration 107, first media port...
Page 198
INDEX phone reboot (continued) from the phone's user interface safety guidelines safety instructions phone settings SCEP security auto-renewal physical layout 12, background polling pick-up range CA certificate provisioning PJSIP log level certificate management setting through web interface configuring renewal request setting using configuration file enrollment secondary account 35,...
Page 199
INDEX SNI (continued) viewing (continued) configuring network logs source port 35, system logs specifications VLAN SRTCP VLAN ID SRTP voice quality monitor settings standard encryption voice quality monitoring 802.1x quality estimate metrics media encryption with SRTP web access start up sound configuring on the phone static IP 35, configuring through the web...
Page 200
® into all Konftel Conference phones and devices. The products are sold globally under the Konftel brand and our headquarters are based in Sweden. Read more about the company and our products at konftel.com. Konftel AB, Box 268, SE-901 06 Umeå, Sweden...
Need help?
Do you have a question about the 800 and is the answer not in the manual?
Questions and answers