This document describes the configuration to be applied to the SIP 3rd Party Poly trio C60 Conference Phone for connection to the Alcatel Rainbow Hub solution.
Go to the web interface of your Poly Conference Phone, you can get the IP address of the terminal on the Conference Phone directly.
Online on the Poly terminal's web interface, in HTTPS.
Then enter the following credentials:
Username = admin
Password = to be configured on the Conference Phone
Warning: Failure to change the default password exposes the device to unauthorized access, data breaches and fraud, which can compromise the security of the entire network and system. It also increases the risk of service interruption and makes it difficult to monitor and prevent security breaches.
SIP account configuration
Line1 configuration
Go to the Configuration > Line 1 interface
Then fill in the information obtained from the Rainbow interface in the following fields:
SIP parameters :
Identification:
In the address field, enter your internal extension number, then the domain, as in the example below:
109@test.domain
109 = Internal extension number
Test.domain = SIP server domain
Authentication:
External proxy:
SIP server 1:
Configuration of Conference Phone parameters
RTP port configuration
It is possible to edit the RTP ports used by the Conference Phone for audio streams. To configure them, go to the menu Configuration > Network > RTP.
Codec configuration
To edit audio codecs, go to menu Configuration > Codec priority.
The codec order has been defined as follows:
- G.711A (pcma)
- G.711U (pcmu)
- OPUS
Network configuration
To configure the Conference Phone's network, go to the Configuration > Network > Ethernet menu.
In the " IP Mode" submenu, set "IPv4".
In the " IPv4" submenu, fill in the Next field:
DHCP Enable to be checked (recommended)
SIP configuration
In the menu Configuration > SIP > Local parameters, it is essential to configure the following items:
SIP protocol: Enable to check
New SDP type: Enable to be checked
In the SRTP submenu, the following items must be configured:
SRTP Enable: Activate with a check mark
SRTP Offer: Enable or Disable (Optional setting: since SRTP Demand is enabled, communications will be exclusively encrypted).
SRTP Require: Enable to be checked
Retrieving the Rainbow platform certificate chain
Download the trusted certificate from the Rainbow interface.
Installing the certificate in the Conference Phone trust store
Once you've downloaded the trusted certificate, import it into the Conference Phone. To do this, download the configuration file from the Utility > Import and export configuration menu .
In the " Export configuration" submenu, select " Configuration files " and click on "Export".
Open the configuration file with your favorite text editor and add the following lines:
To add a single certificate :
|
device.set="1" device.sec.TLS.customCaCert1.set="1" device.sec.TLS.customCaCert1= "-----BEGIN CERTIFICATE----- Your certificate -----END CERTIFICATE----- "
|
To add a certificate chain:
|
device.set="1" device.sec.TLS.customCaCert1.set="1" device.sec.TLS.customCaCert1= "-----BEGIN CERTIFICATE----- Your number 1 certificate -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- Your certificate number 2 -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- Your certificate number 3 -----END CERTIFICATE-----"
|
Once the changes have been made, import the file using the following menu Utility > Import and export configuration:
Select the edited configuration file and click on " Import" .
To check that the certificate has been imported, go to the Configuration > Network > TLS menu.
Check that in the " TLS Profile" submenu, " Platform 1 Profile" is set to " Everybody" in the " CA Certificate" option.
Once the certificate has been imported, in the TLS Application submenu, change the value of the SIP Application profile name to " Platform 1 profile " and the value of the Minimum TLS version to " TLS1.2 ".