U.S. DoD Deployment Guide - Polycom Supportsupport.polycom.com/global/documents/support/setup...U.S. DoD Deployment Guide Polycom HDX Systems, Version 2.6 This document provides the

May 20103725-28305-005/A

U.S. DoD Deployment GuidePolycom HDX™ Systems, Version 2.6

This document provides the latest information for security-conscious users running version 2.6 software. The information in this document is not intended to imply that DoD or DISA certifies Polycom HDX systems. In order to use Polycom HDX systems in a DoD environment, the software version must have achieved UC APL certification. For a listing of certified software versions, refer to www.polycom.com/usa/en/solutions/industry_solutions/government/certification_accreditation.html.

The Polycom HDX software uses OpenSSL FIPS Object Module (Software Version: 1.2). This provides FIPS-140-approved cryptography for systems

Using the DoD DSN Security ProfileThe DoD DSN Security Profile setting lets you control particular fields in order to meet DoD DSN requirements. The Security Profile can only be set in the setup wizard, which you can access only during initial setup, when the system flash memory is deleted as part of a system update, or after a system reset with system settings deleted. After the setup wizard is complete, the Security Profile setting appears as read-only in the Admin Settings.

Polycom HDX software version 2.6 has not achieved UC APL certification.

To mitigate certain network-based attacks, Polycom recommends that the network administrator configure port security on the switch to which Polycom devices connect. Security is enhanced by binding the device’s MAC address to a specific physical port on the switch.

When making a connection from a web browser to configure the HDX system, always enter the address of the HDX system in one of the following formats: https://hostname or https://10.11.12.13.

Using the HTTPS protocol ensures that the configuration of all login credentials (such as user names and passwords) are transmitted using an encrypted channel. This includes those credentials used to communicate with third-party systems on your network. Using the HTTPS protocol severely limits the ability of anyone on the network to discover these credentials.

www.polycom.com/usa/en/solutions/industry_solutions/government/certification_accreditation.html


http://www.polycom.com/usa/en/solutions/industry_solutions/government/certification_accreditation.html






U.S. DoD DSN Deployment Guide

Polycom HDX Systems, Version 2.6

2

To configure the Security Profile:

>> In the setup wizard, enable Security Mode and set Security Profile to DoD DSN.

This setting automatically sets and controls particular fields in order to meet DoD DSN requirements. The fields controlled by the profile are set to pre-defined values and may have additional restrictions applied as described in the following tables.

Setup Wizard

Security Settings

Setting Restriction

Room Password Must be changed

Admin ID Must be changed

User ID Must be changed

User Password Must be entered

Setting Restriction

Security Mode Enabled, not configurable

Security Profile Set to DoD DSN, not configurable

Use Room Password for Remote Access

Disabled, not configurable

Require Login for System Access Enabled, not configurable

Enable Remote Access: Web Disabled, not configurable

Allow Video Display on Web Disabled, not configurable

Security Banner Set to DoD, Off is not allowed

Lock Account after Failed Logins Set to 3, Off is not allowed

Account Lock Duration Set to 1, configurable

AES Mode Set to Required for Video Calls Only, configurable



3

Remote Access Settings

Password Settings for Room, Remote Access, and User Passwords

Meeting Password Settings

Setting Restriction

Lock Port after Failed Logins Set to 3, configurable. Off is not allowed

Port Lock Duration in Minutes Set to 1, configurable. Off is not allowed

Idle Session Timeout in Minutes Set to 15, configurable. Off is not allowed

Setting Restriction

Minimum Length Set to 6, must be at least 6

Can Contain ID or Its Reverse Form Disabled, not configurable

Require Lower Case Letters Set to Off, configurable

Require Upper Case Letters Set to Off, configurable

Require Numbers Set to Off, configurable

Require Special Characters Set to Off, configurable

Do Not Allow Previous Passwords Set to 10, must be at least 5

Minimum Password Age in Days Set to Off, configurable

Maximum Password Age in Days Set to 90, must be at least 5

Password Expiration Warning in Days Set to 4, Off not allowed

Minimum Changed Characters Set to 4, not allowed: Off, 1, 2, or 3

Maximum Consecutive Repeated Characters

Set to Off, configurable

Setting Restriction

Minimum Length Set to Off, must be Off or at least 9

Require Lower Case Letters Set to Off, configurable

Require Upper Case Letters Set to Off, configurable

Require Numbers Set to Off, configurable

Require Special Characters Set to Off, configurable

Do Not Allow Previous Passwords Set to 10, must be at least 5



4

Home Screen and Other Settings

Configuring Your Local SystemThis section describes how to manually configure system settings to meet DSN Deployment requirements.

To configure your system for DSN deployment:

1 Download and install the Polycom HDX software update. For information about installing the software, refer to the release notes for your software version.

2 When prompted in the setup wizard:

— Enable Security Mode.

Minimum Password Age in Days Set to Off, configurable

Maximum Password Age in Days Set to 90, must be at least 5

Password Expiration Warning in Days Set to 4, Off is not allowed

Minimum Changed Characters Set to Off, configurable


Set to Off, configurable

Setting Restriction

Setting Restriction

Serial Ports: RS-232 Mode Set to Off, configurable (only Control is allowed)

SIP Transport Protocol Set to TLS, not configurable

Directory Servers Not available

Auto Answer Point-to-Point Video Disabled, configurable

Auto Answer Multipoint Video Disabled, configurable

Availability Control Enabled, not configurable

Recent Calls Disabled, not configurable

Last Number Dialed Disabled, not configurable

Far Control of Near Camera Disabled, configurable

Call Detail Report Enabled, not configurable



5

— Set the Security Profile to DoD DSN.

— Set Admin ID to a value other than admin.

— Set a Room Password that meets the default password policy as described in Password Settings for Room, Remote Access, and User Passwords.

You can modify the password policies after you complete the setup wizard. See Configuring Your Room and User Password Policy for more information about doing this.

— Change the User ID to something other than user.

— Set a User Password that meets the default password policy as described in Password Settings for Room, Remote Access, and User Passwords.

3 After you complete the setup wizard and the system restarts, log into the system using the Admin ID and Room Password.

4 Go to System > Admin Settings > General Settings > Security > Security Settings > > and and configure these settings:

Setting Description

AES Encryption Specifies whether to encrypt calls with other sites.

• Off — AES Encryption is disabled.

• When Available — Allows calls with all endpoints, including sites that may not support encryption.

• Required for All Calls — Allows video calls only with sites that support encryption. ISDN voice and analog phone calls are not allowed.

• Required for Video Calls Only — Allows video calls only with sites that support encryption. ISDN voice and analog phone calls are allowed.

Allow Access to User Settings

Specifies whether the User Setting screen is accessible to users via the System screen.

• Enable this setting if meeting passwords are required to join multipoint calls.

• Disable this setting if meeting passwords are not required for multipoint calls.



6

5 Configure the system for time and date management using the steps appropriate for your particular Polycom HDX model and deployment type.

6 On Polycom HDX 4000, 7000, and 8000 series systems, go to System > Admin Settings > LAN Properties > > , and disable the Enable PC LAN Port setting, unless its use is required. If you change this setting, the system restarts.

Deployment Type Configuration Steps

IDSN-only Deployments

Polycom HDX 9000

Polycom HDX 9006

Polycom HDX 8000 Version B

Polycom HDX 7000 Version B or later

Polycom HDX 6000

Go to System > Admin Settings > General Settings > Location > , and set Time Server to Off and manually configure the time and

date.

IP Deployments

Polycom HDX 9000

Polycom HDX 9006

Polycom HDX 8000 Version B

Polycom HDX 7000 Version B or later

Polycom HDX 6000

Go to System > Admin Settings > General Settings > Location > , and do one of the following:

• Set Time Server to Off and manually configure the time and date.

• Set Time Server to Auto.

• Set Time Server to Manual with NTP server address specified.

IP Deployments

Polycom HDX 8000 Version A

Polycom HDX 7000 Version A

Polycom HDX 4000

Go to System > Admin Settings > General Settings > Location > , and do one of the following:

• Set Time Server to Auto.

• Set Time Server to Manual with NTP server address specified.

All Polycom HDX 4000 systems and Polycom 7000 and 8000 systems with Hardware Version A require a connection to an NTP server in order to keep accurate time across power outages and system restarts.

Polycom HDX 6000 and 9000 series systems and Polycom HDX 7000 and 8000 systems with Hardware Version B or later have an internal battery-backed real-time clock that allows them to keep accurate time across power outages and system restarts.

To check your hardware version:

• For HDX 8000 and 7000 HD systems, you can check the hardware version by going to System > System Information. If no hardware version is designated, your system has Hardware Version A.

• For HDX 7000 systems, the part number indicates the hardware revision. You can find the part number on the back of the unit.

Hardware Version A part numbers: 2201-27285-XXX and 2215-27427-XXX

Hardware Version B part numbers: 2201-28629-XXX and 2215-28632-XXX



7

7 Go to System > Admin Settings > Network > Call Preference, and configure these settings on the Call Preference screen:

8 Go to System > Admin Settings > General Settings > Security > Log Management, and set this setting on the Log Management screen.

Configuring Your System for Remote AccessThis section describes how to configure the system to meet DSN Deployment requirements for remote access via the RS-232 serial port. When configured to use the DoD DSN Security Profile, the system:

• Requires devices attempting to start a session via the serial port to provide either an Admin ID and password or a User ID and password. To get a login prompt after you connect to the serial port, press Enter if connecting from interactively via a terminal emulator program or send the new line character if connecting with via a serial control application.

• Requires you to set separate remote access passwords for the User and Admin accounts. The Use the Room Password for Remote Access setting is automatically disabled in the DoD DSN Security Profile. You initially configure the remote access password during the setup wizard, and you can make changes later using the Admin Settings screens.

• Makes available different API commands depending on whether you log in with the Admin or User account.

Setting Description

IP H.323 • Disable this setting for ISDN-only deployments.

• Enable this setting if H.323 calling on IP networks is required.

SIP • Disable this setting for ISDN-only deployments.

• Enable this setting if SIP calling on IP networks is required.

ISDN H.320 • Disable this setting for IP-only deployments.

• Enable this setting if ISDN H.320 calling is required.

Setting Description

Percent Filled Threshold

Specifies the percent filled level which triggers a system alert. Suggested value: 70.

This alert is mandated by the Application Security STIG (APP0420).



8

• Locks the serial port after a specified number of failed login attempts. The port lockout causes the HDX system to refuse further log-in attempts for a configurable period of time. Each serial port has its own separate port lockout.

• Displays a Security Banner with the serial port login. To configure the Security Banner, go to System > Admin Settings > General Settings > Security > Security Settings > > > and set a Security Banner.

• Automatically terminates idle sessions.

To configure a system using the DoD DSN Security Profile for remote access:

1 Go to System > Admin Settings > General Settings > Serial Port, and set the serial port you want to use for remote access to Control.

2 Go to System > Admin Settings > General Settings > Security > Remote Access Settings.

3 Configure these settings on the Remote Access Settings screen:

Configuring Your Room and User Password PolicyThough “strong passwords” are recommended for security purposes, keep in mind that strong passwords require use of the onscreen keyboard to enter letters and special characters. This can make it possible for others to view a password as it is entered. This risk can be mitigated by using longer numeric-only passwords which can be entered using the remote control. This section gives the recommended settings for both configurations.

If a setting is mandated by a Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) requirement, the specific STIG reference is listed along with the setting.

Setting Description

Lock Port After Failed Logins Specifies the number of failed login attempts allowed before the system locks the port. The default setting is 3, and Off is not allowed.

Port Lock Duration in Minutes Specifies the amount of time that the port remains locked due to failed login attempts. The default is 1, and Off is not allowed.

Idle Session Timeout Specifies how long the session remains active during periods of inactivity. The default is 15 minutes, and Off is not allowed.



9

To configure your room password policy:

1 Go to System > Admin Settings > General Settings > Security > Password Settings > Admin Room Password, and configure these settings:

Setting Strong Passwords Numeric-only Passwords

Minimum Length Value: 15 (recommended)

This setting is intended to meet these requirements:

• UNIX STIG V5R1: GEN000580 (minimum 14)

• Application Security Checklist V2R19: APP0140 (minimum 8)

• DSN STIG V2R3: DSN13.06 (minimum 8)

• GR-815-CORE-2 R3-39 [26] (minimum 6)

• DODI 8500.2: IAIA-1, IAIA-2 (minimum 8

• VTC STIG V1R1: RTS-VTC 2024.00 (minimum 6))

Value: 15

Can Contain ID or Its Reverse Form

Disable

This setting is intended to meet this requirement:

• GR-815-CORE-2: R3-39 [26]

Disable


• GR-815-CORE-2: R3-39 [26]

Require Lower Case Letters

Value: 1


• UNIX STIG V5R1: GEN000600

• Application Security Checklist V2R19: APP0140

• DSN STIG V2R3: DSN13.06

• GR-815-CORE-2 R3-39 [26]

• DODI 8500.2: IAIA-1, IAIA-2

Off



10

Require Upper Case Letters

Value: 1





• GR-815-CORE-2 R3-39 [26]


Off

Require Numbers Value: 1





• GR-815-CORE-2 R3-39 [26]


All

Require Special Characters

Value: 1





• GR-815-CORE-2 R3-39 [26]


Off

Setting Strong Passwords Numeric-only Passwords



11

2 Select and configure these settings:

3 Go to System > Admin Settings > General Settings > Security > Password Settings > User Room Password, and enter the corresponding settings for the User Room Password.

4 Go to System > Admin Settings > General Settings > Security > Password Settings > Remote Access Passwords, and enter the corresponding settings for the Remote Access Password.

Setting Description

Do Not Allow Previous Passwords Value: 10


• Application Security Checklist V2R19: APP0140 (requires 10)

• DSN STIG V2R3: DSN13.09 (requires 8)

• GR-815-CORE-2: R3-38 [25] (requires 5)

• VTC STIG V1R1: RTS-VTC2040.00) (requires 8)

Minimum Password Age in Days Value: 1 or 0ff


• Application Security Checklist V2R19: APP0140 (minimum 1 for users, 0 for administrators)

• DSN STIG V2R3: DSN13.08 (minimum 1 without IAO intervention)

• GR-815-CORE-2: R3-38 [25] (minimum 20)

Maximum Password Age in Days Value: 60


• UNIX STIG V5R1: GEN000700 (maximum 60)

• Application Security Checklist V2R19: APP0140 (maximum 90)

• DSN STIG V2R3: DSN13.07 (maximum 90)

• GR-815-CORE-2: R3-33 [21] (maximum 20-90)

Password Expiration Warning in Days

Value: 4


• GR-815-CORE-2: CR3-36 [23]

Minimum Changed Characters Value: 4




Value: 2


• UNIX STIG V5R1: GEN000680 (maximum 2)



12

Detecting IntrusionsThe Polycom HDX system logs an entry to the security log when it detects a possible network intrusion. The security log prefix identifies the type of packet detected, as shown in the following table.

Following the message prefix, the security log entry includes the timestamp and the IP, TCP, UDP, ICMP, or ICMPv6 headers. For example, the following security log entry shows an “unknown_udp” intrusion:

2009-05-08 21:32:52 WARNING kernel: SECURITY: NIDS/unknown_udp IN=eth0 OUT= MAC=00:e0:db:08:9a:ff:00:19:aa:da:11:c3:08:00 SRC=172.18.1.80 DST=172.18.1.170 LEN=28 TOS=0x00 PREC=0x00 TTL=63 ID=22458 PROTO=UDP SPT=1450 DPT=7788 LEN=8

Viewing Network Interface and System Status

Network Interface StatusThe network interface status is indicated by the lights on the network interface module.

Prefix Packet Type

SECURITY: NIDS/unknown_tcp Packet that attempts to connect or probe a closed TCP port

SECURITY: NIDS/unknown_udp Packet that probes a closed UDP port

SECURITY: NIDS/invalid_tcp TCP packet in an invalid state

SECURITY: NIDS/invalid_icmp ICMP or ICMPv6 packet in an invalid state

SECURITY: NIDS/unknown Packet with an unknown protocol number in the IP header

SECURITY: NIDS/flood Stream of ICMP or ICMPv6 ping requests or TCP connections to an opened TCP port



13

Quad BRI Network Interface Status LightsThe network interface lights are located on the network interface module.

PRI Network Interface Status LightsThe network interface lights are located on the network interface module.

Indicator Light Connection Status

Green and yellow lights off Indicates one of the following:

• No power to the system

• The system is not connected to the network

• The system is not receiving a clock signal from the network

• The system is restarting.

Green light on The system is receiving a clock signal from the network.

Yellow light on The system is able to make a call.

Green and yellow lights on Indicates one of the following:

• The system is receiving a software update

• The system is operating normally.

Indicator Light Connection Status

Green and yellow lights off No power to the system.

Red light on or blinking Indicates one of the following:

• The system is not connected to the ISDN network.

• There is a problem with the ISDN line.

Yellow light on or blinking There is a problem with the ISDN line.

Green light on The system is able to make and receive calls.



14

Viewing System StatusYou can view the System Status screen on the local system or using the web interface. The System Status screen displays system status information, including auto answer point-to-point, remote control battery, IP network, meeting password, log threshold, and ISDN lines.

To view the System Status on the system:

1. Go to System > Diagnostics > System Status.

2. For an explanation of any of the status items, select the item and press on the remote control.

To view the System Status using the Polycom HDX web interface:

1. On a computer, open a web browser.

2. In the browser address line, enter the system’s IP address, for example, http://10.11.12.13, to go to the Polycom HDX web interface.

3. Enter the Admin ID as the user name (default is “admin”), and enter the Admin Remote Access Password, if one is set.

4. Click Diagnostics from any page in the Polycom HDX web interface.

5. For an explanation of any of the status items, click the item.

If the system detects that any of the ISDN BRI SPIDs are incorrect or that an ISDN line is connected to the wrong ISDN port on the network interface module, the System Status screen displays a red arrow for that line. If this happens, ensure the ISDN and SPID numbers are correct.



15

Using the Camera Privacy CoverThe Polycom EagleEye™ camera goes to sleep when the Polycom HDX system does. But for added security, Polycom now offers a privacy cover (part number 2215-28454-001) that you can attach to the camera. You can open and close the cover as needed. Contact your Polycom distributor for more information.



16

Using the API with a Secure RS-232 InterfaceOn a system configured with the DoD Security Profile, you must log in with a password in order to start an RS-232 session. You can log in with either the Admin ID and Admin Room Password or the User ID and User Room Password. The available API commands depend on which type of ID you use to start the session, as shown in the following table.

API Command Parameter User ID Admin ID

! “string” ✓ ✓

1...64 ✓ ✓

abk (deprecated) all ✓ ✓

batch {0..59} ✓ ✓

batch search “pattern” “count” ✓ ✓

batch define “start_no” “stop_no” ✓ ✓

letter {a..z} ✓ ✓

range “start_no” “stop_no” ✓ ✓

refresh ✓ ✓

addrbook all ✓ ✓

batch {0..59} ✓ ✓

batch search “pattern” “count” ✓ ✓




refresh ✓ ✓

addressdisplayedingab get ✓ ✓

private ✓

public ✓

advnetstats 0 ...n ✓ ✓

alertusertone get ✓ ✓

1|2|3|4 ✓

alertvideotone get ✓ ✓

1|2|3|4|5|6|7|8|9|1|0 ✓

allregister ✓



17

allunregister ✓

allowabkchanges get ✓ ✓

yes ✓

no ✓

allowcamerapresetssetup get ✓ ✓

yes ✓

no ✓

allowdialing get ✓ ✓

yes ✓

no ✓

allowmixedcalls get ✓ ✓

yes ✓

no ✓

allowusersetup get ✓ ✓

yes ✓

no ✓

amxdd get ✓ ✓

on ✓

off ✓

answer video ✓ ✓

phone ✓ ✓

areacode get ✓ ✓

set “areacode” ✓

audiometer <micleft | micright | lineinleft | lineinright | lineoutleft | lineoutright | contentinleft | contentinright | vcrinleft | vcrinright | vcroutleft | vcroutright | farendleft | farendright | off>

✓ ✓




18

audiotransmitlevel get ✓ ✓

up ✓ ✓

down ✓ ✓

register ✓ ✓

unregister ✓ ✓

set ✓ ✓

autoanswer get ✓ ✓

yes ✓

no ✓

donotdisturb ✓

autoshowcontent get ✓ ✓

yes ✓

no ✓

backlightcompensation get ✓ ✓

yes ✓ ✓

no ✓ ✓

basicmode get ✓ ✓

on ✓

off ✓

bri1enable

bri2enable

bri3enable

bri4enable

get ✓ ✓

yes ✓

no ✓

briallenable get ✓ ✓

yes ✓

no ✓




19

button <# | * | 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | .> ✓ ✓

<down | left | right | select | up> ✓ ✓

<auto | back | call | far | graphics | hangup | near> ✓ ✓

<help | mute | volume+ | volume- | lowbattery | zoom+ | zoom->

✓ ✓

<pickedup | putdown> ✓ ✓

<camera | delete | directory | home | keyboard | period | pip | preset>

✓ ✓

<info | menu | slides | option> ✓ ✓

“valid_button” [“valid_button” ...] ✓ ✓

<mmstop | mmplay | mmpause | mmrecord | mmforward | mmrewind>

✓ ✓

calendardomain get ✓

set “domain” ✓

calendarmeetings list “starttime” [“endtime”] ✓ ✓

info “meetingid” ✓ ✓

calendarpassword “password” ✓

calendarplaytone get ✓

yes ✓

no ✓

calendarregisterwithserver get ✓

yes ✓

no ✓

calendarremindertime get ✓

1|5|10|15|30|none ✓

calendarresource get ✓

“resource” ✓

calendarserver get ✓

“server” ✓

calendarshowpvtmeetings get ✓

yes ✓

no ✓




20

calendarstatus get ✓

calendaruser get ✓

“username” ✓

calldetail Nth_item ✓

all ✓

range ✓

calldetailreport get ✓ ✓

yes ✓

no ✓

callencryption (deprecated) get ✓ ✓

whenavailable ✓

disabled ✓

callinfo get ✓ ✓

callid ✓ ✓

callstate get ✓ ✓

register ✓ ✓

unregister ✓ ✓

callstats ✓ ✓




21

camera near {1..6} ✓ ✓

far {1..5} ✓ ✓

<near|far> move <left|right|up|down|zoom+|zoom-|stop>

✓ ✓

<near|far> move <continuous|discrete> ✓ ✓

<near|far> source ✓ ✓

<near|far> stop ✓ ✓

near <getposition|setposition “x” “y” “z”> ✓ ✓

near ppcip ✓ ✓

for-people {2..5} ✓ ✓

for-content {2..5} ✓ ✓

list-content ✓ ✓

<register|unregister> ✓ ✓

register get ✓ ✓

cameradirection get ✓ ✓

normal ✓ ✓

reversed ✓ ✓

camerainput <1..5> get ✓ ✓

<1|2|3> <s-video|composite|component> ✓ ✓

<4|5> <dvi|vga> ✓ ✓




22

chaircontrol end_conf ✓ ✓

hangup_term “term_no” ✓ ✓

list ✓ ✓

rel_chair ✓ ✓

register ✓ ✓

unregister ✓ ✓

req_chair ✓ ✓

req_floor ✓ ✓

req_term_name “term_no” ✓ ✓

req_vas ✓ ✓

set_broadcaster “term_no” ✓ ✓

set_term_name “term_no” “term_name” ✓ ✓

stop_view ✓ ✓

view “term_no” ✓ ✓

view_broadcaster ✓ ✓

cmdecho on ✓ ✓

off ✓ ✓

colorbar on ✓ ✓

off ✓ ✓

configchange (deprecated) get ✓ ✓

register ✓

unregister ✓

configdisplay <monitor1 | monitor2> get ✓ ✓

<monitor1 | monitor2> <s_video | composite | vga | dvi | component> <4:3 | 16:9> [ <720p | 1080i | 1080p> | 50hz720p | 60hz720p | 50hz1080i | 60hz1080i | 50hz1080p | 60 hz1080p>]

✓ ✓

configparam get ✓ ✓

set ✓ ✓




23

configpresentation get ✓ ✓

<monitor1 | monitor2> get ✓ ✓

<monitor1 | monitor2> <near | far | content | near-or-far | content-or-near | content-or-far | all | none>

✓ ✓

monitor1 "value" monitor2 "value" ✓ ✓

confirmdiradd get ✓ ✓

yes ✓

no ✓

confirmdirdel get ✓ ✓

yes ✓

no ✓

contentauto get ✓ ✓

on ✓ ✓

off ✓ ✓

contentsplash get ✓

yes ✓

no ✓

country get ✓ ✓

cts get ✓ ✓

normal ✓

inverted ✓

ignore ✓

daylightsavings get ✓ ✓

yes ✓

no ✓

dcd normal ✓

Inverted ✓

dcdfilter get ✓ ✓

on ✓

off ✓




24

defaultgateway get ✓ ✓

set “xxx.xxx.xxx.xxx” ✓

dhcp get ✓ ✓

off ✓

client ✓

dial addressbook “addr book name” ✓ ✓

auto “speed” “dialstr” ✓ ✓

manual <56|64> “dialstr1” “dialstr2” [h320] ✓ ✓

manual “speed” “dialstr1” [“dialstr2”] [h323|h320|ip|isdn|sip]

✓ ✓

“dialstr”, “dialstr1”, “dialstr2” ✓ ✓

phone “dialstring” ✓ ✓

dialchannels get ✓ ✓

set ✓

n ✓

dialingdisplay displaymarquee ✓

none ✓

diffservaudio, diffservfecc, diffservvideo

get ✓ ✓

set {0..63} ✓

directory get ✓ ✓

yes ✓

no ✓

display (deprecated) call ✓

whoami ✓

displayglobaladdresses get ✓ ✓

yes ✓

no ✓

displaygraphics get ✓ ✓

yes ✓

no ✓




25

displayipext get ✓ ✓

yes ✓

no ✓

displayipisdninfo (deprecated) get ✓ ✓

yes ✓

no ✓

both ✓

ip-only ✓

isdn-only ✓

none ✓

displayparams ✓

dns get ✓

{1..4} ✓


dsr get ✓ ✓

normal ✓

inverted ✓

dsranswer get ✓ ✓

on ✓

off ✓

dtr get ✓ ✓

normal ✓

inverted ✓

on ✓

dualmonitor get ✓ ✓

yes ✓ ✓

no ✓ ✓

dynamicbandwidth get ✓ ✓

yes ✓

no ✓




26

e164ext get ✓ ✓

set ✓

“e.164name” ✓

echo “string” ✓

echocanceller get ✓ ✓

yes ✓

no ✓

enablefirewalltraversal get ✓ ✓

on ✓

off ✓

enablekeyboardnoisereduction get ✓ ✓

yes ✓

no ✓

enablelivemusicmode get ✓ ✓

yes ✓

no ✓

enablepvec get ✓ ✓

yes ✓

no ✓

enablersvp get ✓ ✓

yes ✓

no ✓

enablesnmp get ✓ ✓

yes ✓

no ✓

encryption get ✓ ✓

yes ✓

no ✓

requiredvideocallsonly ✓

requiredallcalls ✓




27

exit ✓ ✓

exportdirectory ✓

farcontrolnearcamera get ✓ ✓

yes ✓

no ✓

farnametimedisplay get ✓ ✓

on ✓

off ✓

15|30|60|120 ✓

flash callid ✓ ✓

duration ✓ ✓

gabk (deprecated) all ✓ ✓

batch {0..59} ✓ ✓


search “pattern” “count” ✓ ✓



refresh ✓ ✓

gabpassword set [{1..5}] [“password”] disabled disabled

gabserverip get disabled disabled

set disabled disabled

gaddrbook all ✓ ✓

batch {0..59} ✓ ✓


search “pattern” “count” ✓ ✓



refresh ✓ ✓

gatekeeperip get ✓





28

gatewayareacode get ✓ ✓

set “areacode” ✓

gatewaycountrycode get ✓ ✓

set “countrycode” ✓

gatewayext get ✓ ✓

set “extension” ✓

gatewaynumber get ✓ ✓

set “number” ✓

gatewaynumbertype get ✓ ✓

did ✓

number+extension ✓

gatewayprefix get “valid speed” ✓ ✓

set “value” ✓

gatewaysetup ✓ ✓

gatewaysuffix get “valid speed” ✓ ✓

set “value” ✓

gdsdirectory get disabled disabled

yes disabled disabled

no disabled disabled

gendial {0..9} ✓ ✓

# ✓ ✓

* ✓ ✓

gendialtonepots (deprecated) {0..9} ✓ ✓

# ✓ ✓

* ✓ ✓

generatetone on ✓ ✓

off ✓ ✓

get screen ✓ ✓

getcallstate ✓ ✓

getconfiguredipaddress ✓




29

gmscity get ✓ ✓

set “city” ✓

gmscontactemail get ✓ ✓

set “email” ✓

gmscontactfax get ✓ ✓

set “fax number” ✓

gmscontactnumber get ✓ ✓


gmscontactperson get ✓ ✓

set “person” ✓

gmscountry get ✓ ✓

set “countryname” ✓

gmsstate get ✓ ✓

set “state” ✓

gmstechsupport get ✓ ✓

set “tech_support_digits” ✓

gmsurl get <{1..10}|all> disabled disabled

h239enable get ✓ ✓

yes ✓

no ✓

h323name get ✓ ✓

set “H.323name” ✓

h331audiomode get ✓ ✓

g729 | g728 | g711u | g711a | g722-56 | g722-48 | g7221-16 | g7221-24 | g7221-32 | siren14 | siren14stereo

✓

off ✓

h331dualstream get ✓ ✓

on ✓

off ✓




30

h331framerate get ✓ ✓

30|15|10|7.5 ✓

h331videoformat get ✓ ✓

fcif ✓

h331videoprotocol get ✓ ✓

h264|h263+|h263|h261 ✓

hangup phone ✓ ✓

video ✓ ✓

all ✓ ✓

history ✓ ✓

homecallquality get ✓ ✓

yes ✓

no ✓

homemultipoint (deprecated) get ✓ ✓

yes ✓

no ✓

homerecentcalls get ✓ ✓

yes ✓

no ✓

homesystem get ✓ ✓

yes ✓

no ✓

homesystemname get ✓ ✓

yes ✓

no ✓

hostname get ✓ ✓

set “hostname” ✓

importdirectory ✓

ipaddress get ✓ ✓





31

ipdialspeed get “valid speed” ✓ ✓

set “valid speed” <on, off> ✓

ipisdninfo get ✓ ✓

both ✓

ip-only ✓

isdn-only ✓

none ✓

ipprecaudio, ipprecfecc, ipprecvideo

get ✓ ✓

set ✓

ipstat ✓

isdnareacode get ✓ ✓

set “area code” ✓

isdncountrycode get ✓ ✓

set “country code” ✓

isdndialingprefix get ✓ ✓

set “isdn prefix” ✓

isdndialspeed get “valid speed” ✓ ✓

set “valid speed” <on, off> ✓

isdnnum get 1b1|1b2|2b1|2b2|3b1|3b2|4b1|4b2 ✓ ✓

set 1b1|1b2|2b1|2b2|3b1|3b2|4b1|4b2 ✓

isdnswitch get ✓

pt-to-pt_at&t_5_ess|multipoint_at&t_5_ess|ni-1|nortel_dms-100|standard_etsi_euro-isdn|ts-031|ntt_ins-64

✓

keypadaudioconf get ✓ ✓

yes ✓ ✓

no ✓ ✓

language get ✓ ✓

set ✓

lanport get ✓ ✓

10, 10hdx, 10fdx, 100, 100hdx, 100fdx ✓




32

ldapauthenticationtype get ✓

set ✓

anonymous ✓

basic ✓

ntlm ✓

ldapbasedn get ✓

set “base dn” ✓

ldapbinddn get ✓

set “bind dn” ✓

ldapdirectory get ✓ ✓

yes ✓

no ✓

ldapntlmdomain get ✓

set “domain” ✓

ldappassword set <ntlm|basic> [“password”] disabled disabled

ldapserveraddress get ✓

set “address” ✓

ldapserverport get ✓

set ✓

ldapsslenabled get ✓

set [on, off] ✓

ldapusername get ✓

set “user name” ✓

linestate get ✓ ✓

register ✓ ✓

unregister ✓ ✓

listen video ✓ ✓

phone ✓ ✓

sleep ✓ ✓




33

localdatetime get ✓ ✓

yes ✓

no ✓

marqueedisplaytext get ✓ ✓

set “text” ✓

maxgabinternationalcallspeed get ✓ ✓

set “valid speed” ✓

maxgabinternetcallspeed get ✓ ✓


maxgabisdncallspeed get ✓ ✓


maxtimeincall get ✓ ✓

set {0..999} ✓

mcupassword “password” ✓ ✓

meetingpassword set “password” ✓ ✓

monitor1 (deprecated) get ✓ ✓

4:3|16:9 ✓

vga ✓

monitor1screensaveroutput get ✓ ✓

black ✓

no_signal ✓

monitor2 (deprecated) get ✓ ✓

off ✓

4:3|16:9 ✓

vga ✓

monitor2screensaveroutput get ✓ ✓

black ✓

no_signal ✓




34

mpautoanswer get ✓ ✓

yes ✓

no ✓

donotdisturb ✓

mpmode get ✓ ✓

auto ✓ ✓

discussion ✓ ✓

presentation ✓ ✓

fullscreen ✓ ✓

mtumode get ✓ ✓

default ✓

specify ✓

mtusize get ✓ ✓

660|780|900|1020|1140|1260|1500 ✓

mute <register|unregister> ✓ ✓

near <get|on|off|toggle> ✓ ✓

far get ✓ ✓

muteautoanswer get ✓ ✓

yes ✓

no ✓

natconfig get ✓ ✓

auto ✓

manual ✓

off ✓

nath323compatible get ✓ ✓

yes ✓

set ✓

nearloop yes ✓ ✓

no ✓ ✓

netstats {0..n} ✓ ✓




35

nonotify calendarmeetings ✓ ✓

callstatus ✓ ✓

captions ✓ ✓

linestatus ✓ ✓

mutestatus ✓ ✓

screenchanges ✓ ✓

sysstatus ✓ ✓

sysalerts ✓ ✓

vidsourcechanges ✓ ✓

notify notify ✓ ✓

calendarmeetings ✓ ✓

callstatus ✓ ✓

captions ✓ ✓

linestatus ✓ ✓

mutestatus ✓ ✓

screenchanges ✓ ✓

sysstatus ✓ ✓

sysalerts ✓ ✓

vidsourcechanges ✓ ✓

ntpmode get ✓ ✓

auto ✓

off ✓

manual ✓

ntpserver get ✓

set <“server name”|“xxx.xxx.xxx.xxx”> ✓

numberofmonitors (deprecated) ✓ ✓

numdigitsdid get ✓ ✓

{0..24} ✓

numdigitsext get ✓ ✓

{0..24} ✓




36

ocsdirectory get ✓ ✓

yes ✓

no ✓

oobcomplete ✓

pause {0..65535} ✓ ✓

phone clear ✓ ✓

flash ✓ ✓

pip <get|on|off|camera|swap|register|unregister|location>

✓ ✓

location <get|0|1|2|3> ✓ ✓

popupinfo register ✓ ✓

unregister ✓ ✓

get ✓ ✓

preset <register|unregister> ✓ ✓


far <go|set> <{0..15}> ✓ ✓

near <go|set> <{0..99}> ✓ ✓

pricallbycall get ✓ ✓

set {0..31} ✓

prichannel get all ✓ ✓

get {1..n} ✓ ✓

set all <on|off>} ✓

set {1..n} <on|off> ✓

pricsu get ✓ ✓

internal ✓

external ✓

pridialchannels get ✓ ✓

set {1..n} ✓

priintlprefix get ✓ ✓

set “prefix” ✓




37

prilinebuildout get ✓ ✓

set <0|-7.5|-15|-22.5> ✓

set <0-133|134-266|267-399|400-533|534-665> ✓

prilinesignal get ✓ ✓

set <esf/b8zs|crc4/hdb3|hdb3> ✓

primarycallchoice (deprecated) get ✓ ✓

isdn ✓

ip ✓

sip ✓

manual ✓

prinumberingplan get ✓ ✓

isdn ✓

unknown ✓

prioutsideline get ✓ ✓

set “outside line” ✓

priswitch get ✓

set <att5ess | att4ess | norteldms ni2 | net5/ctr4 | nttins-1500 | ts-038>

✓

reboot [y|now|n] ✓ ✓

recentcalls ✓

registerall ✓

registerthissystem get disabled disabled

yes disabled disabled

no disabled disabled




38

remotecontrol disable <get|all|none> ✓

disable "valid button" ["valid button"…] ✓

dontintercept <all|none> ✓

dontintercept "valid button" ["valid button"…] ✓

enable <all|none> ✓

enable "valid button" ["valid button"…] ✓

intercept <get|all|none> ✓

intercept "valid button" ["valid button"…] ✓

remotemonenable get ✓ ✓

requireacctnumtodial get ✓ ✓

yes ✓

no ✓

resetsystem deletesystemsettings ✓

deletelocaldirectory ✓

roomphonenumber get ✓ ✓


rs232 baud get ✓ ✓

9600|14400|19200|38400|57600|115200 ✓

rs232port1 baud get ✓ ✓

9600|14400|19200|38400|57600|115200 ✓




39

rs232 mode get ✓ ✓

off ✓

passthru disabled disabled

control disabled ✓

debug disabled disabled

camera_ptz disabled disabled

closed_caption disabled disabled

vortex_mixer disabled disabled

interactive_touch_board disabled disabled

smartboard disabled disabled

polycom_annotation disabled disabled

cps|pointmaker disabled disabled

rs232port1 mode get ✓ ✓

off ✓

passthru disabled disabled

control disabled ✓

debug disabled disabled

camera_ptz disabled disabled

closed_caption disabled disabled

vortex_mixer disabled disabled

interactive_touch_board disabled disabled

smartboard disabled disabled

polycom_annotation disabled disabled

cps|pointmaker disabled disabled

rs366dialing get ✓ ✓

on ✓

off ✓

rt get ✓ ✓

normal ✓

inverted ✓




40

rts get ✓ ✓

normal ✓

inverted ✓

screen ✓ ✓


[register|unregister] ✓ ✓

“screen name” ✓ ✓

screencontrol enable <all|none|"screen_name"> ✓

disable <all|none|"screen_name"> ✓

secondarycallchoice (deprecated) get ✓ ✓

isdn ✓

ip ✓

sip ✓

none ✓

serialnum ✓ ✓

session name “session name” ✓ ✓

find “session name” ✓ ✓

setaccountnumber “account number” ✓

setpassword admin room "currentacctpasswd" "newacctpasswd" ✓

showpopup “text to display” ✓

sleep ✓ ✓

register ✓ ✓

unregister ✓ ✓

sleeptext get ✓ ✓

set “text” ✓

sleeptime get ✓ ✓

0|1|3|15|30|60|120|

240|480

✓

snmpadmin get ✓

set “admin name” ✓




41

snmpcommunity get ✓

set “community name” ✓

snmpconsoleip get ✓


snmplocation get ✓

set “location name” ✓

snmpsystemdescription get ✓

set “system description” ✓

snmptrapversion get ✓

set v1|v2c ✓

soundeffectsvolume get ✓ ✓

set {0..10} ✓ ✓

test ✓ ✓

spidnum get <all|1b1|1b2|2b1|2b2|3b1|3b2|4b1|4b2> ✓ ✓

set <1b1|1b2|2b1|2b2|3b1|3b2|4b1|4b2> [“spid number”]

✓

st get ✓ ✓

normal ✓

inverted ✓

subnetmask get ✓ ✓


sysinfo get ✓ ✓

register ✓ ✓

unregister ✓ ✓

systemname get ✓ ✓

set “system name” ✓

tcpports get ✓ ✓

set ✓

techsupport “phone num” ✓ ✓




42

teleareacode get ✓ ✓

set “telephone_area_code” ✓

telenumber get ✓ ✓

set “telephone number” ✓

telnetechoeol get ✓ ✓

crnl ✓

nlcr ✓

timediffgmt get ✓ ✓

{-12:00..+12:00} ✓

typeofservice get ✓ ✓

ipprecedence ✓

diffserv ✓

udpports get ✓ ✓

set [{1024..49150}] ✓

unregisterall ✓

usefixedports get ✓ ✓

yes ✓

no ✓

usegatekeeper get ✓ ✓

off ✓

specify ✓

auto ✓

usepathnavigator get ✓ ✓

always ✓

never ✓

required ✓

useroompassword get ✓

no ✓

yes ✓




43

v35broadcastmode get ✓ ✓

on ✓

off ✓

v35dialingprotocol get ✓ ✓

rs366 ✓

v35num get <1b1|1b2> ✓ ✓

set <1b1|1b2> | [“v35 number”] ✓

v35portsused get ✓ ✓

<1|1+2> ✓

v35prefix get “valid speed” ✓ ✓

set “valid speed” [“value”] ✓

v35profile get ✓ ✓

adtran|adtran_isu512|ascend|ascend_vsx|

ascend_max|avaya_mcu|custom_1|fvc.com|

initia|lucent_mcu|madge_teleos

✓

v35suffix get “valid speed” ✓ ✓

set “valid speed” [“value”] ✓

validateacctnum get ✓ ✓

yes ✓

no ✓

vcbutton play {2..5} ✓ ✓

<get|stop|register|unregister> ✓ ✓

map <get|{2..5}> ✓ ✓

source get ✓ ✓

vcraudioout get ✓ ✓

yes ✓

no ✓

vcrrecordsource get ✓ ✓

<near | far | auto | content | content-or-near | content-or-far | content-or-auto | none>

✓ ✓

version ✓ ✓




44

vgaqualitypreference get ✓ ✓

content ✓ ✓

people ✓ ✓

both ✓ ✓

videocallorder <isdn|h323|sip|gateway323> <1|2|3|4> ✓

voicecallorder <isdn_phone|pots> <1|2> ✓

volume get ✓ ✓

set ✓

up ✓

down ✓

register ✓

unregister ✓

range ✓

vortex <0|1> mute <on|off> disabled disabled

<0|1> forward “vortex_macro” disabled disabled

waitfor <systemready|callcomplete> ✓ ✓

wake ✓ ✓

wanipaddress get ✓ ✓


webmonitoring “remoteacccesspasswd” <yes|no> ✓

webport get ✓

set ✓

whoami ✓ ✓




45

Copyright Information© 2010 Polycom, Inc. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Polycom, Inc.

Polycom, Inc. retains title to, and ownership of, all proprietary rights with respect to the software contained within its products. The software is protected by United States copyright laws and international treaty provision.

DisclaimerThis software is provided 'as is' with no explicit or implied warranties in respect of its properties, including, but not limited to, correctness and fitness for purpose.

Trademark InformationPOLYCOM®, the Polycom "Triangles" logo and the names and marks associated with Polycom's products are trademarks and/or service marks of Polycom, Inc. and are registered and/or common law marks in the United States and various other countries. All other trademarks are property of their respective owners. No portion hereof may be reproduced or transmitted in any form or by any means, for any purpose other than the recipient's personal use, without the express written permission of Polycom.

Documents

U.S. DoD Deployment Guide - Polycom Supportsupport.polycom.com/global/documents/support/setup...U.S. DoD Deployment Guide Polycom HDX Systems, Version 2.6 This document provides the