No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSpace 8950 IP Phone V200R003C00 Administrator Guide

Provides information about deployment, operate and maintain the Video Phone.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Network

Network

This section describes how to set network access parameters including access authentication, access mode, and network security.

Setting Parameters on the Web Page

  1. Access the phone web page as an administrator. For details, see Web Page Access.
  2. Choose Advanced > Network.
  3. Set parameters (see Table 6-4 for detailed parameter descriptions).

    Table 6-4  Parameter description

    Parameter

    Description

    How to Set

    How to Modify the Configuration File

    Access Authentication

    802.1x

    802.1x is a protocol for port-based network access control. It authenticates and controls devices that attempt to connect to a LAN.

    • If a device connected to an 802.1x-enabled port on the switch is authenticated, the device can access resources on the LAN.
    • If the authentication fails, the device cannot access resources on the LAN.
    Enable or disable 802.1x based on requirements.
    NOTE:
    To ensure network access security, it is recommended that you enable 802.1x. Ask your network administrator for the user name and password for 802.1x authentication. The phone login account and password can be used as the user name and password for 802.1x authentication.

    Default: Enable

    Parameters: ENABLEDOT1X, USERNAME, and PASSWORD

    Location: Device > ComCfg > Access > Dot1x

    Setting:
    • ENABLEDOT1X indicates whether to enable 802.1x, with two options 0 (disable) and 1 (enable). Set this parameter based on requirements.
    • USERNAME indicates the user name for 802.1x authentication. Set this parameter to the user name that you have obtained from your network administrator.
    • PASSWORD indicates the password for 802.1x authentication. Set this parameter to the password that you have obtained from your network administrator.

    Example: ENABLEDOT1X="1", USERNAME="admin", and PASSWORD="Huawei@123456"

    Parameters: AuthMode

    Location: Device > ComCfg > AssociateSipDot1x

    Setting: AuthMode indicates the authentication method for 802.1x authentication.

    Value: 0, 1, or 2
    • 0: EAP-MD5
    • 1: EAP-TLS
    • 2: Automatic

    Default: 1

    Network Security

    SRTP

    Indicates the media stream encryption mode.
    • Mandatory: encrypts media streams.
    • Optional: encrypts media streams when Mandatory or Optional is selected for the peer IP phone, and does not encrypt media streams when Disable is selected for the peer IP phone.
    • Disable: does not encrypt media streams.
    • To ensure communication security, it is recommended that you select Mandatory.

    • When some peer IP phones do not support SRTP-based encryption but need to have media stream exchanged with the IP phone, select Optional.

    • If you select Disable, all media data is transmitted in plaintext over the IP network, and hackers can easily intercept calls.

    Default: Disable

    Parameter: encryptSRTP

    Location: Device > ComCfg > NetworkSafe

    Value: 0, 1, or 2
    • 0: disable
    • 1: optional
    • 2: mandatory

    Example: encryptSRTP="2"

    SIP Transport

    Indicates the transmission mode of SIP signaling. Three options are available:
    • UDP: transaction-oriented, simple, and unreliable transmission mode
    • TLS: cryptographic and secure transmission mode to ensure confidentiality and message integrity
    • TCP: connection-oriented and reliable transmission mode
    Set this parameter based on requirements.
    NOTE:
    To ensure communication security, it is recommended that you select TLS.
    Before using TLS, ensure that:
    • The server supports TLS.
    • You have imported the TLS client root certificate to the IP phone and have selected the imported certificate from the TLS Certificate Issuer drop-down list box. For details about how to import a certificate, see Multi-certificate Support.
    • You have set the correct server port. In a UC1.1 network environment, the port number is 5061. In a UC2.0 network environment, the port number is automatically pushed by the AA server, so you do not need to manually configure the port number. For details, see Server.
    • The phone's system time is within the validity period of the imported certificate.

    Default: UDP

    Parameter: TransferMode

    Location: Device > ComCfg > Phone > Sip

    Value: 0, 1, or 2
    • 0: UDP
    • 1: TLS
    • 2: TCP

    Example: TransferMode="1"

    WEB

    Indicates the mode for accessing the IP phone using the web page.

    • Disable: Web access is disabled.
    • HTTP: The web browser interacts with the IP phone using HTTP.
    • HTTPS: The web browser interacts with the IP phone using HTTPS, which ensures user information security. When you select HTTPS, the web browser automatically changes its web access mode to HTTPS even if you log in to the phone web page using HTTP.
    • HTTP and HTTPS: The web browser interacts with the IP phone using either HTTP or HTTPS.
    • HTTP is a protocol to transmit data in plaintext. Therefore, if you use HTTP, ensure that your network is a trusted one.
    • Before using HTTPS, import the required certificate. For details about how to import a certificate, see Multi-certificate Support.

    Default: Disable

    Parameter: encryptVisitWeb

    Location: Device > ComCfg > NetworkSafe

    Value: 0, 1 or 2
    • 0: disables web access.
    • 1: uses HTTP for web access.
    • 2: uses HTTPS for web access.

    Example: encryptVisitWeb="2"

    LLDP-MED

    LLDP-MED

    Indicates whether to enable LLDP packet sending on the phone's LAN port.

    LLDP enables a device to store and manage information about the device itself and directly-connected neighbors for the network management system to check the link communication status.

    • If you select Enable, the phone's LAN port sends LLDP packets.
      NOTE:
      eSpace 8950 can only send LLDP packets. It does not process its received LLDP packets.
    • If you select Disable, the phone's LAN port does not send LLDP packets.

    Default: Enable

    Parameter: Enable

    Location: Device > ComCfg > Access > LLDP

    Value: 0 or 1
    • 0: disable
    • 1: enable

    Example: Enable="1"

    Packet Sending Interval

    Indicates the interval for sending an LLDP packet.

    Value range: 1-3600, in unit of seconds

    Default: 120

    Parameter: Interval

    Location: Device > ComCfg > Access > LLDP

    Example: Interval="120"

    VLAN

    LAN Port

    Indicates whether to enable the VLAN function for the phone's LAN port.

    If you select Enable, the VLAN function is enabled for the phone's LAN port.

    Set this parameter based on requirements.

    Default: Enable

    Parameter: Enable

    Location: Device > ComCfg > Access > Qos

    Value: 0 or 1
    • 0: disable
    • 1: enable

    Example: Enable="1"

    ID

    Indicates the VLAN ID of the phone's LAN port. After LAN port is enabled, the data packets sent by the IP phone carry VLAN tags.

    The network administrator divides the network connected to the switch into multiple VLANs. Each VLAN has a VLAN ID.

    Set this parameter to the ID of the VLAN to which the IP phone belongs.

    Value range: 0-4094

    Default: 0

    NOTE:
    If the LLDP-MED function is enabled, an IP phone automatically synchronizes the VLAN values configured on the switch and changes the corresponding parameter values in the configuration file after the IP phone starts.

    Parameter: VlanId

    Location: Device > ComCfg > Access > Qos

    Example: VlanId="95"

    Priority

    Indicates the VLAN priority of the phone's LAN port.

    Set this parameter based on requirements. A large value indicates a high priority.

    Value range: 0-7

    Default: 6

    Parameter: Level2Priority

    Location: Device > ComCfg > Access > Qos

    Example: Level2Priority="6"

    PC Port

    Indicates whether to enable the VLAN function for the PC port on an IP phone.

    If you select Enable the VLAN function is enabled for the PC port.

    Set this parameter based on requirements.

    Default: Disable

    Parameter: EnablePCPort

    Location: Device > ComCfg > Access > PCVlan

    Value: 0 or 1
    • 0: disable
    • 1: enable

    Example: EnablePCPort="1"

    ID

    Indicates the VLAN ID of the phone's PC port.

    • This VLAN ID is carried by data packets transmitted upstream through the PC port.
    • For data packets transmitted downstream through the PC port, if the VLAN ID in the data packets is the same as the VLAN ID of the PC port, the PC port removes the VLAN tag from the data packets before transmitting them. If the VLAN ID in the data packets is different from the VLAN ID of the PC port, the PC port discards these data packets.

    Set this parameter to the ID of the VLAN to which the IP phone belongs.

    Value range: 0-4094

    Default: 0

    Parameter: VlanId

    Location: Device > ComCfg > Access > PCVlan

    Example: VlanIdPCPort="5"

    Priority

    Indicates the VLAN priority of the phone's PC port.

    Set this parameter based on requirements. A large value indicates a high priority.

    Value range: 0-7

    Default: 0

    Parameter: Level2PriorityPCPort

    Location: Device > ComCfg > Access > PCVlan

    Example: Level2PriorityPCPort="3"

    VLAN Filtering on PC Port

    Indicates whether to enable the data filtering function for the phone's PC port. If you select Enable, the phone's PC port allows the following data packets to pass through: data packets that do not carry any VLAN ID, data packets carrying the VLAN ID of the LAN port, and data packets carrying the VLAN ID that is set below VLAN Filtering on PC Port. If you select Disable, the phone's PC port allows only packets without any VLAN ID or with the VLAN ID of the LAN port to pass through.

    Set this parameter based on requirements.

    Default: Disable

    Parameter: EnablePCPort

    Location: Device > ComCfg > Access > PCQos

    Value: 0 or 1
    • 0: disable
    • 1: enable

    Example: EnablePCPort="1"

    ID

    Indicates the VLAN ID, with which packets are allowed to pass through the phone's PC port. When VLAN Filtering on PC Port is set to Enable, the phone's PC port allows the following data packets to pass through: data packets that do not carry any VLAN ID, data packets carrying the VLAN ID of the LAN port, and data packets carrying the VLAN ID that is set here.

    Set this parameter based on requirements.

    Value range: 0-4094

    Default: 0

    Parameter: VlanIdPCPort

    Location: Device > ComCfg > Access > PCQos

    Example: VlanIdPCPort="96"

    DSCP

    DSCP

    Indicates whether to enable Differentiated Services Code Point (DSCP). DSCP occupies the most significant six bits in the Type of Service (TOS) field to differentiate between services.

    Default: Disable

    Parameter: Enable

    Location: Device > ComCfg > Access > Dscp

    Value: 0 or 1
    • 0: disable
    • 1: enable

    Example: Enable="1"

    Audio

    Indicates the voice DSCP value.

    Set this parameter based on requirements.

    Value range: 0-63

    Default: 46

    Parameter: AUDIODSCP

    Location: Device > ComCfg > Access > Dscp

    Example: AUDIODSCP="46"

    Video

    Indicates the video DSCP value.

    Set this parameter based on requirements.

    Value range: 0-63

    Default: 46

    Parameter: AUDIODSCP

    Location: Device > ComCfg > Access > Dscp

    Example: AUDIODSCP="46"

    STP

    Indicates the signaling DSCP value.

    Set this parameter based on requirements.

    Value range: 0-63

    Default: 46

    Parameter: SIGNALDSCP

    Location: Device > ComCfg > Access > Dscp

    Example: SIGNALDSCP="46"

    Network Port Link Mode

    LAN Port

    Indicates the working mode of the phone's LAN port.

    Select a value based on your network conditions.

    Default: Auto-negotiation

    Parameter: InternetMode

    Location: Device > ComCfg > Negotiate

    Value range: 0-6
    • 0: auto-negotiation
    • 1: 10 Mbit/s full-duplex
    • 2: 10 Mbit/s half-duplex
    • 3: 100 Mbit/s full-duplex
    • 4: 100 Mbit/s half-duplex
    • 5: 1000 Mbit/s full-duplex
    • 6: 100 Mbit/s adaptive

    Example: InternetMode="0"

    PC Port

    Indicates the working mode of the phone's PC port.

    Select a value based on your network conditions.

    Default: Auto-negotiation

    Parameter: PCMode

    Location: Device > ComCfg > Negotiate

    Value range: 0-6
    • 0: auto-negotiation
    • 1: 10 Mbit/s full-duplex
    • 2: 10 Mbit/s half-duplex
    • 3: 100 Mbit/s full-duplex
    • 4: 100 Mbit/s half-duplex
    • 5: 1000 Mbit/s full-duplex
    • 6: 100 Mbit/s adaptive

    Example: PCMode="0"

    Automatic rate adjustment

    Automatically selects the optimal network mode.

    If you select Enable, the IP phone automatically selects the optimal network mode.

    Set this parameter based on requirements.

    Default: Disable

    NOTE:

    When automatic rate adjustment is enabled, the IP phone automatically selects the optimal network mode, and users do not need to manually set the rates of the LAN port and PC port.

    When automatic rate adjustment is disabled , it's recommended that setting the value of LAN port identical to PC port.

    Parameter: AutoAdjust

    Location: Device > ComCfg > Negotiate

    Value: 0 or 1
    • 0: disable
    • 1: enable

    Example: AutoAdjust="0"

    IPv4 Network Access Mode

    Indicates the IPv4 network access mode of the IP phone, with three options available: Fixed IP Address, DHCP.

    • If you select Fixed IP Address, fill out the IP address, subnet mask, gateway address, active DNS server address, and standby DNS server address.
    • If you select DHCP, the IP phone automatically obtains an IP address from the DHCP server. You can still choose to manually enter the DNS server address or enable the IP phone to automatically obtain a DNS server address.
      NOTE:
      • Auto DNS Server: The IP phone automatically obtains a DNS server address from the DHCP server.
      • Manually obtain the DNS address: You need to manually enter the active and standby DNS server addresses.

    Select a value based on your network conditions.

    Default: DHCP

    Parameter: ACCESSMODE

    Location: Device > ComCfg > Access

    Value range: 0 or 1
    • 0: fixed IP address
    • 1: DHCP

    Example: ACCESSMODE="1"

    IPv6 Network Access Mode

    Indicates the IPv6 network access mode of the IP phone, with three options available: Fixed IP Address, DHCP.

    If you select Fixed IP Address, fill out the IP address, subnet mask, prefix length, gateway address, active DNS server address, and standby DNS server address.

    Select a value based on your network conditions.

    Default: DHCP

    Parameter: ACCESSMODEIPV6

    Location: Device > ComCfg > Access

    Value range: 0 fixed IP address

    Example: ACCESSMODEIPV6="0"

    NOTE:
    On the phone's Advanced screen, you can also set some network parameters using the same method as on the web page. For details about how to access the Advanced screen, see Advanced Screen Access.

Setting Parameters on the LCD Screen

  1. Choose Advanced > Network Security on the LCD screen. For details, see Advanced Screen Access.
  2. Set parameters listed in Table 6-5.

    Table 6-5  Network Security parameters on the LCD screen

    Parameter

    Description

    How to Set

    Network Access

    802.1x

    802.1x is a protocol for port-based network access control. It authenticates and controls devices that attempt to connect to a LAN.

    • If a device connected to an 802.1x-enabled port on the switch is authenticated, the device can access resources on the LAN.
    • If the authentication fails, the device cannot access resources on the LAN.
    Tap the function corresponding to 802.1x to enable or disable 802.1x. Enable or disable 802.1x based on requirements.
    NOTE:
    To ensure network access security, it is recommended that you enable 802.1x. Ask your network administrator for the user name and password for 802.1x authentication. The phone login account and password can be used as the user name and password for 802.1x authentication.

    You can set the authentication mode after 802.1x authentication is enabled.

    The authentication modes are EAP-MD5, EAP-TLS.

    Default value: Enable

    LLDP-MED

    Indicates whether to enable LLDP packet sending on the phone's LAN port.

    LLDP enables a device to store and manage information about the device itself and directly-connected neighbors for the network management system to check the link communication status.

    • If you select Enable, the phone's LAN port sends LLDP packets.
      NOTE:
      eSpace 8950 can only send LLDP packets. It does not process its received LLDP packets.
    • If you select Disable, the phone's LAN port does not send LLDP packets.

    Default: Enable

    VLAN

    Indicates whether to enable the VLAN function for the phone's LAN port.

    If you select Enable, the VLAN function is enabled for the phone's LAN port.

    • VLAN ID:

      Indicates the VLAN ID of the phone's LAN port. After LAN port is enabled, the data packets sent by the IP phone carry VLAN tags.

      The network administrator divides the network connected to the switch into multiple VLANs. Each VLAN has a VLAN ID.

    • VLAN Priority: Indicates the VLAN priority of the phone's LAN port.

    Tap the function corresponding to VLAN to enable or disable the VLAN function for the phone's LAN port. Set this parameter based on requirements.

    Default: Enable

    You can Tap LAN and set VLAN ID and VLAN Priority.

    • VLAN ID:

      Set this parameter to the ID of the VLAN to which the IP phone belongs.

      Value range: 0-4094

      Default: 0

    • VLAN Priority:

      Set this parameter based on requirements. A large value indicates a high priority.

      Value range: 0-7

      Default: 6

    NOTE:
    If the LLDP-MED function is enabled, an IP phone automatically synchronizes the VLAN values configured on the switch and changes the corresponding parameter values in the configuration file after the IP phone starts.

    Network Security

    SRTP

    Indicates the media stream encryption mode.
    • Mandatory: encrypts media streams.
    • Optional: encrypts media streams when Mandatory or Optional is selected for the peer IP phone, and does not encrypt media streams when Disable is selected for the peer IP phone.
    • Disable: does not encrypt media streams.

    Tap SRTP and select the voice encryption mode based on the site requirements.

    • To ensure communication security, it is recommended that you select Mandatory.

    • When some peer IP phones do not support SRTP-based encryption but need to have media stream exchanged with the IP phone, select Optional.

    • If you select Disable, all media data is transmitted in plaintext over the IP network, and hackers can easily intercept calls.

    Default: Disable

    SIP Transport

    Indicates the transmission mode of SIP signaling. Three options are available:
    • UDP: transaction-oriented, simple, and unreliable transmission mode
    • TLS: cryptographic and secure transmission mode to ensure confidentiality and message integrity
    • TCP: connection-oriented and reliable transmission mode
    Tap SIP Transport and configure the transmission mode of SIP signaling based on the site requirements.
    NOTE:
    To ensure communication security, it is recommended that you select TLS.
    Before using TLS, ensure that:
    • The server supports TLS.
    • You have imported the TLS client root certificate to the IP phone and have selected the imported certificate from the TLS Certificate Issuer drop-down list box. For details about how to import a certificate, see Multi-certificate Support.
    • You have set the correct server port. In a UC1.1 network environment, the port number is 5061. In a UC2.0 network environment, the port number is automatically pushed by the AA server, so you do not need to manually configure the port number. For details, see Server.
    • The phone's system time is within the validity period of the imported certificate.

    Default: UDP

    WEB

    Indicates the mode for accessing the IP phone using the web page.

    • Disable: Web access is disabled.
    • HTTP: The web browser interacts with the IP phone using HTTP.
    • HTTPS: The web browser interacts with the IP phone using HTTPS, which ensures user information security. When you select HTTPS, the web browser automatically changes its web access mode to HTTPS even if you log in to the phone web page using HTTP.
    • HTTP and HTTPS: The web browser interacts with the IP phone using either HTTP or HTTPS.

    Tap WEB and configure the mode for accessing the IP phone based on the site requirements.

    • HTTP is a protocol to transmit data in plaintext. Therefore, if you use HTTP, ensure that your network is a trusted one.
    • Before using HTTPS, import the required certificate. For details about how to import a certificate, see Multi-certificate Support.

    Default: Disable

Translation
Download
Updated: 2018-09-12

Document ID: EDOC1000067158

Views: 47356

Downloads: 1812

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next