Cisco C40 Manual

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
91
NetworkServices SNMP Mode
SNMP (Simple Network Management Protocol) is used in network management systems to 
monitor network-attached devices (routers, servers, switches, projectors, etc) for conditions 
that warrant administrative attention. SNMP exposes management data in the form of variables 
on the managed systems, which describe the system configuration. These variables can then 
be queried (set to ReadOnly) and sometimes set (set to ReadWrite) by managing applications.
Requires user role:  ADMIN
Value space:  
Off:  Disable the SNMP network service.
ReadOnly:  Enable the SNMP network service for queries only.
ReadWrite:  Enable the SNMP network service for both queries and commands.
Example:
 NetworkServices SNMP Mode: ReadWrite
NetworkServices SNMP Host [1..3] Address
Enter the address of up to three SNMP Managers.
The system's SNMP Agent (in the codec) responds to requests from SNMP Managers (a PC 
program etc.), for example about system location and system contact. SNMP traps are not 
supported.
Requires user role:  ADMIN
Value space:  
Format:  A valid IPv4 address, IPv6 address or DNS name.
Example:
 NetworkServices SNMP Host 1 Address: ""
NetworkServices SNMP CommunityName
Enter the name of the Network Services SNMP Community. SNMP Community names are used 
to authenticate SNMP requests. SNMP requests must have a password (case sensitive) in order 
to receive a response from the SNMP Agent in the codec. The default password is "public". 
If you have the Cisco TelePresence Management Suite (TMS) you must make sure the same 
SNMP Community is configured there too. NOTE: The SNMP Community password is case 
sensitive.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 50 characters.
Example:
 NetworkServices SNMP Com munityName: "public"
NetworkServices SNMP SystemContact
Enter the name of the Network Services SNMP System Contact.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 50 characters.
Example:
 NetworkServices SNMP SystemContact: ""
NetworkServices SNMP SystemLocation
Enter the name of the Network Services SNMP System Location.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 50 characters.
Example:
 NetworkServices SNMP SystemLocation: ""
NetworkServices SSH Mode
SSH (or Secure Shell) protocol can provide secure encrypted communication between the 
codec and your local computer.
Requires user role:  ADMIN
Value space:  
Off:  The SSH protocol is disabled.
On:  The SSH protocol is enabled.
Example:
 NetworkServices SSH Mode: On
NetworkServices SSH AllowPublicKey
Secure Shell (SSH) public key authentication can be used to access the codec.
Requires user role:  ADMIN
Value space:  
Off:  The SSH public key is not allowed.
On:  The SSH public key is allowed.
Example:
 NetworkSer vices SSH AllowPu blicKey: On
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
92
NetworkServices CTMS Mode
This setting determines whether or not to allow multiparty conferences controlled by a Cisco 
TelePresence Multipoint Switch (CTMS). 
Video systems running software TC5.0 or later are able to initiate or join non-encrypted 
multiparty conferences controlled by CTMS version 1.8 or later. Encrypted conferences are 
supported as from software versions TC6.0 and CTMS 1.9.1. Encryption is addressed in the 
NetworkServices CTMS Encryption setting.
Requires user role:  ADMIN
Value space:  
Off:  Mulitparty conferencing via CTMS is prohibited.
On:  Mulitparty conferencing via CTMS is allowed.
Example:
 NetworkServices CTMS Mode: On
NetworkServices CTMS Encryption
This setting indicates whether or not the video system supports encryption when participating 
in a multiparty meeting controlled by a Cisco TelePresence Multipoint Switch (CTMS).
CTMS allows three security settings for meetings: non-secure (not encrypted), best effort 
(encrypted if all participants support encryption, otherwise not encrypted) and secure (always 
en cr y pte d).
Requires user role:  ADMIN
Value space:  
Off:  The video system does not allow encryption and therefore cannot participate in a secure 
CTMS meeting (encrypted). When participating in a best effort CTMS meeting, the meeting 
will be downgraded to non-secure (not encrypted).
BestEffort:  The video system can negotiate encryption parameters with CTMS and 
participate in a secure CTMS meeting (encrypted). Do not use this value if the CTMS version 
is older than 1.9.1.
Example:
 NetworkServices CTMS Encry ption: Off
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
93
Phonebook settings
Phonebook Server [1..1] ID
Enter a name for the external phone book.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 64 characters.
Example:
 Phonebook Server 1 ID: ""
Phonebook Server [1..1] Type
Select the phonebook server type.
Requires user role:  ADMIN
Value space:  
VCS:  Select VCS if the phonebook is located on the Cisco TelePresence Video 
Communication Server.
TMS:  Select TMS if the phonebook is located on the Cisco TelePresence Management Suite 
server.
Callway:  Select Callway if the phonebook is to be provided by the WebEx TelePresence 
subscription service (formerly called CallWay). Contact your WebEx TelePresence provider 
for more information.
CUCM:  Select CUCM if the phonebook is located on the Cisco Unified Communications 
Manager.
Example:
 Phonebook Server 1 Ty pe: TMS
Phonebook Server [1..1] URL
Enter the address (URL) to the external phone book server.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 255 characters.
Example:
 Phonebook Server 1 URL: "http://tms.company.com/tms/public/external/
phonebook/phonebookservice.asm x"
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
94
Provisioning settings
Provisioning Connectivity
This setting controls how the device discovers whether it should request an internal or external 
configuration from the provisioning server.
Requires user role:  ADMIN
Value space:  
Internal:  Request internal configuration.
External:  Request external configuration.
Auto:  Automatically discover using NAPTR queries whether internal or external configurations 
should be requested. If the NAPTR responses have the "e" flag, external configurations will 
be requested. Otherwise internal configurations will be requested.
Example:
 Provisioning Connectivity: Auto
Provisioning Mode
It is possible to configure a video system using a provisioning system (external manager). 
This allows video conferencing network administrators to manage many video systems 
simultaneously.
With this setting you choose which type of provisioning system to use. Provisioning can also be 
switched off. Contact your provisioning system provider/representative for more information.
Requires user role:  ADMIN
Value space:  
Off:  The video system will not be configured by a provisioning system.
TMS:  The video system will be configured using TMS (Cisco TelePresence Management 
System).
VCS:  Not applicable in this version.
Callway:  The video system will be configured using the WebEx TelePresence subscription 
service (formerly called Callway).
CUCM:  The video system will be configured using CUCM (Cisco Unified Communications 
Manager).
Auto:  The provisioning server will automatically be selected by the video system.
Example:
 Provisioning Mode: TMS
Provisioning LoginName
This is the user name part of the credentials used to authenticate the video system with the 
provisioning server. This setting must be used when required by the provisioning server. If 
Provisioning Mode is Callway (WebEx TelePresence), enter the video number.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 80 characters.
Example:
 Provisioning LoginNa me: ""
Provisioning Password
This is the password part of the credentials used to authenticate the video system with the 
provisioning server. This setting must be used when required by the provisioning server. If 
Provisioning Mode is Callway (WebEx TelePresence), enter the activation code.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 64 characters.
Example:
 Provisioning Password: ""
Provisioning HttpMethod
Select the HT TP method to be used for the provisioning.
Requires user role:  ADMIN
Value space:  < G E T/ P O S T>
G E T:  Select GET when the provisioning server supports GET.
P O S T:  Select POST when the provisioning server supports POST.
Example:
 Provisioning HttpMethod: POST
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
95
Provisioning ExternalManager Address
Enter the IP Address or DNS name of the external manager / provisioning system. 
If an External Manager Address (and Path) is configured, the system will send a message to this 
address when starting up. When receiving this message the external manager / provisioning 
system can return configurations/commands to the unit as a result. 
When using CUCM or TMS provisioning, the DHCP server can be set up to provide the external 
manager address automatically (DHCP Option 242 for TMS, and DHCP Option 150 for CUCM). 
An address set in the Provisioning ExternalManager Address setting will override the address 
provided by DHCP.
Requires user role:  ADMIN
Value space:  
Format:  A valid IPv4 address, IPv6 address or DNS name.
Example:
 Provisioning ExternalManager Address: ""
Provisioning ExternalManager AlternateAddress
Only applicable when the endpoint is provisioned by Cisco Unified Communication Manager 
(CUCM) and an alternate CUCM is available for redundancy. Enter the address of the alternate 
CUCM. If the main CUCM is not available, the endpoint will be provisioned by the alternate 
CUCM. When the main CUCM is available again, the endpoint will be provisioned by this CUCM.
Requires user role:  ADMIN
Value space:  
Format:  A valid IPv4 address, IPv6 address or DNS name.
Example:
 Provisioning ExternalManager AlternateAddress: ""
Provisioning ExternalManager Protocol
Determine whether to use secure management or not.
Requires user role:  ADMIN
Value space:  
HTTP:  Set to HT TP to disable secure management. Requires HT TP to be enabled in the 
NetworkServices HT TP Mode setting.
HTTPS:  Set to HT TPS to enable secure management. Requires HT TPS to be enabled in the 
NetworkServices HT TPS Mode setting.
Example:
 Provisioning ExternalManager Protocol: HTTP
Provisioning ExternalManager Path
Set the Path to the external manager / provisioning system. This setting is required when 
several management services reside on the same server, i.e. share the same External Manager 
address.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 255 characters.
Example:
 Provisioning ExternalManager Path: "tms/public/external/management/
System ManagementService.asm x"
Provisioning ExternalManager Domain
Enter the SIP domain for the VCS provisioning server.
Requires user role:  ADMIN
Value space:  
Format:  String with a maximum of 64 characters.
Example:
 Provisioning ExternalManager Domain: "any.domain.com"
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
96
RTP settings
RTP Ports Range Start
Specify the first port in the range of RTP ports. Also see the H323 Profile [1..1] PortAllocation 
setting.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role:  ADMIN
Value space:  
Range:  Select a value from 1024 to 65502.
Example:
 RTP Ports Range Start: 2326
RTP Ports Range Stop
Specify the last RTP port in the range. Also see the H323 Profile [1..1] Port Allocation setting.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role:  ADMIN
Value space:  
Range:  Select a value from 1056 to 65535.
Example:
 RTP Ports Range Stop: 2486
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
97
Security settings
Security Audit Logging Mode
Determine where to record or transmit the audit logs. The audit logs are sent to a syslog server. 
When using the External/ExternalSecure modes and setting the port assignment to manual in 
the Security Audit Server PortAssignment setting, you must also enter the address and port 
number for the audit server in the Security Audit Server Address and Security Audit Server Port 
settings.
Requires user role:  AUDIT
Value space:  
Off:  No audit logging is performed.
Internal:  The system records the audit logs to internal logs, and rotates logs when they are 
full.
External:  The system sends the audit logs to an external syslog server. The syslog server 
must support UDP.
ExternalSecure:  The system sends encrypted audit logs to an external syslog server that is 
verified by a certificate in the Audit CA list. The Audit CA list file must be uploaded to the 
codec using the web interface. The common_name parameter of a certificate in the CA list 
must match the IP address of the syslog server, and the secure TCP server must be set up 
to listen for secure (TLS) TCP Syslog messages.
Example:
 Security Audit Logging Mode: Off
Security Audit OnError Action
Determine what happens when the connection to the syslog server is lost. This setting is only 
relevant when Security Audit Logging Mode is set to ExternalSecure.
Requires user role:  AUDIT
Value space:  
Halt:  If a halt condition is detected the system codec is rebooted and only the auditor is 
allowed to operate the unit until the halt condition has passed. When the halt condition has 
passed the audit logs are re-spooled to the syslog server. Halt conditions are: A network 
breach (no physical link), no syslog server running (or incorrect address or port to the syslog 
server), TLS authentication failed (if in use), local backup (re-spooling) log full.
Ignore:  The system will continue its normal operation, and rotate internal logs when full. 
When the connection is restored it will again send its audit logs to the syslog server.
Example:
 Security Audit OnError Action: Ignore
Security Audit Server Address
The audit logs are sent to a syslog server. Enter the IP address of the syslog server. Only valid 
IPv4 or IPv6 address formats are accepted. Host names are not supported. This setting is only 
relevant when Security Audit Logging Mode is set to External or ExternalSecure.
Requires user role:  AUDIT
Value space:  
Format:  A valid IPv4 address or IPv6 address
Example:
 Security Audit Server Address: ""
Security Audit Server Port
The audit logs are sent to a syslog server. Enter the port of the syslog server that the system 
shall send its audit logs to. This setting is only relevant when Security Audit Port Assignment is 
set to Manual.
Requires user role:  AUDIT
Value space:  
Range:  Select a value from 0 to 65535.
Example:
 Security Audit Server Port: 514
Security Audit Server PortAssignment
The audit logs are sent to a syslog server. You can define how the port number of the external 
syslog server will be assigned. This setting is only relevant when Security Audit Logging 
Mode is set to External or ExternalSecure. To see which port number is used you can check 
the Security Audit Server Port status. Navigate to Configuration > System status on the web 
interface or; if on a command line interface, run the command xStatus Security Audit Server 
Port.
Requires user role:  AUDIT
Value space:  
Auto:  Will use UDP port number 514 when the Security Audit Logging Mode is set to 
External. Will use TCP port number 6514 when the Security Audit Logging Mode is set to 
ExternalSecure.
Manual:  Will use the port value defined in the Security Audit Server Port setting.
Example:
 Security Audit Server PortAssignment: Auto
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
98
Security Session ShowLastLogon
When logging in to the system using SSH or Telnet you will see the UserId, time and date of the 
last session that did a successful login.
Requires user role:  ADMIN
Value space:  
On:  Show information about the last session.
Off:  Do not show information about the last session.
Example:
 Security Session ShowLastLogon: Off
Security Session InactivityTimeout
Determine how long the system will accept inactivity from the user before he is automatically 
logged out.
Requires user role:  ADMIN
Value space:  
Range:  Select a value between 1 and 10000 seconds; or select 0 when inactivity should not 
enforce automatic logout.
Example:
 Security Session InactivityTimeout: 0
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
99
SerialPort settings
SerialPort Mode
Enable/disable the serial port (COM port).
Requires user role:  ADMIN
Value space:  
Off:  Disable the serial port.
On:  Enable the serial port.
Example:
 SerialPort Mode: On
SerialPort BaudRate
Specify the baud rate (data transmission rate, bits per second) for the serial port. The default 
value is 38400. 
Other connection parameters for the serial port are: Data bits: 8; Parity: None; Stop bits: 1; Flow 
control: None.
Requires user role:  ADMIN
Value space:  
Range:  Select a baud rate from the baud rates listed (bps).
Example:
 SerialPort BaudRate: 38400
SerialPort LoginRequired
Determine if login shall be required when connecting to the serial port.
Requires user role:  ADMIN
Value space:  
Off:  The user can access the codec via the serial port without any login.
On:  Login is required when connecting to the codec via the serial port.
Example:
 SerialPort LoginReq uired: On
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide  
						

							D14636.12 Profile C60-C40 and Codec C60-C40 Administrator Guide TC6.3, OCTOBER 2013. www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reser ved. 
10 0
SIP settings
SIP ANAT
ANAT (Alternative Network Address Types) enables media negotiation for multiple addresses 
and address types, as specified in RFC 4091.
Requires user role:  ADMIN
Value space:  
Off:  Disable ANAT.
On:  Enable ANAT.
Example:
 SIP ANAT: Off
SIP AuthenticateTransferror
Not applicable in this version.
SIP ListenPort
Turn on or off the listening for incoming connections on the SIP TCP/UDP ports. If turned 
off, the endpoint will only be reachable through the SIP registrar (CUCM or VCS). It is 
recommended to leave this setting at its default value.
Requires user role:  ADMIN
Value space:  
On:  Listening for incoming connections on the SIP TCP/UDP ports is turned on.
Off:  Listening for incoming connections on the SIP TCP/UDP ports is turned off.
Example:
 SIP ListenPort: On
SIP PreferredIPMedia
Define the preferred IP version for sending and receiving media (audio, video, data). Only 
applicable when both Network IPStack and Conference CallProtocolIPStack are set to Dual, and 
the network does not have a mechanism for choosing the preferred IP version.
Requires user role:  ADMIN
Value space:  
IPv4:  The preferred IP version for media is IPv4.
IPv6:  The preferred IP version for media is IPv6.
Example:
 SIP PreferredIPM ed ia: IP v4
SIP PreferredIPSignaling
Define the preferred IP version for signaling (audio, video, data). Only applicable when both 
Network IPStack and Conference CallProtocolIPStack are set to Dual, and the  network does 
not have a mechanism for choosing the preferred IP version. It also determines the priority of 
the A/A A A A lookups in DNS, so that the preferred IP version is used for registration.
Requires user role:  ADMIN
Value space:  
IPv4:  The preferred IP version for signaling is IPv4.
IPv6:  The preferred IP version for signaling is IPv6.
Example:
 SIP PreferredIPSig naling: IP v4
SIP OCSP Mode
Not applicable in this version.
SIP OCSP DefaultResponder
Not applicable in this version.
Cisco TelePresence System Codec C40/C60 and Profiles using C40/60 Administrator Guide