Poly RealPresence Access Director Administrator Guide

[Type the document title]

Polycom Document Title 1



2.1.0 | March 2013 | 3725-78703-001A

Polycom

®

RealPresence

®

Access Director™ System

Administrator’s Guide

Polycom, Inc.

6001 America Center Drive

San Jose CA 95002

USA

No part of this document may be reproduced or transmitted in any form or by any means, electronic or

mechanical, for any purpose, without the express written permission of Polycom, Inc. Under the law,

reproducing includes translating into another language or format.

As between the parties, Polycom, Inc., retains title to and ownership of all proprietary rights with respect to

the software contained within its products. The software is protected by United States copyright laws and

international treaty provision. Therefore, you must treat the software like any other copyrighted material (e.g.,

a book or sound recording).

Every effort has been made to ensure that the information in this manual is accurate. Polycom, Inc., is not

responsible for printing or clerical errors. Information in this document is subject to change without notice.

ii

Trademark Information

POLYCOM® and the names and marks associated with Polycom's products are trademarks and/or service

marks of Polycom, Inc., and are registered and/or common law marks in the United States and various other

countries.

All other trademarks are the property of their respective owners.

Patent Information

The accompanying product may be protected by one or more U.S. and foreign patents and/or pending patent

applications held by Polycom, Inc.

Polycom, Inc. iii

About This Guide

The Polycom

®

RealPresence

®

Access Director

™

Administrator’s Guide is for

administrators who need to configure, monitor, maintain, and troubleshoot

the Polycom RealPresence Access Director system.

Related Documentation

Please read all available documentation before you install or operate the

system. Documents are available at support.polycom.com.

• Polycom RealPresence Access Director Release Notes

• Polycom RealPresence Access Director Getting Started Guide

• Polycom RealPresence Access Director Deployment Guide

Required Skills

System administration of the RealPresence Access Director system requires

planning and knowledge of Polycom video conferencing and video

conferencing administration.

Polycom assumes the readers of this guide have a basic understanding of

firewalls, SIP and H.323 signaling, media traversal, and networking concepts.

Polycom RealPresence Access Director System Administrator’s Guide

iv Polycom, Inc.

Polycom, Inc. v

About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

Required Skills . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

1 System Administration Overview . . . . . . . . . . . . . . . . . . . . . . . 1

Logging into the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Logging out of the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Working with Administrator Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Changing Your Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Setting the Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Using the Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Working with Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Using Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

2 Configuration Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

3 System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Setting the System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Configuring Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Network Settings Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Configuring Network Settings for One Interface . . . . . . . . . . . . . . . . . 18

Using More than One Network Interface . . . . . . . . . . . . . . . . . . . . . . . . 19

Configuring Network Settings for One or More Network Interfaces . 20

Configuring Static Route Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Working with Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

How Certificates are Used . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Accepted Forms of Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Certificate Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Viewing Installed Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Viewing Certificate Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Adding a Certificate Authority’s Public Certificate . . . . . . . . . . . . . . . 28

Creating a Certificate Signing Request . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Reviewing a Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Adding a Signed Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Replacing a Signed Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Deleting Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Contents

Polycom RealPresence Access Director System Administrator’s Guide

vi Polycom, Inc.

Provisioning the RealPresence Access Director System . . . . . . . . . . . . . . . 34

Connecting to the Polycom Management System . . . . . . . . . . . . . . . . . 35

Disconnecting from the Polycom Management System . . . . . . . . . . . . 36

Connecting to Microsoft Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Mapping Roles to Active Directory Groups . . . . . . . . . . . . . . . . . . . . . . 37

Working with Access Proxy Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Provisioning Access Proxy Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Manually Configuring Access Proxy Settings . . . . . . . . . . . . . . . . . . . . 39

Configuring SIP and H.323 Signaling Settings . . . . . . . . . . . . . . . . . . . . . . . 43

Editing SIP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Editing H.323 Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Configuring Media Traversal Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Configuring Federation Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Working with SNMP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Using SNMP Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Configuring SNMP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Configuring Notification Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Configuring Notification Agents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Downloading MIBs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

4 User Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Adding a Local User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Searching for a Local User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Editing Local User Account Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Deleting a Local User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

5 System Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Managing Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Activating a License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Upgrading the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Viewing Software Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Uploading an Upgrade Package File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Installing an Uploaded Package File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Upgrading in a Single Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Rolling Back to the Previous Software Version . . . . . . . . . . . . . . . . . . . 70

Shutting Down and Restarting the System . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Backing Up and Restoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Contents

Polycom, Inc. vii

6 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Setting Custom Security for Network Access . . . . . . . . . . . . . . . . . . . . . . . . 75

Using Active Call . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Working with System Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Viewing the Disposition for SIP and H.323 Calls . . . . . . . . . . . . . . . . . 78

SIP Dispositions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

H.323 Dispositions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Downloading Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Deleting Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Rolling Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Configuring Log Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Running Dump Packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Running Ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Running Traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Using Polycom Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Troubleshooting Specific Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Remote Client Sign In Failed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Licensed Call Number is 0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

SIP Registration Failed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

SIP Call Failed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

H.323 Call Failed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

VMR Call Failed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

No Audio, Video, or Content . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Failed to Connect to RealPresence Resource Manager . . . . . . . . . . . . . 99

7 MIB Reference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Polycom RealPresence Access Director System Administrator’s Guide

viii Polycom, Inc.

Polycom, Inc. 1

1

System Administration Overview

The Polycom

®

RealPresence

®

Access Director

™

system enables secure

communication of high-quality video and audio between divisions or

enterprises, remote users, and guest users. As a session border controller, the

RealPresence Access Director system provides secure firewall traversal for all

of the required connections.

As a system administrator of the RealPresence Access Director system, your

role is to manage, monitor, and troubleshoot the day-to-day use of the system.

The following topics describe the initial steps for using the system:

• Logging into the System

• Logging out of the System

• Working with Administrator Accounts

• Changing Your Password

• Setting the Time Zone

• Using the Dashboard

• Working with Menus

• Using Online Help

Logging into the System

To log into the RealPresence Access Director system, you need:

• Microsoft

®

Internet Explorer

®

8 or 9.

• Java

™

1.6 or newer.

• Adobe® Flash® 9.0.124 or newer.

Polycom RealPresence Access Director System Administrator’s Guide

2 Polycom, Inc.

To log into the RealPresence Access Director system

1 Open a browser window and in the Address field enter the RealPresence

Access Director system IP address:

— https://192.168.1.254:8443

2 When the Log In screen appears, enter the following:

— User ID: admin

— Password: admin

Logging out of the System

To log out of the system

>> Click in the top-right corner of the page.

Working with Administrator Accounts

One administrator account is created during the initial installation and

configuration of the RealPresence Access Director system.

Polycom recommends that the system administrator create at least one new

administrator account with your personal log-in information, and add other

user accounts as needed. The administrator account created during

installation should then be deleted.

To add a new administrator account

1 Go to User > Users > Add.

2 In General Info, complete the following fields:

The user ID admin and password admin are the default log-in credentials after

the initial installation of the system.

Field Description

First name User’s first name

Last name User’s last name

Changing Your Password System Administration Overview

Polycom, Inc. 3

3 Click Associated Roles and select Administrator.

4 Click to add the role to the Selected roles list.

5 Click OK.

To delete the original administrator account

1 Go to User > Users.

2 Select the administrator account that was created during the initial

installation of the system.

3 Under Actions, click Delete.

4 In the Confirm Action dialog box, click Yes to delete the account.

For additional information on managing local user accounts, see “User

Management” on page 63 of this guide.

Changing Your Password

To change your system password

1 Go to User > Users.

2 Select your account from the list of users.

3 Under Actions, click Edit.

4 Enter your new password in the Password and Confirm Password fields.

5 Click OK.

Setting the Time Zone

After initial installation of the RealPresence Access Director system, the

default time zone is Asia/Shanghai. After you launch the system for the first

time, you must select the time zone of your geographic location.

User ID User’s login name

Password User’s system login password

Confirm Password Repeat user’s system login password

Field Description

Polycom RealPresence Access Director System Administrator’s Guide

4 Polycom, Inc.

To set the time zone

1 Go to Admin > Time Settings > System time zone.

2 Select the time zone of your specific geographic location, for example,

America/Denver, instead of a generic GMT offset (such as GMT+7).

3 Click Update.

The Server Time (Refresh every 10 seconds) value refreshes based on the

new setting.

4 Restart the system.

Using the Dashboard

When you log into the RealPresence Access Director system, the dashboard

displays a menu bar and different panes that show system activity levels and

settings.

You can customize the dashboard to display information that you want to see.

The system saves your customization for subsequent logins.

To return to the dashboard from other functions, click .

The following default dashboard panes display after you log into the system:

• Server Information. This pane displays the amount or percentage of:

— CPU Utilization

— Total Memory

— Used Memory

— Total Disk

— Used Disk

• Services Status. This pane shows whether the following services are

running:

— Access Proxy

— SIP

— H323

— Media Relay

— Database

• License Status. This pane displays the number of:

— Maximum Allowed Calls

— Active SIP Calls

— Active H.323 Calls

Working with Menus System Administration Overview

Polycom, Inc. 5

— Active SIP Bandwidth

— Active H.323 Bandwidth

• Peak Call Monitoring. This pane displays the percentage of peak calls for:

— H323

— SIP

To add panes to the dashboard

1 Click Add Panes.

2 From the menu, select the panes that you want to display.

To close a pane

>> Click .

To resize a pane

• Click to maximize.

• Click to restore the default size.

To set the dashboard refresh rate

1 Click the down arrow in the button.

2 Select a refresh interval.

To refresh the dashboard display

1 Click the button.

The refresh interval shown on the button varies based on the interval you

choose.

Working with Menus

When you log into the RealPresence Access Director system as an

administrator, all of the system menus display, providing access to the

functions necessary to monitor, maintain, and troubleshoot the system.

The table below lists each of the menus and their corresponding functions. The

procedures for using each of the functions are described in the appropriate

section of this Administrator’s Guide.

Polycom RealPresence Access Director System Administrator’s Guide

6 Polycom, Inc.

Using Online Help

To find help on a topic or function

1 In the Contents tab, click a topic to display the help.

2 In the Index tab, enter a keyword for the topic you need help on and

press Enter.

3 In the Search tab, enter a word or words to search for and click Go. The

help topics containing your words display.

— Select Highlight search results to highlight your search term in each

of the results.

User Configuration Maintenance

Users Access Proxy Settings License

SIP and H.323 Settings Software Upgrade

Media Traversal

Settings

Shutdown and Restart

Federation Settings Backup and Restore

Admin Diagnostics Help

Network Settings Active Call About RPAD

Time Settings System Log Files Help Contents

Certificates Dump Packet

Security Settings Ping

Log Settings Traceroute

SNMP Settings

Polycom Management

System

Microsoft Active

Directory

Polycom, Inc. 7

2

Configuration Summary

This section lists the configuration and setup tasks required to complete your

installation of the Polycom

®

RealPresence

®

Access Director™ system once the

initial installation and network configuration are complete.

See the Polycom RealPresence Access Director System Getting Started Guide

(available at support.polycom.com) for information on initial installation of

the system.

The table below shows the recommended order for completing configuration

and setup of the RealPresence Access Director system. For detailed

instructions, refer to the specific sections listed in the table and included in this

document.

To See

Set the system time zone “Setting the System Time” on page 10

Configure the network interface

settings

“Configuring Network Settings” on

page 12

Manage the system certificates “Working with Certificates” on

page 22

Provisioning the RealPresence Access

Director system

“Provisioning the RealPresence

Access Director System” on page 34

Connect to Microsoft Active Directory “Connecting to Microsoft Active

Directory” on page 36

Configure the access proxy settings “Working with Access Proxy Settings”

on page 38

Configure the SIP and H.323 signaling

settings

“Configuring SIP and H.323 Signaling

Settings” on page 43

Polycom RealPresence Access Director System Administrator’s Guide

8 Polycom, Inc.

Configure the media traversal settings “Configuring Media Traversal

Settings” on page 50

Configure the federation settings “Configuring Federation Settings” on

page 51

Configure the SNMP settings “Working with SNMP Settings” on

page 52

To See

Polycom, Inc. 9

3

System Configuration

After the Polycom

®

RealPresence

®

Access Director™ system has been

installed and configured with initial settings, you can configure additional

network and communication settings for your system.

For information on initial installation and network configuration procedures,

see the RealPresence Access Director Getting Started Guide (available at

support.polycom.com).

The following topics discuss configuration of the RealPresence Access Director

system:

• Setting the System Time

• Configuring Network Settings

• Working with Certificates

• Provisioning the RealPresence Access Director System

• Connecting to Microsoft Active Directory

• Working with Access Proxy Settings

• Configuring SIP and H.323 Signaling Settings

• Configuring Media Traversal Settings

• Configuring Federation Settings

• Working with SNMP Settings

Polycom RealPresence Access Director System Administrator’s Guide

10 Polycom, Inc.

Setting the System Time

Polycom recommends that you configure at least two Network Time Protocol

(NTP) servers for maintaining system time. The NTP server addresses may be

provisioned by the Polycom

®

RealPresence

®

Resource Manager system or

manually entered, as described in this section.

The Time Settings function in the RealPresence Access Director system allows

you to edit time settings when necessary. Consider the following before

changing the time settings.

• The RealPresence Access Director system displays two different time

settings:

— Client date and time: In the upper right corner of the Time Settings

window, next to your user name, the system displays the date and

time of your local machine. These values change only if you revise the

date and time on your local machine.

— Server time: The system displays the server time in the Server Time

(Refresh every 10 seconds) field. If you change the System time zone

or Manually set the system time, the Server Time (Refresh every 10

seconds) field displays the correct server time.

• Changing the time settings requires a system restart, which terminates

active calls and logs all users out of the system.

• If your system uses a CA-provided identity certificate, changing the

system time zone may invalidate the certificate. If this happens, you must

request and install a new certificate.

• Changing the time settings can affect the number of days available for a

trial period license.

To edit the time settings

1 Go to Admin > Time Settings.

2 Complete the following fields as needed for your system:

Setting the System Time System Configuration

Polycom, Inc. 11

Field Description

System time zone The time zone in which your RealPresence

Access Director system is located.

Notes

• After initial installation of the RealPresence

Access Director system, the default time zone

is Asia/Shanghai. You must select the time

zone of your geographic location immediately

after installation of the system.

• Polycom strongly recommends that you select

the time zone of your specific geographic

location, for example, America/Denver,

instead of a generic GMT offset (such as

GMT+7).

• If you choose a generic GMT offset, the time

displays with the Linux/Posix convention for

specifying the number of hours ahead of or

behind GMT. Therefore, the generic

equivalent of America/Denver (UTC-07:00) is

GMT+07, not GMT-07.

Auto adjust for

Daylight Saving Time

Automatically determined in accordance with the

system time zone. If the system time zone you

select observes Daylight Saving Time, this setting

is enabled.

Note

The administrator cannot change this setting.

Manually set system

time

Note

Polycom strongly recommends that you do not

set the time and date manually.

NTP servers The IP addresses or FQDNs of the Network Time

Protocol (NTP) servers. These server addresses

may be provisioned by the Polycom®

RealPresence® Resource Manager system or

manually entered.

See the Polycom RealPresence Access Director

Deployment Guide for additional information

about NTP servers

Note

Polycom recommends that you specify at least

two NTP servers for synchronizing system time.

Polycom RealPresence Access Director System Administrator’s Guide

12 Polycom, Inc.

3 Click Update.

If you change the System time zone or Manually set the system time, the

Server Time (Refresh every 10 seconds) value refreshes based on the new

settings.

Configuring Network Settings

Some network settings are configured when you install the RealPresence

Access Director system for the first time. You must configure other settings

after installation. See the following topics for information and instructions on

configuring or revising network settings:

• “Network Settings Overview” on page 12

• “Configuring Network Settings for One Interface” on page 18

• “Using More than One Network Interface” on page 19

• “Configuring Network Settings for One or More Network Interfaces” on

page 20

• “Configuring Static Route Settings” on page 21

During system installation, most network settings are specified for one

network interface card. After installation, you can configure the management,

signaling, external media, and internal media communication services for one,

three, or four network interfaces.

Network Settings Overview

Some of the network settings for the RealPresence Access Director system are

configured during initial installation and setup, while others can be

configured or edited when you use the user interface. The table below does the

following:

• Describes all network configuration settings for the RealPresence Access

Director system. Fields marked with an asterisk (*) are mandatory.

Changing the time settings requires a system restart, which terminates active

calls and logs all users out of the system.

Changing any network settings requires a system restart, which terminates all

active calls and logs all users out of the system.

If the system uses a CA-provided identity certificate, you must update the

certificate if you change hostnames or the signaling relay address.

Page is loading ...

Poly RealPresence Access Director Administrator Guide

Poly RealPresence Access Director Administrator Guide

Related papers

Other documents