Figure 119: Voicemail Group ..................................................................................................................... 203
Figure 120: Ring Group ............................................................................................................................. 205
Page 15
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 14 of 321
Figure 121: Ring Group Configuration ...................................................................................................... 207
Figure 122: Sync LDAP Server option ...................................................................................................... 208
Figure 123: Manually Sync LDAP Server ................................................................................................. 208
Figure 124: Ring Group Remote Extension .............................................................................................. 209
Figure 125: Paging/Intercom Group .......................................................................................................... 211
Figure 126: Page/Intercom Group Settings .............................................................................................. 212
This section documents significant changes from previous versions of the UCM6200 user manuals. Only
major new features or major document updates are listed here. Minor updates for corrections or editing are
not documented here.
FIRMWARE VERSION 1.0.0.1
This is the initial version.
Page 20
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 19 of 321
WELCOME
Thank you for purchasing Grandstream UCM6200 series IP PBX appliance. The UCM6200 series IP PBX
appliance is designed to bring enterprise-grade voice, video, data, and mobility features to
small-to-medium businesses (SMBs) in an easy-to-manage fashion. This IP PBX series allows businesses
to unify multiple communication technologies, such comprehensive voice, video calling, video
conferencing, video surveillance, data tools and facility access management onto one common network
that that can be managed and/or accessed remotely. The UCM6200 series supports a dual core 1GHz
ARM CortexTM A9 and 400Mhz VINETICTM A8 processors, 1GB RAM and 4GB flash. The secure and
reliable UCM6200 series delivers enterprise-grade features without any licensing fees, costs-per-feature
When the user logs in the UCM6200 web UI for the first time, a setup wizard will guide the user to set up basic
configuration. Configurations in setup wizard includes: Time zone, Change password, Network settings,
Extensions, Trunk and routes.
During the wizard, the user can quit the setup wizard at any time to start over with manual configuration. At
the last step of the wizard, the user will be provided with summary for review, before the configuration is
loaded. Once the setup is completed, the system is ready to go.
Figure 8: UCM6200 Setup Wizard
Page 38
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 37 of 321
WEB GUI CONFIGURATIONS
There are four main sections in the Web GUI for users to view the PBX status, configure and manage the
PBX.
Status: Displays PBX status, System Status, System Events and CDR.
PBX: To configure extensions, trunks, call routes, zero config for auto provisioning, call features,
internal options, IAX settings and SIP settings.
Settings: To configure user management, network settings, firewall settings, change password,
LDAP Server, HTTP Server, Email Settings, Time Settings, NTP server, recording storage and login
timeout.
Maintenance: To perform firmware upgrade, backup configurations, cleaner setup, reset/reboot,
syslog setup and troubleshooting.
WEB GUI LANGUAGES
Currently the UCM6200 series web GUI supports English, Simplified Chinese, Traditional Chinese,
Spanish, French, Portuguese, Russian, Italian, Polish, German and etc.
Users can select the displayed language in web GUI login page, or at the upper right of the web GUI after
logging in.
Figure 9: UCM6200 Web GUI Language
Page 39
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 38 of 321
SAVE AND APPLY CHANGES
Click on "Save" button after configuring the web GUI options in one page. After saving all the changes,
make sure click on "Apply Changes" button on the upper right of the web page to submit all the changes. If
the change requires reboot to take effect, a prompted message will pop up for you to reboot the device.
MAKE YOUR FIRST CALL
Power up the UCM6200 and your SIP end point phone. Connect both devices to the network. Then follow
the steps below to make your first call.
1. Log in the UCM6200 web GUI, go to PBX->Basic/Call Routes->Extensions.
2. Click on "Create New SIP Extension" to create a new extension. You will need User ID, Password and
Voicemail Password information to register and use the extension later.
3. Register the extension on your phone with the SIP User ID, SIP server and SIP Password information.
The SIP server address is the UCM6200 IP address.
4. When your phone is registered with the extension, dial *97 to access the voicemail box. Enter the
Voicemail Password once you hear "Password" voice prompt.
5. Once successfully logged in to the voicemail, you will be prompted with the Voice Mail Main menu.
6. You are successfully connected to the PBX system now.
Page 40
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 39 of 321
SYSTEM SETTINGS
This section explains configurations for system-wide parameters on the UCM6200. System settings are
under “Settings” tag on UCM6200 web GUI. System settings include User Management, Network Settings,
User management is on web GUI->Settings->User Management page. User could create multiple
accounts for different administrators to log in the UCM6200 web GUI. Additionally, the system will
automatically create user accounts along with creating new extensions for extension users to login to the
web UI using their extension number and password. All existing user accounts for web UI login will be
displayed on User Management page as shown in the following figure.
USER PRIVILEGES
Three privilege levels are supported:
Super Admin
Figure 10: User Management Page Display
Page 41
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 40 of 321
- This is the highest privilege. Super Admin can access all pages on UCM6200 web GUI, change
configuration for all options and execute all the operations.
- Super Admin can create, edit and delete one or more users with “Admin” privilege
- Super Admin can edit and delete one or more users with “Consumer” privilege
- Super Admin can view operation logs generated by all users.
- By default, the user account “admin” is configured with “Super Admin” privilegeand it’s the only
user with “Super Admin” privilege. The User Name and Privilege level cannot be changed or
deleted.
- Super Admin could change its own login password on web UI->Settings->Change Password
page.
- Super Admin could view operations done by all the users in web UI->Settings->User
Management->Operation Log.
Admin
- Users with “Admin” privilege can only be created by “Super Admin” user.
- “Admin” privilege users are not allowed to access the following pages:
Maintenance->Upgrade
Maintenance->Backup
Maintenance->Cleaner
Maintenance->Reset/Reboot
Settings->User Management->Operation Log
- “Admin” privilege users cannot create new users for login.
Consumer
- A user account for web UI login is created automatically by the system when a new extension is
created.
- The user could log in the web UI with the extension number and password to access user
information, extension configuration and CDR of that extension.
CREATE NEW WEB UI USER
When logged in as Super Admin, click on to create a new account for web UI user. The
following dialog will prompt. Configure the parameters as shown in below table.
Page 42
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 41 of 321
User Name
Configure a username to identify the user which will be required in web UI login.
Letters, digits and underscore are allowed in the user name.
User Password
Configure a password for this user which will be required in web UI login. Letters,
digits and underscore are allowed.
Privilege
This is the role of the web UI user. Currently only “Admin” is supported when
Super Admin creates a new user.
Department
Enter the necessary information to keep a record for this user.
Fax
Email Address
First Name
Last Name
Home Number
Phone Number
Figure 11: Create New User
Table 6: User Management->Create New User
Once created, the Super Admin can edit the users by clicking on or delete the user by clicking on .
Figure 12: User Management – New Users
Page 43
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 42 of 321
USER PORTAL
The user could log in web UI user portal using the extension number and password. When there is an
extension created in the UCM6200, the corresponding user account for the extension is automatically
created. The user portal allows limited access including user information, extension configuration and CDR
information of the extension. The login username is the extension number and the password is configured
by Super Admin. The following figure shows the dialog of editing the account information by Super Admin.
The User Name must be the extension number and it’s not configurable.
Figure 13: Edit User Information by Super Admin
The following figure shows an example of login page using extension number 1000 as the username.
After login, the web UI displays is shown as below.
Figure 14: User Portal Login
Page 44
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 43 of 321
Figure 15: User Portal Layout
For the configuration parameter information in each page, please refer to [Table 6: User
Management->Create New User] for options in User Portal->Basic Information->User Information page;
please refer to [EXTENSIONS] for options in User Portal->Basic Information->Extension page; please
refer to [CDR] for User Portal->Basic Information->CDR page.
CONCURRENT MULTI-USER LOGIN
When there are multiple web UI users created, concurrent multi-user login is supported on the UCM6200.
Multiple users could edit options and have configurations take effect simultaneously. However, if different
users are editing the same option or making the same operation (by clicking on “Apply Changes”), a
prompt will pop up as shown in the following figure.
Figure 16: Multiple User Operation Error Prompt
OPERATION LOG
Super Admin has the authority to view operation logs on UCM6200 web GUI->Settings->User
Management->Operation Log page. Operation logs list operations done by all the web UI users, for
example, web UI login, creating trunk, creating outbound rule and etc. There are 6 columns to record the
In this section, all the available network setting options are listed for all models. Select each tab in web
GUI->Settings->Network Settings page to configure LAN settings, WAN settings (UCM6202/UCM6204
only), 802.1X and Port Forwarding (UCM6202/UCM6204 only).
BASIC SETTINGS
Please refer to the following tables for basic network configuration parameters on UCM6202/UCM6204,
Both WAN port and LAN port are used for uplink connection. Users will need assign LAN 1 or LAN 2 as
the default interface in option "Default Interface" and configure "Gateway IP" if static IP is used for this
interface.
Page 53
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 52 of 321
Figure 23: UCM6200 Network Interface Method: Dual
802.1X
IEEE 802.1X is an IEEE standard for port-based network access control. It provides an authentication
mechanism to device before the device is allowed to access Internet or other LAN resources. The
UCM6200 supports 802.1X as a supplicant/client to be authenticated. The following diagram and figure
show UCM6200 uses 802.1X mode “EAP-MD5” on WAN port as client in the network to access Internet.
Figure 24: UCM6200 Using 802.1X as Client
Page 54
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 53 of 321
802.1X Mode
Select 802.1X mode. The default setting is "Disable". The supported 802.1X
mode are:
EAP-MD5
EAP-TLS
EAP-PEAPv0/MSCHAPv2
Identity
Enter 802.1X mode identity information.
MD5 Password
Enter 802.1X mode MD5 password information.
802.1X Certificate
Select 802.1X certificate from local PC and then upload.
802.1X Client
Certificate
Select 802.1X client certificate from local PC and then upload.
Figure 25: UCM6200 Using 802.1X EAP-MD5
The following table shows the configuration parameters for 802.1X on UCM6200. Identity and MD5
password are required for authentication, which should be provided by the network administrator obtained
from the RADIUS server. If “EAP-TLS” or “EAP-PEAPv0/MSCHAPv2” is used as the 802.1X mode, users
will also need upload 802.1X CA Certificate and 802.1X Client Certificate, which should be also generated
from the RADIUS server.
Table 11 : UCM6200 Network Settings->802.1X
STATIC ROUTES
The UCM6200 provides users static routing capability that allows the device to use manually configured
routes, rather than information only from dynamic routing or gateway configured in the UCM6200 web
GUI->Network Settings->Basic Settings to forward traffic. It can be used to define a route when no other
routes are available or necessary, or used in complementary with existing routing on the UCM6200 as a
failover backup, and etc.
Page 55
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 54 of 321
Click on to create a new static route. The configuration parameters are listed
Destination
Configure the destination IP address or the destination IP subnet for the
UCM6200 to reach using the static route.
Example:
IP address - 192.168.66.4
IP subnet - 192.168.66.0
Netmask
Configure the subnet mask for the above destination address. If left blank, the
default value is 255.255.255.255.
Example:
255.255.255.0
Gateway
Configure the gateway address so that the UCM6200 can reach the destination
via this gateway. Gateway address is optional.
Example:
192.168.40.5
Interface
Specify the network interface on the UCM6200 to reach the destination using the
static route.
LAN interface is eth0; WAN interface is eth1.
in the table below.
Once added, users can select to edit the static route.
Select to delete the static route.
Table 12: UCM6200 Network Settings->Static Routes
Static routes configuration can be reset from LCD menu->Network Menu.
The following diagram shows a sample application of static route usage on UCM6204.
Page 56
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 55 of 321
Figure 26: UCM6204 Static Route Sample
The network topology of the above diagram is as below:
Network 192.168.69.0 has IP phones registered to UCM6204 LAN 1 address
Network 192.168.40.0 has IP phones registered to UCM6204 LAN 2 address
Network 192.168.66.0 has IP phones registered to UCM6204 via VPN
Network 192.168.40.0 has VPN connection established with network 192.168.66.0
In this network, by default the IP phones in network 192.168.69.0 are unable to call IP phones in network
192.168.66.0 when registered on different interfaces on the UCM6204. Therefore, we need configure a
static route on the UCM6204 so that the phones in isolated networks can make calls between each other.
Figure 27: UCM6204 Static Route Configuration
Page 57
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 56 of 321
PORT FORWORDING
WAN Port
Specify the WAN port number or a range of WAN ports. Up to 8 ports can be
configured.
Note:
When it is set to a range, WAN port and LAN port must be configured with the
same range, such as WAN port: 1000-1005 and LAN port: 1000-1005, and access
from WAN port will be forwarded to the LAN port with the same port number, for
example, WAN port 1000 will be port forwarding to LAN port 1000.
LAN IP
Specify the LAN IP address.
LAN Port
Specify the LAN port number or a range of LAN ports.
Note:
When it is set to a range, WAN port and LAN port must be configured with the
same range, such as WAN port: 1000-1005 and LAN port: 1000-1005, and access
from WAN port will be forwarded to the LAN port with the same port number, for
example, WAN port 1000 will be port forwarding to LAN port 1000.
Protocol Type
Select protocol type "UDP Only", "TCP Only" or "TCP/UDP" for the forwarding in
the selected port. The default setting is "UDP Only".
The UCM network interface supports router function which provides users the ability to do port forwarding.
If the UCM6202/UCM6204 LAN mode is set to "Route" under web GUI->Settings->Network
Settings->Basic Settings page, port forwarding is available for configuration.
The port forwarding configuration is under web GUI->Settings->Network Settings->Port Forwarding
page. Please see related settings in the table below.
The following figures demonstrate a port forwarding example to provide phone’s web UI access to public
side.
The UCM6202/UCM6204 network mode is set to “Route”
The UCM6202/UCM6204 WAN port is connected to uplink switch, with a public IP address configured,
e.g. 1.1.1.1.
The UCM6202/UCM6204 LAN port provides DHCP pool that connects to multiple phone devices in the
LAN network 192.168.2.x. The UCM6202/UCM6204 is used as a router, with gateway address
192.168.2.1
Page 58
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 57 of 321
There is a GXP2160 connected under the LAN interface network of the UCM6202/UCM6204. It
obtains IP address 192.168.2.100 from UCM6200 DHCP pool
On the UCM6202/UCM6204 web UI->Settings->Network Settings->Port Forwarding, configure a
port forwarding entry as the figure shows below.
WAN Port: This is the port opened up on the WAN side for access purpose.
LAN IP: This is the GXP2160 IP address, under the LAN interface network of the
UCM6202/UCM6204.
Protocol Type: We select TCP here for web UI access using HTTP.
Figure 28: UCM6202/UCM6204 Port Forwarding Configuration
This will allow users to access the GXP2160 web UI from public side, by typing in address “1.1.1.1:8088”.
Page 59
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 58 of 321
Figure 29: GXP2160 Web Access Using UCM6202 Port Forwarding
DDNS SETTINGS
DDNS setting allows user to access UCM6200 via domain name instead of IP address.
The UCM supports DDNS service from the following DDNS provider:
dydns.org
noip.com
freedns.afraid.org
zoneedit.com
oray.net
Here is an example of using noip.com for DDNS.
1. Register domain in DDNS service provider. Please note the UCM6200 needs to have public IP access.
Page 60
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 59 of 321
Figure 30: Register Domain Name on noip.com
2. On web UI->Settings->Network Settings->DDNS Settings, enable DDNS service and configure
username, password and host name.
3. Now you can use domain name instead of IP address to connect to the UCM6200 web UI.
Figure 31: UCM6200 DDNS Setting
Page 61
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 60 of 321
Figure 32: Using Domain Name to Connect to UCM6200
FIREWALL
The UCM6200 provides users firewall configurations to prevent certain malicious attack to the UCM6200
system. Users could configure to allow, restrict or reject specific traffic through the device for security and
bandwidth purpose. The UCM6200 also provides Fail2ban feature for authentication errors in SIP
REGISTER, INVITE and SUBSCRIBE. To configure firewall settings in the UCM6200, go to Web
UI->Settings->Firewall page.
STATIC DEFENSE
Under Web GUI->Settings->Firewall->Static Defense page, users will see the following information:
Current service information with port, process and type.
Typical firewall settings.
Custom firewall settings.
The following table shows a sample current service status running on the UCM6200.
Page 62
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 61 of 321
Table 14: UCM6200 Firewall->Static Defense->Current Service
Port
Process
Type
Protocol or Service
7777
Asterisk
tcp/IPv4
SIP
389
Slapd
tcp/IPv4
LDAP
22
Dropbear
tcp/IPv4
SSH
80
Lighthttpd
tcp/IPv4
HTTP
8089
Lighthttpd
tcp/IPv4
HTTPS
69
Opentftpd
udp/IPv4
TFTP
9090
Asterisk
udp/IPv4
SIP
6060
zero_config
udp/IPv4
UCM6200 zero_config service
5060
Asterisk
udp/IPv4
SIP
4569
Asterisk
udp/IPv4
SIP
5353
zero_config
udp/IPv4
UCM6200 zero_config service
37435
Syslogd
udp/IPv4
Syslog
Ping Defense
Enable
If enabled, ICMP response will not be allowed for Ping request. The default
setting is disabled. To enable or disable it, click on the check box for the LAN or
WAN (UCM6202/UCM6204) interface.
Ping-of-Death
Defense Enable
Enable to prevent Ping-of-Death attack to the device. The default setting is
disabled. To enable or disable it, click on the check box for the LAN or WAN
(UCM6202/UCM6204) interface.
For typical firewall settings, users could configure the following options on the UCM6200.
Table 15: Typical Firewall Settings
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic
going through the UCM6200. To create new rule, click on "Create New Rule" button and a new window will
pop up for users to specify rule options.
Right next to "Create New Rule" button, there is a checkbox for option "Reject Rules". If it’s checked, all
the rules will be rejected except the firewall rules listed below. In the firewall rules, only when there is a rule
that meets all the following requirements, the option "Reject Rules" will be allowed to check:
Action: "Accept"
Type "In"
Destination port is set to the system login port (e.g., by default 8089)
Protocol is not UDP
Page 63
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 62 of 321
Rule Name
Specify the Firewall rule name to identify the firewall rule.
Action
Select the action for the Firewall to perform.
ACCEPT
REJECT
DROP
Type
Select the traffic type.
IN
If selected, users will need specify the network interface "LAN" or "WAN"
(for UCM6202/UCM6204) for the incoming traffic.
OUT
Service
Select the service type.
FTP
SSH
Telnet
TFTP
HTTP
LDAP
Custom
If "Custom" is selected, users will need specify Source (IP and port),
Destination (IP and port) and Protocol (TCP, UDP or Both) for the service.
Please note if the source or the destination field is left blank, it will be used
as "Anywhere".
Figure 33: Create New Firewall Rule
Table 16: Firewall Rule Settings
Save the change and click on "Apply" button. Then submit the configuration by clicking on "Apply
Changes" on the upper right of the web page. The new rule will be listed at the bottom of the page with
sequence number, rule name, action, protocol, type, source, destination and operation. More operations
below:
Page 64
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 63 of 321
Click on to edit the rule
Dynamic Defense
Enable
Enable dynamic defense. The default setting is disabled.
Periodical Time
Interval
Configure the dynamic defense periodic time interval (in minutes). If the
number of TCP connections from a host exceeds the connection threshold
within this period, this host will be added into Blacklist. The valid value is
between 1 and 59 when dynamic defense is turned on. The default setting is
59.
Blacklist Update
Interval
Configure the blacklist update time interval (in seconds). The default setting is
120.
Connection
Threshold
Configure the connection threshold. Once the number of connections from the
same host reaches the threshold, it will be added into the blacklist. The default
setting is 100.
Dynamic Defense
Whitelist
Configure the dynamic defense whitelist.
For example,
192.168.1.3
192.168.1.4
Click on to delete the rule
DYNAMIC DEFENSE
Dynamic defense is supported on the UCM6200 series. It can blacklist hosts dynamically when the LAN
mode is set to "Route" under web GUI->Settings->Network Settings->Basic Settings page. If enabled,
the traffic coming into the UCM6200 can be monitored, which helps prevent massive connection attempts
or brute force attacks to the device. The blacklist can be created and updated by the UCM6200 firewall,
which will then be displayed in the web page. Please refer to the following table for dynamic defense
options on the UCM6200.
Table 17: UCM6200 Firewall Dynamic Defense
The following figure shows a configuration example like this:
If a host at IP address 192.168.40.7 initiates more than 20 TCP connections to the UCM6200 within 1
minute, it will be added into UCM6200 blacklist.
This host 192.168.40.7 will be blocked by the UCM6200 for 300 seconds.
Page 65
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 64 of 321
Since IP address 192.168.40.5 is in whitelist, if the host at IP address 192.168.40.5 initiates more than
Global Settings
Enable Fail2Ban
Enable Fail2Ban. The default setting is disabled. Please make sure both "Enable
Fail2Ban" and "Asterisk Service" are turned on in order to use Fail2Ban for SIP
authentication on the UCM6200.
Banned Duration
Configure the duration (in seconds) for the detected host to be banned. The
default setting is 300. If set to -1, the host will be always banned.
Max Retry Duration
Within this duration (in seconds), if a host exceeds the max times of retry as
defined in "MaxRetry", the host will be banned. The default setting is 5.
MaxRetry
Configure the number of authentication failures during "Max Retry Duration"
before the host is banned. The default setting is 10.
Fail2Ban Whitelist
Configure IP address, CIDR mask or DNS host in the whiltelist. Fail2Ban will not
20 TCP connections to the UCM6200 within 1 minute, it will not be added into UCM6200 blacklist. It
can still establish TCP connection with the UCM6200.
Figure 34: Configure Dynamic Defense
FAIL2BAN
Fail2Ban feature on the UCM6200 provides intrusion detection and prevention for authentication errors in
SIP REGISTER, INVITE and SUBSCRIBE. Once the entry is detected within "Max Retry Duration", the
UCM6200 will take action to forbid the host for certain period as defined in "Banned Duration". This feature
helps prevent SIP brute force attacks to the PBX system.
Table 18: Fail2Ban Settings
Page 66
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 65 of 321
ban the host with matching address in this list. Up to 5 addresses can be added
into the list.
Local Settings
Asterisk Service
Enable Asterisk service for Fail2Ban. The default setting is disabled. Please make
sure both "Enable Fail2Ban" and "Asterisk Service" are turned on in order to use
Fail2Ban for SIP authentication on the UCM6200.
Protocol
Configure the listening port number for the service. Currently only 5060 (for UDP)
is supported.
MaxRetry
Configure the number of authentication failures during "Max Retry Duration"
before the host is banned. The default setting is 10. Please make sure this option
is properly configured as it will override the "MaxRetry" value under "Global
Settings".
LDAP SERVER
The UCM6200 has an embedded LDAP server for users to manage corporate phonebook in a centralized
manner.
By default, the LDAP server has generated the first phonebook with PBX DN
"ou=pbx,dc=pbx,dc=com" based on the UCM6200 user extensions already.
Users could add new phonebook with a different Phonebook DN for other external contacts. For
example, "ou=people,dc=pbx,dc=com".
All the phonebooks in the UCM6200 LDAP server have the same Base DN "dc=pbx,dc=com".
Term Explanation:
cn= Common Name
ou= Organization Unit
dc= Domain Component
These are all parts of the LDAP data Interchange Format, according to RFC 2849, which is how the LDAP
tree is filtered.
If users have the Grandstream phone provisioned by the UCM6200, the LDAP directory will be set up on
the phone and can be used right away for users to access all phonebooks.
Additionally, users could manually configure the LDAP client settings to manipulate the built-in LDAP
server on the UCM6200. If the UCM6200 has multiple LDAP phonebooks created, in the LDAP client
configuration, users could use "dc=pbx,dc=com" as Base DN to have access to all phonebooks on the
Page 67
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 66 of 321
UCM6200 LDAP server, or use a specific phonebook DN, for example "ou=people,dc=pbx,dc=com", to
access to phonebook with Phonebook DN "ou=people,dc=pbx,dc=com " only.
UCM can also act as a LDAP client to download phonebook entries from other LDAP server.
To access LDAP server and client settings, go to Web GUI->Settings->LDAP Server.
LDAP SERVER CONFIGURATIONS
The following figure shows the default LDAP server configurations on the UCM6200.
Figure 35: LDAP Server Configurations
The UCM6200 LDAP server supports anonymous access (read-only) by default. Therefore the LDAP client
doesn't have to configure username and password to access the phonebook directory. The "Root DN" and
"Root Password" here are for LDAP management and configuration where users will need provide for
authentication purpose before modifying the LDAP information.
The default phonebook list in this LDAP server can be viewed and edited by clicking on for the first
phonebook under LDAP Phonebook.
Figure 36: Default LDAP Phonebook DN
Page 68
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 67 of 321
Figure 37: Default LDAP Phonebook Attributes
LDAP PHONEBOOK
Users could use the default phonebook, edit the default phonebook, add new phonebook, import
phonebook on the LDAP server as well as export phonebook from the LDAP server. The first phonebook
with default phonebook dn "ou=pbx,dc=pbx,dc=com" displayed on the LDAP server page is for extensions
in this PBX. Users cannot add or delete contacts directly. The contacts information will need to be modified
via Web GUI->PBX->Basic/Call Routes->Extensions first. The default LDAP phonebook will then be
updated automatically.
Figure 38: LDAP Server->LDAP Phonebook
Page 69
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 68 of 321
Add new phonebook
A new sibling phonebook of the default PBX phonebook can be added by clicking on "Add" under
"LDAP Phonebook" section.
Figure 39: Add LDAP Phonebook
Configure the "Phonebook Prefix" first. The "Phonebook DN" will be automatically filled in. For example, if
configuring "Phonebook Prefix" as "people", the "Phonebook DN" will be filled with
"ou=people,dc=pbx,dc=com".
Once added, users can select to edit the phonebook attributes and contact list (see figure below), or
select to delete the phonebook.
Figure 40: Edit LDAP Phonebook
Page 70
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 69 of 321
Import phonebook from your computer to LDAP server
Click on “Import Phonebook” and a dialog will prompt as shown in the figure below.
Figure 41: Import Phonebook
The file to be imported must be a CSV file with UTF-8 encoding. Users can open the CSV file with
Notepad and save it with UTF-8 encoding.
Here is how a sample file looks like. Please note “Account Number” and “Phonebook DN” fields are
required. Users could export a phonebook file from the UCM6200 LDAP phonebook section first and
use it as a sample to start with.
The Phonebook DN field is the same “Phonebook Prefix” entry as when the user clicks on “Add” to
create a new phonebook. Therefore, if the user enters “phonebook” in “Phonebook DN” field in the
CSV file, the actual phonebook DN “ou=phonebook,dc=pbx,dc=com” will be automatically created by
the UCM6200 once the CSV file is imported.
In the CSV file, users can specify different phonebook DN fields for different contacts. If the phonebook
DN already exists on the UCM6200 LDAP Phonebook, the contacts in the CSV file will be added into
the existing phonebook. If the phonebook DN doesn’t exist on the UCM6200 LDAP Phonebook, a new
phonebook with this phonebook DN will be created.
The sample phonebook CSV file in above picture will result in the following LDAP phonebook in the
Figure 42: Phonebook CSV File Format
Page 71
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 70 of 321
UCM6200.
Figure 43: LDAP Phonebook After Import
As the default LDAP phonebook with DN “ou=pbx,dc=pbx,dc=com” cannot be edited or deleted in
LDAP phonebook section, users cannot import contacts with Phonebook DN field “pbx” if existed in the
CSV file.
Export phonebook to your computer from UCM6200 LDAP server
Select the checkbox for the LDAP phonebook and then click on “Export Selected Phonebook” to
export the selected phonebook. The exported phonebook can be used as a record or a sample CSV
file for the users to add more contacts in it and import to the UCM6200 again.
LDAP CLIENT CONFIGURATIONS
The configuration on LDAP client is similar when you use other LDAP servers. Here we provide an
example on how to configure the LDAP client on the SIP end points to use the default PBX phonebook.
Assuming the server base dn is "dc=pbx,dc=com", configure the LDAP clients as follows (case
insensitive):
Server Address: LDAP server IP address
Figure 44: Export Selected LDAP Phonebook
Page 72
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 71 of 321
Base DN: dc=pbx,dc=com
User Name: cn= “LDAP server login name”, dc=pbx, dc=com [matching LDAP server format]
Password: “LDAP server login password”
Filter: (|(CallerIDName=%)(AccountNumber=%))
Port: 389
The following figure gives a sample configurations for UCM6200 acting as a LDAP client.
Figure 45: LDAP Client Configurations
To configure Grandstream IP phones as the LDAP client, please refer to the following example:
Server Address: The IP address or domain name of the UCM6200
Base DN: dc=pbx,dc=com
User Name: Please leave this field empty
Password: Please leave this field empty
LDAP Name Attribute: CallerIDName Email Department FirstName LastName
LDAP Number Attribute: AccountNumber MobileNumber HomeNumber Fax
LDAP Number Filter: (AccountNumber=%)
LDAP Name Filter: (CallerIDName=%)
LDAP Display Name: AccountNumber CallerIDName
LDAP Version: If existed, please select LDAP Version 3
Port: 389
The following figure shows the configuration information on a Grandstream GXP2200 to successfully use
the LDAP server as configured in Figure 35: LDAP Server Configurations.
Page 73
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 72 of 321
HTTP SERVER
The UCM6200 embedded web server responds to HTTP/HTTPS GET/POST requests. Embedded HTML
pages allow the users to configure the PBX through a Web browser such as Microsoft IE, Mozilla Firefox
and Google Chrome. By default, the PBX can be accessed via HTTPS using Port 8089 (e.g.,
https://192.168.40.50:8089). Users could also change the access protocol and port as preferred under
Web GUI->Settings->HTTP Server.
Figure 46: GXP2200 LDAP Phonebook Configuration
Page 74
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 73 of 321
Table 19: HTTP Server Settings
Redirect From Port 80
Enable or disable redirect from port 80. On the PBX, the default access
protocol is HTTPS and the default port number is 8089. When this option
is enabled, the access using HTTP with Port 80 will be redirected to
HTTPS with Port 8089. The default setting is "Enable".
Protocol Type
Select HTTP or HTTPS. The default setting is "HTTPS". This is also the
protocol used for zero config when the end point device downloads the
config file from the UCM6200.
Port
Specify port number to access the HTTP server. The default port number
is 8089.
TLS Enable
Enable or disable TLS during transferring/submitting your Email to other
SMTP server. The default setting is "Yes".
Type
Select Email type.
MTA: Mail Transfer Agent. The Email will be sent from the configured
domain. When MTA is selected, there is no need to set up SMTP
server for it or no user login is required. However, the Emails sent
from MTA might be considered as spam by the target SMTP server.
Client: Submit Emails to the SMTP server. A SMTP server is required
and users need login with correct credentials.
Domain
Specify the domain name to be used in the Email when using type "MTA".
Server
Specify the SMTP server when using type "Client".
Username
Username is required when using type "Client". Normally it's the Email
address.
Password
Password to login for the above Username (Email address) is required
when using type "Client".
Display Name
Specify the display name in the FROM header in the Email.
Sender
Specify the sender's Email address.
For example, pbx@example.mycompany.com.
Once the change is saved, the web page will be redirected to the login page using the new URL. Enter the
username and password to login again.
EMAIL SETTINGS
The Email application on the UCM6200 can be used to send out alert event Emails, Fax (Fax-To -Email),
Voicemail (Voicemail-To-Email) and etc. The configuration parameters can be accessed via Web
GUI->Settings->Email Settings.
Table 20: Email Settings
Page 75
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 74 of 321
The following figure shows a sample Email settings on the UCM6200, assuming the Email is using
smtp.gmail.com as the SMTP server.
Figure 47: UCM6200 Email Settings
Once the configuration is finished, click on "Test". In the prompt, fill in a valid Email address to send a test
Email to verify the Email settings on the UCM6200.
TIME SETTINGS
AUTO TIME UPDATING
The current system time on the UCM6200 is displayed on the upper right of the web page. It can also be
found under Web GUI->Status->System Status->General.
To configure the UCM6200 to update time automatically, go to Web GUI->Settings->Time
The configurations under Web GUI->Settings->Time Settings->Time Auto Updating page require
reboot to take effect. Please consider configuring auto time updating related changes when setting up the
UCM6200 for the first time to avoid service interrupt after installation and deployment in production.
Manually setup time will take effect immediately after saving and applying change in the web UI. If users
would like to reboot the UCM6200 and keep the manually setup time setting, please make sure "Remote
NTP Server", "Enable DHCP Option 2" and "Enable DHCP Option 42" options under Web
GUI->Settings->Time Settings->Time Auto Updating page are unchecked or set to empty. Otherwise,
time auto updating settings in this page will take effect after reboot.
The UCM6200 can be used as a NTP server for the NTP clients to synchronize their time with. To
configure the UCM6200 as the NTP server, set "Enable NTP server" to "Yes" under web
GUI->Settings->NTP Server. On the client side, point the NTP server address to the UCM6200 IP
address or host name to use the UCM6200 as the NTP server.
RECORDINGS STORAGE
The UCM6200 supports call recordings automatically or manually and the recording files can be saved in
external storage plugged in the UCM6200 or on the UCM6200 locally. To manage the recording storage,
users can go to UCM6200 web GUI->Settings->Recordings Storage page and select whether to store
the recording files in USB Disk, SD card or locally on the UCM6200.
If “Enable Auto Change” is selected, the recording files will be automatically saved in the available
USB Disk or SD card plugged into the UCM6200. If both USB Disk and SD card are plugged in, the
recording files will be always saved in the USB Disk.
If “Local” is selected, the recordings will be stored in UCM6200 internal storage.
If “USB Disk” or “SD Card” is selected, the recordings will be stored in the corresponding plugged in
external storage device. Please note the options “USB Disk” and “SD Card” will be displayed only if
they are plugged into the UCM6200.
Figure 53: Settings->Recordings Storage
Page 82
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 81 of 321
Once “USB Disk” or “SD Card” is selected, click on “OK”. The user will be prompted to confirm to copy
the local files to the external storage device.
Figure 54: Recordings Storage Prompt Information
Click on “OK” to continue. The users will be prompted a new dialog to select the categories for the files
to be copied over.
On the UCM6200, recording files are generated and exist in 3 categories: normal call recording files,
conference recording files, and call queue recording files. Therefore users have the following options
when select the categories to copy the files to the external device:
- Recording Files: Copy the normal recording files to the external device.
- Conference: Copy the conference recording files to the external device.
- Queue: Copy the call queue recording files to the external device.
- All: Copy all recording files to the external device.
Figure 55: Recording Storage Category
Page 83
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 82 of 321
LOGIN TIMEOUT SETTINGS
After the user logs in the UCM6200 web UI, the user will be automatically logged out after certain timeout.
This timeout value can be specified under UCM100 web GUI->Settings->Login Timeout Settings page.
The “User Login Timeout” value is in minute and the default setting is 10 minutes. If the user doesn’t make
any operation on web UI within the timeout, the user will be logged out automatically. After that, the web UI
will be redirected to the login page and the user will need to enter username and password to log in.
If set to 0, there is no timeout for the web UI login session and the user will not be automatically logged out.
Figure 56: Login Timeout Settings
Page 84
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 83 of 321
GOOGLE SERVICE SETTINGS SUPPORT
UCM6200 now supports Google OAuth 2.0 authentication. This feature is used for supporting UCM6200
conference scheduling system. Once OAuth 2.0 is enabled, UCM6200 conference system can access Google
calendar to schedule or update conference.
Google Service Settings can be found under web GUI-> Settings-> Google Service Settings-> Google
Service Settings.
Figure 57: Google Service Settings->OAuth2.0 Authentication
If you already have OAuth2.0 project set up on Google Developers web page, please use your existing
login credential for “OAuth2.0 Client ID” and “OAuth2.0 Client Secret” in the above figure for the UCM6200
to access Google Service.
If you do not have OAuth2.0 project set up yet, please following the steps below to create new project and
obtain credentials:
1. Go to Google Developers page https://console.developers.google.com/start Create a New Project in
Google Developers page.
Page 85
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 84 of 321
Figure 58: Google Service->New Project
2. Enable Calendar API from API Library.
3. Click “Credentials” on the left drop down menu to create new OAuth2.0 login credentials.
4. Use the newly created login credential to fill in “OAuth2.0 Client ID” and “OAuth2.0 Client Secret”.
5. Click “Get Authentication Code” to obtain authentication code from Google Service.
Figure 59: Google Service->Create New Credential
Page 86
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 85 of 321
Figure 60: Google Service->OAuth2.0 Login
6. Now UCM6200 is connected with Google Service.
Page 87
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 86 of 321
Page 88
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 87 of 321
PROVISIONING
OVERVIEW
Grandstream SIP Devices can be configured via Web interface as well as via configuration file through
TFTP/HTTP/HTTPS download. All Grandstream SIP devices support a proprietary binary format
configuration file and XML format configuration file. The UCM6200 provides a Plug and Play mechanism to
auto-provision the Grandstream SIP devices in a zero configuration manner by generating XML config file
and having the phone to download it within LAN area. This allows users to finish the installation with ease
and start using the SIP devices in a managed way.
To provision a phone, three steps are involved, i.e., discovery, configuration and provisioning. This section
explains how Zero Config works on the UCM6200. The settings for this feature can be accessed via Web
UI->PBX->Zero Config.
CONFIGURATION ARCHITECTURE FOR END POINT DEVICE
Started from firmware version 1.0.7.10, the end point device configuration in zero config is divided into the
following three layers with priority from the lowest to the highest:
Global
This is the lowest layer. Users can configure the most basic options that could apply to all
Grandstream SIP devices during provisioning via Zero config.
Model
In this layer, users can define model-specific options for the configuration template.
Device
This is the highest layer. Users can configure device-specific options for the configuration for individual
device here.
Each layer also has its own structure in different levels. Please see figure below. The details for each layer
are explained in sections [GLOBAL CONFIGURATION], [MODEL CONFIGURATION] and [DEVICE
CONFIGURATION].
Page 89
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 88 of 321
Figure 61: Zero Config Configuration Architecture for End Point Device
The configuration options in model layer and device layer have all the option in global layers already, i.e.,
the options in global layer is a subset of the options in model layer and device layer. If an option is set in all
three layers with different values, the highest layer value will override the value in lower layer. For example,
if the user selects English for Language setting in Global Policy and Spanish for Language setting in
Default Model Template, the language setting on the device to be provisioned will use Spanish as model
layer has higher priority than global layer. To sum up, configurations in higher layer will always
override the configurations for the same options/fields in the lower layer when presented at the
same time.
After understanding the zero config configuration architecture, users could configure the available options
for end point devices to be provisioned by the UCM6200 by going through the three layers. This
configuration architecture allows users to set up and manage the Grandstream end point devices in the
same LAN area in a centralized way.
AUTO PROVISIONING SETTINGS
By default, the Zero Config feature is enabled on the UCM6200 for auto provisioning. Three methods of
auto provisioning are used.
Page 90
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 89 of 321
Figure 62: UCM6200 Zero Config
SIP SUBSCRIBE
When the phone boots up, it sends out SUBSCRIBE to a multicast IP address in the LAN. The
UCM6200 discovers it and then sends a NOTIFY with the XML config file URL in the message body.
The phone will then use the path to download the config file generated in the UCM6200 and take the
new configuration.
DHCP OPTION 66
This method should be used on the UCM6202/UCM6204 because only the UCM6202/UCM6204 have
WAN and LAN port with LAN port supporting the router function. When the phone restarts (by default
DHCP Option 66 is turned on), it will send out a DHCP DISCOVER request. The UCM6202 receives it
and returns DHCP OFFER with the config server path URL in Option 66, for example,
https://192.168.2.1:8089/zccgi/. The phone will then use the path to download the config file generated
in the UCM6200.
mDNS
Page 91
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 90 of 321
When the phone boots up, it sends out mDNS query to get the TFTP server address. The UCM6200
Enable Zero Config
Enable or disable the zero config feature on the PBX. The default setting
is enabled.
Enable Automatic
Configuration Assignment
By default, this is disabled. If disabled, when SIP device boots up, the
UCM6200 will not send the SIP device the URL to download the config file
and therefore the SIP device will not be automatically provisioned by the
UCM6200.
Note:
When disabled, SIP devices can still be provisioned by manually sending
NOTIFY from the UCM6200 which will include the XML config file URL for
the SIP device to download.
Automatically Assign
Extension
If enabled, when the device is discovered, the PBX will automatically
assign an extension within the range defined in "Zero Config Extension
Segment" to the device. The default setting is disabled.
Zero Config Extension
Click on the link "Zero Config Extension Segment" to specify the
will respond with its own address. The phone will then send TFTP request to download the XML config
file from the UCM6200.
To start the auto provisioning process, under Web GUI->PBX->Zero Config->Zero Config Settings, fill in
the auto provision information.
Figure 63: Auto Provision Settings
Table 24: Auto Provision Settings
Page 92
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 91 of 321
Segment
extension range to be assigned if "Automatically Assign Extension" is
enabled. The default range is 5000-6299. Zero Config Extension
Segment range can be defined in web UI->PBX->Internal
Specify the number of minutes to allow the phones being provisioned to
pick extensions.
Please make sure an extension is manually assigned to the phone or "Automatically Assign Extension" is
enabled during provisioning. After the configuration on the UCM6200 web GUI, click on "Save" and "Apply
Changes". Once the phone boots up and picks up the config file from the UCM6200, it will take the
configuration right away.
DISCOVERY
Users could manually discover the device by specifying the IP address or scanning the entire LAN network.
Three methods are supported to scan the devices.
PING
ARP
SIP Message (NOTIFY)
Click on "Auto Discover" under web UI-> PBX-> Zero Config->Zero Config, fill in the "Scan Method" and
"Scan IP". The IP address segment will be automatically filled in based on the network mask detected on
the UCM6200. If users need scan the entire network segment, enter 255 (for example, 192.168.40.255)
instead of a specific IP address. Then click on "Save" to start discovering the devices within the same
network. To successfully discover the devices, "Zero Config" needs to be enabled on the UCM6200 web
Global configuration will apply to all the connected Grandstream SIP end point devices in the same LAN
with the UCM6200 no matter what the Grandstream device model it is. It is divided into two levels:
Web UI->PBX->Zero Config->Global Policy
Web UI->PBX->Zero Config->Global Templates.
Global Templates configuration has higher priority to Global Policy configuration.
Global Policy can be accessed in web GUI->PBX->Zero Config->Global Policy page. On the top of the
configuration table, users can select category in the "Options" dropdown list to quickly navigate to the
category. The categories are:
Page 94
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 93 of 321
Localization: configure display language, data and time.
Language settings
Language
Select the LCD display language on the SIP end device.
Date and Time
Date Format
Configure the date display format on the SIP end device’s LCD.
Time Format
Configure the time display in 12-hour or 24-hour format on the SIP end
device’s LCD.
NTP Server
Configure the URL or IP address of the NTP server. The SIP end device
may obtain the date and time from the server.
Time Zone
Configure the time zone used on the SIP end device.
Phone Settings: configure dial plan, call features, NAT, call progress tones and etc.
Contact List: configure LDAP and XML phonebook download.
Maintenance: configure upgrading, web access, Telnet/SSH access and syslog.
Network Settings: configure IP address, QoS and STUN settings.
Customization: customize LCD screen wallpaper for the supported models.
Select the checkbox on the left of the parameter you would like to configure to active the dropdown list for
this parameter.
Figure 66: Global Policy Categories
The following tables list the Global Policy configuration parameters for the SIP end device.
Table 25: Global Policy Parameters->Localization
Page 95
Firmware Version 1.0.0.1
UCM6200 Series IP PBX User Manual
Page 94 of 321
Table 26: Global Policy Parameters->Phone Settings
Default Call Settings
Dial Plan
Configure the default dial plan rule. For syntax and examples, please
refer to user manual of the SIP devices to be provisioned for more details.
Enable Call Features
When enabled, “Do Not Disturb”, “Call Forward” and other call features
can be used via the local feature code on the phone. Otherwise, the ITSP
feature code will be used.
Use # as Dial Key
If set to “Yes”, pressing the number key “#” will immediately dial out the
input digits.
Auto Answer by Call-info
If set to "Yes", the phone will automatically turn on the speaker phone to
answer incoming calls after a short reminding beep, based on the SIP
Call-Info header sent from the server/proxy.
The default setting is enabled.
NAT Traversal
Configure which NAT traversal mechanism will be enabled on the
endpoint device.
If set to "STUN" and STUN server is configured, the phone system will
periodically send STUN message to the SUTN server to get the public IP
address of its NAT environment and keep the NAT port open. STUN will
not work if the NAT is symmetric type.
If set to “Keep-alive”, the phone system will send the STUN packets to
maintain the connection that is first established during registration of the
phone. The “Keep-alive” packets will fool the NAT device into keeping the
connection open and this allows the host server to send SIP requests
directly to the registered phone.
If it needs to use OpenVPN to connect host server, it needs to set it to
“VPN”.
If the firewall and the SIP device behind the firewall are both able to use
UPNP, it can be set to “UPNP”. The both parties will negotiate to use
which port to allow SIP through.
The default setting is "Keep-alive".
Use Random Port
Configure whether to allow the endpoint device to use random ports for
both SIP and RTP messages. This is usually necessary when multiple
phones are behind the same full cone NAT. The default setting is "No".
Note: This parameter must be set to "No" for Direct IP Calling to work.
General Settings
Call Progress Tones
Configure call progress tones including ring tone, dial tone, second dial
tone, message waiting tone, ring back tone, call waiting tone, busy tone