Trademarks Polycom®, the Polycom logo and the names and marks associated with Polycom products
are trademarks and/or service marks of Polycom, Inc. and are registered and/or common law marks in the
United States and various other countries.
All other trademarks are property of their respective owners. No portion hereof may be reproduced or
transmitted in any form or by any means, for any purpose other than the recipient's personal use, without
the express written permission of Polycom.
End User License Agreement By installing, copying, or otherwise using this product, you acknowledge
that you have read, understand and agree to be bound by the terms and conditions of the End User
License Agreement for this product. The EULA for this product is available on the Polycom Support page
for the product.
Patent Information The accompanying product may be protected by one or more U.S. and foreign
patents and/or pending patent applications held by Polycom, Inc.
Open Source Software Used in this Product This product may contain open source software. You may
receive the open source software from Polycom up to three (3) years after the distribution date of the
applicable product or software at a charge not greater than the cost to Polycom of shipping or distributing
the software to you. To receive software information, as well as the open source software code used in
this product, contact Polycom by email at OpenSourceVideo@polycom.com (for video products) or
OpenSourceVoice@polycom.com (for voice products).
Disclaimer While Polycom uses reasonable efforts to include accurate and up-to-date information in this
document, Polycom makes no warranties or representations as to its accuracy. Polycom assumes no
liability or responsibility for any typographical or other errors or omissions in the content of this document.
Limitation of Liability Polycom and/or its respective suppliers make no representations about the
suitability of the information contained in this document for any purpose. Information is provided "as is"
without warranty of any kind and is subject to change without notice. The entire risk arising out of its use
remains with the recipient. In no event shall Polycom and/or its respective suppliers be liable for any
direct, consequential, incidental, special, punitive or other damages whatsoever (including without
limitation, damages for loss of business profits, business interruption, or loss of business information),
even if Polycom has been advised of the possibility of such damages.
Customer Feedback We are striving to improve our documentation quality and we appreciate your
feedback. Email your opinions and comments to DocumentationFeedback@polycom.com.
Polycom Support Visit the Polycom Support Center for End User License Agreements, software
downloads, product documents, product licenses, troubleshooting tips, service requests, and more.
Contents
Before You Begin................................................................................................6
Issues When the System is Sleeping or Waking.............................................................119
Test the Call Experience................................................................................................. 120
Test Connection with Another System............................................................................ 120
Run a Trace Route..........................................................................................................120
LDAP Directory Server Ignores the Minimum TLS Version Setting................................ 120
Checking the Web Proxy Configuration.......................................................................... 121
Contents
Polycom, Inc.5
Before You Begin
Topics:
▪Getting Help
This guide helps you understand how to configure and manage your Polycom G7500 system.
This guide covers the following products:
▪Polycom G7500 system (Model: P011)
▪Polycom Microphone IP Adapter (Model: P012)
▪Polycom IP Table Microphone (Model: P013)
▪Polycom IP Ceiling Microphone (Model: P014)
Getting Help
For information about installing, configuring, using, and administering Polycom products, see Documents
& Software at Polycom Support.
The Polycom Community
The Polycom Community gives you access to the latest developer and support information.
Participate in discussion forums to share ideas and solve problems with your colleagues. To register with
the Polycom Community, simply create a Polycom online account. When logged in, you can access
Polycom support personnel and participate in developer and support forums to find the latest information
on hardware, software, and partner solutions topics.
Related Documentation
In addition to this guide, the following documentation further describes Polycom endpoints and
peripherals used in video conferencing. The Release Notes might include known issues or limitations
related to interoperability with Polycom endpoints.
For more information, see the Polycom Documentation Library or Polycom Support.
We welcome your feedback to improve the quality of Polycom documentation.
You can email Documentation Feedback for any queries or suggestions related to this documentation.
Polycom, Inc.6
Getting Started
Topics:
▪Polycom G7500 Overview
▪Powering the System On and Off
▪Navigating the System
The Polycom G7500 system provides video-conferencing capabilities and collaboration tools for any size
meeting space or room.
Polycom G7500 Overview
The Polycom G7500 system is an all-in-one video conferencing and content-sharing solution.
The G7500 system provides the following features and capabilities:
▪Placing and joining video calls
▪Viewing and joining scheduled calendar meetings
▪Managing contacts, call lists, and directories
▪Creating a favorites list
▪Sharing content
▪Collaborating by electronic whiteboarding
Related Links
Video Codec Capabilities on page 84
Administrator Features and Capabilities
The G7500 system provides the following features and capabilities:
▪Scalability for various room sizes
▪Remote access for managing standalone systems
▪Provisioning with Polycom RealPresence Resource Manager to support single system, small
business, and large multisite enterprise deployments
▪SNMP reporting and remote logging
▪Industry-standard security techniques, including 802.1X authentication
▪Polycom platform on-premises infrastructure and management solutions
▪Standards-based video conferencing
▪Customizable home screen and monitor layouts
Polycom, Inc.7
Getting Started
Powering the System On and Off
The G7500 system turns on when you plug it into a power source. The system doesn’t have a power
button, so you must unplug the power cable to turn it off.
Don’t power off the system during maintenance activities (for example, while a software update is in
progress).
Related Links
Restart the System on page 102
Navigating the System
You can navigate the G7500 system using the system web interface.
Access the System Web Interface
Access the G7500 system web interface to perform administrative tasks.
The system web interface enables you to do the following actions:
▪Finish setting up your system.
▪Remotely configure and manage your system. Unlike the local interface, you can configure every
setting through the system web interface.
▪Control certain user functions of the system (such as placing calls and ending content sessions).
▪Manage contacts.
Procedure
1. Enter the system IP address in a browser.
When setting up your system, the onscreen instructions display the IP address to use.
2. Enter the user name (the default is admin).
3. Enter the password (the default is the last six characters of your system’s serial number).
Related Links
Complete System Setup on page 12
Place a Call from the System Web Interface
The G7500 system web interface gives you many of the same calling features and controls that are in the
local interface.
You can also place video and audio-only calls directly from the Dashboard.
Procedure
1. In the system web interface, go to Place a Call.
2. Do one of the following:
▪Select Dial to manually dial a number or name.
▪Select Contacts to search local and directory contacts to call.
▪Select Favorites to search contacts marked as Favorites.
▪Select Recent to select a number or name you’ve called in the past.
Polycom, Inc.8
End a Content Session from the System Web Interface
When you end a sharing session, the system stops live content and deletes blackboards and
whiteboards.
Procedure
1. In the system web interface, go to Active Session.
2. Select End Session .
A message displays informing you that the session is ending.
Related Links
Sharing Content on page 93
Getting Started
Polycom, Inc.9
Setting Up the System
Topics:
▪System Back Panel Ports
▪LED Status Indicators for the G7500 System
▪Complete System Setup
▪Managing Peripheral Devices
See the Polycom G7500 Setup Sheet for information on connecting your G7500 system and its peripheral
devices, including cameras, monitors, and microphones.
Also see the following documents for more setup information:
▪Polycom G7500 Room Preparation Guide
▪Polycom G7500 Mounting Kit
▪Polycom Microphone IP Adapter Setup Sheet
▪Polycom IP Ceiling Microphone Array Setup Sheet
System Back Panel Ports
The following illustration and table explain the ports on the back panel of your G7500 system.
Figure 1: G7500 System Back Panel Ports
G7500 System Back Panel Port Descriptions
Ref. NumberPort Description
13.5 mm audio line out
23.5 mm audio line in
3Security lock
4Mini-DIN/RS-232 serial port
5USB 3.0 port (host)
6USB-C port (dual-role port provides power only)
Polycom, Inc.10
Ref. NumberPort Description
7HDCI input for Polycom cameras
8HDMI input for sharing content (for example, from a laptop)
9HDMI output for the primary monitor
10HDMI output for the secondary monitor
11Primary LAN connection for the system
12Link-local network (LLN) connections for IP-based peripheral devices
13Power
Related Links
HDMI Connections on page 76
Related Links
Specify the Primary and Fence Microphones on page 72
Related Links
LED Status Indicators for the System LAN Ports
on page 112
Setting Up the System
LED Status Indicators for the G7500 System
Use the LED on the front right corner of the codec to get information on the state of your G7500 system.
Figure 2: G7500 System LED Location
G7500 System LED Status Indicators
IndicatorStatus
Blinking whitePowering on
Polycom, Inc.11
Setting Up the System
IndicatorStatus
Solid whiteWorking normally
Blinking amberUpdate in progress
Solid amberSleeping
Blinking redError preventing normal operation
Related Links
Factory Restore the System on page 103
Complete System Setup
You can set up your G7500 system manually or provision it.
Note:Make sure to configure your provisioning server (for example, RealPresence Resource
Manager) ahead of time so that it recognizes and works with your endpoint.
Procedure
1. Log in to the system web interface.
2. Follow the onscreen instructions.
You only see these instructions when you set up your system for the first time or after you reset
the system and delete all settings.
You can start using the system.
Related Links
Using a Provisioning Service on page 25
Related Links
Access the System Web Interface on page 8
Managing Peripheral Devices
You can manage and monitor the peripheral devices connected to your G7500 system in the system web
interface.
Pairing IP Peripheral Devices to the System
You must pair IP peripheral devices you use with your G7500 system.
These peripheral devices include:
▪Polycom IP Table Microphone
▪Polycom IP Ceiling Microphone
▪Polycom Microphone IP Adapter
Automatic pairing is enabled by default and recommended in most situations. You can also manually pair
and unpair these peripheral devices in the system web interface.
Polycom, Inc.12
Setting Up the System
Pair an IP Peripheral Device Automatically
IP peripheral devices automatically pair with your G7500 system by default when you connect them to the
system. For example, when you connect a Polycom IP Table Microphone, it pairs automatically and is
ready to use.
Procedure
» Connect the peripheral device to an LLN port on the back of your system.
If paired successfully, the device displays under Paired Devices with a Connected status. If a
device shows a Disconnected status, this indicates that pairing wasn’t successful.
Disable Automatic Pairing
You can disable automatic pairing for your G7500 system.
If you disable automatic pairing, you must connect and manually pair a peripheral device in the system
web interface to use it.
Procedure
1. In the system web interface, go to General Settings > Device Management.
2. Clear the Enable New Device Auto-Pairing check box to disable automatic pairing.
Pair an IP Peripheral Device Manually
If you disable automatic pairing, you must manually pair an IP peripheral device to use it with your G7500
system.
Procedure
1. Connect the peripheral device to an LLN port on the back of your system.
2. In the system web interface, go to General Settings > Device Management.
3. Under Available Devices, find the device and select Pair.
If paired successfully, the device displays under Paired Devices with a Connected status. If a
device shows a Disconnected status, this indicates that pairing wasn’t successful.
Unpair an IP Peripheral Device
If you don’t want to use an IP peripheral device with your G7500 system anymore, unpair it in the system
web interface.
Don’t unpair peripheral devices you plan to use with your system again. For example, if you move your
entire system to another room, just disconnect the devices and reconnect them in the new location.
Note:If you manually unpair a peripheral device, it won’t automatically pair again with this system.
Procedure
1. In the system web interface, go to General Settings > Device Management.
2. Under Paired Devices, find the device and select Unpair.
The unpaired device moves from Paired Devices to Available Devices (which shows discovered
devices you can pair with the system).
Related Links
Move a Microphone Adapter to Another Location on page 18
Polycom, Inc.13
Setting Up the System
IP Microphones
You can use a combination of IP-based Polycom table and ceiling microphones with your G7500 system.
These microphones also support Polycom Acoustic Fence technology.
You can connect up to three of the following microphones directly to your system:
▪Polycom IP Table Microphone
▪Polycom IP Ceiling Microphone
Related Links
Polycom Acoustic Fence on page 71
Related Links
Factory Restore a Table Microphone on page 104
Factory Restore a Ceiling Microphone on page 104
Polycom IP Table Microphone Ports
The following illustration and table explain the ports on the table microphone.
Figure 3: Polycom IP Table Microphone Ports (bottom view)
Polycom IP Table Microphone Port Descriptions
Ref. NumberPort Description
1USB-C debugging port
2Factory restore pinhole
3Link-local network (LLN) connection
Polycom, Inc.14
Polycom IP Ceiling Microphone Ports
The following illustration and table explain the ports on the ceiling microphone.
Figure 4: Polycom IP Ceiling Microphone Ports
Polycom IP Table Microphone Port Descriptions
Ref. NumberPort Description
1Link-local network (LLN) connection
Setting Up the System
2Microphone cable connector
3Microphone cable connector
LED Status Indicators for IP Microphones
Use the LED on the IP table and ceiling microphones to get information on the state of each device.
Figure 5: Polycom IP Table Microphone and Polycom IP Ceiling Microphone LED Locations
IP Microphone LED Status Indicators
IndicatorStatus
Solid then blinking whitePowering on
Solid redMuted microphone
To avoid distraction, the ceiling microphone doesn’t display red when muted.
Solid greenIn a call
To avoid distraction, the ceiling microphone doesn’t display green in a call.
Polycom, Inc.15
IndicatorStatus
Setting Up the System
Alternating blinking and solid
amber
Blinking amberFactory restore in progress
Blinking blueReady to pair
Solid bluePaired successfully
Update in progress
Polycom Microphone IP Adapter
The Polycom Microphone IP Adapter lets you connect non-IP Polycom audio devices with your G7500
system. For example, if your Polycom microphone uses a Walta-Walta cable, you can connect it to your
system through the microphone adapter.
You can use the following non-IP microphones and audio accessories with your G7500 system:
▪Polycom table microphones
▪Polycom ceiling microphones
▪Polycom SoundStructure accessory
Note:You can’t use the microphone adapter with IP microphones connected to your system.
Related Links
Configuring the Microphone Adapter on page 71
Related Links
Factory Restore a Microphone Adapter on page 106
Microphone Adapter Ports
The following illustration and table explain the ports on the microphone adapter.
Figure 6: Microphone Adapter Ports
Polycom, Inc.16
Microphone Adapter Port Descriptions
Ref. NumberPort Description
1USB 2.0 debugging port
2Polycom microphone Walta-Walta connector
3Power
4Link-local network (LLN) connection
5LED status indicator
6Factory reset pinhole
LED Status Indicators for the Microphone Adapter
Use the LED to get information on the state of your microphone adapter.
Figure 7: Polycom Microphone IP Adapter LED Location
Setting Up the System
Microphone Adapter LED Status Indicators
IndicatorStatus
Blinking whitePowering on
Solid whiteOn
Blinking blueReady to pair
Solid bluePaired successfully
Blinking green and blueUpdate in progress
Factory restore in progress
Powering the Microphone Adapter On and Off
When plugged in to a power source, the microphone adapter is on. The system doesn’t have a power
button, so you must unplug the power cable to turn it off.
Don’t power off the system during maintenance activities (for example, while a software update is in
progress).
Polycom, Inc.17
Setting Up the System
Connecting Microphones to the Microphone Adapter
To connect a non-IP Polycom microphone to the microphone adapter, use a RealPresence Group Series
microphone array Walta-Walta cable. You can then daisy chain up to three more microphones to the one
directly connected to the adapter.
For more information, see the Polycom Microphone IP Adapter Setup Sheet.
Move a Microphone Adapter to Another Location
You might need to move your microphone adapter from a G7500 system in one room to a G7500 system
in another room.
Procedure
1. In the system web interface, unpair the microphone adapter from the system.
2. Move the microphone adapter to the new location.
3. Use the system web interface to pair the microphone adapter to the new system.
Related Links
Unpair an IP Peripheral Device on page 13
Polycom Bluetooth Remote Control
Your Polycom Bluetooth Remote Control is ready to use with your G7500 system without any extra setup.
Use the system web interface to do the following:
▪Configure a remote control’s button behavior
▪Pair and unpair a remote control
▪View the remote control name, pairing status, and battery level
Related Links
Disable Wireless Options on page 40
Configure Remote Control Behavior
You can customize how the remote control paired to your G7500 system behaves.
Procedure
1. In the system web interface, go to General Settings > System Settings.
2. Configure the following settings:
SettingDescription
Keypad Audio ConfirmationSpecifies whether to play a voice confirmation of
numbers selected with the remote control or
keypad.
Numeric Keypad Function while in a CallSpecifies whether pressing number buttons on the
remote control or keypad moves the camera to
presets or generates touch tones (DTMF tones). If
you set this option to Presets, you can generate
DTMF tones by pressing the # key on the remote
control while in a call.
Polycom, Inc.18
Setting Up the System
SettingDescription
#/@ Button functionSpecifies the behavior of the # button on the
remote control.
▪#, then @: Pressing the # button once displays
the hash symbol. Pressing the # button twice
quickly displays the @ symbol.
▪@, then #: Pressing the # button once displays
the @ symbol. Pressing the # button twice
quickly displays the # symbol.
*/. Button functionSpecifies the behavior of the * button on the remote
control:
▪* then .: Pressing the * button once displays the
* symbol. Pressing the * button twice quickly
displays a period.
▪. then *: Pressing the * button once displays a
period. Pressing the * button twice quickly
displays the * symbol.
3. Select Save.
Unpair a Remote Control
You can unpair a remote control if you no longer want to use it with your G7500 system.
Procedure
1. In the system web interface, go to Remote Control.
2. Select Unpair Remote.
The remote control unpairs.
Pair a Remote Control
Out of the box, your remote control is paired with the G7500 system, so no setup is required. To use a
different remote control, you must pair it with the system.
The system doesn’t support multiple remote controls. You can pair only one at a time.
Procedure
1. Do one of the following:
▪On the front of the system, press the Bluetooth button.
Polycom, Inc.19
Setting Up the System
▪In the system web interface, go to General Settings > Remote Control and select Start
Discovery Mode.
2. Follow the instructions on the pairing screen.
The screen displays either a successful or unsuccessful pairing notification.
3. Depending on the pairing result, do one of the following:
▪Successful pairing: The remote control is ready to use. You can view the remote control
name, battery level, and status of the device in the system web interface.
▪Unsuccessful pairing: Try the following solutions:
◦Remove the batteries from the remote control and reinsert after five seconds.
◦Move your remote control closer to the system than other remote controls and try to
pair again.
Polycom, Inc.20
Configuring General Settings
Topics:
▪Name the System and Room
▪Provide Contact Information
▪Set the Date and Time
▪Set the System Location
▪Set the Local Interface Language
▪Configure Sleep Settings
▪Send Usage Data to Polycom
General settings include your G7500 system name, location, language, and sleep preferences.
Name the System and Room
Name your G7500 system and assign it a room name.
The room name displays on call participants’ screens.
Procedure
1. In the system web interface, go to General Settings > System Settings.
2. Enter the Device Name, Room Name, or both.
The system supports double-byte characters.
3. Select Save.
Provide Contact Information
Enter contact information for your G7500 system so that users know whom to call when they need
assistance.
Procedure
1. In the system web interface, go to General Settings > My Information.
2. Go to Contact Information.
3. Configure the following settings:
▪Contact Person
▪Contact Number
▪Contact Email
▪Contact Fax
▪Tech Support: Specifies a second contact in case someone needs additional support.
▪City
▪State/Province
Polycom, Inc.21
▪Country
4. Select Save.
Set the Date and Time
Change the date and time settings in the G7500 system web interface.
Procedure
1. In the system web interface, go to General Settings.
2. Select Date and Time.
3. Configure the following settings (your changes save automatically):
SettingDescription
Date FormatSpecifies how the date displays.
Time FormatSpecifies how the time displays.
Auto Adjust for Daylight Saving TimeWhen enabled, the system clock automatically
adjusts for daylight saving time.
Configuring General Settings
Time ZoneSpecifies the time difference between GMT and
your location.
Time ServerSpecifies if you want to automatically or manually
configure the system to use a time server. You can
also select Off to manually enter the date and time.
Primary Time Server AddressSpecifies the address of the primary time server
your system uses when you set Time Server to
Manual.
Secondary Time Server AddressSpecifies the address of the time server your
system uses when the Primary Time Server
Address doesn’t respond. This is an optional field.
Current Date and Current TimeIf you set Time Server to Manual or Auto, the
system doesn’t display these settings.
If you set Time Server to Off, you can configure
Current Date and Current Time.
Set the System Location
Specify the country and country code where the G7500 system is located.
Procedure
1. In the system web interface, go to General Settings > My Information.
2. Go to Location.
3. Configure the following settings (your changes save automatically):
Polycom, Inc.22
SettingDescription
CountrySpecifies the country where the system is located.
Changing the country automatically adjusts the
country code associated with your system.
Country CodeDisplays the country code associated with the
system location.
Set the Local Interface Language
Change the language that users see on the G7500 system local interface.
Procedure
1. In the system web interface, go to General Settings.
2. Select System Language and choose a language.
Configuring General Settings
Configure Sleep Settings
Configure when you want your device to go to sleep after a period of inactivity. Sleep mode can help
prevent monitor burn-in.
Procedure
1. In the system web interface, go to General Settings > System Settings.
2. For Display, select whether you want to display a black screen or no signal message.
3. For Time Before System Goes to Sleep, select how long the device can be idle before it goes to
sleep.
4. Select the Enable Mic Mute in Sleep Mode check box to mute your microphones while the
system is asleep.
5. Select Save.
Related Links
Issues When the System is Sleeping or Waking on page 119
Configure General Audio Settings on page 69
Configure Camera Settings on page 79
Send Usage Data to Polycom
You can help Polycom improve its products and services by allowing the collection of usage data from
your G7500 system.
With your agreement, the system sends the following information to Polycom Cloud Services and the
Device Analytics service:
▪Basic device information, including hardware and software versions
▪Basic device configuration data
▪Data and statistics related to device or feature usage
▪Device health data, including CPU and memory usage
Polycom, Inc.23
Procedure
1. In the system web interface, go to Servers > Cloud > Preferences.
2. Click the link to read the “Terms and Conditions”.
3. Select the check box to agree to the data collection.
Configuring General Settings
Polycom, Inc.24
Using a Provisioning Service
Topics:
▪Register the System with a Provisioning Service
▪Download a Template Configuration File
You can use a provisioning service, such as Polycom RealPresence Resource Manager, to perform the
following actions with your G7500 system:
▪Automatically provision settings
▪Automatically update software
Remember the following when you register your system to a provisioning service:
▪Provisioned settings are read-only in the system web interface. Settings that are dependent on
provisioned values are read-only or unavailable.
▪The system automatically checks for and runs software updates every time it restarts and at an
interval set by the service.
▪If a registered system fails to detect the service when it restarts or checks for updates, an alert
displays on System Status.
▪If the system loses registration with the service, it continues to use the most recent configuration it
received.
Note:To maintain call connection, you can't configure provisioning settings during a call.
For a list of configuration parameters, see the Polycom G7500 Configuration Parameters Reference
Guide.
Related Links
Updating Software on page 98
PKI Certificates on page 49
Related Links
Complete System Setup on page 12
Choose How to Get Software Updates on page 99
Register the System with a Provisioning Service
Before you can provision a G7500 system, you must manually register it with a provisioning service.
Note:Make sure to configure your provisioning server (for example, RealPresence Resource
Manager) ahead of time so that it recognizes and works with your endpoint.
Procedure
1. In the system web interface, go to Servers > Provisioning Server.
2. Select Enable Provisioning.
3. Select Load Discovered Information.
Polycom, Inc.25
Using a Provisioning Service
The registration fields update automatically if your system detects a provisioning server.
4. Optional: If your system didn’t detect a provisioning server, complete the following fields (contact
your network administrator for help):
SettingDescription
Server TypeSpecifies the type of provisioning service (for example, RealPresence
Resource Manager).
Server AddressAddress of the system running the provisioning service.
Domain NameDomain for registering with the provisioning service.
User NameUser ID for registering with the provisioning service.
PasswordPassword for registering with the provisioning service.
5. Select Save.
6. Verify that Registration Status changes from Pending to Registered.
It might take a minute or two for the status to change.
For information on how to provision your system with RealPresence Resource Manager, see the Polycom
RealPresence Resource Manager System Operations Guide.
Related Links
Check Provisioning Results on page 113
Download a Template Configuration File
Template configuration files show how parameters are set on your G7500 system. You can use this
template to modify parameters and import the changes to your provisioning server.
If you’re provisioning your system with a RealPresence Resource Manager system, you can use the
template to create a UC endpoint configuration profile to associate with your system(s). For more
information, see the Polycom RealPresence Resource Manager System Operations Guide.
Note:Not all parameters that you can provision to your system are in the downloaded template. For
example, you don’t see password-related parameters due to security reasons.
Procedure
1. In the system web interface, go to Servers > Provisioning Server.
2. Select Download Profile Template.
The template saves to your local device as a .cfg file.
Polycom, Inc.26
Configuring Network Settings
Topics:
▪Configuring Wired LAN Settings
▪Configure Wi-Fi Settings
▪Configure Network Quality Settings
▪Configure H.323 Settings
▪Configure SIP Settings
▪Enable Point-to-Point Call Escalation to a RealPresence DMA Conference Call
▪Wireless Devices
Network settings include the G7500 system primary (wired LAN) and secondary (Wi-Fi) network
configurations. You also can register your system with SIP and H.323 for calling.
Configuring Wired LAN Settings
You can set the wired LAN properties for your G7500 system.
Related Links
LED Status Indicators for the System LAN Ports on page 112
Obtain IPv4 Address Settings Automatically
You can configure the G7500 system to obtain its IPv4 addresses automatically.
You must have a DHCP server deployed in your environment.
Procedure
1. In the system web interface, go to Network > Primary Network > IP Addresses.
2. For IP Address, select Obtain IP address automatically.
Some of your IP address settings populate automatically and are read-only.
3. Select Save.
Configure IPv4 Address Settings Manually
You can configure the IPv4 settings for your G7500 system.
Procedure
1. In the system web interface, go to Network > Primary Network > IP Addresses.
2. For IP Address, select Enter IP address manually.
3. Configure the following settings:
SettingDescription
Your IP Address isSpecifies the system IP address.
Polycom, Inc.27
Configuring Network Settings
SettingDescription
Subnet MaskSpecifies the subnet mask assigned to your
system.
Default GatewaySpecifies the default gateway assigned to
your system.
4. Select Save.
Configure DNS Settings Manually
You can manually configure the DNS server settings for your G7500 system.
If your system gets its IP address automatically, you can’t configure these settings. They display as readonly.
Procedure
1. In the system web interface, go to Network > DNS.
2. Enter your DNS server address (you can enter up to four addresses).
3. Select Save.
Configure Wired LAN Options
You can configure LAN properties for your G7500 system in the local interface or the system web
interface.
Procedure
1. In the system web interface, go to Network > Primary Network > LAN Options.
2. Configure the following settings:
SettingDescription
Host NameIndicates your system name. If the system
discovers a valid name during setup or a software
installation, the system automatically creates the
host name. However, if the system finds an invalid
system name, such as a name with a space, the
system creates a host name using the following
format: SystemType-xxxxxx, where xxxxxx is a
set of random alphanumeric characters.
IPv4 networks: The system sends the host name
to the DHCP server to attempt to register the name
with the local DNS server or look up the domain
where the system is registered (if supported).
Domain NameIdentifies the domain your system belongs to.
If the system doesn’t automatically obtain a domain
name, enter one here.
Polycom, Inc.28
SettingDescription
Configuring Network Settings
Autonegotiation
(under General Settings in the local interface)
LAN Speed
(under General Settings in the local interface)
Duplex Mode
(under General Settings in the local interface)
Ignore Redirect MessagesEnables the system to ignore ICMP redirect
ICMP Transmission Rate Limit (millisec)Specifies the minimum number of milliseconds
Specifies whether the system should automatically
negotiate the LAN speed and duplex mode per
IEEE 802.3 autonegotiation procedures. If you
enable this setting, the system sets LAN Speed
and Duplex Mode to read-only.
Polycom recommends that you use autonegotiation
to avoid network issues.
Specifies whether to use 10 Mbps, 100 Mbps, or
1000 Mbps for the LAN speed. Note that the switch
must support the speed you choose. If you enable
the Autonegotiation setting, this setting is readonly.
Specifies the duplex mode to use. Note that the
switch must support the speed you choose. If you
enable the Autonegotiation setting, this setting is
read-only.
messages.
Polycom recommends that you enable this setting
in most circumstances.
between transmitted packets. Enter a number
between 0 and 60000. The default value of 1000
means the system sends 1 packet per second. If
you enter 0, the system disables the transmission
rate limit.
This setting applies only to “error” ICMP packets.
This setting has no effect on “informational” ICMP
packets, such as echo requests and replies.
Generate Destination Unreachable MessagesGenerates an ICMP Destination
Unreachable message if the system can’t deliver
a packet to its destination for reasons other than
network congestion.
Respond to Broadcast and Multicast Echo
Requests
Enable LLDP
(under General Settings in the local interface)
Polycom, Inc.29
When enabled, your system sends an ICMP EchoReply message in response to a broadcast or
multicast Echo Request that isn’t specifically
addressed to the system.
Specifies if you want the system to advertise itself
on the network using the Link Layer Discovery
Protocol (LLDP). Enable if you want your system to
operate on a virtual LAN (VLAN).
SettingDescription
Configuring Network Settings
Enable EAP/802.1X
(under EAP 802.1X in the local interface)
EAP/802.1X Identity
(under EAP 802.1X in the local interface)
EAP/802.1X Password
(under EAP 802.1X in the local interface)
Enable 802.1p/Q
(under 802.1p/Q in the local interface)
VLAN IDIdentifies the VLAN you want your system to
Enables EAP/802.1X network access. The system
supports the following authentication protocols:
▪EAP-MD5
▪EAP-PEAPv0 (MSCHAPv2)
▪EAP-TTLS
▪EAP-TLS
Specifies the identity the system uses for 802.1X
authentication. This setting is available only when
you enable EAP/802.1X. You can’t leave this field
blank.
Specifies the password the system uses for 802.1X
authentication. This setting is required when you
use EAP-MD5, EAP-PEAPv0, or EAP-TTLS.
Enable if you want to configure your system with a
virtual LAN (VLAN) and set link layer priorities.
operate on. This setting is available only when you
enable 802.1p/Q. You can use any value from 1 to
4094.
Video PrioritySets the link layer priority of video traffic on the
wired LAN. Video traffic is RTP traffic consisting of
video data and associated RTCP traffic.This setting
is available only when you enable 802.1p/Q. You
can use any value from 0 to 7, although Polycom
recommends not using 6 and 7.
Audio PrioritySets the link layer priority of audio traffic on the
wired LAN. Audio traffic is RTP traffic consisting of
audio data and associated RTCP traffic. This
setting is available only when you enable 802.1p/Q.
You can use any value from 0 to 7, although
Polycom recommends not using 6 and 7.
Control PrioritySets the link layer priority of control traffic on the
wired LAN. Control traffic consists of control
information associated with a call:
▪H.323: H.225.0 Call Signaling, H.225.0 RAS, H.
245, Far-End Camera Control (FECC)
▪SIP: SIP Signaling, FECC, Binary Floor Control
Protocol (BFCP)
This setting is available only when you enable
802.1p/Q. You can use any value from 0 to 7,
although Polycom recommends not using 6 and 7.
Polycom, Inc.30
Configuring Network Settings
3. Select Save.
Configure Wi-Fi Settings
In addition to a LAN, you can also connect your G7500 system to a Wi-Fi network for additional user
access. For example, this enables guests to share content to the system.
Procedure
1. In the system web interface, go to Network > Wi-Fi Network.
2. For Choose Network Type, select Wi-Fi.
3. Select Enable Administrator Access to This Network to enable administrators to access the
system web interface on the Wi-Fi network.
For higher security, you can disable this option to limit access to the system web interface through
LAN connections only.
4. Do one of the following:
▪Select a network from Available Wi-Fi Networks. (The system lists networks in order of
signal strength.)
▪Enter the network name in the SSID field.
Selecting a new SSID erases the previous SSID and relevant Wi-Fi settings from the system.
5. Configure the following settings:
Available settings vary with your selections.
SettingDescription
SecuritySpecifies the encryption protocol:
▪None
▪WEP
▪WPA/WPA2-PSK
▪802.1xEAP
Key (Passphrase/PSK)Specifies an encryption passphrase (like a password) for the Wi-Fi network.
You must enter the passphrase to connect to the Wi-Fi network.
EAP MethodSpecifies the extensible authentication protocol (EAP) for WPA-Enterprise
(802.1xEAP):
▪PEAP
▪TLS
▪TTLS
▪PWD
Phase 2
Authentication
Specifies the Phase 2 authentication method:
▪None
▪MSCHAPV2
▪GTC
Polycom, Inc.31
Configuring Network Settings
SettingDescription
UsernameSpecifies the login user name for WPA-Enterprise (802.1xEAP).
PasswordSpecifies the login password for WPA-Enterprise (802.1xEAP).
IP AddressSelect one of the following to set your system Wi-Fi network IP address:
▪Obtain IP address automatically (You must have a DHCP server in your
environment to use this option.)
▪Enter IP address manually
Your IP Address IsSpecifies the IP address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
Subnet MaskSpecifies the subnet mask address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
Default GatewaySpecifies the IP gateway for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
DNS ServerSpecifics the DNS server address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
DNS Alternate ServerSpecifics the alternate DNS server address for the Wi-Fi network.
This setting is read-only if your system gets its IP address automatically.
When you connect, you receive a Successfully connected to <your network’s SSID name>
message.
Configure Network Quality Settings
You can specify how your G7500 system responds to network quality issues by controlling how your
network handles packets during video calls.
Procedure
1. In the system web interface, go to Network > Primary Network > Network Quality.
2. Configure the following settings:
Polycom, Inc.32
Configuring Network Settings
SettingDescription
Quality PreferenceSpecifies which video stream has precedence
when attempting to compensate for network loss:
▪Both people and content streams
▪People streams
▪Content streams
The stream option you select experiences less
quality degradation during network loss
compensation than the other. Choosing Both
means each stream experiences roughly equal
degradation.
This setting is not available if you enable
Automatically Adjust People/Content
Bandwidth.
Type of ServiceSpecifies the type of service (ToS), which lets you
prioritize packets sent to your system for video,
audio, Far End Camera Control (FECC), and
OA&M:
▪IP Precedence: Represents a priority level
between 0 and 7.
▪DiffServ: Represents a priority level between 0
and 63.
VideoSpecifies the IP Precedence or DiffServ priority
level for video RTP and associated RTCP traffic.
AudioSpecifies the IP Precedence or DiffServ priority
level for audio RTP and associated RTCP traffic.
ControlSpecifies the IP Precedence or Diffserv priority
level for control traffic on the following channels:
▪H.323: H.225.0 Call Signaling, H.225.0 RAS, H.
245, and FECC
▪SIP: SIP Signaling, FECC, and Binary Floor
Control Protocol (BFCP)
(The system enables FECC by Allow Other
Participants in a Call to Control Your Camera.)
OA&MSpecifies the IP Precedence or Diffserv value for
traffic unrelated to video, audio, or FECC.
Maximum Transmission Unit SizeSpecifies whether to use the default Maximum
Transmission Unit (MTU) size for IP calls or let you
select it.
Polycom, Inc.33
Configuring Network Settings
SettingDescription
Maximum Transmission Unit Size BytesSpecifies the MTU size (in bytes) used in calls.
▪If video quality is poor or you experience
network errors, packets might be too large.
Decrease the MTU.
▪If the network is burdened with unnecessary
overhead, packets might be too small. Increase
the MTU.
Enable Lost Packet RecoveryIf you enable this setting, the system uses the Lost
Packet Recovery (LPR) protocol to help
compensate for packet loss if it occurs.
Enable RSVPIf you enable this setting, the system can use the
Resource Reservation Setup Protocol (RSVP) to
request that routers reserve bandwidth along an IP
connection path. (To use this feature, the near and
far site must support RSVP.)
Dynamic BandwidthEnable this setting if you want the system to
automatically determine the optimal call rate.
MRC Bandwidth AllocationAdjusts media bit stream bandwidth, reducing
packet loss.
Maximum Transmit BandwidthSpecifies the maximum transmit call rate between
64 kbps and the system’s maximum line rate.
Use this setting when the system connects to the
network using an access method with different
transmit and receive bandwidths.
Maximum Receive BandwidthSpecifies the maximum receive call rate between
64 kbps and the system’s maximum line rate.
Use this setting when the system connects to the
network using an access method with different
transmit and receive bandwidths.
3. Select Save.
Configure H.323 Settings
If your network uses a gatekeeper, the G7500 system can automatically register its H.323 name and
extension. This enables others to call the system by entering the H.323 name or extension instead of the
IP address.
Procedure
1. In the system web interface, go to Call Configuration > H.323.
2. Configure the following settings:
Polycom, Inc.34
Configuring Network Settings
SettingDescription
Enable IP H.323Enables the system to display H.323 settings and
configuration options.
Registration StatusRead-only setting shows if your system is
registered with an H.323 gatekeeper.
H.323 NameHow gatekeepers and gateways identify your
system. You can make point-to-point calls using H.
323 names if both systems are registered to a
gatekeeper.
The H.323 Name is the same as the device name
unless you change it.
Your organization’s dial plan might define the name
you can use.
H.323 Extension (E.164)You can place point-to-point calls using this
extension if both systems are registered with a
gatekeeper. Gatekeepers and gateways also use
the extension to identify your system.
Your organization’s dial plan might define the
extensions you can use.
Use GatekeeperSpecifies if you want to use a gatekeeper for H.323
services.
▪Off: Calls don’t use a gatekeeper.
▪Auto: System tries to automatically find an
available gatekeeper.
▪Specify: Calls use the specified gatekeeper.
You must select this setting to enable H.235
Annex D Authentication.
If you don’t configure this setting to Off, a
registration status displays.
Require AuthenticationEnables support for H.235 Annex D Authentication.
When you enable H.235 Annex D Authentication,
the H.323 gatekeeper ensures that only trusted H.
323 endpoints can access the gatekeeper.
This setting is available when you set Use
Gatekeeper to Specify.
UsernameSpecifies a user name if the gatekeeper requires
authentication for registration.
PasswordSpecifies a password if the gatekeeper requires
authentication for registration.
Polycom, Inc.35
Configuring Network Settings
SettingDescription
Current Gatekeeper IP AddressDisplays the IP address that the gatekeeper is
using.
If you select Off for the Use Gatekeeper field, the
Current Gatekeeper IP Address field doesn’t
display.
Primary Gatekeeper IP AddressThe gatekeeper IPv4 address the system registers
with. As part of the registration process, the
gatekeeper might return alternate gatekeepers. If
your system loses communication with the primary
gatekeeper, your system registers with the
alternate gatekeeper but continues to poll the
primary gatekeeper. If the system re-establishes
communication with the primary gatekeeper, it
unregisters from the alternate gatekeeper.
▪If you set the Use Gatekeeper field to Off, the
Primary Gatekeeper IP Address field doesn’t
display.
▪If you use an automatically selected
gatekeeper, this area displays the gatekeeper’s
IP address.
▪If you specify a gatekeeper, enter the
gatekeeper IP address or name (for example,
10.11.12.13 or
gatekeeper.companyname.usa.com).
3. Select Save.
Related Links
Configuring Call Settings on page 65
Related Links
Configure SIP Settings on page 36
Configure SIP Settings
If your network supports SIP, you can use it to connect calls on your G7500 system.
Procedure
1. In the system web interface, go to Call Configuration > SIP.
2. Configure the following settings:
SettingDescription
Enable SIPEnables the system to make and receive SIP calls.
Registration StatusRead-only setting shows if your system is
registered to a SIP server.
Polycom, Inc.36
Configuring Network Settings
SettingDescription
SIP Server ConfigurationSpecifies whether to automatically or manually set
the SIP server’s IP address.
If you select Auto, you can’t edit the TransportProtocol, Registrar Server, and Proxy Server
settings. If you select Specify, you can edit these
settings.
Transport ProtocolSets the protocol your system uses for SIP
signaling (your SIP network determines which
protocol is required).
▪Auto: Enables automatic negotiation of
protocols in the following order: TLS, TCP, and
UDP. Polycom recommends this setting for
most environments.
▪TLS: Provides secure SIP signaling. TLS is
available only when you register your system
with a SIP server that supports it. If you set this
option, your system ignores TCP/UDP port
5060.
▪TCP: Provides reliable transport via TCP.
▪UDP: Provides best-effort transport via UDP.
Force Connection ReuseDisabled by default (recommended).
When disabled, the system uses an ephemeral
source port for outgoing SIP messages. When
enabled, the system uses the active SIP listening
port as the source port (5060 or 5061, depending
on the negotiated SIP transport protocol in use).
You can use this setting to establish correct
operation with remote SIP peer devices, which
require that the source port match the contact port
in SIP messages.
Polycom, Inc.37
Configuring Network Settings
SettingDescription
BFCP Transport PreferenceControls content sharing negotiation behavior.
When you use the Binary Floor Control Protocol
(BFCP), a relationship is established between the
floor control server and its clients. What you set
here determines how network traffic flows between
the server and clients.
Note: TCP is typically slightly slower but more
reliable than UDP. Some deployments don’t
support it, such as with session border controllers
(SBCs).
▪Prefer UDP: (Default) Starts resource sharing
using UDP but falls back to TCP if needed.
▪Prefer TCP: Starts resource sharing using TCP
but falls back to UDP if needed.
▪UDP Only: Shares resources only using UDP. If
UDP is unavailable, your system can’t share
content in a separate video stream.
▪TCP Only: Shares resources only through TCP.
If TCP is unavailable, your system can’t share
content in a separate video stream.
Sign-in AddressThe SIP address or name of the system (for
example,
mary.smith@department.company.com).
If you leave this blank, the system IP address is
used for authentication.
User NameThe user name for authenticating your system with
a SIP registrar server (for example, marySmith).
If the SIP proxy requires authentication, you can’t
leave the user name and password blank.
PasswordThe password associated with the user name for
authenticating your system with a SIP registrar
server.
Registrar ServerThe IP address or FQDN of the SIP registrar
server. If you register a remote system with an
edge server, use that server’s FQDN.
By default, the system sends SIP signaling to ports
5060 (TCP) and 5061 (TLS) on the registrar server.
Enter the address and port using the following
format: <IP_Address>:<Port>.
The <IP_Address> can be an IPv4 address or
an FQDN such as
servername.company.com:5060.
Polycom, Inc.38
SettingDescription
Proxy ServerThe IP address or FQDN of the SIP proxy server. If
Registrar Server TypeSpecifies the type of SIP registrar server you’re
3. Select Save.
Related Links
Configuring Call Settings on page 65
Related Links
Configure H.323 Settings on page 34
Configuring Network Settings
you leave this field blank, the system uses the
registrar server address. If you also leave the SIP
registrar server field blank, there is no SIP proxy
server to configure.
By default, the system sends SIP signaling to ports
5060 (TCP) and 5061 (TLS) on the proxy server.
The syntax for this setting is the same as the
registrar server.
using.
Enable Point-to-Point Call Escalation to a
RealPresence DMA Conference Call
When you register your G7500 system with a Polycom RealPresence DMA system, you can enable a
point-to-point call on your system to escalate to an impromptu conference call on an external Polycom
MCU.
You must configure your system’s SIP settings to register with your RealPresence DMA system.
For information about working with a RealPresence DMA system, specifically SIP conference factories,
see the Polycom RealPresence DMA Operations Guide.
Procedure
1. In the system web interface, go to Call Configuration > SIP.
2. Go to Adhoc Call Escalation.
3. Select the Enable automatic call escalation of point-to-point to an external MCU check box.
4. For the Conference Factory ID, enter the ID associated with the SIP conference factory on your
RealPresence DMA system.
Note:The conference factory ID must come from the same RealPresence DMA system your
video conferencing system uses for SIP registration. Calls don’t escalate if your
RealPresence DMA system doesn’t recognize the ID you provide.
5. Select Save.
Calls converted through a RealPresence DMA system gateway (H.323 to SIP or vice versa) don’t
join an impromptu conference call.
Polycom, Inc.39
Configuring Network Settings
Wireless Devices
The G7500 system includes Wi-Fi and Bluetooth wireless communication options so your users can
discover the system on the network with the Polycom Content App or their AirPlay- or Miracast-certified
device. Your remote control also connects to the system using Bluetooth.
You can enable or disable these features as needed.
Wireless Band for Miracast-Certified Devices
Miracast-certified devices must use the 5 GHz band to connect with the G7500 system (using 802.11
channel 44 by default).
Note:If you enable Wi-Fi, the system uses the same 802.11 channel for Miracast-certified device
connections.
Disable Wireless Options
You can disable the wireless features on your G7500 system. Wireless features are enabled by default.
Remember the following when disabling wireless features:
▪Disabling wireless connectivity turns off screen mirroring with Miracast-certified devices and
prevents the system from using Wi-Fi to connect to a secondary network.
▪Disabling Bluetooth turns off screen mirroring with AirPlay-certified devices and prevents those
devices and the Polycom Content App from automatically discovering your G7500 system. (You can
still connect with the Polycom Content App using the system IP address.)
▪Disabling Bluetooth also disables your remote control.
Procedure
1. In the system web interface, go to Security > Wireless Security.
2. Do one of the following:
▪Clear the Enable Wireless Connectivity check box.
▪Clear the Enable Bluetooth check box.
Related Links
Default Options for Sharing Content on page 93
Polycom Bluetooth Remote Control on page 18
Polycom, Inc.40
Securing the System
Topics:
•Managing System Access
▪PKI Certificates
▪Disable the Security Code
▪Limit or Disable the Ability to Save Content
•Encryption
▪H.460 Firewall/NAT Traversal
▪Web Proxies
▪View Connections to the System
▪Port Usage
Your G7500 system includes features and settings to help you meet security requirements.
Managing System Access
You can control how users and administrators access the G7500 system.
You can set up local and external authentication for the following system interfaces:
•Local interface
•System web interface
•Command-line API (external authentication is available only when accessing the API using SSH)
Local Accounts
The system stores local account IDs and passwords.
Configure Password Policies
You can specify requirements for administrator, remote access, and SNMP passwords for your G7500
system.
Polycom strongly recommends that you create an administrator password for your system.
Procedure
1. In the system web interface, go to Security > Password Requirements.
2. Configure the following settings for the Admin Room, Remote Access, or SNMP passwords:
Not all settings apply to SNMP.
Polycom, Inc.41
Securing the System
SettingDescription
Minimum LengthThe minimum number of characters required for a
valid password.
Require Lowercase LettersThe minimum number of lowercase letters required
for a valid password.
Require Uppercase LettersThe minimum number of uppercase letters required
for a valid password.
Require NumbersThe minimum number of numerals required for a
valid password.
Require Special CharactersThe minimum number of special characters
Reject Previous PasswordsThe number of most recent passwords that you
can’t reuse. If you set this to Off, all previous
passwords are valid.
Minimum Password Age in DaysThe minimum number of days before the password
can change.
Maximum Password Age in DaysThe maximum number of days before the password
must change.
Minimum Changed CharactersThe number of characters that must be different or
change position in a new password. For example, if
you set this to 3, 123abc can change to 345cde
but not to 234bcd.
Maximum Consecutive Repeated CharactersThe maximum number of consecutive repeated
characters allowed in a password. For example, if
you set this to 3, aaa123 is a valid password but
aaaa123 is not.
Password Expiration WarningSpecifies how many days in advance a warning
displays indicating that the password expires soon
(if you set a maximum password age).
Can Contain ID or Its Reverse FormSpecifies whether the associated ID or its reverse
can be part of a password. If you enable this setting
and the ID is admin, passwords admin and nimda
are allowed.
3. Select Save.
Changes to most password policy settings don’t take effect until the next time the password is changed.
Changes take effect immediately for Minimum Password Age in Days, Maximum Password Age in
Days, and Password Expiration Warning.
Create Local Administrator Credentials
You can require local administrator credentials for in-room and remote access to the G7500 system.
Passwords for logging in to the system are case sensitive and can’t contain more than 40 characters.
Polycom, Inc.42
Procedure
1. In the system web interface, go to Security > Local Accounts.
2. Configure the following settings:
SettingDescription
Admin IDThe local administrator account name (default is
admin).
Room PasswordIf you set this option, you must enter this password
to change administrator settings in the local
interface.
The default password is the last six characters of
the serial number listed in System Details and on
the back of the device.
Remote Access PasswordIf you set this option, you must enter this password
to access the system through the system web
interface or command-line API (SSH or telnet).
This password lets you perform device
management tasks, such as updating the system’s
software.
Securing the System
3. Optional: Do one of the following:
•To use the local administrator Room Password for remote logins, leave the Use RoomPassword for Remote Access option enabled.
•If you don’t want to use the local administrator Room Password for remote logins, disable
the Use Room Password for Remote Access option.
This setting specifies that the system uses the local administrator Room Password for remote
logins. This setting is enabled by default.
4. Select Save.
Configure Account Lockout Settings
You can specify account lockout controls to prevent unauthorized access to your G7500 system.
Procedure
1. In the system web interface, go to Security > Local Accounts.
2. Configure the following settings (your changes save automatically):
SettingDescription
Lock Admin Account after Failed LoginsSpecifies the number of failed login attempts
allowed before the system locks the account. You
can turn this setting Off.
Admin Account Lock DurationSpecifies the amount of time an account is locked
because of failed login attempts. After this period
expires, the system resets the failed login attempts
counter to zero, and users can again log in with
that account.
Polycom, Inc.43
Securing the System
SettingDescription
Reset Admin Account Lock Counter AfterDetermines how many hours the failed login
window lasts. The window is a period of time
starting with the first failed login attempt and during
which the system counts subsequent failed
attempts against the number allowed.
The counter resets to zero at the end of the window
(if the account is not locked because of failed
attempts) and after a successful login.
Enable External Authentication
You can set up external authentication through Active Directory for your G7500 system. When enabled,
you can access the system with an Active Directory account or the system’s local administrator
credentials.
Before you begin, make sure that you configure the Domain Name setting on the Network > PrimaryNetwork > LAN Options page with your Active Directory domain.
The system can map only one Active Directory group to a given role.
Procedure
1. In the system web interface, go to Security > Global Security.
2. Go to Authentication.
3. Configure the following settings:
SettingDescription
Enable Active Directory External AuthenticationSpecifies whether to authenticate users with the
Active Directory server. When you enable Active
Directory authentication, users can log in to the
system with their network credentials using this
format: domain\user. With this format, users can
have accounts on multiple domains.
Active Directory Server AddressSpecifies the Active Directory server’s FQDN or IP
address. If you are using subdomains, append port
number 3268 as follows: ad.domain.com:
3268.
You can alternatively use RealPresence Resource
Manager as an Active Directory server and enter its
address here.
If you enable Always Validate Peer Certificatesfrom Server on the Certificates page, make sure
this value matches what is in the Active Directory
server certificate. For example, if you enter the
Active Directory server IP address here, but the
certificate only has the server’s FQDN, external
authentication fails.
Polycom, Inc.44
SettingDescription
Active Directory Admin GroupSpecifies the Active Directory group whose
Active Directory User GroupSpecifies the Active Directory group whose
4. Select Save.
Configure System Access Settings
You can configure how you access your G7500 system.
Procedure
1. In the system web interface, go to Security > Access.
2. Configure the following settings:
Securing the System
members should have administrator access to the
system. This name must exactly match the name in
the Active Directory server for successful
authentication.
members should have user access to the system.
This name must exactly match the name in the
Active Directory server for successful
authentication.
SettingDescription
Enable Network Intrusion Detection System
(NIDS)
Enable Web AccessSpecifies whether you can access the system using
Allow Access to User SettingsSpecifies whether users can access the User
Restrict to HTTPSSpecifies that you can access the system web
Web Access Port (HTTP)Specifies the port to use when accessing the
When you enable this setting, the system creates
security log entries when it detects a possible
network intrusion.
the system web interface.
Settings screen through the local interface.
interface only over port 443. Enabling this setting
closes access through port 80 (HTTP).
system web interface over HTTP.
If you change the default (port 80), specify port
1025 or higher and make sure it is not already in
use. You must include the port number with the IP
address when you use the system web interface to
access the system.
(This setting is unavailable if Restrict to HTTPS is
enabled.)
Enable Diagnostics Port Idle Session TimeoutSpecifies whether to allow the diagnostics port to
time out at the configured time interval or not. You
set the timeout at Idle Session Timeout inMinutes.
Polycom, Inc.45
Securing the System
SettingDescription
Enable API Port Idle Session TimeoutSpecifies whether to allow the API port to time out
at the configured time interval or not. You set the
timeout at Idle Session Timeout in Minutes.
Enable SNMP AccessSpecifies whether to allow SNMP access.
Idle Session Timeout in MinutesSpecifies the number of minutes a session can be
idle before it times out.
Maximum Number of Active SessionsSpecifies the maximum number of users logged in
through the system web interface or command-line
API (SSH or telnet).
3. Select Save.
Enable Command-Line API Access Over SSH
Use SSH on port 22 if you want encrypted access to the G7500 system command-line API.
Procedure
1. In the system web interface, go to Security > Access.
2. Select the Enable Legacy API Over SSH check box if it’s cleared.
3. Select the Enable Telnet Access check box.
Enable Command-Line API Access Over Telnet
Use port 24 or 23 to access the G7500 system command-line API using telnet.
Procedure
1. In the system web interface, go to Security > Access.
2. Select the Enable Telnet Access check box.
3. Choose an API Port for telnet connections: 24 (default) or 23.
Disable Command-Line API Access
To disable command-line API access to your G7500 system, close network ports 22, 23, and 24 and the
RS-232 serial port.
Procedure
1. In the system web interface, go to Security > Access.
2. Clear the Enable Telnet Access check box.
Network ports 22, 23, and 24 on your system are closed.
3. In the system web interface, go to General Settings > Serial Ports.
4. For RS-232 Mode, select Off.
The serial port is closed.
Command-line API access to your system is disabled.
Polycom, Inc.46
Securing the System
Configure the System Web Interface Port Lock
You can limit the number of failed login attempts to the G7500 system web interface to protect against
brute-force attacks.
Procedure
1. In the system web interface, go to Security > Access.
2. Configure the following settings:
SettingDescription
Lock Port after Failed LoginsThe number of failed login attempts allowed before
the web interface locks. You can set this to Off.
Port Lock DurationSpecifies the amount of time that the web interface
remains locked due to failed login attempts. When
this period expires, the failed login attempts counter
resets and you can try to log in again.
Reset Port Lock Counter AfterSpecifies the number of hours, starting with the first
failed login attempt, during which subsequent failed
login attempts are counted against the maximum
number allowed (Lock Port After Failed Logins).
The counter resets when the set period of time
expires or a user successfully logs in.
3. Select Save.
Configure the SSH Port Lock
You can limit the number of failed SSH login attempts to your G7500 system command-line API to protect
against brute-force attacks.
Procedure
1. In the system web interface, go to Security > Access.
2. Configure the following settings:
SettingDescription
Lock SSH Port After Failed LoginsSpecifies the number of failed login attempts
allowed before the system locks SSH access to the
API.
SSH Port Lock DurationSpecifies the amount of time that SSH access to
the API remains locked due to failed login attempts.
After this period expires, the system resets the
failed login attempts counter, and you can again try
to log in again.
Polycom, Inc.47
Securing the System
SettingDescription
Reset SSH Port Lock Counter AfterSpecifies the number of hours, starting with the first
failed login attempt, during which subsequent failed
login attempts are counted against the maximum
number allowed (Lock SSH Port after FailedLogins).
The counter resets when the set period of time
expires or a user successfully logs in.
3. Select Save.
Locking the Telnet Port
Other than disabling telnet access to the G7500 system command-line API, you can’t restrict telnet
access in other ways, such as locking its port for too many failed login attempts (like you can with web or
SSH access).
Note:Remember the following about telnet access: A telnet session disconnects after three failed
login attempts. If you start a new session, the system allows another three attempts.
Configure Serial Port Settings
You can configure RS-232 serial port settings in the G7500 system web interface.
Procedure
1. In the system web interface, go to General Settings > Serial Ports.
2. Configure the following settings:
SettingDescription
RS-232 ModeSpecifies the mode used for the RS-232 serial port.
•Off: Disables the serial port.
•Control: Receives control signals from a touchpanel control. Allows any device connected to
the RS-232 port to control the system using API
commands.
Baud Rate
Parity
Stop Bits
Data BitsThis setting is read-only.
RS-232 Flow ControlSpecifies if you want to use hardware flow control
Set these options to the same values configured on
the serial device.
between the connected device and your system.
Polycom, Inc.48
SettingDescription
Login ModeSpecifies the credentials necessary for a control
system to connect to the RS-232 port.
•Admin password only: (Default) Requires the
administrator password (if you set one) when
the control system connects.
•Username/Password: Requires the user name
and administrator password (if you set one)
when the control system connects.
•None: The system doesn’t require a user name
or password when the control system connects.
Note: This setting only displays when you set
RS-232 Mode to Control.
3. Select Save.
Disable USB 3.0 Ports
You can configure your G7500 system so no one can use its USB 3.0 ports.
Securing the System
Note:You can’t turn off the USB-C port, which only provides power.
Procedure
1. In the system web interface, go to Security > Access.
2. Select Disable All USB Ports.
PKI Certificates
If your organization uses a public key infrastructure (PKI) for securing network connections, Polycom
recommends that you have a strong understanding of certificate management and how it applies to your
G7500 system.
PKI certificates authenticate secure network connections to and from the G7500 system. The system
uses standard PKI techniques to configure and manage certificates and certificate signing requests
(CSRs). ANSI X.509 standards regulate the certificate characteristics.
Your system can generate CSRs to send to a certificate authority (CA), a trusted entity that validates and
officially issues, or signs, PKI certificates. Your system uses those certificates for client and server
authentication.
If your system is in an environment without PKI, you don’t need a CA-signed certificate; the system
comes with a self-signed certificate for its TLS connections. When you deploy PKI, however, self-signed
certificates aren’t trusted and you must use CA-signed certificates.
Here are some examples of how you use PKI certificates:
▪If your environment uses the 802.1X authentication framework for wired connections, create a CSR
and install the resulting CA-signed certificate on your system so it’s trusted on the network.
▪If you want to navigate with a browser over a secure connection to your system web interface,
create a CSR and install the resulting CA certificate chain on your system to replace its factoryinstalled certificate, which is not trusted.
Polycom, Inc.49
Securing the System
▪Provisioning your system using RealPresence Resource Manager in a secure environment.
Note:Your system must have a Host Name in this situation.
Related Links
Using a Provisioning Service on page 25
Create a Certificate Signing Request
If you deploy a PKI in your environment, create a CSR to make sure your G7500 system is trusted by its
network peers.
Note:Only a single CSR can exist at a time. After a CSR is generated, get it signed and installed
on your system before creating another. For example, if you generate a CSR and generate
another prior to having the first one signed and installed, the system discareds the previous
CSR.
Procedure
1. In the system web interface, go to Security > Certificates.
3. In the Certificate Details form, complete the following fields:
CSR InformationDescription
Hash AlgorithmSpecifies the hash algorithm for the CSR: SHA-256 (recommended)
or SHA-1 (not recommended).
Common Name (CN)Specifies the system name. Polycom recommends the following
guidelines for this field:
▪For systems registered in DNS, use the system's fully qualified
domain name (FQDN).
▪For systems not registered in DNS, use the system's IP address.
Maximum characters: 64 (truncated if necessary). Default is blank.
Organizational Unit (OU)Specifies the business group defined by your organization. Default is
blank. Maximum characters: 64.
Note: The system supports only one OU field. If you want the CAsigned certificate to include more than one OU, download and
manually edit the CSR.
Organization (O)Specifies your organization's name. Default is blank. Maximum
characters: 64.
City or Locality (L)Specifies the city where your organization is located. Default is blank.
Maximum characters: 128.
State or Province (ST)Specifies the state or province where your organization is located.
Default is blank. Maximum characters: 128.
Country (C)Displays the country selected in the setup wizard. Cannot be changed
here.
Polycom, Inc.50
Securing the System
CSR InformationDescription
SAN: FQDNSpecifies the FQDN assigned to the system. It is the same as the
Common Name (CN) but not truncated. Default is blank. Maximum
characters: 253.
SAN: Additional NameSpecifies an additional system name. Default is blank. Maximum
characters: 253.
SAN: IPv4 AddressDefault is the system's IPv4 address. Maximum characters: 15
User Principal Name (UPN)Specifies the user and domain name to log in to a Windows domain
(for example, UserName@YourDomain.com). This is the
userPrincipalName attribute of the account object in Active
Directory.
Relate this setting to the 802.1X identity and password you specified
on the Network > LAN Options page. Default is blank.
4. Select Create.
5. If the CSR was created successfully, select CSR Available for Download to download the CSR
file to send to a CA, which issues your signed certificate.
Configure Certificate Validation Settings
The G7500 system can automatically validate user-installed certificates when establishing an
authenticated network connection.
To perform this validation, you must install certificates from the CAs that are part of the trust chain on the
G7500 system.
Note:These settings are used only for 802.1X authentication.
Procedure
1. In the system web interface, go to Security > Certificates.
2. Configure the following settings (your changes save automatically):
SettingDescription
Maximum Peer Certificate Chain DepthSpecifies how many links a certificate chain can
have. The term peer certificate refers to any
certificate sent by the far-end host when a network
connection is being established between the two
systems.
Always Validate Peer Certificates from ServerDetermines whether your system requires a remote
server to present a valid certificate when
connecting to it for services, such as provisioning.
Polycom, Inc.51
Securing the System
Install a Certificate
Once you receive a signed certificate from the CA that processed your CSR, you can install it on your
G7500 system.
This option isn’t available if your certificate is provisioned to the system.
Procedure
1. In the system web interface, go to Security > Certificates.
2. Select Install Certificate to browse for the CA-signed certificate you want to install and select
Open.
Your system accepts the following certificate file formats: .pem, .der, and PKCS #7 (which
typically has a .p7b filename extension).
The system checks the certificate data and, if the upload is successful, adds it to the page.
With your CA-signed certificate installed, your system is trusted by its network peers (provided that a root
certificate has established a chain of trust). This allows you to navigate with your browser over a secure
connection to the system web interface and perform administrative tasks.
View a Certificate
The G7500 system lists user-installed certificates in the system web interface, where you also can view
the contents of those certificates.
Procedure
1. In the system web interface, go to Security > Certificates.
The Certificates page lists your user-installed certificates. It includes information about which
entity a certificate is issued to, who issued it, when it expires, and the certificate type (server,
client, or CA).
2. To view the contents of a certificate, select Visibility
in the same row as the certificate.
The certificate contents display in plain text.
Delete a Certificate
You can remove user-installed certificates through the G7500 system web interface.
When you delete all user-installed certificates, your system reverts to using the factory-installed
certificate. This option isn’t available if your certificate is provisioned to the system.
Note:Deleting system settings by default retains your user-installed certificates, but performing a
factory reset removes these certificates.
Procedure
1. In the system web interface, go to Security > Certificates.
2. Locate the certificate you want to delete and select Trash in the same row as the certificate.
You can’t undo this action.
3. Confirm by selecting Delete.
A message indicates that the system deleted the certificate.
Polycom, Inc.52
Securing the System
Certificate Revocation
During certificate validation, your G7500 system checks whether certificates used for secure
communications are revoked by their issuing CAs.
Your system can check certificate revocation status with one of the following standard methods:
•Certificate Revocation List (CRL): File containing a list of certificates revoked by their issuing CA.
You must manually upload CRLs to your system.
•Online Certificate Status Protocol (OCSP): Your system contacts an OCSP responder, a web
server that provides revocation status through a query/response exchange.
Manually Upload a CRL
You can use CRLs to perform certificate revocation checks on your G7500 system.
Uploading a CRL fails unless you install all of the certificates in the issuing CA’s chain of trust for that
CRL.
This option is not available if your CRL is provisioned to the system.
Procedure
1. In the system web interface, go to Security > Certificates.
2. Configure the following settings:
SettingDescription
Revocation MethodTo use the CRL revocation method, select CRL.
Allow Incomplete Revocation ChecksWhen enabled, a certificate in the chain of trust
validates without a revocation check if no
corresponding CRL from the issuing CA is installed.
3. Select Save.
4. Select Upload CRL File to add a CRL.
You aren’t limited to how many CRLs you can install, but you can only upload 10 at a time.
Successfully-uploaded CRLs display on the page and include information about the issuing CA, when the
CRL was updated, and when it’s scheduled to update again.
Delete a CRL
You can remove CRLs that were previously uploaded on the G7500 system.
This option is not available if your CRL is provisioned to the system.
Procedure
1. In the system web interface, go to Security > Certificates.
2. Under Revocation, select Trash next to the CRL you want to delete.
Configure the OCSP Method
You can use the OCSP method to perform certificate revocation checks on your G7500 system.
Procedure
1. In the system web interface, go to Security > Certificates.
2. Configure the following settings:
Polycom, Inc.53
Securing the System
SettingDescription
Revocation MethodTo use the OCSP revocation method, select OCSP.
Allow Incomplete Revocation ChecksWhen enabled, your system considers a revocation
check successful if there is no response or the
OCSP responder indicates a certificate’s status is
unknown.
Regardless of how you configure this setting, the
following statements apply:
•If the OCSP responder indicates a known
revoked status, your system treats it as a
revocation check failure and doesn’t allow the
connection.
•If the OCSP responder indicates a known good
status, your system treats it as a successful
revocation check and allows the connection.
Global Responder AddressSpecifies the URI of the OCSP responder (for
example, http://
responder.example.com/ocsp). The
responder is used when Use Responder
Specified in Certificate is disabled and sometimes
even when it’s enabled. Polycom recommends that
you always include a URI in this field regardless of
how you configure Use Responder Specified in
Certificate.
Use Responder Specified in CertificateSome certificates include the OCSP responder
address. When you enable this setting, your
system attempts to use this address (when
present) instead of the Global Responder
Address you specified.
Note: Only HTTP URLs in a certificate’s AIA field
are supported.
3. Select Save.
Disable the Security Code
By default, you must enter a security code to connect to the G7500 system to share or save content, but
you can disable it.
Procedure
» In the system web interface, go to Security > Security Code and clear the Enable Security
Code check box.
Related Links
Sharing Content on page 93
Polycom, Inc.54
Securing the System
Limit or Disable the Ability to Save Content
You can block users, depending on their network connection, from saving content using the Polycom
Content App.
For example, you may not want someone connected to your G7500 system through the Wi-Fi network to
save content. However, users can still save content when connected through the primary network (LAN).
Procedure
1. In the system web interface, go to Security > Content.
2. Select or clear one of the following check boxes:
▪Allow users to save content from Primary Network
▪Allow users to save content from Wi-Fi Network
Related Links
Sharing Content on page 93
Encryption
AES is standard on G7500 systems. When enabled, your system automatically encrypts calls with other
systems using AES.
A locked padlock icon displays on the connected monitor(s) when a call is encrypted. If a call is
unencrypted, you see an unlocked padlock. The padlock may not accurately indicate encryption status if
the call is cascaded or includes an audio-only endpoint. To avoid security ambiguity, participants can
verbally communicate the state of their padlock icon at the beginning of a call.
The following AES cryptographic algorithms ensure flexibility when negotiating secure media transport:
•H.323 (per H.235.6)
◦AES-CBC-128 / DH-1024
◦AES-CBC-256 / DH-2048
•SIP (per RFCs 3711, 4568, 6188)
◦AES_CM_128_HMAC_SHA1_32
◦AES_CM_128_HMAC_SHA1_80
◦AES_CM_256_HMAC_SHA1_32
◦AES_CM_256_HMAC_SHA1_80
Configure Call Encryption
You can encrypt calls on your G7500 system.
Procedure
1. In the system web interface, go to Security > Global Security.
2. For the Require AES Encryption for Calls setting, choose how you want to encrypt calls:
•Off: AES encryption is disabled.
•When Available: AES encryption is used with systems that support it, but the system also
allows unencrypted calls.
Polycom, Inc.55
Securing the System
•Required for Video Calls Only: AES encryption is used in all video calls. Calls with
systems that don’t support it fail.
•Required for All Calls: AES encryption is used in all types of calls. Calls with systems that
don’t support it fail.
Configure Minimum TLS
You can restrict your G7500 system from using earlier versions of TLS for secure communications.
For example, if you set your minimum TLS version to 1.1, you’re disabling TLS 1.0.
Procedure
1. In the system web interface, go to Security > Global Security.
2. Choose one of the following options for Minimum TLS Version:
•TLS 1.2
•TLS 1.1
•TLS 1.0
3. Select Save.
Related Links
Register with an LDAP Directory Server on page 87
LDAP Directory Server Ignores the Minimum TLS Version Setting on page 120
H.460 Firewall/NAT Traversal
You can configure your G7500 system for firewall or network address translation (NAT) traversal using the
H.460.18 and H.460.19 standards. This includes environments with session border controllers (SBCs).
For example, an endpoint outside your network that’s initiating a SIP call connects to an SBC as a remote
endpoint. The incoming SIP traffic then traverses a firewall before connecting to the endpoint it’s calling
inside your network.
Real-time media streams often use UDP for their speeds. If your system is behind a firewall that restricts
access to UDP ports, however, you can configure your system for only TCP connections.
Caution: Systems deployed outside a firewall are potentially vulnerable to unauthorized access. Visit
the Polycom Security section of the Knowledge Base at Polycom Support for timely security
information. You can also register to receive periodic updates and advisories.
Configure the System for H.460 Firewall/NAT Traversal
You can configure your G7500 system for H.460 firewall/NAT traversal. Enable firewall traversal if you’re
using a cloud-based conferencing service or if your system is outside a corporate network (for example, a
home office).
Make sure you register your system with a network device that supports H.460.18 and H.460.19
standards (for example, a RealPresence Access Director system or a Polycom VBP device).
Procedure
1. In the system web interface, go to Network > Primary Network.
2. Go to Firewall.
Polycom, Inc.56
Securing the System
3. Select Enable H.460 Firewall Traversal.
4. Verify the firewalls that you traverse allow your system to use outbound TCP and UDP
connections.
▪Firewalls with a stricter rule set must allow the system to use at least the following outbound
TCP and UDP ports: 1720 (TCP), 14085-15084 (TCP), 1719 (UDP), and 16386-25386
(UDP).
▪Firewalls must allow inbound traffic to the TCP and UDP ports used for outbound traffic.
5. Configure the following settings:
SettingDescription
Fixed PortsDefines which TCP and UDP ports your system
uses for firewall traversal.
Enable this option if your firewall isn’t H.323
compatible. The system assigns a port range
starting with the TCP and UDP ports you specify
(port 3230 is where the range begins by default).
Note: For the fixed ports you configure, you must
open the corresponding ports on your firewall. For
H.323, open TCP port 1720. For SIP, open UDP
port 5060, TCP 5060, or TCP 5061 depending on if
you’re using UDP, TCP, or TLS, respectively, as the
SIP transport protocol.
Disable this option if your firewall is H.323
compatible or the system isn’t behind a firewall.
TCP Ports
UDP Ports
The starting value for the range of TCP and UDP
ports the system uses. The system automatically
configures the range based on the beginning value
you set here.
To allow H.323 traffic, you need two TCP and eight
UDP ports per connection. You must also open
TCP port 1720 on the firewall.
To allow SIP traffic, you need TCP port 5060 and
eight UDP ports per connection.
UDP port range: Because systems support ICE,
the range of fixed UDP ports is 32. The system
cycles through the available ports from call to call.
Fixed ports range and filters: You might notice
that the source port of a SIP signaling message is
not in the fixed ports range. When your firewall is
filtering on source ports, in the system web
interface, go to the SIP page and enable ForceConnection Reuse. When enabled, the system
uses port 5060 and 5061 for the source and
destination port (these must be open on the
firewall).
Polycom, Inc.57
Securing the System
SettingDescription
NAT ConfigurationSpecifies if the system automatically determines
the NAT public (WAN) address.
▪If the system isn’t behind a NAT or is connected
to the network through a VPN, set this option to
Off.
▪If the system is behind a NAT that allows HTTP
traffic, set this option to Auto.
▪If the system is behind a NAT that doesn’t allow
HTTP traffic, set this option to Manual.
NAT Public (WAN) AddressThe address callers from outside the LAN use to
call your system. If you configured the NAT
manually, enter the NAT public address here.
You can configure this option only when you set
NAT Configuration to Manual.
NAT is H.323 CompatibleIdentifies whether the system is behind a NAT that
can translate H.323 traffic.
This option is available only when you set NAT
Configuration to Auto or Manual.
Address Displayed in Global DirectoryChoose whether to display the system’s public or
private address in the global directory.
This option is available only when you set NAT
Configuration to Auto or Manual.
Enable SIP Keep-Alive MessagesSpecifies whether to regularly transmit keep-alive
messages on the SIP signaling channel and on
RTP sessions part of SIP calls. Keep-alive
messages maintain connections through
firewall/NAT devices that are often used at network
edges.
If your system is in an Avaya SIP environment,
Polycom recommends that you disable this setting
to enable calls to fully connect.
6. Select Save.
Web Proxies
A web proxy can help your G7500 system communicate outside your network securely and with
increased performance. For example, you can direct your system’s outbound requests through an
enterprise proxy.
You can configure your system to use a proxy one of the following ways:
▪Automatic: You specify only the proxy credentials (if needed). Using DHCP, your system obtains a
URL to automatically download a proxy auto-configuration (PAC) file.
Polycom, Inc.58
Securing the System
▪Semi-automatic: You specify the proxy credentials and URL for automatically downloading a PAC
file.
▪Manual: You specify the proxy address, port, and credentials. (This method lets you configure your
system with only one proxy.)
If your configuration includes automatically downloading a PAC file, there must be an expiration
associated with the file so the system knows when to download a new one. Make sure your PAC file
server includes an Expires header in its HTTP response (for example, Expires: Wed, 30 Oct2016 09:30:00 GMT).
Your system can authenticate with a proxy using the following methods:
▪Digest authentication (with either MD-5 or SHA-256 digest)
▪NTLM authentication (only NTLMv2 is supported)
▪Basic authentication (this insecure method is disabled by default)
▪No authentication (or null authentication, meaning the proxy server doesn’t require credentials)
Your system supports the following services when configured to use a web proxy:
▪Directory servers
▪Provisioning service
▪Calendaring service
▪Software updates
Related Links
Checking the Web Proxy Configuration
on page 121
Enable the System to Use a Web Proxy
By default, your G7500 system configuration doesn’t use web proxies.
Procedure
1. In the system web interface, go to Network > Primary Network > Web Proxy Settings.
2. Select Enable Web Proxy.
Set Up Automatic Web Proxy Configuration
With automatic web proxy configuration, your G7500 system obtains a URL for downloading a proxy autoconfiguration (PAC) file through DHCP option 252.
Procedure
1. In the system web interface, go to Network > Primary Network > Web Proxy Settings.
2. Select Automatic Configuration.
3. Select Enable WPAD.
This option enables the web proxy auto-discovery protocol (WPAD), which helps your system
automatically download the PAC file on your network using DHCP option 252.
4. Enter the Proxy Username and Proxy Password.
5. Select Save.
Your system automatically downloads and reads the PAC file specifying the proxy rules. The system also
automatically downloads subsequent files before the current file expires.
Polycom, Inc.59
Securing the System
Set Up Semi-Automatic Web Proxy Configuration
With semi-automatic web proxy configuration, you must specify the URL your G7500 system uses to
download a proxy auto-configuration (PAC) file.
Procedure
1. In the system web interface, go to Network > Primary Network > Web Proxy Settings.
2. Select Automatic Configuration.
3. If checked, clear the Enable WPAD check box.
4. Enter the Proxy Username and Proxy Password.
5. Enter the PAC URL from which your system downloads the PAC file.
6. Select Save.
Your system automatically downloads and reads the PAC file specifying the proxy rules. The system also
automatically downloads subsequent files before the current file expires.
Manually Update the PAC File on the System
Even if you set up your G7500 system for automatic or semi-automatic web proxy configuration, you can
still manually download a new PAC file from the server.
The PAC file may update on the server much sooner than its expiration date. In this situation, you don’t
have to wait for the system to automatically download the latest version.
Procedure
1. In the system web interface, go to Network > Primary Network > Web Proxy Settings.
2. Select Update PAC File to fetch the latest version of the file from the server.
Manually Configure a Web Proxy
You can manually configure your G7500 system to communicate with a web proxy by providing a proxy
address, port, and credentials (if required).
This method lets you configure your system with only one proxy.
Procedure
1. In the system web interface, go to Network > Primary Network > Web Proxy Settings.
2. If checked, clear the Automatic Configuration check box.
3. Enter the Proxy Address and Proxy Port.
4. Enter the Proxy Username and Proxy Password.
5. Select Save.
View Connections to the System
You can see a list of current connections to your G7500 system.
You can find the following information in the list:
▪Type of connection (for example, web)
▪ID associated with the session (for example, admin or user)
▪Remote address (IP addresses of the hosts accessing your system)
Polycom, Inc.60
Securing the System
This list doesn’t show details related to sharing content. For example, if someone shares a video from an
AirPlay-certified device or HDMI-connected laptop, you don’t see that those devices are connected to the
system.
Procedure
1. In the system web interface, go to Diagnostics.
2. Go to Sessions.
Port Usage
The following table lists the inbound, outbound, and bidirectional ports used by the G7500 system.
G7500 System Port Usage
PortDirectionTypeProtocolFunctionOpen by
Default?
22InboundStaticSSHComand-line API
access over SSH
23InboundStaticTCPComand-line API
access over
telnet
24InboundStaticTCPComand-line API
access over
telnet
53OutboundStaticUDPDNSYesNo
80InboundStaticTCPHTTP web server
listener that
provides access
to the web
interface.
Redirects all
sessions to
HTTPS on port
443 and is used
by AirPlay.
NoNo
NoNo
NoNo
YesYes
Configurable
Port?
123OutboundStaticUDPNTP (automatic
time
synchronization)
161InboundStaticUDPSNMP reportingNoYes
Polycom, Inc.61
YesNo
Securing the System
PortDirectionTypeProtocolFunctionOpen by
Default?
443BidirectionalStaticTCP/SCTPStatic TCP
HTTPS web
server listener
that provides
TLS access to
the web
interface.
AirPlay
Microsoft
Exchange Server
Provisioning (for
example,
RealPresence
Resource
Manager)
peripheral device
software
downloads and
log uploads
App
SIPYesNo
depending
the on
configuration
data collection
YesNo
YesNo
YesNo
YesNo
NoNo
Configurable
Port?
5297InboundStaticTCPBonjourYesNo
5298InboundStaticTCPBonjourYesNo
5353InboundStaticUDPBonjour/AirPlay
(multicast
Domain Name
System [mDNS])
6514OutboundStaticTLSRemote loggingNoYes
7000InboundStaticTCPAirPlay standard
services
7080InboundStaticTCPWeb servicesYesNo
7081InboundStaticTCPWeb servicesYesNo
7100InboundStaticTCPAirPlay mirroring
services
7236InboundStaticTCPMiracast servicesYesNo
16384–
32764
44444InboundStaticTCPContent streamYesNo
BidirectionalDynamicUDPRTP/RTCP
(video and audio
streams)
YesNo
YesNo
YesNo
YesYes
Polycom, Inc.63
Securing the System
PortDirectionTypeProtocolFunctionOpen by
Default?
47000InboundStaticTCPAirPlay casting
services
49152–
65535
49159InboundStaticUDPBonjour/AirPlay
49163InboundStaticUDPBonjour/AirPlay
BidirectionalDynamicTCPH.245YesYes
(mDNS
[Windows])
(mDNS
[Windows])
YesNo
YesNo
YesNo
Configurable
Port?
Polycom, Inc.64
Configuring Call Settings
Topics:
▪Configure Call Settings
▪Configure Dialing Options
▪Set Call Answering Mode
▪Set Preferred Call Speeds
▪Configure the Recent Calls List
▪Clear Recent Calls
Specify how you want your G7500 system to handle and manage calls.
Related Links
Configure H.323 Settings on page 34
Configure SIP Settings on page 36
Configure Call Settings
You can configure call settings in the G7500 system web interface.
Procedure
1. In the system web interface, go to Call Configuration > Call Settings.
2. Configure the following settings:
SettingDescription
Maximum Time in CallSets the maximum number of hours allowed for a
call.
When the maximum time expires, the system
prompts the user to hang up. If the user doesn’t
answer within one minute, the call automatically
ends. If the user chooses to stay in the call, the
system doesn’t prompt the user again.
Auto Answer Point-to-Point CallSpecifies whether the system answers an incoming
call when not in a call. Choose one of the following
options:
▪Yes: The system automatically answers
incoming point-to-point calls.
▪No: Users must answer incoming calls
manually.
▪Do Not Disturb: The system rejects incoming
calls without notification.
Polycom, Inc.65
Configuring Call Settings
SettingDescription
Display Icons in a CallSpecifies whether to display onscreen graphics,
including icons and help text, during calls.
Enable Flashing Incoming Call NotificationSpecifies whether you see an incoming call
notification.
Preferred 'Place a Call' NavigationSpecifies the default options that display on the
local interface Place a Call screen. Choose one of
the following options:
▪Keypad: Displays recently-dialed numbers and
a dialpad.
▪Contacts: Displays a screen for searching a
directory. The multitiered directory (LDAP) root
entry displays at the top of the Contacts list,
which combines your search results and
favorites.
▪Recent Calls: Lists previous calls in
chronological order.
3. Select Save.
Related Links
Configure General Audio Settings on page 69
Configure Dialing Options
You can specify video and audio dialing preferences for your G7500 system.
Procedure
1. In the system web interface, go to Call Configuration > Dialing Preference.
2. Configure the following settings (your changes save automatically):
SettingDescription
Scalable Video Coding Preference (H.264)This read-only setting indicates your system uses
only AVC conferencing.
Note: Scalable video coding (SVC) conferencing
isn’t supported.
Enable H.239Enables the use of a standards-based specification
for parallel video streams (people and content).
Enable this setting if you know call participants
support H.239.
Enable Audio-Only CallsEnables you to place audio-only calls on the
system.
Polycom, Inc.66
Configuring Call Settings
SettingDescription
Call Type OrderSpecifies an order preference for video or voice
calls. Select either Video then Phone, or Phone
then Video. This setting is read-only if the video
system has no phone connections.
Video Dialing Order PreferencesSpecifies how the system places video calls to
directory entries with more than one type of
number.
Select one of the following protocols for each
preference:
▪IP H.323
▪SIP
This setting also determines how the system places
video calls from the Place a Call screen when your
set the call protocol to Auto or if it’s unavailable.
For example, if a call doesn’t connect with H.323,
the system tries using SIP.
Audio Dialing Order PreferencesSpecifies how the system places audio calls to
directory entries with more than one type of
number.
Select one of the following protocols for each
preference:
▪H.323
▪SIP
Set Call Answering Mode
You can configure how users answer calls on the G7500 system.
Procedure
1. In the system web interface, go to Call Configuration > Call Settings.
2. Select one of the following for Auto Answer Point-to-Point Call:
▪Yes: The system automatically answers incoming calls.
▪No: Users must answer incoming calls manually.
▪Do Not Disturb: The system rejects incoming calls without notification.
Set Preferred Call Speeds
You can configure call speeds in the G7500 system web interface.
Procedure
1. In the system web interface, go to Call Configuration > Dialing Preference.
2. Configure the following settings (your changes save automatically):
Polycom, Inc.67
Configuring Call Settings
SettingDescription
Preferred Speed for Placed CallsDetermines the IP call speed your system uses
when either of the following occurs:
▪A user sets the call speed to Auto on the Place
a Call screen.
▪A user places a call from the directory.
If the far-site system doesn’t support the selected
speed, the system automatically negotiates a lower
speed.
Maximum Speed for Received CallsThe system doesn’t receive calls at a higher rate
than the speed you set here.
Configure the Recent Calls List
You can display recent calls on the Place a Call page in the G7500 system web interface.
The recent calls list includes the following information:
▪Name or number
▪If the system placed or received the call
▪Date and time
Procedure
1. In the system web interface, go to Call Configuration > Recent Calls.
2. Configure the following settings (your changes save automatically):
SettingDescription
Call Detail ReportCall detail records (CDRs) are in the system logs.
When disabled, the system doesn’t write call
information.
Enable Recent CallsSpecifies whether to show recent calls on the local
interface and the system web interface.
Maximum Number to DisplayThe maximum number of calls the system displays
in the recent calls list.
Clear Recent Calls
You can clear the recent calls list from the G7500 system web interface.
Procedure
1. In the system web interface, go to Call Configuration > Recent Calls.
2. For Clear Recent Calls, select Clear and confirm your choice.
Polycom, Inc.68
Configuring Audio Settings
Topics:
▪Configure General Audio Settings
▪Audio Input
▪Audio Output
▪Audio I/O Specifications
You can configure audio settings in the G7500 system web interface.
Configure General Audio Settings
You can specify general audio settings for your G7500 system.
If you are in a call with a far site that is sending audio in stereo mode, you can receive in stereo. In calls
where some sites can send and receive stereo but some can’t, any site set up to send or receive stereo
can do so.
Note:Some audio settings are unavailable when you connect a SoundStructure digital mixer to
your system.
Procedure
1. In the system web interface, go to Audio/Video > Audio > General Audio Settings.
2. Configure the following settings (your changes save automatically):
SettingDescription
Polycom StereoSurroundEnables Polycom StereoSurround software for all
calls.
To use StereoSurround, make sure you correctly
configure your system’s stereo settings.
Note:Enabling this setting disables Polycom
Acoustic Fence technology and vice versa.
Sound Effects VolumeSets the volume level of the ringtone and user alert
tones.
RingtoneSpecifies the ringtone for incoming calls.
User Alert TonesSpecifies the tone for user alerts.
Audio Mute Auto-Answered CallsSpecifies whether to automatically mute incoming
calls.
Note:You must first enable Auto Answer Point-to-
Point Video in Call Settings to use this feature.
Polycom, Inc.69
Configuring Audio Settings
SettingDescription
Enable M-ModeSpecifies whether the system transmits audio using
a configuration that best reproduces interactive and
live performance music picked up by microphones.
This feature provides the highest-possible
bandwidth for audio.
When you enable M-Mode, even the faintest
musical notes come through clearly.
Enable Keyboard Noise Reduction and Polycom
NoiseBlock
Enable Join and Leave TonesThe system plays a tone when someone joins or
Transmission Audio Gain (dB)Specifies the audio level (in decibels) that the
Enable Audio Mute ReminderSpecifies if the system displays a notification that
Related Links
Configure Sleep Settings on page 23
Configure Call Settings on page 65
Test Speakers on page 118
Test Polycom StereoSurround on page 118
Specifies whether the system microphones mute
when the system detects keyboard typing or other
extraneous noises but no one is talking. NoiseBlock
unmutes the system when it detects speech,
regardless if there’s background noise or not.
Note: This setting is disabled when you enable M-
Mode. If you use an external echo canceller,
keyboard noise reduction is not available.
leaves a conference call.
system transmits sound. Unless otherwise advised,
Polycom recommends setting this value to 0 dB.
the microphones are muted when it detects
someone speaking.
Audio Input
You have several options to input audio for your G7500 system.
Your system supports the following audio inputs:
▪IP-based Polycom audio peripheral devices:
◦Polycom IP Table Microphone
◦Polycom IP Ceiling Microphone
◦Polycom Microphone IP Adapter
▪3.5 mm: 3.5 mm line-level stereo input used to share audio from a device or line-in microphone.
Depending on your setup, you can specify if sound from this input plays in the room and at far sites
or just at far sites.
▪HDMI: Used to share audio (along with content) from a device. Sound from this input plays in the
room and at far sites.
Polycom, Inc.70
Configure IP Microphones
You can configure IP table and ceiling microphone settings for your G7500 system.
Procedure
1. In the system web interface, go to Audio/Video > Audio > Audio Input.
2. Configure the following settings (your changes save automatically):
SettingDescription
Stereo ModePositions the audio input within the left and right
channels. Left sends all of the audio to the left
channel. Right sends all of the audio to the right
channel. For Polycom table microphone and ceiling
microphones, Left+Right sends audio from one
microphone element to the left channel and audio
from a second element to the right channel.
AutorotationSpecifies whether the system uses autorotation for
Polycom microphones. If you enable this feature,
the system automatically assigns left and right
channels for the microphone based on the sound it
senses from the left and right speakers.
Configuring Audio Settings
Audio Meter (dB)Shows you the peak input signal level for Polycom
microphones.
Configuring the Microphone Adapter
Your G7500 system automatically configures the microphone adapter when you connect it.
Note the following when using the microphone adapter:
▪Polycom StereoSurround software isn’t available when using the microphone adapter.
▪You can see the audio input level (single channel meter) in the local interface and the system web
interface.
Related Links
Polycom Microphone IP Adapter
on page 16
Polycom Acoustic Fence
Polycom Acoustic Fence technology uses standard Polycom microphones to build a virtual audio
boundary around one or several people.
This feature works in mono mode only. Enabling Polycom Acoustic Fence disables Polycom
StereoSurround.
Polycom Acoustic Fence technology provides the following features:
•Mutes sounds outside the fence when no one is speaking inside it
•Lowers sounds outside the fence by 12 dB when someone is speaking inside it.
•Mutes speakers when they leave the fenced area
Polycom, Inc.71
Configuring Audio Settings
In addition to the primary microphone, you need at least one more microphone to create the fence. You
can connect up to three IP microphones directly to your G7500 system.
The boundary radius can be from two to several feet around the following Polycom peripheral devices:
•Table microphone
•Ceiling microphone
Note:Microphones connected to a Polycom Microphone IP Adapter currently don’t support
Polycom Acoustic Fence technology.
For more details on Polycom Acoustic Fence technology, search the Polycom Knowledge Base for
acoustic fence.
Related Links
IP Microphones on page 14
Related Links
Fix Polycom Acoustic Fence Issues on page 119
Configure Polycom Acoustic Fence
You can configure your G7500 system to use Polycom Acoustic Fence technology.
Note:This option isn’t available if you enable Polycom StereoSurround.
Procedure
1. In the system web interface, go to Audio/Video > Audio > General Audio Settings.
2. Select the Enable Acoustic Fence check box.
3. Set Acoustic Fence Sensitivity from 0 to 10, where 0 is the minimum microphone sensitivity and
10 is the maximum.
Higher values increase the radius of the fence area around the primary microphone.
Specify the Primary and Fence Microphones
To use Polycom Acoustic Fence technology with your G7500 system, you need a primary microphone to
pick up audio and one or more fence microphones to define the audio boundary.
The system considers the first microphone you pair to be the primary microphone. By default, a
microphone pairs to the system when you connect it (unless you’ve disabled automatic pairing).
Note:If you use a mix of table and ceiling microphones, the primary microphone must be a table
microphone. The primary microphone can be a ceiling microphone if you use only that type of
microphone.
Procedure
1. Connect the primary microphone to an LLN port on the back of your system.
Caution: When using Polycom Acoustic Fence technology, remember which microphone is the
primary one. If you disconnect this microphone, Polycom Acoustic Fence no longer
works and you have to reconnect all microphones (starting with the primary
microphone) for it to work again.
Polycom, Inc.72
Configuring Audio Settings
2. Connect the other microphone(s).
Related Links
System Back Panel Ports on page 10
Specify a Different Primary Microphone
If you want to change the primary microphone you’re using for Polycom Acoustic Fence technology, you
must first disconnect all the microphones from your G7500 system.
Note:If you use a mix of table and ceiling microphones, the primary microphone must be a table
microphone. The primary microphone can be a ceiling microphone if you use only that type of
microphone.
Procedure
1. Disconnect all microphones from the LLN ports on the back of your system.
2. Reconnect the microphone you want to be the primary.
Your primary microphone is set up.
3. Connect the other microphone(s).
Your system is ready to use Polycom Acoustic Fence with a new primary microphone.
Configure 3.5 mm and HDMI Audio Input
You can configure the audio input settings for your G7500 system.
Procedure
1. In the system web interface, go to Audio/Video > Audio > Audio Input.
2. Configure the following settings (your changes save automatically):
Settings vary depending on the audio input source.
SettingDescription
Audio Input LevelSets levels for the left and right channels. Choose a
value from 0 to 10.
Polycom, Inc.73
Configuring Audio Settings
SettingDescription
Playback Options(3.5 mm only) Specifies how the system routes and
controls audio from the 3.5 mm stereo audio input.
▪Playback to All Locations (Default):
◦The 3.5 mm stereo audio input is heard on
the system’s speakers and at far sites.
◦Mute control and echo cancellation aren’t
available.
◦Select this option if you’re sharing audio
from a device.
▪Playback to Far Sites, Mute Controlled, Echo
Cancelled:
◦The 3.5 mm stereo audio input is heard at
far sites but not on the system’s speakers.
◦You can mute all audio and echo
cancellation is enabled.
◦Select this option if you’re using a line-in
microphone.
Audio Meter (dB)Displays the audio level of the input (left and right
channels).
Audio Output
You have different options to play audio on your G7500 system to fit your setup: You can use the primary
monitor’s built-in speakers, or you can connect an external speaker system (such as the Polycom
StereoSurround kit) to provide more volume and comprehensive sound in large rooms.
See your system setup sheet for connection details. Make sure that you power off the system before
connecting anything to it.
Configure Audio Output Settings
You can configure the audio output settings for your G7500 system.
Procedure
1. In the system web interface, go to Audio/Video > Audio > Audio Output.
2. Configure the following settings (your changes save automatically):
SettingDescription
Master Audio VolumeSets the main audio output volume level going to
the speakers.
BassSets the volume level for low frequencies without
changing the master audio volume.
Polycom, Inc.74
Configuring Audio Settings
SettingDescription
TrebleSets the volume level for high frequencies without
changing the master audio volume.
Output ModeSpecifies how the system configures the volume for
a device connected to the line out port.
▪Variable: Enables users to set the volume with
the remote control.
▪Fixed: Sets the volume to the audio level
configured for the system.
Audio Meter (dB)Displays the audio level of the output (left and right
channels).
Using 3.5 mm Audio Output
If you want to use the 3.5 mm stereo line output to hear audio in the room, make sure you mute the
monitor(s) connected to your G7500 system through HDMI.
Audio I/O Specifications
The following table provides audio input and output specifications for your G7500 system.
G7500 Audio I/O Specifications
CharacteristicValue
Maximum input level, line input+6 dBV (2.0 V
Input impedance, line input45 kΩ, ± 5 %
Maximum output level, line output (≥ 600 Ω load)+6 dBV (2.0 V
Output impedance, line output150 Ω, ± 5 %
Signal-to-noise ratio: Line input routed to line output>85 dB, A-weighted
Signal-to-noise ratio: HDMI input routed to either HDMI output>95 dB, A-weighted
Dynamic range: Line input routed to line output>85 dB, A-weighted
Dynamic range: HDMI input routed to either HDMI output>95 dB, A-weighted
Crosstalk and feed-through (any input or output channel to any other
channel)
Frequency response (any input to any output, relative to 997 Hz)+1, -3 dB, 50 Hz to 20 kHz
≤-80 dB, 20 Hz to 20 kHz
RMS
RMS
), ± 1 dB
), ± 1 dB
Total harmonic distortion + noise vs. frequencyBetter than -75 dB, 50 Hz to 20 kHz
Polycom, Inc.75
Configuring Video and Camera Settings
Topics:
▪HDMI Connections
▪Configure Monitor Settings
▪Configure a Touch Monitor
▪Configure Camera Settings
▪Configure Video Input Settings
▪Video Codec Capabilities
You can configure video settings for your G7500 system, including monitors and cameras.
Use the HDMI input resolutions and video codec capabilities to further enhance your video experience,
based on your deployment requirements.
HDMI Connections
Your G7500 system has three HDMI ports so you can have dual monitors and an HDMI content source.
Your system has the following HDMI connections:
▪Output for connecting the primary system monitor (Monitor 1)
▪Output for connecting the secondary system monitor (Monitor 2)
▪Input for content sharing, including audio streaming
The system supports only HDMI-to-HDMI connections and doesn’t support display conversions, such as
VGA-to-HDMI or HDMI-to-DVI cable converters.
Note:Polycom claims no responsibility or liability for the quality, performance, or reliability of third-
party HDMI cables, HDMI splitters, or HDMI USB adapters. Contact your Polycom distributor
or representative to order parts that meet the appropriate manufacturing tolerances, quality,
and performance parameters for your deployment.
Related Links
System Back Panel Ports on page 10
Supported HDMI Output Resolutions for Single-Monitor Setups
Your G7500 system supports the following HDMI output resolutions and frame rates when using one
monitor.
Supported HDMI Output Resolutions and Frame Rates for Single-Monitor Setups
OutputResolutionFrame Rates (fps)
UHD (4K)3840 × 2160p25, 30, 50, 60
Polycom, Inc.76
Configuring Video and Camera Settings
OutputResolutionFrame Rates (fps)
FHD1920 × 1080p50, 60
Supported HDMI Output Resolutions for Dual-Monitor Setups
Your G7500 system supports the following HDMI output resolutions and frame rates when using two
monitors.
Note:4K resolution (3840 × 2160p) isn’t supported when you configure your system for dual
monitors. If you want to use 4K, set Monitor 2 to Off in the system web interface.
Supported HDMI Output Resolutions and Frame Rates for Dual-Monitor Setups
OutputResolutionFrame Rates (fps)
FHD1920 × 1080p50, 60
Supported HDMI Input Resolutions
Your G7500 system supports the following monitor resolutions for HDMI input.
Supported HDMI Input Resolutions and Frame Rates
InputResolutionFrame Rates (fps)
UHD (4K)3840 × 2160p24, 25, 30
FHD1920 × 1080p50, 60
HD1280 × 720p50, 60
Configure Monitor Settings
You can optimize your G7500 system video output for single- and dual-monitor setups.
Interlaced modes aren’t supported.
Procedure
1. In the system web interface, go to Audio/Video > Monitors.
2. Configure the following settings (your changes save automatically):
Polycom, Inc.77
Configuring Video and Camera Settings
SettingDescription
Configure MonitorSpecifies monitor settings.
▪Automatic: (Default) Detects the highest-
supported resolution of the connected monitors.
When you select this option, the Resolution
setting is disabled.
▪Manual: You can choose the monitor
Resolution.
▪Off: Disable this monitor (not available for
Monitor 1).
Note: To use 4K resolution, make sure you set
Monitor 2 to Off.
ResolutionSpecifies the monitor resolution. This setting is
unavailable when you select Automatic for the
Configure Monitor setting.
Note: The system uses the resolution you select
even if the monitor doesn’t support it. There is no
dynamic resolution adjustment in this situation.
Related Links
Configure a Touch Monitor on page 78
Configure Dual Monitor Display Settings on page 95
Configure a Touch Monitor
In a dual-monitor setup, you must configure the touch monitors to work with your G7500 system.
Note:Touch monitors in single-monitor setups don’t require configuration.
Procedure
1. Do one of the following:
▪In a call: Go to Menu > More > Settings > Diagnostics > Touch Configuration.
▪Out of a call: Go to Menu > Settings > Diagnostics > Touch Configuration.
2. On each screen, tap the Hand icon.
3. Tap Finish Configuration.
Related Links
Configure Monitor Settings on page 77
Configure Dual Monitor Display Settings on page 95
Polycom, Inc.78
Configuring Video and Camera Settings
Configure Camera Settings
You can configure settings for cameras connected to your G7500 system. When you connect a supported
camera, the system automatically discovers it and displays the available camera settings in the system
web interface.
See the latest release notes for specific information about the cameras you can use with your G7500.
Note:If you connect an unsupported camera, the system still attempts to show video. Polycom
can’t guarantee that the results are optimal or that the available settings are the same as a
supported camera.
Procedure
1. In the system web interface, go to Audio/Video > Video Inputs.
2. Go to General Camera Settings.
3. Configure the following settings:
SettingDescription
Allow Other Participants In a Call to Control
Your Camera
Power FrequencySpecifies the power-line frequency for your system.
Enable Camera Preset Snapshot IconsEnables the use of snapshot icons that represent
Specifies whether the far site can pan, tilt, or zoom
the near-site camera. When you enable this setting,
a user at the far site can control the framing and
angle of the camera for the best view of the near
site. This is also called Far End Camera Control
(FECC).
Your system typically defaults to the correct power-
line frequency based on the video standard used in
the country where it’s located. This setting helps
you adapt the system to areas where the frequency
doesn’t match the video standard. You might also
need to change this setting to avoid flicker from
fluorescent lights in the room.
camera presets.
To see a preset icon, you must enable this setting
before configuring the preset.
Polycom, Inc.79
Configuring Video and Camera Settings
SettingDescription
Camera Sleep ModeSpecifies a sleep mode for your camera.
Fast Wake Up: The camera provides an image as
soon as the monitor wakes. While asleep, the
camera faces forward.
▪When you set sleep Display to Black, an
image more quickly displays, but be aware that
this uses maximum power.
▪When you set sleep Display to No Signal, the
display synchronizes with the system. This can
take a few seconds but may conserve energy
depending on the monitor.
Save Energy: Puts the camera into standby mode
to save power (the camera spins to the rear and
faces down).
▪When you set sleep Display to Black, it takes a
few seconds for the camera to send an image.
▪When you set sleep Display to No Signal, the
camera is already sending an image by the time
the display synchronizes with the system.
4. Select Save.
Related Links
Update Polycom HDCI Cameras on page 101
Configure Sleep Settings on page 23
Configure Video Input Settings
You can customize your video input settings, such as enabling connected cameras, adjusting camera
orientation, or specifying whether people or content display on connected monitors.
Note:The system doesn’t display settings that don’t apply to your camera. For example, you don’t
see tracking options if your connected camera doesn’t support tracking.
Procedure
1. In the system web interface, go to Audio/Video > Video Inputs.
2. Do one of the following:
▪Go to Input 1 to configure a People source.
▪Go to Input 2 to configure a Content source.
Each source has different settings. For example, a People source has pan, tilt, zoom, and near/far
camera control settings, while a Content source has different settings.
3. Configure the following settings:
Polycom, Inc.80
Configuring Video and Camera Settings
SettingDescription
ModelDisplays the type of device connected to the
system.
NameDisplays the default name of the connected device.
You also can enter a name for the device.
Input formatSpecifies the source type of the device. This setting
is read-only unless the system doesn’t detect the
device.
OrientationSpecifies whether the display is oriented normally
or inverted (upside down).
Optimized forSpecifies optimization preferences for the video
input.
▪Sharpness: Gives preference to resolution over
frames per second. With this setting, moderateto-heavy motion at low call rates can cause
some frames to drop.
▪Motion: Gives preference to frames per second
over resolution.
Backlight CompensationSpecifies if the camera automatically adjusts for a
bright background. Backlight compensation is best
used in situations where the subject appears darker
than the background.
Polycom, Inc.81
Configuring Video and Camera Settings
SettingDescription
White BalanceSpecifies how the camera compensates for light
source variations in the room. Select Auto,
Manual, or a color temperature value.
▪Auto: Polycom recommends this setting for
most situations. It calculates the best white
balance setting based on lighting conditions in
the room.
▪Manual: Use this setting for rooms where the
Auto and fixed values don’t provide acceptable
color reproduction.
When you set this option to Manual, fill the
camera’s field of view with a flat white object,
such as a piece of paper. For best results, the
object should be uniformly illuminated with light
that is representative of the room lighting used
in the conference, rather than light from a
display, another area, or a shadow. After the
object is in place, select Calibrate.
▪Color Temperature Value: The color
temperature values, measured in degrees
Kelvin, correspond to the color of ambient light
in a room. Because the available color
temperature values vary by camera, this list is a
sampling of some of the values you might see
in the interface:
◦3200K (warm office fluorescent)
◦3680K (tungsten bulb)
◦4160K (cool office fluorescent)
◦5120K (neutral daylight)
◦5600K (cool daylight)
BrightnessAdjusts the video brightness.
Color SaturationAdjusts the color saturation.
Polycom, Inc.82
Configuring Video and Camera Settings
SettingDescription
Tracking ModeSpecifies the camera tracking mode.
▪Frame Speaker: Enables the camera to
automatically locate and frame the active
speaker. When someone else starts speaking,
the camera switches that person.
Note: When you mute the local microphone, the
camera tracking mode automatically switches to
Frame Group.
▪Frame Group: Enables the camera to
automatically locate and frame participants in
the room without moving the camera.
▪Frame Group with Transition: (EagleEye
Producer camera only) Enables the camera to
automatically locate and frame participants in
the room while moving the camera. For
example, if someone enters the room, you
might see the camera pan until that person is in
view.
▪Off: Disables automatic tracking. You must
handle all camera control manually.
Tracking SpeedDetermines how quickly the camera finds and
switches to the new speaker. The room
environment can influence how fast the camera
locates new speakers.
Framing SizeSpecifies the framing view.
▪Wide: Establishes a wide view of meeting
participants.
▪Medium: (Default group framing view)
Establishes a medium view of meeting
participants.
▪Tight: Establishes a close-up view of meeting
participants
Picture in PictureWhen enabled, a picture-in-picture window displays
showing a wide angle of the room in addition to the
main window showing the primary speaker(s).
This setting is available when using a camera with
tracking features, such as the EagleEye Director II.
4. Select Save.
Polycom, Inc.83
Configuring Video and Camera Settings
Video Codec Capabilities
The G7500 system supports H.265 High Efficiency Video Coding (HEVC), H.264 Advanced Video Coding
(AVC), and H.263 codec standards.
Related Links
Polycom G7500 Overview on page 7
Default Options for Sharing Content on page 93
H.265 High Efficiency Video Coding
From a video call quality standpoint, H.265 gives you up to 1080p at 60 fps for people streams and 4K at
15 fps for content streams.
Note:H.265 is supported only during a point-to-point SIP call with another G7500 system.
Supported H.265 People Stream Resolutions During Calls
The following table includes the H.265 resolutions and frame rates for people streams observed in SIP
calls between two G7500 systems.
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video
input. (For example, Motion or Sharpness.)
Due to the complexities of system capabilities and the call types and scenarios in your environment, it
isn’t possible to provide the resolutions and frame rates for calls between a G7500 system and a different
type of endpoint. The systems attempt to provide the highest resolutions and the best frame rates in all
types of calls.
The information in the following table is based on a camera source capable of 1080p at 60fps.
Supported H.265 People Stream Resolutions During Calls
Supported H.265 Content Stream Resolutions During Calls
The following table includes the H.265 resolutions and frame rates for content streams observed in SIP
calls between two G7500 systems.
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video
input. (For example, Motion or Sharpness.)
Polycom, Inc.84
Configuring Video and Camera Settings
Due to the complexities of system capabilities and the call types and scenarios in your environment, it
isn’t possible to provide the resolutions and frame rates for calls between a G7500 system and a different
type of endpoint. The systems attempt to provide the highest resolutions and the best frame rates in all
types of calls.
Supported H.265 Content Stream Resolutions During Calls
ResolutionSharpness Max Frame Rate (fps)Motion Max Frame Rate (fps)
1920 × 10803030
2560 × 14403030
2880 × 16201515
3200 × 18001515
3840 × 21601515
H.264 Advanced Video Coding
Your G7500 system supports H.264 during H.323 and SIP calls.
Supported H.264 People Stream Resolutions During Calls
The following table includes the H.264 resolutions and frame rates for people streams observed in H.323
calls between two G7500 systems.
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video
input. (For example, Motion or Sharpness.)
Due to the complexities of system capabilities and the call types and scenarios in your environment, it
isn’t possible to provide the resolutions and frame rates for calls between a G7500 system and a different
type of endpoint. The systems attempt to provide the highest resolutions and the best frame rates in all
types of calls.
The information in the following table is based on a camera source capable of 1080p at 60fps.
Supported H.264 People Stream Resolutions During Calls
Supported H.264 Content Stream Resolutions During Calls
The following table includes the H.264 resolutions and frame rates for content streams observed in H.323
calls between two G7500 systems.
Resolutions and frame rates are based on the call speed and the Optimized for setting of your video
input. (For example, Motion or Sharpness.)
Due to the complexities of system capabilities and the call types and scenarios in your environment, it
isn’t possible to provide the resolutions and frame rates for calls between a G7500 system and a different
type of endpoint. The systems attempt to provide the highest resolutions and the best frame rates in all
types of calls.
Supported H.264 Content Stream Resolutions During Calls
ResolutionSharpness Max Frame Rate (fps)Motion Max Frame Rate (fps)
800 × 6003060
1024 × 7683060
1280 × 7203060
1280 × 10243060
1920 × 10803060
Polycom, Inc.86
Setting Up a Directory
Topics:
▪Register with the Polycom Global Directory Server
▪Register with an LDAP Directory Server
▪Managing Contacts and Favorites
You can register your G7500 system with a directory to call contacts in your organization.
The system supports the following directory features:
▪Up to 2,000 Favorites
▪Up to 200 Favorites groups
▪Global groups (local groups aren’t supported)
▪Up to 4,000 contacts from a Polycom GDS server
Register with the Polycom Global Directory Server
You can register your G7500 system with the Polycom Global Directory Server (GDS).
Enable H.323 on your system before you register it with this directory server.
Procedure
1. In the system web interface, go to Servers > Directory Servers.
2. In the Server Type field, select Polycom GDS.
3. Configure the following settings:
SettingDescription
Server AddressSpecifies the IP or DNS address of the Polycom
GDS.
PasswordThe Polycom GDS password, if one exists.
4. Select Save.
Register with an LDAP Directory Server
You can register your G7500 system with an LDAP directory server.
Procedure
1. In the system web interface, go to Servers > Directory Servers.
2. In the Server Type field, select LDAP.
3. Configure the following settings:
Polycom, Inc.87
Setting Up a Directory
SettingDescription
Server AddressSpecifies the address of the LDAP directory server.
When provisioned, this setting is read-only.
Server PortSpecifies the port for connecting with the LDAP
server. When provisioned, this setting is read-only.
Base DN (Distinguished Name)Specifies the top level of the LDAP directory where
searches begin. When provisioned, this setting is
read-only.
To avoid LDAP registration issues, make sure the
base DN is at least one level deeper than your
domain. For example, enter
ou=users,dc=example,dc=com instead of
dc=example,dc=com.
Multitiered Directory Default Group DNSpecifies the top-level group of the LDAP directory
required to access its hierarchical structure. When
provisioned, this setting is read-only.
Authentication TypeSpecifies the protocol for authenticating with the
LDAP server: NTLM, Basic, or Anonymous.
Bind DN (Distinguished Name)Specifies the bind DN when using basic
authentication. Available only when you set
Authentication Type to Basic. When provisioned,
this setting is read-only.
Use SSL (Secure Socket Layer)When enabled, encrypts data to and from the
LDAP server.
Domain NameSpecifies the domain name for registering with the
LDAP server.
User NameSpecifies the user name for registering with LDAP
server.
PasswordSpecifies the password for registering with the
LDAP server.
4. Select Save.
Related Links
Configure Minimum TLS on page 56
LDAP Directory Server Ignores the Minimum TLS Version Setting on page 120
Polycom, Inc.88
Managing Contacts and Favorites
You can create local contacts and designate favorites for your G7500 system.
Manage Contacts
You can add contacts individually or in bulk in the G7500 system web interface.
Procedure
1. Do one of the following:
▪Go to Dashboard > Contacts.
▪Go to Place a Call > Contacts.
2. Select More and choose one of the following options:
▪New Contact: Create a single contact.
▪Import: Upload contacts in bulk using an XML file (can’t exceed 3 MB).
▪Export: Download local contacts to an XML file (doesn’t include contacts available through a
directory server).
Setting Up a Directory
Types of Favorites
The G7500 system web interface displays several types of favorites.
Directory Server RegistrationTypes of Contacts
Polycom GDS
LDAP with H.350
▪Directory entries created locally by the user.
▪References to Polycom GDS entries added to
Favorites by the user.
These entries are available only if you successfully
register the system with Polycom GDS. Users can
delete these entries from Favorites, but they can’t edit
these entries. Users can copy these entries to other
Favorites and remove them from those groups.
▪Directory entries created locally by the user.
▪References to LDAP directory entries added to
Favorites by the user.
These entries are available only if the system can
successfully access the LDAP server. Users can delete
these entries from Favorites, but they can’t edit these
entries. Users can copy these entries to other Favorites
and remove them from those groups.
Polycom, Inc.89
Registering with a Calendaring Service
Topics:
•Configure a Calendaring Service
Your G7500 system can display calendar details linked to a Microsoft Outlook or Office 365 account.
The system retrieves this information from Microsoft Exchange Server with credentials you provide or
through automatic discovery using an associated email or SIP server address.
Your system performs the following actions when you configure it to use a calendaring service:
•Displays the day’s scheduled meetings, including details about each
•Lets users join a meeting with one click or touch
•Hides details about meetings marked private (depending on how you configure the system)
•Displays a meeting reminder and plays a reminder tone before the next scheduled meeting
Configure a Calendaring Service
You must configure your G7500 system to use a calendaring service so users can see scheduled
meetings on the local interface.
Procedure
1. In the system web interface, go to Servers > Calendaring Service.
2. Select the Enable Calendaring Service check box.
3. Configure the following settings:
SettingDescription
EmailSpecifies the email address used when scheduling
the system for a meeting (for instance, you can use
your system as a mechanism to reserve a meeting
space). This email address must match the Primary
SMTP Address for the account on Microsoft
Exchange Server, which displays as the value of
the mail attribute in the account properties.
DomainSpecifies the domain to register to the Microsoft
Exchange Server in NETBIOS or DNS notation (for
example, company.local or COMPANY).
If you are using the Auto Discover Using setting
in the system web interface, don’t provide a value
here.
Polycom, Inc.90
Registering with a Calendaring Service
SettingDescription
User NameSpecifies the user name to register to the Microsoft
Exchange Server. This can be the name of the
system or an individual (for example,
username@company.com).
If you want to use the calendar associated with an
Office 365 account, enter the user name for that
account here.
PasswordSpecifies the system password to register to the
Microsoft Exchange Server. This can be the
system's or an individual’s password.
If you want to use the calendar associated with an
Office 365 account, enter the password for that
account here.
Auto Discover UsingSpecifies how the system obtains the Microsoft
Exchange Server address. If you select Email
Address, the system uses the value provided in
the Email field. If you select SIP Server, the
system uses the registered SIP server domain
name configured for the system.
With either option, you must complete the Email,
User Name, and Password fields that correspond
to the account you want the system to use for the
calendaring service. The system may prompt you
to confirm the password.
Note: This feature is unavailable if the Microsoft
Exchange Server address is provisioned.
If after configuring the calendaring service a
message displays that the system is unable to
discover the service, verify that the information you
provided is correct.
You can also use an API command to automatically
discover the Microsoft Exchange Server address.
For more information, go to Polycom Support
.
Microsoft Exchange ServerSpecifies the FQDN of the Microsoft Exchange
Client Access server. If your organization has
multiple servers behind a network load balancer,
this is the FQDN of the server’s virtual IP address.
If required, you can use an IP address instead of
an FQDN, but Polycom recommends using the
same FQDN for Outlook clients.
Provide a value here only if you want to manually
provide connection information to the Microsoft
Exchange Server. Otherwise, use the Auto
Discover Using setting to automatically populate
this field.
Polycom, Inc.91
Registering with a Calendaring Service
SettingDescription
Meeting Reminder Time in MinutesSpecifies the number of minutes before the
meeting that a reminder displays on the system.
Play Reminder Tone When Not in a CallSpecifies whether to play a sound along with the
text reminder (when the system is not in a call).
Show Information for Meetings Set to PrivateSpecifies whether to display details about meetings
marked private.
4. Select Save.
After you register your system to the calendaring service, users can join scheduled meetings from the
Home and Calendar screens on the local interface.
Polycom, Inc.92
Sharing Content
Topics:
▪Default Options for Sharing Content
▪Disable Screen Mirroring Options
Your G7500 system provides several ways to share and annotate content.
Related Links
End a Content Session from the System Web Interface on page 9
Disable the Security Code on page 54
Limit or Disable the Ability to Save Content on page 55
Default Options for Sharing Content
Once your G7500 system is running and configured for your environment, users can share content from
their personal devices with no additional setup using the following methods:
▪Wireless screen mirroring:
◦A Miracast-certified device screen is mirrored onto the system display.
◦An AirPlay-certified device screen and any accompanying audio is mirrored onto the system
display.
You can disable these options in the system web interface.
▪Wired input: A laptop or desktop connected through HDMI on the back of the system.
▪Polycom Content App: Installed on a Microsoft Windows or Apple Mac system for wireless screen
or application sharing.
Related Links
Video Codec Capabilities on page 84
Related Links
Disable Wireless Options on page 40
Disable Screen Mirroring Options
You can disable content sharing with Miracast- or AirPlay-certified devices (screen mirroring) without
turning off wireless connectivity or Bluetooth on your G7500 system. Screen mirroring options are
enabled by default.
Procedure
1. In the system web interface, go to Security > Wireless Security.
2. Do one of the following:
▪Clear the Enable AirPlay check box to disable screen mirroring with AirPlay-certified
devices.
▪Clear the Enable Miracast check box to disable screen mirroring with Miracast-certified
devices.
Polycom, Inc.93
Customizing the Local Interface
Topics:
▪Change the Home Screen Background Image
▪Restore the Default Background Image
▪Customize the Address Bar
▪Display Meetings or Favorites on the Home Screen
▪Configure Dual Monitor Display Settings
You can configure some of the G7500 system local interface settings according to your preferences.
Change the Home Screen Background Image
You can upload a custom background image to display on your G7500 system monitor(s).
The image must have a 16:9 resolution between 1280 × 720 and 3840 × 2160 (Polycom recommends
1920 × 1080, 2560 × 1440, or 3840 × 2160). The system supports JPEG and PNG formats with a file size
of less than 10 MB.
Note:This option is unavailable if your image is provisioned to the system.
Procedure
1. In the system web interface, go to General Settings > Home Screen.
2. Select Choose File, navigate to the image file, then select Upload.
The custom image displays on your monitor(s).
Restore the Default Background Image
You can switch back to the default background image to display on your G7500 system monitor(s).
Procedure
1. In the system web interface, go to General Settings > Home Screen.
2. Select Use Default Background.
Customize the Address Bar
You can customize what displays in the address bar of the G7500 system local interface home screen.
The address bar is under the room name. You can list two of the following details:
▪Primary IP Address
▪Guest Wi-Fi IP Address
▪H.323 Extension
▪SIP Address
Polycom, Inc.94
Customizing the Local Interface
▪None
Procedure
1. In the system web interface, go to General Settings > Home Screen.
2. Choose options for Primary Element and Secondary Element (your changes save
automatically).
Display Meetings or Favorites on the Home Screen
You can display meeting information or favorite contacts on the home screen of the G7500 system local
interface.
Procedure
1. In the system web interface, go to General Settings > Home Screen.
2. Configure the following settings (your changes save automatically):
SettingDescription
NoneHides the home screen widget.
CalendarDisplays meeting information on the home screen.
FavoritesDisplays favorites on the home screen.
Configure Dual Monitor Display Settings
You can choose your Self View and content display preferences when you connect two monitors to your
G7500 system.
Even if your system has only one monitor, you can still configure second monitor settings. These settings
take effect once you connect a second monitor.
Procedure
1. In the system web interface, go to Audio/Video > Monitors.
2. Configure the following settings (your changes save automatically):
SettingDescription
Self View SizeSpecifies how the self view window displays when
others join a call.
▪Corner: Displays Self View in the corner of
Monitor 2.
▪Full Screen: Displays Self View on the entire
screen of Monitor 2.
Polycom, Inc.95
SettingDescription
Content DisplaySpecifies whether to display content on one or two
Related Links
Configure Monitor Settings on page 77
Configure a Touch Monitor on page 78
Customizing the Local Interface
monitors.
▪Single: Display content on Monitor 2 and
people on Monitor 1.
▪Dual: Display people and content on Monitor 1
and content only on Monitor 2.
Polycom, Inc.96
System Maintenance
Topics:
▪Activating System Features
▪Unlock System Settings
▪Updating Software
▪Downgrading Software
▪Restart the System
▪Reset System Settings
▪Factory Restore the System
▪Factory Restore a Table Microphone
▪Factory Restore a Ceiling Microphone
▪Factory Restore a Microphone Adapter
▪SNMP Reporting
You can perform several functions to keep your G7500 system running properly.
Activating System Features
The G7500 system uses keys to identify the features and software updates you ordered.
Obtain a Feature Activation or Software Version Key
To activate features or update software, you must obtain a key that’s valid only with your system. If you
don’t have a support agreement, contact an authorized Polycom dealer to get a key.
A key is a number that unlocks certain features or gives you the ability to update your G7500 system.
You can obtain one of the following key types:
▪Feature activation key makes new system features available and is valid for all software releases.
Note:Software version 2.0 enables all available G7500 system features by default. With this
version, you don’t need to enter a feature activation key.
▪Software version key is valid for the update you want to install and any future feature,
maintenance, or patch releases.
Procedure
1. Go to Licensing & Product Registration > Activation/Upgrade at Polycom Support.
2. Select the product name in the prompted list.
3. Do one of the following:
▪Log in with your email address and password.
▪Register as a new user.
Polycom, Inc.97
System Maintenance
4. Do one of the following:
▪To update one system, select Site & Single Activation/Upgrade. Follow the onscreen
instructions to enter your system serial number and license. Go to the Upgrade tab to
confirm the version upgrade key code.
▪To update multiple systems that are covered by a software service agreement, select Batch
Upgrade and then select your product. Follow the onscreen instructions to upload the text
file that contains your system license and serial numbers (or serial numbers only).
The Batch Activation option isn’t available for version 2.0.
Activate Features
To activate certain features for your G7500 system, you must enter a feature activation key.
Procedure
1. In the system web interface, go to General Settings > License.
2. Enter the Feature Activation Key you obtained for your system.
3. Select Save.
Get the Latest Software
To update your G7500 system, you must first enter a software version key.
Procedure
1. In the system web interface, go to General Settings > License.
2. Enter the Software Version Key you obtained for your system.
3. Select Save.
Unlock System Settings
Some settings in the local interface are locked by default. You can unlock these settings with your G7500
system’s local administrator credentials.
Procedure
1. Do one of the following:
▪In a call, select Menu > More > Settings .
▪Out of a call, select Menu Settings .
2. Select a setting with a Lock .
3. Enter your local administrator credentials to unlock the setting.
Note:Settings lock again if you exit the Settings screen, restart the system, or power off the
system.
Updating Software
You can update your G7500 system software a few different ways.
Use one of the following methods to update system software:
Polycom, Inc.98
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.