Polycom® and the Polycom logo design are registered trademarks of Polycom, Inc. V500™, Global Management
System™, People+Content IP™, and Siren™ are trademarks of Polycom, Inc. in the United States and various other
countries. All other trademarks are the property of their respective owners.
Patent Information
The accompanying product is protected by one or more U.S. and foreign patents and/or pending patent applications
held by Polycom, Inc.
Polycom Inc.
4750 Willow Road
Pleasanton, CA 94588-2708
USA
No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for
any purpose, without the express written permission of Polycom, Inc. Under the law, reproducing includes translating
into another language or format.
As between the parties, Polycom, Inc. retains title to, and ownership of, all proprietary rights with respect to the software
contained within its products. The software is protected by United States copyright laws and international treaty
provision. Therefore, you must treat the software like any other copyrighted material (e.g. a book or sound recording).
Every effort has been made to ensure that the information in this manual is accurate. Polycom, Inc. is not responsible
for printing or clerical errors. Information in this document is subject to change without notice.
About this Guide
The Administrator’s Guide for the V500™ System is for administrators of the
V500 system who need to configure, customize, manage, and troubleshoot the
V500 system.
The following related documents for the V500 system are available at
www.polycom.com/videodocumentation:
•Setting Up the System, which describes how to set up the hardware
•Getting Started Guide for the V500 System, which describes how to perform
video conferencing tasks
•Setup Sheets, which describe how to install optional hardware
•Release Notes
For support or service, please contact your Polycom® distributor or go to
Polycom Support at www.polycom.com/support.
Polycom recommends that you record the serial number and option key of
your V500 system here for future reference. The serial number for the system
is printed on the unit.
System Serial Number: ____________________________________________
Your V500 video conferencing system is a state-of-the-art visual collaboration
tool. With crisp, clean video and crystal-clear sound, your V500 system
provides the essential tools your home or small business needs for video
conferencing over broadband networks.
When you use a V500 system for collaborating, you can exchange ideas and
share documents with people anywhere in the world, as if they were all in the
room with you. Everyone’s productivity increases, without any travel
required.
1
System Components
This section describes the standard components that come with the
V500 system. For technical specifications and detailed descriptions of these
features, please refer to the product literature at www.polycom.com.
Additional options may also be available. For more information, please
contact your Polycom distributor.
1 - 1
Administrator’s Guide for the V500 System
Two models of the V500 system are available — IP only, and IP with ISDN.
NameComponentDescription
V500 systemThe V500 system delivers high-quality,
face-to-face video communication in a sleek
package that includes the camera and microphone.
Remote ControlThe remote control is designed to make it easy to
set up and operate the system — color-coded
buttons correspond to system features.
Composite video
cable
LAN cableThe LAN cable connects the system to the IP
BRI cable
(ISDN model only)
Power supplyThe power supply connects power to the system.
DocumentationRead Me First
The composite video cable is a triple RCA cable
with S-video that connects the V500 system to a
monitor.
network.
The BRI cable connects the system to the ISDN.
Setting Up the V500 System
V500 system documentation CD
Key Features
Industry-Leading Audio and Video Quality
•Best-in-class video algorithms — The H.264 video algorithm provides
•State-of-the-art audio quality — The V500 system offers Polycom Siren™
1 - 2
smooth, natural TV-like video at data rates up to 768 kbps.
14, 14 kHz wideband audio that delivers CD-quality sound.
•Video Error Concealment — The H.264 Video Error Concealment feature
enhances your video experience by reducing full-frame refreshes,
concealing errors, and minimizing the chance that the frame will freeze.
•Audio Error Concealment — When packet loss occurs due to traffic or
network instability, Audio Error Concealment works automatically to
reduce the loss of sound bits during calls, resulting in smooth, consistent
audio.
•Adjustable bandwidth for content — The call quality preference can be
set to Content (90% content, 10% people), People (10% content, 90%
people), or Both (50% content, 50% people).
Rich Conference Experience
•Content display — Install the People+Content™ IP feature on your PC or
laptop, and then use the V500 system to show content (such as
spreadsheets and video clips) to other sites in the video conference.
•Split-screen viewing — Use Dual Monitor Emulation (split-screen
viewing) to see more even when you only have room for one monitor.
Introducing the V500 System
•Language independence — Use the V500 system user interface, remote
control, and web interface in any of twelve languages.
Enhanced User Experience
•Customizable home screen — Customize the home screen to support
different types of users:
— Novice users — Offer just a few options, so users need little or no
— Advanced users — Provide a wide range of video conferencing
•Customizable look and feel — Set up the workspace to suit your
environment.
•Easy-to-use remote control — Navigate through the configuration screens
and place calls easily using the color-coded remote control buttons.
•Many ways to use the directory — Find information in the directory using
the method you find most convenient.
•Call Scheduler — Use the calendar and call scheduling feature to schedule
video conferences. The system automatically calls the site you selected on
the date and time you specified. For recurring calls, you can indicate
whether you want the system to automatically make the call daily, weekly,
or monthly.
training.
features.
1 - 3
Administrator’s Guide for the V500 System
Easy Installation
•Firewall (UPnP™) support — The V500 system offers support for routers
that support UPnP (Universal Plug and Play) NAT traversal, making
video conferencing setup easier for users in homes and small offices.
•IP or ISDN calling — The V500 system has a built-in 10/100 Mb Ethernet
port for IP calls. Add the optional single BRI network interface to make
calls over your ISDN telephone lines.
•Easy configuration wizard — The system setup wizard detects your
network connections and guides you through configuring the system to
work on an IP network or ISDN.
•Fully broadband capable — The standards-compliant V500 system works
with any other H.323 system.
•Auto-sensing power supply — The system automatically adjusts for line
voltages from 90 to 260 V and line frequencies from 47 to 63 Hz.
Security and Network Management
•AES encryption — Enable the integrated AES encryption to automatically
encrypt calls to other AES-capable systems, without external encryption
equipment.
•Remote access — Configure, manage, and monitor the system from a
remote computer using the V500 web interface (the system’s web
interface), the Polycom Global Management System
™
, or SNMP.
Alternatively, you can choose not to allow remote management.
•Secure system management — Use the local administrator’s password on
the system to prevent others from changing system configuration while
allowing yourself to manage the system.
•Room monitoring — Monitor rooms in or out of a call using the Web
Director feature, accessible through the V500 web interface.
•Call Detail Reports — Access the system’s call history from the V500 web
interface. You can download the data to a spreadsheet application for
sorting and formatting.
•Remote diagnostics — Identify and correct issues that affect the video
conferencing experience using tools in the V500 web interface.
•SNMP reporting — Receive SNMP traps that can indicate conditions.
1 - 4
Setting Up Your System Hardware
This chapter provides information to supplement the setup sheet provided
with your system and its optional components. A printed copy of the system
setup sheet is provided with each V500 system. PDF versions of the system
setup sheets are available at www.polycom.com/videodocumentation.
V500 System Back Panel View
This illustration identifies the system’s back panel connectors.
2
S-video output from system
For monitor video (preferred
over Composite video output)
BRI port
For ISDN calls
(not present on
IP-only systems)
Composite video output
from system
For monitor video (if S-video
output is not used)
Headphone jack
For optional headphone
BRI
Audio output from
system
For monitor audio
Power connector
For power supply
Power switch
DC IN 12V
LAN
LAN port
For IP calls, the V500 web
interface, or remote
management
2 - 1
Administrator’s Guide for the V500 System
1.
Positioning the System
Position the system so that the camera does not face toward a window or other
source of bright light.
To position the system:
¾ Place the V500 system on top of your TV monitor. For optimal audio and
video performance, locate the monitor within 5 to 10 feet (1.5 to 3 meters)
away from the people in the call.
5'-10'
Connecting the Monitor
You must connect a television monitor to the V500 system. You can use either
an NTSC or PAL monitor, depending on your system.
The back panel view, shown on page 2-1, shows the location of the connectors
used for the monitor.
To connect a monitor to the system:
1. Connect a yellow connector on the monitor cable from the S-video or
composite video output on the back of the system to the monitor.
You must use the same type of connector on the V500 system as on the
monitor. For example, if you use the S-video connector on the system, use
the S-video connector on the monitor.
Polycom recommends using S-video because it provides superior video
quality.
2. Connect the red and white connectors on the monitor cable from the
audio outputs on the back of the system to the monitor’s audio inputs.
2 - 2
Connecting the System to the Network
This section tells you how to physically connect the system to the LAN or to
ISDN (if you purchased the optional ISDN BRI network interface).
The back panel view, shown on page 2-1, shows the location of the LAN and
ISDN BRI connectors.
Connecting to the LAN
The V500 system comes standard with a LAN cable.
You must connect the system to a LAN to:
•Make IP or SIP calls
•Use the Global Directory Server
•Use the V500 web interface
•Update system software using the Polycom Softupdate program
Setting Up Your System Hardware
To connect the system to the LAN:
¾ Connect the LAN cable from the LAN connector on the back of the system
to the LAN.
Connecting to the ISDN BRI Network
The V500 system is available with the optional ISDN BRI network interface,
which allows you to make ISDN calls.
If your site does not use an internal telephone system (PBX), you may need an
NT-1 device to connect to the ISDN BRI network. A PBX or an NT-1 device
provides the S/T interface that the system’s BRI network interface requires.
To connect the system to the ISDN BRI network:
1. Make sure the system is powered off.
2. Connect the BRI cable from the BRI connector on the back of the system to
ISDN or to your NT-1 device, as appropriate.
3. If you are using an NT-1 device, connect it to the ISDN.
2 - 3
Administrator’s Guide for the V500 System
Connecting Headphones
You can connect optional headphones to the V500 system to listen to your calls
privately.
The back panel view, shown on page 2-1, shows the location of the headphone
jack.
To connect headphones to the system:
¾ Connect the headphone cable to the headphone jack on the back of the
system.
Installing Batteries in the Remote Control
The remote control uses three AAA batteries, which are included with the
system.
To install batteries in the remote control:
1. Remove the battery cover from the back of the remote control.
2. Refer to the diagram inside the remote control, and install the batteries in
the orientation shown.
3. Reinstall the battery cover on the remote control.
Powering On the System
The V500 system has an external power supply.
Do not use a power supply other than the one supplied with your V500 system.
Using the wrong power supply will void the warranty and may damage your system.
The back panel view, shown on page 2-1, shows the location of the power
connector and power switch.
To connect power and power on the system:
1. Connect the power supply to the power connector on the back of the
2. Connect the power cord to the power supply.
2 - 4
system.
Setting Up Your System Hardware
3. Make sure you have connected all equipment to the system, and then
connect the power cord to a wall outlet.
4. Press the power switch located at the back of the system.
2 - 5
Administrator’s Guide for the V500 System
2 - 6
Configuring Network Use
The V500 system is factory configured to enable you to easily and quickly
make video calls in most network situations. In many cases, you simply need
to physically connect the system as described in Chapter 2, power it on, and
follow the setup wizard.
However, because networks vary from business to business and home to
home, you may need to change some of the default settings or perform other
network configuration. For example, if you’re using a router, you need to
configure that router to allow video calls.
This chapter begins by helping you determine which type of network
configuration you have. It then provides you with the steps you need to take
to prepare your particular network for video calling. It also describes the
various IP and ISDN settings, and which of these you may need to change for
your network environment. For example, if you have a gatekeeper and
gateway, this chapter describes how to configure those.
3
Once you have done this, you can set your call preferences and, if you choose,
set up your system to use the global directory. Then you’re ready to place your
first test call. This chapter describes how to perform all of these tasks, so that
you can successfully enjoy video calling with your V500 system.
3 - 1
Administrator’s Guide for the V500 System
Using the Setup Wizard
When you power on the system for the first time, a setup wizard begins to run.
The setup wizard automatically detects your system’s IP and ISDN
connections, and it leads you through the minimum steps you need to take to
place a video call.
As you go through the setup wizard, you may need additional information or
you may want to change a default setting. If this is your situation, refer to the
rest of this chapter. You will find information there about how to configure
your IP and ISDN connections for your particular network environment.
The setup wizard enables you to set an administrator password, which allows
you to limit access to the Admin Settings. The default administrator password
is the system’s serial number.
Make sure you can recall the administrator password if you set one. If you forget the
password, you will have to reset the system, delete the system files, and run the
setup wizard again in order to access the Admin Settings and reset the password.
You cannot set the administrator password from a remote location.
You can run the setup wizard or view the configuration screens in either of
these two ways:
•Directly on the system — Use the remote control to navigate the screens
and enter information. You can use the number pad on the remote control
to enter text just like you can with a cell phone.
•From a remote location — Use a web browser to access the V500 web
interface. To do this, your network must be set up and you need to know
the IP address of the system; therefore, this may not be an option if you are
installing your system for the first time in a new location.
You can use the V500 web interface to configure all of the system settings
except the remote management settings. These settings must be configured on
the local system by an administrator. For more information about the V500
web interface, refer to refer to Managing the System Remotely on page 5-1.
3 - 2
Configuring Your IP Connection
To configure your IP network connection, you need to:
•Configure LAN properties
•Set up your IP network connection
•Configure IP network support
Configuring LAN Properties
The first step in setting up your IP connection is to configure the LAN
properties.
If you are connecting your V500 system directly to a cable or DSL modem,
before you begin you need to know the public IP address assigned to your
syste m by your Internet Service Provider (ISP ). Your ISP will provide you with
one of these IP addresses:
•Static IP address – This address is reserved for your system and will not
change. When you configure the LAN properties of the system, choose the
Enter IP Address Manually option. Your ISP should also provide you
with the DNS server address, default gateway address, subnet mask, and
WINS server IP address.
Configuring Network Use
•Dynamic IP address – This address is obtained from your ISP’s DHCP
server and, therefore, may change. When you configure the LAN
properties of the system, choose the Obtain IP Address Automatically
option. When you choose this option, the DNS server address, default
gateway address, and other settings should fill in automatically.
To configure LAN properties:
1. Go to System > Admin Settings > LAN Properties.
2. Configure these settings:
SettingDescription
Connect to my
LAN
Allow IP CallsEnables the system to make and receive IP calls.
Host NameIndicates the system’s DNS name.
Specifies whether the system is part of the LAN.
Changing this setting causes the system to restart.
Changing this setting causes the system to restart.
3 - 3
Administrator’s Guide for the V500 System
SettingDescription
IP AddressSpecifies how the system obtains an IP address.
•Obtain IP address automatically — Select if the
system gets an IP address from the DHCP server on the
LAN.
•Enter IP address manually — Select if the IP address
will not be assigned automatically.
Changing this setting causes the system to restart.
Your IP Address
is
or
Use the Following
IP Address
If the system obtains its IP address automatically, this area
displays the IP address currently assigned to the system.
If you selected Enter IP Address Manually, enter the IP
address here.
Changing the IP address causes the system to restart.
Domain NameDisplays the domain name currently assigned to the system
if the system is a member of a corporate domain.
If the system does not automatically obtain a domain name,
enter one here if needed for your corporate network.
3. Select and configure these settings:
SettingDescription
DNS ServersDisplays the DNS servers currently assigned to the system.
If the system does not automatically obtain a DNS server address,
enter up to four DNS servers here.
Changing this setting causes the system to restart.
Default
Gateway
Displays the gateway currently assigned to the system. (If you are
using a router for Internet access, the Default Gateway will be the
router’s internal address.)
If the system does not automatically obtain a gateway IP address,
enter one here.
Changing this setting causes the system to restart.
Subnet MaskDisplays the subnet mask currently assigned to the system.
WINS ServerDisplays the WINS server currently assigned to the system.
WINS
Resolution
3 - 4
If the system does not automatically obtain a subnet mask, enter
one here.
Changing this setting causes the system to restart.
If the system does not automatically obtain a WINS server IP
address, enter one here.
Changing this setting causes the system to restart.
Sends a request to the WINS server for WINS name resolution.
SettingDescription
LAN SpeedSpecifies the LAN speed to use. Note that the speed you choose
must be supported by the switch.
Choose Auto to have the network switch negotiate the speed
automatically. If you choose 10 Mbps or 100 Mbps, you must also
select a duplex mode.
Note: The LAN speed setting for the V500 and the switch must
match. Polycom strongly recommends that you do not select Auto
for either only the V500 or only the router; the settings for both
must be the same. Typically, selecting Auto for both is sufficient.
Changing this setting causes the system to restart.
Duplex ModeSpecifies the Duplex mode to use. Note that the Duplex mode you
choose must be supported by the switch.
Choose Auto to have the network switch negotiate the Duplex
mode automatically.
Changing this setting causes the system to restart.
Setting Up Your IP Network Connection
Configuring Network Use
The following is a list of the common ways you can connect your V500 to an IP
network so that you can make video calls. Pick out the IP network connection
type that most closely resembles how you plan to make your calls, then read
the section that corresponds to that connection type. If you need help
determining how your V500 connects to the network, contact your network
administrator, network service provider, or Internet Service Provider (ISP).
•If you’re limiting your calls to other systems within your company’s
intranet, refer to Calling Within an Intranet on page 3-5.
•If your V500 system plugs directly into a cable or DSL modem, without a
router in between, refer to Calling Through a Cable or DSL Modem on
page 3-6.
•If your V500 system connects to the network through a router, with or
without a firewall or Network Address Translator (NAT), refer to Calling
Through a Network Router on page 3-6.
•If your V500 system is set up in a Demilitarized Zone (DMZ), refer to
Calling Through a Router, Using a DMZ on page 3-12.
Calling Within an Intranet
An intranet is a private network within a company or organization. Calls
within an intranet don’t access the Internet, so security isn’t an issue. Even if
your company has a firewall, intranet calls remain within the firewall, so you
can easily communicate with anyone within your office network.
3 - 5
Administrator’s Guide for the V500 System
If, therefore, you’re limiting your calls to other systems within your intranet,
you don’t need to perform any additional network configuration to use your
V500. Simply go on to Configuring IP Network Support on page 3-13.
Calling Through a Cable or DSL Modem
You can access the network and make video calls by directly connecting your
V500 to a cable modem or Digital Subscriber Line (DSL) modem, without
using a network router.
If you have a DSL connection and you are in a home environment or your DSL
modem does not maintain a connection state automatically, Polycom recommends
that you use a network router.
Directly connecting your V500 to the network with a cable or DSL modem
does not provide you with a security barrier between your home or business
network and the Internet; however, it is an easy way to set up your V500
network connection.
Visit the Polycom Security Center at www.polycom.com for timely security
information. Systems deployed outside a firewall are potentially vulnerable to
unauthorized access. You can also register to receive periodic email updates and
advisories.
If your V500 system is directly connected to a cable or DSL modem, you don’t
need to perform any additional network configuration to use your V500.
Simply go on to Configuring IP Network Support on page 3-13.
Calling Through a Network Router
Network routers let you connect more than one computer, video conferencing
system, or other device to your cable or DSL modem so that they all can share
the same high-speed network connection. This is accomplished by using
Network Address Translation (NAT) services. Routers also often offer firewall
protection.
•In a typical IP network, all the devices within the network have their own
unique IP address, which is available for everyone in or outside the
network to access. With a NAT, each device within the network retains its
own IP address, but the NAT presents a single IP address to the outside
world. This provides an extra level of security because devices inside the
network are masked behind that single, external IP address.
•A firewall acts as a security barrier between one network and another.
Often that barrier is between a smaller network, like you might have at
your home or business, and an exterior network, such as the Internet. The
firewall prevents unsolicited external network traffic from accessing your
internal network.
3 - 6
Configuring Network Use
Because NATs and firewalls provide security for your network, they limit
outside access to your internal network. Some access, however, is necessary
for video communications. To enable your V500 to freely place and receive
calls with the outside world, while still maintaining protection for your
network, you must open ports in the firewall. This process is known as port forwarding or pinholing.
The following sections describe the steps you need to take to place video calls
through a network router, including:
•Configuring router port forwarding
•Configuring firewall and NAT properties on the V500
Configuring Router Port Forwarding
To make video calls with your V500 system when you have a router, you must
open and assign ports in the firewall. This section describes how to do that
with the most common routers from NetGear®, Linksys®, and D-Link®. Most
other routers require similar procedures.
Before you can change your router configuration, you must know:
•The IP address of your router, which you can find in your router’s
documentation. (Note that many routers use the default address
192.168.1.1.)
•Your router’s administrator name and password, which you can find in
your router’s documentation. (Note that many routers use the default user
name admin and the password blank or password.)
•The IP address that has been assigned to your system if you’re using
DHCP, which you can find on the LAN Properties screen. (See
Configuring LAN Properties on page 3-3 for more information.)
With any router brand or model, you must open the ports listed here:
PortFunctionTCP or UDP
1720H.323 call setupTCP
3230-3235Signaling and control for audio, call,
video, and data/FECC
3230-3253Audio and video RTP media streamsUDP
1503
(optional)
T.120 data collaborationTCP
TCP
Refer to the Actions that Cause the System to Restart section in the Appendix
if you want advanced port configuration information.
3 - 7
Administrator’s Guide for the V500 System
To configure a NetGear router:
1. Check if you have a NetGear MR814v2 or RP614v2 router. If you have a
2. In a browser such as Internet Explorer, type the IP address of your router,
3. Log in to your router setup using the user name and password, which
4. From the Advanced menu on the left of the page, select Port Forwarding.
5. On the Port Forwarding page, select Add Custom Service.
6. On the Ports-Custom Services page, enter this information for the first
SettingDescription
Service NameAny unique identifier (for example, you can use the
Start PortThe specific port or the starting value of the range of
different model, the settings in these steps may vary slightly.
which you can find in your router’s documentation.
you can find in your router’s documentation.
port you need to open (such as port 1720):
text from the Function column in the table on page
3-7).
ports (see the table on page 3-7 for the list of ports).
End PortThe specific port or the ending value of the range of
ports (see the table on page 3-7 for the list of ports).
Server IP AddressThe IP address that the NAT has assigned to your
system.
NetGear routers automatically pass TCP and UDP traffic through the same port.
You do not have to designate TCP or UDP when you open ports.
7. Click Apply.
8. Repeat Steps 5 through 7 of this procedure for the remaining ports that
you need to open. (For the list of ports that you need to open, refer to the
table on page 3-7.)
9. When you have opened and assigned all of the ports listed in the table on
page 3-7, review the Port Forwarding page. Check that all the ports are
correct, enabled, and assigned to the correct Server IP (internal) Address.
To configure a Linksys router:
1. Check if you have a Linksys BEFSX41 router. If you have a different
model, the settings in these steps may vary slightly.
2. In a browser such as Internet Explorer, type the IP address of your router,
which you can find in your router’s documentation.
3 - 8
Configuring Network Use
3. Log in to your router setup using the user name and password, which
you can find in your router’s documentation.
4. Locate the Port Range Forwarding page.
5. Depending on your router model, the Port Range Forwarding page may
be listed in the Advanced menu or the Applications and Gaming menu.
6. On the Port Range Forwarding page, enter this information for the first
port you need to open (such as port 1720):
SettingDescription
ApplicationAny unique identifier (for example, you can use the
text from the Function column in the table on page
3-7).
StartThe specific port or the starting value of the range of
ports (see the table on page 3-7 for the list of ports).
EndThe specific port or the ending value of the range of
ports (see the table on page 3-7 for the list of ports).
TCP/UDPEither TCP or UDP, whichever is listed in the table on
page 3-7 for that particular port or range of ports. If
the table lists both TCP and UDP, enter the
Application twice: once as TCP and once as UDP.
IP AddressThe IP address that the NAT has assigned to your
system.
EnabledCheck this box.
7. Repeat Step 6 of this procedure for the remaining ports that you need to
open. (For the list of ports that you need to open, refer to the table on
page 3-7.)
8. When you have opened and assigned all of the ports listed in the table on
page 3-7, review the Port Range Forwarding list. Check that all the ports
are correct, enabled, and assigned to the correct IP (internal) Address.
To configure a D-Link router:
1. Check if you have a D-Link DI-604 router. If you have a different model,
the settings in these steps may vary slightly.
2. In a browser such as Internet Explorer, type the IP address of your router,
which you can find in your router’s documentation.
3. Log in to your router setup using the user name and password, which
you can find in your router’s documentation.
4. Select the Advanced tab.
5. Click Firewall.
3 - 9
Administrator’s Guide for the V500 System
6. On the Firewall page, enter this information for the first port you need to
SettingDescription
EnabledClick this radio button.
NameAny unique identifier (for example, you can use the
ActionClick Allow.
SourceInterface: WAN
DestinationInterface: LAN
open (such as port 1720):
text from the Function column in the table on page
3-7).
IP Range Start: *
IP Range End: (blank)
IP Range Start: The IP address (internal) that the NAT
has assigned to your system.
IP Range End: (blank)
Protocol: TCP, UDP, or * for both
Port Range: The specific port or the starting and
ending value of the range of ports (see the table on
page 3-7 for the list of ports).
ScheduleClick Always (or select a time for the port to be open).
7. When you have opened and assigned all of the ports listed in the table on
page 3-7, review the Firewall Rules list. Check that all the ports are
correct, enabled, and assigned to the correct IP (internal) Address.
Configuring Firewall and NAT Properties
Once you’ve set up your router, you must configure the V500 system so that it
works with the firewall and NAT.
Before making changes on the Firewall screen, you should know whether or
not your firewall device is H.323 compatible. Firewall devices that are H.323
compatible have been programmed with logic that can detect H.323 video
conferencing traffic as it passes between the LAN and WAN. Because of this,
they are able to open the necessary ports dynamically as needed, on a
call-by-call basis.
Some firewall devices can even insert the NAT Public WAN Address
automatically during the H.323 call. For these devices, it is not necessary to
configure the V500 system with fixed ports or even, in some cases, with NAT.
Check with the manufacturer of your device to see if it supports H.323
compatibility.
3 - 10
Configuring Network Use
To set up the V500 system to work with a firewall and NAT:
1. Go to System > Admin Settings > Network >IP > Firewall.
2. Configure these settings:
SettingDescription
Fixed PortsLets you specify whether to define the TCP and UDP ports.
If you select Fixed Ports, the V500 system will restrict its
port usage to the range of TCP and UDP ports you specify.
(The system defaults to a range beginning with port 3230 for
both TCP and UDP.) If you do not select Fixed Ports, the
system will dynamically allocate ports on a call-by-call
basis.
•If the firewall is not H.323 compatible, enable this option.
•If the firewall is H.323 compatible or if the system is not
behind a firewall, you may not need to enable this
option.
TCP Ports
UDP Ports
Lets you specify the range of TCP and UDP ports used by
the system.
Note: The TCP and UDP port ranges you open here must
match those that you opened for your router (including TCP
port 1720, which allows H.323 traffic). Refer to the previous
section, Configuring Router Port Forwarding on page 3-7,
for information about opening ports for your router.
NAT ConfigurationLets you specify whether the system should attempt to
determine the NAT Public WAN Address automatically.
•If the system is behind a NAT that allows HTTP traffic,
select Auto. The system will attempt to automatically
discover the NAT Public WAN Address.
•If the system is behind a NAT that does not allow HTTP
traffic or if Auto fails to discover the NAT Public WAN
address, select Manual.
•If the system is not behind a NAT, select Off.
•If the system is behind a firewalled NAT router that is
UPnP™ (Universal Plug and Play) certified, select
UPnP.
Many routers used in homes and small businesses
support UPnP NAT traversal. If this is your situation, try
selecting UPnP first. If this selection does not work for
your router, select Auto or Manual.
NAT Public (WAN)
Address
Displays the address that callers from outside the LAN use
to call your system.
If you chose to configure the NAT manually, enter the NAT
Public WAN Address here. You can obtain this address by
looking at your router configuration or by asking your
network service provider.
3 - 11
Administrator’s Guide for the V500 System
SettingDescription
NAT is H.323
Compatible
Address Displayed
in Global Directory
Specifies that the system is behind a NAT that is capable of
translating H.323 traffic.
Lets you choose whether to display this system’s public or
private address in the Global Directory.
Calling Through a Router, Using a DMZ
A Demilitarized Zone (DMZ) is a way to configure a network so that the
device that is in the DMZ (such as the V500) is served by the router, but is
outside the firewall. Depending on your router, configuring the V500 system
to be in the DMZ may affect its ability to communicate locally with other
devices on the internal LAN.
With a DMZ, no unauthorized external connections are allowed with the
devices inside the firewall, but the V500 is allowed free access to the Internet.
Therefore, this configuration leaves the V500 without protection from external
sources.
Visit the Polycom Security Center at www.polycom.com for timely security
information. Systems deployed outside a firewall are potentially vulnerable to
unauthorized access. You can also register to receive periodic email updates and
advisories.
There are two types of DMZs:
•Virtual DMZ — With a virtual DMZ, all ports through the router are
opened for the device in the DMZ (in this case, the V500). This has the
affect of placing the V500 on the outside of the router’s firewall. Keep in
mind, however, that the V500 may still be protected by some global
firewall securities, which may adversely affect video conferencing.
•Physical DMZ — With a physical DMZ, there is an actual, physical port on
your router, usually labeled DMZ, into which you plug your V500 LAN
cable. This port places the V500 physically outside of the firewall, which is
usually less restrictive, but is also less secure.
Typically, you should only use a DMZ when other configurations fail to allow
H.323 traffic to flow through unobstructed. If you do choose to place your
V500 in a DMZ, you must:
1. Make sure your router’s firewall software provides a DMZ.
2. Assign the internal IP address of the V500 to the DMZ.
For more information about how to perform these steps, refer to the
documentation that came with your router.
3 - 12
Loading...
+ 106 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.