Auerswald COMfortel C-400 User manual

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
COMfortel C-400
Konferenztelefon
Provisioning Guide English

2COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Table of Contents
Provisioning Using Configuration Files..................................................4
The Provisioning Process ...........................................................................5
Resynchronization: Configuration File Checking....................................6
Device Restart ........................................................................................7
Configuration File Types .............................................................................8
Data Files ....................................................................................................9
Configuration File Tips and Security .........................................................10
Clearing Parameters with %NULL in Configuration File.......................10
Guidelines for the MAC-specific Configuration File ..............................10
Securing Configuration Files with AES Encryption............................... 11
Configuration File Parameter Guide......................................................13
"sip_account" Module: SIP Account Settings............................................14
General Configuration File Settings......................................................15
MAC-specific Configuration File Settings .............................................29
"network" Module: Network Settings .........................................................31
General Configuration File Settings......................................................31
MAC-specific Configuration File Settings .............................................33
"provisioning" Module: Provisioning Settings ............................................36
"time_date" Module: Time and Date Settings............................................42
"log" Module: Log Settings ........................................................................47
"remoteDir" Module: Remote Directory Settings .......................................49
"web" Module: Web Settings .....................................................................56

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 3
"user_pref" Module: User Preference Settings .........................................57
General Configuration File Settings......................................................57
MAC-specific Configuration File Settings .............................................59
"call_settings" Module: Call Settings.........................................................62
"speed_dial" Module: Speed Dial Settings ................................................65
"ringersetting" Module: Distinctive Ringer Settings ...................................66
"file" Module: Imported File Settings .........................................................67
General Configuration File Settings......................................................67
MAC-specific Configuration File Settings .............................................68
"tone" Module: Tone Definition Settings ....................................................70
"profile" Module: Password Settings .........................................................74
General Configuration File Settings......................................................74
MAC-specific Configuration File Settings .............................................75
"page_zone" Module: Paging Zone Settings.............................................76
"softkey" Module: Custom Soft Key Settings.............................................78

4COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Provisioning Using Configuration Files
Provisioning using configuration files is the quickest way to configure multiple
COMfortel C-400. You can place configuration files on a provisioning server, where
the devices retrieve the files and update their configuration automatically.
Configuration files have the extension .cfg and contain settings that will apply to the
devices. To edit a configuration file, open it with a text editor such as Notepad.
The settings within a configuration file are grouped into modules. Most of the
modules group their settings in the same way that settings are grouped on the
device's WebUI. For example, the "time_date" module in the configuration file
contains the same settings that are on the Time and Date WebUI page. For a
complete list of COMfortel C-400 configuration file modules and their associated
parameters, see “Configuration File Parameter Guide” on page 13.
Using the WebUI, you can also import a configuration file and apply the
configuration file settings to the device. For more information, see chapter
„Provisioning“ in the “Advanced Information“ manual.
This chapter covers:
“The Provisioning Process” on page 5
“Configuration File Types” on page 8
“Data Files” on page 9
“Configuration File Tips and Security” on page 10.

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 5
The Provisioning Process
The automatic provisioning process is as follows:
1. Check for new or updated configuration files. For file-checking options, see
chapter „Provisioning“ in the “Advanced Information“ manual and
“Resynchronization: Configuration File Checking” on page 6 here in this
document. The device maintains a list of the last loaded provisioning files. The
device compares its current configuration against the files it finds on the
provisioning server. Checking for update… appears on the screen.
If provisioning has been triggered by the resync timer expiring or by remote
check-sync, the device checks for updated files after one minute of inactivity.
2. Download the configuration files.
If any file on the provisioning server has changed, the device treats it as a new
file and downloads it.
If the provisioning URL specifies a path only with no filename, then by default
the device looks for and retrieves the following two files:
General file: comfortel_c-400.cfg.
MAC-specific file: comfortel_c-400_<MAC Address>.cfg.
If the provisioning URL specifies both a path and filename, then the device
retrieves only the configuration file specified.
3. The device restarts after one minute of inactivity.
During provisioning, the device reads the configuration file and validates each
module and setting. The device considers a setting valid if it is:
a valid data type
formatted as a valid setting
within a valid data range

6COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
part of a module that passes an integrity check. That is, the module's
settings are consistent and logical. For example, in the "network" module,
if DHCP is disabled, but no static IP address is specified, the module will
fail the integrity check and none of the settings will apply.
Invalid modules or invalid settings are skipped and logged as ERROR messages in
the system log, but will not interrupt the provisioning process. The system log will
include the module parameters that have not been applied. A recognized module
with unrecognized settings will cause all other settings in that module to be skipped.
A successful configuration or firmware update is reported as an INFO message in
the system log.
See “Configuration File Parameter Guide” on page 13 for the options and value
ranges available for each configuration file setting.
Resynchronization: Configuration File Checking
You can select a number of options that determine when the device checks for new
configuration files. This process of checking for configuration files is called
Resynchronization. Resynchronization options are available on the WebUI
Provisioning page, but you can also include them in a configuration file.
The resynchronization options are:
Mode: sets the device to check for a configuration file only, a firmware
update file only, or both types of file.
Never: configuration file checking is disabled.
Bootup: the device checks for new configuration files when it boots up. Any
updates are applied during the boot-up process.
Remote check-sync: enables you to start a resynchronization remotely
using your hosted server's web portal. The Remote check-sync settings are
available only in the configuration file, not the WebUI.
Repeatedly, at a defined interval from 60 to 65535 minutes (45 days).

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 7
Device Restart
If the device needs to restart after an auto-update, the restart happens only after the
device has been idle for one minute.
To prevent users from delaying the update process (auto-updates cannot begin until
the device has been idle for one minute), or to avoid device restarts that might
interfere with incoming calls:
set the resynchronization interval to a suitable period.
upload any new configuration file(s) to your provisioning server after work
hours so that the device will download the file(s) when there is no call
activity.
When you update the device by importing a configuration file using the WebUI, the
device restarts immediately after applying the new settings, regardless of whether
the device is idle.

8COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Configuration File Types
The device is able to retrieve and download two types of configuration file.
Depending on your requirements, you may want to make both types of configuration
file available on your provisioning server.
The two configuration file types are a general configuration file and a MAC-specific
configuration file. The types differ in name only. The formatting of the files' content
is the same.
The general configuration file contains settings that are required by every device in
the system.
The MAC-specific configuration file is a file that only a single device can retrieve.
The MAC-specific configuration file name contains a device MAC address and can
only be retrieved by the device with a matching MAC address.
The filename formats for both files are:
General file: comfortel_c-400.cfg
MAC-specific file: comfortel_c-400_<MAC Address>.cfg
For more information about the MAC-specific configuration file, see “Guidelines for
the MAC-specific Configuration File” on page 10.
If the provisioning URL specifies a path only with no filename, then by default the
device will fetch both files.
However, if the provisioning URL specifies both a path and filename, then the
device will only fetch the single configuration file specified.
Both the general and MAC-specific files can contain any of the available
configuration settings. A setting can appear in the general configuration file or the
MAC-specific configuration file, or both files, or neither file. If a setting appears in
both files, the setting that is read last is the one that applies.
When the device fetches both a general and a MAC-specific configuration file, the
general file is processed first. You can configure a setting for most of your
COMfortel C-400s in the general file, and then overwrite that setting for just a few
COMfortel C-400s using the MAC-specific file.

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 9
Data Files
The configuration file can also include links to data files for product customization.
Allowed data types include the following:
Directory (contacts, blacklist) in .xml format
Certificates (server, provisioning, LDAP, Broadsoft) in .pem format
Logos (a bootup logo and an idle screen logo) in .bmp format
Links to data files are in the configuration file's "file" module. This is where you enter
any URLs to the data files that the device may require.
None of the data files are exported when you export a configuration file from the
device. However, you can export a Directory or Blacklist .xml file using the WebUI.
After modifying the .xml file, you can use the configuration file "file" module to have
the device import the new file. For a complete list of data file parameters, see “"file"
Module: Imported File Settings” on page 67.

10 COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Configuration File Tips and Security
All configuration settings are initially stored in a configuration template file. Copy,
rename, and edit the template file to create a general configuration file and the
MAC-specific configuration files you will need. You can store the general
configuration file and the MAC-specific files on your provisioning server.
Do not modify the configuration file header line that includes the model and
firmware version.
To save yourself time and effort, consider which settings will be common to all (or
the majority of) COMfortel C-400s. Such settings might include call settings,
language, and NAT settings. You can then edit those settings in the configuration
template and save it as the general configuration file. The remaining settings will
make up the MAC-specific configuration file, which you will have to copy and edit
for each device.
Clearing Parameters with %NULL in Configuration File
For configuration file parameters that can have a text string value, you can clear the
value of the parameter by applying the value %NULL in the configuration file.
For example: sip_account.1.display_name = %NULL
However, the following parameters are exceptions. Applying the value %NULL to
these parameters will reset them to their default value.
file.bootup_logo: applying %NULL restores the default value
file.idle_logo: applying %NULL restores the default value
Guidelines for the MAC-specific Configuration File
The device downloads the MAC-specific configuration file after the general
configuration file. You must create a MAC-specific configuration file for each device
in your system. The file name must contain the device MAC address, which is

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 11
printed on a label on the bottom of the device, or available on the MENU > Status
> Product Info screen. For example, a device with the MAC address of
00:11:A0:10:6F:2D would download the comfortel_c-400_0011A0106F2D.cfg file.
The MAC-specific configuration file contains settings intended exclusively for that
COMfortel C-400. Such settings will include SIP account settings such as display
name, user ID and authentication ID.
Securing Configuration Files with AES Encryption
You can encrypt your configuration files to prevent unauthorized users modifying
the configuration files. The device firmware decrypts files using the AES 256
algorithm. After encrypting a file and placing it on your provisioning server, you can
enable the device to decrypt the file after fetching it from the server.
The procedures in this section use OpenSSL for Windows for file encryption, as
shown in Figure .
To decrypt a configuration file, you will need a 16-character AES key that you
specified when you encrypted the file. The key (or passphrase) is limited to 16
characters in length and supports special characters ~ ^ ` % ! & - _ + = | . @ * : ; ,
? ( ) [ ] { } < > / \ # as well as spaces.
To encrypt a configuration file:
1. (Optional) Place your configuration file in the same folder as the openssl
executable file. If the configuration file is not in the same folder as the openssl
executable file, you can enter a relative pathname for the [infile] in the next step.
2. Double-click the openssl.exe file.
Note: When renaming a MAC-specific configuration file, ensure the filename is all
upper case.
Note: The encryption of configuration files is supported only for the auto
provisioning process. Encrypt files only if you intend to store them on a
provisioning server. Do not encrypt files that you intend to manually import
to the device. You cannot enable decryption for manually imported
configuration files.

12 COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
3. On the openssl command line, type:
enc -aes-256-cbc -pass pass:[passphrase123456] -in [infile] -out
[outfile] -nosalt -p
Elements in brackets are examples, do not enter the brackets. Enter a 16-character
passphrase and the unencrypted configuration file filename (the "infile") and a
name for the encrypted file ("outfile") that will result.
To enable configuration file decryption:
1. On the WebUI, click Servicing > Provisioning.
2. On the Provisioning page under Resynchronization, select Use Encryption
for configuration file.
3. Enter the 16-character passphrase that you created when you encrypted the
configuration file.
4. Click Save.
Note: You must ensure that configuration files are encrypted when enabling AES
Encryption. Decrypting an unencrypted file will result in a garbage file that
is not processed. This will also be logged as an error in the system log.

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 13
Configuration File Parameter Guide
Configuration File Parameter Guide
This chapter lists the available options for all the settings within the COMfortel
C-400 configuration file. Most settings in the configuration file have an equivalent in
the WebUI (see the “Advanced Information“ manual). However, the options you
must enter when editing the configuration file have a different syntax and format.
The settings are divided into modules. Most modules correspond to a page on the
device's WebUI. You may wish to reorganize the modules within the configuration
file itself. The configuration file settings can be listed in any order, and the
configuration file will still be valid.
The modules included in the configuration file are:
“"sip_account" Module: SIP Account Settings” on page 14
“"network" Module: Network Settings” on page 31
“"provisioning" Module: Provisioning Settings” on page 36
“"time_date" Module: Time and Date Settings” on page 42
“"log" Module: Log Settings” on page 47
“"remoteDir" Module: Remote Directory Settings” on page 49
“"web" Module: Web Settings” on page 56
“"user_pref" Module: User Preference Settings” on page 57
“"call_settings" Module: Call Settings” on page 62
“"speed_dial" Module: Speed Dial Settings” on page 65
“"ringersetting" Module: Distinctive Ringer Settings” on page 66
“"file" Module: Imported File Settings” on page 67
“"tone" Module: Tone Definition Settings” on page 70
“"profile" Module: Password Settings” on page 74

14 COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Configuration File Parameter Guide
“"page_zone" Module: Paging Zone Settings” on page 76
“"softkey" Module: Custom Soft Key Settings” on page 78.
"sip_account" Module: SIP Account Settings
The SIP Account settings enable you to set up individual accounts for each user.
You can add up to three accounts for each device. Each account requires you to
configure the same group of SIP account settings. The SIP account settings for
each account are identified by the account number, from 1 to 3 for the device.
For example, for account 1 you would set:
sip_account.1.sip_account_enable = 1
sip_account.1.label = Line 1
sip_account.1.display_name = 1001
sip_account.1.user_id = 2325551001
and so on.
For account 2, you would set:
sip_account.2.sip_account_enable = 1
sip_account.2.label = Line 2
sip_account.2.display_name = 1002
sip_account.2.user_id = 2325551002
and so on, if you have additional accounts to configure.
The SIP account settings follow the format: sip_account.x.[element], where x is an
account number ranging from 1 to 3 for the device.
All these settings are exported when you manually export the configuration from the
device.

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 15
Configuration File Parameter Guide
General Configuration File Settings
Setting: sip_account.x.dial_plan
Description: Sets the dial plan for account x.
See chapter „SIP-Account-Management“ in the “Advanced
Information“ manual.
Values: Text string Default: x+P
Setting:
sip_account.x.inter_digit_timeout
Description: Sets the inter-digit timeout (in seconds) for account x. The
inter-digit timeout sets how long the device waits after the last digit
is entered before dialing the number.
Values: 1–10 Default: 3
Setting:
sip_account.x.maximum_call_number
Description: Sets the maximum number of concurrent active calls allowed for
that account.
Values: 1–6 Default: 6

16 COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Configuration File Parameter Guide
Setting: sip_account.x.auto_answer_enable
Description: Enables or disables automatic answering of pages for account x.
If enabled, incoming calls with a paging tag (as described below)
will be automatically picked up using the default audio mode
(Speakerphone or Headset).
A server-based incoming page is effectively an incoming SIP call
that has been tagged to let the phone know that it is an incoming
page. ErisTerminal business SIP phones recognize three different
tag types:
a. An “answer-after” parameter in the “Call-Info” header, as shown
in the example below:
Call-Info: <sip:broadworks.net>; answer-after=1
b. The “Intercom” parameter in the INVITE, as shown in the
example below:
INVITE sip:501@192.168.1.108;intercom=true SIP/2.0
c. The “autoanswer” parameter in the “Alert-Info” header, as
shown in the example below:
<http://www.notused.com>;info=alert-autoanswer;delay=0
Values: 0 (disabled), 1 (enabled) Default: 0
Setting:
sip_account.x.auto_answer_during_active_call
Description: Enables or disables automatic answering of pages for account x
when account x has an active call.
Values: 0 (disabled), 1 (enabled) Default: 0
Setting:
sip_account.x.dtmf_transport_method
Description: Sets the transport method for DTMF signalling for account x.
Values: auto, rfc2833, inband,
info
Default: auto

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 17
Configuration File Parameter Guide
Setting: sip_account.x.unregister_after_reboot_enable
Description: Enables or disables the device to unregister account x after
rebooting.
Values: 0 (disabled), 1 (enabled) Default: 0
Setting:
sip_account.x.primary_sip_server_address
Description: Sets the SIP server IP address for account x.
Values: Text string Default: Blank
Setting:
sip_account.x.primary_sip_server_port
Description: Sets the SIP server port for account x.
Values: 1–65535 Default: 5060
Setting:
sip_account.x.primary_registration_server_address
Description: Sets the registration server IP address for account x.
Values: Text string Default: Blank
Setting:
sip_account.x.primary_registration_server_port
Description: Sets the registration server port for account x.
Values: 1–65535 Default: 5060
Setting:
sip_account.x.primary_registration_expires
Description: Sets the expiration time (in seconds) of the current registration for
account x.
Values: 30–7200 Default: 3600

18 COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Configuration File Parameter Guide
Setting: sip_account.x.registration_retry_time
Description: Sets the retry frequency of the current registration for account x.
Values: 1–1800 Default: 10
Setting:
sip_account.x.primary_outbound_proxy_server_address
Description: Sets the outbound proxy server IP address for account x.
Values: Text string Default: Blank
Setting:
sip_account.x.primary_outbound_proxy_server_port
Description: Sets the outbound proxy server port for account x.
Values: 1–65535 Default: 5060
Setting:
sip_account.x.backup_outbound_proxy_server_address
Description: Sets the backup outbound proxy server IP address for account x.
Values: Text string Default: Blank
Setting:
sip_account.x.backup_outbound_proxy_server_port
Description: Sets the backup outbound proxy server port for account x.
Values: 1–65535 Default: 5060
Setting:
sip_account.x.codec_priority.1
Description: Sets the highest-priority codec for account x.
Values: g711u, g711a, g729,
g726, g722
Default: g711u

COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018 19
Configuration File Parameter Guide
Setting: sip_account.x.codec_priority.2
Description: Sets the second highest-priority codec for account x.
Values: none, g711u, g711a,
g729, g726, g722
Default: g711a
Setting:
sip_account.x.codec_priority.3
Description: Sets the third highest-priority codec for account x.
Values: none, g711u, g711a,
g729, g726, g722
Default: g729
Setting:
sip_account.x.codec_priority.4
Description: Sets the fourth highest-priority codec for account x.
Values: none, g711u, g711a,
g729, g726, g722
Default: g726
Setting:
sip_account.x.codec_priority.5
Description: Sets the fifth highest-priority codec for account x.
Values: none, g711u, g711a,
g729, g726, g722
Default: g722
Setting:
sip_account.x.voice_encryption_enable
Description: Enables or disables SRTP voice encryption for account x.
Values: 0 (disabled), 1 (enabled) Default: 0

20 COMfortel C-400 - V1.1.3.E - Provisioning Guide V01 01/2018
Configuration File Parameter Guide
Setting: sip_account.x.g729_annexb_enable
Description: Enables G.729 Annex B, with voice activity detection (VAD) and
bandwidth-conserving silence suppression. This setting applies
only when G.729a/b is selected in a
sip_account.x.codec_priority parameter.
Values: 0 (disabled), 1 (enabled) Default: 0
Setting:
sip_account.x.dscp
Description: Sets the Voice Quality of Service Layer 3 - DSCP for account x.
Values: 0–63 Default: 46
Setting:
sip_account.x.sip_dscp
Description: Sets the Signalling Quality of Service Layer 3 - DSCP for
account x.
Values: 0–63 Default: 26
Setting:
sip_account.x.normal_jitter
Description: Sets the oRTP jitter buffer in milliseconds.
Values: 30–500 Default: 80
Setting:
sip_account.x.local_sip_port
Description: Sets the Local SIP port for account x.
Values: 1–65535 Default: Account 1: 5060
Account 2: 5070
Account 3: 5080