Kinnex Media Gateway User manual

Kinnex Media Gateway
Quick Start Guide
Starxoft
Published: March 30, 2015
help.kinnex.net

Kinnex Media Gateway. Quick Start Guide.
2
Table of Contents
1. Downloads ..............................................................................................................................................................3
Kinnex Media Gateway........................................................................................................................................3
Lync Administrative Tools....................................................................................................................................3
TFTP server ..........................................................................................................................................................3
Firmware Packs....................................................................................................................................................3
2. Enabling PIN Authentication.......................................................................................................................................4
3. Setting up PIN Authentication policy............................................................................................................................6
4. Preparing to installing Kinnex Media Gateway...............................................................................................................8
Configuring TLS on Windows Server 2012 R2 .....................................................................................................8
Installing Lync Server Administrative Tools.........................................................................................................8
IP Address Allocation...........................................................................................................................................8
5. Installing Kinnex Media Gateway ................................................................................................................................9
Firmware packs....................................................................................................................................................9
6. Activating Kinnex Media Gateway License ..................................................................................................................10
How to create an Activation Key .......................................................................................................................10
Enter registration key ........................................................................................................................................10
7. Installing and configuring Provisioning Server.............................................................................................................12
8. Configuring a DHCP Server.......................................................................................................................................13
9. Adding users from Lync Server..................................................................................................................................14
10. Setting up PIN for authentication from IP phones.......................................................................................................16
Setting a PIN for a single user............................................................................................................................16
Setting a PIN for a multiple users ......................................................................................................................16
11. Configuring automatic sign in to Lync Server.............................................................................................................18
Adding new devices...........................................................................................................................................18
Attach users to existing devices ........................................................................................................................19
12. Sign in to Lync Server manually ..............................................................................................................................20
Escene IP phones configuration example..........................................................................................................21
Yealink IP phones configuration example .........................................................................................................22
Grandstream IP phones configuration example................................................................................................23
Linksys IP phones configuration example .........................................................................................................24
Cisco SPA300 and SPA500 Series configuration example .................................................................................25
Polycom IP phones configuration example .......................................................................................................26

Kinnex Media Gateway. Quick Start Guide.
3
1. Downloads
To install Kinnex Media Gateway for connecting IP-phones to the Lync Server, you will need next installation
packages:
Kinnex Media Gateway
Lync Administrative Tools
TFTP server
Firmware Packs
Kinnex Media Gateway
The latest version of Kinnex Media Gateway you can download at http://www.kinnex.net/download/.
Lync Administrative Tools
Lync Administrative Tools are included into the Lync Server distribution kit and can be installed on a stand-
alone server or collocated with one of the roles of the Lync Server.
TFTP server
To provide Auto Provisioning service you must install a TFTP server. You can use an open-source TFTP server:
Tftpd32/64. This freeware and lightweight TFTP server is available for download at the product’s home page:
http://tftpd32.jounin.net, or at the Kinnex Media Gateway web site (Windows version only):
http://www.kinnex.net/download/.
Firmware Packs
Firmware Packs will be used for the centralized software update and configure IP phones via Provisioning
Server. For each manufacturer and each model line of IP phones supported by Kinnex Media Gateway, we
create special pack with the firmware and configuration files.
To download Firmware Packs for you IP phones visit Kinnex Media Gateway download page at
http://www.kinnex.net/download/.

Kinnex Media Gateway. Quick Start Guide.
4
2. Enabling PIN Authentication
To authentication users from IP phones personal identification number (PIN) authentication needs to be
enabled on Lync Server, and an appropriate PIN policy need to be in place.
To enable PIN Authentication, click Security in the Lync Server Control Panel left navigation bar.
1. Click Registrar tab. Open the Global policy properties and select check boxes next to Enable
Integrated Windows authentication and Enable certificate authentication.
2. Click Web Service tab. Open the Global policy properties and select all check boxes.

Kinnex Media Gateway. Quick Start Guide.
5
For details about setting up the PIN Authentication, see:
Deploying Devices http://technet.microsoft.com/en-us/library/gg425854.aspx
Setting Up Authentication http://technet.microsoft.com/en-us/library/gg412902(v=ocs.14).aspx

Kinnex Media Gateway. Quick Start Guide.
6
3. Setting up PIN Authentication policy
You can manage PIN Authentication options via the PIN Policies. To set options for authentication from IP
phones you can either edit the Global policy or create your own. For convenience, we will create a new policy
and apply it to the users who will connect to the Lync Server from IP phones.
To create a new PIN policy, in the Lync Server Control Panel click Security, and then click PIN Policy tab. In
accordance with your company security requirements, select the options for the new PIN policy.
It is not recommended that you select Enable PIN expiration option because user login and PIN are
permanently stored in the IP phone settings and are not used by the user regularly.

Kinnex Media Gateway. Quick Start Guide.
7
To assign created PIN Authentication policy to the users, click Users in the left navigation bar of Lync Server
Control Panel. Then select one or multiple users and click Action in the toolbar, and then click Assign policies.
Select the name of previously created policy in the PIN policy drop-down list.
After you set up PIN authentication policy, you can create user PINs in the Kinnex Media Gateway Control
Panel. New user PINs will be created on the Lync Server automatically.
For details about managing PIN Policies, see:
Managing PIN Policies http://technet.microsoft.com/en-us/library/jj721841.aspx

Kinnex Media Gateway. Quick Start Guide.
8
4. Preparing to installing Kinnex Media Gateway
Kinnex Media Gateway can be installed on a stand-alone server, or collocated with one of the Lync Server
roles. You can view the description of the deployment topologies at http://www.kinnex.net/features/ (see the
Reference Topologies tab).
Depending on the deployment scenario, you must allocate enough system resources for Kinnex Media
Gateway and Lync Server to work stable. The system requirements are available at
http://www.kinnex.net/features/ (see the System requirements tab).
Configuring TLS on Windows Server 2012 R2
When Lync Server 2013 Front End servers are installed in Windows Server 2012 R2, you must configuring TLS
session parameters. For more information, see http://support.microsoft.com/kb/2901554/en-us.
To configure TLS sessions, on all computers that are hosting Lync Server 2013 Front End servers open the
Registry editor (run regedit in the Windows shell) and add to the Schannel registry subkey new value:
Subkey
HKLM\System\CurrentControlSet\Control\SecurityProviders\Schannel
Key
EnableSessionTicket
DWORD (32-bit)
Value
0x0002
Run consecutively the following Lync Server PowerShell cmdlets to restart Lync Server services:
Stop-CsWindowsService
Start-CsWindowsService
Installing Lync Server Administrative Tools
After you select deployment topology for Kinnex Media Gateway, you need to install Lync Server
Administrative Tools from the Lync Server distribution kit. For details about installation, see the Install Lync
Server Administrative Tools page at http://technet.microsoft.com/en-us/library/gg398665.aspx.
IP Address Allocation
You must assign at least one dedicated (not used by other VoIP services) IP address for Kinnex Media Gateway
services. When Kinnex Media Gateway is collocated with one of the Lync Server roles, we recommend
installing an additional network interface if a large number of IP phones connected to corporate network. In
the low loaded telephony networks, you can assign one additional IP address to the existing network interface.

Kinnex Media Gateway. Quick Start Guide.
9
5. Installing Kinnex Media Gateway
Installing Kinnex Media Gateway is incredibly easy and does not require manual operations.
When you install Kinnex Media Gateway on a stand-alone server, you will need to reboot your server to apply
the security policies.
If localization of any operating system used in the Lync Server topology if differ from English, create new
user account in the domain, add it to group RTCUniversalServerAdmins and setup Kinnex Media
Gateway service to run from the created user account.
Firmware packs
You can install firmware packs for used IP phone manufacturers after the Kinnex Media Gateway installation
complete. New versions of firmware and auto configuration files will be recognized and applied to IP phones
automatically.

Kinnex Media Gateway. Quick Start Guide.
10
6. Activating Kinnex Media Gateway License
To activate the Kinnex Media Gateway License, create an Activation Key and send it to your supplier first. The
Registration Key, which activates your license, will be included in the response email.
How to create an Activation Key
To create an Activation Key, in the Kinnex Media Gateway control panel click Overview tab, and then click to
Install license link. In the Activation Wizard, enter your 25-digit License Key and License owner name. On the
next step, select Create Activation Key. Copy and send the Activation Key to your supplier.
Enter registration key
To complete the license installation, in the Kinnex Media Gateway control panel click Overview tab, and click
to Install license link. In the Activation Wizard, you should find your 25-digit License Key and License owner
name. If the fields are empty, enter the required values. On the next step, select Enter Registration Key. Copy
and paste the Registration Key or select a file with the key. Then click Finish. Restart Kinnex Media Gateway
service to activate your license.

Kinnex Media Gateway. Quick Start Guide.
11

Kinnex Media Gateway. Quick Start Guide.
12
7. Installing and configuring Provisioning Server
TFTP server Tftpd32/64, used to deploy a service for the automatic delivery of configuration files on the IP
phones, does not generate a heavy load on the network and can be installed with Kinnex Media Gateway.
After installation Tftpd32/64, run service Tftpd32 service edition and open the control panel. Open the
Settings dialog box, then click GLOBAL tab, and select check box next to the TFTP Server, the remaining
services are not required. Click TFTP tab, and in the Base Directory field, specify the path to the TFTP folder in
the Kinnex Media Gateway installation directory. Select the check box next to Bind TFTP to this address and
select the IP address to bind for receiving requests from IP phones.
Restart service Tftpd32 service edition and create firewall rules to allow access for Tftpd32/64. Application
that you need to add to the firewall rules is %ProgramFiles%\Tftpd32_SE\tftpd32_svc.exe (for the 32-bit
edition) or %ProgramFiles%\Tftpd64_SE\tftpd64_svc.exe (for 64-bit edition).

Kinnex Media Gateway. Quick Start Guide.
13
8. Configuring a DHCP Server
The URL of TFTP server (Provisioning Server URL) to which IP phones will connect to get new firmware and
configuration files can be delivered automatically to the IP phones by using a DHCP server.
To configure DHCP server on the Windows Server platforms to send Provisioning Server URL to IP phones,
activate option 66 in the DHCP server options, and specify FQDN or IP address that you select for the
Provisioning Server on the previous step.

Kinnex Media Gateway. Quick Start Guide.
14
9. Adding users from Lync Server
All Lync Server users who will be able to login from IP phones must be added to Kinnex Media Gateway.
To add users from the Lync Server, in the Kinnex Media Gateway control panel click Users tab, and then click
Add in the toolbar. Type the search query (any part of user name, SIP URI or phone of the Lync Server user
account), and then click Find button. In the result list select the user accounts, and click then OK.

Kinnex Media Gateway. Quick Start Guide.
15

Kinnex Media Gateway. Quick Start Guide.
16
10. Setting up PIN for authentication from IP phones
User can authenticate from IP phone with PIN that administrator assign in Kinnex Media Gateway after adding
the user account from the Lync Server.
Setting a PIN for a single user
To create a PIN for single user, in the Kinnex Media Gateway control panel click Users tab, and then select the
user in the list. Click Edit in the toolbar or right-click on the selected user account and then click Set PIN.
In the Set PIN dialog box, type new PIN or click Generate button to generate a PIN automatically. Select check
box Send new PIN to the user via email to send email with user’s PIN after you close the dialog box. Then click
OK.
Setting a PIN for a multiple users
To crate a PINs for multiple users, in the Kinnex Media Gateway control panel click Users tab, and then select
multiple users in the list. Click Edit in the toolbar or right-click on the one of the selected lines and then click
Set PIN.
In the Set PIN dialog box for multiple users, click Set PINs button. If you select Set PIN length manually and if
PIN length will not meets the PIN requirements specified in your PIN policy settings for the user, PIN will not
be assigned too that user account. In the table, you will see new user’s PINs. Click Save as button to save user
names and PINs to the TXT or CSV file.

Kinnex Media Gateway. Quick Start Guide.
17

Kinnex Media Gateway. Quick Start Guide.
18
11. Configuring automatic sign in to Lync Server
In a mass deployment scenario, this feature allows you to make user accounts sign in to the Lync Server
automatically from IP phones that does not previously configured by the user or by the administrator. In the
Kinnex Media Gateway control panel, simply add the MAC addresses of the IP phones and attach user
accounts to the new devices. Configuration files with the use account data will be created for devices in the
Provisioning Server folder.
After booting IP phones in the corporate network, DHCP or SIP PnP server automatically instructs the phones
with the Provisioning Server URL to which IP phones can connect to get a new firmware and configuration
files.
Adding new devices
To add new device, in the Kinnex Media Gateway control panel click Devices tab, and then click Add in the
toolbar. In the New Device dialog box, type Device Name, MAC address, select Brand and Model. Only MAC
address field is required, other values Kinnex Media Gateway fills automatically.
To enter MAC addresses faster, you can use the barcode scanner
To attach user to the device, click Attach user button. Find the user account in the Select User dialog box and
click Ok.

Kinnex Media Gateway. Quick Start Guide.
19
Attach users to existing devices
To allow user to sign in from a specific IP phone, in the Kinnex Media Gateway control panel click Devices tab,
select existing device record for the required IP phone, and then click Edit in the toolbar. In the device
properties dialog box, click User tab, and then click Attach user button. Find the user account in the Select
User dialog box and click Ok.

Kinnex Media Gateway. Quick Start Guide.
20
12. Sign in to Lync Server manually
Users can sign in to Lync Server from any compatible IP phones even if their MAC addresses are not assigned
to the device records in the Kinnex Media Gateway. When a new and not registered IP phone tries to connect
to Kinnex Media Gateway for the first time, a new device record will be created without attached user
account.
All IP phones in the corporate network will receive common settings (latest firmware version available to
install, time zone) from Provisioning Server automatically, regardless of exist of the device records for IP
phones in the Kinnex Media Gateway.
To sign in to Lync Server from the IP phone manually, set the following options in the IP phone:
Label | Account Name
Account name which is shown on the IP
phone’s display
A short string of symbols
Display Name | Name
User name
For example: John Doe
Username | SIP User ID
The substring from the SIP URI to the @
symbol
For example: john.doe
SIP Server | SIP Server Host
The substring from the SIP URI after the @
symbol
For example: kmg.lab
Register Name | Authenticate Name
SIP address
For example: [e-mail]
Outbound Proxy
IP or FQDN address of Kinnex Media Gateway
Password
PIN