LifeSize Icon User manual

Lifesize®Icon™ Guide
May 2014
Lifesize Icon 600
Lifesize Icon 800

Lifesize Icon Guide 2
Lifesize Icon Video Systems
Congratulations on joining Lifesize for the ultimate video conferencing experience!
Learn More About Your System
Extend the Capabilities
When these Lifesize products are integrated with your Icon system you can do the following:
Read more about Integrations.
To access the full set of features available with your Icon video system, your environment must include
UVC Platform with the UVC suite of applications. Refer to the documentation that accompanies these
products for detailed configuration information.
Related information is available from lifesize.com/support.
After installing your system, complete additional setup
tasks, such as changing default passwords and configuring
firewalls.
Deploying Your Icon Video System
Then, start placing calls. You can also manage your calls,
share data, and create recordings. Using Your Icon
Advanced preferences are available for additional
configuration. Preferences
Perform regular maintenance, such as software upgrades,
restoring default settings, and troubleshooting. Maintaining and Troubleshooting
You can optionally use shell commands to control your
system with the Icon API. Icon Video System API
Lifesize Cloud A cloud-based video service that supports desktop and mobile video
collaboration with your Icon.
UVC ClearSea Supports desktop and mobile video collaboration with your Icon.
UVC Multipoint A flexible capacity MCU allowing you to access calls hosted by the
bridge directly from your Icon.
UVC Video Center Provides video recording and publishing directly from your Icon.
UVC Manager Enables IP management of devices. Calls scheduled on UVC Manager
appear in your Icon schedule.
UVC Transit Provides a firewall and NAT traversal solution that enables video calls
within and across enterprises and organizations.
UVC Access A standalone H.323 gatekeeper that provides address translation,
network access control, bandwidth management, and routing
management for H.323 calls to gateways, video systems, and MCUs.
Lifesize Bridge Enables multiway video conferences. You can access calls hosted by
the bridge directly from your Icon.

Lifesize Icon Guide 3
Section 1: Deploying Your Icon Video System
Configuration Overview
When you first install your system, a wizard directs you to configure the language, network settings, and
time zone. You can also choose to connect your Icon to the Lifesize Cloud service at this time.
After installation, configure your video system:
1. Open a web browser.
2. Navigate to the system IP address. This appears in on the main screen.
Lifesize Cloud users: select >to view the IP address.
3. To learn about your system’s configuration preferences, click Help.
After installation you can configure the following:
Configuration Description Read More
Lifesize Cloud If you did not connect your Icon to Lifesize Cloud during initial
configuration, reset your system to associate it with your Lifesize Cloud
account.
Connecting to
Lifesize Cloud
Integrations Integrate your video system with Lifesize Cloud, the Lifesize UVC suite of
applications, and Lifesize Bridge. Integrations
Administrator
passwords BROWSER: Manage administrator passwords in Preferences > Passwords. System Access and Passwords
Date and time BROWSER: Set the system date and time and time zone in Preferences >
Date and Time.Help
Language BROWSER: Select the language for the system’s interface in Preferences
> Appearance.
REMOTE CONTROL: Select >.
NOTE: To change the language of your system’s web interface, select
Language in the sign-in screen of the web interface.
Help
System name BROWSER: Define the system name in Preferences > System.
Lifesize Cloud users: Your system name is defined through Lifesize Cloud
when you connect the Icon to the service.
Help
Safe area REMOTE CONTROL: If the day, date, and time are not fully visible in the
upper right corner of your display, select >to adjust the safe area. Help
Dual displays BROWSER: If your video system is connected to two displays, select your
display configuration in Preferences > Appearance > Physical Display
Arrangement.
Dual Displays
Help
H.323 BROWSER: If you are using H.323 gatekeepers and want to place calls
using a name or extension with the H.323 protocol, configure your Lifesize
system to use H.323 in Preferences > H.323.
Help

Lifesize Icon Guide 4
System Access and Passwords
SIP BROWSER: If you are using SIP servers, configure your Lifesize system to
use SIP in Preferences > SIP Registrar 1 and Preferences > SIP
Registrar 2.
Help
Calls, audio, and
video BROWSER: Configure call, audio, and video preferences:
•Preferences > Calls
•Preferences > Audio
•Preferences > Video
Help
Firewall Configure your video system for firewall traversal. Configuring Your
Firewall
Automatic
provisioning Enable your video system to discover a provisioning server and to configure itself with settings that are specified on the server. ProvisioningYour Icon through
UVC ClearSea
DHCP By default, DHCP is enabled on Lifesize systems. If you disable DHCP,
you must specify the system’s IP address, subnet mask, and default
gateway.
BROWSER: Preferences > Network
REMOTE CONTROL: Select >and enter the passcode (by default,
1234) to access .
Lifesize Icon
Installation Guide
Remote control Select >and enter the passcode (by default, 1234) to access a limited set of
administrator functions from the video system’s display:
Enable or disable DHCP. When DHCP is disabled, you can set the IP address, netmask,
default gateway, and address of the static DNS server.
Reset network settings.
Reset all settings.
Revert to the alternate software version and reset all settings to their default values.
Browser Open a web browser and enter the IP address of the Lifesize system. Sign in with administrator
credentials. The default username and password are admin.
The IP address of the system appears in on the main screen.
Lifesize Cloud users: select > to view the IP address.
By default, remote management of a Lifesize video system over HTTP is enabled at
Preferences > Security > Enable Remote Management Over HTTP.
CAUTION: Disabling HTTP signs you out and prevents you from signing back in to the system.
SSH Sign in with administrator credentials in an SSH session and enter commands to manage your
Lifesize system remotely. The default username and password are admin. Read more at Icon
Video System API.
By default, remote management over SSH is enabled at Preferences > Security > Enable
SSH Access.
CAUTION: Disabling SSH prevents you from managing the system remotely over SSH.
UVC Manager With UVC Manager, administrators can manage your Lifesize video system and other video
systems across the enterprise.
Configuration Description Read More

Lifesize Icon Guide 5
Sign in to your video system from a web browser and navigate to Preferences > Passwords to manage
passwords:
Passwords can be up to 16 characters in length and contain any combination of the numbers 0-9, the
letters a-z and A-Z, and the symbols * (star) and # (pound). The passcode must be one to 32 characters in
length and contain any combination of the numerals 0-9.
You cannot change the username.
Integrations
You can integrate your Icon with Lifesize Cloud, the UVC suite of applications, and Lifesize Bridge.
Available options depend on the applications configured in your environment:
User Access Username Default Password
Administrator Browser, SSH admin admin
Remote control through the video system’s display none 1234
Support Browser, SSH support support
Option Appears when integrated with... Configuration
Schedule UVC Manager Manage your video system in UVC Manager.
Directory Lifesize Cloud Connecting to Lifesize Cloud
UVC ClearSea Provisioning Your Icon through UVC ClearSea
Integrating Icon with UVC ClearSea
UVC Manager Manage your video system in UVC Manager.
A directory server Configure the integration in Preferences > Directory.
Meetings Lifesize Cloud Connecting to Lifesize Cloud
UVC ClearSea
(Your system registers to UVC
ClearSea over H.323.)
Enabling Icon Support for Lifesize MCU Conferences
UVC Manager Manage your video system in UVC Manager.
UVC Multipoint or Lifesize Bridge Configure the integration in Preferences > MCUs >
Enable MCU Integration.
Record UVC Video Center Configure your system to record to UVC Video Center
in Preferences > Record and Stream.
Call escalation Lifesize Cloud Connecting to Lifesize Cloud
UVC ClearSea Provisioning Your Icon through UVC ClearSea
Integrating Icon with UVC ClearSea
Global
search UVC ClearSea Provisioning Your Icon through UVC ClearSea
Integrating Icon with UVC ClearSea
Navigation and Search

Lifesize Icon Guide 6
Connecting to Lifesize Cloud
Once you have a Lifesize Cloud account, you can connect your Icon to the Cloud service. Associate your
Icon with your Cloud account or activate an Icon that serves as a conference room system.
After you are connected, you can take advantage of these features:
•You can download the Cloud app on all of your devices: laptop, tablet, and smartphone. Incoming calls
ring all devices.
•Lifesize Cloud applies configuration settings to the Icon directly.
•All contacts in your company’s Cloud group are available from your Icon directory. Their online status
appears as well.
•Virtual meeting rooms configured by your Cloud account manager are available in Meetings . All
Cloud users can add meetings from their Cloud app.
•Icon can add video participants and accept multiple incoming callers to the active call.
•Software updates are automatically applied to your Icon instead of requiring you to perform a manual
update from a separate file. The system prompts you to apply the update, allowing you to delay the
operation if you are in a call or otherwise using the system.
NOTE Learn more about Lifesize Cloud at lifesize.com.
Activating Icon on Lifesize Cloud
Connect to the Lifesize Cloud service during initial configuration. To initiate this process after installation,
reset your system to its default settings. Read more at Resetting the System.
NOTE You must have a Lifesize Cloud user account to connect your Icon to the
service.
1. When the initial configuration wizard asks you to join the Cloud service, select Yes.
2. Open a browser and navigate to the URL shown on your Icon.
NOTE You cannot activate your Icon from the system’s web interface.
3. Sign in by entering your Cloud email address and password.

Lifesize Icon Guide 7
4. Enter the activation code shown on your Icon.
Scanning the QR code opens the Lifesize Cloud sign-in page in a browser, where your activation code
already appears.
5. You can associate an Icon to an individual user or a conference room.
6. From the Icon main screen, navigate to > to view the status of the system. When your Icon is
successfully activated, Ready shows for Communications > Lifesize Cloud Service.
Removing an Icon from a Cloud User Account
1. Reset your system to its default settings.
2. When the initial configuration wizard asks you to join the Cloud service, select No.
3. Cloud account manager: Sign in to the Cloud web console and remove the Icon from the Cloud user
account. Learn more in the online help available from the console.
Individual user Me – allows Cloud end users to associate the device to themselves.
User – allows Cloud account managers to associate the device to any user in
their Cloud group.
Conference room Use this option if the device resides in a conference room and is intended for
multiple users.
Creates a separate Cloud account for the Icon. Enter a name for the system that
will appear in the Cloud directory. Optionally, enter an email address for calling
the system.

Lifesize Icon Guide 8
Configuring Your Firewall
This section explains how to configure your Lifesize video systems for firewall traversal, assuming you are
not using firewall traversal products such as UVC Transit or UVC ClearSea.
•If you are using UVC Transit, refer to the Lifesize UVC Transit Deployment Guide. If you are using
UVC ClearSea, refer to the Lifesize UVC ClearSea Deployment Guide.
•If your Icon is connected to Lifesize Cloud, refer to the online help available from the Cloud web
console.
Placement Behind a Firewall
Lifesize recommends that you place your system behind a firewall. Use one of the following options:
Firewall Settings for Ports
At a minimum, block external or inbound access to the following ports:
•22 (SSH)
•80 (HTTP)
•443 (HTTPS)
•554 (RTSP)
•10008 (REST API service if UVC Manager manages your system)
Lifesize recommends that these ports remain open for internal administrator access. Ensure that you
change the default administrator password to be secure.
NOTE Change the administrator password in the web interface in Preferences >
Passwords. You can disable SSH and web access on the system in
Preferences > Security.
DMZ with public IP address Placing your video systems in the DMZ allows you to assign public IP addresses.
This configuration makes it easier for your system to connect with public video
systems on the Internet.
Private LAN with NAT Placing your video systems in the private LAN with Network Address Translation
(NAT) obscures their private IP addresses, but makes calls with systems outside of
your network more complicated.

Lifesize Icon Guide 9
Call Setup and Media Ports
To place calls to other systems through the firewall, you must configure your firewall to allow incoming and
outgoing traffic to the system through the following:
Restricting Reserved Ports
To place calls to other devices through a firewall, you must configure your firewall to allow incoming and
outgoing traffic to the Lifesize system through the reserved ports. Users placing calls through a firewall to
systems with public IP addresses may experience one-way audio or video if the firewall is not properly
configured to allow two-way audio and video traffic.
By default, Lifesize systems communicate through TCP and UDP ports in the range 60000 - 64999 for
video, voice, presentations, and camera control. Lifesize systems use a subset of these ports during a call.
NOTE The minimum number of required ports is 100.
To minimize the number of UDP and TCP ports that are available for communication, restrict the range by
changing values in the browser in Preferences > Network > Reserved Ports. Lifesize recommends that
the range you choose, if other than a subset of the default range, begins with a port number greater than
49151. The range must start with an even number and end with an odd number to include an even number
of total ports. For a range that starts at 62000, set the lower end to 62000 and the upper end to 62099 to
allocate a range of 100 ports, the minimum.
NOTE Changing the values in Reserved Ports causes the system to restart.
UDP port 1719
TCP port 1720 Gatekeeper registration. H.323 call negotiation.
UDP port 5060 SIP call negotiation.
TCP port 5060 SIP call negotiation if TCP signaling is enabled for SIP calls.
TCP port 5061 TLS signaling in SIP calls if TLS signaling is enabled.
NOTE: TLS is the only transport that is supported for encrypted calls.
Required TCP and
UDP ports Range specified in Preferences > Network > Reserved Ports.

Lifesize Icon Guide 10
Using Lifesize Systems in a Private LAN with NAT
If you choose to place your video systems in a private LAN, you must use NAT to communicate with
outside systems. This may include enabling static NAT on your Lifesize system.
On your firewall, whether standalone or built in to your router, you must complete one of the following
tasks:
•Use 1:1 NAT and open the Call Setup and Media Ports over that connection bidirectionally with an
access list.
•Forward the Call Setup and Media Ports to your Lifesize system.
Refer to Restricting Reserved Ports and your firewall vendor's documentation for more information.
Enabling Static NAT
NAT enables communication between devices on your LAN that have private IP addresses and devices
that are accessed through a public IP network. Static NAT ensures that the same public IP address always
maps to a system’s private IP address so that data from the public network intended for the private system
can be routed to the system reliably.
If you are using static NAT to associate a public IP address with the private IP address of your Lifesize
system, you must configure your Lifesize system to work with your static NAT server. From a browser,
navigate to Preferences > Network and select Static NAT. Enter the public IP address, hostname, or fully
qualified domain name of your system in NAT Public IP Address.
NOTE You cannot upgrade the system from a web browser outside a firewall when
static NAT is enabled. Instead, perform the upgrade from within the firewall.
Testing your NAT Environment
If your firewall does not employ a feature set that performs H.323 or SIP NAT, you must enable NAT on
your private Lifesize system.
1. Place a call from a system on the Internet to your system in the private LAN. If your private system
connects within the first 2 seconds after answering, your NAT configuration is working properly. If the
call does not connect after answering and disconnects after 30 to 50 seconds, the reserved port
settings on your codec do not match the settings on your firewall. Ensure that the system and firewall
settings for UDP/TCP ports match.
2. If you still cannot place a successful call, you may have to disable the stateful packet inspection
feature on the firewall. Some firewall vendors may call this feature dynamic packet filtering. Refer to
your firewall vendor's documentation for more information.