H323 Telephone Installation
Page 89
Issue 23e (Friday, February 15, 2019)
IP Office™ Platform 11.0
Comments on this document? [email protected]
TLS Support: Adding the Identity Certificate
7.3 Enabling TLS on the IP Office
The IP Office system can use a number of TLS options.
To enable TLS mode:
1. Using IP Office Manager, load the server's configuration.
2. Select
System
.
3. Select
LAN1
or
LAN2
tab as appropriate and then select the VoIP tab.
4. The TLS operation is controlled by the
H.323 Signalling over TLS
field. Select the TLS mode required:
·
Disabled
Do not use TLS. Phones configured for TLS fallback to normal TCP connection.
·
Preferred
Use TLS with telephones configured for TLS but also allow normal TCP connections from other telephones.
·
Enforced
Require TLS. Refuse connections from telephones not configured for TLS. Note that when this option is
selected, the
Remote Call Signalling Port
is fixed to
1300
.
5. Click
OK
and
6. Save the configuration changes and allow the system to reboot.
7.4 Enabling TLS on the Telephone
The TLS setting for the telephone is accessed through its Debug menu.
·
Note: When existing telephones upgrade to TLS capable firmware, the
H.323 signalling over TLS
setting defaults
to on. However, with systems not configured for TLS operation the telephones fallback to using TCP connection.
To enable TLS on the telephone:
1. Press
MUTE
followed by
and #.
·
The menu can be accessed on phones using the default CRAFT process password. However, in that case you
can only view the settings, you cannot change them.
2. Scroll to and select
DEBUG
.
3. Scroll to
H.323 signalling over TLS
.
4. Change the setting as required.
5. Click
Save
.
6. Click
Exit
. The phone is restarted using the new setting.
87