[Asterisk-Users] Polycom IP-500 600 Nat settings.
I have looked at the wiki and the mailing list. But I need to find how do we setup the external IP address and the rtp ports for the Polycom IP-500 and IP-600. There web interface has a nat setting but can't find instructions on how to set this up. I would like to set this up via there ftp file setup instead of via there web setting. Also There QoS settings are set to 5 and 2 but there it does not say if you change it to 7 or to a lower number which one gives you better priority. Main problem I am having is that the polycoms work great as long as there on the same LAN. once they go through a Nat router even if all the ports are open we get one way audio or no audio. The asterisk servers are on a real world IP address and the Phones are behind a Nat firewall called m0n0wall. We have all ports open going out to where the asterisk box is setup. ___ Asterisk-Users mailing list Asterisk-Users@lists.digium.com http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
So what? You said you had ssh access. Use ssh forward. Here's another way. Might work for you, I don't know. You could easily setup a secure tunnel (think openvpn) to run your ftp server on locally. That way you could keep all the configs in one place. You could open the tunnel when it's time to update the phones and then have the phones use your local server as the ftp source. You just reboot the phones remotely and close the tunnel once all the phones have updated. With this method, run ntp on both sides so that the timestamp change thingy will work right. Really, there must be a million ways to do this. I think you're trying too hard. John Richard wrote: If the phone is behind a NAT firewall, it would require extra configuration on the firewall. Depending on the circumstance, it is not always be possible to make such a change. *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Karl J. Vesterling *Sent:* Saturday, October 30, 2004 6:30 PM *To:* Asterisk Users Mailing List - Non-Commercial Discussion *Subject:* Re: [Asterisk-Users] polycom IP 500/600 My bad... I thought he was attempting to upload config files for asterisk systems. Yes, an expect script would work just fine... At 11:21 PM 10/30/2004, you wrote: The phone has a web interface. Couldn't you just use an expect script to change it? John Baker Karl J. Vesterling wrote: One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis MD:* (240) 524-6706 Extension 0 *Seattle WA:* (360) 516-1822 Extension 0 *Niagara Falls NY:* (716) 286-9175 Extension 0 *Buffalo NY:* (716) 608-1121 Extension 0 *United Kingdom:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis** MD**:* (240) 524-6706 Extension 0 *Seattle** WA**:* (360) 516-1822 Extension 0 *Niagara Falls** NY**:* (716) 286-9175 Extension 0 *Buffalo** NY**:* (716) 608-1121 Extension 0 *United Kingdom**:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
I think that the topic is sidetracked... My original question is about how to change the default username and password for ftp login. I want to change it, but don't want to punch the keypad manually. I don't think that this can be done via web interface either. Richard -Original Message- From: [EMAIL PROTECTED] [mailto:asterisk-users- [EMAIL PROTECTED] On Behalf Of John Baker Sent: Saturday, October 30, 2004 9:54 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 So what? You said you had ssh access. Use ssh forward. Here's another way. Might work for you, I don't know. You could easily setup a secure tunnel (think openvpn) to run your ftp server on locally. That way you could keep all the configs in one place. You could open the tunnel when it's time to update the phones and then have the phones use your local server as the ftp source. You just reboot the phones remotely and close the tunnel once all the phones have updated. With this method, run ntp on both sides so that the timestamp change thingy will work right. Really, there must be a million ways to do this. I think you're trying too hard. John Richard wrote: If the phone is behind a NAT firewall, it would require extra configuration on the firewall. Depending on the circumstance, it is not always be possible to make such a change. *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Karl J. Vesterling *Sent:* Saturday, October 30, 2004 6:30 PM *To:* Asterisk Users Mailing List - Non-Commercial Discussion *Subject:* Re: [Asterisk-Users] polycom IP 500/600 My bad... I thought he was attempting to upload config files for asterisk systems. Yes, an expect script would work just fine... At 11:21 PM 10/30/2004, you wrote: The phone has a web interface. Couldn't you just use an expect script to change it? John Baker Karl J. Vesterling wrote: One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis MD:* (240) 524-6706 Extension 0 *Seattle WA:* (360) 516-1822 Extension 0 *Niagara Falls NY:* (716) 286-9175 Extension 0 *Buffalo NY:* (716) 608-1121 Extension 0 *United Kingdom:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis** MD**:* (240) 524-6706 Extension 0 *Seattle** WA**:* (360) 516-1822 Extension 0 *Niagara Falls** NY**:* (716) 286-9175 Extension 0 *Buffalo** NY**:* (716) 608-1121 Extension 0 *United Kingdom**:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http
Re: [Asterisk-Users] polycom IP 500/600
Another idea, not sure if it was stated yet is to just run the ftp server on a private ip address and/or if you are going to have it on a public ip restrict by ip address. I run my ftp server on a private ip which is open to everyone on the private lan and on the public side, for example I only allow one static ip address to connect to it because I only have one outside person with a polycom phone and they have a static ip. Just an idea. On Sat, 30 Oct 2004 22:21:01 -0500, John Baker [EMAIL PROTECTED] wrote: The phone has a web interface. Couldn't you just use an expect script to change it? John Baker Karl J. Vesterling wrote: One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis MD:* (240) 524-6706 Extension 0 *Seattle WA:* (360) 516-1822 Extension 0 *Niagara Falls NY:* (716) 286-9175 Extension 0 *Buffalo NY:* (716) 608-1121 Extension 0 *United Kingdom:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -- MBM ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling E-Mail: [EMAIL PROTECTED] Yahoo Messenger: karl_vesterling ICQ: 1548052 AOL Instant Messenger: n2vqm Telephone: Washington DC: (202) 448-3009 Extension 0 Annapolis MD: (240) 524-6706 Extension 0 Seattle WA: (360) 516-1822 Extension 0 Niagara Falls NY: (716) 286-9175 Extension 0 Buffalo NY: (716) 608-1121 Extension 0 United Kingdom: 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
The phone has a web interface. Couldn't you just use an expect script to change it? John Baker Karl J. Vesterling wrote: One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis MD:* (240) 524-6706 Extension 0 *Seattle WA:* (360) 516-1822 Extension 0 *Niagara Falls NY:* (716) 286-9175 Extension 0 *Buffalo NY:* (716) 608-1121 Extension 0 *United Kingdom:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
My bad... I thought he was attempting to upload config files for asterisk systems. Yes, an expect script would work just fine... At 11:21 PM 10/30/2004, you wrote: The phone has a web interface. Couldn't you just use an expect script to change it? John Baker Karl J. Vesterling wrote: One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-usersBest Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis MD:* (240) 524-6706 Extension 0 *Seattle WA:* (360) 516-1822 Extension 0 *Niagara Falls NY:* (716) 286-9175 Extension 0 *Buffalo NY:* (716) 608-1121 Extension 0 *United Kingdom:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling E-Mail: [EMAIL PROTECTED] Yahoo Messenger: karl_vesterling ICQ: 1548052 AOL Instant Messenger: n2vqm Telephone: Washington DC: (202) 448-3009 Extension 0 Annapolis MD: (240) 524-6706 Extension 0 Seattle WA: (360) 516-1822 Extension 0 Niagara Falls NY: (716) 286-9175 Extension 0 Buffalo NY: (716) 608-1121 Extension 0 United Kingdom: 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
If the phone is behind a NAT firewall, it would require extra configuration on the firewall. Depending on the circumstance, it is not always be possible to make such a change. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Karl J. Vesterling Sent: Saturday, October 30, 2004 6:30 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 My bad... I thought he was attempting to upload config files for asterisk systems. Yes, an expect script would work just fine... At 11:21 PM 10/30/2004, you wrote: The phone has a web interface. Couldn't you just use an expect script to change it? John Baker Karl J. Vesterling wrote: One could use SCP with certificates for authentication and avoid all the issues with FTP and it's vulnerabilities. At 07:55 PM 10/26/2004, you wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling *E-Mail:* [EMAIL PROTECTED] *Yahoo Messenger:* karl_vesterling *ICQ: *1548052 *AOL Instant Messenger:* n2vqm *Telephone: Washington DC:* (202) 448-3009 Extension 0 *Annapolis MD:* (240) 524-6706 Extension 0 *Seattle WA:* (360) 516-1822 Extension 0 *Niagara Falls NY:* (716) 286-9175 Extension 0 *Buffalo NY:* (716) 608-1121 Extension 0 *United Kingdom:* 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Best Regards, Karl J. Vesterling E-Mail: [EMAIL PROTECTED] Yahoo Messenger: karl_vesterling ICQ: 1548052 AOL Instant Messenger: n2vqm Telephone: Washington DC: (202) 448-3009 Extension 0 Annapolis MD: (240) 524-6706 Extension 0 Seattle WA: (360) 516-1822 Extension 0 Niagara Falls NY: (716) 286-9175 Extension 0 Buffalo NY: (716) 608-1121 Extension 0 United Kingdom: 0870 3403428 Extension 0 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Richard wrote: The default user name and password is a huge issue in some cases. For example, hackers can get into the server, grab the configuration, program their own phone and make free calls. Another example, if you have multiple domains, then you want different username/passwd for each domain. I can understand this, although I would like to think that good network design could prevent you from opening up your ftp (unencrypted!) server to the internet at large (using a firewall, etc.). Any way you look at it, there is still the chicken and the egg issue that I pointed out earlier. You cannot use the configuration file to specify a custom username and password until you get the configuration file in the first place! This is why the Cisco and Polycom's use CDP for VLAN configuration - you can set the VLAN BEFORE the DHCP request is made - to make sure that you get to the proper network (and DHCP server) in the first place. The only way that I see your problem working is if Polycom adds the option to set username and password via custom DHCP options to the firmware. That way you would have the username and password BEFORE you needed to login to the FTP server. Maybe an idea for them? -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
On Wed, 2004-10-27 at 16:31, Kristian Kielhofner wrote: Richard wrote: The default user name and password is a huge issue in some cases. For example, hackers can get into the server, grab the configuration, program their own phone and make free calls. Another example, if you have multiple domains, then you want different username/passwd for each domain. I can understand this, although I would like to think that good network design could prevent you from opening up your ftp (unencrypted!) server to the internet at large (using a firewall, etc.). Well, since the phones don't support scp or sftp, then I don't suppose those options are available. This is why the Cisco and Polycom's use CDP for VLAN configuration - you can set the VLAN BEFORE the DHCP request is made - to make sure that you get to the proper network (and DHCP server) in the first place. But of course, the phones may not all be on your lan! They could be anywhere on the internet. This is the whole point of VoIP. The only way that I see your problem working is if Polycom adds the option to set username and password via custom DHCP options to the firmware. That way you would have the username and password BEFORE you needed to login to the FTP server. Maybe an idea for them? Precisely, I think this is what the original poster wanted to know. How to set the ftp user/pass from DHCP. PS, of course, if the phone is elsewhere, then you also can't set the ftp user/pass via DHCP, since it isn't your DHCP server. Also, wherever I mentioned setting FTP user/pass via DHCP, you should add setting the FTP server name via DHCP as well. This means you can look at the box of a polycom phone (since the MAC address is on the outside of the box), configure the phone extensions/registrations/etc, hand the box to the user and tell them to go back to their desk and plug it in. Currently, you need to unpack the phone, configure the FTP servername, user, passwd, re-pack the box, and then tell the user to go plug it in etc... Regards, Adam ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Adam Goryachev wrote: On Wed, 2004-10-27 at 16:31, Kristian Kielhofner wrote: Richard wrote: The default user name and password is a huge issue in some cases. For example, hackers can get into the server, grab the configuration, program their own phone and make free calls. Another example, if you have multiple domains, then you want different username/passwd for each domain. I can understand this, although I would like to think that good network design could prevent you from opening up your ftp (unencrypted!) server to the internet at large (using a firewall, etc.). Well, since the phones don't support scp or sftp, then I don't suppose those options are available. This is why the Cisco and Polycom's use CDP for VLAN configuration - you can set the VLAN BEFORE the DHCP request is made - to make sure that you get to the proper network (and DHCP server) in the first place. But of course, the phones may not all be on your lan! They could be anywhere on the internet. This is the whole point of VoIP. The only way that I see your problem working is if Polycom adds the option to set username and password via custom DHCP options to the firmware. That way you would have the username and password BEFORE you needed to login to the FTP server. Maybe an idea for them? Precisely, I think this is what the original poster wanted to know. How to set the ftp user/pass from DHCP. PS, of course, if the phone is elsewhere, then you also can't set the ftp user/pass via DHCP, since it isn't your DHCP server. Also, wherever I mentioned setting FTP user/pass via DHCP, you should add setting the FTP server name via DHCP as well. This means you can look at the box of a polycom phone (since the MAC address is on the outside of the box), configure the phone extensions/registrations/etc, hand the box to the user and tell them to go back to their desk and plug it in. Currently, you need to unpack the phone, configure the FTP servername, user, passwd, re-pack the box, and then tell the user to go plug it in etc... Regards, Adam Adam, I understand that the premise with VoIP phones can be placed anywhere on the internet. I don't think that phones like the Polycom are optimally designed to be used at locations that are not connected to a lan not specifically designed for them. I picture Polycoms, Ciscos, etc. used in traditional office settings, or branch offices with VPNs anyways. Lets face it - they speak SIP only, and their NAT functions are severely limited anyways (no NAT mapping, STUN, etc.). All of this combined do not make for a very good single remote location phone. I would love to see someone be able to unplug the phone from their desk and plug it in at home (with no prior setup, knowledge, etc.), but I understand why that just won't work (right now). Sipuras can download their config and store it in non-volatile memory. I don't know why Polycoms don't have this option, and why Cisco has such a limited version of it. I just got done re-reading the Polycom admin manual and I saw no way to set either the FTP server, username or password via DHCP or config file. I hope that answers the OP's question. -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
The ease of configuration is the biggest concern here. I'd like to try everything to avoid pressing the keypad of the phone to change the setting. There is no way I want to go to a site to make a configuration change. We will most likely deploy a small appliance as a local dhcp and ftp server inside a customer's network. Therefore security is less an issue. We only have ssh access to the local server. Then if we make any change, we just change the setting on the server and send a command to reboot the phone. Again there is no way I visit each site and punch keys on each phone. -Original Message- From: [EMAIL PROTECTED] [mailto:asterisk-users- [EMAIL PROTECTED] On Behalf Of Kristian Kielhofner Sent: Tuesday, October 26, 2004 9:34 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 Adam Goryachev wrote: On Wed, 2004-10-27 at 16:31, Kristian Kielhofner wrote: Richard wrote: The default user name and password is a huge issue in some cases. For example, hackers can get into the server, grab the configuration, program their own phone and make free calls. Another example, if you have multiple domains, then you want different username/passwd for each domain. I can understand this, although I would like to think that good network design could prevent you from opening up your ftp (unencrypted!) server to the internet at large (using a firewall, etc.). Well, since the phones don't support scp or sftp, then I don't suppose those options are available. This is why the Cisco and Polycom's use CDP for VLAN configuration - you can set the VLAN BEFORE the DHCP request is made - to make sure that you get to the proper network (and DHCP server) in the first place. But of course, the phones may not all be on your lan! They could be anywhere on the internet. This is the whole point of VoIP. The only way that I see your problem working is if Polycom adds the option to set username and password via custom DHCP options to the firmware. That way you would have the username and password BEFORE you needed to login to the FTP server. Maybe an idea for them? Precisely, I think this is what the original poster wanted to know. How to set the ftp user/pass from DHCP. PS, of course, if the phone is elsewhere, then you also can't set the ftp user/pass via DHCP, since it isn't your DHCP server. Also, wherever I mentioned setting FTP user/pass via DHCP, you should add setting the FTP server name via DHCP as well. This means you can look at the box of a polycom phone (since the MAC address is on the outside of the box), configure the phone extensions/registrations/etc, hand the box to the user and tell them to go back to their desk and plug it in. Currently, you need to unpack the phone, configure the FTP servername, user, passwd, re-pack the box, and then tell the user to go plug it in etc... Regards, Adam Adam, I understand that the premise with VoIP phones can be placed anywhere on the internet. I don't think that phones like the Polycom are optimally designed to be used at locations that are not connected to a lan not specifically designed for them. I picture Polycoms, Ciscos, etc. used in traditional office settings, or branch offices with VPNs anyways. Lets face it - they speak SIP only, and their NAT functions are severely limited anyways (no NAT mapping, STUN, etc.). All of this combined do not make for a very good single remote location phone. I would love to see someone be able to unplug the phone from their desk and plug it in at home (with no prior setup, knowledge, etc.), but I understand why that just won't work (right now). Sipuras can download their config and store it in non-volatile memory. I don't know why Polycoms don't have this option, and why Cisco has such a limited version of it. I just got done re-reading the Polycom admin manual and I saw no way to set either the FTP server, username or password via DHCP or config file. I hope that answers the OP's question. -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Richard wrote: The ease of configuration is the biggest concern here. I'd like to try everything to avoid pressing the keypad of the phone to change the setting. There is no way I want to go to a site to make a configuration change. We will most likely deploy a small appliance as a local dhcp and ftp server inside a customer's network. Therefore security is less an issue. We only have ssh access to the local server. Then if we make any change, we just change the setting on the server and send a command to reboot the phone. Again there is no way I visit each site and punch keys on each phone. I totally understand. For a device to be ftp/dhcp server, may I reccomend a Linksys WRT54G? If you don't already have some, get one a get OpenWRT. You could SSH into it on the WAN (with a dyndns client if you need one), and run a DNS,DHCP and FTP server on it internally. Or ipsec, or even Asterisk! I highly suggest you try them out. Remember that you can always turn off the wireless radio. -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Kristian Kielhofner wrote: Richard wrote: The ease of configuration is the biggest concern here. I'd like to try everything to avoid pressing the keypad of the phone to change the setting. There is no way I want to go to a site to make a configuration change. We will most likely deploy a small appliance as a local dhcp and ftp server inside a customer's network. Therefore security is less an issue. We only have ssh access to the local server. Then if we make any change, we just change the setting on the server and send a command to reboot the phone. Again there is no way I visit each site and punch keys on each phone. I totally understand. For a device to be ftp/dhcp server, may I reccomend a Linksys WRT54G? If you don't already have some, get one a get OpenWRT. You could SSH into it on the WAN (with a dyndns client if you need one), and run a DNS,DHCP and FTP server on it internally. Or ipsec, or even Asterisk! I highly suggest you try them out. Remember that you can always turn off the wireless radio. -- Kristian Kielhofner I meant to say WRT54GS. Sorry. -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
Haha, we are on the same page... wrt54gs with openwrt is exactly what I am using now, though not too happy with the slow progress of kernel source update... -Original Message- From: [EMAIL PROTECTED] [mailto:asterisk-users- [EMAIL PROTECTED] On Behalf Of Kristian Kielhofner Sent: Tuesday, October 26, 2004 10:24 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 Kristian Kielhofner wrote: Richard wrote: The ease of configuration is the biggest concern here. I'd like to try everything to avoid pressing the keypad of the phone to change the setting. There is no way I want to go to a site to make a configuration change. We will most likely deploy a small appliance as a local dhcp and ftp server inside a customer's network. Therefore security is less an issue. We only have ssh access to the local server. Then if we make any change, we just change the setting on the server and send a command to reboot the phone. Again there is no way I visit each site and punch keys on each phone. I totally understand. For a device to be ftp/dhcp server, may I reccomend a Linksys WRT54G? If you don't already have some, get one a get OpenWRT. You could SSH into it on the WAN (with a dyndns client if you need one), and run a DNS,DHCP and FTP server on it internally. Or ipsec, or even Asterisk! I highly suggest you try them out. Remember that you can always turn off the wireless radio. -- Kristian Kielhofner I meant to say WRT54GS. Sorry. -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
More thoughts, polycom can have two options to send ftp login info. 1. use dhcp to push username and password. It can use either the existing dhcp options, e.g. bootp file name field as a string to send username/password, or define a new vendor specified field. 2. use the existing ftp account to get the config file. If it includes a new ftp username/password, phone should reboot and try to use the new username and password. This is the way how cisco ata works with new authentication key. Richard -Original Message- From: [EMAIL PROTECTED] [mailto:asterisk-users- [EMAIL PROTECTED] On Behalf Of Kristian Kielhofner Sent: Tuesday, October 26, 2004 10:24 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 Kristian Kielhofner wrote: Richard wrote: The ease of configuration is the biggest concern here. I'd like to try everything to avoid pressing the keypad of the phone to change the setting. There is no way I want to go to a site to make a configuration change. We will most likely deploy a small appliance as a local dhcp and ftp server inside a customer's network. Therefore security is less an issue. We only have ssh access to the local server. Then if we make any change, we just change the setting on the server and send a command to reboot the phone. Again there is no way I visit each site and punch keys on each phone. I totally understand. For a device to be ftp/dhcp server, may I reccomend a Linksys WRT54G? If you don't already have some, get one a get OpenWRT. You could SSH into it on the WAN (with a dyndns client if you need one), and run a DNS,DHCP and FTP server on it internally. Or ipsec, or even Asterisk! I highly suggest you try them out. Remember that you can always turn off the wireless radio. -- Kristian Kielhofner I meant to say WRT54GS. Sorry. -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[Asterisk-Users] polycom IP 500/600
Title: polycom IP 500/600 Hi, A few questions about polycom IP 500/600. . how do I reset everything to factory default? The combination of 4,6,8,* seems only reset the network setup. Other settings, e.g. time server, SIP configure are still there. . is a way to push ftp username/password via dhcp? Id like to change the default username and password, but dont want to manually set each phone. Thanks, ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Richard wrote: Hi, A few questions about polycom IP 500/600. . how do I reset everything to factory default? The combination of 4,6,8,* seems only reset the network setup. Other settings, e.g. time server, SIP configure are still there. . is a way to push ftp username/password via dhcp? Id like to change the default username and password, but dont want to manually set each phone. Thanks, Richard, Use DHCP to assign a TFTP server (isc-dhcpd: next server or maybe next-server option). Put configs for your phones on that tftp server. The wiki has a link to this: http://www.voip-info.org/tiki-index.php?page=Polycom+Phones http://www.freedomphones.net/polycom/files/ -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
Title: Message Try resetting user settings from the phonemenu. Peter -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of RichardSent: Wednesday, 27 October 2004 7:24 AMTo: [EMAIL PROTECTED]Subject: [Asterisk-Users] polycom IP 500/600 Hi, A few questions about polycom IP 500/600. . how do I reset everything to factory default? The combination of 4,6,8,* seems only reset the network setup. Other settings, e.g. time server, SIP configure are still there. . is a way to push ftp username/password via dhcp? Id like to change the default username and password, but dont want to manually set each phone. Thanks, ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, -Original Message- From: [EMAIL PROTECTED] [mailto:asterisk-users- [EMAIL PROTECTED] On Behalf Of Kristian Kielhofner Sent: Tuesday, October 26, 2004 11:34 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 Richard wrote: Hi, A few questions about polycom IP 500/600. . how do I reset everything to factory default? The combination of 4,6,8,* seems only reset the network setup. Other settings, e.g. time server, SIP configure are still there. . is a way to push ftp username/password via dhcp? I'd like to change the default username and password, but don't want to manually set each phone. Thanks, Richard, Use DHCP to assign a TFTP server (isc-dhcpd: next server or maybe next-server option). Put configs for your phones on that tftp server. The wiki has a link to this: http://www.voip-info.org/tiki-index.php?page=Polycom+Phones http://www.freedomphones.net/polycom/files/ -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [Asterisk-Users] polycom IP 500/600
Kristian Kielhofner wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? As a polycom user, it is the default username that is the issue. It is mixed case, something like Polycom. I think the good old tty drivers still support upper case only terminals, so as soon as it sees the capital P, it will turn on folding. -- Bob Knight [-w] the work option [EMAIL PROTECTED] 925-449-9163 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
Use something like ProFTPD or something that is supported under their manual (These are better FTP daemons anyway). The default username/pass is PlcmSpIp btw. -Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob Knight Sent: Tuesday, October 26, 2004 7:17 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 Kristian Kielhofner wrote: Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? As a polycom user, it is the default username that is the issue. It is mixed case, something like Polycom. I think the good old tty drivers still support upper case only terminals, so as soon as it sees the capital P, it will turn on folding. -- Bob Knight [-w] the work option [EMAIL PROTECTED] 925-449-9163 ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [Asterisk-Users] polycom IP 500/600
The default user name and password is a huge issue in some cases. For example, hackers can get into the server, grab the configuration, program their own phone and make free calls. Another example, if you have multiple domains, then you want different username/passwd for each domain. -Original Message- From: [EMAIL PROTECTED] [mailto:asterisk-users- [EMAIL PROTECTED] On Behalf Of Kristian Kielhofner Sent: Tuesday, October 26, 2004 1:55 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] polycom IP 500/600 Richard wrote: Hi Kristian, I'd like to use ftp because of several advantages it has. For example, ability to change the time stamp and reload the phone. But the default password is a big issue. I'd like to change it but don't want to go to each phone and reset it. Any way to change it? Thanks, I understand why you would want to use FTP (no filename changes). Why is the default password such a big issue? This is a chicken or the egg - how is the phone supposed to know it's new ftp password BEFORE it can get the config file - via FTP!?! -- Kristian Kielhofner ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
