Fortinet FortiVoice, Administrator'S Manual

Page 1: ...FortiVoice Enterprise Phone System 4 0 0 Administration Guide ...

Page 2: ... Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified performance metrics and in such event only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet For absolute clarity any such warranty will be limited to performance in the same ideal conditions as in For...

Page 3: ...g to the web based manager 15 Connecting to the CLI 16 Setting up the system using the wizard 18 Testing the setup 18 Configuring setups for phone users 19 Accessing the user web portal 19 Changing the user PIN 20 Receiving and sending fax 20 Using the operator console 20 Setting user privileges and preferences 20 Setting the feature codes 20 Monitoring the FortiVoice System 21 Viewing overall sys...

Page 4: ...figuring DNS 46 Configuring DHCP server 46 Capturing voice and fax packets 48 Configuring administrator accounts and access profiles 50 Configuring administrator accounts 50 Configuring administrator profiles 52 Using high availability 53 About high availability 53 About the heartbeat and synchronization 55 How to use HA 56 Monitoring the HA status 57 Configuring the HA mode and group 60 Example F...

Page 5: ...hold 113 Working with FortiVoice profiles 115 Configuring SIP profiles 115 Modifying caller IDs 117 Scheduling the FortiVoice unit 118 Configuring phone profiles 119 Configuring LDAP profiles 122 Configuring user privileges 129 Configuring Extensions 130 Setting up local extensions 130 Configuring IP extensions 130 Modifying analog extension 200D T model only 139 Setting up remote extensions 142 C...

Page 6: ...guring hotel management settings 200 Configuring hotel room status 201 Configuring Call Features 203 Configuring auto attendants 203 Viewing auto attendant hierarchies 206 Configuring key actions 208 Configuring user privileges 210 Configuring account codes 215 Mapping speed dials 215 Configuring conference calls 216 Recording calls 218 Configuring call recordings 218 Setting the recorded file for...

Page 7: ...tifications 251 Configuring the report schedule 251 Choosing call rate 251 Generating a report manually 252 Setting call rates 252 Configuring Station Messaging Detail Record SMDR 253 Configuring SMDR settings 253 Setting SMDR formats 253 Configuring alert email 254 Configuring alert recipients 255 Configuring alert categories 255 Installing firmware 257 Testing firmware before installing it 257 I...

Page 8: ...ining Documentation Scope Conventions Registering your Fortinet product Before you begin take a moment to register your Fortinet product at the Fortinet Technical Support web site https support fortinet com Many Fortinet customer services such as firmware updates and technical support require product registration For more information see the Fortinet Knowledge Base article Registration Frequently ...

Page 9: ...rtinet Technical Documentation web site http docs fortinet com Fortinet Knowledge Base The Fortinet Knowledge Base provides additional Fortinet technical documentation such as troubleshooting and how to articles examples FAQs technical notes a glossary and more Visit the Fortinet Knowledge Base at http kb fortinet com Comments on Fortinet technical documentation Please send information about any e...

Page 10: ...ipment Highlights useful additional information often tailored to your workplace activity Table 1 Typographical conventions in Fortinet technical documentation Convention Example Button menu text box field or check box label From Minimum log level select Notification CLI input config system dns set primary address_ipv4 end CLI output FGT 602803030703 get system settings comments null opmode nat Em...

Page 11: ...yntax Constraint notations such as address_ipv4 indicate which data types or string patterns are acceptable value input Navigation Go to Monitor Status DHCP Publication For details see the FortiGate Administration Guide Table 1 Typographical conventions in Fortinet technical documentation Table 2 Command syntax notation Convention Description Square brackets A non required word or series of words ...

Page 12: ...ch as admin mail example com xxx_url A uniform resource locator URL and its associated protocol and host name prefix which together form a uniform resource identifier URI such as http www fortinet com xxx_ipv4 An IPv4 address such as 192 168 1 99 xxx_v4mask A dotted decimal IPv4 netmask such as 255 255 255 0 xxx_ipv4mask A dotted decimal IPv4 address and netmask separated by a space such as 192 16...

Page 13: ... that you must enter either enable or disable but must not enter both Options delimited by spaces Non mutually exclusive options For example http https ping snmp ssh telnet indicates that you may enter all or a subset of those options in any order in a space delimited list such as ping https ssh To change the options you must re type the entire list For example to add snmp to the previous example ...

Page 14: ...ager is not yet configured if you are connecting for the first time you have just reset the configuration to its default state you have just restored the firmware In these cases you must access either interface using the default settings After you connect you can use the web based manager or CLI to configure basic network settings and access the CLI and or web based manager through your network Ho...

Page 15: ...ity CA Self signed certificates cannot be verified with a proper CA and therefore might be fraudulent You must manually indicate whether or not to trust the certificate The certificate might belong to another web site The common name CN field in the certificate which usually contains the host name of the web site does not exactly match the URL you requested This could indicate server identity thef...

Page 16: ...o DB 9 or null modem cable connect your computer s serial communications COM port to the FortiVoice unit s console port 2 Verify that the FortiVoice unit is powered on 3 On your management computer start HyperTerminal 4 On Connection Description enter a Name for the connection and select OK 5 On Connect To from Connect using select the communications COM port where you connected the FortiVoice uni...

Page 17: ...hernet cable connect your computer s Ethernet port to the FortiVoice unit s port1 3 Verify that the FortiVoice unit is powered on 4 On your management computer start your SSH client 5 In Host Name or IP Address type 192 168 1 99 6 In Port type 22 7 From Connection type select SSH 8 Select Open The SSH client connects to the FortiVoice unit The SSH client may display a warning if this is the first ...

Page 18: ... peer test call Depending on the phone you use the procedure to connect the phone may vary Refer to the phone user manuals for instructions Generally you need to configure the following on the phone after powering it up and connecting it to the network Enter the IP address of the phone if it is not DHCP enabled Enter the SIP server IP address and port number 5060 by default of the FortiVoice unit ...

Page 19: ... waiting or do not disturb You may need to tailor some information to your network or phone users This topic includes Accessing the user web portal Changing the user PIN Receiving and sending fax Using the operator console Setting user privileges and preferences Setting the feature codes Accessing the user web portal FortiVoice user web portal is a special web site located on a FortiVoice unit Thi...

Page 20: ... and sending fax Inform the phone users that they can receive and send faxes on the user web portal For more information see Configuring fax on page 227 Using the operator console If you have enabled the operator role for an extension inform the extension user so that the user can process corporate calls on the user web portal For more information see Operator role on page 211 Setting user privile...

Page 21: ...atus menu displays system status most of which pertain to the entire system such as service status and system resource This topic includes Viewing the dashboard Viewing the Call Statistics Using the CLI Console Viewing the dashboard Status Dashboard displays first after you log in to the web based manager It contains a dashboard with widgets that each indicates performance level or other statistic...

Page 22: ...System Information widget displays the serial number and basic system statuses such as the firmware version system time and up time In addition to displaying basic system information the System Information widget lets you change the firmware To change the firmware click Update for Firmware version For more information see Installing firmware on page 257 To view the widget go to Status Dashboard If...

Page 23: ...ource widget displays the CPU memory and disk space usage It also displays the system load and current number of IP sessions To view the widget go to Status Dashboard If the widget is not currently shown click Add Content and mark the check box for the widget The system resources history can also be viewed in this widget by clicking History The system resources history contains four graphs Each gr...

Page 24: ... direction that the FortiVoice unit recorded To view call statistics go to Status Dashboard Call Statistics Using the CLI Console Go to Status Dashboard Console to access the CLI without exiting from the web based manager You can click the Open in New Window at the bottom of the page to move the CLI Console into a pop up window that you can resize and reposition For more information about CLI comm...

Page 25: ...rking see Configuring call parking on page 226 Viewing conference calls Status Phone System Conference displays the conference call records including the name of the conference call the extension number of the call the displayed name of the caller and the call duration You can stop a caller from attending the conference call by selecting the caller and clicking the Kick icon For more information s...

Page 26: ...lay extensions in each of the following statuses once selected Not registered The extension is not registered with the FortiVoice unit and is not in service Unavailable The extension is not reachable Disable Displays all disabled extensions Deregister Select an extension and click this icon to remove the extension assigned to the phone Status The status of the extension See Category Status on page...

Page 27: ...on connection status with the VoIP or PSTN service provider The trunk statuses include Not registered The trunk is not registered with the VoIP or PSTN service provider and is not in service In service The trunk is registered with the VoIP or PSTN service provider and is in service Unavailable The trunk is not reachable Alarm detected There is a problem with the trunk Admin down The trunk is disab...

Page 28: ...sign an existing extension user to an unassigned phone 1 Go to Status Phone System Unassigned Phone 2 Select an unassigned phone 3 Click Action and select Assign to existing extension 4 Select the extension to associate with the unassigned phone 5 Click Apply to existing extension Viewing DHCP client list Status Phone System DHCP displays all the DHCP enabled devices connected to the Assign to new...

Page 29: ...rver and downloads the TFTP server identity to the device that gets an IP address from the DHCP server DHCP option 66 is defined in RFC 2132 If using your own DHCP server set the DHCP server option 66 to the FortiVoice unit s TFTP server Opt66 value For more information see Configuring DHCP server on page 46 If the FortiVoice unit and the SIP phone with an IP assigned by a DHCP server are on diffe...

Page 30: ...ing fax accounts see Configuring fax on page 227 To view fax accounts go to Status Storage Fax The fax accounts are listed with their names numbers display names storage sizes and faxes stored You can double click a fax account and view the detailed information on the faxes it stores You can also click Download PDF to save a fax Viewing archived faxes The Fax Archive tab lists the faxes sent and r...

Page 31: ...sed and call type Double clicking a record displays the detailed call information including the CDR flow You can filter the call records display by clicking the Search button and enter criteria that records must match in order to be visible You can also save the call records by clicking the Download button Viewing generated reports The Call Reports tab displays the call reports and call center rep...

Page 32: ...to view such as report1 html The report appears in a new browser window Viewing log messages The Logs submenu displays locally stored log files If you configured the FortiVoice unit to store log messages locally that is to the hard disk you can view the log messages currently stored in each log file Logs stored remotely cannot be viewed from the web based manager of the FortiVoice unit If you want...

Page 33: ... search when viewing the contents of an individual log file this search displays results regardless of which log file contains them For more information see Searching log messages on page 36 4 To view messages contained in logs double click a log file To view the current page s worth of the log messages as an HTML table right click and select Export to Table The table appears in a new tab To downl...

Page 34: ...fault each page s worth of log messages is listed with the log message with the lowest index number towards the top To sort the page s entries in ascending or descending order 1 Click the column heading by which you want to sort The log messages are sorted in ascending order 2 To sort in descending order click the column heading again Depending on your currently selected theme the column heading m...

Page 35: ...Queue Hotel 2 Double click the row corresponding to time period whose log messages you want to view 3 For each column whose order you want to change click and drag its column heading to the left or right 4 Click Save View Using the right click pop up menus When you right click on a log message a context menu appears Figure 9 Using the right click menus on log reports Make visible Make invisible Ri...

Page 36: ... search criteria by configuring one or more of the following Select All Select to select all log messages in the current page so that you can export all messages to a table Clear Selection Select to deselect one or multiple log messages Export to Table Select to export the selected log messages to a table format A new tab named Exported Table appears displaying the exported information The table f...

Page 37: ...Download Select to save all directories or search result Number The extension number For information on creating extension numbers see Setting up local extensions on page 130 Display Name The name displaying on the extension This is usually the name of the extension user Office The name of the remote office trunk For more information see Configuring office peers on page 182 Type The extension type...

Page 38: ...rfaces Configuring the network interfaces Configuring static routes Configuring DNS Configuring DHCP server Capturing voice and fax packets About IPv6 Support IP version 6 IPv6 handles issues that were not around decades ago when IPv4 was created such as running out of IP addresses fair distributing of IP addresses built in quality of service QoS features better multimedia support and improved han...

Page 39: ...ces Redundant interfaces Loopback interfaces VLAN subinterfaces A Virtual LAN VLAN subinterface also called a VLAN is a virtual interface on a physical interface The subinterface allows routing of VLAN tagged packets using that physical interface but it is separate from any other traffic on the physical interface Virtual LANs VLANs use ID tags to logically separate devices on a network into smalle...

Page 40: ...s always up no physical link dependency and the attached subnet is always present in the routing table The FortiVoice s loopback IP address does not depend on one specific external port and is therefore possible to access it through several physical or VLAN interfaces In the current release you can only add one loopback interface on the FortiVoice unit For information about adding a loopback inter...

Page 41: ...ils see About FortiVoice logical interfaces on page 39 IP Netmask Displays the IP address and netmask of the network interface IPv6 Netmask Displays the IPv6 address and netmask of the network interface For more information about IPv6 support see About IPv6 Support on page 38 Access Displays the administrative access and phone user access that are enabled on the network interface such as HTTPS for...

Page 42: ... Interface dialog Figure 14 Creating logical interfaces GUI field Description Interface Name If you are editing an existing interface this field displays the name such as port2 and media access control MAC address for this network interface If you are creating a logical interface enter a name for the interface ...

Page 43: ...0 is used for high priority frames and 4095 is reserved Redundant If you want to create a redundant interface select the interface members from the available interfaces Usually you need to include two or more interfaces as the redundant interface members Loopback If you want to add a loopback interface select the Loopback type and the interface name will be automatically reset to loopback You can ...

Page 44: ...etwork interface that will be the source of traps see Configuring the network interfaces on page 40 TELNET Enable to allow Telnet connections to the CLI through this network interface Caution HTTP and Telnet connections are not secure and can be intercepted by a third party If possible enable this option only for network interfaces connected to a trusted private network or directly to your managem...

Page 45: ...ave multiple gateway routers each of which should receive packets destined for a different subset of IP addresses To determine which route a packet will be subject to the FortiVoice unit compares the packet s destination IP address to those of the static routes and forwards the packet to the route with the large prefix match When you add a static route through the web based manager the FortiVoice ...

Page 46: ...P addresses of DNS servers or you may want to use the IP addresses of your own DNS servers The DNS tab lets you configure the DNS servers that the FortiVoice unit queries to resolve domain names into IP addresses To configure the primary and secondary DNS servers 1 Go to System Network DNS 2 In Primary DNS server enter the IP address of the primary DNS server 3 In Secondary DNS server enter the IP...

Page 47: ... that the slave unit has the same interface as the master unit For information on HA see Using high availability on page 53 Gateway Enter the IP address of the default gateway that the DHCP server assigns to DHCP clients DNS options Select to use either a specific DNS server or the system s DNS settings If you select a specific DNS server enter the Primary DNS server and the Secondary DNS server f...

Page 48: ...that the DHCP server assigns to the DHCP clients If you have your own TFTP server for such information enter its IP address in this field However SIP phone auto provisioning will not work in this case For more information see Configuring SIP phone auto provisioning on page 108 Lease time Seconds Enter the length of time an IP address remains assigned to a client Once the lease expires the address ...

Page 49: ...iod for performing the packet capture 5 If you choose SIP or Use protocol for Filter from the Available peers field select the extension or trunk of which you want to capture the voice packets and click to move them into the Selected peers field You can select up to 3 peers 6 If you want to limit the scope of traffic capture in the IP HOST field enter a maximum of 3 IP addresses or host names for ...

Page 50: ...ate additional administrator accounts with restricted permissions To view and configure administrator accounts 1 Go to System Admin Administrators Figure 18 Administrators tab 2 Either click New to add an account or double click an account to modify it A dialog appears 3 Configure the following GUI field Description Name Displays the name of the administrator account Extension Displays the extensi...

Page 51: ...rmation on extensions see Configuring IP extensions on page 130 Authentication type Select an administrator authentication type Local or LDAP Create password Password Enter this account s password The password can contain any character except spaces This field does not appear if Authentication type is LDAP Caution Do not enter a FortiVoice administrator password less than six characters long For b...

Page 52: ...0 255 255 255 0 Note For additional security restrict all trusted host entries to administrative hosts on your trusted private network For example if your FortiVoice administrators log in only from the 10 10 10 10 24 subnet to prevent possibly fraudulent login attempts from unauthorized locations you could configure that subnet in the Trusted Host 1 Trusted Host 2 and Trusted Host 3 fields Note Fo...

Page 53: ...age 56 This section contains the following topics About high availability About the heartbeat and synchronization How to use HA Monitoring the HA status Configuring service based failover Example Failover scenarios About high availability FortiVoice units operate in active passive HA mode which has the following features 2 FortiVoice units in the HA group Both configuration and data synchronized F...

Page 54: ... the heartbeat and synchronization connection For details see About the heartbeat and synchronization on page 55 To configure FortiVoice units operating in HA mode you usually connect only to the primary unit master The primary unit s configuration is almost entirely synchronized to secondary units slave so that changes made to the primary unit are propagated to the secondary units Exceptions to t...

Page 55: ... synchronize the configuration For details see the FortiVoice CLI Reference During normal operation the secondary unit expects to constantly receive heartbeat traffic from the primary unit Loss of the heartbeat signal interrupts the HA group and generally triggers a failover For details see Failover scenario 1 Temporary failure of the primary unit on page 68 Exceptions include system restarts and ...

Page 56: ...over purposes These settings are synchronized Main HA configuration The main HA configuration which includes the HA mode of operation such as master or slave is not synchronized because this configuration must be different on the primary and secondary units For details see Configuring the HA mode and group on page 60 HA service monitoring configuration In active passive HA the HA service monitorin...

Page 57: ...nfigured for whichever FortiVoice unit is currently acting as the primary unit 3 If you want to trigger failover when hardware or a service fails even if the heartbeat connection is still functioning configure service monitoring For details see Configuring service based failover on page 66 4 Monitor the status of each group member For details see Monitoring the HA status on page 57 To monitor HA e...

Page 58: ... a failure and has taken the primary unit offline triggering failover For secondary units this indicates that synchronization has failed once a subsequent failure will trigger failover For details see On failure on page 62 failed Service network interface monitoring has detected a failure and the diagnostic connection is currently determining whether the problem has been corrected or failover is r...

Page 59: ...g the configuration For information on items that are not synchronized see Configuration settings that are not synchronized on page 55 Data Displays the time at which the secondary unit HA daemon will synchronize mail data from the primary unit to the secondary unit The message slave unit is currently synchronizing appears when the HA daemon is synchronizing data Actions click HERE to start a conf...

Page 60: ...ess of switching to operating in HA mode After the secondary unit starts up and connects with the primary unit to form an HA group the first configuration synchronization may fail in special circumstances To prevent both the secondary and primary units from simultaneously acting as primary units the effective HA mode of operation becomes off If subsequent synchronization fails the secondary unit s...

Page 61: ...heartbeat and synchronization on page 55 You can directly connect the heartbeat network interfaces of the two FortiVoice units using a crossover Ethernet cable To configure HA options 1 Go to System High Availability Configuration Figure 22 Active passive HA primary unit 2 Configure the following sections as applicable Configuring the primary HA options on page 61 Configuring the advanced options ...

Page 62: ... s effective HA mode of operation resumes its configured master role This also means that the secondary unit needs to give back the master role to the primary unit This behavior may be useful if the cause of failure is temporary and rare but may cause problems if the cause of failure is permanent or persistent wait for recovery then restore slave role On recovery the failed primary unit s effectiv...

Page 63: ...conds or more to allow the secondary unit enough time to confirm unresponsiveness by sending additional heartbeat signals Note If the failure detection time is too short the secondary unit may falsely detect a failure when during periods of high load Caution If the failure detection time is too long the primary unit could fail and a delay in detecting the failure could mean that call is delayed or...

Page 64: ...ces on page 40 5 Select a row in the table and click Edit to configure the following HA settings on the interface The interface IP address must be different from but on the same subnet as the IP address of the other heartbeat network interface of the other member in the HA group When configuring the other FortiVoice unit in the HA group use this value as the remote peer IP GUI item Description Por...

Page 65: ...ronization This network interface must be connected directly or through a switch to the Secondary heartbeat network interfaces of the other member in the HA group Caution Using the same network interface for both HA synchronization heartbeat traffic and other network traffic could result in issues with heartbeat and synchronization during times of high traffic load and is not recommended Note In g...

Page 66: ...de of operation 3 Expand the service monitor area if required 4 Select a row in the table and click Edit to configure it 5 For Remote HTTP configure the following Virtual IP action Select whether and how to configure the IP addresses and netmasks of the FortiVoice unit whose effective HA mode of operation is currently master For example a primary unit might be configured to receive phone call traf...

Page 67: ... Displays the service name Remote IP Enter the peer IP address Port Enter the port number of the peer SIP UDP service Timeout Enter the timeout period for one connection test Interval Enter the frequency of the tests Retries Enter the number of consecutively failed tests that are allowed before the primary unit is deemed unresponsive and a failover occurs GUI item Description Enable Select to enab...

Page 68: ...ew primary unit and continues processing phone calls There is no data loss when failover happens although active calls are disconnected and line appearance and extension appearance take time to restore Call data consists of the FortiVoice call detailed records recorded calls voicemail call directories fax and voice prompts The user web portal is not affected Here is what happens during this proces...

Page 69: ...r alert email similar to the following This is the HA machine at 172 16 5 11 The following event has occurred SLAVE asks us to switch roles recovery after a restart The state changed from MASTER to SLAVE After recovery P1 also sends out an alert email similar to the following This is the HA machine at 172 16 5 10 The following critical event was detected The system was shutdown wait for recovery t...

Page 70: ...he secondary unit If you need to reboot or reload not shut down S2 for any reason such as a firmware upgrade or a process restart by using the CLI commands execute reboot or execute reload or by clicking the Restart button under Monitor System Status Status on the GUI the behavior of P1 and S2 is as follows P1 will send out an alert email similar to the following informing the administrator of the...

Page 71: ...d that P1 has failed and that S2 is switching its effective HA operating mode to master Recovering from a heartbeat link failure Because the hardware failure is not permanent that is the failure of the heartbeat link was caused by a disconnected cable not a failed port on one of the FortiVoice units you may want to return both FortiVoice units to operating in their configured modes when rejoining ...

Page 72: ...setting see On failure on page 62 For information about remote service monitoring see Configuring service based failover on page 66 The failure occurs when power to the switch that connects the P1 and S2 port1 interfaces is disconnected Remote service monitoring detects the failure of the network connection between the primary and secondary units Because of the On failure setting P1 changes its ef...

Page 73: ...the S2 can connect to the network and process calls 3 The effective HA operating mode of P1 switches to slave 4 P1 logs the event 5 P1 sends an alert email similar to the following indicating that P1 is switching its effective HA operating mode to slave This is the HA machine at 172 16 5 10 The following event has occurred SLAVE asks us to switch roles user requested takeover The state changed fro...

Page 74: ... FortiVoice unit to automatically keep its system time correct by synchronizing with Network Time Protocol NTP servers To configure the system time 1 Go to System Configuration Time 2 Configure the following Figure 25 Time Settings tab For many features to work including scheduling logging and certificate dependent features the FortiVoice system time must be accurate FortiVoice units support dayli...

Page 75: ... system date and time then configure Server and Sync Interval Server Enter the IP address or domain name of an NTP server You can add a maximum of 10 NTP servers The FortiVoice unit uses the first NTP server based on the selection mechanism of the NTP protocol Click the sign to add more servers Click the sign to remove servers Note that you cannot remove the last server To find the NTP servers tha...

Page 76: ...tem 4 0 0 Administration Guide Figure 26 Options tab GUI field Description Idle timeout Enter the amount of time that an administrator may be inactive before the FortiVoice unit automatically logs out the administrator For better security use a low idle timeout value ...

Page 77: ... SIP phone users passwords If any password does not conform to the policy require that user to change the password at the next login Minimum PIN length Set the minimum acceptable length 6 for the user PIN PIN must contain Number Select to include a number 0 9 in the PIN PIN special Select to include or or both in the PIN Apply PIN policy to Select Voicemail users to apply the policy to FortiVoice ...

Page 78: ...see FortiVoice MIBs on page 82 The FortiVoice SNMP implementation is read only SNMP v1 v2c and v3 compliant SNMP managers have read only access to FortiVoice system information and can receive FortiVoice traps The FortiVoice SNMP v3 implementation includes support for queries traps authentication and privacy Before you can use its SNMP queries you must enable SNMP access on the network interfaces ...

Page 79: ... in an SNMP trap For example if the CPU level exceeds the set trigger percentage once before returning to a lower level and the threshold is set to more than one an SNMP trap will not be generated until that minimum number of triggers occurs during the sample period Sample Period s Sets the time period in seconds during which the FortiVoice unit SNMP agent counts the number of triggers that occurr...

Page 80: ... an SNMP v3 user on page 81 Name Displays the name of the SNMP v3 user The SNMP Manager must be configured with this name Status A green check mark icon indicates that the user is enabled Queries A green check mark icon indicates that queries are enabled Traps A green check mark icon indicates that traps are enabled Security Level The security level of the SNMP v3 user GUI field Description Name E...

Page 81: ... each SNMP version that the SNMP managers use SNMP Event Enable each SNMP event for which the FortiVoice unit should send traps to the SNMP managers in this community Note Since FortiVoice checks its status in a scheduled interval not all the events will trigger traps For example FortiVoice checks its hardware status every 60 seconds This means that if the power is off for a few seconds but is bac...

Page 82: ...vacy you must specify the encryption protocol and password Both the encryption protocol and password on the SNMP manager and FortiVoice must match Notification Hosts Lists the SNMP managers that FortiVoice will send traps to Click Create to create a new entry You can add up to 16 host IP Address Enter the IP address of an SNMP manager By default the IP address is 0 0 0 0 so that any SNMP manager c...

Page 83: ...names of the MIB fields and describe the status information available for each You can view more details about the information available from all Fortinet MIB fields by compiling the MIB file into your SNMP manager and browsing the MIB fields MIB file name Description FortiVoice mib Displays the proprietary Fortinet MIB includes detailed FortiVoice system configuration information Your SNMP manage...

Page 84: ...Voice unit serial number fvSysVersion The firmware version currently running on the FortiVoice unit fvSysCpuUsage The current CPU usage fvSysMemUsage The current memory utilization fvSysLogDiskUsage The log disk usage fvSysStorageDiskUsa ge The storage disk usage fvSysEventCode System component events fvSysload Current system load fvSysHA fvHAMode Configured HA operating mode fvHAEffectiveMoce Eff...

Page 85: ...d the message After it reaches the maximum time the FortiVoice unit sends a final delivery status notification DSN email message to notify the sender that the email message was undeliverable Time interval for retry 10 120 minutes Enter the number of minutes between delivery retries for email messages in the deferred mail queues Relay Server Configure an SMTP relay if needed to which the FortiVoice...

Page 86: ...ypted This option must be enabled to initiate SMTPS connections Authentication Required Select the checkbox and click the arrow to expand the section and configure User name Enter the name of the FortiVoice unit s account on the SMTP relay Password Enter the password for the FortiVoice unit s user name Authentication type Available SMTP authentication types include AUTO automatically detect and us...

Page 87: ...36 pixels tall For best results use an image with a transparent background Non transparent backgrounds will not blend with the underlying theme graphic resulting in a visible rectangle around your logo graphic Note Uploading a graphic overwrites the current graphic The FortiVoice unit does not retain previous or default graphics If you want to revert to the current graphic use your web browser to ...

Page 88: ...ter a word or phrase that will appear on top of the voicemail login page such as Voicemail Login Login user name hint Enter a hint for the user name such as Your Email Address This hint will appear as a mouse over display on the login name field Voicemail theme Select a theme for the voicemail GUI Voicemail UI language Select the language in which voicemail pages will be displayed By default the F...

Page 89: ...esent when clients request secure connections including the web based manager HTTPS connections only phone user web interface HTTPS connections only To view local certificates go to System Certificate Local Certificate Certificate type Usage Server certificates The FortiVoice unit must present its local server certificate for the following secure connections the web based manager HTTPS connections...

Page 90: ...dates within which the certificate is valid Generate Click to generate a local certificate request For more information see Generating a certificate signing request on page 91 Download Click the row of a certificate file or certificate request file in order to select it then click this button and select either Download Download a certificate cer or certificate request csr file You can send the req...

Page 91: ...certificate authority CA For other related steps see Obtaining and installing a local certificate on page 90 To generate a certificate request 1 Go to System Certificate Local Certificate 2 Click Generate A dialog appears 3 Configure the following Figure 30 Generate Certificate Signing Request dialog GUI field Description Certification name Enter a unique name for the certificate request such as f...

Page 92: ...her a static IP address or a domain name It may be preferable if the FortiVoice unit does not have a domain name or public IP address IP Enter the static IP address of the FortiVoice unit This option appears only if ID type is Host IP Domain name Type the fully qualified domain name FQDN of the FortiVoice unit The domain name may resolve to either a static or if the FortiVoice unit is configured t...

Page 93: ... see Obtaining and installing a local certificate on page 90 To submit a certificate request 1 Using the web browser on the management computer browse to the web site for your CA 2 Follow your CA s instructions to place a Base64 encoded PKCS 12 certificate request uploading your certificate request 3 Follow your CA s instructions to download their root certificate and Certificate Revocation List C...

Page 94: ...cal certificate is signed by an intermediate CA rather than a root CA before clients will trust the FortiVoice unit s local certificate you must demonstrate a link with trusted root CAs thereby proving that the FortiVoice unit s certificate is genuine You can demonstrate this chain of trust either by installing each intermediate CA s certificate in the client s list of trusted CAs including a sign...

Page 95: ... Certificate 5 Click OK Downloading a PKCS 12 certificate You can export certificates from the FortiVoice unit to a PKCS 12 file for secure download and import to another platform or for backup purposes To download a PKCS 12 file 1 Go to System Certificate Local Certificate 2 Click the row that corresponds to the certificate in order to select it 3 Click Download then select Download PKCS12 File o...

Page 96: ...ation if the new configuration does not function correctly Backups let you compare changes in configuration You can back up system configuration or user configuration System configuration includes the configurations that make the FortiVoice unit work User configuration includes user configured settings such as voicemail greetings in addition to system configuration In addition to backing up your c...

Page 97: ...ring the configuration on page 262 Restoring the firmware In the Restore Firmware area under System Maintenance Configuration you can install a FortiVoice firmware from your local PC For details see Installing firmware on page 259 Downloading a trace file If Fortinet Technical Support requests a trace log for system analysis purposes you can download one using the web based manager Trace logs are ...

Page 98: ...ptions Customizing email history report and notification email templates Setting PBX location and contact information Identify the FortiVoice unit s location and its number To set the PBX location 1 Go to Phone System Settings Location 2 Configure the following You need to inform the users about some of the settings that affect them such as number settings and speed dial settings GUI field Descrip...

Page 99: ...ber Enter the main number of the FortiVoice unit This number is provided by your PSTN service provider Default prompt language Select a new default prompt language for the FortiVoice unit The default is English This setting affects all of the FortiVoice unit s voice prompts such as auto attendant and voice mail However if you change the sound file for an individual component such as auto attendant...

Page 100: ...trings at a time For example you can enter NXXX 6XXXX 3 5 X Pattern Description NXXX Matches any four digit number as long as the first digit is 2 or higher NXXNXXXXXX This pattern matches with areas with 10 digit dialing 1NXXNXXXXXX Matches the number 1 followed by an area code between 200 and 999 then any seven digit number In the North American Numbering Plan calling area you can use this patte...

Page 101: ...perator of the FortiVoice unit Supporting extension Enter the extension for technical support of the FortiVoice unit Default Setting Default SIP user password Enter your own password or let the FortiVoice unit generate one for you This password is used for configuring your SIP phone from the phone or the Web You need the phone s IP to access it from the Web This password appears when you add an ex...

Page 102: ...and Textbody messages each in the Content body field 5 To add a variable Select Insert Variables next to the area to insert a variable A pop up window appears Place your mouse cursor in the text message at the insertion point for the variable Click the name of the variable to add It appears at the insertion point To add another variable click the message area first then click the variable name Cli...

Page 103: ...otification sender ORIG_SUBJECT The subject of the original notification ORIG_DATE The date and time when the original notification is sent NOTIFY_FROM The email address such as notify example com used to send the original notifications NOTIFICATION_TO The email address of the notification receiver in the header of the notification ORIG_TO The email address of the original notification receiver Ta...

Page 104: ...the fax Table 21 Default missed call email template variables Variable Description MISSED_CALLERID The caller ID of the caller whose call is missed MISSED_CALLERNUM The phone number of the caller whose call is missed MISSED_DIAL_NUM The phone number that the missed phone caller dialed MISSED_DATE The day date and time when the call was missed Table 22 Default voicemail notification email template ...

Page 105: ...appear as voicemail_callerid in the replacement message if you select to insert it This is usually a simple and short form for a variable In Display Name enter words to describe the variable For example use voicemail date for the variable vm_date The display name appears in the variable list when you select Insert Variables while customizing a message or creating a variable In Content enter the va...

Page 106: ...ng prompt languages phone management and system capacity This topic includes Configuring SIP settings Configuring SIP phone auto provisioning Adding prompt languages Managing phone configurations Configuring system capacity Configuring SIP settings FortiVoice units support SIP communications To configure FortiVoice SIP settings 1 Go Phone System Advanced Settings SIP 2 Configure the following Figu...

Page 107: ...ension may terminate External extension registration interval Enter the default registration time interval for the extensions on other subnets as required by the FortiVoice unit in seconds The default is 30 and the range is 10 1800 Set a proper value for this option The FortiVoice unit requires that external extensions register more frequently with it to keep the connection However if the value is...

Page 108: ...conds that the extension will wait on hold for RTP packets before hanging up the call 0 means no time limit The default is 300 TLS Client Setting If you have enabled TLS configure the following Server certificate verification Select this option for the TLS clients to confirm the validity of a server s credentials with a trusted root certification authority s CA s certificates For information on up...

Page 109: ...vered the FortiVoice unit assigns an IP address to the phone and sends the basic PBX setup information to it If you want to upgrade your phone system and keep the current phone configuration do not select this option Otherwise your existing phone configuration will be overridden by the upgraded FortiVoice configuration PIN for phone configuration Enter a password to be used by a FortiFone that con...

Page 110: ...iguration see Configuring the network interfaces on page 40 Use static IP or host name Enter the current public IP address or public domain name of the server The SIP phones connect to this server to register and receive the PBX setup information and use it as the NTP server Advanced If you use different servers for SIP TFTP and NTP select to configure the settings of each server for the supported...

Page 111: ... using the free and robust audio program called Audacity which can be downloaded from http audacity sourceforge net and a microphone Once this program has been installed and the microphone connected then the file can be recorded Audacity cannot natively record in the format that FortiVoice unit requires Therefore some adjustments need to be made in the software as described in the following proced...

Page 112: ...le This is because the template is part of the configuration file generated for the phone type and will be sent to a phone of this type through auto provisioning For details see Configuring SIP phone auto provisioning on page 108 The phones with Comprehensive support level do not display their configuration templates because the FortiVoice unit fully supports the phones You can also manage the pho...

Page 113: ...ttings To configure system capacity 1 Go to Phone System Advanced Settings Miscellaneous 2 Under Concurrent Calls enter the outbound and inbound concurrent call limits you want 3 Under Voicemail enter the maximum message and greeting length you want 4 Configure Directory to set phone directory options For Dial by name option select how a caller can check the directory by dialing a name For Dial by...

Page 114: ...to dial the extension You can edit the extension or add a new one For details see Configuring IP extensions on page 130 iii When the extension rings record the sound file and hang up iv On the FortiVoice web based manager click Yes on the Voice recording request sent to specified extension dialog box If you select Music on hold for the profile type you can click Upload to get an existing sound fil...

Page 115: ...eted For information on extensions see Configuring Extensions on page 130 For information on SIP trunks see Configuring Trunks on page 167 To configure a SIP profile 1 Go to Phone System Profiles SIP and click New Stream If you select to use streaming files in the Stream URL field enter the URL where the streaming music is such as a radio station This way the music is delivered to the FortiVoice u...

Page 116: ...so select a specific DTMF method if required NAT Select if the VoIP service provider supports SIP NAT translation Video Select if the service provider supports video calling over SIP Direct media stream Select if the VoIP service provider supports direct media transfer to extensions by bypassing the PBX in between T 38 Select if the VoIP service provider supports fax over VoIP network Monitor Keep...

Page 117: ...SIP Transport SIP commonly uses TCP or UDP port 5060 and or 5061 Port 5060 is used for non encrypted SIP signaling sessions and port 5061 is typically used for SIP sessions encrypted with Transport Layer Security TLS Enable the protocols as required This option if applied to a user overrides the system wide transport settings For more information see Configuring SIP settings on page 106 Secure RTP...

Page 118: ...day can be modified but cannot be deleted For information on dial plan see Configuring Call Routing on page 186 For information on virtual numbers see Working with virtual numbers on page 165 Number Modification If you have entered a Match number configure the following values to modify it Strip Enter a number to hide the starting part of an extension from displaying 0 means no action For example ...

Page 119: ... users are allowed to choose the profile they want In addition any changes the administrator makes to a profile is automatically applied to the extensions that use the profile For more information see Configuring IP extensions on page 130 The phone profiles configured here appear as Admin defined profiles when you configure a SIP extension To configure a phone profile 1 Go to Phone System Profiles...

Page 120: ...el for the profile Description Enter any notes you have for this profile Configuration mode Select the profile mode Automatic the FortiVoice unit will generate a phone configuration file based on the information you provide See Automatic Configuration on page 121 This option is only available for FortiFone 260i and above Manual This option allows you to manually edit the phone configuration file S...

Page 121: ...e The range is from 0 7 with 7 being the highest 0 Background 1 Best Effort 2 Excellent Effort 3 Critical Applications 4 Video 100 ms latency and jitter 5 Voice 10 ms latency and jitter 6 Internetwork Control 7 Network Control If you select LLDP Link Layer Discovery Protocol the FortiVoice unit automatically generates the configuration file You need to enable LLDP support on your network switch Au...

Page 122: ...tiate the call For more information about digit map syntax definitions see Section 2 1 5 of RFC 3435 Set Programmable Phone Key Allows you to program the phone keys for FortiFone 260i to 560i For FortiFones with expansion modules you can select the module to program the keys After completing programing the keys you can click Download printable label to save and print out the configuration and labe...

Page 123: ...r item is using this entry a red dot appears in this column and the entry cannot be deleted Figure 35 Viewing the list of LDAP profiles You can add an LDAP profile to define a set of queries that the FortiVoice unit can use with an LDAP server You might create more than one LDAP profile if for example you have more than one LDAP server or you want to configure multiple separate query sets for the ...

Page 124: ...n in Use secure connection port 389 is typically used for non secure connections and port 636 is typically used for SSL secured LDAPS connections Fallback server name IP Optional Enter the fully qualified domain name FQDN or IP address of an alternate LDAP server that the FortiVoice unit can query if the primary LDAP server is unreachable Port Enter the port number where the fallback LDAP server l...

Page 125: ...the LDAP servers using an encrypted connection none Use a non secure connection SSL Use an SSL secured LDAPS connection Click Test LDAP Query to test the connection A pop up window appears For details see Testing LDAP profile queries on page 128 Base DN Enter the distinguished name DN of the part of the LDAP directory tree within which the FortiVoice unit will search for user objects such as ou Pe...

Page 126: ...ure the following Figure 37 Configuring user authentication LDAP options GUI field Description Try common name with base DN as bind DN Select to form the user s bind DN by prepending a common name to the base DN Also enter the name of the user objects common name attribute such as cn or uid into the field ...

Page 127: ...ure the query string LDAP user query Enter an LDAP query filter that selects a set of user objects from the LDAP directory The query string filters the result set and should be based upon any attributes that are common to all user objects but also exclude non user objects For example if user objects in your directory have two distinguishing characteristics their objectClass and extension attribute...

Page 128: ...s Caching LDAP queries can introduce a delay between when you update LDAP directory information and when the FortiVoice unit begins using that new information but also has the benefit of reducing the amount of LDAP network traffic associated with frequent queries for information that does not change frequently If this option is enabled but queries are not being cached inspect the value of TTL Ente...

Page 129: ...irectory that are used by that LDAP profile and you want the FortiVoice unit to discard outdated cached query results and reflect changes to the LDAP directory After the cache is emptied any subsequent request for information from that LDAP profile causes the FortiVoice unit to query the updated LDAP server refreshing the cache To clear the LDAP query cache 1 Go to Phone System Profiles LDAP 2 Dou...

Page 130: ...model only Setting up remote extensions Configuring fax extensions Setting extension user preferences Configuring IP extensions An IP extension is an IP phone connected through a network to a system An internal IP extension is a phone connected on the same LAN as the system An external IP extension is a phone connected outside the LAN To view the local IP extensions go to Extensions Extensions IP ...

Page 131: ...ox and empty the box Click Back to return to the SIP tab View phone configuration file Select a FortiFone extension and click this option to view the phone s configuration file When a phone is associated with an extension the FortiVoice unit generates a configuration file for the phone For details see To create or edit an IP extension on page 132 Check the password strength of SIP accounts See Aud...

Page 132: ...he extension number See IP on page 137 Department The link to the department of which this extension is a member For information on creating departments see on page 166 Disk Usage KB Displays the size of disk space used by voicemails for the user in kilobytes KB Phone Type The type of phone for this extension Phone Profile Displays the phone profile applied to the user For information on phone pro...

Page 133: ...abled Select to activate the extension Display name Enter the name displaying on the extension This is usually the name of the extension user External caller ID If you want to display a particular caller ID on a called phone instead of the FortiVoice main number see Main number on page 99 or the trunk phone number see Phone Number on page 172 enter it here The format must be name phone number such...

Page 134: ...he Common name ID field of the profile such as jdoe If you select Search user and try bind DN as the user authentication option in the authentication profile you select leave this field blank This option is only available if you select LDAP for Authentication type Phone language Select the voice prompts for the extension such as auto attendant and voicemail The default is English For information o...

Page 135: ...n you edit an extension assigned to a FortiFone that does not match what you entered in the Phone type field an orange exclamation mark icon appears Clicking this icon enters the FortiFone into the Phone type field An orange exclamation mark icon also appears beside the MAC address field Clicking this icon enters the FortiFone MAC address into the MAC address field Handset ID If your Phone type is...

Page 136: ...tails see Configuring phone profiles on page 119 Voice Mailbox Configure the extension s voice mailbox In some cases you may want other users or groups to share this voice mailbox For example a supervisor wants his her co workers to access his her voice mailbox while he she is away Main voice mailbox Select the extension s own voice mailbox Default or that of another extension as the voice mailbox...

Page 137: ...at you want to modify 4 Click Edit and follow the steps in To create or edit an IP extension on page 132 Fixing duplicate or missing numbers When there are duplicate missing or conflicting extensions an orange exclamation mark icon appears beside Show suggested numbers You can click the icon and fix the numbers Duplicate numbers occur when there are more than one extension with the same number Mis...

Page 138: ...guring extensions see Setting up local extensions on page 130 5 Close the Fix Numbers Issues in FortiVoice System page Importing a list of extensions The import feature provides a simple way to add a list of new extensions in one operation You can create a CSV file in any spreadsheet and import the data as long as the columns match the FortiVoice format Your CSV file must have a headline containin...

Page 139: ... Viewing analog extension To edit the default analog extension 1 Go to Extensions Extensions Analog Extensions 2 Select the default extension and click Edit 3 Configure the following GUI field Description Batch Edit If you want to apply the same changes to multiple extensions select the extensions and click this option Make the changes and click Apply To All Maintenance Select an extension and cli...

Page 140: ... numbers available for use If it is deselected clicking in the Number field displays the extension numbers already in use This option also serves as a diagnostic tool for finding and fixing duplicate or missing numbers Missing numbers are the extensions that have user IDs but not numbers When there are duplicate or missing numbers an orange exclamation mark icon appears beside this option You can ...

Page 141: ...page 101 the password appears here However you can change it Authentication type Select the extension s authentication type Local or LDAP LDAP profile If you select LDAP for Authentication type select an LDAP profile to apply to this extension For information on LDAP profile see Configuring LDAP profiles on page 122 You can click New to create a new profile or Edit to modify the selected one Authe...

Page 142: ...onfigured to dial the user s cellular phone This way the user is available outside the office Remote extensions are designed to operate with local major telephone service providers The feature may not function correctly with some telephone and mobile operator s networks especially for international phone numbers and mobile phones roaming internationally To configure a remote extension 1 Go to Exte...

Page 143: ...o display the extension numbers available for use If it is deselected clicking in the Number field displays the extension numbers already in use This option also serves as a diagnostic tool for finding and fixing duplicate or missing numbers Missing numbers are the extensions that have user IDs but not numbers When there are duplicate or missing numbers an orange exclamation mark icon appears besi...

Page 144: ... the trunk phone number see Phone Number on page 172 enter it here The format must be name phone number such as HR 2221111234 If this extension is mapped to a DID number and the Outbound option is also selected in DID mapping configuration the external caller ID entry has priority For information on DID mapping see Mapping DIDs on page 191 User PIN Password policy warnings may appear above this fi...

Page 145: ...If you select Search user and try bind DN as the user authentication option in the authentication profile you select leave this field blank This option is only available if you select LDAP for Authentication type Voice Mailbox Configure the extension s voice mailbox In some cases you may want other users or groups to share this voice mailbox For example a supervisor wants his her co workers to acc...

Page 146: ...ensions To create or edit a fax extension 1 Go to Extensions Extensions Fax Extensions 2 Click New or double click an existing extension 3 Configure the following Figure 46 Fax extension configuration GUI field Description Enabled Select to activate this fax extension Number The fax extension number Display Name The name displaying on the fax extension GUI field Description Extension Setting ...

Page 147: ...tocol This applies to using a fax machine connected to the FortiVoice unit via an adapter that supports T38 protocol For more information see Configuring fax on page 227 Display name Enter the name displaying on the extension External caller ID If you want to display a particular caller ID on a called phone instead of the FortiVoice main number see Main number on page 99 or the trunk phone number ...

Page 148: ...he Common name ID field of the profile such as jdoe If you select Search user and try bind DN as the user authentication option in the authentication profile you select leave this field blank This option is only available if you select LDAP for Authentication type Phone language Select the voice prompts for the extension such as auto attendant and voicemail The default is English For information o...

Page 149: ...o modify the current department or click New to configure a new one For more information on extension department see on page 166 MAC address Enter the MAC address of the adapter through which the fax machine connects to the FortiVoice unit Extra Information This option is only available when you edit an extension IP The link to the IP address of the fax adapter using the extension number This addr...

Page 150: ...Fortinet Technologies Inc Page 150 FortiVoice Enterprise Phone System 4 0 0 Administration Guide Figure 48 Modifying extension user preferences ...

Page 151: ...ge 99 or the trunk phone number see Phone Number on page 172 This is not editable For details see External caller ID on page 133 and External caller ID on page 141 Ring duration Enter the phone ringing duration in seconds before an incoming call goes to voicemail Call forward Select to forward phone calls and enter the phone number to forward the calls This function only works if call forwarding i...

Page 152: ...ole is disabled it means that the operator mode function in the user privilege for this extension is not enabled For more information see Configuring user privileges on page 210 If Agent console is disabled it means that the extension agent for this extension is not enabled For more information see Agent on page 127 Prompt language Select the prompt language for the extension The default is Englis...

Page 153: ...u can enter digits 0 9 space dash comma and If you want to enter an auto attendant number followed by an extension you can use comma or semicolon to pause the automatic dialing A comma pauses dialing for two seconds for example 1 123 222 1234 5678 In this case once pressing the speed dial code you set auto attendant 1 123 1234 is reached and after two seconds extension 5678 is automatically dialed...

Page 154: ... other than FortiFone 260i and above You can also create a new profile or modify the selected one The phone profile settings you select here synchronize with the same settings in extension configuration For details see Phone profile on page 136 Configure User Defined Profile This option is only available if you select the User defined profile type save the extension configuration and re open the e...

Page 155: ... process to forward a call to another number on a specific schedule If the extension with configured call handling action is part of another FortiVoice function that also has configured call handling action for example a member of a ring group or used for a virtual number then the call handling action of the other FortiVoice function overrides the extension call handling action To handle a call 1 ...

Page 156: ... an auto attendant profile For information on configuring auto attendant see Configuring auto attendants on page 203 If you select Forward enter the number to which you want to forward the call This option is available only if call forwarding is enabled in the extension s user privilege See Configuring user privileges on page 210 Click Create 6 Click OK Resetting voice messages Extensions Extensio...

Page 157: ...s extension belongs to the HR department For information on applying department profiles see Setting up local extensions on page 130 To create an extension department 1 Go to Extension Groups Department 2 Click New 3 In the Name field enter the name of the department 4 In the Comment field enter any notes you have for this department 5 Click Create Creating ring groups A ring group is a group of l...

Page 158: ...how suggested numbers Select and click in the Number field to display the extension numbers available for use If it is deselected clicking in the Number field displays the extension numbers already in use This option also serves as a diagnostic tool for finding and fixing duplicate or missing numbers Missing numbers are the extensions that have user IDs but not numbers When there are duplicate or ...

Page 159: ...he last extension in the group is busy after ringing the extensions sequentially and each one is busy at the time of being rung Ring mode Select how you want the ring group to be called All All extensions in the group will ring when the ring group number is dialed Sequential Each extension in the group is called one at a time in the order in which they have been added to the group You can set a ti...

Page 160: ... want to forward the call This option is available only if call forwarding is enabled in the extension s user privilege See Configuring user privileges on page 210 Click Create Creating page groups A page group is a group of extensions that can be paged using one number Page groups require telephones that support group paging A page group can reach a group of extensions For example page group 301 ...

Page 161: ...group 1 Go to Extensions Groups Pickup Group 2 Click New 3 Enter a name for the group 4 Select Enabled to activate this group 5 For Members select the Available extensions or user groups that you want to include in the pickup group and click to move them into the Selected field For information on creating extensions and user groups see Setting up local extensions on page 130 and Creating extension...

Page 162: ... double click an existing record 3 Configure the following Figure 52 Adding a general voice mailbox GUI field Description Enabled Select to activate the mailbox Number The extension number for the mailbox This number is for the mailbox only and not associated with any phone Display Name The name displaying on the extension Disk Usage KB Displays the size of disk space used by the general voice mai...

Page 163: ...ion see Fixing duplicate or missing numbers on page 137 Enabled Select to activate the mailbox extension Display name Enter the name of the mailbox extension User PIN Password policy warning icon may appear beside this field depending on your password PIN policy configuration You can click the warning icon to configure the policy For details see Configuring system options on page 75 Enter the pass...

Page 164: ... Any member of the group can access the voicemail and once this is done the notification is gone and others know that the voicemail has been taken care of Notify message waiting light If you select this option the FortiVoice unit turns on the message waiting light on a user s phone when a new voice message is left on this voice mailbox List as mailbox Users can listen to a centralized voicemail by...

Page 165: ...ll handling action of the other FortiVoice function overrides the virtual number call handling action To configure a virtual number 1 Go to Extensions Virtual Number Virtual Number and click New 2 Configure the following Figure 53 Configuring virtual numbers GUI field Description Name Enter a name for the virtual number Number Enter the virtual number which is not assigned to any phone Show sugges...

Page 166: ... schedule or Edit to modify the selected one For information on configuring schedules see Scheduling the FortiVoice unit on page 118 3 Select an Action for the call handling You can select multiple actions to process a call in sequence For example you can select Play announcement and then Auto attendant In this case an incoming call will be transferred to the auto attendant after an announcement i...

Page 167: ... VoIP service providers deliver your telephone services to customers equipped with SIP based PBX IP PBX To view the list of VoIP service providers go to Trunks VoIP SIP Figure 55 SIP trunks GUI field Description Test Select to test if the trunk is created successfully For more information see Testing SIP trunks on page 172 FortiCall Select to create a SIP trunk with Fortinet s FortiCall service Yo...

Page 168: ...etting The SIP profile applied to this trunk Status The status of the SIP trunk Not registered The trunk is not registered with the VoIP service provider and is not in service In service The trunk is registered with the VoIP service provider and is in service Unavailable The trunk is not reachable Alarm detected There is a problem with the phone line Admin down The trunk is disabled Unmonitored Th...

Page 169: ...anslate the domain name and obtain the SIP port You can only select this option if your VoIP provider uses the same setting User name Enter the user name provided by the VoIP service provider for the FortiVoice unit to register with the SIP server Password Enter the password provided by the VoIP service provider for the FortiVoice unit to register with the SIP server Auth user name Some VoIP provi...

Page 170: ... exceeding the Max channel limit will be handled according to the call handling actions set in the dialplan applied to this trunk For information on dialplans see Configuring Call Routing on page 186 If unselected the phone calls exceeding the Max channel limit will be disconnected Caller ID modification Select if you want the trunk main number to appear on the called phone See Main number on page...

Page 171: ...protocol Select the transport protocol used for the registration Registration URI Enter the registration string provided by the VoIP service provider in the Registration URI field The string usually has the following formats register user secret authuser host port extension or register fromuser fromdomain secret host or register fromuser fromdomain secret authuser host port extension For example a...

Page 172: ...page 191 When an incoming fax reaches an extension with DID mapping selecting this option will send the fax to the DID mapping extension This option is only selectable if Automatic fax detection is selected eFax account Select the fax receiving account for the detected faxes This does not include the faxes sent to DID mapping extensions if you selected Forward fax to DID mapping extension Phone Nu...

Page 173: ...r See To sign up for the FortiCall service on page 174 From number Enter the number from which you want to call the destination number The FortiVoice unit will connect this number with the destination number for the test Test Click to start the dry run test and check the Test result Reset Click to remove the test result in order to start a new test Test Call Test the SIP trunk by making a real pho...

Page 174: ... account To log into the FortiCall account 1 Go to Trunks VoIP SIP 2 Double click the trunk named FortiCall 3 Under Account click Login 4 Enter the login information you received after signing up for the service See To sign up for the FortiCall service on page 174 5 Click Login Modifying PSTN PRI trunks 200D T and 2000E T2 only PSTN Public Switched Telephone Network PRI Primary Rate Interface trun...

Page 175: ...elect to activate the trunk Name The name of the trunk Status The trunk statuses including In service The trunk is currently in use Not activated The trunk is not enabled Idle The trunk is not in use Unavailable The trunk is not reachable Conflict The trunk conflicts with another one Alarm detected There is a problem with the trunk Admin down The trunk is disabled Type The trunk type digital or an...

Page 176: ...e settings of your PSTN service provider Click OK after finishing the configuration For more information see Configuring the T1 E1 span on page 178 Fax Configure fax and phone signal automatic detection and fax handling Automatic fax detection Select for the FortiVoice unit to detect incoming fax signal on this trunk automatically Forward fax to DID mapping extension Some extensions have DID mappi...

Page 177: ... ID on page 133 or External caller ID on page 151 this trunk phone number will be overridden by the external caller ID Enabled Select to activate the trunk Hardware Property analog1 Use this option to configure the analog trunk Click Edit to configure the PSTN analog settings to match the same settings of your PSTN service provider Click OK after finishing the configuration For more information se...

Page 178: ...y 2 Configure the following Fax Configure fax and phone signal automatic detection and fax handling Automatic fax detection Select for the FortiVoice unit to detect incoming fax signal on this trunk automatically eFax account Select the fax receiving account for the detected faxes Phone Number Click New to add the phone number provided by your PSTN service provider Your PSTN service provider will ...

Page 179: ...ng mode and 30 B channels and one D channel in ISDN mode Signalling Select the signaling type of the ISDN PRI PRI signalling CPE Customer Premises Equipment side PRI signalling Network Side PRI R2 signalling Hardware echo cancellation Select to enable the FortiVoice echo cancellation function to improve the quality of voice communications Hardware DTMF detection Select to enable the FortiVoice uni...

Page 180: ...ect a signalling method for the D channel which is a signalling channel and carries the information needed to connect or disconnect calls and to negotiate special calling parameters for example automatic number ID call waiting data protocol The D channel can also carry packet switched data using the X 25 protocol Line build out Select the line build out LBO LBO settings are an inherent part of T1 ...

Page 181: ...he country for PRI R2 settings Max ANI digits ANI Automatic Number Identification is a system used by telephone companies to identify the DN Directory Number of a calling subscriber It allows subscribers to capture or display caller s telephone number Enter the number of digits of a caller s phone number to be captured Max DNIS digits Dialed Number Identification Service DNIS is a service provided...

Page 182: ...runk 3 Click OK Configuring office peers If you have remote offices equipped with VoIP network you can set up office peer trunks so that offices can call each other as if they are local extensions To view the list of office peer trunks go to Trunks Office Peers Office Peers GUI field Description PSTN Analog Setting Name The name of this configuration This is view only Codec Select the Codec for th...

Page 183: ...nformation see Viewing phone directories on page 37 Enabled Select to activate this trunk Name The name of the office peer Display name The caller ID that will appear on the called phone such as Example Company Type The type of the trunk Server The domain name or IP address of the remote office s PBX For example 172 20 120 11 or peer example com Port The port number for VoIP network on the remote ...

Page 184: ... one For more information see Configuring SIP profiles on page 115 Fetch Directory Select this option and click Fetch now to obtain the phone directory from this office peer This option only works if the PBX of the remote office is a FortiVoice unit and the same option is selected on the remote unit You can view the directory by going to Monitor Directory and selecting this office in the Office fi...

Page 185: ...tiVoice Enterprise Phone System 4 0 0 Administration Guide 4 Click Create After setting up the peer office create outgoing and incoming dial plans for the local and peer offices For more information see Configuring Call Routing on page 186 ...

Page 186: ...r example if your main line is 123 4567 you can set a dial plan rule that sends all incoming calls dialing 123 4567 to the auto attendant Once the auto attendant is reached the callers can follow the instructions for instance to dial an extension To view the inbound dial plans go to Call Routing Inbound Inbound GUI field Description Enabled Select to activate this dial plan Name The name of the di...

Page 187: ...dial plan From Trunk Select the trunks of the incoming calls that are subject to this dial plan Select the trunks in the Available field and click to move them into the Selected field Dialed Number Match With dialed number pattern matching you can create one phone number pattern in your dial plan that matches many different numbers The called numbers matching this pattern will follow this dial pla...

Page 188: ...tion see Modifying caller IDs on page 117 Call Handling Select the actions to process the incoming calls with matched dialed numbers and or caller IDs Action type Select the type of action for the plan and configure the actions accordingly See Action on page 189 Endpoint action Select if you want to send incoming calls to the local destinations according to operation schedules For example send cal...

Page 189: ...this dial plan Repeat to add more patterns b For Strip enter a number to omit dialing the starting part of a pattern 0 means no action For example if your Match Pattern is 222XXXX and Strip is 3 the FortiVoice unit will only dial the last four digits for all called numbers matching the pattern c For Prefix add a number before a pattern For example if your Match Pattern is 9XXX and the numbers unde...

Page 190: ...er to one or more extensions based on the callers phone numbers For more information see Mapping DIDs on page 191 To view the DIDs go to Call Routing Inbound DID Mapping GUI field Description Enabled Select to activate this DID Name The name of the DID Number Mapping The DID number and the extension it is mapped to For details see Mapping DIDs on page 191 Incoming Trunk The trunk used for dialing ...

Page 191: ...ack action For details see Inbound fallback action on page 191 To map DIDs 1 Go to Call Routing Inbound DID Mapping GUI field Description Direct Inward Dial Setting Name Enter a name for this DID setting Enabled Select to activate this DID setting Trunk Select the trunk used for dialing the DIDs Inbound caller ID modification Select the caller ID modification configuration For more information on ...

Page 192: ...incoming calls to the extension through the mapped DID If this option is not selected incoming calls to this extension through the mapped DID will follow the inbound fallback action configured in Inbound fallback action on page 191 By default this option is selected Select Outbound to send the DID numbers of the extensions mapped to the DID with outgoing calls so that the DID numbers can display o...

Page 193: ...911 for emergencies you should include a dial plan rule that sends all calls that begin with 911 to an external phone system This rule should also override the default outgoing prefix so that users can dial 911 without having to dial 9 first To view the outbound dial plans go to Call Routing Outbound Outbound Figure 71 Viewing outbound dial plans Advanced Setting This option allows you to bundle c...

Page 194: ...e configured number pattern and the caller IDs matching the caller ID pattern For details see Call Handling on page 195 GUI field Description Name Enter a name for this plan Enable Select to activate this dial plan Emergency call Select to allow emergency call with this plan By default this is selected For information on setting emergency number see Setting PBX location and contact information on ...

Page 195: ...96 and Pattern matching examples on page 196 for this dial plan and click Create You can enter a caller s display name string or the caller s phone number string as the pattern Callers with IDs under this pattern are subject to this plan Call Handling Click New to configure the call handling action for the numbers matching the configured number pattern and the caller IDs matching the caller ID pat...

Page 196: ...they are Test Click to start the dry run test and view the Test result Reset Click to remove the test result in order to start a new test Test Call Test the outbound dial plan by making a real phone call Destination number Enter a destination number to call After call is established Select the FortiVoice action once it calls the destination number Play welcome message The FortiVoice unit will play...

Page 197: ...to match any long distance number 011 Matches any number that starts with 011 and has at least one more digit GUI field Description Match Pattern New Click to add the number pattern in the Value field following Pattern matching syntax on page 196 and Pattern matching examples on page 196 for this dial plan Repeat to add more patterns Modification You can manipulate the number patterns you entered ...

Page 198: ...to have an additional digit 5 at the end you can enter 5 for the Postfix When you dial a number under this pattern you do not need to dial the last digit 5 GUI field Description Call Handling Schedule Select the FortiVoice operation schedule to implement this plan Click Edit to modify the selected schedule or click New to configure a new one For more information on PBX schedule see Scheduling the ...

Page 199: ...r Deny with warning in the Action field select the sound file for the warning Click Edit to modify the selected file or click New to configure a new one For more information on sound files see Managing sound files and music on hold on page 113 Delay Optionally if you want to discourage certain users for making outbound calls enter the call delay time in seconds ...

Page 200: ...s present and 4 to represent out of service and configure guest check in and check out actions Configure your PMS settings accordingly To configure hotel management settings 1 Go to Hotel Management Setting PMS 2 Select to enable the PMS 3 For PMS protocol select the protocol used by the FortiVoice unit to communicate with the PMS 4 For Port enter the port number that connects to the PMS Note that...

Page 201: ...Select to enable phone call restriction internal local or long distance and user privilege option 1 2 3 for the room If you choose this option select a Privilege for the room user For information on setting user privileges see Configuring user privileges on page 129 Guest name Select to display room number or guest name on the room extension In the Name field enter NUMBER or NAME Room condition Se...

Page 202: ...ter the room location If you have selected Guest phone configure the following Checkin status Choose the room status to configure Checked out or Checked in Guest name Enter the name of the guest for this room This option is available only if the Checkin status is Checked in Privilege Select phone call restriction internal local or long distance and user privilege option 1 2 3 for the room For info...

Page 203: ... the call cascade of a local extension remote extension or ring group An auto attendant can answer a call if the receptionist is away or if you do not have a receptionist Each auto attendant has a message with options The message tells the caller what the options are You can load a professionally pre recorded message or can record a message using a handset To view the list of auto attendants go to...

Page 204: ...ollowing Figure 77 New auto attendant Name The name of the auto attendant Direct Actions The number of key actions configured for the main auto attendant excluding the key actions for the subsidiary auto attendants For more information see Viewing auto attendant hierarchies on page 206 GUI field Description Auto Attendant Name Enter a name for the auto attendant Enabled Select to activate the auto...

Page 205: ...le or create a new one For more information see Managing sound files and music on hold on page 113 This option is only available if you select the Simple greeting mode Ringing for Enter the number of seconds for the phone to ring before the auto attendant answers with the greeting message Timeout after Enter the number of seconds that an auto attendant should be allowed to wait before the caller t...

Page 206: ...e them after they reach the auto attendant Enable voicemail access Enable to allow external callers to reach their voicemail boxes by dialing the default voicemail prompt code 98 or the code you set For more information about feature code see Modifying feature access codes on page 237 Dial local number Select to enable an external caller to dial local extensions Call Bridge DISA Select an account ...

Page 207: ...attendant 2 Auto attendant 2 configuration allows you to go to auto attendant 3 by pressing 3 and places you on a call queue if you press 5 Auto attendant 3 configuration allows you to go to the operator by pressing 8 You can right click an auto attendant node and select Edit to modify it or view the snapshot of an auto attendant other than the main one by right clicking it and selecting Drill dow...

Page 208: ...he chart before printing it Show all actions Select to display the total actions Deselect to hide the end resources to which a call is transferred by pressing a key In this sample the end resources are Operator 8 and Queue extension 5 GUI field Description No action The call is not transferred to any resource Play announcement Play an announcement with directions business hours etc Select an actio...

Page 209: ...ating call queues on page 221 Lookup name directory Access the dial by name directory so the caller can find a user s extension number by entering the user s name Change language Change the auto attendant greeting language Select the language and a follow up action If you choose Auto attendant for the follow up action select the auto attendant For Language if you select Default the greeting messag...

Page 210: ...lied to each extension user The default user privilege configurations can be edited but not be deleted For information on extensions see Configuring Extensions on page 130 To configure a user privilege 1 Go to Call Features User Privileges User Privileges and click New 2 Configure the following Figure 79 User privilege configuration GUI field Description Name Enter a name for this class of service...

Page 211: ...onfiguring the feature access codes For more information see Modifying feature access codes on page 237 Lookup directory Select to enable a user to view the phone directory of the local office For more information see Viewing phone directories on page 37 Lookup directory in remote offices Select to enable a user to view the phone directories of remote offices For more information see Viewing phone...

Page 212: ...de that needs to be dialed before making a long distance call For information on account code see Configuring account codes on page 215 Allow international call Select to allow international direct dialing If required select the account code that needs to be dialed before making a long distance call For information on account code see Configuring account codes on page 215 There are phone numbers w...

Page 213: ...al city numbers Select to allow an extension to make local calls The max number of concurrent calls Set the maximum number of concurrent incoming and outgoing calls on the extension The range is 1 10 Monitor Recording Configure monitoring and recording outgoing and incoming calls of an extension to which this user privilege is applied Personal recording Select to allow users to configure personal ...

Page 214: ...tension number and user PIN following the prompts By doing so the regular phone keeps its configuration and extension number However outgoing calls display the hot desking number The regular phone logs out of hot desking when the time set in Automatic logout hours expires Advanced Conference number Select the permission for conference calls Allow all Select to allow all extensions to join conferen...

Page 215: ...s Speed Dials 2 Enter a name for the speed dial mapping 3 For Code enter the number based on the speed dial number pattern you set For example 333 4 Enter the phone Number to map to the speed dial code You can enter digits 0 9 space dash comma and If you want to enter an auto attendant number followed by an extension you can use comma or semicolon to pause the automatic dialing A comma pauses dial...

Page 216: ...uring conference calls The Call Features Conferencing Conferencing tab lets you configure and enable conference call settings To configure a conference call 1 Go to Call Features Conferencing Conferencing and click New 2 Configure the following Figure 80 Configuring conference calls GUI field Description Name Enter the name for the conference call Number Select an extension number that callers can...

Page 217: ...ou have for this conference call Music on hold Select to play background music that callers hear after the joining message and leaving message are played Quiet mode Select to mute the background sound that callers hear after the joining message and leaving message are played Recursive Schedules If you want conference calls on repeating schedules select Enabled and click New to select a schedule En...

Page 218: ...Call Recording Policy allows you to configure call recordings by creating editing removing saving or viewing a recording Figure 81 Call recording list To configure call recording 1 Go to Call Features Call Recording Policy 2 Click New GUI field Description View Recordings Click to view listen search or save the recordings You can also do so by going to Status Storage Recorded Calls For details see...

Page 219: ...rs following the pattern _ 0 9XNZ where X 0 9 Z 1 9 and N 2 9 For more information see Configuring PBX options on page 99 The phone calls to the numbers matching the pattern will be recorded If you select By department for Type configure the following Department Select the extension department of which you want to record the calls You can add a new department or modify an existing one For more inf...

Page 220: ...corded file rotation size and time When the file reaches either the rotation size or time specified whichever comes first the archiving file is automatically renamed The FortiVoice unit generates a new file where it continues saving recording archives You can access all rotated files through search Archiving options when disk quota is full Specify what the FortiVoice unit should do if it runs out ...

Page 221: ...k quota If Local is the archiving destination enter the disk space quota The total disk quota for archiving calls cannot exceed 50 of the total data disk size For example if the data disk has a size of 100 GB a maximum of 20 GB can be used for call archiving If this quota is met and a new call must be archived the FortiVoice unit either automatically removes the oldest call archive folder in order...

Page 222: ...ents are always connected to the queues and dynamic agents need to log into the queue in order to process calls To view the call queues go to Call Features Call Queue GUI field Description Name The name of the call queue Display Name The queue name displaying on the queue extension Number The extension number for the call queue Agents The extensions of the agents enrolled in the queue Figure 83 Ca...

Page 223: ...Fortinet Technologies Inc Page 223 FortiVoice Enterprise Phone System 4 0 0 Administration Guide Figure 84 Creating a call queue GUI field Description Queue Name Enter a name for the queue ...

Page 224: ...exclamation mark icon appears beside this option You can click the icon and fix the numbers For more information see Fixing duplicate or missing numbers on page 137 Display name Enter the queue name displaying on the queue extension such as Support Caller ID option Select how you want to display the ID of a caller to the queue No change the caller ID will display as is Replace the caller ID will b...

Page 225: ...t The range is between 5 to 120 seconds Business schedule Select a operation schedule for the queue For example business_hour schedule means agents are only available to answer the calls for this queue during business hours Announcement Setting Announce queue name to agent Select a sound file to announce this call queue configuration name to the agent so that the agent knows that this is the right...

Page 226: ... a caller s waiting position in the queue such as You are caller No 5 in the call queue No Caller position in the queue is not announced Yes Always announce caller position in the queue More The caller s position is only announced once if caller is over the marked position Position limit in queue and always announced when caller is within the marked position For example if you set 5 for Position l...

Page 227: ...a full featured fax server that is able to receive faxes and forward them in PDF format to an extension s user web portal or a user s email End users can log into their web portal to view the faxes and upload PDF or JPEG files to send faxes For configuration information see Receiving Faxes on page 227 and Sending faxes on page 229 If you want to continue using your fax machine with the VoIP phone ...

Page 228: ...he extension Show suggested numbers Select and click in the Number field to display the extension numbers available for use If it is deselected clicking in the Number field displays the extension numbers already in use This option also serves as a diagnostic tool for finding and fixing duplicate or missing numbers Missing numbers are the extensions that have user IDs but not numbers When there are...

Page 229: ...unk used for dialing the DIDs Enter the DID number that you want to map to an extension Click Create Select Fax Monitors Select the users that can monitor the faxes received on this fax extension in their FortiVoice user web portal and can choose to view delete resend forward or download the faxes For more information see the online help of the web user portal The selected users will also receive ...

Page 230: ... sending faxes on page 231 Enabled Select to activate this dial plan Name The name of the dial plan Pattern The phone number pattern in the dial plan that matches other numbers For details see Dialed Number Match on page 231 Call handling The call handling action for the numbers matching the configured number pattern and the caller IDs matching the caller ID pattern For details see Call Handling o...

Page 231: ...ern matching you can create one phone number pattern in your dial plan that matches many different numbers The dialed numbers matching this pattern will follow this dial plan rule For information on adding a dialed number match see Creating dialed number match on page 232 Call Handling Click New to configure the call handling action for the numbers matching the configured number pattern For detail...

Page 232: ...hat they are Test Click to start the dry run test and view the Test result Reset Click to remove the test result in order to start a new test Test Call Test the dial plan by making a real phone call Destination number Enter a destination number to call After call is established Select the FortiVoice action once it calls the destination number Play welcome message The FortiVoice unit will play a me...

Page 233: ...to match any long distance number 011 Matches any number that starts with 011 and has at least one more digit GUI field Description Match Pattern New Click to add the number pattern in the Value field following Pattern matching syntax on page 232 and Pattern matching examples on page 232 for this dial plan Repeat to add more patterns Modification You can manipulate the number patterns you entered ...

Page 234: ... operation schedule to implement this plan Click Edit to modify the selected schedule or click New to configure a new one For more information on PBX schedule see Scheduling the FortiVoice unit on page 118 Action Select the call handling action for the numbers matching the configured number pattern and the caller IDs matching the caller ID pattern Outgoing trunk Select the trunk for sending faxes ...

Page 235: ...System station ID Enter a station ID that shows on each fax sent from the FortiVoice unit System fax header Enter a fax subject header that shows on each fax sent from the FortiVoice unit T 38 Fax Initiate a T 38 reinvite if the remote end does not Select if the fax receiving terminal does not reply to a T 38 invitation Fallback to audio G 711 mode on T 38 failure Select to use G 711 mode if T 38 ...

Page 236: ...e fax or stop sending it depending on the Max retry times configuration GUI field Description Rotation Settings Fax rotation size time Enter the archived fax file rotation size and time When the file reaches either the rotation size or time specified whichever comes first the archiving file is automatically renamed The FortiVoice unit generates a new file where it continues saving recording archiv...

Page 237: ...new fax must be archived the FortiVoice unit either automatically removes the oldest fax archive folder in order to make space for the new archive or stops archiving depending on the settings you specify under Rotation Settings on page 220 If Remote is the archiving destination configure the following Protocol Select the protocol that the FortiVoice unit will use to connect to the remote storage s...

Page 238: ...226 Check hot desk login status Hot desking refers to the sharing of one phone by multiple users at different time periods Dial 10 or the code you set to check hot desk login status including login expiry time Hot desk user login Hot desking refers to the sharing of one phone by multiple users at different time periods Each user can log into the phone by pressing 11 or the code you set and enter h...

Page 239: ...ation with the person without the first person who made the call hearing it Personal recording Dial 3 or the code you set to record a phone conversation Before doing so have the agreement of the person you talk with or check your local laws regarding phone recording Park Dial 4 or the code you set to park a call Lookup name directory from extension Dial 411 or the code you set to access the phone ...

Page 240: ...ting pickup groups on page 161 Intercom Dial 92 or the code you set and an extension to intercom that extension Voicemail direct Dial 97 or the code you set from your own phone and then enter your voicemail password to directly access your voice mailbox Voicemail prompt Dial 98 or the code you set from any extension and then enter your extension number and voicemail password to access your voice m...

Page 241: ... call reports Configuring Station Messaging Detail Record SMDR Configuring alert email About FortiVoice logging FortiVoice units can log system related events such as configuration changes and administrator login logout phone call events You can select which severity level an activity or event must meet in order to be recorded in the logs For more information see Log message severity levels on pag...

Page 242: ...cludes DTMF Dual Tone Multi Frequency events Hotel Includes hotel management events such as guest check in and check out Avoid recording highly frequent log types such as voice logs to the local hard disk for an extended period of time Excessive logging frequency can cause undue wear on the hard disk and may cause premature failure Table 32 Log severity levels Levels Description 0 Emergency Indica...

Page 243: ...s on page 32 This section includes the following topics Configuring logging to the hard disk Choosing which events to log Configuring logging to a Syslog server or FortiAnalyzer unit Configuring logging to the hard disk You can store log messages locally on the hard disk of the FortiVoice unit To ensure that the local hard disk has sufficient disk space to store new log messages and that it does n...

Page 244: ...ays at hour 23 the log file will be rotated at 23 o clock of the 10th day 6 From Log level select the severity level that a log message must equal or exceed in order to be recorded to this storage location 7 From Log options when disk is full select what the FortiVoice unit will do when the local disk is full and a new log message is caused either Do not log Discard all new log messages Overwrite ...

Page 245: ...ion changes Admin login logout event Log all administrative events such as logins resets and configuration updates System activity event Log all system related events such as rebooting the FortiVoice unit SMTP server event Log SMTP relay or proxy events This option is for local log setting only HA Log all high availability HA activity DHCP event Log DHCP server events This option is for local log ...

Page 246: ... facility identifier the FortiVoice unit uses to identify itself GUI field Description Log to Remote Host Enable Select to allow logging to a remote host Name Enter a name for the remote host IP Enter the IP address of the Syslog server or FortiAnalyzer unit where the FortiVoice unit will store the logs Level Select the severity level that a log message must equal or exceed in order to be recorded...

Page 247: ... details see the FortiVoice CLI Reference Configuring report profiles and generating call reports The Log Report Call Report Call Report tab displays a list of report profiles A report profile is a group of settings that contains the report name its subject matter its schedule and other aspects that the FortiVoice unit considers when generating reports from log data The FortiVoice unit presents th...

Page 248: ...iguring the report time period Configuring report email notifications Configuring the report schedule Choosing call rate Generating a report manually 5 Click Create GUI field Description Generate Select a report and click this button to generate a report immediately See Generating a report manually on page 252 View Reports Click to display the list of reports generated by the FortiVoice unit You c...

Page 249: ...ld Description Name Enter a name for this query Category Select a category for the report profile The report chart will correspond to the category selected Call Usage The number of calls Phone Bill The cost of making the phone calls Trunk Usage The status of the trunks being used Subcategory Select to have a summary or detailed report on the report category you select From Select to include the so...

Page 250: ... Set a specific time range Set the start date and hour in From field and end date and hour in To field Sort column Select the value for filtering the call information The caller or receiver with the higher value moves to the top of the table If you select Report column the sort column value is equal to what you select in the Report column field For details see Figure 95 on page 250 Separate table ...

Page 251: ...duled and generate it on demand See Generating a report manually on page 252 To configure the report schedule 1 Go to Log Report Call Report Call Report 2 Expand Schedule 3 Configure the following Choosing call rate You can choose the call rate for calculating the phone bills For information on setting the call rates see Setting call rates on page 252 To choose the call rate 1 Go to Log Report Cal...

Page 252: ...sulting report see Viewing generated reports on page 31 Setting call rates The Log Report Call Report Rate tab lets you set call rates for calculating phone bills GUI field Description Name Enter a name for the rating profile Trunk Select the trunk that will use the rates Local Enter the rate for local phone calls Long distance Enter the rate for long distance phone calls International Enter the r...

Page 253: ...onfigure SMDR settings 1 Go to Log Report SMDR Settings SMDR 2 Select Enabled to activate the FortiVoice SMDR function 3 Select a format protocol for the FortiVoice communications with the third party devices For information on format see Setting SMDR formats on page 253 4 For Port enter the port number that connects to the third party devices 5 For Max clients enter the number of third party devi...

Page 254: ...ingly Configuring alert email The Alerts submenu lets you configure the FortiVoice unit to notify selected users including administrators by email when specific types of events occur and are logged For example if you require notification about system activity event detections you can have the FortiVoice unit send an alert email message whenever the FortiVoice unit detects a system activity event T...

Page 255: ...that will trigger an alert email message 1 Go to Log Report Alerts Categories 2 Select one or more of the following event categories check boxes GUI field Description Test button Select one or more email accounts and click Test to verify that alert email is configured correctly This sends a sample alert email to all selected recipients Alert Email Account Displays the names of email accounts recei...

Page 256: ...nal calls You need to enter the time for generating the summary which is for the 24 hours period prior to the time you set For example if you set 9 for Schedule at hour the summary will be for the period from 9am of the previous day to 9am of the day when you receive the alert email PSTN digital line alarm Send an alert email when the PSTN digital line has a problem This option is not available fo...

Page 257: ... image 1 Connect your management computer to the FortiVoice console port using an RJ 45 to DB 9 serial cable or a null modem cable 2 Initiate a connection from your management computer to the CLI of the FortiVoice unit 3 Connect port1 of the FortiVoice unit directly or to the same subnet as a TFTP server 4 Copy the new firmware image file to the root directory of the TFTP server 5 Verify that the ...

Page 258: ...e FortiVoice unit to connect to the TFTP server The following message appears Enter File Name image out 10 Type the firmware image file name and press Enter The FortiVoice unit downloads the firmware image file from the TFTP server and displays a message similar to the following Save as Default firmware Backup firmware Run image without saving D B R Type R The FortiVoice image is loaded into memor...

Page 259: ... Support web site https support fortinet com 2 Download the firmware image file to your management computer 3 Log in to the web based manger as the admin administrator or an administrator account that has system configuration read and write privileges 4 Install firmware in one of two ways Go to Monitor System Status Status and in the System Information area in the Firmware version row click Update...

Page 260: ...owing messages appears This operation will replace the current firmware version Do you want to continue y n or Get image from tftp server OK Check image OK This operation will downgrade the current firmware version Do you want to continue y n 9 Type y The FortiVoice unit downloads the firmware image file from the TFTP server The FortiVoice unit installs the firmware and restarts Time required vari...

Page 261: ...or the connection and click OK 3 Configure HyperTerminal to connect directly to the communications COM port on your computer and click OK 4 Select the following port settings and click OK 5 Press Enter to connect to the FortiVoice CLI The login prompt appears 6 Type admin and press Enter twice The following prompt appears Welcome If your FortiVoice unit has not been reset to its default configurat...

Page 262: ...tion backup see Backing up configuration on page 96 If you have just downgraded or restored the firmware of the FortiVoice unit restoring the configuration file can be used to reconfigure the FortiVoice unit from its default settings To restore the configuration file using the web UI 1 Clear your browser s cache If your browser is currently displaying the web based manager also refresh the page 2 ...

Page 263: ...ata has been lost In addition to verifying successful conversion verifying the configuration also provides familiarity with new and changed features To verify the configuration upgrade 1 Clear your browser s cache and refresh the login page of the web based manager 2 Log in to the web based manager using the admin administrator account Other administrator accounts may not have sufficient privilege...

Page 264: ... in as the admin administrator or an administrator account that has system configuration read and write privileges 4 Connect port1 of the FortiVoice unit directly to the same subnet as a TFTP server 5 Copy the new firmware image file to the root directory of the TFTP server 6 Verify that the TFTP server is currently running and that the FortiVoice unit can reach the TFTP server To use the FortiVoi...

Page 265: ...s Enter File Name image out 14 Type the firmware image file name and press Enter The FortiVoice unit downloads the firmware image file from the TFTP server and displays a message similar to the following Save as Default firmware Backup firmware Run image without saving D B R 15 Type D The FortiVoice unit downloads the firmware image file from the TFTP server The FortiVoice unit installs the firmwa...

Page 266: ...rtiVoice Click to Dial Software Installation Step 4 in the instructions is specific to FortiVoice 40 70 100 models For FortiVoice 200D 200D T do the following System IP Address Enter the FortiVoice IP address For details see Configuring the network interfaces on page 40 User Extension Enter the user ID of the extension For details see Configuring IP extensions on page 130 Password Enter the passwo...

Page 267: ... logs 34 command line interface CLI 9 11 14 comma separated value CSV 247 common name CN field 15 communications COM port 16 configuration verifying the 263 configured operating mode 58 connecting web UI 15 conventions 9 CPU 23 79 CSV import 138 D dashboard 21 date 74 daylight savings time DST 74 75 default administrator account 15 16 259 260 262 263 264 bridge configuration 39 certificate 15 gate...

Page 268: ...e 56 primary unit 54 service monitoring 56 57 slave 54 synchronization 55 57 virtual IP 66 wait for recovery then assume slave role 62 69 wait for recovery then restore original role 62 69 halt 23 hard disk logging to 243 heartbeat 57 HA 55 high availability HA 53 log messages 245 host name 15 in HA 55 how to 9 HA 56 HTTP web based manager 44 HTTPS 15 44 89 92 HyperTerminal 16 I ICMP ECHO 44 idle ...

Page 269: ...mary unit 54 privacy enhanced email PEM 94 product registration 8 profile administrator access 52 LDAP 122 protocol 128 administrative access 52 public key 94 Q query cache 128 filter 127 LDAP 127 report 249 SNMP 81 82 R reachable 45 read write administrator 52 reconnecting to the FortiMail unit 261 registering with Fortinet Technical Support 8 regular expression 12 Release Notes 264 report config...

Page 270: ...me 74 time to live TTL cache 128 LDAP 128 time zone 75 timeout 128 Training Services 8 transport layer security TLS 95 traps SNMP 83 troubleshooting 128 Syslog 247 trust certificate 15 trusted host 52 U UNIX 14 update 259 verify 263 uptime 21 URL 15 20 _url 12 Use secure connection 124 user group 123 query 127 user guide 19 V _v4mask 12 _v6mask 12 value parse error 12 variable Predefined 102 varia...

Page 271: ......