Chapter 3: Configuring The Vpn; Introduction; Preliminary Configuration Requirements - Avaya 9600 Series Setup Manual

Chapter 3: Configuring the VPN

Introduction

This section outlines configuration requirements and setup options, and provides administrators with
information on how to configure 9600 Series IP Telephones for a VPN.

Preliminary configuration requirements

The enterprise network must be configured with a security gateway. Corporate firewalls and routers
must be configured to allow IPSec tunnels from the remote phone(s) to the security gateway. See
Third-Party Security Gateways operability limitations
parameters, see VPN parameters
Technicians or administrators can stage phones centrally and pass an administered phone to an
end user, or use the standard settings file. In the latter case, place VPN parameters in the beginning
of the 46xxsettings.txt file before model-specific settings. The possible VPN configuration methods
are:
• Centralized administration of some or all VPN functionality by trained technicians/
administrators, using either the settings file and/or the local (Craft) procedure for VPNs. The
administered telephone is then passed to the user.
• Remote administration of VPN functionality by users who are either trained in, or who have
been provided specific documentation to guide them in the administration process, generally
involving the VPN Special Procedure.
Avaya recommends that administrators perform these preliminary configuration steps:
• Load the 9600 Series IP Telephone with the latest software,
• Configure the phone to connect to the Enterprise infrastructure, and
• Provide the end users with information for VPN access from their small office home office
(SOHO) environment.
Important:
Never "downgrade" a telephone on your VPN to a software release prior to R3.1, as VPN
operation will either fail or not operate properly.
VPN Setup Guide for 9600 Series IP Telephones
12
on page 10. For a list of configuration system
on page 49.
Comments? infodev@avaya.com
March 2015