Virtual Private Networks (Vpns); Diagnostic Tools - Polycom SpectraLink 8020 Deployment Manual

Deploying SpectraLink 8020/8030
Wireless Telephones
July 2009
Telephone uses the multicast IP address 224.0.1.116, which other model handsets and SpectraLink
infrastructure components also employ to locate and maintain connection with each other. Some other
common ports between the SVP Server and call server will be RTP traffic on ports 16384 through 32767.
The port used will be chosen randomly by the phone and call server at the time of call setup. The Real
Time Location Service use UDP port 8552 by default (configurable in the Administration menu or HAT).
5.7

Virtual Private Networks (VPNs)

Virtual Private Networks (VPNs) are secure, private network connections. VPNs typically employ some
combination of strong encryption, digital certificates, strong user authentication and access control to
provide maximum security to the traffic they carry. They usually provide connectivity to many devices
behind a VPN concentrator. The network can be broken into two portions - protected and unprotected:
1) The area behind the VPN server is referred to as the "protected" portion of the network. Sensitive,
private network equipment such as file servers, e-mail servers and databases reside in this portion.
2) The area in front of the VPN server is referred to as the "unprotected" network, where the wireless
APs and less sensitive network equipment often reside.
VPNs offer an extremely effective method for securing a wireless network. Many network administrators
implement VPNs to maintain the integrity of their WLANs by requiring wireless users who need access to
the protected portion of the network to connect through a VPN server.
Most voice devices, such as the SpectraLink Wireless Telephones, do not require access to the protected
portion of the network (see Figure 12). Placing the handsets, SVP Server(s) and Telephony Gateways on
the unprotected network and requiring data users to connect to the VPN ensures that the network is
protected against hackers seeking to access sensitive information within the network core.
Protected Network Core
Servers
Figure 12 - Deploying SpectraLink Wireless Telephones with a VPN
5.8

Diagnostic Tools

The SpectraLink handset provides three comprehensive diagnostic tools to assist the administrator in
evaluating the functionality of the handsets and the surrounding wireless infrastructure. These tools are:
Run Site Survey, Diagnostics Enabled, and Syslog Mode.
©2009 Polycom, Inc. All rights reserved.
Polycom and the Polycom logo are registered trademarks of Polycom, Inc. All other trademarks are the property of Polycom, Inc. or their respective companies.
Unprotected Network
SVP Server and/or
Telephony Gateway
VPN Concentrator
39
Best Practices Guide
AP
SpectraLink
8020/8030
AP
Devices that require
access to the network core
utilize a secure VPN
connection (dashed line)