3300 Icp Configuration Wizard - Mitel 3300 General Information Manual

Remote service engineers connect to the Management Access Point via a PPP or PPTP
connection using standard Windows Network Connectivity capabilities and MS-CHAPv2
authentication. However, in order to connect to the Management Access Point console, the
customer must enable a privileged remote session for the engineer. The remote engineer can
establish an IP connection only to local IP destinations that are configured in the Management
Access Point. The engineer must know the destination IP address in order to reach a managed
session. At that point, the engineer must have a valid system login account to access the remote
system. Once the engineer is logged into the remote system, any administrative, maintenance
or diagnostic task can be performed.
Note: Network Address Translation (NAT) is enabled by default in the Management
Access Point which means that only the IP address assigned to the Management Access
Point LAN port needs to be routable on the customer network. If NAT is disabled in the
Management Access Point, the IP subnet on the PPP connection must be unique within
the customer's IP address space, be private (conform to the rules of RFC1918), and be
routable within the customers network (the customer must redistribute the private route
into their routing table).
The Management Access Point:
• Supports CLI-based call screening so calls are screened based on the origination of phone
numbers. (See the latest Management Access Point FCI for supported countries.)
• Uses Point-to-Point (PPP) and Challenge Handshake Authentication (CHAP) protocols to
prevent passwords from being sniffed or captured and replayed.
• Provides an embedded firewall so access is restricted to select devices and the customer
LAN is fully protected.
• Prevents remote Management Access Point configuration or firewall changes without the
customer granting privilege.
• Tracks configuration changes during privileged connections.
• Supports source IP address screening for VPN connections with the Management Access
Point E/E unit.

3300 ICP Configuration Wizard

Designed with SMB customers in mind, the 3300 ICP Configuration Wizard is an independent
software application that allows you to customize initial system programming in Release 7.0.
The application is installed onto a maintenance PC and then run while the PC is either connected
or disconnected from the 3300 ICP. After you specify the system setup, you can save the file
for future use and, if connected, apply the changes to the 3300 ICP. You can further customize
the programming with the 3300 ICP System Administration Tool.
To use the 3300 ICP Configuration Wizard, your system must meet the following requirements:
• Release 7.0 software installed
• Standalone system (no networking or clustering)
• Embedded trunks only (no NSU)
Management and Maintenance
53