Vpn Remote Phones - Avaya H323 Installation Manual

3. Other Installation Options

3.1 VPN Remote Phones

Avaya IP Office VPNremote firmware can be used to connect IP phones at remote locations to the IP Office via IPSec VPN
tunnels. IP Office 4.1 and higher supports this with some 4600 Series and 5600 Series IP phones. IP Office Release 6 also
supports VPNremote on 9600 Series phones supported by IP Office.
Key components are:
1.IP Office VPNremote Phone Firmware
This firmware is provided on the IP Office Administrator Applications DVD for IP Office 4.1 and higher. IP Office
VPNremote firmware is provided for the 4610SW, 4621SW, 5610SW and 5621SW phones and 9600 Series phones
only. Other VPNremote phones are not supported.
2.TFTP Server
During installation a HTTP server is required to load the firmware onto the phones. The same TFTP server as being
used for internal IP phone extensions can be used.
3.IP Office VPNremote Phone Licenses
The operation of VPNremote phones with IP Office is licensed using VPN IP Extension licenses entered into the IP
Office's configuration. The licenses control the number of VPNremote phones supported by the IP Office.
· For IP Office Release 6 this does not apply to IP500 and IP500 V2 control units which license all Avaya IP
phones including VPN ones using Avaya IP Endpoint licenses.
4.VPN Security Gateway
VPNremote phones uses VPN protocols not directly supported by the IPSec VPN tunnels that can be provided by IP
Office control units. Therefore the VPN tunnel from the VPNremote phones must end at a compatible VPN gateway
device. The device being used must support one of the following methods:
· Avaya Gateways
Avaya security gateway devices (SG and VSU) use an Avaya proprietary protocol called CCD.
Avaya SG Series (4.6 firmware or higher).
· Non-Avaya Gateways
Non-Avaya VPN gateways with IKE Extended Authentication (Xauth) with Preshared Key (PSK). Installation
notes exists for the following listed below. This does not imply any recommendation of those devices by Avaya
or preclude other devices. Note that Avaya cannot guarantee support for services through non-Avaya devices.
Cisco VPN 300 Series Concentrators.
Cisco PIX 500 Series Security Appliances.
Juniper Networks NetScreen Series VPN Devices.
Juniper Networks Secure Services Gateway 500 Series.
Juniper Networks Integrated Security Gateway (ISG) Series.
H323 IP Telephone Installation
IP Office Release 6
Avays VSU Series (3.2 firmware or higher).
Netgear FVS338 VPN Router.
Kentrox Q2300 VPN Router.
Adtran Netvanta 3305 VPN Router.
Sonicwall Tz170 VPN Router.
Netgear FVX538 VPN Router.
15-601046 Issue 16a (15 March 2010)
Page 44