Avaya 4600 Series Administrator's Manual
  1. Manuals
  2. Brands
  3. Avaya Manuals
  4. Software
  5. 4600 Series
  6. Administrator's manual
Avaya 4600 Series Administrator's Manual

Avaya 4600 Series Administrator's Manual

For the 4600 series ip telephones
Hide thumbs Also See for 4600 Series:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Administrator's Manual, User Manual
VPNremote for the 4600 Series
IP Telephones
Release 2.0
Administrator Guide
19-600753
Issue 2
July 2006

Advertisement

Table of Contents
loading

Related Manuals for Avaya 4600 Series

Summary of Contents for Avaya 4600 Series

  • Page 1 VPNremote for the 4600 Series IP Telephones Release 2.0 Administrator Guide 19-600753 Issue 2 July 2006...
  • Page 2 Avaya Inc. provides a limited warranty on this product. Refer to your sales Avaya provides a telephone number for you to use to report problems or to ask agreement to establish the terms of the limited warranty. In addition, Avaya’s questions about your contact center.

  • Page 3: Table Of Contents

    Installing the VPNremote Phone in the enterprise network... Preparing the Avaya Security Gateway for the VPNremote Phone..Configuring VPNremote Phone system parameters on the devices ..
  • Page 4 Contents 4 Administrator Guide...

  • Page 5: About This Book

    About this book The guide provides network administrator and end-user configuration information for the Avaya VPNremote for the 4600 Series IP Telephones. This document is to be used in conjunction with the Avaya 4600 Series IP Telephone LAN Administrator Guide.

  • Page 6: Related Documentation

    Avaya 4600 Series IP Telephone, Release 2.2.1, Installation Guide (555-223-128) ● This document provides detailed information on how to install the 4600 Series IP Telephone product line and troubleshoot problems with the telephones. Avaya VPNremote Client 4.1 Administrator Guide (June 2002) ●...
  • Page 7 Remote Feature Activation (RFA) Getting Started with Remote Feature Activation ● (03-300484) The Getting Started With Remote Feature Activation (RFA) guide has been developed to provide information about products as they pertain to RFA. It is not intended to replace high-level technical information that is available from various documentation guides.
  • Page 8 About this book 8 Administrator Guide...

  • Page 9: Chapter 1: Introduction

    Chapter 1: Introduction The Avaya VPNremote for 4600 Series IP Telephones (VPNremote Phone) is an Avaya H.323 IP Telephone with an integrated virtual private network (VPN) client and an advanced web-enabled graphical display. VPNremote Phone overview The VPNremote Phone provides enterprise telephony services at a remote or small office home office (SOHO) location through a secure VPN connection to the user’s Enterprise...

  • Page 10: Vpnremote Phone Features In Release 2

    VPNremote Phone can function without a license file, but only for a 30-day period. When this time period expires, the VPNremote Phone is non-operational and the user must download the previous software for any functionality. You must contact your Avaya sales representative or business partner to get your license file. 10 Administrator Guide...

  • Page 11: Vpnremote Phone Features In Release 1

    The following summarizes a number of significant feature, performance, and usability enhancements provided by VPNremote Phone, Release 1. H.323 IP Telephone – The VPNremote Phone is a fully featured Avaya H.323 IP ● Telephone. The H.323 IP Telephone includes the following features: - A large display area that allows up to 12 application-specific buttons to be presented and labeled at one time.
  • Page 12 Introduction 12 Administrator Guide...

  • Page 13: Chapter 2: Configuration

    This section provides administrators with information on how to configure the Avaya VPNremote for 4600 Series IP Telephone as a VPNremote Phone. It is recommended that administrators configure the Avaya VPNremote for 4600 Series IP Telephone (VPNremote Phone) for the end user. Administrators should load the VPNremote...

  • Page 14: Preparing Communication Manager For The Vpnremote Phone

    The Avaya VPNremote for 4600 Series IP Telephone is a standard Avaya 4600 Series IP Telephone with an additional VPNremote Client capability. The installation of the VPNremote Phone in the enterprise network is the same as the installation of any Avaya 4600 Series IP Telephones.

  • Page 15: Preparing The Avaya Security Gateway For The Vpnremote Phone

    Configuration preparation Preparing the Avaya Security Gateway for the VPNremote Phone VPNremote Phone users who login to the VPN through the Avaya security gateway must have their user authentication configured on that security gateway. The user authentication configuration allows VPN traffic to flow through the corporate firewalls to the security gateway.
  • Page 16 Configuration Table 1: Supported devices system parameters (continued) Supported Device System Parameter Values Juniper Networks NetScreen series VPN Set the following values: devices NVVPNCFGPROF(5) NVVPNSVENDOR(1) NVVPNAUTHTYPE(4) NVIKEIDTYPE(3) NVIKEXCHGMODE(1) NVIKECONFIGMODE(1) Juniper Networks Secure Services Gateway Set the following values: 500 Series devices NVVPNCFGPROF(5) NVVPNSVENDOR(1) NVVPNAUTHTYPE(4)

  • Page 17: Converting An Ip Telephone To Vpn Ip Telephone

    Configuration preparation Converting an IP Telephone to VPN IP Telephone Use the following procedure and the telephone key pad to convert a non-VPNremote IP telephone into a VPNremote telephone: 1. Allow the telephone to initialize and register with Communication Manager. 2.

  • Page 18: Configuring The Vpn Settings

    Configuration 5. Upon completion of the download, the telephone will restart. Upon restart, the telephone will attempt to establish a VPN connection. To complete the configuration, you must configure the user VPN settings. Configuring the VPN Settings Once the firmware has successfully downloaded to the IP Telephone, you are now ready to configure the VPN settings.

  • Page 19: Deploying The Vpnremote Phone

    Configuration preparation 6. Enter the user name using the telephone key pad. Press the alpha-numeric keys until the desired letter appears. Use the Case button, or fifth gray button, to switch between upper-case letters and lower-case letters. Use the left and right arrow keys at the bottom of the display to move left or right in the user name.
  • Page 20 Configuration 20 Administrator Guide...

  • Page 21: Appendix A: Avaya Vpnremote For 4600 Series Ip Telephones Installation Checklist

    Appendix A: Avaya VPNremote for 4600 Series IP Telephones Installation Checklist The checklist on the following page is provided for your convenience for supplying your users with essential installation information. Table 2: VPNremote Phone Installation Checklist Item Value Description VPNremote The default value is 0.0.0.0...
  • Page 22 Avaya VPNremote for 4600 Series IP Telephones Installation Checklist Table 2: VPNremote Phone Installation Checklist (continued) Item Value Description VPNremote Depending on the telephony Phone password configuration, this password may or may not be the same password as your office telephone.

  • Page 23: Appendix B: Troubleshooting

    Appendix B: Troubleshooting This chapter describes problems that might occur during installation and configuration of the Avaya VPNremote for 4600 Series IP Telephones and possible ways of resolving these problems. This chapter contains the following sections: Descriptions of error conditions and methods for resolving them.

  • Page 24: Ssl Connection Failure

    Troubleshooting SSL Connection Failure Confirm security device is accepting SSL connections ● This requires access to the device’s Web interface or SSH access. General Phone Errors and Behaviors Contact DHCP/TFTP administrator, L2Q parms in option 43/176 or xxx.SCR script file. ●...

  • Page 25: Error And Status Messages

    Error and Status Messages The 4600 Series IP Telephones issue messages in English only. The IP telephones also display messages from the switch, which can issue messages in the local language outside the United States. Note: The following error messages are for the VPNremote Phone only. For additional...
  • Page 26 Troubleshooting Table 3: VPN Tunnel Setup Failures (continued) Error Message Avaya Third-Party Possible Cause Possible Solution Profile Profile Server An externally Verify authentication configured communication mechanism authentication with external failing source (Radius authentication Server) and source. Security Gateway cannot communicate.
  • Page 27 Table 3: VPN Tunnel Setup Failures (continued) Error Message Avaya Third-Party Possible Cause Possible Solution Profile Profile IKE Phase 2 no Security device is Verify IKE proposal response. busy. is correct, disable vendor-specific IKE phase 2 features, and/or proposal is verify protected IP mismatched.
  • Page 28 Troubleshooting Table 3: VPN Tunnel Setup Failures (continued) Error Message Avaya Third-Party Possible Cause Possible Solution Profile Profile DNS needed for The system could Check the DNS resolving security not resolve the server connection. device name. security device Verify that the fully qualified FQDN is correct.

  • Page 29: Syslog

    Table 4 describes the list of all error messages that pertain to the VPN tunnel setup failures that the VPNremote Phone might display. Table 4: Authentication Errors Error Message Possible Cause Authentication failure, User User is blocked for “x” minutes Blocked from “x”...
  • Page 30 Troubleshooting 30 Administrator Guide...

  • Page 31: Appendix C: System Parameters Customization

    Table 5 are configurable to desired values in the Script File. For additional information on the Script File, see the Avaya 4600 Series IP Telephone, Release 2.4, LAN Administrator Guide, Server Administration chapter, Contents of the Upgrade Script section. We recommend that you administer options on the 4600 Series IP Telephones using script files.
  • Page 32 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value NVVPNCFGPROF NONE This parameter controls the VPN To set the device VPN configuration profile for the device configuration profile to the Avaya vendor and device type.
  • Page 33 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value NVVPNAUTTYPE This parameter is valid when To set the device authentication NVVPNCFGPROF is set to 1 type to CHAP, use the following (Avaya security gateway).
  • Page 34 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value NVSECSGIP “” (Null) This is the secondary IP address or the secondary fully qualified domain name of the Avaya Security Gateway (SG).
  • Page 35 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value To set the device backup IP NVBACKUPSGIP “” (Null) This parameter controls the back address to 10.1.1.2, up IP address or the back up bk1sg.mycompany.com, and...
  • Page 36 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value To set the user name as the NVVPNUSER “” (Null) This parameter controls the user device mac address, use the...
  • Page 37 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter controls the type To set the password type to 2, use NVVPNPSWDTYPE of VPN passwords. Valid value is the following command: one ASCII numeric digit, 1 to 4.
  • Page 38 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value Null ("") This parameter contains the URL To set the download method to NVVPNFILESRVR of the file server. A file server URL...
  • Page 39 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains whether To set the copy TOS value to 1, NVVPNCOPYTOS TOS bits should be copied from...
  • Page 40 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value http:// This parameter contains the Web To set the Web LM value, use the NVWEBLMURL XX.XX.X...
  • Page 41 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains the To set the UDP encapsulation NVVPNENCAPS method of UDP encapsulation. value to 1 when the script file is...
  • Page 42 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter decides if the To set the connectivity check NVVPNCONCHECK connectivity check should be value to 2, use the following...
  • Page 43 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value VPNMONFRQ This value contains the To set the VPN monitoring frequency of VPN monitoring frequency, use the following syslog message in minutes.
  • Page 44 System Parameters Customization Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains the ALWCLRNOTIFY policy that defines ISAKMP NOTIFICATION messages. These message can be in the clear or encrypted.
  • Page 45 Table 5: VPNremote for 4600 Series IP Telephones Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value ALWSTOPVPN This parameter contains the policy that defines if the user is allowed to stop VPN while connected to the call server.
  • Page 46 Table 6 are configurable in the Script File when the parameter NVVPNCFGPROF is set to 1. For additional information on the Script File, see the Avaya 4600 Series IP Telephone, Release 2.4, LAN Administrator Guide, Server Administration chapter, Contents of the Upgrade Script section. We recommend that you administer options on the 4600 Series IP Telephones using script files.
  • Page 47 Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value NVIKEID VPNPH This parameter controls the IKE To set the IKE identifier as identifier. The IKE identifier is phones@sales.com, use the...
  • Page 48 System Parameters Customization Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value NVIPSECSUBNET This parameter contains the IP To set the IP subnet and mask subnet and masks that are that are protected by the security protected by the security device.
  • Page 49 Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value To set the DH group to group 1, NVIKEDHGRP This parameter contains the use the following command: value of Diffe-Hellman (DH) group.
  • Page 50 System Parameters Customization Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains the To set the encryption algorithm to NVIKEP1ENCALG encryption algorithms to propose...
  • Page 51 Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains the To set the encryption algorithm to NVIKEP2ENCALG encryption algorithms to propose AES 128, use the following...
  • Page 52 System Parameters Customization Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains the To set the authentication NVIKEP1AUTHALG authentication algorithms to algorithm to SHA 1, use the...
  • Page 53 Table 6: VPNremote for 4600 Series IP Telephones Specific Customizable System Parameters (continued) Parameter Name Default Description and Value Range Example Value This parameter contains the To set the UDP encapsulation NVVPNENCAPS method of UDP encapsulation. value to 1 when the script file is...
  • Page 54 System Parameters Customization 54 Administrator Guide...

  • Page 55: Index

    ..... . . About this book Syslog Avaya VPNremote for 4600 Series IP Telephones System Parameter ....
  • Page 56 Index ....VPNremote Phone features automatic discovery of UDP encapsulation ....method .

This manual is also suitable for:

Vpnremote

Table of Contents