Avaya IP Office 4.2, Installation Manual

Page: 40 / 90

H323 Install Page 40
15-601046 Issue 14j (10 March 2009) IP Office 4.2
3. Other Installation Options
3.1 VPN Remote Phones
Avaya IP Office VPNremote firmware can be used to connect IP phones at remote locations to the IP Office via IPSec VPN
tunnels. IP Office 4.1 and higher supports this with some 4600 Series and 5600 Series IP phones.
Key components are:
1.IP Office VPNremote Phone Firmware
This firmware is provided on the IP Office Administrator Applications CD for IP Office 4.1 and higher. IP Office
VPNremote firmware is provided for the 4610SW, 4621SW, 5610SW and 5621SW phones only. Other VPNremote
phones are not supported.
2.TFTP Server
During installation a TFTP server is required to load the firmware onto the phones. The same TFTP server as being
used for internal IP phone extensions can be used.
3.IP Office VPNremote Phone Licenses
The operation of VPNremote phones with IP Office is licensed using VPN IP Extension licenses entered into the IP
Office's configuration. The licenses control the number of VPNremote phones supported by the IP Office.
4.VPN Security Gateway
VPNremote phones uses VPN protocols not directly supported by the IPSec VPN tunnels that can be provided by IP
Office control units. Therefore the VPN tunnel from the VPNremote phones must end at a compatible VPN gateway
device. The device being used must support one of the following methods:
·
Avaya Gateways
Avaya security gateway devices (SG and VSU) use an Avaya proprietary protocol called CCD.
Avaya SG Series (4.6 firmware or higher). Avays VSU Series (3.2 firmware or higher).
·
Non-Avaya Gateways
Non-Avaya VPN gateways with IKE Extended Authentication (Xauth) with Preshared Key (PSK). Installation
notes exists for the following listed below. This does not imply any recommendation of those devices by Avaya
or preclude other devices. Note that Avaya cannot guarantee support for services through non-Avaya devices.
Cisco VPN 300 Series Concentrators.
Cisco PIX 500 Series Security Appliances.
Juniper Networks NetScreen Series VPN Devices.
Juniper Networks Secure Services Gateway 500 Series.
Juniper Networks Integrated Security Gateway (ISG) Series.
Netgear FVS338 VPN Router.
Kentrox Q2300 VPN Router.
Adtran Netvanta 3305 VPN Router.
Sonicwall Tz170 VPN Router.
Netgear FVX538 VPN Router.