Differences between 4600–series and 9600–series IP
deskphone VPNs
Review this section if you already have a VPN in place for 4600 Series IP Telephones. There are
several differences between the structure and administration for each type of telephone series,
namely:
• A 9600 Series VPN telephone is administered by setting the applicable system parameters
using the
46xxsettings.txt
file. This is the same settings file you already use for the non-VPN
system parameters you currently customize for both 9600 Series and 4600 Series IP
Telephones. A 4600 Series VPN uses a unique settings file (46vpnsetting.txt) to administer
applicable system parameters instead of the 46xxsettings.txt file.
• 9600 Series IP VPN Telephones do not support the Avaya SG203 security gateway, whereas
4600 Series IP VPN Telephones do.
• 9600 Series IP Telephone VPNs use an enhanced security process:
- End users have a separate access code and permission settings that allow access only to
VPN settings rather than general access to all local administrative (Craft) procedures.
- VPN users are assigned a unique VPN password which can be administered to be erased
on VPN termination or telephone reset; this measure prevents unauthorized users from
automatically re-establishing a VPN tunnel.
- Users with valid VPN credentials can be prevented from using each other’s telephones by
setting the NVVPNUSERTYPE parameter to allow the VPN user name to be changed only
through the settings file or the VPN Settings Craft procedure.
• 9600 Series IP Telephone VPNs provide longer DNS names, up to 255 characters whereas
4600 Series VPNs limit DNS names to 16 characters.
• 9600 Series IP VPN Telephones do not support user entry of an SCEP challenge password.
• 9600 Series IP Telephones do not support the NVSECSGIP and NVBACKUPSGIP
on page 49 for a detailed list of the VPN
system parameters applicable to a 9600 Series IP Telephone.
Third-Party Security Gateways interoperability limitations
Third-party devices by the following vendors interoperate with Avaya VPN phones and may have
certain limitations as per the note below:
• Checkpoint
• Cisco
• Juniper
• Nokia
• Nortel
VPN overview
10
VPN Setup Guide for 9600 Series IP Telephones
March 2015
