background image

_____________________________________________________________________________________ 

 www.support.avaya.com,

                                                   Page: 16                                                    11/4/2009 

Avaya Inc. – Proprietary.

 Use pursuant to Company Instructions. 

_____________________________________________________________________________________

 

 

Call Servers IP Address 

192.168.1.201 (Avaya Communication manager IP address). 

Router IP Address 

0.0.0.0 (Will be assigned by the VPN gateway or by the Internal DHCP 
server if the VPN gateway is configured as DHCP Relay). 

Subnet Mask 

0.0.0.0 (Will be assigned by the VPN gateway or by the Internal DHCP 
server if the VPN gateway is configured as DHCP Relay). 

Http Server 

A.B.C.D (Internal HTTP server IP address in dotted decimal format from the 
network which contains the Avaya Communication Manager). 

Https Server IP Address 

 A.B.C.D (Internal HTTPS server IP address in dotted decimal format from 
the network which contains the Avaya Communication Manager). 

802.1Q Auto 

VLAN ID 

VLAN Test 

60 

 

Press Exit to come out of the “ADDR” procedures. 

 

2.  Scroll down to the last option VPN. Note that the VPN configuration parameters will not be edited until the 
value of “VPNPROC” parameter is set to 2. (To do this open the upload directory of file server, open the file 
46xxsettings.txt file and append it with “SET VPNPROC 2” and upload this new 46xxsettings.txt file into the 
avaya 96xx IP phone). It is recommended to set the value of VPNPROC to 2 while uploading the vpn enabled 
binary into the phone. Use Right Navigation key to go to the next screen options. (Note that the values will not 
be saved until Right-Navigation key is pressed even if “Save button is pressed”). The External addresses will be 
reflected only after rebooting the phone.  

 

The configuration values of one of the 96xx series IP Phones used in the sample configurations are shown in 

Table 2 

below. 

 

No. Option 

Value 

1 VPN 

Enabled 

2 VPN 

Vendor 

Nortel 

3 Gateway 

Address 

192.168.8.200 (FQDN or the IP Address (in 
dotted decimal format) of the VPN gateway 
‘Untrust’ Interface) 

External Phone IP Address 

192.168.40.143 (Phone IP address from the list 
of the local home network IP addresses). 

5 External 

Router 

192.168.40.1 (External Router IP address of the 
home Network). 

External Subnet Mask 

255.255.255.0 (External Subnet Mask of the 
home Network). 

External DNS Server 

0.0.0.0 (Provided by the local Service Provider) 

8 Encapsulation 

4500-4500 

9 Copy 

TOS 

NO 

10 Auth. 

Type: 

Local Credentials. 

11 VPN 

User 

Type: 

Any 

12 

VPN User: 

Vpn1 (vpn username) 

Summary of Contents for Contivity 110

Page 1: ...ny Instructions _____________________________________________________________________________________ Avaya CAD SV Configuring Nortel Contivity 1100 VPN Router to Support Avaya 96xx series IP Phones I...

Page 2: ...__________________________________________________________________ 1 Introduction 3 1 NETWORK TOPOLOGY 4 2 EQUIPMENT AND SOFTWARE VALIDATED 6 3 NORTEL VPN ROUTER 1100 CONFIGURATION 7 4 AVAYA 96XX SERI...

Page 3: ...broadband Internet connection End users experience the same IP telephone features as if they were using the telephone in the office Avaya IP Telephone models supporting the Avaya 96xx series IP Phone...

Page 4: ..._____ The below Figure 1 describes the general test setup diagram to configure the 96xx series IP phone with the Nortel vpn gateway Figure 1 High level test diagram for Implementation of 96xx series a...

Page 5: ...Phones are located in the public network and configured to establish an IPSec tunnel to the Public IP address of the Nortel VPN Router The Nortel VPN Router will assign IP addresses to the 96xx series...

Page 6: ...ATED _________________________________________________________________________ Table 1 lists the equipment and software firmware versions used in the sample configuration provided Equipment Software V...

Page 7: ...and is connected into the network The Nortel VPN Router 1100 depicted in Figure 2 has been configured with IP address 192 168 14 2 as its Management IP address 1 From a web browser enter the URL of th...

Page 8: ...____________________________________________________ 3 Select SERVICES AVAILABLE from the left panel menu Make sure IPsec is enabled default for at least the public interface 4 The screen capture belo...

Page 9: ..._______________________ www support avaya com Page 9 11 4 2009 Avaya Inc Proprietary Use pursuant to Company Instructions ______________________________________________________________________________...

Page 10: ...roprietary Use pursuant to Company Instructions _____________________________________________________________________________________ 6 The abbreviated screen capture below shows the IPsec configurati...

Page 11: ...Use pursuant to Company Instructions _____________________________________________________________________________________ series IP Phones setting in Section 5 2 7 Create new users by selecting PROF...

Page 12: ...y Use pursuant to Company Instructions _____________________________________________________________________________________ 8 The following abbreviated screen capture shows the values used for a user...

Page 13: ..._________________________________________________________________________________ 9 Select SERVERS USER IP ADDR from the left panel menu to define a DHCP scope to be assigned to Avaya 96xx series IP P...

Page 14: ...__________________________________________________ www support avaya com Page 14 11 4 2009 Avaya Inc Proprietary Use pursuant to Company Instructions __________________________________________________...

Page 15: ...hone firmware includes 3_1 in the name This allows for easy identification of firmware versions incorporating VPN capabilities 4 2 Configuring Avaya 96xx series IP Phone The Avaya 96xx series IP Phone...

Page 16: ...VPNPROC parameter is set to 2 To do this open the upload directory of file server open the file 46xxsettings txt file and append it with SET VPNPROC 2 and upload this new 46xxsettings txt file into t...

Page 17: ...Network 0 0 0 0 0 25 IKE Over TCP Never B While phone is operational in vpn enabled Mode Press Mute button procpswd to enter the craft procedures and follow the above steps to program the vpn enabled...

Page 18: ...ation Type 1 Local credentials 2 Radius Credentials 3 Radius SecureID 4 Radius Axent SET NVVPNAUTHTYPE 1 VPN User Type 1 Any 2 User SET NVVPNUSERTYPE 2 VPN User name SET NVVPNUSER vpn1 Password Type 1...

Page 19: ...NCALG 0 IKE Auth algo 0 Any 1 MD5 2 SHA 1 SET NVIKEP1AUTHALG 0 IKE Config Mode 0 Enabled 1 Disabled SET NVIKECONFIGMODE 0 IPsec PFS DH group SET NVPFSDHGRP 1 IPsec Encryption Algo 1 AES 128 2 3DES 3 D...

Page 20: ...1 4 2009 Avaya Inc Proprietary Use pursuant to Company Instructions _____________________________________________________________________________________ SET VPNPROC 2 Call Server address SET MCIPADD...

Page 21: ..._______________________________________ 5 VERIFICATION _________________________________________________________________________ The active VPN sessions to the Nortel VPN Router can be viewed by selec...

Page 22: ...ponse If we given user name are incorrect we will get VPN Tunnel Failure Message VPN tunnel failure Retry Details Sleep If we press Retry Soft key again it will retry to establish the tunnel If we pre...

Page 23: ...d soft key on the phone and it will go to IKE Phase 2 Screen here check the IKE Phase 2 Screen Settings is correct or not 6 3 Phone displaying connecting This issue can be resolved by the administrato...

Page 24: ...RENCES _________________________________________________________________________ Avaya Solution Interoperability Test Lab Configuring Nortel VPN Router to Support Avaya VPNremote Phones Issue 1 0 Avay...

Reviews: