ZyXEL Communications ISG50-ISDN Application Note Download Page 65

Page: 65 / 153

Goal to achieve:

Build up the IPSec VPN tunnel between ISG located in the main office and USG located in the home office.

Condition:

ISG as a Centralized multisite VPN and VoIP connectivity

ISG50 (Main Office):

WAN IP: 59.124.163.156

LAN IP: 10.5.5.1

Local subnet: 10.5.5.0/24

USG (Home Office):

WAN IP: 59.124.163.151

Local subnet: 192.168.2.0/24

IPSec VPN

Phase 1:

Authentication: 1234567890

Negotiation mode: Main

Encryption Algorithm: 3DES

Authentication Algorithm: MD5

Key Group: DH1

Phase 2:

Active Protocol: ESP

Encapsulation Mode: Tunnel

Encryption Algorithm: DES

Authentication Algorithm: SHA1

Perfect Forward Secrecy (PFS): None

Summary of Contents for ISG50-ISDN

Page 1: ...1 ISG50 ISDN ISG50 PSTN Application Note Version 2 0 June 2012...

Page 2: ...l 12 Firewall Setting 14 QoS 15 2 How to Manage Extensions as Business Needs Grow 16 Auto Provision 16 SIP Server SIP account Password 17 Phone book 19 Feature Key 20 Firmware Upgrade 22 3 How to Deve...

Page 3: ...erprise class Calling Features to Increase Business Productivity 93 Auto Attendant 93 Hunt Group 100 Three way Conference 102 How to perform a three way conference on ZyXEL Reach 103 How to perform th...

Page 4: ...istory 118 How to check QoS of each call in RTCP 120 Back up CDR file 122 10 How do UC Server and UC Client Work with ISG50 123 Preparation for TAPI Service 124 TAPI Driver Installation 126 UC Server...

Page 5: ...ing departments In order to allow road warriors to register with the ISG50 using their smart phones during business trips the network administrator needs to define the firewall rules since the ISG50 w...

Page 6: ...6 First add authority groups for departments Create two authority groups and fill in Marketing and Sales as the authority group names...

Page 7: ...7...

Page 8: ...Here we add multiple SIP peers Define the start number and the amount of extensions Here we set 3100 as the start number The passwords for these SIP peers are the same as the extension numbers In orde...

Page 9: ...xtensions have been created Double click the extension number to check and modify the setting of the extension For security reasons you can modify the Web VM PIN code and the password for each extensi...

Page 10: ...g for each extension Goal to achieve Configure call forwarding for extension 1006 Condition Extension 1006 Double click the extension in the Authority Group list to configure call forwarding and call...

Page 11: ...ion of Busy is that Call Waiting is disabled No Answer Forward A caller dials 1006 but 1006 doesn t answer the phone This caller will be redirected to a pre configured extension or voice mail when the...

Page 12: ...to receive voicemail notification with the voice file in the email box Condition Extension 1006 Go to CONFIGURATION PBX Global E Mail to fill in the mail server information and email account Specify t...

Page 13: ...the attached file in the notification mail If the voice message is not attached in the notification mail you can dial the feature code and the extension number to hear the voice message The default fe...

Page 14: ...r from the WAN interface Condition Activate the firewall rule PBX_SERVICE Enable Firewall checked By default ISG50 doesn t allow SIP clients to register from the WAN interface You have to activate the...

Page 15: ...administrator would like to let VoIP service has the highest priority over other traffic Condition Enable Highest Bandwidth Priority for PBX Traffic checked Check this box to ensure VoIP traffic rece...

Page 16: ...visioning feature allows administrators to configure VoIP related settings on the V310 snom SIP clients from a central location A configuration file associated with the SIP extension on the ISG50 can...

Page 17: ...17 SIP Server SIP account Password Goal to achieve Configure SIP accounts on snom and V310 directly from ISG50 Condition V310 Snom Extension 1005 Extension 1007...

Page 18: ...18 Fill in the MAC address of the IP phone and select the model name from the product list that receives configuration settings from the ISG50 for this extension Snom V310...

Page 19: ...19 Phone book Goal to achieve Download the phonebook on snom and V310 from ISG50 Condition Extension number 1005 1012 2000 2001 Snom V310...

Page 20: ...Agent Login Agent Pause Voicemail Group Pickup Call Transfer Mobile Extension On Mobile Extension Off Mobile Extension Auto Call Recording on Demand Followme On Followme Off Line Configure the featur...

Page 21: ...21 The setting of feature keys is downloaded from ISG50 Here key P k of ISG50 is mapped to key P k 1 of Snom phone k is from 0 to 11...

Page 22: ...24 163 151 FW snom370 8 4 32 SIP f bin V310 http 10 59 1 37 V310_1 00AABT 0B5 Snom Configure firmware upgrade URLs for the Snom 370 Visit http wiki snom com Firmware to find the latest firmware versio...

Page 23: ...23 Please note that snom phones only support HTTP firmware update so the URL link must be in the format of http IP_address FW_version bin...

Page 24: ...24 You can log into the GUI of Snom 370 to check if the firmware has been upgraded to target version...

Page 25: ...25 V310 Fill in the firmware download URL...

Page 26: ...26 V310 will receive the firmware upgrade path through auto provision Blanks in Auto Configuration and Firmware Upgrade tabs will be automatically filled with an HTTP IP address...

Page 27: ...y can connect up to two ISPs via Ethernet or PPPoE connections to avoid VoIP service breakdowns In addition the ISG50 not only offers voice services through the ITSP by a SIP trunk but also via a PSTN...

Page 28: ...marily through WAN1 In case WAN1 is down it will go out via WAN2 Condition Primary WAN1 Backup WAN2 Add WAN trunk for VoIP traffic Set WAN1 as Active mode and set WAN2 as Passive mode Configuration Ne...

Page 29: ...29 Apply this new trunk in Default Trunk Selection for System Service Traffic Use SYSTEM_DEFAULT_WAN_TRUNK to do load balancing for data traffic...

Page 30: ...nk SIP trunk Secondary trunk BRI trunk In the LCR move multiple outbound line groups to the Selected column for making calls out Use the Up and Down buttons to specify the priority of the outbound lin...

Page 31: ...31 DDNS Goal to achieve IP Phone and mobile client can register to ISG50 with the domain name in case the IP of WAN1 is dynamic Condition DDNS service provider DynDNS DDNS interface WAN1...

Page 32: ...32 Fill in DDNS account information Activate DDNS...

Page 33: ...other more easily the administrator needs to establish a trusted peer between two ISGs located in two offices Furthermore to reduce the cost of outbound line deployments in the remote offices the exte...

Page 34: ...e ISG50 acts as a pure IP PBX to provide VoIP services IP phones from the Internet can register to ISG50 through USG s WAN IP Condition USG WAN IP 59 124 163 156 SIP server IP ISG50 172 16 1 10 ISG50...

Page 35: ...35 Step 2 Assume ISG50 s WAN port is connected to DMZ port 5 of USG Configure an IP for this interface...

Page 36: ...type to let USG do packet forwarding Fill in the Original IP WAN IP address Fill in the Mapped IP ISG s IP address Configure the Original Port and the Mapped Port here we set the SIP signaling port 50...

Page 37: ...37 Step 4 The user can create an address object for ISG50 for further configuration usage Click Create new object for this function...

Page 38: ...38 Step 5 Click CONFIGURATION Network Firewall to open the firewall configuration screen Click on the Add button to create a firewall rule to enable the VoIP service to pass from the WAN to DMZ...

Page 39: ...39 Step 6 Disable SIP ALG...

Page 40: ...40 ISG50 Step 1 Set the WAN IP of USG in the Fake IP field...

Page 41: ...41 Step 2 Make sure the SIP signaling port and the RTP port range are the same as those you configured in the port forwarding in USG...

Page 42: ...42 Step 3 Disable the firewall in ISG50 since USG acts as firewall...

Page 43: ...een two ISGs located in the main office and the remote office so that the extensions of two offices can make call to each other Furthermore extensions of remote office can make call out through BRI tr...

Page 44: ...the remote office 49 ISG50 2 Remote Office WAN IP 59 124 163 147 Extension format 4 digit Prefix number before dialing to the main office 48 In outbound trunk setting add a new trust peer in each ISG5...

Page 45: ...45 ISG50 1 Main Office ISG50 2 Remote Office...

Page 46: ...46 Add a SIP trunk in ISG50 1 Main Office The account information is provided by your ITSP...

Page 47: ...47 You can check if the registration status is online through MONITOR PBX SIP Trunk...

Page 48: ...48 Add BRI trunk in ISG50 1 Main Office Go to CONFIGURATION PBX Outbound Line Management Outbound Trunk Group BRI Settings Here we use DDI DID as the AA option...

Page 49: ...Office make call to each other over Trusted Peer In this example for extensions in ISG50 1 Main Office they need to dial 49XXXX to reach extensions in ISG50 2 Remote Office For extensions in ISG50 2 R...

Page 50: ...50 Configure Group Management in both ISG50 1 Main Office and ISG50 2 Remote Office Associate AGs with LCR...

Page 51: ...sion of ISG50 2 Remote Office over trusted peer Configure LCR in ISG50 2 Remote Office Here since the call not only reaches the extension of ISG50 1 Main Office but also goes out through the BRI trunk...

Page 52: ...52 Configure the Group management in ISG50 2 Remote Office...

Page 53: ...53 In ISG50 1 Main Office to let extensions of ISG50 2 Remote Office make call out through ISG50 1 Main Office s BRI trunk we need to associate the outbound line trusted peer with the LCR...

Page 54: ...54 In ISG50 1 Main Office to let the incoming call on BRI trunk reach the extension of ISG50 2 Remote Office over trusted peer we need to associate the outbound line BRI trunk with the LCR...

Page 55: ...s for data and voice communications across the Internet This allows employees in the branch offices or home offices to access the company s network in the same secure way as those who work in the main...

Page 56: ...59 124 163 156 LAN IP 10 5 5 1 Local subnet 10 5 5 0 24 ISG50 2 Remote Office WAN IP 59 124 163 147 LAN IP 192 168 2 1 Local subnet 192 168 2 0 24 IPsec VPN Phase 1 Pre Shared Key 11111111 Negotiation...

Page 57: ...57 ISG50 1 Main Office Add a VPN gateway rule...

Page 58: ...58...

Page 59: ...59 Click CONFIGURATION VPN IPsec VPN VPN Connection to configure the phase 2 rule...

Page 60: ...60...

Page 61: ...61 ISG50 2 Remote Office Add a VPN gateway rule...

Page 62: ...62...

Page 63: ...63 Click CONFIGURATION VPN IPsec VPN VPN Connection to configure the phase 2 rule...

Page 64: ...64...

Page 65: ...WAN IP 59 124 163 156 LAN IP 10 5 5 1 Local subnet 10 5 5 0 24 USG Home Office WAN IP 59 124 163 151 Local subnet 192 168 2 0 24 IPSec VPN Phase 1 Authentication 1234567890 Negotiation mode Main Encr...

Page 66: ...le the user needs to fill in the following information VPN gateway name Gateway address My Address ISG50 s IP and Peer Gateway Address USG s IP Authentication setting Shared Key ID Type setting Local...

Page 67: ...67...

Page 68: ...68...

Page 69: ...URATION VPN IPsec VPN VPN Connection to configure the phase 2 rule To configure the phase 2 rule the user needs to fill in the following VPN connection name VPN gateway selection Policy for Phase 2 Se...

Page 70: ...70...

Page 71: ...71 Click the Connect button to establish the VPN link Once the tunnel is established a connected icon will be displayed in front of the rule...

Page 72: ...le user needs to fill in VPN gateway name Gateway address My Address USG s IP and Peer Gateway Address ISG50 s IP Authentication setting Shared Key ID Type setting Local and Peer side Phase 1 setting...

Page 73: ...73...

Page 74: ...74 Configure the phase 2 rule To configure the phase 2 rule user needs to fill in VPN connection name VPN gateway selection Policy for Phase 2 Settings...

Page 75: ...75 Active protocol...

Page 76: ...76 Before configuring Remote Policy the user can create a specific object for the VPN subnet...

Page 77: ...onnected icon will be displayed in front of the rule When the VPN tunnel is established the user can find the SA information on MONITOR VPN MONITOR IPsec ISG50 Main Office USG Home Office Clients in t...

Page 78: ...on ISG50 1 Main Office LAN IP 192 168 2 1 ISG50 2 Remote Office LAN IP 10 5 5 1 The configuration for IPsec VPN is the same as that in site to site IPsec VPN In outbound trunk setting add a new trust...

Page 79: ...time 60 minutes Default number of failed access 3 Blocked extension 1001 Below are the CLI commands to enable disable this feature Enable pbx attack prevent web login activate pbx attack prevent sip a...

Page 80: ...n pbx attack prevent sip block time 1 1440 min Below are the CLI commands to change the configuration for number of failed access attempts The default value is 3 pbx attack prevent web login fail acce...

Page 81: ...81 Unlock a certain blocked extension or all blocked extensions pbx attack prevent web login unlock all NUMBER pbx attack prevent sip unlock all NUMBER Example...

Page 82: ...bile SIP client and reduces phone bills by routing all calls to the IP network In addition with the mobile extension feature the ISG50 rings the employee s office extension and his mobile phone number...

Page 83: ...83 Install the mobile softphone APP ZyXEL Reach on your smart phone It supports both iPhone and Android platform Enter your SIP account password and the domain of ISG to register an extension on ISG...

Page 84: ...84 You can also add multiple SIP accounts...

Page 85: ...85 Personal settings Select the connection type Call recording settings...

Page 86: ...86 Dial the phone number from the keypad Check the call history...

Page 87: ...87 View the packet trace...

Page 88: ...ys get calls of his extension All settings can be done on the ZyXEL Reach by the employee himself so it is not required to change any configuration on the ISG50 Goal to achieve When there is an incomi...

Page 89: ...89 Use web extension as the username For extension 1011 set web1011 as the username Then go to Advanced settings to configure the Auth User Name and Caller ID which are the same as the extension...

Page 90: ...there is an incoming call on the extension 1007 of the employee both of his extension 1007 on the IP phone in the office and his mobile phone 0912345678 can ring at the same time Condition Extension 1...

Page 91: ...o Configure your mobile extension settings You can select to Manually turn on and off this feature or select Force Enable to always turn on this feature Fill in a mobile phone number or an extension n...

Page 92: ...92 When the Manually option is selected you have to dial the pre defined feature code to turn this feature on and off...

Page 93: ...reduce the cost of business communications and operations Auto Attendant Goal to achieve Record the customized audio file by extension to auto attendant system Design a customized auto attendant for o...

Page 94: ...94 Configuration for customized Auto Attendant...

Page 95: ...er the extension of the record peer is picked up you can start recording with this extension Set the record peer For example we set extension 1003 as the record peer You will use this extension to rec...

Page 96: ...ss the options key codes and go straight to the specified extension In this example we allow incoming calls to follow the option keys Besides the incoming call can also dial the extension number if th...

Page 97: ...d for the operator and can t be configured as other option keys ISG50 supports up to 10 levels of sub menus In the sub menu click the button Add Child to edit the options and Edit to upload the audio...

Page 98: ...98 You can also enable Night Service to perform different AA directions outside of office hours based on the office hour setting...

Page 99: ...e time must be in 24 hr format with a start time and an end time Ex 08 00 12 00 13 00 17 30 You can also set specific days as holidays according to your own country or company policy Enter a date in m...

Page 100: ...3 for the sales department Condition Hunt Group Number 3333 Members 1006 1007 and 1008 Ring Strategy Random Associate Hunt Group number with extensions and decide the ring strategy and timeout action...

Page 101: ...re routed to first 1 is the highest priority while 5 is the lowest priority When an incoming call comes in this hunt group this call will be routed to priority 1 first along with the ring strategy If...

Page 102: ...extensions 1011 1010 and 3200 would like to set up a three way conference call Condition V310 3200 calls ZyXEL Reach 1010 Then ZyXEL Reach 1010 puts the call with V310 3200 on hold calls another V310...

Page 103: ...re dialing to extension 1011 press the hold key and go back to the keypad 2 Then dial 1011 and press 3 After the call with 1011 is established press the join key to set up the three way conference Bef...

Page 104: ...104 4 Three way conference has been established If you want to separate the activated three way conference into two individual connections one is on line the other is on hold press the split key...

Page 105: ...310 3200 uses LINE 1 to talk with ZyXEL Reach 1010 2 Press the HOLD key to put this call on hold and then press LINE 2 to make a call to extension 1011 3 When the call with extension 1011 is active pr...

Page 106: ...106 In order to put a present call on hold and answer a new call make sure these extensions are selected into the Enabled Extension list in Call Waiting...

Page 107: ...onference number Configure the conference number PIN number and the maximum number of attendees For users calling from internal extensions just dial the conference number to access the conference room...

Page 108: ...in English 2 You can refer to the Text English column and the filename column 3 Translate the sentences into the designated language 4 Record your own voice prompts All audio files must follow the 16...

Page 109: ...109 7 Upload the zip file to the system...

Page 110: ...110 8 Select the uploaded language and apply it as the system sounds...

Page 111: ...s are working efficiently while recording conference calls for writing meeting minutes The call recording feature allows the network administrator to record conversations to or from specific extension...

Page 112: ...h FAT32 or EXT3 file systems are supported for connection to the USB port of ISG50 Also you have to set a disk full warning limit to stop recording once the storage space is less than this criterion W...

Page 113: ...chieve The administrator would like to record all calls on the FXO trunk and the extensions 1007 1008 and 1009 Condition Recorded Trunk Port1_pabx FXO trunk Recorded Peer 1007 1008 and 1009 Select fro...

Page 114: ...Feature code for Call Recording On demand 88 On demand recording is only used by internal extensions Dial the feature code to enable disable on demand recording The default feature code is 88 However...

Page 115: ...st 24 hours Condition Recorded Time Last 24 hours Peer Type All Peer Name All In Recorded Time you can search for call recordings from the past day week or month Furthermore you can also specify an ex...

Page 116: ...116 This screen lists the call recordings that matched the specified criteria You can download individual call recordings and play back the files with any audio software which supports WAV format...

Page 117: ...achieve Search for the call history for any calls including internal calls and external calls in the past 24 hours Condition Search period Last 24 hours Direction all directions The ISG50 has a built...

Page 118: ...er items to generate your own CDR report For example you can select the time period for your query ISG50 provides time range Start time specify the time period for your query Direction Specify the typ...

Page 119: ...119 After configuring query conditions and displayed items click the Search button to view your CDR query result...

Page 120: ...20 How to check QoS of each call in RTCP To view the RTCP information select Enable RTCP Support By default RTCP Support is enabled You can select RTCP to display the RTCP information in the CDR repor...

Page 121: ...each call Recommended value of RTCP for good quality loss 1 If packet loss 3 call quality will degrade audibly Jitter 10 ms The meaning of the jitter value depends greatly on the jitter buffers involv...

Page 122: ...ve Backup call records to administrator s email Condition Backup email emily chiang zyxel com tw Click the Backup Now button to back up the CDR file You can also send the backup file to the administra...

Page 123: ...ephone calls The employees can use the UC client to make terminate reject transfer and redirect calls by one simple click on the UC client In addition using the presence feature employees can be aware...

Page 124: ...ture is enabled when the license ISG50 CTI is applied In the configuration set the username and password for the administrator ISG50 can support up to 2 administrator accounts for TAPI service The acc...

Page 125: ...125 Select the extensions that administrator can control and determine which extensions can use the TAPI service...

Page 126: ...l TAPI driver on the PC Condition ISG server IP address 59 124 163 156 TAPI Server user name admin TAPI line 1005 1016 The TAPI driver must be installed on the same PC as the UC server installed Downl...

Page 127: ...127 Configure the ISG server Fill in the IP address of ISG and log in with the administrator account Then click the Connect button...

Page 128: ...128 Check if the state is connected TAPI lines that administrator can control...

Page 129: ...and assign an extension number from the server TAPI lines in ISG50 for each user Condition Administrator s account for access UC server ucisg Download the trial version of UC server from the website o...

Page 130: ...130 Install ProCall4 0 UC Server UCServer_uk msi on the PC For detailed of configuration of the UC server please refer to the document ESTOS_UCServer_ENG pdf...

Page 131: ...art to install ESTOS UC server Keep on pressing Next to finish the installation Create a username and password for the UC server The administrator has to use this account to log in and manage the UC s...

Page 132: ...untry and the area code For example we select Taiwan as the country region and set 3 as the area code If Location has a phone system is unchecked all dialed digits will be treated as internal If this...

Page 133: ...133 These are the extensions which are configured in the Server TAPI Lines in ISG50 Click on Accept to apply the new settings on the server...

Page 134: ...134 Create new users on the UC server Configure the user name for the new account on UC server...

Page 135: ...135 Configure the password for this new user Assign an extension number for this user You can click the button to choose from the Server TAPI Lines...

Page 136: ...136 Select an extension number for the new user from the Server TAPI Lines Select the services for this user...

Page 137: ...137 After the users are created the administrator can monitor if the user is online or offline...

Page 138: ...138 The administrator can press F5 to get the most updated status of all users...

Page 139: ...the UC client to make a call hang up a call reject a call transfer a call redirect a call and check the status of other extensions Condition UC Server User corresponding extension barbara 1010 emily...

Page 140: ...t to install ESTOS UC client ProCall Keep on pressing Next to finish the installation In this scenario the ISG TAPI driver is installed on the UC server Hence select Do not install a Tapi driver in th...

Page 141: ...141 Click on Find Server to select the UC Server you are connecting to Find your UC Server and click OK to confirm...

Page 142: ...142 Click Next to proceed to the next step ESTOS UC client has been successfully installed Check the box to confgire ProCall workstation...

Page 143: ...143 Configure the username and the password This is one of the accounts configured in the User list on UC server Fill in the user s personal information...

Page 144: ...144 Fill in detailed information of this user Click the Select button to associate a phone number to this user...

Page 145: ...145 Select the corresponding phone number for this user The phone number is configured...

Page 146: ...146 Launch the ESTOS ProCall application Log in with the username and password Click on the Display monitor button to monitor all users Here is the list of all users...

Page 147: ...roCall users into Contacts Presence The status button shows the status of the user In Contacts you can check the status of each user The presence can let you know if the user you d like to call is ava...

Page 148: ...ntacts or by typing a phone number in the blank In this example barbara is making a call to tina When tina gets the incoming call a notification window will pop up and the status button will flash Whe...

Page 149: ...149 When barbara is taking with tina on the phone the presence is Busy and the status of tina is In conversation...

Page 150: ...150 Hang up a call Click on the button to hang up the call Reject a call Click on the Reject button to reject a call...

Page 151: ...n Ctrl W to transfer an existing call Type a phone number in the blank or click on the phone number in the list to blind transfer the call to this number In this example barbara gets a call from exten...

Page 152: ...n Ctrl R to transfer an existing call Type a phone number in the blank or click on the phone number in the list to consultant transfer the call to this number In this example barbara gets a call from...

Page 153: ...to redirect the incoming call to another extension Type a phone number in the blank or click on the phone number in the list to consultant transfer the call to this number In this example barbara get...

Search results

Summary of Contents for ISG50-ISDN

Reviews:

Related manuals for ISG50-ISDN

Brands by name

Popular brands

ZyXEL Communications ISG50-ISDN, Application Note

Search results

Summary of Contents for ISG50-ISDN

Reviews:

Related manuals for ISG50-ISDN

Brands by name

Popular brands