Avaya phone vpn

Avaya phone vpn DEFAULT

How to configure WAN GroupVPN for Avaya Phones

03/26/2020 63 9172

DESCRIPTION:

This article explains how to configure WAN Group VPN for use with Avaya IP Phones VPN.

RESOLUTION:

On the SonicWall, configure WAN Group VPN and enable IKE Mode Configuration:

 

TIP: If you are on 6.5.4 firmware and above, please remember to enable the GroupVPN on the WAN interface under Manage | Network | Interfaces - edit the desired WAN Interface, under the Advanced Tab select

 

On the Avaya Phones set following:
 

VPN Config. | General

> VPN = Enabled

> VPN Vendor = Other

> Gateway Address = SonicWall Public IP (or FQDN if IP is dynamic)

> External phone IP = Blank / 0.0.0.0

> External router = Blank / 0.0.0.0

> External subnet mask = Blank / 0.0.0.0

> External DNS server = Blank / 0.0.0.0

> Encapsulation = 4500-4500

> Copy TOS = No

 

****click right arrow****

 

VPN Config. | Auth. Type

> Auth type = PSK with XAUTH 

 

TIP:If user authentication is disabled on the GroupVPN (not recommended), set this to "PSK"

 

****click right arrow****

 

VPN Config. | User Cred.

> VPN user type = Any

> VPN user = set the Username configured for VPN access for Avaya in SonicWall

> Password Type = Save in flash

> User Password = set the Password configured for the Avaya user in SonicWall 

 

****click right arrow****

 

VPN Config. | IKE PSK

> IKE ID (Group name) = GroupVPN (skip the "WAN" and space)

> Pre-Shared Key (PSK) = type in Preshared Key set on the SonicWall for Group VPN

 

****click right arrow****

 

VPN Config. | IKE PHASE 1

> IKE ID type = IPV4_ADDR (or "FQDN" if FQDN was used before - see Gateway address value under  VPN Config. | General)

> IKE Xchange mode = Aggressive

> IKE DH group =  2

> IKE Encryption Alg. = AES-256

> IKE Auth. Alg. = SHA1

> IKE Config. Mode = Enabled

 

****click right arrow****

 

VPN Config. | IKE PHASE 2

> IPSec PFS DH group = 2

 

TIP: If PFS is disabled on Group VPN set this to "None"

 

> IPSec Encryption Alg. = AES-256

> IPSec Auth. Alg. = SHA1

> Protected Network: 0.0.0.0/0

> IKE Over TCP: Never

 

NOTE:IKE phase 1 and 2 settings have to match settings made on GroupVPN

 

After completing the settings, test the connection. 

 

 


See also:

Understanding and Troubleshooting Common Log Errors Regarding VPN Policies and GVC - https://www.sonicwall.com/support/knowledge-base/?sol_id=170505246309804

 

There are two ways to contact technical support:

1. Online: Visit mysonicwall.com. Once logged in select Resources & Support | Support | Create Case

2. By phone: please use our toll-free number at 1-888-793-2830. Please have your SonicWall serial number available to create a new support case.

If you do not have a mysonicwall.com account create one for free!

 

Sours: https://www.sonicwall.com/support/knowledge-base/how-to-configure-wan-groupvpn-for-avaya-phones/190415102037516/

Avaya IP phones at remote locations can be connected to the IP Office system via IPSec VPN tunnels. This is supported for 4610SW, 4621SW, 5610SW and 5621SW phones. It is also supported for 9600 Series phones.

vpn remote

Additional components required for remote phones over VPN are:

1.IP Office VPNremote Phone Firmware
This firmware is included with the IP phone firmware set.

2.VPN Security Gateway
The IP Office system does not support all the IPSec features needed for VPNremote phones using its own IPSec tunnels. Therefore the VPN tunnel from remote phones must end at a suitable alternate VPN gateway device. The device must support one of the following methods:

•Avaya Gateways
Avaya security gateway devices (SG and VSU) use an Avaya proprietary protocol called CCD.

Avaya SG Series (4.6 firmware or higher)

Avaya VSU Series (3.2 firmware or higher)

•Non-Avaya Gateways
Non-Avaya VPN gateways with IKE Extended Authentication (Xauth) with Pre-shared Key (PSK). Installation notes exist for the items listed below. This does not imply any recommendation of those devices by Avaya or preclude other devices.
Note: Avaya cannot guarantee support for services through non-Avaya devices.  

Cisco VPN 300 Series Concentrators

Cisco PIX 500 Series Security Appliances

Juniper Networks NetScreen Series VPN Devices

Juniper Networks Secure Services Gateway 500 Series

Juniper Networks Integrated Security Gateway (ISG) Series

Kentrox Q2300 VPN Router

Sonicwall Tz170 VPN Router

Netgear FVS338 VPN Router

Netgear FVX538 VPN Router

Adtran Netvanta 3305 VPN Router

 

Installation Documentation

This document only covers notes and differences specific to installation of VPNremote phones with IP Office.  The installation and configuration of Avaya VPNremote phones is covered in a number of existing documents available from the Avaya support website (http://support.avaya.com).

Supported VPNremote Phone Firmware

Unless otherwise advised, only the firmware provided on the IP Office Administrator Applications DVD should be used for VPNremote phones connected to an IP Office. That firmware is tested with the IP Office release for correct operation. The firmware is located in a zip file in the folder \bin\VPN Phone.

Whilst other VPNremote firmware releases may be made available by Avaya for download, those firmware release may not have been specifically tested with IP Office.

Configuring the IP Phone for VPNremote

In addition, a VPN Phone Allowed checkbox option is present on the Extension | VoIP settings tab of IP extensions. This checkbox is used to indicate to the IP Office the extensions that are VPNremote and therefore require use of a license.

1.Using IP Office Manager, retrieve the current configuration from the IP Office system.

2.Click on icon large extensionExtension and select the entry for the IP extension.

3.Select the VoIP tab.

4.Enable VPN Phone Allowed.

5.Click OK.

6.Repeat this for any other existing IP extensions that are going to be converted to VPN connection.

7.Save the configuration back to the IP Office system.

 

 

Sours: https://ipofficekb.avaya.com/businesspartner/ipoffice/mergedProjects/ipphoneinst/intro_vpn_remote_phones.htm
  1. 1999 ford f250 weight
  2. Cape elizabeth dentist
  3. Best music videos of 2009
  4. Metal roof depot
  5. Arknights chinese server

We have a head office in one city and two branch offices in different cities. We want to setup an Avaya IP office 500 on the head office and make users able to use the PBX from other branches using Site-to-Site VPN. If anyone could let me know if that is possible and how and what avaya products do I need to achieve this? Thanks in Advance.


Best Answer

PSX_Defector

Habanero

OP

Do you have IP Office boxes at the locations in question?  If so, it's just a matter of joining the PBXes over the VPN connection.  You would setup a trunk between the two boxes, some quick rules for local dialing, and you are good to go.

If you don't, then you just need to point the phones back to the main PBX in the central location.  No muss, no fuss on that, as it should automatically work if you have the VPN setup properly.

View this "Best Answer" in the replies below »

16 Replies

· · ·

peter

Pure Capsaicin

OP

http://www.avaya.com/uk/resource/assets/factsheet/LB4383.pdf

does lok like it is possible, seems to indicate on further searching you may need avaya routers, best is to give avaya a ring and ask

0

· · ·

PSX_Defector

Habanero

OP

Best Answer

Do you have IP Office boxes at the locations in question?  If so, it's just a matter of joining the PBXes over the VPN connection.  You would setup a trunk between the two boxes, some quick rules for local dialing, and you are good to go.

If you don't, then you just need to point the phones back to the main PBX in the central location.  No muss, no fuss on that, as it should automatically work if you have the VPN setup properly.

1

· · ·

ShafiMD

Pimiento

OP

Thanks for your help PSX, We are planning to have only one PBX in the head office because of very small number of IP phones are required in branch offices, around 2-3. I don't know exactly what I need from avaya apart from IP office500 control unit. If someone can shed light on it?

0

· · ·

PSX_Defector

Habanero

OP

A phone and the PBX is all you need.  Literally, it's plug and play. 

As long as the phone is "on net" somewhere in the mesh, it should fire right up.  If you take it off net like home or if the VPN goes down,  then it won't work. 

Licensing and such from Avaya will need to be determined, but you can call your reseller for that.

0

· · ·

Kryptyc

Jalapeno

OP

If your Branch offices will have a static VPN and enough bandwidth you can go with ip phones over the VPN and no additional lic will be needed. If the site just has Internet access then pu will need ip phone, load the free son firmware ( if you cant find this or your dealer doesnt know where to get it from me a line ), but you will need VPN lic on the ipoffice.

Also take into consideration implanting QoS I ou haven't already if your going to be adding VoIP phones in either capacity

0

· · ·

Kryptyc

Jalapeno

OP

· · ·

Forma Technology

Anaheim

OP

There are two ways to do it,

1 way is to do it with avaya vpn phones connecting to a vpn device in your main office. Like a cisco, adtran, juniter and etc.

The other way would be to set up site to site vpn's with whatever vpn devices you want to connect the sites with. Under this scenario you just need IP phones in the remote locations. The reason is the IP is already set up between the two devices, it's just routing over the vpn tunnel you've already setup.

Now, at the main office you'll also need a VCN 32 and make sure you have enough IT end point licenses for the IP and/or VPN phones.

That's pretty much it.

0

· · ·

EggmanWI

Serrano

OP

I know this thread is a little old.  I hope someone responds.  We just put in our first IP Office at a remote site.  We have Cisco PTP VPN out to all our remote locations.  No ports blocked on the tunnel.  Figured we could connect remotely.  But, it isn't working.  Can ping on local network segment.  Can't ping back at corporate office.

0

· · ·

SuperKev

Anaheim

OP

@ GregBayIndustries

have you got the DNS settings in correctly ? do you have any phones connected up yet ?

0

· · ·

SuperKev

Anaheim

OP

@ ShafiMD

did you manage to get this all going in the end ? if not give us an update as to where you are :) if ur only going to use the 3 ip phones then you wouldnt need to go through the expense of a VCM 32 card you can buy a daughter board that will allow the VCM cards from the IPO 4 series so a VCM8 or 16 card would do the trick also what phones are you using ?

0

· · ·

edreeskhan

Pimiento

OP

to connect two or more avaya ip offices . in ip office there is VPN capability exist or i can configure VPN on my cisco routers for my all sites .

thanks in advance .

0

· · ·

shahzadkhan

Pimiento

OP

I have requirement for ip phone . can someone help me that what to do...  Requirements are ... my client have two locations which are connected through Cisco Dynamic VPN .. both locations can access any machines from branches and head office.    Head office router with Static Public ip address...   one location located in KSA and one Location in Dubai.. two different countries ...  Client need to dial in Dubai as local call from KSA using Dubai land-line numbers , and Dubai people dial in KSA local calls using KSA Land-Line numbers...  and then 2 or 3 Smart phone Extension which will be outside of branches or other country for Smart phone will allow port forwarding in Head office router...  please advice how it will be ... waiting reply thanks.

1

· · ·

Skylights

Pimiento

OP

Hello everyone, IP Telephony has become a necessity for companies with branch offices across the globe to reduce phone calls charges. There are actually a lot of benefits in implementing IP Telephony. One of them is the ability to make local phone calls using the IP Office connected to another country or location reducing international phone charges. I'm happy to tell you that we have implemented this perfectly. Here's the scenario: we have one company in Romania, 3 companies in KSA and three companies in UAE. All of them can dial phone extensions to extensions, just like everyone is under one roof when calling each other. Each offices can take the line in Romania, KSA and Dubai to make local calls by dialing first a number on the keypad. For example, dialing 9 first will be the local code to make local calls for each location. If user in Romania will dial 8, he can take the line in KSA. If he dials 7, he can take the line in UAE. With UAE, user can dial 8 to take the line in Romania and dial 7 to take the line in KSA. With KSA, user can dial 8 to take the line in UAE and 7 to take the line in Romania. This is possible with VPN connectivity configured in between. Make sure your internet speed or bandwidth can handle Voice over IP. To give you an idea on how it is done, see the attached file. If you need some help, contact me on my personal email address at [email protected]

Edited Mar 4, 2015 at 06:21 UTC

0

· · ·

azeemshahazad

Pimiento

OP

Hi Everybody,

i have site to site vpn (implemented) i think no need any special configuration to use ip phone in all branches while pabx unit is install in main office i was trying to connect but unable any body have idea for me our all branches connected every time (stablevpn) Avaya 1608

0

· · ·

DesertSweeper

Poblano

OP

AN old thread but here is my issue: I have an IP500 at the Head Office "A" and a 1608 phone at a branch office "B" that is connected to HQ with a VPN. I have set up the router at the branch office with the AVAYA options in the DHCP config and the phone successfully finds the IP500 control unit at the HQ and registers. Users can make calls desk-to-desk without problem as if they are in the same office - it is just a specified extension at the remote site. Now I add a second remote site "C" and do exactly the same thing and that site too has no issue acting as a part of the office. They can make and receive desk-to-desk calls with their handset via their VPN.

Here is the problem, if the user at site B tries to dial the extension of the user at site C the phone rings but there is no voice when you lift the handset - totally silent. What am I missing....?

0

· · ·

DesertSweeper

Poblano

OP

To answer my own question: once I allowed the the networks B and C to route to each other through A, the calls became possible. It seems the IP500 controller is merely initiating and controlling the calls but that the actual voip traffic between extensions is direct IP, not via the control unit.

0

This topic has been locked by an administrator and is no longer open for commenting.

To continue this discussion, please ask a new question.

Sours: https://community.spiceworks.com/topic/134445-how-to-setup-avaya-ip-office500-on-a-site-to-site-vpn
avaya vpn video

Contact US

INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Thanks. We have received your request and will respond promptly.

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!

  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

Join Us!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Tek-Tips Posting Policies

Contact US

9608 VPN setup procedute

9608 VPN setup procedute

MBATech173(TechnicalUser)

(OP)

Hello Fellow Techs,

I'm looking to see if someone has a sort of "cheat sheet" on what's required in order to setup a VPN using the VPN features of the 9608 phones. I've always had trouble understanding what's required and the Avaya guide just tells me too much. I just want a streamlined procedure to follow to make this as simple to follow as possible. Thanks


BTS Tech

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Sours: https://www.tek-tips.com/viewthread.cfm?qid=1790618

Phone vpn avaya

.

Avaya 9608 asterisk sip tcp

.

You will also like:

.



51 52 53 54 55