Avaya 4600 User Manual

VPNremote for the 4600 Series IP TelephonesRelease 2.0Administrator Guide19-600753Issue 2July 2006

Introduction10 Administrator Guide VPNremote Phone features in Release 2The following summarizes a number of significant feature, performance, and usa

Issue 2 July 2006 11 VPNremote Phone features in Release 1The following summarizes a number of significant feature, performance, and usability enhance

Introduction12 Administrator Guide

Issue 2 July 2006 13 Chapter 2: ConfigurationThis section provides administrators with information on how to configure the Avaya VPNremote for 4600 Se

Configuration14 Administrator Guide Preparing Communication Manager for the VPNremote PhoneA VPNremote Phone is configured the same as other IP teleph

Configuration preparationIssue 2 July 2006 15 Preparing the Avaya Security Gateway for the VPNremote PhoneVPNremote Phone users who login to the VPN t

Configuration16 Administrator Guide Juniper Networks NetScreen series VPN devicesSet the following values:NVVPNCFGPROF(5)NVVPNSVENDOR(1)NVVPNAUTHTYPE(

Configuration preparationIssue 2 July 2006 17 Converting an IP Telephone to VPN IP TelephoneUse the following procedure and the telephone key pad to c

Configuration18 Administrator Guide 5. Upon completion of the download, the telephone will restart. Upon restart, the telephone will attempt to establ

Configuration preparationIssue 2 July 2006 19 6. Enter the user name using the telephone key pad. Press the alpha-numeric keys until the desired lette

© 2006 Avaya Inc.All Rights Reserved.NoticeWhile reasonable efforts were made to ensure that the information in this document was complete and accurat

Configuration20 Administrator Guide

Issue 2 July 2006 21 Appendix A: Avaya VPNremote for 4600 Series IP Telephones Installation ChecklistThe checklist on the following page is provided f

Avaya VPNremote for 4600 Series IP Telephones Installation Checklist22 Administrator Guide VPNremote Phone passwordDepending on the telephony configur

Issue 2 July 2006 23 Appendix B: TroubleshootingThis chapter describes problems that might occur during installation and configuration of the Avaya VP

Troubleshooting24 Administrator Guide SSL Connection Failure ● Confirm security device is accepting SSL connections This requires access to the device

Issue 2 July 2006 25 Error and Status MessagesThe 4600 Series IP Telephones issue messages in English only. The IP telephones also display messages fr

Troubleshooting26 Administrator Guide Server authentication mechanism failingYes N/A An externally configured authentication source (Radius Server) an

Issue 2 July 2006 27 IKE Phase 2 no response.No Yes Security device is busy.IKE phase 2 proposal is mismatched.Vendor-specific features are enabled. L

Troubleshooting28 Administrator Guide DNS needed for resolving security device name.Yes Yes The system could not resolve the security device fully qua

Issue 2 July 2006 29 Table 4 describes the list of all error messages that pertain to the VPN tunnel setup failures that the VPNremote Phone might dis

Issue 2 July 2006 3About this book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5What products are c

Troubleshooting30 Administrator Guide

Issue 2 July 2006 31 Appendix C: System Parameters CustomizationFor additional definitions and information on how to change IP telephone parameters, s

System Parameters Customization32 Administrator Guide NVVPNCFGPROF NONE This parameter controls the VPN configuration profile for the device vendor an

Issue 2 July 2006 33 NVVPNAUTTYPE 2 This parameter is valid when NVVPNCFGPROF is set to 1 (Avaya security gateway). If the Avaya security gateway soft

System Parameters Customization34 Administrator Guide NVSECSGIP “” (Null) This is the secondary IP address or the secondary fully qualified domain nam

Issue 2 July 2006 35 NVBACKUPSGIP “” (Null) This parameter controls the back up IP address or the back up fully qualified domain name of the security

System Parameters Customization36 Administrator Guide NVVPNUSER “” (Null) This parameter controls the user name to be used during authentication and V

Issue 2 July 2006 37 NVVPNPSWDTYPE1 This parameter controls the type of VPN passwords. Valid value is one ASCII numeric digit, 1 to 4. Values are:1 =

System Parameters Customization38 Administrator Guide NVVPNFILESRVRNull ("") This parameter contains the URL of the file server. A file serv

Issue 2 July 2006 39 NVVPNCOPYTOS2 This parameter contains whether TOS bits should be copied fromthe inner header to the outer header, or not copied a

Contents4 Administrator Guide

System Parameters Customization40 Administrator Guide NVWEBLMURLhttp://XX.XX.XX.XX:8080/WebLM/LicenseServer This parameter contains the Web LM licensi

Issue 2 July 2006 41 NVVPNENCAPS0 This parameter contains the method of UDP encapsulation. Values are:0=4500-45001=Disable2=2070-5004= RFC (3947 and 3

System Parameters Customization42 Administrator Guide NVVPNCONCHECK1 This parameter decides if the connectivity check should be performed after establ

Issue 2 July 2006 43 VPNMONFRQ0This value contains the frequency of VPN monitoring syslog message in minutes. If a syslog server IP address is specifi

System Parameters Customization44 Administrator Guide ALWCLRNOTIFY0 This parameter contains the policy that defines ISAKMP NOTIFICATION messages. Thes

Issue 2 July 2006 45 ALWSTOPVPN 1 This parameter contains the policy that defines if the user is allowed to stop VPN while connected to the call serve

System Parameters Customization46 Administrator Guide The parameters in Table 6 are configurable in the Script File when the parameter NVVPNCFGPROF is

Issue 2 July 2006 47 NVIKEID VPNPHONEThis parameter controls the IKE identifier. The IKE identifier is used during phase 1 negotiation. Length of the

System Parameters Customization48 Administrator Guide NVIPSECSUBNET 2 This parameter contains the IP subnet and masks that are protected by the securi

Issue 2 July 2006 49 NVIKEDHGRP 2 This parameter contains the value of Diffe-Hellman (DH) group. The DH group is used during phase 1 negotiation. Valu

Issue 2 July 2006 5 About this bookThe guide provides network administrator and end-user configuration information for the Avaya VPNremote for the 460

System Parameters Customization50 Administrator Guide NVIKEP1ENCALG0 This parameter contains the encryption algorithms to propose for IKE phase 1 secu

Issue 2 July 2006 51 NVIKEP2ENCALG0 This parameter contains the encryption algorithms to propose for IKE phase 2 security association. Values are:0=AN

System Parameters Customization52 Administrator Guide NVIKEP1AUTHALG0 This parameter contains the authentication algorithms to propose for IKE phase 1

Issue 2 July 2006 53 NVVPNENCAPS0 This parameter contains the method of UDP encapsulation. Values are:0=4500-45001=Disable2=2070-5004= RFC (3947 and 3

System Parameters Customization54 Administrator Guide

Issue 2 July 2006 55 IndexIndexAAbout this book . . . . . . . . . . . . . . . . . . . 5Avaya VPNremote for 4600 Series IP Telephon

56 Administrator Guide IndexVVPNremote Phone features. . . . . . . . . . . . . .11automatic discovery of UDP encapsulation method . . .

About this book6 Administrator Guide Related Documentation● Request For Comments (RFC)The following RFCs have been implemented: 2401, 2407, 2408, 2409

Issue 2 July 2006 7 ● Remote Feature Activation (RFA) Getting Started with Remote Feature Activation (03-300484)The Getting Started With Remote Featur

About this book8 Administrator Guide

Issue 2 July 2006 9 Chapter 1: IntroductionThe Avaya VPNremote for 4600 Series IP Telephones (VPNremote Phone) is an Avaya H.323 IP Telephone with an