Nortel Contivity 110 Beilage

_____________________________________________________________________________________

www.support.avaya.com,Page: 1 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

Avaya CAD-SV

Configuring Nortel Contivity 1100 VPN Router to Support Avaya 96xx series IP

Phones.

Issue 1.0

10th October 2009

ABSTRACT

These Application Notes describe the steps to configure the Nortel Contivity 1100 VPN

Router to Support Avaya 96xx series IP Phones.

_____________________________________________________________________________________

www.support.avaya.com,Page: 2 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

TABLE OF CONTENTS

_____________________________________________________________________________________

1. Introduction. ................................................................................................................3

1. NETWORK TOPOLOGY.............................................................................................4

2. EQUIPMENT AND SOFTWARE VALIDATED............................................................6

3. NORTEL VPN ROUTER 1100 CONFIGURATION.....................................................7

4. AVAYA 96XX SERIES IP PHONE CONFIGURATION.............................................15

4.1 96xx series IP Phone Firmware ................................................................................15

4.2 Configuring Avaya 96xx series IP Phone..................................................................15

4.3 “46xxsettings.txt” File................................................................................................17

5. VERIFICATION.........................................................................................................21

6. TROUBLE SHOOTING.............................................................................................22

6.1 IKE Phase 1 no response. ........................................................................................22

6.2 Incorrect IKE Phase 2 ...............................................................................................22

6.3 Phone displaying “connecting…”...............................................................................23

7. CONCLUSION..........................................................................................................24

8. REFERENCES..........................................................................................................24

_____________________________________________________________________________________

www.support.avaya.com,Page: 3 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

1. Introduction.

_____________________________________________________________________________________

These Application Notes describe the steps to configure the Nortel Contivity 1100 VPN Router to support IPSec

Tunnel termination using Local Credential authentication for Avaya 96xx series IP Phone.

Avaya 96xx series IP Phone has software based IPSec Virtual Private Network (VPN) client integrated into the

firmware of an Avaya 96XX Series IP Telephone. This capability allows Avaya IP Telephone to be plugged in

and used over a secure IPSec VPN from any broadband Internet connection. End users experience the same IP

telephone features as if they were using the telephone in the office. Avaya IP Telephone models supporting the

Avaya 96xx series IP Phone firmware include the 9620, 9620C, 9620L, 9630, 9640, 9650, 9650C and 9670.

Please Note that 9610 does not support VPN. Please Note that VPN feature is supported in H.323 based IP

phones and not SIP based. Also Spice 3.1 H.323 phones are supported in Avaya Communication Manager 3.1,

Build 4.0+.

Release 3.1 of the Avaya 96xx series IP Phone firmware, used in these Application Notes, extends the support

of head-end VPN gateways to include Nortel VPN Router (formerly known as Nortel Contivity) platforms. The

configuration steps described in these Application Notes utilize a Nortel VPN Router 1100.

The Avaya 96xx series IP Phone utilizes the Internet Key Exchange (IKE) Protocol for IPSec tunnel

establishment and authentication with the Nortel VPN Router.

CHAPTER 1.

_________________________________________________________________________

_____________________________________________________________________________________

www.support.avaya.com,Page: 4 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

1. NETWORK TOPOLOGY

_________________________________________________________________________

The below Figure 1 describes the general test setup diagram to configure the 96xx series IP phone with the

Nortel vpn gateway.

Figure 1: High level test diagram for Implementation of 96xx series avaya IP phones with Nortel contivity

1100.

The sample network implemented for these Application Notes is shown in Figure 1. The Corporate IP Network

location contains the Nortel Contivity 1100 VPN Router functioning as perimeter security device and VPN

head-end. The Avaya S8730 Server and Avaya G700 Media Gateway are also located at the Corporate IP

Network.

_____________________________________________________________________________________

www.support.avaya.com,Page: 5 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

The Avaya 96xx series VPN Enabled IP Phones are located in the public network and configured to establish an

IPSec tunnel to the Public IP address of the Nortel VPN Router. The Nortel VPN Router will assign IP

addresses to the 96xx series IP Phones. The assigned IP addresses, also known as the inner addresses, will be

used by the 96xx series IP Phones when communicating inside the IPSec tunnel and in the private corporate

network to Avaya Communication Manager.

CHAPTER 2

_________________________________________________________________________

_____________________________________________________________________________________

www.support.avaya.com,Page: 6 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

2. EQUIPMENTAND SOFTWARE VALIDATED

_________________________________________________________________________

Table 1 lists the equipment and software/firmware versions used in the sample configuration provided.

Equipment Software Version

Avaya G700 Media Gateway with S8300. Avaya Communication Manager 3.1 Build 4.0 and above.

Avaya 96xx Telephone Release 3.1

Nortel Contivity 1100 Software Version V06_00.310+

Table 1 – Equipment Version Information

CHAPTER 3.

_________________________________________________________________________

_____________________________________________________________________________________

www.support.avaya.com,Page: 7 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

3. NORTEL VPN ROUTER 1100 CONFIGURATION

_________________________________________________________________________

These Application Notes assume the Nortel VPN Router has been configured with basic IP connectivity and is

connected into the network. The Nortel VPN Router 1100 depicted in Figure-2 has been configured with IP

address 192.168.14.2 as its Management IP address.

1. From a web browser, enter the URL of the Nortel VPN Router (management) interface, http://<Management

IP address of VPN Router> and the following Nortel VPN Router screen appears. Select MANAGE SWITCH

and log in using a user name with administrative privileges in the pop-up window (not shown).

2. The below screen shows the LAN interface IP address configuration used in the sample network. One private

interface with IP address 192.168.14.3/24 and one public interface with IP address 192.168.8.200/30 are used in

the sample network.

_____________________________________________________________________________________

www.support.avaya.com,Page: 8 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

3. Select SERVICES AVAILABLE from the left panel menu. Make sure IPsec is enabled (default) for at least

the public interface.

4. The screen capture below shows the Default Routes defined under ROUTING STATIC ROUTES in the

sample network. One default route to gateway 192.168.14.1 on the Private side and the other default route to

gateway 192.168.8.1 on the public side.

_____________________________________________________________________________________

www.support.avaya.com,Page: 9 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

5. /BASE group was defined for use in the sample network.

_____________________________________________________________________________________

www.support.avaya.com,Page: 10 11/4/2009

Avaya Inc. – Proprietary. Use pursuant to Company Instructions.

_____________________________________________________________________________________

6. The abbreviated screen capture below shows the IPsec configuration used for the above /BASE group. The

Encryption is set to ESP – Triple DES with MD5 Integrity. The encryption will need to match Avaya 96xx

Inhaltsverzeichnis

Andere Nortel Netzwerk-Router Handbücher

Nortel

Nortel Passport 2430 Abmessungen

Nortel

Nortel 1000ASE-XD Leitfaden

Nortel

Nortel 222 Bedienungsanleitung

Nortel

Nortel BayStack 460-24T-PWR Bedienungsanleitung

Nortel

Nortel 10292FA Merkblatt

Nortel

Nortel NN46110-600 Bedienungsanleitung

Nortel

Nortel Remote Access for AN and Passport ARN... Bedienungsanleitung

Nortel

Nortel BCM50e Kurzanleitung

Nortel

Nortel Secure Router 4134 Bedienungsanleitung

Nortel

Nortel 1000 Con?guration guide Kurzanleitung zur Einrichtung

Nortel

Nortel 252 Bedienungsanleitung

Nortel

Nortel Passport 8600 Series Bedienungsanleitung

Nortel

Nortel Secure Router 4134 Kurzanleitung

Nortel

Nortel Secure Router 2330 Bedienungsanleitung

Nortel

Nortel Versalar 15000 Bedienungsanleitung

Nortel

Nortel 200 Series Bedienungsanleitung

Nortel

Nortel NN46205-310 Bedienungsanleitung

Nortel

Nortel 8300 Series Bedienungsanleitung

Nortel

Nortel 4500 Series Kurzanleitung

Nortel

Nortel 4500 Series Bedienungsanleitung

Nortel

Nortel BSR252 Bedienungsanleitung

Nortel

Nortel 8003AC Bedienungsanleitung

Nortel

Nortel BayStack 600 Series Bedienungsanleitung

Nortel

Nortel Passport 5430 Bedienungs- und Wartungshandbuch

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise