96xx seires in VPN mode

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts
  • saad2
    Member
    • Mar 2012
    • 5

    96xx seires in VPN mode

    dear all,

    any body make the configuration for 96xx series on vpn mode ... beacuse i need to make this solution but i need more detials about this .....

    if any one have idea according to this please send it to me ..

    haitham saad
    00966563645755
    [email protected]
  • aa1
    Guru
    .
    • Feb 2010
    • 185

    #2
    96xx VPN mode

    Hi Haitham,

    What exactly are you looking for?
    To setup the VPN, you will need:

    1) 96xx FW that supports VPN
    2) VPN details (such as server IP, authentication method, etc...)
    3) 46xxsettings.txt file with the VPN settings

    Below document contains details that will help you start:

    VPN Setup Guide for 9600 Series IP Telephones Release 3.1

    16-602968 Issue 1 November 2009



    As of Release 6.2, you can download an application file from the Avaya Support Web site that does not support VPN or media encryption
    http://support.avaya.com/css/P8/documents/100157597 (Page 37)
    Avaya one-X® Deskphone H.323 9608, 9611G, 9621G, and 9641G Administrator Guide Release 6.2 16-300698 Issue 10 February 2012


    Hope this helps.
    Arbi

    Comment

    • aa1
      Guru
      .
      • Feb 2010
      • 185

      #3
      VPN SETTINGS in 46xxsettings.txt file

      You can download the latest 46xxsettings.txt file from:


      IMPORTANT: There are TWO 46xxsettings.txt files for these products. Make sure you download and use the correct file for your product and release.

      This link is to the file directly for
      • 96x1 telephone H.323 software release 6.2
      • 96x1 telephone SIP software release 6.0 SP3
      • 96x0 telephone H.323 software release 3.1 SP4
      • 96x0 telephone SIP software release 2.6 SP7
      • 46xx telephone H.323 software release 2.9 SP2
      • 46xx telephone SIP software release 2.2.2
      • 364x telephone SIP software release 1.0
      • 3631 telephone H.323 software release 1.3.0
      • 16xx telephone H.323 software release 1.3
      • 16CC telephone SIP software release 1.0
      • 1603 telephone SIP software release 1.0
      • 1692 telephone H.323 software release 1.4
      • Softphone SIP software release 2.1
      ftp://ftp.avaya.com/incoming/Up1cku9...xxsettings.txt


      Below is a brief list of the VPN settings extracted from the 46xxsettings.txt file.

      ####################### VPN SETTINGS #########################
      ##
      ## SET NVVPNMODE 1
      ## SET DHCPSRVR 192.168.16.2
      ## SET NVVPNCFGPROF 0
      ## SET NVIKECONFIGMODE 1
      ## SET NVIKEXCHGMODE 1
      ## SET NVIKEXCHGMODE 2
      ## SET NVIKECONFIGMODE 1
      ## SET NVVPNAUTHTYPE 3
      ## SET NVSGIP "10.1.1.1"
      ## SET NVVPNUSER %MACADDR%
      ## SET NVVPNPSWDTYPE 1
      ## SET NVVPNCOPYTOS 2
      ## SET NVVPNENCAPS 0
      ## SET NVIKEPSK "abc1234"
      ## SET NVIKEID "VPNPHONE"
      ## SET NVIKEIDTYPE 3
      ## SET NVIPSECSUBNET "0.0.0.0/0"
      ## SET NVIKEDHGRP 2
      ## SET NVPFSDHGRP 0
      ## SET NVIKEP1ENCALG 0
      ## SET NVIKEP2ENCALG 0
      ## SET NVIKEP1AUTHALG 0
      ## SET NVIKEP2AUTHALG 0
      ## SET NORTELAUTH 1
      ## SET NVXAUTH 1
      ## SET RINGPRIORITY 3
      ## SET VPNPROC 1
      ## SET ALWCLRNOTIFY 0
      ## SET DROPCLEAR 1
      ## SET NVMCIPADD "0.0.0.0"
      ## SET NVHTTPSRVR "0.0.0.0"
      ## SET NVTLSSRVR "0.0.0.0"
      ## SET NVIKEOVERTCP 0
      ## SET NVIKEP2LIFESEC 432000
      ## SET NVVPNPSWD ""
      ## SET NVVPNSVENDOR 4
      ## SET NVVPNUSERTYPE 1
      ## SET VPNTTS 0


      Telephones will attempt to establish a VPN connection only if the system parameter NVVPNMODE is set to "1" (Enabled). You can choose to permit your end users to change this value if a remote telephone will also be used within the enterprise environment. By enabling the NVVPNMODE, you will be able to configure the parameters of the VPN right on the phone itself (for testing purpose).


      Arbi

      Comment

      • mmajbo
        Aspiring Member
        • Jun 2012
        • 2

        #4
        VPN configured but not working

        Guys, i have been trying to configure 9630 as a VPN phone and it is giving me a lot of grief.
        i am at a point were i can see the phone establish VPN tunnels, obtian an IP address on the private network, but it hangs on the contacting the call server step.
        This is because the phone gets the IP address on the private network but for whatever reason subnet mask and router are not updated and i still see values for the local router and subnet mask that i punched in the phone to make it connect to network.

        Thnx for any help!

        Comment

        • mmajbo
          Aspiring Member
          • Jun 2012
          • 2

          #5
          Can't get the complete IP address from VPN

          If anyone has an idea how to fix that please let me know:

          I enter local IP address, sub, router and file server on the phone
          Phone conects to file server and grabs the config file
          Next step is VPN tunnel and authentication which goes fine
          Phone starts to contact call server and just stays here

          When i go to CRAFT and check settings i see that all IP inofrmation i entered manually gets passed as enternal IP information, but on the internal side only IP address is updated form VPN to represent conrporate network but subnet mask and router stay the same as they were entered manually and are not updated and this of course makes it impossible for the phone to comunicate wioth corporate call servers.

          Any ideas?

          Comment

          • narias
            Aspiring Member
            • Jul 2012
            • 1

            #6
            Vpn settings on an ip phone 9640

            Hi, I have the same problem with the firmware on an IP phone 9640. The firmware is already uploaded on it ( s3.186a version) ,but the issue is that the system on the phone do not allow me to make any change, it shows the VPN settngs on disable and i`m not able to enable it....what should i do to be able to enable it?
            please send me an answer to the mail [email protected]

            Comment

            • macosx2new
              Member
              • May 2012
              • 8

              #7
              NVVPNUSER in 46xxsetting file

              My environment:
              CM 6.0.1
              IP phone 9611G ver: 6.23.12
              H323
              Cisco ASA 55XX.

              I got most of VPN configuration fingured out. But one question remaining, regarding NVVPNUSER that contains the string $MACADDR. For the life of me, I could not make the string will be replaced by the telephone's MAC address.

              Any though of using IF statement to archive the goal? to stage the phone and it may be preconfigured in a file to eliminate the need for the user to manually enter the value.

              Much appreciated to shed some light.

              Kevin

              Comment

              • tripathi1
                Hot Shot
                .
                • Jun 2014
                • 10

                #8
                VPN configured but not working

                Dear mmajb,

                Are you using ip address in range 10.0.0.x /24 in the private side of your network ?

                There is a known issue observed which is fixed in firmware 3.2.0.5.

                Upgrade your 9630 phones to minimum 3.2.0.5 or latest.

                If the issue still persists then open an SR with Avaya to investigate further

                Comment

                Loading