Nortel Secure Router 4134 Server Module with SCS. User Guide. Release: Document Revision: NN

Transcription

1 Release: Document Revision: NN

2 Release: Publication: NN Document release date: 28 August 2009 While the information in this document is believed to be accurate and reliable, except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT "AS IS" WITHOUT WARRANTY OR CONDITION OF ANY KIND, EITHER EXPRESS OR IMPLIED. The information and/or products described in this document are subject to change without notice. Nortel, Nortel Networks, the Nortel logo, and the Globemark are trademarks of Nortel Networks. All other trademarks are the property of their respective owners.

3 . Contents 3 New in this release 5 Features 5 SR4134 and SCS 5 Feature background 5 Feature description 6 Introduction 9 Secure Router Configuration 11 Configuring SR4134 for the SCS 11 SCS Server Module Configuration 15 Logging on to the SCS for the first time 15 Setting time manually 23 Configuring a different NTP server 24 SCS Server Configuration 25 Verifying network connectivity 26 Logging on to the Software Communication System 26 Get Licenses 28 Determining system ID 28 Applying the license file 30 Verifying the license file has loaded correctly 31 Adding users to the SCS 32 Verifying registrations 33 Adding SR4134 as a gateway to the SCS 35 Adding a dial plan for the SR4134 gateway 37

4 4

5 . New in this release 5 The following section details what s new in Nortel Secure Router 4134 Server Module with SCS (NN ) for Release Features The following sections detail the SR4134 and SCS and its features. Navigation "SR4134 and SCS" (page 5) "Feature background" (page 5) "Feature description" (page 6) SR4134 and SCS The SR4134 and SCS platform provides a cost effective modular platform for small and medium businesses with less than 250 users looking for a unified communication solution combining data, security, toll quality voice, conferencing, and collaboration applications. Feature background The Nortel Secure Router 4134 is a modular, multiservice platform that integrates multiple networking functions, including routing, Wide Area Network (WAN), Ethernet switching, security and SIP-PSTN gateway into a single device. The Nortel Secure Router 4134 is positioned as an all-in-one branch office solution or as a standalone office solution. To provide a complete unified communication solution there is a need for an external SIP-based IP PBX located at the head office or along with SR4134. For more information about the SR4134, go to the Nortel website: The Nortel Software Communication System is a feature rich, highly flexible, SIP-based IP PBX solution that delivers powerful, cost effective unified communications solutions to small and medium business customers. The Software Communications System (SCS) solution components include SCS software, a server platform to run the software, gateway for access to PSTN, analog phones and fax connectivity, SIP

6 6 New in this release endpoints hard and soft, router/switch for IP network connectivity, and firewall. For more information about the SCS, go to the Nortel website: Feature description The Nortel SR4134 and SCS platform delivers converged IP telephony and advanced communications along with feature-rich routing and security data services in an integrated, competitively priced platform. Based on Nortel UC Integrated Secure Router 4134 and Software Communications System (SCS), the SCS and SR4134 platform combines data, voice and collaboration services into a complete single-box solution for todays business needs. The following diagram shows the SCS standalone deployment with various separate solution components. Figure 1 SCS standalone deployment The SR4134 Server Module and SCS platform is an all-in-one-box solution. The solution s unique integration of data and unified communications capabilities, including IP PBX, advance conference functionality, collaboration applications, and PSTN gateway, makes it ideal to meet the converged communications needs of up to 250 users.

7 Feature description 7 Figure 2 The SR4134 Server Module and SCS platform Feature Summary of SCS+SR4134 platform. IP PBX an enterprise-grade, highly robust, scalable, and fully-featured SIP based IP PBX extensive Call Features easy to use GUI based dialplan voice mail integrated voice/unified messaging (IM) call Forwarding (Find Me/Follow Me) presence capabilities advanced conferencing (Meet Me) auto Attendant and Personal Auto Attendant automatic Call Distribution (ACD) SIP Trunking browser based configuration and management plug & play management of phones hard clients, softphones and application plug-ins

8 8 New in this release Voice Media Gateway range of voice interfaces, including FXO, FXS, T1/E1 PRI, QSIG, T1 CAS, E1 R2, and BRI enable connection to the PSTN or to analog telephony devices like phones, fax machines and modems. Robust routing low-latency, high-packet throughput ideal for VoIP and multimedia transport IPv4 or IPv6 with advanced BGP-4 and multicast services Secure Routers delivers speeds from ISDN through T3/E3 rates, performance and capacity are available to meet the most demanding users. Integrated security stateful packet inspection firewall IPSec VPN services with VPN hardware acceleration (optional) Quality of Service advance Quality of Service (QoS) to ensure reliable transport of voice, video and data High reliability highly reliable solution with built-in redundancy features, including hot-swappable modules, dual redundant power, WAN-link failure protection, and VRRP failover

9 . Introduction 9 This document describes the quick start configuration for Nortel Secure Router 4134 Server Module with SCS (SR4134 Server Module with SCS) release For more information on SR4134 Server Module and SCS, go to the Nortel website: Navigation "Secure Router Configuration" (page 11) "SCS Server Module Configuration" (page 15) "SCS Server Configuration" (page 25)

10 10 Introduction

11 . Secure Router Configuration 11 The following section details how to configure Nortel Secure Router 4134 network connectivity and SIP-PSTN gateway using an example setup. Navigation "Configuring SR4134 for the SCS" (page 11) Configuring SR4134 for the SCS Please refer to SR4134 user documentation for configuration options for Interfaces, Modules, Signaling protocols, VLANs, and all SR4134 related commands. The examples below are intended to provide guidance regarding configuration of SR4134 for use with SCS in specific applications. The SR4134 configuration for each user installation should match the network connectivity and requirements for that installation. The following figure shows an example SR4134 setup with SCS. The SCS server module is on slot 5 of the Secure Router. It has a 2 port T1/E1 mini module on slot 4 for connecting to PSTN and to Internet. A 24 Port Power Over Ethernet (PoE) medium module is on slot 6 for connecting SIP Phones and 2 port FXS mini-module is on slot 2 for analog phone/fax connectivity. Perform the following procedure to configure the SR4134 for SCS.

12 12 Secure Router Configuration Procedure steps Step Action 1 Configure the Vlan address and assign the address to SR listening interface. In this example assume the following : SR is listening on Ethernet interface 0/1 with IP address SCS Server Module is inserted in fifth slot vlan database vlan 10 exit vlan database interface ethernet 0/1 switchport switchport pvid 10 no shut exit ethernet interface servmod 5/1 switchport switchport pvid 10 exit servmode interface vlan vlan10 ip address exit vlan 2 Configure the PoE and associated Vlan address for SIP Phones. Ensure that the power supply installed on SR4134 is a PoE version. You can configure the SIP Phones addresses in the /24 subnet. vlan database vlan 2 exit database interface ethernet 6/1 switchport switchport pvid 2 no shut exit ethernet interface ethernet 6/2 switchport switchport pvid 2 no shut exit ethernet

13 Configuring SR4134 for the SCS 13 interface vlan vlan2 ip address exit vlan poe portmode 6/1 1 poe portmode 6/2 1 poe portpower 6/1 poe portpower 6/2 3 Assign SIP domain (configured in the SCS) to SIP server and registrar. sip ua sip-server dns:nortel.com registrar dns:nortel.com exit 4 Configure the bind address where the SR receives SIP messages. voice service voip sip bind all ipv4: :5060 exit exit 5 Assign the SCS IP address to SIP domain. ip host_add nortel.com Configure an FXS phone and register it to the SCS. Assuming the following: FXS phone has a telephone number 1000 and connected to 2/1 slot. FXS phone has SIP password 1234 (need to be same password as configured in the SCS for phone number 1000) voice-port 2/1 signal loop-start no shutdown station number 1000 exit dial-peer voice pots 1 destination-pattern 1000 forward-digits all port 2/1 authentication no shutdown register e164 exit

14 14 Secure Router Configuration Attention: You must execute register e164 command only after the phone/user is configured in SCS using web GUI. 7 Configure a PRI T1 link to connect to PSTN switch. Assuming the following: All numbers start with 408 are routed to PRI link. The switch type is 5ESS. The PRI link is connected to first port of fourth slot of the SR. interface bundle pri1 link pri_t1 4/1 voice isdn side USR switch-type primary-5ess activate exit exit dial-peer voice pots 10 destination-pattern 408.% port 4/1 no shutdown exit 8 Configure a T1 link to connect to Internet. Assuming the following: The protocol used is PPP. The T1 link is connected to second port of fourth slot of the SR. interface bundle internet link t1 4/2 encap ppp ip address exit --End--

15 . SCS Server Module Configuration 15 The following section describes how to connect and log on to the Secure Router SCS Server Module and perform initial configuration. Prerequisites A CRT or LCD monitor with VGA cable A USB based Keyboard IP Address for the SCS Server IP Address of the SR4134 to configure as the gateway address for SCS External DNS Server IP Address (if available) External NTP Server IP Address (if available) SIP Domain Name Navigation "Logging on to the SCS for the first time" (page 15) "Setting time manually" (page 23) "Configuring a different NTP server" (page 24) Logging on to the SCS for the first time Perform the following procedure to log on to the SCS for the first time. Procedure steps Step Action 1 Connect a CRT or LCD monitor to the VGA port located on the front panel of the SCS Server Module. Also connect a keyboard to the front panel USB port. Notice the login prompt on the monitor. 2 Enter root for Localhost Login.

16 16 SCS Server Module Configuration 3 Enter setup when prompted for password. 4 At the command prompt, enter sipxecs-setup-system command to start setup process. Attention: If you make an error during the setup process, restart the server and log on using the same user name and password. At the command prompt type sipxecs-setup-system, and then press Enter to reload the configuration utility from the start. 5 Select Start and press Enter.

17 Logging on to the SCS for the first time 17 6 Enter the Admin Password twice. This password is the one that engineers and administrators use to gain access to the SCS server locally through the Linux operating system. 7 Select OK, and then press Enter when you are ready to continue. 8 Enter the following Lan settings. Hostname IP Netmask Gateway Address The fully qualified domain name (FQDN) of the SCS server as defined in the DNS records. The IP address that has been assigned for use with the SCS. This must be consistent with the address defined in the DNS settings. The networks subnet mask. The IP address of the default gateway for IP routing.

18 18 SCS Server Module Configuration 9 The installation wizard checks if you have DNS configured on the network. If you have configured the DNS for the SCS select Yes. In this instance the next screen prompts you to configure the address of a primary and secondary DNS server. If you do not have DNS or you cannot configure the required records, you can configure the SCS to function as a DNS server. To enable the SCS onboard DNS, select No xxx.xxx.xxx should be my DNS server, and then continue to step 9. Attention: The onboard DNS service automatically configures all required A records and SRV records. You do not have to define a fully qualified domain name when it comes to configuring the SIP domain later in the installation process.

19 Logging on to the SCS for the first time 19 If no external DNS servers are available and SCS is configured as the DNS server, select OK and press the Enter key to continue. 10 Select a region or country to set the time zone in which the SCS is situated. If you pick a region, such as Europe, the SCS prompts you to define an area within that region, for example, London. 11 The system searches for NTP servers to set the system time. By default the SCS is programmed to attempt a connection to a series of Internet-based time servers. If the SCS successfully gathers NTP data the following message appears: The system level parameters have been configured. The next step is to configure the scs service bootstrap parameters. If the SCS cannot connect to one of these servers it will ask you to do one of the following: Continue with the current time server configuration, in which case you have to set the time manually. For more information, see "Setting time manually" (page 23). Configure the address of a different NTP server. For more information, see "Configuring a different NTP server" (page 24).

20 20 SCS Server Module Configuration 12 Select No xxx.xxx.xxx should not be my DHCP server to enable the DHCP service. This service provides devices joining the network with IP addresses.

21 Logging on to the SCS for the first time Highlight First Server and press the Enter. This defines this server as your primary SIP server. Attention: You can change these SCS specific settings anytime by running the sipxecs-setup command on command prompt. 14 Next set the SIP Domain. Knowledge of your network configuration is vital at this stage. You need to know how DNS is configured. Find out from the network administrator whether DNS A Records and SRV Records have been configured for the SCS. The presence or absence of SRV records determines the structure of the SIP domain: If the DNS is configured with just A records you will need to include the SCS server name in the SIP Domain. If you look at the default entry you will see that the SIP Domain has been entered as just a domain name, e.g., nortel.com. This is insufficient if there are no SRV Records configured on the DNS server. Therefore, if DNS is configured with only A Records, enter the host name and domain name of the SCS server (known as a fully qualified domain name). Example: scs.nortel.com. If DNS is configured with A Records and SRV Records you will not need to include the server name. Therefore, the default entry (pre-entered by the wizard) will be sufficient. This is because SRV records will automatically direct all SIP traffic within the domain to the SCS. So, if SRV records exist the SIP domain will look like this: nortel.com.

22 22 SCS Server Module Configuration Highlight the OK button and press the Enter key when you are ready to continue. 15 Wait till all TLS related configurations are completed. 16 Select Reboot and press the Enter key to complete configuration and restart the server. --End--

23 Setting time manually Perform the following procedure to set the time manually. Setting time manually 23 Prerequisites Complete steps 1 through 9 from the procedure "Logging on to the SCS for the first time" (page 15). Procedure steps Step Action 1 Select Continue with these servers, and then press Enter. 2 Use the left and right cursor keys to move between the fields and the up and down cursor keys to adjust each value, to set the time. Attention: You must set the time in a 24-hour format. 3 Select OK, and then press Enter. 4 Continue to Step 11 in the procedure "Logging on to the SCS for the first time" (page 15). --End--

24 24 SCS Server Module Configuration Configuring a different NTP server Perform the following procedure to configure a different NTP server. Prerequisites Complete steps 1 through 9 from the procedure "Logging on to the SCS for the first time" (page 15). Procedure steps Step Action 1 Select Reconfigure servers, and then press Enter to set new NTP servers. 2 Enter the new NTP addresses. 3 Select OK, and then press Enter. The SCS attempts to connect to the defined NTP servers. 4 Continue to Step 11 in the procedure "Logging on to the SCS for the first time" (page 15). --End--

25 . SCS Server Configuration 25 The following sections detail how to configure Software Communications System (SCS) server using the Web graphical user interface (GUI). The following figure shows an example Secure Router 4134 setup with SCS Server Module complete with IP addresses. The PC marked as Mgmt Console is used to access the web interface of the SCS Server using web browser. Navigation "Verifying network connectivity" (page 26) "Logging on to the Software Communication System" (page 26) "Get Licenses" (page 28) "Determining system ID" (page 28) "Applying the license file " (page 30) "Verifying the license file has loaded correctly " (page 31) "Adding users to the SCS" (page 32) "Verifying registrations" (page 33) "Adding SR4134 as a gateway to the SCS" (page 35) "Adding a dial plan for the SR4134 gateway" (page 37)

26 26 SCS Server Configuration Verifying network connectivity Perform the following procedure to verify network connectivity. Prerequisites Ensure: "SCS Server Module Configuration" (page 15) is completed. "SCS Server Configuration" (page 25) is completed. Procedure steps Step Action 1 Test the connection by pinging the SCS IP address. --End-- Logging on to the Software Communication System Perform the following procedure to log into the Software Communication System. Procedure steps Step Action 1 Open your Web browser. 2 Enter the IP address or Fully Qualified Domain Name (FQDN) of the SCS system in the address bar. The Licensing Agreement window appears. Attention: Depending on your browser settings, you can receive a warning concerning the security certificate for the site. Approve the certificate.if you are using Mozilla Firefox 3, you must add an exception to a security certificate exception. 3 Read the agreement and then accept the same by pressing I Agree button.

27 Logging on to the Software Communication System 27 4 Enter and confirm the new PIN, and then click Apply. Attention: The first time you attempt to log on to the SCS system as a superadmin user, the SCS requests you to change your PIN. 5 Enter your user ID superadmin at the initial logon screen. 6 Enter the password you have just created. 7 Click Login. The SCS Interface appears.

28 28 SCS Server Configuration --End-- Get Licenses Licenses determine the number of users you can create on the SCS system. You cannot create users on the SCS until you apply a valid license file to the system. Determining system ID To obtain and load a license file that determines the number of users that you can configure, you must first determine the system ID of the SCS. Use the system ID to generate a license file that is unique to the SCS. Perform the following procedure to determine the system ID. Procedure steps Step Action 1 Select System, Licensing. 2 Click the Retrieve System ID link from the Licensing window.

29 Get Licenses 29 3 Download the sysid.xml file which contains system ID. 4 Click Save File after the File Download box appears. The SCS generates files containing the system ID that you can save to the desktop of your PC. 5 You must contact your Nortel Authorized Partner or Reseller for purchase of SCS User Licenses. For Nortel Partners, the process for obtaining SCS User Licenses follows the same process as for all SCS Licenses, and is documented on the SCS

30 30 SCS Server Configuration Web Site at under Market Readiness Modules, SCS Rel 3.0 Partner Supply Chain Information Module. Customers purchasing Nortel Secure Router 4134 Server Module with SCS with 50 user licenses must follow the instructions on the license certificate (included with the module) to obtain their 50 licenses. Additional licenses must be purchased through a Nortel Authorized Partner or Reseller as described above. --End-- Applying the license file Once you purchase and receive the license file for the required number of users, please use the following procedure to apply the license file. Prerequisites You must purchase license and obtain a valid license file. Procedure steps Step Action 1 Click Browse and locate the file. 2 Select the file, and then click Apply. Apply the license file to the SCS system. The license file enables the configuration of users based on the number of users purchased. --End--

31 Get Licenses 31 Verifying the license file has loaded correctly Perform the following procedure to verify that the license file has loaded correctly. Procedure steps Step Action 1 Select System, Licensing. 2 The Licensing window appears. You can view the number of available users. Attention: The license file determines the number of users that you can configure on the SCS system.a maximum of 250 users can be licensed on the SCS system. --End--

32 32 SCS Server Configuration Adding users to the SCS Perform the following procedure to add users to the SCS. Procedure steps Step Action 1 Choose Users from USERS menu. 2 Click Add New User. 3 Add the following information for a new user: user ID phone number PIN Used to accessing voice mail server SIP password used by a SIP or FXS for authentication when challenged by SCS server

33 Get Licenses 33 4 Click OK. --End-- Verifying registrations Perform the following procedure to verify registrations. Procedure steps Step Action 1 Select DIAGNOSTICS, Registrations to check the users registered with SCS.

34 34 SCS Server Configuration 2 Register FXS or SIP phones and check status of registration. --End--

35 Get Licenses 35 Adding SR4134 as a gateway to the SCS Perform the following procedure to add SR4134 as a gateway to the SCS. Prerequisites To receive and send a call from the SCS to SR4134 trunk lines, you must add SR4134 as a gateway to the SCS. You require Dial plans to route the calls to gateway trunk lines. Procedure steps Step Action 1 Select DEVICES, Gateways. 2 From the Add new gateway.. shortcut menu choose Unmanaged. 3 Add the name and ipadress of the SR4134 gateway. 4 Click OK.

36 36 SCS Server Configuration --End--

37 Get Licenses 37 Adding a dial plan for the SR4134 gateway Perform the following procedure to add a dial plan for the SR4134 gateway. Procedure steps Step Action 1 Select SYSTEM, Dial Plans. 2 From the Add New Rule.. shortcut menu choose Custom. 3 Add and enable a dial plan to route calls to SR4134 gateway.

38 38 SCS Server Configuration 4 Configure the following: Enable the dial plan Name the dial plan Set the condition dialed number to be routed Set permission Set the resulting dialed number Add preconfigured SR4134 gateway as a route for the dial plan 5 Click OK. 6 Click OK again.

39 Get Licenses 39 7 Click the link hereat the top of the screen. 8 Select check boxes. 9 Click Restart. --End--

40 40 SCS Server Configuration

41

42 Release: Publication: NN Document revision: Document release date: 28 August 2009 While the information in this document is believed to be accurate and reliable, except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT "AS IS" WITHOUT WARRANTY OR CONDITION OF ANY KIND, EITHER EXPRESS OR IMPLIED. The information and/or products described in this document are subject to change without notice. Nortel, Nortel Networks, the Nortel logo, and the Globemark are trademarks of Nortel Networks. All other trademarks are the property of their respective owners. Send all feedback on templates to Malcolm Graham To provide feedback or to report a problem in this document, go to