Abstract. Avaya Solution & Interoperability Test Lab

Transcription

1 Avaya Solution & Interoperability Test Lab Application Notes for Avaya IP Office and Avaya 3620 Wireless Telephones with Symbol Technologies WS5100 Wireless Switch and AP300 Access Port Issue 1.0 Abstract These Application Notes describe a sample configuration of the Avaya IP Office 406V2 and Avaya 3620 Wireless IP Telephones using Symbol Technologies WS5100 Wireless Switch and AP300 Access Port. The configuration uses WiFi Protection Algorithm (WPA-2) encryption. Additional security is provided via the firewall in the Symbol WS5100 Wireless Switch. 1 of 38

2 1. Introduction Figure 1 shows a small business using Avaya 3620 Wireless IP telephones with Avaya IP Office. The phones are similar to the Avaya 3616/3626 Wireless IP Phones with the addition of having a membrane that is easier to clean. The Wireless Switch is the Symbol WS5100 Wireless Switch, which also has an integrated firewall. The Avaya 3620 IP telephones registered to the Avaya IP Office. The firewall feature on the Symbol Technologies WS5100 Wireless Switch was used during the scenario testing for this solution. The firewall configuration presented in this document limits wireless traffic to: 1. Real-Time Transport Protocol (RTP) packets between the Avaya 3620 Wireless IP telephones, Avaya IP Office and Avaya 4600 series IP telephones. 2. VoIP signaling between the Avaya Voice Priority Processor and the Avaya 3620 Wireless IP telephones. The Avaya 3620 Wireless IP telephones were statically configured. No TFTP server was configured. The Avaya 3620 Wireless IP telephones were upgraded prior to deployment. A TFTP Server, which is part of IP Office Manager was used for the Avaya 4600 IP telephones. Figure 1: Avaya 3620 Telephones with the Symbol Technologies WS5100 Wireless Switch and AP300 Access Port 2 of 38

3 1.1. IP Office Features The following features were successfully tested on the 3620 telephones in this configuration: 1. Message Waiting Indication. 2. Paging from the 3620 Phone. 3. Push to Talk. 4. Line Appearances. 5. Bridged Appearances. 6. Coverage Appearances. 2. Equipment and Software Validated The following equipment and software/firmware were used for the sample configuration: Quantity Device Description Versions Tested 1 Avaya IP Office 406V Avaya 4620 IP Telephones Avaya 3620 Wireless IP Telephone Avaya Voice Priority Processor 33/02 1 Avaya 363T-PWR Converged Stackable Switch Avaya Configuration Cradle Dell PowerConnect 3448P switch Symbol Technologies WS5100 Wireless Switch R 1 Symbol Technologies AP300 Access Port Configure IP Office Configuring the IP Office includes: 1. Setting up the Avaya Voice Priority Processor IP Address. 2. Configuring Users and Extensions for the 3620 Wireless IP Terminals. 3. Configuring the RTP ports. 3 of 38

4 IP Office is configured via the Manager program. Log into the IP Office Manager PC and select Start Programs IP Office Manager to launch the Manager application. Log into the Manager application using the appropriate credentials. There are two panels in Manager. The left panel contains the configuration tree. 4 of 38

5 1. Configure the Avaya Voice Priority Processor IP Address. In IP Office Manager, select System in the left panel. Double-click on the only entry in the right panel. Select the System tab. Enter the IP Address of the Avaya Voice Priority Processor in the AVPP IP Address field. The TFTP Server IP Address is configured for the Avaya 4600 IP telephones. Press the OK button. 5 of 38

6 2. Configure a user for the Avaya 3620 Wireless IP telephone. In IP Office Manager, select User in the left panel. In the right panel, right click and select the New option. Enter a unique Name and Extension number. Fill in the other values as needed, or retain the defaults. Press the OK button. 6 of 38

7 3. Complete the user. IP Office has the option of creating users that are not associated with physical extensions (i.e. telephones). This user is going to be associated with the Avaya 3620 Wireless IP telephone. The extension can be automatically created by when completing the user administration. Choose the Yes option for creating a new VoIP extension. 7 of 38

8 4. Configure the Real-Time Transport Protocol (RTP) ports. Follow this step when the firewall configuration will limit RTP traffic based on the RTP port. In IP Office Manager, select System in the left panel. Double-click on the only entry in the right panel. Select the Gatekeeper tab. Enter the Port Range (minimum) and Port Range (maximum) as shown below. This information will be used during the firewall configuration. See Step 2 in Section 6.2 for details. Click the OK button. 8 of 38

9 5. Save the settings to the Control Unit. In IP Office Manager, press the Disk Icon, or select File->Save. Select Immediately for the Reboot Mode and Press the OK button. 9 of 38

10 4. Configure Avaya Voice Priority Processor This section describes the Avaya Voice Priority Processor (AVPP) configuration. 1. Connect using a serial cable. Run a terminal emulator, such as HyperTerminal with settings of 9600Kb/s, 8 data bits, 1 stop bit and no parity. The following screen is displayed. NetLink SVP-II System Hostname: [slnk_00d07e], Address: System Status SVP-II Configuration Network Configuration Change Password Exit Enter=Select X=Exit Use Arrow Keys to Move Cursor 10 of 38

11 2. Configure the Avaya Voice Priority Processor s IP Address, Subnet Mask and Gateway. From the screen shown in Step 1, select Network Configuration and press Enter. Use the down arrow key to get to the IP Address field. Press Enter. Backspace over the current entry. Enter the Avaya Voice Priority Processor s IP Address. Press Enter. Press the down arrow key to get to the Subnet Mask field. Press Enter. Backspace over the current entry. Enter the Avaya Voice Priority Processor s Subnet Mask. Press the down arrow key to get to the Default Gateway field. Press Enter. Backspace over the current entry. Enter the Avaya Voice Priority Processor s Default Gateway, which is the IP Office IP Address. Press Esc. Network Configuration Hostname: [slnk_00d07e], Address: Ethernet Address (fixed): 00:90:7A:00:D0:7E IP Address: Hostname: slnk_00d07e Subnet Mask: Default Gateway: SVP-II TFTP Download Master: NONE Primary DNS Server: NONE Secondary DNS Server: NONE DNS Domain: NONE WINS Server: NONE Workgroup: WORKGROUP Syslog Server: NONE Maintenance Lock: N Enter=Change Esc=Exit Use Arrow Keys to Move Cursor 11 of 38

12 3. Configure SVP-II Mode. From the screen shown in Step 1, select SVP-II Configuration and press Enter. Use the down arrow key to get to the SVP-II Mode field. Press Enter. Press the Tab button to set the SVP-II Mode as shown below. Press Enter. Press the down arrow key to get to the Reset System field. Press Enter. Press the Tab button to set the value to Y when asked Are you sure? SVP-II Configuration Hostname: [slnk_00d07e], Address: Phones per Access Point: 5 SVP-II Mode: Netlink IP System Locked: N Maintenance Lock: N Reset System Enter=Change Esc=Exit Use Arrow Keys to Move Cursor 12 of 38

13 5. Configure Avaya 3620 IP Telephone via the Avaya Configuration Cradle This section describes the Avaya 3620 Wireless IP telephone administration via the Avaya configuration cradle. Configuration at the telephone is also possible and is described in item [3] in Section 10. In addition to the programming interface through the telephone, there is also a configuration cradle that can be used for programming the phone through a PC GUI interface. Follow the instructions in reference [5] to install the configuration cradle software. 1. Start the configuration cradle software. Connect a PC to the configuration cradle with its serial cable. Double-click the configuration cradle application, PhoneConfig.exe. 2. Read the current Phone Configuration. Place the 3620 in the configuration cradle. In the Configuration Cradle application, press the Read Phone button. 13 of 38

14 3. Update the Phone configuration. In the Editable settings column, modify the following fields: Field Value Call Server Extension User Extension number from Step 2 of Section 3 Call Server IP IP Office IP Address Static IP: Phone IP Unique IP Address on the IP Office subnet Static IP: Default Gateway IP Office IP Address TFTP IP Address AVPP IP Address IP Address of Avaya Voice Priority Processor, created in Step 2 of Section 4 ESSID Static Entry ESSID:Static Entry SSID from Step 5 in Section 6.1 Security WPA2-PSK WPA(2) Passphrase Passphrase from Step 3 in Section 6.1 Generate PSK from Passphrase and SSID Press this button WPA(2) Mode Passphrase The picture below shows the top half of the configuration cradle screen: 14 of 38

15 The picture below shows the bottom half of configuration cradle screen. 15 of 38

16 4. Save the Phone configuration. Press the right arrow button that is to the right of the Copy settings field. Press the Write Phone button. 16 of 38

17 6. WS5100 Wireless Switch Configuration This section describes the WS5100 Wireless Switch configuration, which consists of configuring the Wireless LAN (WLAN) and, if desired, the firewall WLAN Configuration Configuring the WLAN includes the following steps: 1. Creating a security policy that defines the encryption used 2. Creating a WLAN with a Service Set Identifier (SSID) 3. Assigning the security policy to the WLAN Configuration of the WS5100 Wireless Switch is done via a web browser. Open a browser with the IP Address of the WS5100 Wireless Switch. The picture below shows the startup screen. 17 of 38

18 1. Create a WLAN Security Policy. Select Create->Access Port->Security Policy. Enter the Security Policy Name and select the Encryption to be AES-CCMP. Press the Next button. 18 of 38

19 2. Select the Security Policy s Encryption. Check the Manually Pre-Shared Key box and press the Next button. 19 of 38

20 3. Set the Pre-Shared Key. Check the ASCII Passphrase button and enter the value in the text box. There must be a minimum of eight characters in the Passphrase. The Passphrase shown below is for demonstration purposes only. This value is the same one that is entered on the Avaya 3620 Wireless IP telephones in Step 3 of Section 5. Press the Next button. Press the Finish button. 20 of 38

21 4. Create a WLAN. Select Create->Access Port->WLAN. Enter the Name and press the Next button. 21 of 38

22 5. Configure the ESSID of the WLAN. Enter a unique ESSID. This ESSID is also entered in the telephone as described in Step 3 of Section 5. Enter the IP Address of the IP Office in the Default Route: field and enter the appropriate Subnet Mask in the Netmask: field. Press the Next button. 22 of 38

23 6. Configure the Security Policy of the WLAN. Check the Enable Security checkbox. Select the security policy created in Step 1 of this section as the Security policy. Complete the WLAN by pressing the Next button and then the Finish button. 23 of 38

24 7. Make the WLAN active. Select Modify->Access Port->Existing Policy. Select the default QIAPPolicy01 entry in the Policy list. Press the Edit button. 24 of 38

25 8. Apply the WLAN. Press the Next button. In the screen below, select all items in the Selected list and remove them with the << button. In the Available list, select the WLAN created in Step 4 and add it with the >> button. Press the Next button. 25 of 38

26 9. Configure the Bandwidth. Press the Next button until the bandwidth screen is reached. Press the AP300a, 300g, 200b, 4121, 4131 tab. Set the BandWidth to percentage to be used for voice. Press the Next button. Press Next through one screen and then press the Finish button. 26 of 38

27 6.2. Firewall Configuration This section describes the firewall configuration used during testing. The firewall configuration presented in this document limits data traffic to: 1. Real-Time Transport Protocol (RTP) packets between the Avaya 3620 Wireless IP telephones, Avaya IP Office and Avaya 4600 series IP telephones. 2. VoIP signaling between the Avaya Voice Priority Processor and the Avaya 3620 Wireless IP telephones. The source and destination IP Addresses in the IP packets generated from the Avaya 3620 Wireless IP telephones use the IP Address of the Avaya Voice Priority Processor. The WS5100 has the concept of Network Classifiers for IP traffic. These Classifiers are then grouped together in what is called a Network Policy, which can be assigned to a WLAN. The picture below shows the default network policy that is used in the configuration. To reach this screen, select Modify->Network->Classifier. The following are the steps used to modify the classifiers for the firewall. The complete firewall configuration is provided in each table. Those items in bold are what need to be modified from the default. 27 of 38

28 1. Configure the RTP Data Classifier. Select Modify->Network->Classifier. Select RTP Data in the Classifier list. Press the Edit button. 28 of 38

29 2. Modify the Match Criteria. Press the Next button to display the screen below. Press the Add button and add the items in bold in the table. The non-bolded items are part of the default classifier. Each item must be added separately. Press Next and then Finish to complete this Classifier. Match Criteria Source IP Address Dest IP Address Source Port Dest Port Protocol Dest Port Dest Port Source Port Source Port Value IP Office Subnet IP Office Subnet Port Range (minimum)-port Range (maximum) from Step 4 of Section 3 Port Range (minimum)-port Range (maximum) from Step 4 of Section 3 UDP 29 of 38

30 3. Configure the VoIP Call Setup In Classifier. From the screen shown in Step 1, select VoIP_Call_Setup_In in the Classifier list. Press the Edit button. Modify the Match Criteria. Press the Next button to display the screen below. Press the Add button and add the items in bold in the table. The non-bolded items are part of the default classifier. Each item must be added separately. Match Criteria Dest IP Address Dest Port Dest Port 1292 Dest Port 1288 Dest Port 1298 Protocol TCP Value Avaya Voice Priority Processor IP Address 4. Configure the VoIP Call Setup Out Classifier. Repeat Step 3 for the VoIP_Call_Setup_Out in the Classifier list. Press the Edit button. 30 of 38

31 Modify the Match Criteria. Press the Next button to display the screen below. Press the Add button and add the items in bold in the table. The non-bolded items are part of the default classifier. Each item must be added separately. Match Criteria Source IP Address Source Port Source Port 1292 Source Port 1288 Source Port 1298 Protocol TCP Value Avaya Voice Priority Processor IP Address 5. Configure the RAS In Classifier. Repeat Step 3 for the VoIP_RAS_In in the Classifier list. Press the Edit button. Modify the Match Criteria. Press the Add button and add the items in bold in the table. The non-bolded items are part of the default classifier. Each item must be added separately. Match Criteria Dest IP Address Dest Port 1719 Protocol UDP Value Avaya Voice Priority Processor IP Address 6. Configure the RAS Out Classifier. Repeat Step 3 for the VoIP_RAS_Out in the Classifier list. Press the Edit button. Modify the Match Criteria. Press the Next button. Press the Add button and add the items in bold in the table. The non-bolded items are part of the default classifier. Each item must be added separately. Match Criteria Source IP Address Source Port 1719 Protocol UDP Value Avaya Voice Priority Processor IP Address 7. Assign the Network Policy to the Access Port. Select Modify->Access Port->Existing Policy. Select the QIAPPolicy01 entry in the Policy list. Press the Edit button. Press Next to get to the fourth screen. Select NetVision_VoIP_Priority as the Network Policy. Press Next until the last screen is reached and then press Finish. 31 of 38

32 7. Testing The interoperability testing focused on verifying interoperability between the Avaya 3620 Phone, Avaya IP Office and the Symbol Technologies WS5100 Wireless Switch using the configuration shown in Figure General Test Approach Calls were placed from the Avaya 3620 telephones and Avaya 4620 IP Telephones. Talkpath was verified. The features listed in Section 1.1 were tested using the 3620 telephone. The testing used the firewall capability in the Symbol Technologies WS5100 Wireless Switch, but was not a test of the firewall Test Results All tests passed successfully. All products operated as expected. 8. Verification and Troubleshooting 8.1. Avaya IP Office Troubleshooting Troubleshooting can be done on the IP Office via the IP Office System Monitor application. Log into the IP Office Monitor PC and select Start Programs IP Office Monitor to launch the IP Office System Monitor application. Log into the application using the appropriate credentials. 32 of 38

33 Select Trace Options under the Filters Menu. Select the H.323 tab and configure as illustrated below. When the system is configured correctly, the following Registration messages are displayed in IP Office System Monitor for the Avaya 3620 Wireless IP telephone during registration. 33 of 38

34 mS PRN: QMC RESREC ffe ffe7a90c ff2ce260 ff2cea mS RasRx: v=iface=lan1, Src= :11188, Dst= :1719 tos=88 peb=0 RasMessage = gatekeeperrequest = { requestseqnum = 0x3 protocolidentifier = rasaddress = ipaddress = { ip = a8 (((. port = 0x2bb4 endpointtype = { mc = false undefinednode = false endpointalias = { 1 item(s) [0] = e164 = authenticationcapability = { 1 item(s) [0] = pwdsymenc algorithmoids = { 1 item(s) [0] = mS PRN: Recv: GatekeeperRequest a mS RasTx: v=src= :1719, Dst= :11188 tos=88 peb=0 RasMessage = gatekeeperconfirm = { requestseqnum = 0x3 protocolidentifier = gatekeeperidentifier = E A61A rasaddress = ipaddress = { ip = (((. port = 0x6b7 authenticationmode = pwdsymenc tokens = { 1 item(s) [0] = { tokenoid = 0.0 timestamp = 0x4422ce20 random = 0xfffe9b1 generalid = e DEFINITY algorithmoid = mS RasRx: v=iface=lan1, Src= :11188, Dst= :1719 tos=88 peb=0 RasMessage = registrationrequest = { requestseqnum = 0x2 protocolidentifier = nonstandarddata = { nonstandardidentifier = object = data = c 1c d a. 34 of 38

35 discoverycomplete = true callsignaladdress = { 1 item(s) [0] = ipaddress = { ip = a8 (((. port = 0x2bb5 rasaddress = { 1 item(s) [0] = ipaddress = { ip = a8 (((. port = 0x2bb4 terminaltype = { mc = false undefinednode = false terminalalias = { 1 item(s) [0] = e164 = endpointvendor = { vendor = { t35countrycode = 0xb5 t35extension = 0x0 manufacturercode = 0x4c54 productid = f f 6e 65 IP_Phone versionid = 31 2e cryptotokens = { 1 item(s) [0] = cryptoeppwdencr = { algorithmoid = params = { encrypteddata = c4 7c a ea 88 3a b1 fa b5 6e d4. Bx.d8r..:...n. 0a b b4 3f b3 0e b 00 b3..y(...?..a... keepalive = false NonStandardDataMessage = loginrequest = { forcelogin = false audiocapable = true callsigprotocol = h323annexl-p connectiontype = lan emergencycallhandling = emerextension macaddress = d a of 38

36 8.2. Avaya 3620 Phone Troubleshooting 3620 Display Message Explanation Actions No Net Found The 3620 cannot access the Wireless LAN. Verify that the SSID on the 3620 matches the administered SSID on the Symbol WS5100 Trying aaa.bbb.ccc.ddd This means that the 3620 cannot access the IP Office. The IP Address indicated by aaa.bbb.ccc.ddd is the IP Office IP Address. Authentication Error The Passkey does not match the one administered on the Symbol WS5100 Wireless Switch Symbol Technologies WS5100 Troubleshooting Wireless Switch. Check that the appropriate IP routes are administered in the Symbol WS 5100 Wireless Switch for WLAN. Verify that the Passkey has been entered correctly. View the status of the Access Ports and Mobil Units by selecting View->Chassis. This displays the number of Access Ports and Mobile Units (Wireless Endpoints) that are using the WS5100. When the Mobile Units are greater than zero (indicated on the right of the screen), the problem is not with the connection to the WS5100, but may be an issue with accessing the Avaya Voice Priority Processor or Avaya IP Office. 36 of 38

37 9. Conclusion These Application Notes show the steps in the configuration of the Avaya IP Office 406V2 and Avaya 3620 Wireless IP Telephones using Symbol Technologies WS5100 Wireless Switch and AP300 Access Port, using WiFi Protection Algorithm (WPA-2) encryption and the integrated firewall in the Symbol WS5100 Wireless Switch. 10. Additional References 1. Product documentation for Avaya IP Office may be found at: 2. Product documentation for the Avaya 3620Phone can be found at: under Wireless Telephone Solutions. 3. Application Notes for Infoblox DNSone in an Avaya Communication Manager Wireless IP Telephony Infrastructure can be found at: 4. Avaya Configuration Cradle Administrator s Guide for the 3600 Series Wireless IP Telephones can be found at: under Wireless Telephone Solutions. 5. Symbol Documentation can be found at: 37 of 38

38 Avaya and the Avaya Logo are trademarks of Avaya Inc. All trademarks identified by and are registered trademarks or trademarks, respectively, of Avaya Inc. All other trademarks are the property of their respective owners. The information provided in these Application Notes is subject to change without notice. The configurations, technical data, and recommendations provided in these Application Notes are believed to be accurate and dependable, but are presented without express or implied warranty. Users are responsible for their application of any products specified in these Application Notes. Please any questions or comments pertaining to these Application Notes along with the full title name and filename, located in the lower right corner, directly to the Avaya Solution & Interoperability Test Lab at 38 of 38