VPN

I have found only one thread even mentioning Avaya or a IP VPN phone....  I have used successfully Monowall for the SCN use, but would like to add individual IP VPN pnones (4620SW) to a 412 Avaya switch running 4.2.11.   Has anyone seen any info on converting the settings for other FW supported by Avaya for the MW?  I see only one short post in 2007...Any ideas would be great!

Thanks

Adding to my original post; I translated the requirements into M0n0wall - For those who may be using M0n0wall and Avaya IP Office and want to expand the use of IP VPN Remote 4620sw or other phones assigned to an IPO PBX .  It works!  I have built and tested the solution using the 1.2 rev and IPSec mobile client.  I am available for questions pertaining to Avaya IPOffice and M0n0wall.

Building networks on M0n0wall since 2003

I don't understand what you needed to do.  My 4621 phone works fine though a site-to-site VPN on my m0n0wall box to the Corporate Avaya 8720.  'Nuthin special.

Is this something specific for IP Office?

Are you using the new internal IP phone VPN features of which you do not have a hardware firewall at your end of the tunnel?

Well as the M0n0wall is not a supported FW for Avaya, and the newer software revs allow a IP phone to direct connect to an IP Office switch "without" specific site to site hardware VPN tunneling protocol, but with internal software inside the phone. I wanted to see how well this FW supports the connection and voice traffic for a stand alone IP phone connecting directly to the firewall at a site with IPO directly without the use of a hardware vpn router as in the past at the other end.  We a project of which we want to deploy numerous stand alone IP phones connecting back and was looking for any information on stability of multiple "mobile users" connecting there ip phones in this stand alone configuration before deploying in a customers installation.

Currently we are finding that possibly some audio traffic as in hunt group and the ability to hear all voicemail or auto attendant prompts may not be passing.  We are checking to see if it is based on Internet connections or the traffic passing through the FW.

On a side note as well we are testing these phones over commercial satellite with 690ms of delay over the use of a small community phone network and getting great test results.

Another Avaya unsupported area of direction for our company...


Thanks for the input

Just doing our do diligence on collecting data and testing before going to market on a supported solution...

Ah, I see what you mean - making m0n0wall the headend VPN device to connect to.  We do have several VPN enabled 46xx phones in the company.

Yah, we use a Cisco 3000 concentrator for that since it was one of the supported devices.  'Cool to know you got it working on m0n0 though! 

Are you using the new internal IP phone VPN features of which you do not have a hardware firewall at your end of the tunnel?

Well as the M0n0wall is not a supported FW for Avaya, and the newer software revs allow a IP phone to direct connect to an IP Office switch "without" specific site to site hardware VPN tunneling protocol, but with internal software inside the phone. I wanted to see how well this FW supports the connection and voice traffic for a stand alone IP phone connecting directly to the firewall at a site with IPO directly without the use of a hardware vpn router as in the past at the other end.  We a project of which we want to deploy numerous stand alone IP phones connecting back and was looking for any information on stability of multiple "mobile users" connecting there ip phones in this stand alone configuration before deploying in a customers installation.

Currently we are finding that possibly some audio traffic as in hunt group and the ability to hear all voicemail or auto attendant prompts may not be passing.  We are checking to see if it is based on Internet connections or the traffic passing through the FW.

On a side note as well we are testing these phones over commercial satellite with 690ms of delay over the use of a small community phone network and getting great test results.

Another Avaya unsupported area of direction for our company...


Thanks for the input

Just doing our do diligence on collecting data and testing before going to market on a supported solution...

Yeah, the newer software revs allow a IP phone to direct connect to an IP Office switch "without" specific site to site hardware VPN tunneling protocol, but with internal software inside the phone... IP Phone can directly connect to an IP Office switch without the specific site to site HVPNTP....




__________________
My blog

Correct! which in "Black Box Theory" can be challenging to ensure properly supported routes on an unsupported product line, but we all would not be here if we all worked between the lines!

We have some road warriors out connecting 4620sw IP phone sets with the vpn clients installed from different locations both public and private / cable, dsl and commercial Satellite.

Initial testing looks to be promising, even from a commercial satellite utilizing a m0n0wall FW 690ms delay on a burstable 1.5mb x 3.5mb commercial bandwidth package- the phone powers up and pass traffic directly from the subnet without any changes at the remote end.  The centralized m0n0wall seems to be passing the traffic back through it to a central Avaya ip office phone switch (the vpn phone assigned office)  In fact I believe the voice quality is almost better on the satellite than on some the dsl and cable grade testing locations....