Avaya UNIStim Firmware Release 0604DBG Notice

Product Bulletin

Bulletin Number: P-2007-0153-Global-Rev3

Date: 17 October 2007

UNIStim Firmware Release 0604DBG for Phase II IP Phones (2001, 2002 & 2004), 0621C4J for IP Phone 2007, and 0623C4D, 0624C4D, 0625C4D and 0627C4D for IP Phone 1110, 1120E, 1140E and 1150E Respectively

EVISION HISTORY

Date Revision # Summary of Changes

28-JUNE-07 Original bulletin This is the original publication 30-JULY-07 Revision 1 Minor edits and updates 2-AUGUST-07 Revision 2 Remove support for CS1K prior to release 5.0 10-OCTOBER-07 Revision 3

New up-revision of IP Phone 11xx firmware to reinstate support for CS1K prior to release 5.0 and close PAA-2007-0208-Global

Introduction

Nortel* is pleased to announce the availability of a release of UNIStim firmware version 0604DBG for the Phase II IP Phone 2001, Phase II IP Phone 2002, and Phase II IP Phone

2004. Nortel is also pleased to announce the availability of a release of UNIStim firmware version 0621C4J for the IP Phone 2007. In addition, Nortel is pleased to announce the availability of releases of UNIStim firmware version 0623C4D, 624C4D, 0625C4D and 0627C4D for the IP Phone 1110, IP Phone 1120E, IP Phone 1140E and IP Phone 1150E respectively.

NOTE: The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads, for the IP Phone 1110, 1120E, 1140E and 1150E respectively, resolve an incompatibility discovered in the 0623C4B, 0624C4B, 0625C4B and 0627C4B firmware loads with Communication Server 1000 release 4.5 or earlier. The incompatibility was advertised in PAA-2007-0208-Global. With the up-revision of 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads the product advisory PAA-2007-0208-Global is closed.

Even though these firmware loads are being released with Communication Server 1000 release 5.0 to deliver enhancements to Nortel’s IP Telephony Solution, these firmware loads

Nortel Page 1 of 24

are also backward compatible with Communication Server 1000 release 4.5 and earlier, albeit without the enhancements. These firmware loads are being released with Communication Server 1000 release 4.5 and earlier to deliver quality improvements inherent in the new firmware that are also beneficial to the earlier releases of Communication Server

1000. These new firmware loads, in association with Communication Server 1000 release 5.0

deliver enhancements to Nortel’s IP Telephony Solution. These enhancements provide greater functionality. The enhancements include:

 Media encryption via Secure Real-time Transport Protocol (SRTP) using UNIStim

Keys (USK)

 Extended language support on selected IP Phones  More flexible network connectivity control  Additional backlight control timers on selected IP Phones

Enhancements

Media encryption via Secure Real-time Transport Protocol (SRTP) using UNIStim Keys (USK)

Ensuring privacy of conversations in VoIP networks is becoming an increasing priority for network administrators. Secure Real-time Transport Protocol (SRTP) [RFC 3711] is a standards based method to encrypt RTP media. SRTP specifies a protocol to provide confidentiality, authentication, and replay protection to RTP and RTCP traffic.

In association with Communication Server 1000 release 5.0, the 0604DBG, 0621C4J, 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads deliver media stream protection using SRTP.

SRTP provides a means by which two endpoints can engage in secure media exchanges. If Media Security is enabled on the Communication Server 1000 with IP Phones running

these latest versions of firmware, the phones will use SRTP to encrypt and authenticate the media stream. The IP Phone displays a security icon on the IP Phone’s screen to indicate that the leg of the call from the IP Phone to the first IP termination is secure.

The security icon is an outlined padlock symbol in the first position of the first line of the caller display.

On some phones, the message "encrypted" also appears.

Nortel Page 2 of 24

By default, Media Security is enabled on the Nortel Communication Server 1000 release

5.0. For more information about Media Security concepts and implementation in Communication Server 1000 Release 5.0, see Nortel Communication Server 1000 Security Management Fundamentals (NN43001-604).

Media Security delivered with Communication Server 1000 Release 5.0 exchanges security keys through UNIStim, using a secure channel. This implementation of SRTP using UNIStim Keys (USK) is different from the implementation of SRTP using PreShared Keys (PSK) that was first introduced into the IP Phone firmware 0604DAD for the Phase II IP Phone 2001, Phase II IP Phone 2002, and Phase II IP Phone 2004, firmware version 0621C3A for the IP Phone 2007, firmware 0624C23 and 0625C23 for the IP Phone 1120E and IP Phone 1140E respectively and firmware 0623C3C and 0627C3C for the IP Phone 1110 and IP Phone 1150E respectively

SRTP PSK was designed to provide encrypted media to deployments where the Call Servers do not yet (or will not) support the traditional SRTP key exchange infrastructure. It is also useful in situations where security requirements are less aggressive and the organization does not want to invest in the infrastructure required to support a traditional key exchange. But SRTP PSK has some limitations which are overcome with using the SRTP USK implementation. The benefits of SRTP USK over SRTP PSK include:

• Centralized provisioning. SRTP PSK can only be enabled manually by provisioning each IP Phone using the configuration menu

• The beginning of the call is encrypted. With SRTP PSK the first few seconds of the conversation will not be encrypted.

• All codecs and packet sizes are supported. With SRTP PSK certain choices of codec and packet size will not allow the media stream to be encrypted.

• IP Gateways are supported. With SRTP PSK secure calls are only supported between two Nortel IP Phones associated with the same Call Server or on two different Call Servers connected by an IP Trunk.

These new firmware loads offer both SRTP PSK and SRTP USK.

Nortel Page 3 of 24

The IP Phone displays a slightly different security icon on the IP Phone’s screen to indicate a secure call using SRTP PSK.

The security icon for SRTP PSK is a solid padlock symbol in the first position of the first line of the caller display.

For additional details on choosing SRTP USK over SRTP PSK, please refer to the Nortel

Communication Server 1000 Security Management Fundamentals NN43001-604

For more information about configuring SRTP PSK, versus SRTP USK please refer to Nortel Communication Server 1000 IP Phones Fundamentals (NN43001-368).

For more details on Nortel Communication Server 1000 release 5.0 please refer to Nortel Communication Server 1000 Release 5.0 Release Bulletin.

Extended Language Support

(Applies to IP Phone 2007, 1120E, 1140E and 1150E)

In association with Communication Server 1000 release 5.0, the 0621C4J, 0624C4D, 0625C4D and 0627C4D firmware loads deliver extended language support on the IP Phone 2007, 1120E, 1140E and 1150E respectively

These new firmware loads introduce new languages with complex fonts. The firmware provides the capability to interpret the text wishing to be displayed as UTF-8 encoding. This allows the call server to easily display multilingual text on the phone including Far East languages like Chinese and Korean.

The new languages now supported on the IP Phone 2007, 1120E, 1140E and 1150E include, Arabic, Chinese (both simplified and traditional), Greek, Hebrew, Japanese (Kanji) and Korean. These new language require graphical screens to render the fonts. Thus, the new languages are not available on the IP Phone 2001, 2002 and 2004.

Some of the new character sets are very large and require a substantial amount of memory. In order to more efficiently use memory for a majority of the sets that will not use these character sets, certain character sets are only installed on an as-needed basis. The phone can download the font files to its file system as needed via a configuration file. The necessary fonts can be loaded into the phone using an extension of the existing configuration files. The configuration file can be downloaded using TFTP at set boot time or via the Network Manager Configuration Download command.

Extended language support on the IP Phone 1110 was not ready in time for this release

Nortel Page 4 of 24

Once the fonts are downloaded, the set needs to know when to use which fonts. The configuration file is used to create this mapping. The mapping will persist until explicitly changed or until a font is removed. The set will validate the mappings (i.e. ensuring that the font file exists) on startup and whenever a mapping change occurs. If a font file is removed the set will revert to the default mappings.

Downloaded fonts have a version number to avoid unnecessary downloads and to facilitate upgrades.

The following languages are supported with appropriate downloaded fonts and font mappings

• Chinese Simplified

• Chinese Traditional

• Full Japanese (Kanji)

• Korean

The following languages have been added to the default language list and are supported without the need to downloaded fonts and font mappings

• Arabic

• Greek

• Hebrew (requires activation by the call server)

The complete list of languages supported on the IP Phone 2007, 1120E, 1140E and 1150E is:

• Arabic

• Chinese – simplified (requires font download)

• Chinese – traditional (requires font download)

• Czech

• Danish

• Dutch

• English

• Finnish

• French

• German

• Greek

• Hebrew (requires activation by the call server)

• Hungarian

• Italian

• Japanese – Katakana

• Japanese – Kanji (requires font download)

Nortel Page 5 of 24

• Korean (requires font download)

• Latvian

• Norwegian

• Polish

• Portuguese

• Russian

• Spanish

• Swedish

• Turkish

The IP phone and call server synchronize the language choice regardless of whether the language selection is made by the call server or locally at the phone. If the Call Server initiates a language change, the IP Phone changes its local prompts to match the specified language on the Call Server. If the IP Phone user initiates a language change using the Local Tools menu, the Call Server changes its local prompts to match the specified language on the IP Phone. If the Call Server selects a language which the IP Phone does not support, the local prompts default to English.

For information about downloading and configuring fonts see Nortel Communication Server 1000 IP Phones Fundamentals (NN43001-368).

The font files are available on www.nortel.com/support Downloads link. The file “ASIAN FONT FILES (C4X FIRMWARE COMPATIBLE

ONLY - EXCEPT IP PHONE 1110)” is compressed file of all the downloadable fonts as

well as example TFTP configuration files for each of the IP Phone models.

Special Note:

0621C3N or earlier requires a 2 step process since the configuration file format has changed to support the new font downloads.

1. One must first upgrade the IP Phone 2007 firmware to 0621C4J using TFPT with the former configuration files (“BasicConfig” folder) – or upgrade the firmware from the call server.

2. Once the IP Phone 2007 is running the new 0621C4J firmware one must update the TFTP server to the new configuration files (“AsianConfig” folder) to download the Asian font files.

Adding Asian languages to an IP Phone 2007 that has firmware version

web site under the Software

Nortel Page 6 of 24

More flexible network connectivity control

The 0604DBG, 0621C4J, 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads introduce greater low level network control available through the phones configuration menus. The greater control includes:

1) Allowing 802.1q extended frame format to be disabled permitting the phone to

connect to network infrastructure that does not support the 802.1Q extended frame format. As well, the new firmware allows for the provisioning of the 802.1Q priority settings for the voice traffic, both control and bearer, and the data traffic from the PC port.

The configuration menu has been expanded to include the additional content. The following new menu items have been added to the configuration menu:

Disable Voice 802.1Q: [] Ctrl Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7] Media Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

Disable Data 802.1Q: [] Data Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

2) allowing the link speed and the duplex mode on the IP phones to be provisioned

independently for both the network port and the PC port

The configuration menu has been expanded to include the additional content. The following new menu items have been added to the configuration menu:

Ntwk Port Speed: [Auto, 10BT, 100BT] Ntwk Port Duplex: [Auto, Force Full, Force Half]

PC Port Speed: [Auto, 10BT, 100BT] PC Port Duplex: [Auto, Force Full, Force Half]

The PC Port menu items are not available on the IP Phone 2001 since this phone does not have a PC port.

Additional Timer Values Added to Backlight Control

(Applies to IP Phone 2007, 1110,

1120E, 1140E and 1150E)

The 0621C4J, 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads deliver two new backlight timer durations on the IP Phone 2007, 1110, 1120E, 1140E and 1150E respectively.

Nortel Page 7 of 24

The Contrast and Brightness Tools are used to alter the physical settings of the display. The Backlight setting determines the time before the display sleeps (goes black) or dims.

Two new short duration intervals of 5 seconds and 1 minute have been added to the existing duration choices.

Because of the addition of the two new intervals, a previously selected preference may be adjusted when the new firmware is loaded onto the phone. This one time adjustment can be reset by entering the Contrast and Brightness Tools and selecting a new preference. Once the new preference is selected the selection will be persistent across future resets and upgrades.

Quality Improvements

The 0604DBG, 0621C4J, 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads also continue to improve the overall quality of the Phase II IP Phones (2001, 2002, 2004), IP Phone 2007 and Next Generation IP Phones (1110, 1120E, 1140E and 1150E) through the delivery of ongoing resolution of CRs and closed cases. In total, approximately 70 resolved issues have been closed, and 14 customer cases have been closed in these new firmware loads since the last suite of GA firmware loads. The list of resolved critical issues and the list of closed cases since the last suite of generally available (GA) firmware loads are listed below.

The 0604DBG, 0621C4J, 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware releases fix many minor issues and the following critical issues since the last suite of GA firmware loads:

Slight chance firmware C4B may become unresponsive when attached to CS1K 4.00 and 4.50 Slight chance that IP Phone’s internal switch may become unresponsive IP Phone may sometimes go offline and not recover Remote chance that DHCP may suspend Slight chance that IP Phone may lock on Active Call Difficulty connecting to server if network cable unplugged and then restored Errors sometimes occurring during DHCP option handling IP Phone sometimes not re-registering after server maintenance Difficulty downloading firmware if link speed set to 100BT Full Duplex Sound quality may be impaired after network disruption IP Phone may not respond to Zone Pages Issues with EAP if Password or Device ID are input incorrectly In "Enter Admin. Password" menu, using an USB mouse may freeze the phone

Nortel Page 8 of 24

+ 16 hidden pages