Avaya UNIStim Firmware Release 0623C4D, UNIStim Firmware Release 0624C4D Notice

Product Bulletin

Bulletin Number: P-2007-0258-Global

Date: 17 October 2007

UNIStim Firmware Release 0623C4D, 0624C4D, 0625C4D
and 0627C4D for IP Phone 1110, 1120E, 1140E and 1150E
Respectively

R

EVISION HISTORY

Date Revision # Summary of Changes

9-OCTOBER-07 Original bulletin

New up-revision of IP Phone 11xx firmware to
reinstate support for CS1K prior to release 5.0
and close PAA-2007-0208-Global

Introduction

Nortel* is pleased to announce the availability of releases of UNIStim firmware version
0623C4D, 624C4D, 0625C4D and 0627C4D for the IP Phone 1110, IP Phone 1120E, IP
Phone 1140E and IP Phone 1150E respectively.

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads resolve an incompatibility
discovered in the 0623C4B, 0624C4B, 0625C4B and 0627C4B firmware loads with
Communication Server 1000 release 4.5 or earlier. The incompatibility was advertised in
PAA-2007-0208-Global. With the release of 0623C4D, 0624C4D, 0625C4D and 0627C4D
firmware loads the product advisory PAA-2007-0208-Global is closed.

Even though PAA-2007-0208-Global highlights an incompatibility between the previous
firmware loads and Communication Server 1000 release 4.5 or earlier, UNIStim firmware
versions 0623C4D, 624C4D, 0625C4D and 0627C4D are being released for
Communication Server 1000 release 5.0 as well. UNIStim firmware loads 0623C4D,
624C4D, 0625C4D and 0627C4D deliver quality improvements beneficial to Communication
Server 1000 release 5.0

Nortel Page 1 of 21

These new firmware loads, when used in association with Communication Server 1000
release 5.0, deliver enhancements to Nortel’s IP Telephony Solution. These enhancements
provide greater functionality. The enhancements include:

 Media encryption via Secure Real-time Transport Protocol (SRTP) using UNIStim

Keys (USK)

 Extended language support
 More flexible network connectivity control
 Additional backlight control timers

Enhancements

Media encryption via Secure Real-time Transport Protocol (SRTP) using UNIStim Keys
(USK)

Ensuring privacy of conversations in VoIP networks is becoming an increasing priority for
network administrators. Secure Real-time Transport Protocol (SRTP) [RFC 3711] is a
standards based method to encrypt RTP media. SRTP specifies a protocol to provide
confidentiality, authentication, and replay protection to RTP and RTCP traffic.

In association with Communication Server 1000 release 5.0, the 0623C4D, 0624C4D,
0625C4D and 0627C4D firmware loads deliver media stream protection using SRTP.

SRTP provides a means by which two endpoints can engage in secure media exchanges.
If Media Security is enabled on the Communication Server 1000 with IP Phones running

these latest versions of firmware, the phones will use SRTP to encrypt and authenticate the
media stream. The IP Phone displays a security icon on the IP Phone’s screen to indicate
that the leg of the call from the IP Phone to the first IP termination is secure.

The security icon is an outlined padlock symbol in the first position of the first line of the
caller display.

On some phones, the message "encrypted" also appears.
By default, Media Security is enabled on the Nortel Communication Server 1000 release

5.0. For more information about Media Security concepts and implementation in
Communication Server 1000 Release 5.0, see Nortel Communication Server 1000 Security
Management Fundamentals (NN43001-604).

Nortel Page 2 of 21

Media Security delivered with Communication Server 1000 Release 5.0 exchanges security
keys through UNIStim, using a secure channel. This implementation of SRTP using UNIStim
Keys (USK) is different from the implementation of SRTP using PreShared Keys (PSK) that
was first introduced into the IP Phone firmware 0624C23 and 0625C23 for the IP Phone
1120E and IP Phone 1140E respectively and firmware 0623C3C and 0627C3C for the IP
Phone 1110 and IP Phone 1150E respectively

SRTP PSK was designed to provide encrypted media to deployments where the Call
Servers do not yet (or will not) support the traditional SRTP key exchange infrastructure. It is
also useful in situations where security requirements are less aggressive and the
organization does not want to invest in the infrastructure required to support a traditional key
exchange. But SRTP PSK has some limitations which are overcome with using the SRTP
USK implementation. The benefits of SRTP USK over SRTP PSK include:

• Centralized provisioning. SRTP PSK can only be enabled manually by provisioning
each IP Phone using the configuration menu

• The beginning of the call is encrypted. With SRTP PSK the first few seconds of the
conversation will not be encrypted.

• All codecs and packet sizes are supported. With SRTP PSK certain choices of codec
and packet size will not allow the media stream to be encrypted.

• IP Gateways are supported. With SRTP PSK secure calls are only supported
between two Nortel IP Phones associated with the same Call Server or on two
different Call Servers connected by an IP Trunk.

These new firmware loads offer both SRTP PSK and SRTP USK.
The IP Phone displays a slightly different security icon on the IP Phone’s screen to indicate

a secure call using SRTP PSK.
The security icon for SRTP PSK is a solid padlock symbol in the first position of the first line

of the caller display.

For additional details on choosing SRTP USK over SRTP PSK, please refer to the Nortel

Communication Server 1000 Security Management Fundamentals NN43001-604

For more information about configuring SRTP PSK, versus SRTP USK please refer to Nortel
Communication Server 1000 IP Phones Fundamentals (NN43001-368).

For more details on Nortel Communication Server 1000 release 5.0 please refer to Nortel
Communication Server 1000 Release 5.0 Release Bulletin.

Nortel Page 3 of 21

Extended Language Support (Applies to IP Phone 1120E, 1140E and 1150E)1

In association with Communication Server 1000 release 5.0, the 0624C4D, 0625C4D and
0627C4D firmware loads deliver extended language support on the 1120E, 1140E and
1150E respectively

These new firmware loads introduce new languages with complex fonts. The firmware
provides the capability to interpret the text wishing to be displayed as UTF-8 encoding. This
allows the call server to easily display multilingual text on the phone including Far East
languages like Chinese and Korean.

The new languages now supported on the 1120E, 1140E and 1150E include, Arabic,
Chinese (both simplified and traditional), Greek, Hebrew, Japanese (Kanji) and Korean.
These new language require graphical screens to render the fonts.

Some of the new character sets are very large and require a substantial amount of memory.
In order to more efficiently use memory for a majority of the sets that will not use these
character sets, certain character sets are only installed on an as-needed basis. The phone
can download the font files to its file system as needed via a configuration file. The
necessary fonts can be loaded into the phone using an extension of the existing
configuration files. The configuration file can be downloaded using TFTP at set boot time or
via the Network Manager Configuration Download command.

Once the fonts are downloaded, the set needs to know when to use which fonts. The
configuration file is used to create this mapping. The mapping will persist until explicitly
changed or until a font is removed. The set will validate the mappings (i.e. ensuring that the
font file exists) on startup and whenever a mapping change occurs. If a font file is removed
the set will revert to the default mappings.

Downloaded fonts have a version number to avoid unnecessary downloads and to facilitate
upgrades.

The following languages are supported with appropriate downloaded fonts and font
mappings

• Chinese Simplified

• Chinese Traditional

• Full Japanese (Kanji)

• Korean

1

Extended language support on the IP Phone 1110 was not ready in time for this release

Nortel Page 4 of 21

The following languages have been added to the default language list and are supported
without the need to downloaded fonts and font mappings

• Arabic

• Greek

• Hebrew (requires activation by the call server)

The complete list of languages supported on the 1120E, 1140E and 1150E is:

• Arabic

• Chinese – simplified (requires font download)

• Chinese – traditional (requires font download)

• Czech

• Danish

• Dutch

• English

• Finnish

• French

• German

• Greek

• Hebrew (requires activation by the call server)

• Hungarian

• Italian

• Japanese – Katakana

• Japanese – Kanji (requires font download)

• Korean (requires font download)

• Latvian

• Norwegian

• Polish

• Portuguese

• Russian

• Spanish

• Swedish

• Turkish

The IP phone and call server synchronize the language choice regardless of whether the
language selection is made by the call server or locally at the phone. If the Call Server
initiates a language change, the IP Phone changes its local prompts to match the specified
language on the Call Server. If the IP Phone user initiates a language change using the
Local Tools menu, the Call Server changes its local prompts to match the specified
language on the IP Phone. If the Call Server selects a language which the IP Phone does
not support, the local prompts default to English.

Nortel Page 5 of 21

For information about downloading and configuring fonts see Nortel Communication Server
1000 IP Phones Fundamentals (NN43001-368).

The font files are available on www.nortel.com/support

web site under the Software
Downloads link. The file “ASIAN FONT FILES (C4X FIRMWARE COMPATIBLE

ONLY - EXCEPT IP PHONE 1110)” is compressed file of all the downloadable fonts as

well as example TFTP configuration files for each of the IP Phone models.

More flexible network connectivity control

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads provide greater low level
network control available through the phones configuration menus. The greater control
includes:

1) Allowing 802.1q extended frame format to be disabled permitting the phone to
connect to network infrastructure that does not support the 802.1Q extended
frame format. As well, the new firmware allows for the provisioning of the 802.1Q
priority settings for the voice traffic, both control and bearer, and the data traffic
from the PC port.

The configuration menu has been expanded to include the additional content. The
following new menu items have been added to the configuration menu:

Disable Voice 802.1Q: []
Ctrl Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]
Media Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

Disable Data 802.1Q: []
Data Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

2) allowing the link speed and the duplex mode on the IP phones to be provisioned
independently for both the network port and the PC port

The configuration menu has been expanded to include the additional content. The
following new menu items have been added to the configuration menu:

Ntwk Port Speed: [Auto, 10BT, 100BT]
Ntwk Port Duplex: [Auto, Force Full, Force Half]

PC Port Speed: [Auto, 10BT, 100BT]
PC Port Duplex: [Auto, Force Full, Force Half]

Nortel Page 6 of 21

Additional Timer Values Added to Backlight Control (Applies to IP Phone 1110, 1120E,

1140E and 1150E)

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads deliver two new backlight
timer durations on the IP Phone 1110, 1120E, 1140E and 1150E respectively.

The Contrast and Brightness Tools are used to alter the physical settings of the display. The
Backlight setting determines the time before the display sleeps (goes black) or dims.

Two new short duration intervals of 5 seconds and 1 minute have been added to the existing
duration choices.

Because of the addition of the two new intervals, a previously selected preference may be
adjusted when the new firmware is loaded onto the phone. This one time adjustment can be
reset by entering the Contrast and Brightness Tools and selecting a new preference. Once
the new preference is selected the selection will be persistent across future resets and
upgrades.

Quality Improvements

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads resolve an incompatibility
discovered in the 0623C4B, 0624C4B, 0625C4B and 0627C4B firmware loads with
Communication Server 1000 release 4.5 or earlier. The incompatibility was advertised in
PAA-2007-0208-Global. With the release of 0623C4D, 0624C4D, 0625C4D and 0627C4D
firmware loads the product advisory PAA-2007-0208-Global is closed.

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads continue to improve the
overall quality of the Next Generation IP Phones (1110, 1120E, 1140E and 1150E) through
the delivery of ongoing resolution of CRs. The list of resolved critical issues since the
0623C4B, 0624C4B, 0625C4B and 0627C4B firmware loads are listed below.

Slight chance firmware C4B may become unresponsive when attached to CS1K 4.00 and 4.50
Slight chance that IP Phone’s internal switch may become unresponsive
IP Phone may sometimes go offline and not recover

Product Advisements

2-Step Upgrade May Be Required (Applies to IP Phone 1120E and 1140E)

One important note when upgrading the IP Phone 1120E to 0624C4D or the IP Phone
1140E to 0625C4D from any load previous to 0624C1B or 0625C1B respectively is that a 2­step upgrade will be required. The IP Phone 1120E and 1140E cannot be upgraded directly
to the newly released firmware if they are currently running firmware previous to 0624C1B
and 0625C1B respectively. Instead, the phones must first be upgraded to 0624C1B and
0625C1B or newer (recommend 0624C3C and 0625C3C). Once the phones are running at

Nortel Page 7 of 21

least 0624C1B and 0625C1B firmware, they will accept being upgraded to 0624C4D and
0625C4D respectively.

Running SRTP PSK with Communication Server Release 5.0 requires a Patch
(Applies to IP Phone 1110, 1120E, 1140E, 1150E)

In association with Communication Server 1000 release 5.0, the 0623C4D, 0624C4D,
0625C4D and 0627C4D firmware loads deliver media stream protection using SRTP
UNIStim Keys (USK). However, as stated above, running SRTP using PreShared Keys
(PSK) is still a valid option in the IP Phones. But, if one wishes to run SRTP PSK with
Communication Server Release 5.0 patch MPLR23760 is required on the Communication
Server 1000 Release 5.0. The Communication Server 1000 patch is located in the Meridian
PEP library at the www.nortel.com/support

web site.

Current release of SRTP PSK is not backward compatible with older version of
SRTP PSK (Applies to IP Phone 1110, 1120E, 1140E, 1150E)

As stated above, running SRTP using PreShared Keys (PSK) is still a valid option in the IP
Phones. But one important note when upgrading the IP Phones to the current releases of
firmware is to realize that the current releases of SRTP PSK is not compatible with older
versions of SRTP PSK. The minimum firmware releases for which the current release of
SRTP PSK is backward compatible is firmware version 0623C3F, 0624C3F, 0625C3F and
0627C3F for the IP Phone 1110, 1120E, 1140E and IP Phone 1150E respectively.

Network Loop (Applies to IP Phone 1120E, 1140E)

These firmware releases include a fix to help prevent network loop scenarios from being
introduced into the network, and the resultant network outages that can occur. The network
loop avoidance fix was first introduced in 0624C1E and 0625C1E. One important note when
upgrading to 0624C4D or 0625C4D from any load previous to 0624C1E or 0625C1E
respectively, is that IP Phones that were inadvertently mis-wired during initial installation will
not be allowed to work until the cabling problem is corrected. This fix is only an issue if the
installer, when installing the Nortel IP Phone 1120E or 1140E, inadvertently connected the
network Ethernet cable to the PC Ethernet port on the back of the phone, instead of
connecting it to the network Ethernet port on the back of the phone. IP Phone 1120E and
1140E running firmware previous to 0624C1C and 0625C1C respectively will work when
incorrectly connected, but this does introduce the potential for network degradation. These
new firmware loads will try and safe guard the network by trying to prevent phones that are
mis-cabled to function. This means that the IP Phones that are working on a previous

release of firmware may stop working if they are not correctly wired.

But realize that a mis-cabled phone may still work, even with the new firmware. If the
network infrastructure supports Auto MDIX, network loop can still occur if the network is not
running the Spanning Tree Protocol (STP) or a similar loop avoidance protocol.

Nortel Page 8 of 21

As a preventative measure to reduce the potential for network degradation, and to prevent
mis-cabled phones from ceasing to work when their firmware is upgraded, please consider
taking the necessary steps to ensure your Nortel IP phones network cables are plugged into
the correct ports on the back of the phone – network cable into the network Ethernet port,
and the PC Ethernet cable (if connecting a PC) to the PC Ethernet port (little computer icon)
on the back of the phone.

Correction to VLAN Access Process (Applies to IP Phone 1120E, 1140E) – may
impact current network configurations

The 0624C4D and 0625C4D firmware releases continue to support the changes to the
VLAN Access Process that were first introduced in 0624C1E and 0625C1E firmware.

When upgrading to 0624C4D or 0625C4D from any load previous to 0624C1E or 0625C1E
respectively, the corrections to the VLAN access process, might impact current customer
network configurations, especially if something special was done to compensate for the
former operation of the phone.

1) Voice VLAN enabled with the Automatic VLAN Discovery feature – initial DHCP request is
forwarded based on the Data VLAN policy (i.e. untagged if Data VLAN is disabled or tagged
with the Data VLAN ID if Data VLAN is enabled). Subsequent DHCP requests and the
resolution of a Voice VLAN will be as per existing automatic operation.

The potential impact of this change to an installed customer network is:

 If they have a Data VLAN configured
 they have the auto configure VLAN feature enabled, and
 they DO NOT have their DHCP server on the Data VLAN

then the phone running these new firmware images will not register to the call server.
Customers should check that the DHCP server is on the Data VLAN if they've configured a
Data VLAN on their phones.

2) Stripping of egress Data VLAN tag is configurable – VLAN tag stripping can be enabled
or disabled in addition to enabling VLAN support on the phone’s PC port. If VLAN is enabled
on the phone’s PC port (ingress direction), the default will be to strip the tag on the egress
direction. However, this can be manually overridden to disable stripping even if VLAN
tagging (ingress direction) is enabled on the phone’s PC port. Likewise if VLAN is disabled
on the phone’s PC port, the default will be to NOT to strip the tag on the egress direction.
But this again can be overridden to enable stripping even if VLAN is disabled on the phone’s
PC port (ingress direction).

on the phone, and

Nortel Page 9 of 21

If stripping is disabled, the packet is sent to the phone’s PC port unmodified. If stripping is
enabled, the 802.1q header is removed (assuming one exists) from the packet before
forwarding it out the phone’s PC port

Important Note: While these changes corrects the VLAN access process, the change
might impact current customer network configurations, especially if something special was
done to handle the prior operation of the phone.

For more information on VLAN support in the IP Phones, please refer to the IP Phones
Description, Installation and Operation Document, NTP 553-3001-368.

One way speech path behind NAT Routers (Applies to IP Phone 1120E, 1140E,
1150E)

A problem exists that with some NAT routers that causes one way speech path. This
problem is addressed by the application of patch MPLR21030 on the Communication Server
1000 Release 4.5 and 4.0. (Note: IP Phone usage behind NAT routers is not supported with
Communication Server 1000 Release 3.0). The Communication Server 1000 patch is
located in the Meridian PEP library at the www.nortel.com/support

web site.

Outstanding Known Issues

Although the 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware releases greatly
improve the overall quality of the IP Phones, these firmware releases still include some
outstanding known issues:

IP Phone may not automatically re-register to Communication Server 1000 signaling
server if the network connection to the signaling server is unavailable for an
extended period of time (IP Phone 1110, 1120E, 1140E and 1150E)

If the network connection to the Communication Server 1000 signaling server is unavailable
for an extended period of time (greater than an hour), the slight chance exists that the IP
Phone will not automatically re-register once the network connection is re-established. Local
resetting of the IP Phone will be required to enable the phone to register to the signaling
server.

Backlight Interaction with USB devices (1120E, 1140E and 1150E)

Some USB devices (i.e. Mice or Keyboards) send regular coordinate update messages to
the phone even when the device is not being used. This can cause the sleep mode for the
backlight to not be properly invoked.

Nortel Page 10 of 21

Contrast Adjustments: Local & TPS contrast adjustments are not synchronized (IP
Phone 1110, 1120E, 1140E and 1150E)

The IP Phone 1110, 1120E, 1140E and 1150E graphical display contrast control can be
adjusted either locally (on the phone) or through the call server (TPS) control. The
Communication Server 1000 TPS does not yet synchronize its contrast setting with the local
control. This means if the local control is used exclusively, then whenever the phone has a
power cycle, the TPS contrast setting is restored and the user may need to adjust contrast
again.

The local contrast control on the IP Phone 1110, 1120E, 1140E and 1150E is accessed by a
“double press”
in the menu. The TPS contrast control is accessed with a “single press
then selecting “Telephone Options”, then “Contrast Adjustment”.

of the Services key and selecting “1. Preferences”, then “1. Display Settings”

” of the Services key,

Nortel Page 11 of 21

IP Phone Compatibility

These firmware releases are compatible with the following IP Phones:
PEC Description Firmware file

NTYS02AAE6 IP Phone 1110 Graphite with Icon keycaps
NTYS02BAE6 IP Phone 1110 Graphite with English keycaps
NTYS03AA IP Phone 1120E Graphite with Icon Keycaps –

Manufacture Discontinued

NTYS03BA IP Phone 1120E Graphite with English keycaps

– Manufacture Discontinued

NTYS03AC IP Phone 1120E Graphite with Icon Keycaps
NTYS03BC IP Phone 1120E Graphite with English keycaps
NTYS03ABE6 IP Phone 1120E Graphite with Icon Keycaps

(RoHS) – Manufacture Discontinued

NTYS03BBE6 IP Phone 1120E Graphite with English Keycaps

(RoHS) – Manufacture Discontinued

NTYS03BBGSE6 IP Phone 1120E GSA (RoHS) – Manufacture

Discontinued

NTYS03ACE6 IP Phone 1120E Graphite with Icon Keycaps

(RoHS)

NTYS03BCE6 IP Phone 1120E Graphite with English keycaps

(RoHS)

NTYS03BCGSE6 IP Phone 1120E GSA (RoHS)
NTYS05AA IP Phone 1140E Graphite with Icon Keycaps –

Manufacture Discontinued

NTYS05BA IP Phone 1140E Graphite with English keycaps

– Manufacture Discontinued
NTYS05AC IP Phone 1140E Graphite with Icon Keycaps 0625C4D.bin
NTYS05BC IP Phone 1140E Graphite with English keycaps 0625C4D.bin
NTYS05ABE6 IP Phone 1140E Graphite with Icon Keycaps

(RoHS) – Manufacture Discontinued
NTYS05BBE6 IP Phone 1140E Graphite with English Keycaps

(RoHS) – Manufacture Discontinued
NTYS05BBGSE6 IP Phone 1140E GSA (RoHS) – Manufacture

Discontinued
NTYS05ACE6 IP Phone 1140E Graphite with Icon Keycaps

(RoHS)
NTYS05BCE6 IP Phone 1140E Graphite with English Keycaps

(RoHS)
NTYS05BCGSE6 IP Phone 1140E GSA (RoHS) 0625C4D.bin

0623C4D.bin
0623C4D.bin
0624C4D.bin

0624C4D.bin
0624C4D.bin

0624C4D.bin
0624C4D.bin

0624C4D.bin
0624C4D.bin
0624C4D.bin
0624C4D.bin
0624C4D.bin

0625C4D.bin
0625C4D.bin

0625C4D.bin
0625C4D.bin
0625C4D.bin
0625C4D.bin
0625C4D.bin

Nortel Page 12 of 21

NTYS06AAE6 IP Phone 1150E Graphite with Icon Keycaps

0627C4D.bin

(RoHS)
NTYS06BAE6 IP Phone 1150E Graphite with English Keycaps

0627C4D.bin

(RoHS)

IP Phone 2004 (NTEX00), Phase 1 IP Phone 2002 (NTDU76), and Phase 1 IP Phone 2004
(NTDU82) cannot load these releases.

Call Server Compatibility and Requirements

These firmware releases are compatible with the below Nortel Call Servers. Note that in
order to utilize the SRTP USK and the extended language support available in the firmware
the IP Phones must be on system running Communication Server 1000 release 5.0

Call Server Notes / Advisements
CS 1000 5.00W

- IP Line 5.00.31

- SS 5.00.31

CS 1000 4.5

- X21 4.50W

- IP Line 4.50.88 or later

- SS 4.50.88 or later

CS 1000 4.0

- X21 4.00T

- IP Line 4.00.55 or later

- SS 4.00.55 or later

CS1000 3.0

- X21 3.00

- IP Line 3.10.81 or later

- SS 2.11.03 or later

Nortel recommends an upgrade to these firmware releases at the earliest
opportunity.

Nortel recommends an upgrade to these firmware releases at the earliest
opportunity.

Nortel recommends an upgrade to these firmware releases at the earliest
opportunity.

For IP Phone 1110, 1120E and 1140E a Trivial File Transfer Protocol
(TFTP) Server is required to distribute firmware to IP Phones. The TFTP
Upgrade menu on the IP Phone is used to upgrade the firmware.

The IP Phone 1150E is not supported on this platform.

Nortel recommends an upgrade to these firmware releases at the earliest
opportunity.

For IP Phone 1120E and 1140E a Trivial File Transfer Protocol (TFTP)
Server is required to distribute firmware to IP Phones. The TFTP Upgrade
menu on the IP Phone is used to upgrade the firmware.

The IP Phone 1110 and 1150E are not supported on this platform.

Nortel Page 13 of 21

SRG 200/400 1.0
(BCM 3.7 based)

SRG 200/400 1.5
(BCM 4.0 based)

It is mandatory that SRG 1.0 customers upgrade to SRG200/400 Rls1.5 to
ensure official support for the latest feature and software application support
across the IP Phone portfolio.

Nortel recommends an upgrade to these firmware releases at the earliest
opportunity.

No SRG patches are required to support the Enhanced Firmware Download
feature that allows the IP Phone firmware supported on the SRG 200/400

1.5 to remain in synch with the Communication Server 1000 Main office.
SRG 200/400 1.5 officially extends support for the following set types: IP
Phone 2000 Series Key Expansion Module (KEM)* (in Normal Mode
only), IP Phone 1120E, and IP Phone 1140E.

In addition, if the “Main” is Communication Server 1000 release 4.5, no patch
is necessary on the Communication Server 1000 to upgrade the IP Phone.
But if the “Main” is Communication Server 1000 release 3.0 or 4.0, a
CS1000 patch is required on the “Main” to allow the SRG 50 to upgrade the
IP Phone firmware. The patch is MPLR21148 and is available from the
Meridian PEP library at the

www.nortel.com/support web site.

The IP Phone 1110 and 1150E are not supported on SRG200/400 Rls1.5

SRG 50 1.0 Nortel recommends an upgrade to these firmware releases at the earliest

opportunity.

The SRG 50 Enhanced Firmware download patch (BCM050.090-SRG) is
required to keep the IP Phone firmware supported on the SRG 50 in synch
with the Communication Server 1000 Main office. This patch will work for all
versions of IP client firmware. The patch will allow you to upgrade the IP
Phone firmware. The SRG patch is entitled BCM050.090-SRG. This patch is
available at the

To officially support the IP Phone 1120E and 1140E a SRG Interim Release
Patch (BCM050.099_BCM50_1.0: BCM050.099-SRG)
50 Rls 1.0 systems. The Interim Release Patch is available on
the www.nortel.com/support

In addition, if the “Main” is Communication Server 1000 release 4.5,
no Communication Server 1000 patch is necessary on the Communication
Server 1000 to upgrade the IP Phones. But if the “Main” is Communication
Server 1000 release 3.0 or 4.0, a Communication Server 1000 patch is
required on the “Main” to allow the SRG 50 to upgrade the IP Phone
firmware. The patch is MPLR21148 and is available from the Meridian PEP
library at the

www.nortel.com/support web site in the SRG 50 1.0 section.

is required for SRG

web site in the SRG 50 section.

www.nortel.com/support web site.

Nortel Page 14 of 21

The IP Phone 1110 and 1150E are not supported on SRG 50 Rls1.0.

Although not required, it is strongly recommended that SRG 50 1.0
customers upgrade to 2.0 to ensure the latest feature and software
application support across the IP Phone portfolio

SRG 50 2.0 Nortel recommends an upgrade to these firmware releases at the earliest

opportunity.

No SRG 50 patches are required to support the Enhanced Firmware
Download feature that allows the IP Phone firmware supported on the SRG
50 to remain in synch with the Communication Server 1000 Main office.
SRG50 2.0 officially extends support for the following set types:
2000 Series Key Expansion Module (KEM)* (in Normal Mode only),
Phone 1120E, and IP Phone 1140E.

In addition, if the “Main” is Communication Server 1000 release 4.5, no patch
is necessary on the Communication Server 1000 to upgrade the IP Phone.
But if the “Main” is Communication Server 1000 release 3.0 or 4.0, a
Communication Server 1000 patch is required on the “Main” to allow the
SRG 50 to upgrade the IP Phone firmware. The patch is MPLR21148 and is
available from the Meridian PEP library at the

www.nortel.com/support web

site.

IP Phone

IP

The IP Phone 1110 and 1150E are not officially supported on SRG 50 2.0
and is therefore supported in normal mode only.

Nortel Page 15 of 21

System Compatibility and Requirements

System Notes / Advisements
Nortel Application

Gateway 1000

Nortel Secure
Multimedia
Controller (SMC) 1.0

These firmware releases continue to provide support to interwork with
Nortel Application Gateway 1000.

The Application Gateway 1000 delivers business applications to the IP
Phones. It is an open, standards-based network platform that supports
simultaneous voice and data services. The Nortel Application Gateway
1000 is used by organizations to deploy and manage multiple applications
across the range of Nortel IP Phones including the 2001, 2002, 2004,
2007, 1120E, 1140E and 1150E.

For more information on the capabilities introduced with Nortel Application
Gateway 1000 please refer to the Product Bulletin P-2006-0034-Global­REV1 and Product Bulletin P-2007-0006-Global

The IP Phone 1110 and 1150E is not supported by the Application
Gateway 1000.

These firmware releases continue to provide support to interwork with
Nortel Secure Multimedia Controller (SMC) 2450.

The SMC 2450 is a purpose-built application firewall, delivering an
integrated inside threat security solution to protect Nortel’s IP phones and
multimedia communication servers. The SMC 2450 creates a “Secure
Multimedia Zone” around the converged infrastructure to protect against
Denial of Service attacks and other security threats, while pre-configured
policy settings simplify deployment and ensure the integrity and availability
of the business critical converged, multimedia infrastructure.

For more information on the capabilities introduced with Nortel SMC 2450
please refer to the SMC 2450 Product bulletin P-2006-0131-Global and the
SMC 2450 Sales and Marketing bulletin SM-2006-0132-Global.

Nortel Page 16 of 21

IP Phone Firmware Upgrade Method (Communication Server Dependent)

Communication Server 1000

The IP Phone 1110, 1120E, 1140E and 1150E supports remote firmware upgrades through
both a TFTP process and a more automated UFTP process direct from the Communication
Server 1000 Release 4.5 or later. The method to upgrade the IP Phone 2007, 1110, 1120E
and 1140E firmware depends on the call server software.

• Communication Server 1000 Release 4.0 and Succession 1000 Release 3.0
systems must use TFTP

• Communication Server 1000 Release 4.5 or later systems can use UFTP or TFTP

The IP Phone 1150E firmware can use UFTP or TFTP since it is only supported on
Communication Server 1000 Release 4.5 or later.

For more information on TFTP and UFTP firmware upgrade processes, please refer to the
IP Phones Description, Installation and Operation Document, NTP 553-3001-368.

Survivable Remote Gateway (SRG) 200/400 and SRG 50

For information on firmware upgrade processes for the SRG200/400, please refer to the
Main Office Configuration Guide for SRG200/400 Rls1.5, NTP 553-3001-207

For information on firmware upgrade processes for the SRG50, please refer to the Main
Office Configuration Guide for SRG50 Rls 2.0, NTP 553-3001-207.

Nortel Page 17 of 21

IP Phone Configuration Menu

The IP Phone 1110 text-based configuration menu has been expanded with the 0623C4D
firmware release. The text-based menu structure below presents the complete configuration
menu now available:

EAP Enable?[0-N,1-Y]:0

if “1”

DeviceID[ ]
Password:[*******]
LLDP Enable? [0-N,1-Y]:1
DHCP? [0-N,1-Y]:1

if “0”

SET IP: xxx.xxx.xxx.xxx
NETMSK: xxx.xxx.xxx.xxx
DEF GW: xxx.xxx.xxx.xxx
S1 IP: xxx.xxx.xxx.xxx
S1 PORT:
S1 ACTION:
S1 RETRY COUNT:
S1 PK: FFFFFFFFFFFFFFFF
S2 IP: xxx.xxx.xxx.xxx
S2 PORT:
S2 ACTION:
S2 RETRY COUNT:
S2 PK: FFFFFFFFFFFFFFFF

else if “1”

DHCP:0-Full,1-Partial:1

if “1”

S1 IP: xxx.xxx.xxx.xxx
S1 PORT:
S1 ACTION:
S1 RETRY COUNT:
S1 PK: FFFFFFFFFFFFFFFF
S2 IP: xxx.xxx.xxx.xxx
S2 PORT:
S2 ACTION:
S2 RETRY COUNT:
S2 PK: FFFFFFFFFFFFFFFF
Speed[0-A,1-10,2-100]:0

if “1” or “2”

Nortel Page 18 of 21

Duplex[0-A,1-F,2-H]:0
Cfg XAS?[0-N, 1-Y]:1

if “1”

XAS IP: xxx.xxx.xxx.xxx
Voice 802.1Q[0-N,1-Y]:1

if “1”

VOICE VLAN?[0-N,1-Y]:0

if “1”

VLAN Cfg ?0-Auto,1-Man :1

if “0”

LLDP MED ? [0-N, 1-Y] :0
if “0”

LLDP VLAN ? [0-N,1-Y] :0

if “0”

DHCP ? [0-N, 1-Y] :0

else if “1”

VOICE VLAN ID :

VLANFILTER ?[0-N,1-Y] :0
Ctrl pBits[0-7,8-Au] :8
Media pBits[0-7,8-Au] :8

PC Port ? [0-OFF,1-ON] :1

if “1”

Speed[0-A,1-10,2-100]:0

if “1” or “2”

Duplex[0-A,1-F,2-H]:0
Data 802.1Q[0-N,1-Y]:1

if “1”

DATA VLAN?[0-N,1-Y]:0

if “1”

DATA VLAN Cfg ?0-A,1-M :0

if “1”

DATA VLAN ID :
Data pBits[0-7,8-Au] :8
PCUntagAll ?[0-N,1-Y]:0

Cached IP? [0-N, 1-Y]:0
GARP Ignore?[0-N,1-Y]:0
PSK SRTP?[0-N, 1-Y]:1

The IP Phone 1120E, 1140E and 1150E graphics-based configuration menu has been
expanded with the 0624C4D, 0625C4D and 0627C4D firmware releases. The graphic menu
structure below presents the complete configuration menu now available:

Nortel Page 19 of 21

Enable 802.1x (EAP): []

DeviceID:

Password:
Enable 802.1ab (LLDP): []
DHCP: [No, Partial, Full]

Set IP: xxx.xxx.xxx.xxx

Net Mask: xxx.xxx.xxx.xxx

Gateway: xxx.xxx.xxx.xxx

S1 IP: xxx.xxx.xxx.xxx

Port:

S1 Action:

Retry:

S1 PK: FFFFFFFFFFFFFFFF

S2 IP: xxx.xxx.xxx.xxx

Port:

S2 Action:

Retry:

S2 PK: FFFFFFFFFFFFFFFF
Ntwk Port Speed: [Auto, 10BT, 100BT]

Ntwk Port Duplex: [Auto, Force Full, Force Half]
Disable Voice 802.1Q: []

VoiceVLAN: [No VLAN, LLDP MED, LLDP VLAN Name, DHCP, Enter VLAN ID]

VLAN Filter : []

Ctrl Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

Media Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]
Disable PC Port: []

PC Port Speed: [Auto, 10BT, 100BT]

PC Port Duplex: [Auto, Force Full, Force Half]

Disable Data 802.1Q: []

DataVLAN: [No VLAN, LLDP VLAN Name, Enter VLAN ID]
Data Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

PC-Port Untag All: []
Cached IP: []
Ignore GARP: []
Enable PSK SRTP: []
XAS IP: xxx.xxx.xxx.xxx

Graphical XAS: []

Port
TFTP IP: xxx.xxx.xxx.xxx
Enable Bluetooth: [Auto, yes, No] This menu item on IP Phone 1140E and 1150E only

Nortel Page 20 of 21

The IP Phone 1110, 1120E, 1140E and 1150E contain a password protection mechanism to
lock out access to the Network Configuration menu. If enabled, access to the Network
Configuration menu is password protected and the password is prompted by a pop up
window. One must type the password 26567*738 (color*set) from the dial pad and press
the Down arrow or mouse click “OK” to enter the Network Configuration menu.

When an incorrect password is entered, the Network Configuration Menu is not opened.

To thwart password guessing, only 3 incorrect password entries in a row are allowed. After

rd

the 3

incorrect entry, the password entry is ignored for 5 minutes. During this period of
time, the password prompt is displayed and the entered digits accepted; however, the phone
will not process the incoming digits. The password prompt window simply closes and the
behavior is identical to that of an incorrect password entry. The user will assume the
incorrect password has been entered and try again. Thus even if the correct password is
guessed during the 5 minute period, it will be ignored. This effectively reduces the guess
entry rate to 3 guesses every 5 minutes.

Once the password has been entered, access to the Network Configuration menu remains
active for 5 minutes. During the 5 minutes, the menu can be freely navigated, exited and
entered without being prompted again for the password. When the 5 minutes expires, the
menu is closed. The password must be reentered to access the Menu.

*Nortel, the Nortel logo and the Globemark are trademarks of Nortel.
Nortel is a recognized leader in delivering communications capabilities that enhance the

human experience, ignite and power global commerce, and secure and protect the world’s
most critical information. Serving both service provider and enterprise customers, Nortel
delivers innovative technology solutions encompassing end-to-end broadband, Voice over
IP, multimedia services and applications, and wireless broadband designed to help people
solve the world’s greatest challenges. Nortel does business in more than 150 countries. For
more information, visit Nortel on the Web at www.nortel.com

.

Nortel Page 21 of 21