Avaya UNIStim Firmware Release 0623C4D, UNIStim Firmware Release 0624C4D Notice

Product Bulletin

Bulletin Number: P-2007-0258-Global

Date: 17 October 2007

UNIStim Firmware Release 0623C4D, 0624C4D, 0625C4D and 0627C4D for IP Phone 1110, 1120E, 1140E and 1150E Respectively

EVISION HISTORY

Date Revision # Summary of Changes

9-OCTOBER-07 Original bulletin

New up-revision of IP Phone 11xx firmware to reinstate support for CS1K prior to release 5.0 and close PAA-2007-0208-Global

Introduction

Nortel* is pleased to announce the availability of releases of UNIStim firmware version 0623C4D, 624C4D, 0625C4D and 0627C4D for the IP Phone 1110, IP Phone 1120E, IP Phone 1140E and IP Phone 1150E respectively.

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads resolve an incompatibility discovered in the 0623C4B, 0624C4B, 0625C4B and 0627C4B firmware loads with Communication Server 1000 release 4.5 or earlier. The incompatibility was advertised in PAA-2007-0208-Global. With the release of 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads the product advisory PAA-2007-0208-Global is closed.

Even though PAA-2007-0208-Global highlights an incompatibility between the previous firmware loads and Communication Server 1000 release 4.5 or earlier, UNIStim firmware versions 0623C4D, 624C4D, 0625C4D and 0627C4D are being released for Communication Server 1000 release 5.0 as well. UNIStim firmware loads 0623C4D, 624C4D, 0625C4D and 0627C4D deliver quality improvements beneficial to Communication Server 1000 release 5.0

Nortel Page 1 of 21

These new firmware loads, when used in association with Communication Server 1000 release 5.0, deliver enhancements to Nortel’s IP Telephony Solution. These enhancements provide greater functionality. The enhancements include:

 Media encryption via Secure Real-time Transport Protocol (SRTP) using UNIStim

Keys (USK)

 Extended language support  More flexible network connectivity control  Additional backlight control timers

Enhancements

Media encryption via Secure Real-time Transport Protocol (SRTP) using UNIStim Keys (USK)

Ensuring privacy of conversations in VoIP networks is becoming an increasing priority for network administrators. Secure Real-time Transport Protocol (SRTP) [RFC 3711] is a standards based method to encrypt RTP media. SRTP specifies a protocol to provide confidentiality, authentication, and replay protection to RTP and RTCP traffic.

In association with Communication Server 1000 release 5.0, the 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads deliver media stream protection using SRTP.

SRTP provides a means by which two endpoints can engage in secure media exchanges. If Media Security is enabled on the Communication Server 1000 with IP Phones running

these latest versions of firmware, the phones will use SRTP to encrypt and authenticate the media stream. The IP Phone displays a security icon on the IP Phone’s screen to indicate that the leg of the call from the IP Phone to the first IP termination is secure.

The security icon is an outlined padlock symbol in the first position of the first line of the caller display.

On some phones, the message "encrypted" also appears. By default, Media Security is enabled on the Nortel Communication Server 1000 release

5.0. For more information about Media Security concepts and implementation in Communication Server 1000 Release 5.0, see Nortel Communication Server 1000 Security Management Fundamentals (NN43001-604).

Nortel Page 2 of 21

Media Security delivered with Communication Server 1000 Release 5.0 exchanges security keys through UNIStim, using a secure channel. This implementation of SRTP using UNIStim Keys (USK) is different from the implementation of SRTP using PreShared Keys (PSK) that was first introduced into the IP Phone firmware 0624C23 and 0625C23 for the IP Phone 1120E and IP Phone 1140E respectively and firmware 0623C3C and 0627C3C for the IP Phone 1110 and IP Phone 1150E respectively

SRTP PSK was designed to provide encrypted media to deployments where the Call Servers do not yet (or will not) support the traditional SRTP key exchange infrastructure. It is also useful in situations where security requirements are less aggressive and the organization does not want to invest in the infrastructure required to support a traditional key exchange. But SRTP PSK has some limitations which are overcome with using the SRTP USK implementation. The benefits of SRTP USK over SRTP PSK include:

• Centralized provisioning. SRTP PSK can only be enabled manually by provisioning each IP Phone using the configuration menu

• The beginning of the call is encrypted. With SRTP PSK the first few seconds of the conversation will not be encrypted.

• All codecs and packet sizes are supported. With SRTP PSK certain choices of codec and packet size will not allow the media stream to be encrypted.

• IP Gateways are supported. With SRTP PSK secure calls are only supported between two Nortel IP Phones associated with the same Call Server or on two different Call Servers connected by an IP Trunk.

These new firmware loads offer both SRTP PSK and SRTP USK. The IP Phone displays a slightly different security icon on the IP Phone’s screen to indicate

a secure call using SRTP PSK. The security icon for SRTP PSK is a solid padlock symbol in the first position of the first line

of the caller display.

For additional details on choosing SRTP USK over SRTP PSK, please refer to the Nortel

Communication Server 1000 Security Management Fundamentals NN43001-604

For more information about configuring SRTP PSK, versus SRTP USK please refer to Nortel Communication Server 1000 IP Phones Fundamentals (NN43001-368).

For more details on Nortel Communication Server 1000 release 5.0 please refer to Nortel Communication Server 1000 Release 5.0 Release Bulletin.

Nortel Page 3 of 21

Extended Language Support (Applies to IP Phone 1120E, 1140E and 1150E)1

In association with Communication Server 1000 release 5.0, the 0624C4D, 0625C4D and 0627C4D firmware loads deliver extended language support on the 1120E, 1140E and 1150E respectively

These new firmware loads introduce new languages with complex fonts. The firmware provides the capability to interpret the text wishing to be displayed as UTF-8 encoding. This allows the call server to easily display multilingual text on the phone including Far East languages like Chinese and Korean.

The new languages now supported on the 1120E, 1140E and 1150E include, Arabic, Chinese (both simplified and traditional), Greek, Hebrew, Japanese (Kanji) and Korean. These new language require graphical screens to render the fonts.

Some of the new character sets are very large and require a substantial amount of memory. In order to more efficiently use memory for a majority of the sets that will not use these character sets, certain character sets are only installed on an as-needed basis. The phone can download the font files to its file system as needed via a configuration file. The necessary fonts can be loaded into the phone using an extension of the existing configuration files. The configuration file can be downloaded using TFTP at set boot time or via the Network Manager Configuration Download command.

Once the fonts are downloaded, the set needs to know when to use which fonts. The configuration file is used to create this mapping. The mapping will persist until explicitly changed or until a font is removed. The set will validate the mappings (i.e. ensuring that the font file exists) on startup and whenever a mapping change occurs. If a font file is removed the set will revert to the default mappings.

Downloaded fonts have a version number to avoid unnecessary downloads and to facilitate upgrades.

The following languages are supported with appropriate downloaded fonts and font mappings

• Chinese Simplified

• Chinese Traditional

• Full Japanese (Kanji)

• Korean

Extended language support on the IP Phone 1110 was not ready in time for this release

Nortel Page 4 of 21

The following languages have been added to the default language list and are supported without the need to downloaded fonts and font mappings

• Arabic

• Greek

• Hebrew (requires activation by the call server)

The complete list of languages supported on the 1120E, 1140E and 1150E is:

• Arabic

• Chinese – simplified (requires font download)

• Chinese – traditional (requires font download)

• Czech

• Danish

• Dutch

• English

• Finnish

• French

• German

• Greek

• Hebrew (requires activation by the call server)

• Hungarian

• Italian

• Japanese – Katakana

• Japanese – Kanji (requires font download)

• Korean (requires font download)

• Latvian

• Norwegian

• Polish

• Portuguese

• Russian

• Spanish

• Swedish

• Turkish

The IP phone and call server synchronize the language choice regardless of whether the language selection is made by the call server or locally at the phone. If the Call Server initiates a language change, the IP Phone changes its local prompts to match the specified language on the Call Server. If the IP Phone user initiates a language change using the Local Tools menu, the Call Server changes its local prompts to match the specified language on the IP Phone. If the Call Server selects a language which the IP Phone does not support, the local prompts default to English.

Nortel Page 5 of 21

For information about downloading and configuring fonts see Nortel Communication Server 1000 IP Phones Fundamentals (NN43001-368).

The font files are available on www.nortel.com/support

web site under the Software Downloads link. The file “ASIAN FONT FILES (C4X FIRMWARE COMPATIBLE

ONLY - EXCEPT IP PHONE 1110)” is compressed file of all the downloadable fonts as

well as example TFTP configuration files for each of the IP Phone models.

More flexible network connectivity control

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads provide greater low level network control available through the phones configuration menus. The greater control includes:

1) Allowing 802.1q extended frame format to be disabled permitting the phone to connect to network infrastructure that does not support the 802.1Q extended frame format. As well, the new firmware allows for the provisioning of the 802.1Q priority settings for the voice traffic, both control and bearer, and the data traffic from the PC port.

The configuration menu has been expanded to include the additional content. The following new menu items have been added to the configuration menu:

Disable Voice 802.1Q: [] Ctrl Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7] Media Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

Disable Data 802.1Q: [] Data Priority Bits: [Auto, 1, 2, 3, 4, 5, 6, 7]

2) allowing the link speed and the duplex mode on the IP phones to be provisioned independently for both the network port and the PC port

The configuration menu has been expanded to include the additional content. The following new menu items have been added to the configuration menu:

Ntwk Port Speed: [Auto, 10BT, 100BT] Ntwk Port Duplex: [Auto, Force Full, Force Half]

PC Port Speed: [Auto, 10BT, 100BT] PC Port Duplex: [Auto, Force Full, Force Half]

Nortel Page 6 of 21

Additional Timer Values Added to Backlight Control (Applies to IP Phone 1110, 1120E,

1140E and 1150E)

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads deliver two new backlight timer durations on the IP Phone 1110, 1120E, 1140E and 1150E respectively.

The Contrast and Brightness Tools are used to alter the physical settings of the display. The Backlight setting determines the time before the display sleeps (goes black) or dims.

Two new short duration intervals of 5 seconds and 1 minute have been added to the existing duration choices.

Because of the addition of the two new intervals, a previously selected preference may be adjusted when the new firmware is loaded onto the phone. This one time adjustment can be reset by entering the Contrast and Brightness Tools and selecting a new preference. Once the new preference is selected the selection will be persistent across future resets and upgrades.

Quality Improvements

The 0623C4D, 0624C4D, 0625C4D and 0627C4D firmware loads continue to improve the overall quality of the Next Generation IP Phones (1110, 1120E, 1140E and 1150E) through the delivery of ongoing resolution of CRs. The list of resolved critical issues since the 0623C4B, 0624C4B, 0625C4B and 0627C4B firmware loads are listed below.

Slight chance firmware C4B may become unresponsive when attached to CS1K 4.00 and 4.50 Slight chance that IP Phone’s internal switch may become unresponsive IP Phone may sometimes go offline and not recover

Product Advisements

2-Step Upgrade May Be Required (Applies to IP Phone 1120E and 1140E)

One important note when upgrading the IP Phone 1120E to 0624C4D or the IP Phone 1140E to 0625C4D from any load previous to 0624C1B or 0625C1B respectively is that a 2step upgrade will be required. The IP Phone 1120E and 1140E cannot be upgraded directly to the newly released firmware if they are currently running firmware previous to 0624C1B and 0625C1B respectively. Instead, the phones must first be upgraded to 0624C1B and 0625C1B or newer (recommend 0624C3C and 0625C3C). Once the phones are running at

Nortel Page 7 of 21

+ 14 hidden pages