Application Notes for Configuring Avaya WebLM License
Manager for Avaya VPNremote™ Phone Release 2
– Issue 1.0
Abstract
These Application Notes describe the steps for configuring the Avaya WebLM License
Manager to support Avaya VPNremote™ Phones.
Avaya WebLM is a Web-based license manager application designed to support Avaya
software products that require licensing. The Avaya VPNremote™ Phone is a software based
Virtual Private Network (VPN) client integrated into the firmware of an Avaya IP Telephone.
Release 2 of the Avaya VPNremote Phone utilizes Avaya's WebLM license management
system. The Avaya VPNremote Phone license file must be installed on the WebLM server for
the Avaya VPNremote Phone to be fully functional. A WebLM client integrated into the
Avaya VPNremote Phone communicates with the WebLM sever for license verification during
the phone startup process.
EMH; Reviewed:
SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
These Application Notes describe the steps for configuring the Avaya WebLM License Manager
to support Avaya VPNremote™ Phones.
Avaya WebLM is a Web-based license manager that runs on both Microsoft Windows and
UNIX systems. It is designed to support Avaya software products that require licensing. The
WebLM server provides a Web User Interface (UI) for license administration which can be
accessed from a standard web browser over a secure SSL link.
The Avaya VPNremote™ Phone is a software based Virtual Private Network (VPN) client
integrated into the firmware of an Avaya IP Telephone. This enhancement allows the Avaya IP
Telephone to be plugged in and used seamlessly over a secure VPN from any broadband Internet
connection. The Avaya VPNremote Phone provides the identical telephony feature set and user
experience as a standard Avaya IP Telephone offers in a typical office environment deployment.
Avaya IP Telephone models supporting the Avaya VPNremote Phone firmware are the 4610SW,
4620SW, 4621SW, 4622SW and 4625SW.
Release 2 of the Avaya VPNremote Phone utilizes Avaya's WebLM license management system.
A WebLM client application integrated into the Avaya VPNremote Phone communicates with
the WebLM sever. The Avaya VPNremote Phone license file must be installed on the WebLM
server for full functionality. The VPNremote Phone can function without a license file for a 30day period. When the 30-day time period expires, the VPNremote Phone is non-operational and
the user must install the previous firmware to the telephone for any functionality.
An Avaya sales representative or business partner must be contacted to obtain the VPNremote
Phone license file.
EMH; Reviewed:
SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
The steps shown in Figure 1 below describe the high level events that take place during the
VPNremote phone startup process including access to the WebLM server.
1. The VPNremote Phone establishes an IPSec VPN tunnel upon boot up with the
designated VPN gateway.
2. The VPNremote Phone initiates a TFTP or HTTP session with the phone configuration
server (HTTP/TFTP Server) for configuration file download.
3. The VPNremote Phone initiates an HTTPS session with the WebLM server. The
VPNremote Phone’s WebLM client communicates with the WebLM server to request a
license. The WebLM server verifies the request, confirms the license count will not be
exceeded and grants a license.
4. The VPNremote Phone registers with Avaya Communication Manager and is ready for
service.
EMH; Reviewed:
SPOC 10/25/2006
Figure 1: VPNremote Phone Startup
Solution & Interoperability Test Lab Application Notes
The sample network implemented for these Application Notes is shown in Figure 2. The
WebLM License Manager supports both Linux and Windows platforms. Microsoft Windows
2000 Server was used in the sample configuration.
While separate physical servers are used for the WebLM License Manager and the HTTP/TFTP
phone configuration download server in the sample network, they can be installed as co-resident
applications on the same physical server.
EMH; Reviewed:
SPOC 10/25/2006
Figure 2: Network Topology
Solution & Interoperability Test Lab Application Notes
Avaya Communication Manager R3.1.2
(R013x.01.2.632.1)
FW 022 (HW6)
FW 016 (HW1)
FW 108 (HW12)
ScreenOS 5.4.0r1.0
4. Avaya VPNremote Phone Configuration
4.1. VPNremote Phone Firmware
The Avaya VPNremote Phone firmware must be installed on the phone prior to the phone being
deployed in the remote location. See Section 10 ReferencesVPNremote for the 4600 Series IP Telephones Release 2.0 Administrator Guide for details on installing the VPNremote Phone
firmware. The firmware version of Avaya IP telephones can be identified by viewing the version
displayed on the phone upon boot up or when the phone is operational by selecting the Options
hard button Æ View IP Settings soft button Æ Miscellaneous soft button Æ Right arrow hard
button. The Application file name displayed denotes the installed firmware version.
As displayed in Table 1 – Equipment and Software Validated, VPNremote Phone firmware
includes the letters VPN in the file name. This allows for easy identification of firmware
versions incorporating VPN capabilities.
EMH; Reviewed:
SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
The VPNremote Phone configuration can be administered centrally from an HTTP or TFTP
server or locally on the phone. See Section 10 References VPNremote for the 4600 Series IP Telephones Release 2.0 Administrator Guide for details on all the VPNremote Phone
configuration parameters.
1. Locally Setting the Avaya VPNremote Phone File Server parameter
Most parameters of the VPN Options menu of the VPNremote Phone are VPN specific. The
one parameter related to the WebLM server is the File Server parameter. As described in
Section 1.1 Figure 1, the VPNremote Phone must first access the HTTP/TFTP file server
which then identifies the location of the WebLM server through the configuration files
downloaded to the VPNremote Phone. The File Server IP Address must be entered locally in
the VPNremote Phone.
There are two methods available to access the VPN Options menu from the VPNremote
Phone.
a. During Telephone Boot:
During the VPNremote Phone boot up, the option to press the * key to enter the
local configuration mode appears on the telephone’s display screen as shown
below.
DHCP
* to program
When the * key is pressed, several configuration parameters are presented such as
the phone’s IP Address, the Call Server’s IP Address, etc. Press the # key to
accept the current settings or set to an appropriate value. The final configuration
option displayed is the VPN Start Mode option shown below. Press the * key to
enter the VPN Options menu.
VPN Start Mode: Boot
*=Modify #=OK
b. During Telephone Operation:
EMH; Reviewed:
SPOC 10/25/2006
While the VPNremote Phone is in an operational state (i.e. registered with Avaya
Communication Manager) press the following key sequence on the telephone to
enter VPN configuration mode:
Mute-V-P-N-M-O-D-# (Mute-8-7-6-6-6-3-#)
The follow is displayed:
VPN Start Mode: Boot
*=Modify #=OK
Press the * key to enter the VPN Options menu.
Solution & Interoperability Test Lab Application Notes
One of the configuration script files downloaded by the VPNremote Phone from the
HTTP/TFTP file server is the 46VPNsetting.txt file. The 46VPNsetting.txt file contains many
variables including the variable NVWEBLMURL which identifies all available WebLM
servers to the VPNremote Phone. Below are the specifics of the NVWEBLMPURL
variable:
• Variable Name: NVWEBLMURL
• Valid Values:
o Comma separated URLs of available WebLM Licensing servers.
o Length of individual URL cannot be more than 128 characters.
o Combined length of all the URLs cannot be more than 252 characters.
o Default URL of the WebLM Licensing Server is:
http://xxx.xxx.xxx.xxx:8080/WebLM/LicenseServer
Where xxx.xxx.xxx.xxx is the IP address (or FQDN) of the WebLM server.
• Example: o SET NVWEBLMURL http://192.168.1.30:8080/WebLM/LicenseServer
EMH; Reviewed:
SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes