Avaya VPNremote Phone User Manual

Avaya Solution & Interoperability Test Lab
Application Notes for Configuring Avaya WebLM License Manager for Avaya VPNremote™ Phone Release 2 – Issue 1.0
Abstract
These Application Notes describe the steps for configuring the Avaya WebLM License Manager to support Avaya VPNremote™ Phones.
Avaya WebLM is a Web-based license manager application designed to support Avaya software products that require licensing. The Avaya VPNremote™ Phone is a software based Virtual Private Network (VPN) client integrated into the firmware of an Avaya IP Telephone. Release 2 of the Avaya VPNremote Phone utilizes Avaya's WebLM license management system. The Avaya VPNremote Phone license file must be installed on the WebLM server for the Avaya VPNremote Phone to be fully functional. A WebLM client integrated into the Avaya VPNremote Phone communicates with the WebLM sever for license verification during the phone startup process.
EMH; Reviewed: SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
1 of 25
weblm_vpnphone.doc
TABLE OF CONTENTS
1. INTRODUCTION..............................................................................................................................................3
1.1. VPNREMOTE PHONE STARTUP....................................................................................................................4
2. NETWORK TOPOLOGY................................................................................................................................5
3. EQUIPMENT AND SOFTWARE VALIDATED...........................................................................................6
4. AVAYA VPNREMOTE PHONE CONFIGURATION..................................................................................6
4.1. VPNREMOTE PHONE FIRMWARE.................................................................................................................6
4.2. CONFIGURING AVAYA VPNREMOTE PHONE ...............................................................................................7
5. AVAYA WEBLM LICENSE MANAGER INSTALLATION AND CONFIGURATION .........................9
5.1. INSTALL JAVA RUNTIME ENVIRONMENT .....................................................................................................9
5.2. INSTALL APACHE TOMCAT........................................................................................................................10
5.3. AVAYA WEBLM CONFIGURATION ............................................................................................................14
6. ACCESSING WEBLM SERVER WEB PAGE............................................................................................18
7. INSTALL LICENSE FILE.............................................................................................................................21
8. VERIFICATION STEPS.................................................................................................................................21
9. TROUBLESHOOTING ..................................................................................................................................22
10. REFERENCES............................................................................................................................................24
EMH; Reviewed: SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
2 of 25
weblm_vpnphone.doc
1. Introduction
These Application Notes describe the steps for configuring the Avaya WebLM License Manager to support Avaya VPNremote™ Phones.
Avaya WebLM is a Web-based license manager that runs on both Microsoft Windows and UNIX systems. It is designed to support Avaya software products that require licensing. The WebLM server provides a Web User Interface (UI) for license administration which can be accessed from a standard web browser over a secure SSL link.
The Avaya VPNremote™ Phone is a software based Virtual Private Network (VPN) client integrated into the firmware of an Avaya IP Telephone. This enhancement allows the Avaya IP Telephone to be plugged in and used seamlessly over a secure VPN from any broadband Internet connection. The Avaya VPNremote Phone provides the identical telephony feature set and user experience as a standard Avaya IP Telephone offers in a typical office environment deployment. Avaya IP Telephone models supporting the Avaya VPNremote Phone firmware are the 4610SW, 4620SW, 4621SW, 4622SW and 4625SW.
Release 2 of the Avaya VPNremote Phone utilizes Avaya's WebLM license management system. A WebLM client application integrated into the Avaya VPNremote Phone communicates with the WebLM sever. The Avaya VPNremote Phone license file must be installed on the WebLM server for full functionality. The VPNremote Phone can function without a license file for a 30­day period. When the 30-day time period expires, the VPNremote Phone is non-operational and the user must install the previous firmware to the telephone for any functionality.
An Avaya sales representative or business partner must be contacted to obtain the VPNremote Phone license file.
EMH; Reviewed: SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
3 of 25
weblm_vpnphone.doc
1.1. Avaya VPNremote Phone Startup
The steps shown in Figure 1 below describe the high level events that take place during the
VPNremote phone startup process including access to the WebLM server.
1. The VPNremote Phone establishes an IPSec VPN tunnel upon boot up with the
designated VPN gateway.
2. The VPNremote Phone initiates a TFTP or HTTP session with the phone configuration
server (HTTP/TFTP Server) for configuration file download.
3. The VPNremote Phone initiates an HTTPS session with the WebLM server. The
VPNremote Phone’s WebLM client communicates with the WebLM server to request a license. The WebLM server verifies the request, confirms the license count will not be exceeded and grants a license.
4. The VPNremote Phone registers with Avaya Communication Manager and is ready for
service.
EMH; Reviewed: SPOC 10/25/2006
Figure 1: VPNremote Phone Startup
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
4 of 25
weblm_vpnphone.doc
2. Network Topology
The sample network implemented for these Application Notes is shown in Figure 2. The
WebLM License Manager supports both Linux and Windows platforms. Microsoft Windows 2000 Server was used in the sample configuration.
While separate physical servers are used for the WebLM License Manager and the HTTP/TFTP phone configuration download server in the sample network, they can be installed as co-resident applications on the same physical server.
EMH; Reviewed: SPOC 10/25/2006
Figure 2: Network Topology
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
5 of 25
weblm_vpnphone.doc
3. Equipment and Software Validated
Table 1 lists the equipment and software/firmware versions used in the sample configuration
provided.
Component Description Software/Hardware Version
Avaya S8710 Media Servers
Avaya G650 Media Gateway
IPSI (TN2312BP) C-LAN (TN799DP) MedPro (TN2302AP)
Avaya 4610SW IP Telephones R2.3 – Application (a10bVPN232_1.bin) Avaya 4620SW IP Telephones R2.3 – Application (a20bVPN232_1.bin) Avaya 4621SW IP Telephones R2.3 – Application (a20bVPN232_1.bin) Avaya 4625SW IP Telephones R2.5 – Application (a25VPN252_1.bin)
Avaya WebLM License Manager 4.3 Apache Tomcat 5.5.17 – Core Distribution Java Runtime Environnent Java 2 Standard Edition v1.5.0_8 Juniper Networks Secure Services Gateway 520
Table 1 – Equipment and Software Validated
Avaya Communication Manager R3.1.2 (R013x.01.2.632.1)
FW 022 (HW6) FW 016 (HW1) FW 108 (HW12)
ScreenOS 5.4.0r1.0
4. Avaya VPNremote Phone Configuration
4.1. VPNremote Phone Firmware
The Avaya VPNremote Phone firmware must be installed on the phone prior to the phone being
deployed in the remote location. See Section 10 References VPNremote for the 4600 Series IP Telephones Release 2.0 Administrator Guide for details on installing the VPNremote Phone
firmware. The firmware version of Avaya IP telephones can be identified by viewing the version
displayed on the phone upon boot up or when the phone is operational by selecting the Options hard button Æ View IP Settings soft button Æ Miscellaneous soft button Æ Right arrow hard
button. The Application file name displayed denotes the installed firmware version.
As displayed in Table 1 – Equipment and Software Validated, VPNremote Phone firmware includes the letters VPN in the file name. This allows for easy identification of firmware
versions incorporating VPN capabilities.
EMH; Reviewed: SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
6 of 25
weblm_vpnphone.doc
4.2. Configuring Avaya VPNremote Phone
The VPNremote Phone configuration can be administered centrally from an HTTP or TFTP
server or locally on the phone. See Section 10 References VPNremote for the 4600 Series IP Telephones Release 2.0 Administrator Guide for details on all the VPNremote Phone
configuration parameters.
1. Locally Setting the Avaya VPNremote Phone File Server parameter
Most parameters of the VPN Options menu of the VPNremote Phone are VPN specific. The
one parameter related to the WebLM server is the File Server parameter. As described in
Section 1.1 Figure 1, the VPNremote Phone must first access the HTTP/TFTP file server
which then identifies the location of the WebLM server through the configuration files downloaded to the VPNremote Phone. The File Server IP Address must be entered locally in the VPNremote Phone.
There are two methods available to access the VPN Options menu from the VPNremote
Phone.
a. During Telephone Boot:
During the VPNremote Phone boot up, the option to press the * key to enter the local configuration mode appears on the telephone’s display screen as shown below.
DHCP * to program
When the * key is pressed, several configuration parameters are presented such as the phone’s IP Address, the Call Server’s IP Address, etc. Press the # key to accept the current settings or set to an appropriate value. The final configuration option displayed is the VPN Start Mode option shown below. Press the * key to enter the VPN Options menu.
VPN Start Mode: Boot *=Modify #=OK
b. During Telephone Operation:
EMH; Reviewed: SPOC 10/25/2006
While the VPNremote Phone is in an operational state (i.e. registered with Avaya Communication Manager) press the following key sequence on the telephone to enter VPN configuration mode:
Mute-V-P-N-M-O-D-# (Mute-8-7-6-6-6-3-#) The follow is displayed:
VPN Start Mode: Boot *=Modify #=OK
Press the * key to enter the VPN Options menu.
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
weblm_vpnphone.doc
7 of 25
2. Setting the NVWEBLMURL Variable
One of the configuration script files downloaded by the VPNremote Phone from the HTTP/TFTP file server is the 46VPNsetting.txt file. The 46VPNsetting.txt file contains many
variables including the variable NVWEBLMURL which identifies all available WebLM servers to the VPNremote Phone. Below are the specifics of the NVWEBLMPURL
variable:
Variable Name: NVWEBLMURL
Valid Values:
o Comma separated URLs of available WebLM Licensing servers. o Length of individual URL cannot be more than 128 characters. o Combined length of all the URLs cannot be more than 252 characters. o Default URL of the WebLM Licensing Server is:
http://xxx.xxx.xxx.xxx:8080/WebLM/LicenseServer
Where xxx.xxx.xxx.xxx is the IP address (or FQDN) of the WebLM server.
Example: o SET NVWEBLMURL http://192.168.1.30:8080/WebLM/LicenseServer
EMH; Reviewed: SPOC 10/25/2006
Solution & Interoperability Test Lab Application Notes
©2006 Avaya Inc. All Rights Reserved.
8 of 25
weblm_vpnphone.doc
Loading...
+ 17 hidden pages