9608 VPN setup procedute 2

[MBATech173]

Hello Fellow Techs,

I'm looking to see if someone has a sort of "cheat sheet" on what's required in order to setup a VPN using the VPN features of the 9608 phones. I've always had trouble understanding what's required and the Avaya guide just tells me too much. I just want a streamlined procedure to follow to make this as simple to follow as possible. Thanks


BTS Tech

 

[Brett with two ts]

From what I have found, the VPN feature within the handset will only work with routers that support IPsec XAUTH such as Cisco, Fortinet etc. and they are expensive puppies. You are way better setting up a site-to-site VPN with your routers and then manually configure the handset with the required IP addresses for the handset, IP500, gateway and mask. Much easier and a lot less expensive.

 

[Westi]

2 half cheap routers that are not really secure vs 1 good router and then just VPN phones?

was never a question for me TBH. Security at the cost of convenience or price comes at the cost of security.

BrettMerriman is right the VPN has to be IPSec but for a couple of hundred bucks you get a decent router that does it.
Then configure phase 1 and 2 and the phone programming is not the problem I have found, it is normally the router that sometimes has issues because of the way they are programmed and the say they are handling the credentials.

I have an old document that I made in 2014 that I use sometimes as reference. It was with a Watchguard firewall. I will attach it to this post.The 9621 has the same options that the 9608 has so no worries about the different phone type.

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[MBATech173]

Thank you both for the feedback. And, I agree, setting up the firewall with the VPN connection is much easier and I always try and convince the customers to go that route instead.


BTS Tech