IP phones on IP office

[Bcpaul]

did anyone set up an IP phone 4612 working on IP office 403?

We dont seem to have got it working.

the voice cant be heard on another phone.

Bcpaul

 

[JayNEC]

On another IP phone or digital/analog phone?

Do you have VCM's? More details are needed.

 

[Morrack]

I've done it before, it's usually not too hard if connecting directly to the LAN ports on the 403. I'll need more info about your setup to offer much assistance.

Except... I have this sneaking feeling you perhaps don't have a VCM module installed in your 403?

Peter

 

[Bcpaul]

its like this.

We have the IP office in NYC , NY and the IP phone is outside in florida.
So the IP office is on the world wide web.
And we need to make an IP Phone pointed to the IP address of the IP office to connect and start working as an extension of the IP office in NYC.
I will confirm about VCMs.

Bcpaul

 

[Morrack]

If everything is working except your voice path I'm pretty sure it's a lack of a VCM card in the IPO.

Since you've raised this, I have a general question for everyone, maybe some of you with more data background than I can give a good answer to this. How secure can you really make an IP Office that has a public IP address directly on the internet? To me, it seems like you might as well hang a neon sign up advertising for phrackers looking to make free LD calls....

Peter

 

[IPGuru]

by all means try it with Mine peter, send me an email & I will give you my IP address.
Im pretey sure you wont beat the IPO firewall or I wouldnt risk it
(shields-up cant see me so Im of to a good start)

 

[Morrack]

Are you using a 412 or SOE? What kind of data pipe do you have? In my experience most locations get their bandwidth on an ethernet connection, so unless it's a SOE or 412 you can't use the firewall.... correct?

Peter

 

[IPGuru]

I have a SOE connected to a 1mb cable modem (1mb down 256k up)
you cant use the ipo firewall on lan-lan routes but if you have an external internet connection you do have a quality firewall installed already dont you? this should ristrict access to the IPO as required.

I would also turn of the auto create ext in the h323 tab just to make things a little more dificult.

 

[IPGuru]

it looks like a correctly configured logial lan entry would also alow use of the IPO firewall on lan-lan connections but I am unable to test untill I return to W**k tomorrow

 

[Morrack]

Think smaller sites using 403 or 406. No Cisco Pix or whatever big honkin special purpose firewalls on the network, nothing really except an ADSL modem. Public IP address for the IPO, another for the VMS PC which runs manager for the TFTP capability. The kind of setup described in tech tip 026 from avaya.

Can this truly be secure??

 

[IPGuru]

I would think not, but does anyone realy use that sort of setup?

 

[Morrack]

I have a customer who is asking about it, I've been keeping him at bay by telling him I'll need him to sign a liability waiver if he wants me to do this.

If it could be secured I would explore the option - but it sounds like the consensus is not without a PIX or similiar product?

 

[IPGuru]

I would sertainly connect the ADSL Via a Router.
I would also not give the IPO a route to the ADSL unless it was necesary. (VPN tunneling should allow remote IP Hones if req. & would be a more secure option)

 

[ccmuser]

We run more call manager setups then the crappy ip office=), but a VPN tunnel works great over adsl for a limited phone network.. we have over 50 small offices/home offices doing this.

You don't really need the VPN but awlway implement now just for the fact that they get decato data VPN and true work at home capability

 

[Morrack]

The issue we are running into is performance. The ISP providing the backbone assures me he can provide QoS end to end - IF he sees a voice packet. As soon as I send that voice packet down a VPN tunnel the ISP's routers see a data packet. The customer doesn't give a whoop about encrypting his conversations, so long as he isn't vulnerable to phracking his 403.

Peter

BTW currently using Multitech VPN routers. 4M ADSL to 403 dedicated for voice, customer has seperate pipe for his data needs.

 

[ccmuser]

who is the provider? End to end QOS over adsl? Are they mapping these dsl circuits directly into your ATM or frame relay circuit? Or Are you an MPLS customer already?

 

[Morrack]

To be honest I'm not sure how they're doing it, except they have their own core routers and backbone, the adsl is only for last mile access to the cust prem. Those core routers are linked to the internet, so I can surf across these connections if I wanted to (which I don't), but as long as the traffic is going between two adsl circuits that are both provided by this same provider they assure me it stays on their network which can prioritise voice.

Peter