MiVoice Business Release 8 / AMC Licensing via (DMZ) Proxy

[teatreehs]

Hi all,
can someone please explain to me in principle how amc licensing via a proxy works; where do i 'tell' the 3300 to use this proxy for licensing? Thx in advance !!

 

[RAMitel]

As you mention 3300 I presume you have a physical controller not a virtual instance.

The Software Installer tool can be set to use a proxy for internet access when performing new installs/upgrades however the physical controller needs to be able to access register.mitel-amc.com and sync.mitel-amc.com. It could however also be licensed offline.

Could a rule be made on the proxy server to allow the 3300 to access the above web url's?

 

[teatreehs]

In the docs i have read SSH / Port 22 is necessary for amc licensing - but you are talking about web url's - this means that we now are talking about http/80 or https/443 !? And 2nd, i cannot configure a webproxy in ESM like in Windows, correct.How looks such a setup in the proxy exemplary, I have thus no experience. THX !

 

[RAMitel]

The software Installer will use port 22 then 8222 or 80 if port 22 will not connect.
If the 3300 syncs to the AMC it uses port 443 to the url's already mentioned.

 

[teatreehs]

Thanks RAMitel, the 3300 is already in place, customer needs some more licenses and therefore i want to sync; but customer enviroment is 'high' secure, they want to know exactly what's happening during sync process. Just for clarification - you don't program the proxy in 3300 system, correct - routing etc. has to be done by customer devices !?

 

[RAMitel]

Correct no proxy on the 3300, the proxy server would have to whitelist the url's.

The other way is to license offline.

 

[tlpeter]

I use a 4g modem for that.
Connect it to the controller and laptop and there you go.

BAZINGA!

I'm not insane, my mother had me tested!

 

[teatreehs]

Even if this demand is not directly related to Mitel, purely interest for the sake, how does the 3300 controller 'understand' that he should use a proxy and under what name / IP this is attainable - or how does this fundamentally work, it's not clear to me as a non it guy and I would like to understand this ??

 

[RAMitel]

Ok let me try to explain using a basic scenario with a windows PC on the network and a proxy server;

A PC will have a default gateway (usually the router for internet access) some networks will have a rule disallowing internet access from the LAN so you therefore have to input the proxy server details within the settings for IE. The router will have a rule to allow the proxy server Internet access.

On the 3300 you cannot input the proxy server details so the router would require a rule to allow the 3300 IP address access to the Mitel url's.

The SI tool would use the proxy details entered in IE on the PC, if access to Mitel is still blocked the url's would require whitelisting on the proxy. You can test by going to

https://www.mitel-amc.com

from a PC on the LAN, if the website loads you should have no problems.

As mention by tlpeter a common way to get around this is to use a 4g dongle on your PC to get access to the AMC which works quite nicely.

If you have access to the Technicians Handbook take a look at page 30 onwards, it may be helpful.

 

[jpruder]

I don't think there is any setting withing a 3300 to set a proxy. Controller variant may be helpful, but on;y if you can use the gateway nic to forward in a trusted way. If this was me, I'd license using the software installer tool, new install...only licensing checked and go.