Remote Access for Administration

[BTU789]

Just curious, customer has 406v2 5.0.8. with embedded vmail. Customer wants me to be able to have remote access to change vmail passwords and names. Would it be better for me to use a spare DID or have the customer's IT people set me up with access to their cisco switch? Right now, the ip office is not connected to any networks. After reading the manual it seems a DID would be less complicated. Any thoughts?
Thanks.

 

[CarGoSki]

Do you have ISDN available to your programming computer? If so then you are probably in Europe since no one here in the States would be caught dead with one. Well at least data ISDN is not common at all.

 

[Bas1234]

You could put port 8 on the 406V2 in the normal network, but you'll need tick "Use Port 8 as LAN2:" first the give it a static ip address thru the manager. So you could then access the 406 thru the VPN by using the static ip address in the manager.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[BTU789]

Cargoski- I'm actually in NYC. They have a pri with 60 DID'S. They have plenty spare DID'S if I needed one.
Bas1234- so their IT people will have to give me a static IP address? Sorry I don't work on these systems often.

 

[Bas1234]

Better ask you BP to do it for you, you might end up having trouble in the whole network.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[BTU789]

So what I did was contact my customer's IT people. They gave me a static IP Address for the IP Office. Then I set up a new IP Route in manager. The IP address and Mask are set to all zeros. They also gave me thier gateway address. Lastly, the destination is set to Lan1. The IT people set me up with a login on a local PC and I installed manager onto it. Then I set up an account at logmein.com and I'm now able to remote into the IP Office.
The IT people also said to find out what port is used for remote access. I wasn't sure so I told them I would find out. They said is usually in the installation manual.
Anyway, I hope this info helps.
Thanks for all your input.
Brian

 

[Bas1234]

Here are all ports AVAYA Uses;

http://marketingtools.avaya.com/kno...ergedProjects/monitor/htm_ip_office_ports.htm

Select the ones you need.

If you let them NET fwd; tcp 49152-53246 and udp 49152-53246
To the ip address of the IPO them it will work.

Accept for port 50791 that need to go to the Voicemail server if you have one.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[BTU789]

Great thanks. So I just tell them one of those numbers? Is there any other programming involved?

 

[Bas1234]

Mistyped something "NET fwd" needs to be NAT forward, so if you let them open those ports in the Firewall/Internet Router then you will be able to discover the IPO on the outside WAN ip address of your internet gateway. To check you external ip

http://www.whatismyip.com/

(you need to do this onsite where the ipo is at).

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[CarGoSki]

Its the entire range of numbers.

 

[Bas1234]

Indeed the range not just a number, every port does something different and they need to be one-on-one

so;
External 0.0.0.0 UPD 50808, Internal xxx.xxx.xxx.xxx UDP 50808 (xxx.xxx.xxx.xxx is you IPO)

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[Bas1234]

Above your talking about that they gave you access to the Cisco, so you already have a VPN access?!

Then you don't need the NAT forwardings, just install/use the "Cisco VPN client" on the PC you have the AVAYA Manager on. Let it connect to the internal IP address of you IPOffice.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[Westi]

VPN is way better then port forwarding, port forwarding means you have to have the security watertight and bulletproof and no default passwords or easy to guess passwords on the system. If you have analog backup lines (ATM4) then you can use the integrated modem in the first line port and dial into that one.

Joe W.

FHandw., ACS

I don't suffer from insanity
I enjoy every moment of it

 

[BTU789]

Thanks again for all your help. My customer doesn't want to spend the extra money on the modem daughter card. Especially since this remote access is mainly for name changes and voicemail password changes. But I'll remember this for my next new install.
Have a great day!
Brian