Remote upgrade IP500 help

[bigfrenchy1986]

I am trying to upgrade an IP500 remotely via port forwarding however it keeps on failing. I have so far opened the following ports however no joy as of yet:

50798
50794
50802
50804
50805
50812
50813

I know Avaya don't officially support this but there must have been someone out there that has successfully done it. Any ideas guys?

 

[Pepp77]

Never done it, would never do it.

| ACSS SME |

 

[IPGuru]

1) Never port forward to the IP Office - you will expose the system to hacking
2) Remote Upgrade is a risky business , what are you going to do in the event of a failure
3) NEVER port forward to the IP Office - you will expose the system to hacking*


* I know this is the same as point 1 but it is so important it is worth saying twice


Do things on the cheap & it will cost you dear

 

[bigfrenchy1986]

The port forwarding is locked down to our WAN IP address only through a managed router. So I have no concerns about security. There is the worry about remote upgrades failing, however I have completed countless upgrades via VPN or Dial up so I have faith in the IPO not falling over.

 

[Pepp77]

If its locked down to your WAN IP and you really want to upgrade remotely then just do an any rule from your WAN IP to the phone system to complete the upgrade.

We do not bother to lock down to ports when doing direct IP access to a phone system if it is locked down to our WAN IP.

| ACSS SME |

 

[bigfrenchy1986]

The router is a network managed router and as such they won't allow all ports to be opened even if it is only from one source WAN. Which is frustrating!

If we had control of the router I wouldn't be having this issue and thus why I wanted to see if anyone knew the specific ports I needed open.

I have the EU going to site today now with a laptop and Teamviewer so that will have to suffice.

 

[IPGuru]

upgrades originaly used TFTP which is port 69
I dont know if avaya have made any changes recently as I have always rebuild the SD card in a card reaer rather than trying to upgrave via the upgrade wizard.


Do things on the cheap & it will cost you dear

 

[bigfrenchy1986]

I will give port 69 a try and see if it helps at all. It's worth a shot.

The customer has re-purposed V1 kits they had from closed sites so SD card won't be an issue.

But then again I will have to deal with the digital handsets needing firmware upgrades from a non-existent Manager PC. Or the potential PSU failure which they seem to be susceptible to.

I have told the customer this and they are sorting it out, but in typical customer IT department style they have winged it without consultation and then expect everything to be working tomorrow.

Oh the joys of telecoms engineering!