Remote User via VPN

[voippbx]

Here's the situation CEO of company wants to use a softphone. We have one 406 at site A and one 406 at site B, we have the IP SEC Tunneling license from A to B and works well for SCN and UDP.

Now the Network is plain, to say the least. We have a IP connection to interent at both sides. Both IPO's are being the router and setting up the VPN Tunnel. Each site has around 8 Pc's that are connected to Linksys switches and thats it?

How, can I have the CEO remote into Site A and authenticate off the IPO to use his Softphone, with no addl hardware?

Can I have someway to Ras/PPP via IP into the IPO and authenticate that way?

THanks,

 

[kholladay]

Is the CEO at Site B while attempting to authenticate to Site A? If so then nothing is required. Simply enter the IP of the 406 at site A and select the username out of the drop down list.

If the CEO is at a 3rd location, say his home then you should setup a 3rd VPN tunnel from the new "Site C" to Site A and THEN enter teh IP of the 406.

Kyle Holladay
Certified: ACACN, ACSCI, ACSCM, TIA-CTP
"If it worked the way it should you wouldn't need me

 

[voippbx]

I agree, but we are using the IPSEC Tunneling from Site A to B. The CEO will be remote/home/hotel and wants to VPN into the IPO, to use the softphone. I don't want to put the IPO as a public IP Address and they don't have any servers or truthfully and data equipment other than a 8 port data switch. Doesn't this warrant a third party VPN server and client software?

Or can this be done on the IPO? And how?

 

[crystalfusion]

Yes you would need a 3rd VPN tunnel. You could use Cisco software vpn w/ a new firewall, netscreen has a similar solution, and then of coarse Microsoft offers one as well. The Microsoft one doesn't require specific hardware, as it is just a server.

 

[voippbx]

The IPO couldn't do this? I know you can't do nested tunnelling on the IPO, but can I do a dialup via TCP/IP on a broadband remote connection and authenticate through that?

Thanks.

 

[kholladay]

With the IPSEC license in the IP Office you could use the IP Office as your VPN appliance.

Kyle Holladay
Certified: ACACN, ACSCI, ACSCM, TIA-CTP
"If it worked the way it should you wouldn't need me

 

[crystalfusion]

I've seen a whitepaper on using Netscreen Remote with IPO from Avaya, but my experience with NS Remote is crappy, hence I don't recommend it.

 

[ConvergedOne]

You need to VPN with the client computer using either MS VPN Client or Soft Remote client to the existing firewall at the site you want to make calls from thereby putting your ceo's computer on the local network and then point the soft phone to the ip office IP...This also eliminates any need for natting