Avaya introduced a new remote worker feature for the IP Office line that allows a remote H.323 phone to be used with a VPN. This un-encrypted option can be advantageous for low-tech environments where a suitable VPN/Firewall gateway is not available. Keep in mind that the voice conversations on this phone are not encrypted.
Step 1: To set up this option, the user must have the pre-requisite license and the user must be enabled for Remote Worker.
Step 2: On the LAN 1 -> VoIP tab enable Remote Extn and set the RTP Port Number Range (Remote Extn) to a value sufficient for the remote phones. This range must be a minimum of two ports per remote extn. An excessive range value should be avoided as it poses a higher security risk.
Step 3: On the LAN 1 -> Network Topology tab add the Public IP Address and set the firewall type as static port block.
Step 4: On the IP Route section ensure a default IP route entry exists.
Step 5: On the firewall at the IP Office location open UDP ports 1719, 1720 and the ‘RTP Port Number Range (Remote Extn)’ specified in step 2. These should be translated through NAT from the Public IP Address (step 2) to the IP Office LAN 1 IP Address. As each firewall vendor is different, the vendor’s documentation will need to be referenced for specific procedures. Also ensure that no H.323 ALG or Transformations are enabled on the Firewall.
Step 6: Configure the phone as you normally would with the exception of setting the Call Server IP Address to be the Public IP address (used in Step 3 and 5).Learn more about this topic at scansourcecatalyst.com >