Nortel Networks Amplified Phone 2212 User's Manual
Contents
1. Address Pool Blackout Interval 0 seconds Amount of time before an address is available for reissue Proxy ARP and tunnel to tunnel traffic Use Procedure 6 to enable proxy ARP and tunnel to tunnel traffic Procedure 6 Enabling proxy ARP and tunnel to tunnel traffic 1 Inthe Contivity Secure IP Services Gateway navigator select SYSTEM gt Forwarding The Forwarding window appears as shown in Figure 14 on page 36 WLAN Handset 2212 Installation and Configuration for VPN Page 36 of 62 IP address pool configuration Figure 14 Forwarding options EETTUETUTICUTITTUUENENESSSS ox File Edit View Favorites Tools Help a eek gt A search Favorites media lt 4 Address e http 131 149 210 62 manage ltopman htm gt Go STEM E Proxy ARP State Route Types Enabled User Tunnels Branch Office Tunnels Physical Interfaces NAT Gratuitous ARP Enable Gratuitous ARP Tunnel to Tunnel Traffic Iv Allow End User to End User J Allow End User to Branch Office Allow Branch Office to Branch Office Cancel LER Done fep Internet 2 Inthe Proxy ARP section select the route type you want to enable 3 Select Allow End User to End User 4 Click OK End of Procedure 553 3001 229 Standard 1 00 November 2005 Page 37 of 62 IPsec options and groups Contents This section contains information on the following topics Droduch sue2. 2 ESP 56 bit DES with MOS Integrity Enabled ESP 40 bit DES with SHAT Integrity Disabled ESP 40 bit DES with MOS Integrity Disabled ESP NULL Authentication Only with SHAT Integrity Disabled ESP NULL Authentication Only with MDS Integrity Disabled AH Authentication Only HMAC SHAT Enabled pe AH Authentication Only HMAC MD5 Enabled IKE Encryption and Diffie Hellman Group 56 bit DES with Group 1 769 bit prime Enabled J 4 Triple DES with Group 2 1024 bit prima Enabled Triple DES wath Group 7 ECC 163 bit field Disabled 128 bit AES wath Group 5 1536 bit prime Disabled 129 bi AES with Group 8 ECC 203 bit fieldy Disabled 128 bit AES with Group 2 1024 bit primey Disabled 256 bit AES with Group 5 1536 bit prime Disabled 266 bit AES with Group 8 ECC 283 bit field Disabled Accept ISAKMP Initial Contact Paytoad Enabled Perfect Foard Secrecy Disabled Ji 2 Client Auto Connect Disabled Banner None Display Banner Disabled Failower Tuning Enabled Interval hh mm ss 00 01 00 Max Number of Retransmissions 3 Anti Replay Enabled Client Screen Saver Password Required Disabled Client Screen Saver Activation Time 5 Minutes Allow Password Storage om Client Disabled Compression Disabled Rekey Timeout 09 00 00 Rekey Data Count None NORTEL Domain Name None NETWORKS Primary ONS None Secondary ONS None Primary WINS None Secondary WINS None Nortel Client
3. First and Last name Select the Group to which the user will belong In the User Accounts section enter a User ID and Password Re enter the password Click OK y OO 2 Q End of Procedure WLAN Handset 2212 Installation and Configuration for VPN Page 48 of 62 Users interface and firewall configuration Second interface configuration Use Procedure 11 to configure the second interface Procedure 11 Configuring the second interface 1 Inthe Contivity Secure IP Services Gateway navigator select SYSTEM gt Users The Second Interface window appears as shown in Figure 23 Figure 23 Configuring second interface 2 contivity Secure IP Services Gateway Ele Edt view Favorites Tools Help Hek 5 OA A ese Graves uve BS GO AH http 131 149 210 62 manage kopman htm Interface Description State Type Actions Fast Ethemet Enabled Private Configure Statistics J IP Address Subnet Mask Interface Filter Actions ermit all 131 149 210 61 255 255 255 224 Conty interfaca Filtar in Edit Delete use Interface Description State Type Actions Slot 1 Interface 1 Enabled Public Configure Statistics Acquiring IP address from DHCP server Use Refresh button to update acquisition results Use Cancel acquisition to cancel the process Refresh Cancel acquisition 2 Click Configure as indicated by the arrow The Second Interface detail window appears as shown in Figure 24 on page 49 5
4. Go Group Actions Base Edit 2 Click Add 3 Enter a Group Name and select a Parent Group The Group details window appears as shown in Figure 17 on page 40 WLAN Handset 2212 Installation and Configuration for VPN Page 40 of 62 IPsec options and groups Figure 17 Group details ziBi xi Ele Edit view Favorites Tools Help amp Back gt Q3 A Qsearch ijFavorkes PMedia dGiES3 2 Address a http 131 149 210 62 manage itopman htm hd ee i 4 Click Apply 5 Click OK End of Procedure WLAN Handset 2212 group IPsec variables Use Procedure 9 to set IPsec variables for a WLAN Handset 2212 group Procedure 9 Setting IPsec variables for a WLAN Handset 2212 group 1 Inthe Contivity Secure IP Services Gateway navigator select PROFILES Groups The Add Groups window appears as shown in Figure 18 on page 41 553 3001 229 Standard 1 00 November 2005 IPsec options and groups Page 41 of 62 Figure 18 Add groups Contivity Secure IP Services Gateway oj xl Be Edt Wow Faves Tools tp 8 8 amp Bxk gt A X Qsearch airavortes Preda Address i http 1 131 149 210 62 manage topman htm z ec Group Base Edit Base 2212 Handset Edit Delete 2 Click Edit next to the group for which you want to set the variables The IPsec Variables window appears The Connectivity section is shown in Figure 19 on page 42 the IPsec section is
5. M v qub e dard 15 Code and key code requirement 2esusces e e ets 16 SCOP OF Tas docuit s coo pre RGQ3x needs Meek CERTE RR ES 16 Getting Started iiiooes os v arr Rn 19 DICE Luca o3 aee ed abo Pea ad da PAs Nu dep EN ee dues 19 Miodio is coca vv ER E DRE RR WA WAR HPERUOK UA REA QR 19 Configuring ibe Contivity VPN router iiis cases Ryu Rn Res 19 Dastallng the Lacence Keysia abes obere RR REP S E ERE RPG 26 DHGP GONGNS Luonaaacaueuuszakbeseraburaua es 29 COURS ee sse RR CENT UeRRR S EA Pad pe ede dard reden 29 WLAN Handset 2212 Installation and Configuration for VPN Page 6 of 62 Contents IntrGdeCtlol acu cc dake T EE ESETE L ATETEA EENT 29 The DUC P SENG o in Er e Edo S Db b rp E dpi ee decia 29 Checking COUNECNVIE ooiuaescE PRECES INRRRCKRG renee eee 30 DCP Se Fev PC 31 IP address pool configuration 33 ans m EU a MOURN osito pU FSI V nee DERECHA EP KR eee di qp bbs 33 IP address pools 6 6 5055 c845649460 4450 RRAG GR ARR REG OR dp ERR 33 Proxy ARP and tunnel to tunnel traffic 04 33 IPsec options and groups 37 ones inq ccLeci ul eee headiieetivceadatesisgasiauetiaes 37 T feodie lodi oii enner ENA D Qa dd 3d IPsec global variables ied coc dree EROR ep E S ER CREDE PIE 37 WLAN Handset 2212 group definition ssis issisisorrirorsss 39 WLAN Handset 2212 group IPsec variables 40 Users interface and firewall configuration 45 Coetu Cerp EQ ade ead des
6. for VPN Page 24 of 62 Getting started 22 23 24 25 Check the connectivity a Log back into your system b Open a command line window c Ping the gateway If you are able to ping the gateway the VPN router is configured properly Open Microsoft Internet Explorer Enter the Management IP address of the VPN router in the Address bar Click Manage Switch The IP Services Gateway home page appears as shown in Figure 7 on page 25 553 3001 229 Standard 1 00 November 2005 Getting started Page 25 of 62 Figure 7 IP Services Gateway home page 131 149 210 62 Edit View Favorites Tools Help Bak gt 9 A Search yFavorites Address http 131 149 210 62 Welcome to the Contivity Secure IP NORTEL Services Gateway NETWORKS Ongoing Management MANAGE SWITCH The manag MANAGE Extranet Switch Pf neo 7 26 Enter your login and password You can now carry out any required administrative duties End of Procedure WLAN Handset 2212 Installation and Configuration for VPN Page 26 of 62 Getting started Installing the Licence Keys Use Procedure 2 to install licence keys IMPORTANT The Contivity Stateful Firewall key must be installed for the solution to work Procedure 2 Installing licence keys 1 _In the Contivity Secure IP Services Gateway navigator select ADMIN gt Licence Keys 2 The Key Installation window appears as shown in Figure 8 Figure 8 Key I
7. hae robe de cee oN edge 45 MGR oa cori teen neces eine Ae equa eee ee bids 45 User accounts PET cT 45 second interface configuration uu uoeos str SOARS RETE ERR EAS 48 Firewall configurato os ocu ere Re RR re eR eR es 52 Handset configuration 57 COMMS Pr P 57 lunes vic C EET AT Configuring ihe handset occeseicse eed et Re RR ARR 57 553 3001 229 Standard 1 00 November 2005 Page 7 of 62 List of procedures Procedure 1 Configuring the VPN router 19 Procedure 2 Installing licence keys Lee 26 Procedure 3 Disabling the DHCP server luesssse 29 Procedure 4 Enabling the DHCP relay 31 Procedure 5 Configuring an IP address pool 33 Procedure 6 Enabling proxy ARP and tunnel to tunnel traffic 35 Procedure 7 Setting IPsec global variables 37 Procedure 8 Defining a WLAN Handset 2212 group 39 Procedure 9 Setting IPsec variables for a WLAN Handset 2212 rO 3px eR baie RESI DePLDEE tect ELS Era os 40 Procedure 10 Adding a user account ssss 45 WLAN Handset 2212 Installation and Configuration for VPN Page 8 of 62 List of procedures Procedure 11 Configuring the second interface Procedure 12 Configuring the firewall eese Procedure 13 Configuring the WLAN Handset 2212
8. interface and firewall configuration Firewall configuration Use Procedure 12 configure the firewall Procedure 12 Configuring the firewall 1 Inthe Contivity Secure IP Services Gateway navigator select SERVICES Firewall NAT The Firewall Options window appears as shown in Figure 27 Figure 27 Firewall options Z Contivity Secure IP Services Gateway Ble Edt View Favorites Tools Help Heak gt A A search siFavortes Ameda lt Address amp npa 149 210 62 manage kopman htm Configuration Enabled Firewall NAT Type Firewall NAT Policy Action e Contivity Firewall Edit Contivity Stateful Firewall Policy System Default v Manage Policies Contivity Interface Filter Interface NAT NAT Policy PrivateToPublic Manage Policies Anti Spoofing Edit Malicious Scan Detection Edit c No Firewall A firewall must be enabled to allow interface traffic select either interface packet filters or the Contivity Stateful Firewall Enable Contivity Firewall requires the Interface Filter to be permit all in order for OSPF to function properly System 2LAN Contivity Tunnel Filter Enable Contivity Tunnel Management Filter V Enable Select Contivity Firewall Select Contivity Stateful Firewall Clear Contivity Interface Filter Clear Interface NAT o a fF Q N Clear Contivity Tunnel Filter 553 3001 229 Standard 1 00 November 2005 Users interface and firewall configuratio
9. using the conn Wee E DI re Procedure 14 Configuring the WLAN Handset 2212 using the BEBO E E nV S quami E eas ap ERA AE AES 553 3001 229 Standard 1 00 November 2005 Page 9 of 62 How to get help This section explains how to get help for Nortel products and services Getting Help from the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Technical Support Web site www nortel com support This site provides quick access to software documentation bulletins and tools to address issues with Nortel products More specifically the site enables you to e download software documentation and product bulletins e search the Technical Support Web site and the Nortel Knowledge Base for answers to technical issues e signup for automatic notification of new software and documentation for Nortel equipment e open and manage technical support cases Getting Help over the phone from a Nortel Solutions Center If you don t find the information you require on the Nortel Technical Support Web site and have a Nortel support contract you can also get help over the phone from a Nortel Solutions Center In North America call 1 800 4NORTEL 1 800 466 7835 WLAN Handset 2212 Installation and Configuration for VPN Page 10 of 62 How to get help Outside North America go to the following Web site to obtain the phone number for your region www nortel com callus Getting Help from a spe
10. 0 36 27 u Interface IP 131 149 210 61 27 VPN Router Contivity Mgmt IP 131 149 210 62 27 Firewall Enabled amp l Appropriate Rules defined 10 10 10 11 24 IP Address of the Voice VLAN 10 10 10 10 24 10 10 10 100 24 TFTP Server WLAN Handset 2212 Installation and Configuration for VPN Page 18 of 62 Overview IMPORTANT The figures in this document are examples of the types and format of the information required for a specific step Substitute information for your site accordingly 553 3001 229 Standard 1 00 November 2005 Page 19 of 62 Getting started Contents Introduction This section contains information on the following topics InttcdBctloll ae inci ben stdae See RSS ERI ECEREPDPIC RP EUR p ees 19 Configuring the Contivity VPN router icis ous y uds 19 Installing the Licence Reve iosseossee ee Reda 26 This section describes how to install and configure the WLAN Handset 2212 for Virtual Private Network VPN Configuring the Contivity VPN router After attaching the console to your PC use Procedure 1 to configure the VPN router Procedure 1 Configuring the VPN router 1 Select Start Control Panel 2 Double click on System The System Properties window appears 3 Select the Hardware tab 4 Click Device Manager The Device Manager window appears WLAN Handset 2212 Installation and Configuration for VPN Page 20 of 62 Getting started 5 7 8 Click on t
11. 53 3001 229 Standard 1 00 November 2005 Users interface and firewall configuration Page 49 of 62 Figure 24 Second interface details Zl Contivity Secure IP Services Gateway E E E 5 xi Ble Edt Mew Favortes Tools Heb Heak gt O A A Rech Favorites Gmeda AD 3 3 8 0 Configuration Interface Slot 1 Interface 1 State Enabled Disabled Interface Type Private C Public Speed Duplex AutoNegotiate z Description MTU i500 MAC Pause MAC Pause Enabled MAC Pause Ticks 31 Value range between 31 and 65 535 Free Receive FIFO Threshold 50 v 802 1Q ARTEL 7 Di CRTEL s State C Enabled Disabled 3 Inthe Configuration section select Private for Interface Type In the 802 1Q section select Disabled for State 5 Reboot the computer for the settings to take effect Note The need to reboot may depend on the router model as there may be a spare private interface on the model 6 Once the computer has rebooted reload the second interface window WLAN Handset 2212 Installation and Configuration for VPN Page 50 of 62 Users interface and firewall configuration Figure 25 Cancel acquisition file Edit View Favorites Tools Help eak gt Q A A Qsearch Favorites GPredia A D 3 A 8 E 62 manage ltopman htm ini x Interface Description State Type Actions Fast Ethernet Enabled Private Configure Statistics Actio
12. 600 8 N 1 scRoLL caes NUM Capture Print echo 12 Enter 1 The Interface Menu window appears as shown in Figure 4 on page 22 WLAN Handset 2212 Installation and Configuration for VPN Page 22 of 62 Getting started Figure 4 Interface menu Contivity 1050 HyperTerminal 5 x File Edit View Call Transfer Help Djs e cl el Interface Menu 0 Slot 0 Port 1 Private LAN Management IP flddress 192 rah Y 2 Subnet Mask 255 255 255 0 Interface IP fiddress 192 1 Subnet Mask 255 255 255 de 1 slot 1 Port 1 Public LRN ddress Subnet Mask 0 0 0 0 Speed Duplex flutoNegotiate R Return to the Main Menu Please select a menu choice 0 Connected 0 08 14 Jansiw 3600 amp N 1 scout caps num Capture Print echo 13 Enter 0 The Private Trusted Interface window appears as shown in Figure 5 Figure 5 Private Trusted Interface Contivity 1050 HyperTerminal ni xj File Edit View Cal Transfer Help Dias e cle e Please select a menu choice yr Slot 0 Port 1 Private L Management IP Address o2 i t n Subnet Mask 255 255 255 0 Interface IP Address 192 168 Subnet Mask 255 255 255 0 Type 0 0 0 0 to delete Just type CR to skip Old Management IP Address 192 168 1 2 Subnet Mask 255 255 255 0 New Management IP Address 131 149 210 62 Old Interface IP Address 192 168 1 1 New Interface IP fiddress 131 149 210 61
13. D ROM To obtain Nortel documentation on CD ROM contact your Nortel customer representative 553 3001 229 Standard 1 00 November 2005 Page 15 of 62 Overview Contents Introduction This section contains information on the following topics INGCOMCUON soning eden p beedQred3 bseqpEvedgddueb yd e dp res 15 Code and key eode veguiPemells 22 2 9 0 C b RESORT RES ba 16 Scope of this document osos eR eR yere nee en 16 ASSUMP a s be ER CRUCE GN qQASdEER eee d Edu 16 The configuration in this document 0 200005 17 The WLAN Handset 2212 is a mobile handset for workplace IP telephone systems The handset operates over an 802 11b wireless Ethernet LAN providing users a wireless Voice Over IP VoIP extension By seamlessly integrating with the Nortel IP telephony system handset users are provided with high quality mobile voice communications throughout the workplace The handset gives users the freedom to roam throughout the workplace while providing all the features and functionality of an IP desk telephone The WLAN Handset 2212 provides a wireless extension to the Nortel Meridian 1 and CS 1000 VoIP solutions The handset supports the UNIStim protocol a proprietary protocol developed by Nortel for communication between a Nortel IP telephone and a Nortel PBX The handsets reside on the wireless LAN with other wireless devices using Direct Sequence Spread Spectrum DSSS radio technology The handset radio transmit
14. DI DE BeadPhone Serial Active EI pw M iv iv IM iv iv 3 Read BB Group group1 Open Save Copy Write Phone MAC E wie EH User 100 Open Save l settings z tor Ver Eno E Sys Grp Ust Editable settings Phone settings LC Oo License Key 07 lt 89 112 LE Extension Next Syo IP address M wo Static IP Phone IP JD Next vyg Static IP Default Gateway M LEN Static IP Subnet mask M cce TFTP IP Address wo SVP IP Address M 4 Place the handset in the cradle 5 Click Read Phone on the configuration tool The tool is populated with the VPN settings as shown in Figure 34 on page 59 553 3001 229 Standard 1 00 November 2005 Handset configuration Page 59 of 62 Figure 34 Config Cradle with VPN Settings iix File Settings View Help System system Open Save Sys Grp Usr ys Grp Ust ReadPhone Serial 650216965 Active EE G 1 opnij sejm KE Ad ite Phone MAC 0nso7a034rgs Reed ES oup group pen Copy Write Phone 30 72 03 46 Write NN Use 100 Open Save mm settings gt Stop Ver 87 055 Enor M cce E55 ID Static Enty NENNEN E LEN Security M None None s WEP H LE VPN Server IP sco FSA 25 j WPA PSK a wPA2PSK O Ready VPN 6 Click Save End of Procedure Handset screen method Use Procedure 14 to configure the WLAN Handset 2212 using the screen method Procedure 14 Configuring the WLAN Handset 2212 using the screen 1 Turn
15. ES with SHA1 Integrity v iv Vv lv Iv Iv ESP 40 bit DES with MD5 Integrity ESP NULL Authentication Only with SHA1 Integrity ESP NULL Authentication Only with MD5 Integrity AH Authentication Only HMAC SHA1 AH Authentication Only HMAC MD5 IKE Encryption and Diffie Hellman Group a 56 bit DES with Group 1 768 bit prime Triple DES with Group 2 1024 bit prime NEQRTEL Triple DES with Group 7 ECC 163 bit field NETWORKS 128 bit AES with Group 5 1536 bit prime 128 bit AES with Group 8 ECC 283 bit field 128 bit AES with Group 2 1024 bit prime 256 bit AES with Group 5 1536 bit prime 256 bit AES with Group 8 ECC 283 bit field qaq aa q a Only valid with User Groups Only valid with User Groups a 553 3001 229 Standard 1 00 November 2005 IPsec options and groups Page 39 of 62 2 Select all the options in the Authentication Encryption and IKE Encryption and Diffie Hellmann Group sections 3 Click OK End of Procedure WLAN Handset 2212 group definition Use Procedure 8 to create a WLAN Handset 2212 group Procedure 8 Defining a WLAN Handset 2212 group 1 Inthe Contivity Secure IP Services Gateway navigator select PROFILES Groups The Add Groups window appears as shown in Figure 17 on page 40 Figure 16 Add groups imix Ble Edt Yew Favortes Joos Help Heak 5 A d sero Address e http 131 149 210 62 manage ltopma
16. MUTING Tie NOES aa rese pL EERRPDESEPPEPR hoes duns 45 f Introduction This section describes how to configure the WLAN Handset 2212 Configuring the handset There are two ways to configure the WLAN Handset 2212 e Using the configuration cradle This method is preferred for bulk configurations e Using the handset screen Configuration cradle method Use Procedure 13 on page 58 to configure the WLAN Handset 2212 using the cradle method WLAN Handset 2212 Installation and Configuration for VPN Page 58 of62 Handset configuration Procedure 13 Configuring the WLAN Handset 2212 using the cradle 1 Before you begin do the following a Remove the battery before placing the handset in the cradle b Connectthe serial cable to the COM port C Loadthe latest software 0 60 or later on the telephone The configuration cradle only works with Phase II software 0 60 or later 2 Decompress the configuration cradle file version 2 11 02 to a folder on the hard drive 3 Double click on PhoneConfig exe in the folder The Config Cradle window appears as shown in Figure 33 The settings forthe telephone are grouped into three main categories System Group and User User is the default group for the settings at startup and this should be sufficient for a few phones For larger deployments planning will be required for the settings Figure 33 Config Cradle window ioi x File Settings View Help System system Open Save Bi E
17. Nortel Communication Server 1000 Nortel Networks Communication Server 1000 Release 4 5 WLAN Handset 2212 Installation and Configuration for VPN Document Number 553 3001 229 Document Release Standard 1 00 Date November 2005 Copyright Nortel Networks Limited 2005 All Rights Reserved Produced in Canada Information is subject to change without notice Nortel Networks reserves the right to make changes in design or components as progress in engineering and manufacturing may warrant Nortel Nortel Logo the Globemark This is the Way This is Nortel Design mark SL 1 Meridian 1 and Succession are trademarks of Nortel Networks Page 3 of 62 Revision history November 2005 Standard 1 00 This document is a new NTP issued to support Communication Server 1000 Release 4 5 WLAN Handset 2212 Installation and Configuration for VPN Page 4 of 62 553 3001 229 Standard 1 00 November 2005 Page 5 of 62 Contents List of procedures 26 0 cee cress eee nre 7 HOW TO gel help csccciccciciossnsdnuseceeces 9 About this document 11 ub m eeCMCCTLI 11 Applicable SySIendS ires eee oO RE ARP NR VC EORR Pa wes 11 hended AMENE oaa ape pt REOR DREISER ae Ep Eden 13 iniquo e Em 13 Relat d information serperek ace ERREUR Shee RX C RR CR ERA 14 OVENIEW 695656 414s Rd KG ADAC ee OR CR a CD 15 OBEN Lead ped aad a dtea dedos Eae ERI RR EEG 13 Diy OURO 63545 sce da Sd dep dete Poe
18. Old Subnet Mask 255 255 255 0 New Subnet Mask 255 255 255 224_ E gt Connected 0 16 36 ANSIW fsooe N i SCROLL CAPS NUM Capture Print echo E 14 Enter the following a Management IP Address 553 3001 229 Standard 1 00 November 2005 Getting started Page 23 of 62 b Interface IP Address c Subnet Mask 15 Enter R to go back to the Main Menu 16 Enter 3 The Default Private Route Menu appears as shown in Figure 6 Figure 6 Default Private Route Menu Contivity 1050 HyperTerminal a ini xi File Edit View Cal Transfer Help Dle e sole el Default Private Route Menu A Add New Gateway R Return to the Main Menu Please select a menu choice R R A Just type CR to skip Please enter the new gateway address x x x x 131 149 210 33 Please enter the cost Numeric greater than zero 1 Default Private Route Menu 0 Gateway IP Address 131 149 210 33 Cost 1 A Add New Gateway R Return to the Main Menu Please select a menu choice 0 A R R Connected 0 58 45 ANSTW 9600 8 N 1 scRou CAPs Num Capture Print echo 17 Enter A 18 Enter a static route to point all the traffic to the default gateway in the Please enter the new gateway address field 19 Enter a cost in the Please enter the cost field The default value is 1 20 Enter R to return to the Main Menu 21 Enter E to exit and save the configuration WLAN Handset 2212 Installation and Configuration
19. P options Figure 9 DHCP Server options Ini xi Ele Edt View Favorites Tools He EI Heak gt A A Qsearch Favorites Fmedia J D 3G sl E jaddress amp http isii49 200 62 manage opmanhtm v e amp G DHCP Server DHCP Service r Enabled Operational State DHCP server is enabled and running Debug Message Log Enabled Restart Service Slot Interface DHCP Server Enabled 0 1 r 1 1 r Default Options Pool Select Pool Mask Name Description c 192 158 1 0 255 255 255 0 RTEL e NETWORKS Add Delete Configure 2 Clear the DHCP Enabled Server check box 3 Click OK End of Procedure Checking connectivity Test the connectivity for possible routing errors Open the Console port and ping the DHCP Server WLAN Application Gateway 2246 and the PBX 553 3001 229 Standard 1 00 November 2005 DHCP relay DHCP options Page 31 of 62 Use Procedure 4 to enable the DHCP Relay Procedure 4 Enabling the DHCP relay 1 Inthe Contivity Secure IP Services Gateway navigator select SERVERS gt DHCP Relay The DHCP Relay Options window appears as shown in Figure 10 Figure 10 DHCP Relay options Z Contivity Secure IP Services Gateway j xj He Ek Wow Feeder Tek Heb ES Heak gt A A Qseach Favores veda A B SG SU Tj Address E rtosir131 149 210 52 manageftopman hm z es DHCP Relay DHCP Relay Interfaces Physical Interface private B En
20. Requirements Minimum Verion None Client Policy None IPsec Transport Mode Connections Enabled Client Dynamic ONS Registration Enabled WLAN Handset 2212 Installation and Configuration for VPN Page 44 of 62 IPsec options and groups 4 Configure the IPsec variables Click Configure in the IPsec section Enable the following items indicated by arrows in Figure 20 on page 43 e e e User name and Password ESP Triple DES with SHA1 Integrity ESP Triple DES with MD5 Integrity ESP 56 bit DES with SHA1 Integrity ESP 56 bit DES with MD5 Integrity AM Authentication Only HMAC SHA1 AM Authentication Only HMAC MD5 56 bit DES with Group 1 768 bit prime Triple DES with Group 2 1024 bit prime Accept ISAKMP Initial Contact Payload c Disable the following indicated by arrows in Figure 20 on page 43 Accept Forward Secrecy Compression End of Procedure 553 3001 229 Standard 1 00 November 2005 Page 45 of 62 Users interface and firewall configuration Contents This section contains information on the following topics nodus cc bideces coos E RRCERAASEN ERR UTER ERR dA E e 45 User BOUT oc eat ente tbe RC ane ede hee eee Saas 45 Second interlace con gurallon v4 12ibkkekaedcbbeichbea kk PERS 48 Firewall cone tatloi 4aciedes co rece R d EID ba ea Rob d 32 Introduction This section describes how add user accounts configure the second interface and configure the firewall Us
21. abled OK Cancel State DHCP Servers Action 10 10 10 11 Enabled 131 149 209 39 0 0 0 0 0 0 0 0 Edit Delete Disable OE e sisi Z Internet 2 Select Enabled Note Ensure that you add appropriate routes in your network so that the DHCP response from the DHCP server reaches the VPN router 3 Click OK End of Procedure WLAN Handset 2212 Installation and Configuration for VPN Page 32 of 62 DHCP options 553 3001 229 Standard 1 00 November 2005 Page 33 of 62 IP address pool configuration Contents Introduction This section contains information on the following topics IntGdlctloli iaces sizes REOS Les boasted ree dO dpi gb 33 IPaddrest Pooier een 33 Proxy ARP and tunnel to tunnel traffic 00 33 This section describes how to configure an IP address pool and enable proxy ARP and tunnel to tunnel traffic IP address pools Use Procedure 5 to configure an IP address pool Procedure 5 Configuring an IP address pool 1 Inthe Contivity Secure IP Services Gateway window select SERVERS gt User IPaddr The User IPaddr window appears as shown in Figure 11 on page 34 WLAN Handset 2212 Installation and Configuration for VPN Page 34 of 62 IP address pool configuration Figure 11 Add an IP address pool ziBix Ele Edt View Favorites Tools Help Heak gt 2 A Qsearch Favorites Gmeda G Gh 9 3 UJ Address amp http 131 149 210 62 manag
22. cialist by using an Express Routing Code To access some Nortel Technical Solutions Centers you can use an Express Routing Code ERC to quickly route your call to a specialist in your Nortel product or service To locate the ERC for your product or service go to www nortel com erc Getting Help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller contact the technical support staff for that distributor or reseller 553 3001 229 Standard 1 00 November 2005 Page 11 of 62 About this document This document is a global document Contact your system supplier or your Nortel representative to verify that the hardware and software described are supported in your area Subject This document describes the installation and configuration of a WLAN Handset 2212 on a Virtual Private Network Note on legacy products and releases This NTP contains information about systems components and features that are compatible with Nortel Communication Server 1000 Release 4 5 software For more information on legacy products and releases click the Technical Documentation link under Support amp Training on the Nortel home page www nortel com Applicable systems This document applies to the following systems e Communication Server 1000S CS 1000S e Communication Server 1000M Chassis CS 1000M CH e Communication Server 1000M Cabinet CS 1000M CA e Co
23. ct the Override Rules tab 553 3001 229 Standard 1 00 November 2005 Users interface and firewall configuration Page 55 of 62 14 Right click in the tab and select Add New Rule A set of default rules is created on the tab as shown in Figure 31 Figure 31 Override Rules Contivity Stateful Firewall on 131 149 210 62 Firewall Edit Policy 2212 Handset Implied Rules Override RUles Interface Specific Rules Default Rules 15 Select the Default Rules tab 16 Right click in the tab and select Add New Rule A set of default rules is created on the tab as shown in Figure 32 Figure 32 Default Rules Contivity Stateful Firewall on 131 149 210 62 Manager Policy Refresh Help Firewall Edit Policy 2212 Handset GOA implied Rules Override Rules Interface Specific Rules Default Riles 17 Select Manager gt CSF NAT 18 Click Yes to exit 19 Click Yes to save the changes and return to the Firewall Options page 20 Select the policy you created starting at step 11 from the Policy list in the Firewall NAT Policy section WLAN Handset 2212 Installation and Configuration for VPN Page 56 of 62 Users interface and firewall configuration 21 Click OK End of Procedure 553 3001 229 Standard 1 00 November 2005 Page 57 of 62 Handset configuration Contents This section contains information on the following topics InttGdlcllolh qe need ea s EbROARTUEU E FERA DECRE PEIPER V EDI PLE 57 COM
24. e ltopman htm z Q6 4 Address Pool Pools Start End Subnet Mask 2 Click Add The Address Pool Information window appears as shown in Figure 12 Figure 12 Address pool details E Contivity Secure IP Services Gateway ni xi File Edit View Favorites Tools Help Ea eBak gt A Qsearch Favorites meda lt 4 B 5 A 8 E Address E http 131 149 210 62 manage ltopman htm Go Enter Address Pool Information Starting IP Address fist 149 210 41 Ending IP Address i31 149 210 44 Subnet Mask 255 255 255 224 Optional for IPSEC only C Default New 2212 VPN Apply Clear Cancel Pool ni OO hm 7 3 Enter a Starting IP Address 4 Enter an Ending IP Address 553 3001 229 Standard 1 00 November 2005 IP address pool configuration Page 35 of 62 Enter a Subnet Mask Select New Enter a name for the new pool in the text box Click Apply to save the details Click OK o On Oo OC The User IPaddr window appears as shown in Figure 13 Figure 13 Address pool A Contivity Secure IP Services Gateway E joj xj Ele Edt view Favorites Tools Heb Hek gt OA Ash teres Queis F B SG O address http 131 149 210 62 manage ltopman htm z Co Address Pool Pools Start End Subnet Mask Total In Use Action 2212 VPN 131 149210 41 131 149 210 44 255255255204 4 Edit Delete Aa
25. er accounts Use Procedure 10 to add a user account Procedure 10 Adding a user account 1 Inthe Contivity Secure IP Services Gateway navigator select PROFILES Users The Users window appears as shown in Figure 21 on page 46 WLAN Handset 2212 Installation and Configuration for VPN Page 46 of 62 Users interface and firewall configuration Figure 21 Adding users J Contivity Secure IP Services Gateway nl x Ele Edt Mew Favortes Tools Help Heak gt O A A search Favorites meda J D 4 3 C Address http 131 149 210 62 manage ltopman htm Go Group Base 2212 Handset z Display 3 Previous Next Add User Last First Actions There are no users defined in this group Press the Add User button to Add Users to this group N RTEL KORTEL s Ada User 2 Click Add User as indicated by the arrow The Users Details window appears as shown in Figure 22 on page 47 553 3001 229 Standard 1 00 November 2005 Users interface and firewall configuration Page 47 of 62 Figure 22 User details 9 OD Qseach Groves Greta J by 29 IGI I E Address netp 11131 149 210 62 mansgeftopman htm SS EE Remote User ff 00 tert Pese Com Posoword GRIEF Stas CE 0o 1 NETWORKS ae pt 5 1 T c a NNNNNNNNN Authentication a una In the General section enter a
26. etthe IP address to that of the VPN router d Click Save e Select IP Subnet f Set the IP subnet to that of the VPN router g Click Save 15 Set Phase 2 Lifetime a Select Network Config Security Static Entry VPN VPN Client IP gt IKE Mode Config gt Phase 2 ESP gt Lifetime sec b Enter 2678400 c Click Save End of Procedure 553 3001 229 Standard 1 00 November 2005 Nortel Communication Server 1000 WLAN Handset 2212 Installation and Configuration for VPN Copyright Nortel Networks Limited 2005 All Rights Reserved Information is subject to change without notice Nortel Networks reserves the right to make changes in design or components as progress in engineering and manufacturing may warrant Nortel Nortel Logo the Globemark This is the Way This is Nortel Design mark SL 1 Meridian 1 and Succession are trademarks of Nortel Networks Publication number 553 3001 229 Document release Standard 1 00 Date November 2005 Produced in Canada gt THIS IS THE WAY NORTEL gt THIS IS N RTEL
27. he beside Ports The Ports list expands Right click Communications Ports COM 1 and select Properties The Communications Ports COM 1 Properties window appears Select the Port Settings tab Ensure the settings are configured as shown in Figure 2 Figure 2 COM1 settings ont properties Te Por Settings ois pe nt EST Data bis e Paty Nore a Stop bits fi Flow controt None X Restore Defaukts Cox c 10 11 Connect to the wireless gateway through the console cable Access the wireless gateway using Hyper Terminal Enter the username and password in the Contivity 1050 Hyper Terminal window The Main Menu window appears as shown in Figure 3 on page 21 553 3001 229 Standard 1 00 November 2005 Getting started Page 21 of 62 Figure 3 Main Menu Packet GW HyperTerminal a EN ei x File Edit View Cal Transfer Help Main Menu System is currently in NORMAL mode Interfaces Administrator Default Private Route Menu Default Public Route Menu Create A User Control Tunnel IPsec Profile Restricted Management Mode FALSE Allow HTTP Management Firewall Options Shutdown System Boot Options Configure Serial Port Controlled Crash Command Line Interface Reset System to Factory Defaults Exit Save and Invoke Changes Please select a menu choice 1 9 B P C L R E 1 1 2 3 4 9 6 7 8 9 B P C L R E pasar ii Connected 0 01 37 fauto detect 9
28. ian 1 Large System Upgrade Procedures 553 3021 258 Communication Server 1000S Upgrade Procedures 553 3031 258 Communication Server 1000E Upgrade Procedures 553 3041 258 Intended audience This document is intended for individuals responsible for installing configuring operating and maintaining the WLAN Handset 2212 Conventions Terminology In this document the following systems are referred to generically as system Communication Server 1000M CS 1000M Communication Server 1000E CS 1000E Communication Server 1000S CS 1000S Meridian 1 The following systems are referred to generically as Small System Communication Server 1000M Chassis CS 1000M CH Communication Server 1000M Cabinet CS 1000M CA Meridian 1 PBX 11C Chassis Meridian 1 PBX 11C Cabinet The following systems are referred to generically as Large System Communication Server 1000M Half Group CS 1000M HG Communication Server 1000M Single Group CS 1000M SG Communication Server 1000M Multi Group CS 1000M MG Meridian 1 PBX 51C WLAN Handset 2212 Installation and Configuration for VPN Page 14 of 62 About this document e Meridian 1 PBX 61C Meridian 1 PBX 81 e Meridian 1 PBX 81C Related information This section lists information sources that relate to this document Online To access Nortel documentation online click the Technical Documentation link under Support amp Training on the Nortel home page www nortel com C
29. mmunication Server 1000M Half Group CS 1000M HG e Communication Server 1000M Single Group CS 1000M SG WLAN Handset 2212 Installation and Configuration for VPN Page 12 of 62 About this document e Communication Server 1000M Multi Group CS 1000M MG e Communication Server 1000E CS 1000E e Meridian 1 PBX 11C Chassis e Meridian 1 PBX 11C Cabinet Meridian 1 PBX 51C e Meridian 1 PBX 61C e Meridian 1 PBX 81 e Meridian 1 PBX 81C Note When upgrading software memory upgrades may be required on the Signaling Server the Call Server or both System migration When particular Meridian 1 systems are upgraded to run CS 1000 Release 4 5 software and configured to include a Signaling Server they become CS 1000M systems Table 1 lists each Meridian 1 system that supports an upgrade path to a CS 1000M system Table 1 Meridian 1 systems to CS 1000M systems This Meridian 1 system Maps to this CS 1000M system Meridian 1 PBX 11C CH CS 1000M CH Meridian 1 PBX 11C CA CS 1000M CA Meridian 1 PBX 51C CS 1000M Half Group Meridian 1 PBX 61C CS 1000M Single Group Meridian 1 PBX 81 CS 1000M Multi Group Meridian 1 PBX 81C CS 1000M Multi Group For more information see one or more of the following NTPs e Communication Server 1000M and Meridian 1 Small System Upgrade Procedures 553 3011 258 553 3001 229 Standard 1 00 November 2005 About this document Page 13 of 62 Communication Server 1000M and Merid
30. n Teardown Tunnel TunnelGuard Agent Minimum Version None Forced Logoff 00 00 00 internet 3 Configure the Connectivity variables a Click Configure in the Connectivity section b If you intend to use the same unit set Number of Logins to 1 c Enter an ID for the Address Pool Name 553 3001 229 Standard 1 00 November 2005 IPsec options and groups Page 43 of 62 Figure 20 IPsec variables IPsec section B Contivity Secure IP Services Gateway Ele Edt Yew Favorites oos Help Heak gt OA Gt Gseach Favores PMedia J Gh lt b 3 s E Addeess 48 retp 1 131 149 210 62 managefRopman htm co TEM ES Split Tunneling Disabled Spit Tunnel Netwots None IPSec Idle Timeout Reset on Outbound Trattic Enabled Client Selection Allowed Clients Both Contivity and non Contivity Clients Allow undefined nebwofe for non Contivity clients Enabled Database Authentication LDAP User Name and Password Enabled RSA Digital Signature Enabled Default Server Certificate None RADIUS Authentication UserName and Password Disabled AXENT Disabled RSA Seourld Disabled Group Level Radius Settings Disabled Branch Servers None Encryption ESP 256 bit AES with SHAT Integrity Disabled ESP 128 bit AES with SHAT Integrity Disabled ESP Triple DES with SHA Integrity Enabled ESP Triple DES with MOS Integrity Enabled ESP 68 bit DES with SHA Integrity Enabled
31. n Page 53 of 62 7 Click OK Note Do not leave this step for later as mobile clients will be unable to get an IP address via DHCP 8 After the wireless gateway has rebooted click Manage Policies as indicated by the arrow 9 Enter the login and password you entered when you created the user account in User accounts on page 45 The Firewall Policies window appears as shown in Figure 28 Figure 28 Firewall policies Contivity Stateful Firewall on 131 149 210 62 5 xj Firewall Select Policy a Firewall Ea Bold denotes that the policy is currently applied on the CES italics denotes that the policy is read only 10 Click New The New Policy window appears as shown in Figure 29 on page 54 WLAN Handset 2212 Installation and Configuration for VPN Page 54 of 62 Users interface and firewall configuration Figure 29 New policy New Policy x Please enter a name for the new Firewall policy fez 12 Handset Java Applet Window 11 Enter a name for the new firewall policy 12 Click OK The new policy is created and the Firewall Policy Edit window appears as shown in Edit firewall policy on page 54 Figure 30 Edit firewall policy Contivity Stateful Firewall on 131 149 210 62 i ni x Manager Policy Refresh Help Firewall Edit Policy 2212 Handset ANE Implied Rules Override Rules Interface Specific Rules Default Rules 13 Sele
32. ns IP Address Interface Filter Subnet Mask all 131 149 210 61 255 255 255 224 cea Edit Delete use Interface Description State Type Actions Slot 1 Interface 1 Enabled Public Configure Statistics Acquiring IP address from DHCP server Use Refresh button to update acquisition results Use Cancel acquisition to cancel the process Refresh Cancel acquisition izi 7 _ inteme 7 Click Cancel acquisition The Second Interface page reloads as shown in Figure 26 on page 51 553 3001 229 Standard 1 00 November 2005 Users interface and firewall configuration Page 51 of 62 Figure 26 Select protocol o ecure IP Services Gatewa E iB x File Edit View Favorites Tools Help Ea Back gt 2 A Asearch dgFavortes meda C Ay BO 8 E Address http 131 149 210 62 managefltopmanchtm sss YG Interface Description State Type Actions Fast Ethernet Enabled Private Configure Statistics Interface IP Address Subnet Mask Filter Actions permit all Contivity n 131 149 210 61 255 255 255 224 utt uus Edit Delete use Interface Description State Type Actions Slot 1 Interface 1 Enabled Private Configure Statistics Select Protocol iP x Apply 8 Select IP in the Select Protocol list 9 Click Apply End of Procedure WLAN Handset 2212 Installation and Configuration for VPN Page 52 of 62 Users
33. nstallation P zs Edt Yiew Favorites Tools Help Heak gt O A A Qsearch GuFevores Breda J FB b E o Address a http 131 149 210 S2jmanagetopman htm e OG Key Installation Feature Key Status Action Advanced Routing Contivity Stateful Firewall JFW 3000000000000000030 VPN Tunnels 3 Enterthe licence keys in the appropriate fields 553 3001 229 Standard 1 00 November 2005 Getting started Page 27 of 62 4 Click OK End of Procedure WLAN Handset 2212 Installation and Configuration for VPN Page 28 of 62 Getting started 553 3001 229 Standard 1 00 November 2005 Page 29 of 62 DHCP options Contents This section contains information on the following topics Int GdBcllol sias bee 9 LbEOARQEZEU AE FEPAECDEEDPRII eX dO Rp rides 29 The DEC server oes edd o eRERERERE EP REP ERE OPE e eed 29 Checking connecHVID eescesseck e RR SR here e RIRs 30 DACP I cori sandous cheek sew eeeseed eda ncque ex dad Sd 31 Introduction This section describes how to set the DHCP options The DHCP server Depending on the model of the VPN router the DHCP server may already be disabled Use Procedure 3 to disable the DHCP Server if necessary Procedure 3 Disabling the DHCP server 1 Inthe Contivity Secure IP Services Gateway navigator select SERVERS gt DHCP The DHCP Servers window appears as shown in Figure 9 on page 30 WLAN Handset 2212 Installation and Configuration for VPN Page 30 of 62 DHC
34. on the handset 2 Toaccess the Configuration menu press the green key and red key simultaneously then release the green key first The Configuration menu appears on the display as shown in Figure 35 on page 60 WLAN Handset 2212 Installation and Configuration for VPN Page 60 of 62 Handset configuration Figure 35 Configuration menu Phone Config Network Config Diagnostics Restore Defaults 3 Set the Licence Option a Select Phone Config gt License Option b Enter 010 using the keypad on the handset c Select Save 4 Set the Terminal Type a Select Phone Config gt License Option b Select i2004 c Select Save 5 Set the DHCP IP address a Select Network Config gt IP Addresses gt Use DHCP b Select OK 6 Set the VPN Server IP address a Select Network Config Security Static Entry VPN VPN Server IP b Enter 010 010 010 011 c Select OK 7 SetMode a Select Network Config Security Static Entry VPN VPN Client IP IKE Mode Config Phase 1 ISAKMP 553 3001 229 Standard 1 00 November 2005 10 11 12 b c Handset configuration Page 61 of 62 Set Mode to Aggressive Select OK Set your password a Select Network Config Security Static Entry VPN VPN Client IP IKE Mode Config Phase 1 ISAKMP Preshared Key Alphanumeric b Enter your password c Select Save Set the Phase 1 authentication parameters a Select Network C
35. onfig Security Static Entry VPN VPN Client IP IKE Mode Config Phase 1 ISAKMP b Select Diffie Hellman Group 1 c Select OK d Select Auth Hash gt SHA1 e Click OK f Select Encryption 3DES g Click OK Set Key ID a Select Network Config Security Static Entry VPN VPN Client IP gt IKE Mode Config gt Phase 1 ISAKMP gt Local ID gt Key ID b Enter the key ID c Click Save Set Phase 1 Lifetime a b c Select Network Config Security Static Entry VPN VPN Client IP gt IKE Mode Config gt Phase 1 ISAKMP gt Lifetime sec Enter 2678400 Click Save Set Phase 1 Options a Select Network Config Security Static Entry VPN VPN Client IP IKE Mode Config Phase 1 ISAKMP Options WLAN Handset 2212 Installation and Configuration for VPN Page 62 of 62 Handset configuration b Select Init Contact c Click OK d Select Nortel features e Click OK 13 Set the Phase 2 authentication parameters a Select Network Config gt Security gt Static Entry gt VPN gt VPN Client IP gt IKE Mode Config gt Phase 2 ESP b Select Auth Hash gt SHA1 c Click OK d Select Encryption gt 3DES e Click OK 14 Set IP address and subnet a Select Network Config gt Security gt Static Entry gt VPN gt VPN Client IP gt IKE Mode Config gt Phase 2 ESP gt Remote Network b Select IP Address c S
36. s and receives packets at up to 11Mb s WLAN Handset 2212 Installation and Configuration for VPN Page 16 of 62 Overview IMPORTANT The latest software version is required to support the features described in this document Code and key code requirements Before configuring the WLAN Handset 2212 you must ensure the various components are using the proper versions of software Table 2 lists the components and software versions Table 2 Required components and software versions Component Software Version WLAN Handset 2212 097 060 WLAN IP Telephony Manager 2245 17x 022 Contivity VPN Router V04_90 301 router can be any model requires Firewall licence key code CS 1000 or Meridian 1 PBX CS 1000 Release 4 0 or higher Scope of this document Assumptions The following assumptions are made in this document e The wireless infrastructure has been configured and is available e The PBX has been configured e The WLAN IP Telephony Manager 2245 has been configured e The DHCP server has been programmed and configured to provide the correct IP address 553 3001 229 Standard 1 00 November 2005 Overview Page 17 of 62 The configuration in this document This document describes the configuration of the supported architecture shown in Figure 1 Figure 1 Thin AP L2 Away from VPN Router 131 149 209 40 27 131 149 209 39 27 Intranet Oc y uersum Call Server epe Layer 2 Switch TES cse 131 149 21
37. s dde E EEDRQZSURFRESUPDECEXGJ GG o VR P opp pes 37 IPsec global variables iius 1 od Ee bed ERE REPRISE IE ER ded EN WLAN Handset 2212 group definition sese ee mew 39 WLAN Handset 2212 group IPsec variables 40 Introduction This section describes how to work with IPsec details IPsec global variables Use Procedure 7 to set IPsec global variables Procedure 7 Setting IPsec global variables 1 Inthe Contivity Secure IP Services Gateway navigator select SERVERS gt IPsec The IPsec Global Variables window appears as shown in Figure 15 on page 38 WLAN Handset 2212 Installation and Configuration for VPN Page 38 of 62 IPsec options and groups Figure 15 IPsec global variables F Contivity Secure IP Services Gateway E 10 xj Ble gat wew Favortes Tools Heip Hek gt OA A Gseach Giravortes Guda G D GO 3 EJ Address fa http 131 149 210 62 manage ftopman hem z ee SYSTEM Authentication 2 User Name and Password Pre Shared Key v RSA Digital Signature Iv RADIUS Authentication AXENT Technologies Defender v RSA SecurlD v User Name and Password V Encryption ESP 256 bit AES with SHA1 Integrity ESP 128 bit AES with SHA1 Integrity ESP Triple DES with SHA1 Integrity ESP Triple DES with MD5 Integrity ESP 56 bit DES with SHA1 Integrity ESP 56 bit DES with MDS Integrity Iv Only valid with User Groups Vv lv lv lv lv ESP 40 bit D
38. shown in Figure 20 on page 43 WLAN Handset 2212 Installation and Configuration for VPN Page 42 of 62 IPsec options and groups Figure 19 IPsec variables Connectivity section zox Ele Edt Mew Favortes Toos Hep e HBak gt Q A A Qsearch Favorites dQMeda A D 3 A a ess E 131 149 21062inanopetopmen n 00 E _ see Group Name Base 2212 Handset Parent Group Base Current Configuration Contact Information None Access Hours Anytime Call Admission Priority Highest Priority Forwarding Priority Low Priority Number of Logins 1 Password Management Disabled Maximum Password Age 30 Minimum Password Length 16 Alpha Numeric Password Required Disabled Statio Addresses Enabled Idle Timeout 00 15 00 Maximum number of failed login attempts to lock out an account Disabled Access Nebwot Name No Access Netwok selected Allow AIT Filters permit all IPX Disabled Session Number of Links 2 RSVP Disabled RSVP Token Bucket Depth 3000 Bytes RSVP Token Bucket Rate 28 Kbps User IP Address Source Default Address Pool Name 2212 VPN User Bandwidth Policy Committed Rate 56 Kbps Excess Rate 128 Kbps Excess Action Maik TunnelGuard Disabled N ZRTEL Rks TunnelGuard Restricted Filter deny all TunnelGuard Policy No TunnelGuard policy defined or selected TunnelGuard Periodic Check Interval mins 15 TunnelGuard Agent Query Timeout Interval sec 2 TunnelGuard Initial Policy Failure Actio
Download Pdf Manuals
Related Search