9620 VPN phone setup guide

[bonus99]

Hello,
I have been let down by an engineer that has failed to set up 3 x 9620 VPN phones on a customers 7.1 IPO.

I have trawled the support pages etc and really struggling to find a guide that works through this.

Is there one? Anyone help with where to find it?

Also, I have a Zywall USG gateway on site, does anyone have any experience with setting up VPN phones to this gateway?

Lastly, I am still looking for freelance engineers who can communicate and know what they are doing, if you know anyone or your company offers reasonable rates then I would be glad to hear from you.

Thanks for any help you can offer.

Cheers
Bonus

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[amriddle01]

I suspect the real issue is nobody knows how the Zywall works, and the guy you say let you down was probably an IP Office engineer and that would be why he couldn't get them working, VPN phones require a joint effort of the system guy and the network guy/IT dept. Some on here know both, but more don't than do

http://www.ipoffice.tel

 

[bonus99]

Thanks for your reply.

I have set the Zywall up and can site to site VPN from my own network. The problem is getting the VPN operational on the 9620, even to the point of putting the info in.

Once we are at that stage then we should be able to get the negotiating sorted on the VPN.

It is hardly a dark art or is it...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[amriddle01]

It is the devils work....have you read this faq940-7334

http://www.ipoffice.tel

 

[hairlessupportmonkey]

it is a black art.....

even with all the docs, right hardware and firmware its still a pain sometimes.

ACSS - SME
General Geek

 

[amriddle01]

With Release 8 you SHOULD be able to use 96xx handsets as NAT'd (with a little port forwarding) phones rather than VPN

http://www.ipoffice.tel

 

[hairlessupportmonkey]

Andy,

Just had a demo of the NEC SL1100 and it already does it!

ACSS - SME
General Geek

 

[bonus99]

Thanks, I think that link will be most helpful.

Roll on release 8!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[amriddle01]

Sean, the Mitel 5000 has done it for years, with any IP set and free voice networking and free mobile twinning and call recording on embedded (which does most of what VM Pro does and goes to 16 ports)...the system still sucks, but quoting against it is hard

http://www.ipoffice.tel

 

[mojoputter]

We have attempted to get 9620's working on a TZ190 Sonic, and to no avail we have given up. Just a reminder, Avaya does not support the 9600 type phone for VPN, although you will see post's of people getting 9608's working, so it is possible just not supported by Avaya.

 

[bonus99]

I specifically got the 9620's as I was told by distribution that they were ok. The 9608 has problems which I am aware of.

Looks like I am in for a rough ride!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[amriddle01]

Avaya do support 9620, 9630's etc they don't support 9608's and 96x1 etc

http://www.ipoffice.tel

 

[mforrence]

This is why we always (always) configure a router-to-router VPN with the phone behind it. Takes 15 minutes tops to configure and implement.
Mike

 

[mojoputter]

Router-to-router is what we went with. We were told by Avaya engineering that the 9600 type phones are not supported with VPN on IP Office, if you find any documentation that says anything different, you are a magician. Like I said, some people have been able to get them to work with different types of firewalls, but have yet to see any documentation from Avaya on how to get them to work with IP Office.

 

[tlpeter]

The 9620,30 40 and 50 do have a VPN option that works and also works on an IPO.
The 9608 has the same option but does not work well.


BAZINGA!

I'm not insane, my mother had me tested!

 

[Bas1234]

And the 9670 wont work eigther, got it almost up and running but i can't fill in the password because the keyboard would not move to scroll down...:-(

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[amriddle01]

We do the router to router these days, easier and you can change things remotely, with the right router and a 1600 it's almost as cheap too

http://www.ipoffice.tel

 

[bonus99]

That maybe the road of choice at this rate!

Have an issue with the Phone Certificate now to overcome.

When I get this working I will fully document it!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[bonus99]

Phone setup to use certificate in default, changed to PSK xauth

Working through the list, slowly but surely...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[bonus99]

I have made some progress.

The phone manages to set up and pass IKE phase one and then goes to xauth and is successful.

Nothing after that though.

After phase 1 is successful log says:
xauth succeed!Remote user:xxxxxx
send[HASH]
The cookie pair is: xxxxxx/xxxxxxx
ISAKMP SA is disconnected

The only other thing to add is the IKE VPN site setup is "Server role"

Any ideas?

Getting closer!

Cheers

Bruce




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!