Home

Avaya UNIStim Software release 4.1 Notice

1. Product Bulletin Bulletin Number P 2010 0016 Global Rev 1 Date 30 April 2010 UNIStim Software Release 4 1 for IP Deskphones Date Revision Summary of Changes 28 February 2010 Original bulletin This is the original publication 30 April 2010 Revision 1 Updated to include additional information on Secure Signaling using DTLS including CS1000 patch numbers Introduction Avaya is pleased to announce the availability of UNIStim software release 4 1 for IP Deskphones UNIStim software release 4 1 makes available the following software versions for the following IP Deskphones UNIStim Software Release 4 1 IP Deskphone Software 2007 IP Deskphone 0621C7D 1110 IP Deskphone 0623C7J 1120E IP Deskphone 0624C7J 1140E IP Deskphone 0625C7J 1150E IP Deskphone 0627C7J 1165E IP Deskphone 0626C7J 1210 IP Deskphone 062AC7J 1220 IP Deskphone 062AC7J 1230 IP Deskphone 062AC7J Avaya recommends an upgrade to this release of software for all applicable IP Deskphones and Call Servers at the earliest convenience This release is being provided as a no charge update to all customers although some of the functionality delivered in UNIStim software release 4 1 can only be activated with a purchased license UNIStim software release 4 1 for IP Deskphones is available from the Software Download link under Support and Training on the Nortel website located at http support nortel com
2. For additional information on configuring the IP Deskphone with the Info Block and on auto provisioning in general please refer to the IP Phones Fundamentals NN43001 368 37 Appendix D Auto Provisioning IP Deskphone s Node and TN in a Communication Server 1000 Environment applies to all the IP Deskphones Auto provisioning on the 2007 the 1100 Series and the 1200 Series IP Deskphones also includes a centralized method of provisioning the Node and TN fields for these IP Deskphones when they are connected on a Communication Server 1000 system Prior to the availability of UNIStim software release 3 0 for IP Deskphones if the Node and TN values in the phone were un initialized the only means to provision the Node and TN value was for the phone installer to manually enter these values at the phone when prompted to do so on the phone s display Ever since the delivery of UNIStim software release 3 0 for IP Deskphones the phones will now accept a list of Node and TN values associated to particular MAC addresses The Node and TN value is assigned to an appropriate phone by the phone recognizing its own MAC address within the list of Node and TN values The IP Deskphone will accept the Node and TN information when contained in any of the existing PRV files including e Device file XXXXXXXXXXXX PRV Zone file ZZZZZZZZ PRV e file TTTTT PRV e System file SYSTEM PRV If the phone s MAC ad
3. dv y dvid 60 dp 5 pcuntag y The list of all the parameters that can be provisioned via the Nortel i2004 B options is provided in the Info Block table in Appendix B Note that not all parameters need be specified in the option string If the option is included the parameter will be provisioned with the value specified If the option is not included the parameter will retain its default value or the value that was previously provisioned for said parameter Carriage returns have been added to the DHCP configuration string for readability only A true DHCP configuration string would contain no such carriage returns 41 AVAYA Appendix F Provisioning Precedence Rule and Stickiness Control applies to all the IP Deskphones The 2007 1100 Series and 1200 Series IP Deskphones can obtain provisioning information from multiple sources when the parameter source is defined as AUTO from the Auto Provisioning page The sources of automatic provisioning information include LLDP when the phone is connected to an 802 1ab enabled network switch e DHCP e Provisioning file transferred via TFTP or HTTP e Call server and or associated telephony manager using UNIStim It is assumed that each network provisioning parameter will be supplied by one and only one source However if the phone receives network configuration information from multiple sources a precedence rule is applied to determine the one source the phone selects
4. T Welcome KEYCODE RETRIEVAL SYSTEM KRS Steve Swan Log Out You may need to be registered in order to obtain keycodes for some products After the Onli approximately 5 business days to validate your registration information and provide access t B Security Advisories gt CUSTOMER REGISTRATION Bi My Profil i Nortel Employees should refer to the following instructions in order to register for access gt EMPLOYEE REGISTRATION Products by Category B Products A Z STEP 1 Choose the login location you would like to use for access to the Keycode Retrieval System B Online Self Service GLOBAL LOGIN v My Support Center gt My Products gt My Bookmarks gt My Email Alerts gt What s New STEP 2 Choose the appropriate product whose keycodes you would like to access PRODUCT FAMILY GO B FOR KEYCODE SUPPORT B Help Usina This Site lt ij If you do already have an account select IP Clients from the PRODUCT FAMILY pull down list which will then prompt you to enter your user ID and password After logging into the IP Clients KRS product family the default screen is the Product Registration page as shown below 60 gt lt B Feature B Adminis eAuth Code Welcome SuperF SuperL gt Log Out B Technical Support B Register Product Control gt Product Registration Generate k e Gen Temp Keycode Retrieve Keycode Retrie
5. But as mentioned above to allow phones already deployed in the field to change the source of their VLAN information with UNIStim software release 3 2 a new parameter called vvsource has been added to the Info Block to allow VLAN source to be auto provisioned Important Note While these changes provide greater flexibility the change might impact the deployment of new phones into an existing deployment Manually provisioned link speed and duplex mode restored to Auto after software upgrade applies to the 2007 1120E 1140E and 1150E IP Deskphones In UNIStim software release 1 3 0621C3N 0623C3F 0624C3F 0625C3F and 0627C3F for 2007 1110 1120E 1140E and 1150E IP Deskphones respectively greater low level network control available through the phones configuration menus was introduced The greater control included allowing the link speed and the duplex mode on the IP Deskphones to be provisioned independently for both the network port and the PC port By delivering this greater network control the software unfortunately had to reset link speed and duplex mode back to Auto after an upgrade Regrettably preservation of the forced manual override could not be maintained during the upgrade What this means is that if the IP Deskphone is running software prior to UNIStim software release 1 3 and if the link speed was manually provisioned to force the link to 10Mbit Full Duplex or 100MBit Full Duplex after upgrading the software to UNISt
6. is enabled above and Control DSCP or Media DSCP are not manually set below Control DSCP xx Media DSCP xx Enable PC Port PC Port Speed Auto 10BT 100BT PC Port Duplex Auto Force Full Force Half Enable Data 802 10 DataVLAN No VLAN Enter VLAN ID Data Priority Bits Auto 0 1 2 3 4 5 6 7 PC Port Untag All Enable Stickiness Cached This Cached IP menu item is only presented if DHCP is provisioned to Yes Ignore GARP Enable SRTP PSK SRTP PSK Payload ID 96 115 120 Provision Provision Zone ID Enable Bluetooth Yes No This Bluetooth menu item is on the 1140E IP Deskphone and 1150E only The 1120E 1140E 1150E and 1165E IP Deskphones contain a password protection mechanism to lock out access to the Local Tools menu including the Network Configuration menu If enabled access to the Local Tools menu is password protected and the password is prompted by a pop up window One must type the password from the dial pad and press the center of the navigation cluster enter key to enter the Network Configuration menu The default password is 26567 738 color set but this password can be changed by the system administrator When an incorrect password is entered the Local Tools menu is not opened To thwart password guessing only 3 incorrect password entries in a row are allowed After the 3 incorrect entry the password entry is ignored for 5 minutes Du
7. Media DSCP are not manually set below CTRL DSCP 0 63 xx Media DSCP 0 63 xx PC Port 0 Off 1 On 1 if 1 Speed 0 A 1 10 2 100 0 if 1 or 2 Duplex 0 A 1 F 2 H 0 Data 802 1Q 0 N 1 Y 1 if 1 VLAN ID Data pBits 0 7 8 Au 8 PCUntagAII 0 N 1 Y 1 Stickiness 0 N 1 Y 1 Cached IP 0 N 1 Y 0 This Cached IP menu is only presented if DHCP is provisioned to Y above Ignore 0 N 1 Y 0 SRTP PSK 0 N 1 1 0 PayID 0 96 1 115 2 120 0 Prov XXx XXX XXX XXX Prov Zone ID End of Menu The 1110 1210 1220 and 1230 IP Deskphones contain a password protection mechanism to lock out access to the Local Tools menu including the Network Configuration menu If enabled access to the Local Tools menu is password protected and the password is prompted by a pop up window One must type the password from the dial pad and press the center of the navigation cluster enter key to enter the Network Configuration menu The default password is 26567 738 color set but this password can be changed by the system administrator When an incorrect password is entered the Local Tools menu is not opened 49 AVAYA To thwart password guessing only 3 incorrect password entries in a row are allowed After the 39 incorrect entry the password entry is ignored for 5 minutes During this period of time the password prompt is displayed and the entered digits accepted however the phone will not process the incoming
8. y enabled UBS mouse device enabled 3 n disabled usbk y enabled UBS keyboard device enabled 3 n disabled usbh y enabled UBS headset device enabled 3 n disabled usbms y enabled UBS memory stick flash drive device enabled 3 n disabled th 0 black theme Theme 8 1 metallic blue them 2 blue theme 3 orange theme 4 green theme 5 red theme 6 purple theme utb y use the selected theme background Use a user selected background picture 3 m use the user selected image if present fs y enabled Font smoothing enabled 3 n disabled of y enabled Outlined font enabled 3 n disabled si y enabled Simple icons enabled 3 n disabled 34 1 Warning changing this parameter could impact the network connectivity and may require manual correction 2 Warning provisioning this parameter via TFTP HTTP or DHCP means that secure information is transferred in clear text 3 Applies to the 1165E IP Deskphone only 35 Appendix Auto Provisioning IP Deskphone with Info Block TFTP HTTP applies to all the IP Deskphones The IP Deskphones can receive the Info Block inside one or more provisioning files that can be retrieved from a TFTP or HTTP server Multiple provisioning files are supported by the phone e SYSTEM provisioning file provides provisioning
9. The below Figure 1 provides an explanation of where to identify the PEC and Hardware Release Number on the white product label located on the back of the IP Deskphone Serial Number Manufacturing PEC Code wem 00000 date vyyy mm dd and week M yyyyww MAC Address 2D Barcode Hardware Release number If UFTP software download is used within the Communication Server 1000 environment Avaya recommends that the software image for the 1150E IP Deskphone on the signaling server be upgraded minimally to UNIStim software release 3 4 Communication Server 1000 release 5 0 and greater will interpret denial of software downgrade responses from the new hardware phones However Communication Server 1000 prior to release 5 0 requires patch MPLR23154 to interpret correctly the phone s denial of software downgrade responses Failure to install the patch introduces the risk that the call server may continuously try and downgrade the software thereby denying service to the phone MPLR23154 is available at VO status on the Nortel ESPL website and is deployed only by contacting your Technical Support Representative If TFTP software download is used and the TFTP server is not upgraded to UNIStim software release 3 4 or greater the TFTP server will continuously try and downgrade the software in the phone The new hardware phone will prevent the downgrade resulting in the phone being denied service In a Communication Server 1000 environment con
10. br 18 blt 1 dimt 3 bold y read lt zone gt prv and lt type gt prv Zone id Unique network identification Menu lock mode Enable 802 10 for voice 802 10 control p bit for voice 802 10 media p bit for voice PC port speed PC port duplex Enable 802 10 for PC port Enable 802 1ab LLDP Enable stickiness Enable cached IP Ignore GARP Enable 802 1x EAP 802 1x EAP device ID 1 802 1X EAP device ID 2 802 1x EAP password DiffServ code point for control DiffServ code point for media Provisioning server IP address Primary DNS server IP address Secondary DNS server IP address Contrast value Brightness value Backlight timer Set dim timer to 5 minutes Enable font display in bold 36 AVAYA avaya com headartr prv Zone level provisioning file Applies to all phones within the headquarters zone slip 47 11 62 20 Primary server IP address p1 4100 Primary server port number al 1 Primary server action code 1 10 Primary server retry count 521 47 11 62 21 Secondary server address 2 4100 Secondary server port number a2 1 Secondary server action code r2 10 Secondary server retry count 47 11 62 147 XAS server address xp 5000 XAS server port number Xa g XAS server action code 1140E prv Type level provisioning file specific to 1140E IP Deskphone Applies to all 1140E IP Deskphone within the network bt y Enable Bluetooth
11. Vendor and Manufacturing fields of the USB communication exchange the mouse will not be recognized by the 2007 IP Deskphone Note that failure to send the above mentioned information is in violation of the USB communication exchange standard Most leading brands of mice do send the required information The patch is not required on Communication Server 1000 Release 5 5 15 AVAYA Contrast adjustments Local amp TPS contrast adjustments are not synchronized applies to the 1110 1120E 1140E and 1150E IP Deskphones The 1100 Series IP Deskphones graphical display contrast control can be adjusted either locally on the phone or through the call server TPS control The Communication Server 1000 does not yet synchronize its contrast setting with the local control This means if the local control is used exclusively then whenever the phone has a power cycle the contrast setting provided by the Communication Server 1000 is restored and the user may need to adjust contrast again The local contrast control on the 1110 1120E 1140E and 1150E IP Deskphones is accessed by a double press of the Services key and selecting 1 Preferences then 1 Display Settings in the menu The contrast control from the Communication Server is accessed with a single press of the Services key then selecting Telephone Options then Contrast Adjustment Volume adjustments are not persistent across phone resets applies
12. Welcome and Language selection This step will automatically discover connected phones 2 Equipment Setup and VPN 3 Select Data Files 4 Prepare Phone for Configuration Stop 6 Configure Phone Press to search for connected phones Searching for connected phones 7 Confirmation and Finish Ue Discovered phones 1 If a phone cannot be discovered the Phone VPN Configuration Wizard warns that no phones can be found with the Phone not found screen shown below If repeated attempts fail to discover a phone in Listening Mode please contact your network administrator Phone not found Phone is not detected Make sure that the phone is in the Listening Mode and on the same subnet with PC Check For a software firewall on the PC and if it is enabled try to disable the firewall temporarily to allow UDP traffic on port 49000 Repeat searching and if the phone is not detected contact your network administrator Configure Phone Once a phone has been discovered the Phone VPN Configuration Wizard is ready to configure the phone The Configure Phone screen as depicted below prompts the user to start the configuration process by pressing the Configure Phone button 58 Nortel Phone VPN Configuration Wizard v 01 00_00 19 Steps 1 Welcome and Language selection 2 Equipment Setup and VPN 3 Select Data Files 4 Prepare Phone for Configuration 5 Autodiscover Phone 7 Confirma
13. v dcprenew1 60 dcpsource2 scep dcpactive2 y dcppurpose2 ds This second example shows the configuration of DCP 1 for all applications using a PKCS 12 download device certificate 27 dcpsource1 pkcs12 dcpactive1zy dcppurpose1 a dcpactive2 n 28 Appendix B IP Deskphone Info Block applies to all the IP Deskphones The list of all the parameters that can be provisioned via the Info Block is provided in the table below Note that not all parameters need be specified in the Info Block If the option is included the parameter will be provisioned with the value specified If the option is not included the phone will retain its default value for the particular parameter or the phone will retain the value that was previously provisioned for the parameter if the stickiness parameter is set Info Block Parameters Parameter Value Description slip Value from 0 0 0 0 to 255 255 255 255 Primary server IP address 1 Value from 1 to 65535 Primary server port number Value from 0 to 255 Primary server action code ri Value from 0 to 255 Primary server retry count s2ip Value from 0 0 0 0 to 255 255 255 255 Secondary server IP address p2 Value from 1 to 65535 Secondary server port number a2 Value from 0 to 255 Secondary server action code r2 Value from 0 to 255 Secondary serve
14. Model Number of DCP 2007 IP Deskphone 3 1100 Series IP Deskphones except the 1110 IP Deskphone 6 1110 IP Deskphone 5 1200 Series IP Deskphones 5 One device certificate can be installed with each supported DCP DCP provisioning parameters all include the prefix dcp and include a suffix with the DCP index 1 to max number of profiles For example dcpsource1 is the Source or PKCS 12 for DCP 1 A DCP can only be configured using auto provisioning Each DCP can be configured for SCEP PKCS 12 and configured as Active or Inactive By default DCP 1 is configured as active with SCEP whereas all remaining DCP area configured as inactive with PKCS 12 An inactive PKCS 12 DCP is automatically activated if a PKCS 12 device certificate is successful installed using the DEV_CERT configuration option Several new Info Block parameters that have been created to allow the DCP to be auto provisioned Some of the new DCP parameters are common to both SCEP and PKCS 12 device certificate configuration where as some of the new DCP parameters apply only to SCEP device certificate configuration The new Info Block parameters that have been created to allow the DCP to be auto provisioned are provided in the two tables below Please refer to Appendix B for the complete list of parameters supported within the Info Block The new Info Block parameters that have been created to allow the DCP parameters common to both SCEP and PKCS 12 to be
15. Office Configuration Guide for SRG200 400 Rils1 5 553 3001 207 Main Office Configuration Guide for SRG50 Ris 2 0 553 3001 207 CICM Administration and Security NN10252 611 06 03 CRQM 7 0 Planning Installation and Administration Guide NN44480 300 Product Bulletin P 2006 0131 Global SMC 2450 67 About Avaya Avaya is a global leader in enterprise communications systems The company provides unified communications contact centers and related services directly and through its channel partners to leading businesses and organizations around the world Enterprises of all sizes depend on Avaya for state of the art communications that improve efficiency collaboration customer service and competitiveness For more information please visit www avaya com 2010 Avaya Inc All Rights Reserved Avaya and the Avaya Logo are trademarks of Avaya Inc and are registered in the United States and other countries All trademarks identified by TM or SM are registered marks trademarks and service marks respectively of Avaya Inc All other trademarks are the property of their respective owners Avaya may also have trademark rights in other terms used herein References to Avaya include the Nortel Enterprise business which was acquired as of December 18 2009 02 10 avaya com AVAYA INTELLIGENT COMMUNICATIONS 68
16. The new software now supports 42 Nortel specific DHCP options as listed below Newly claimed options are in bold where as the reclassified options are in italics e 21 DHCP vender specific options 128 131 144 157 188 191 205 219 223 224 227 230 232 235 238 241 244 247 249 251 and 254 e 21 DHCP site specific options 128 131 144 157 188 191 205 219 223 224 227 230 232 235 238 241 244 247 249 251 and 254 The vendor specific field of the DHCP response is parsed to extract the provisioning information The format of the Nortel i2004 B DHCP option type is Nortel i2004 B param1 value1 param2 value2 param3 valueS The 1210 1220 and 1230 IP Deskphones were introduced with UNIStim software release 2 2 and thus support Nortel i2004 B from their initial release 13 RFC 3942 states that DHCP Site specific options 128 to 223 are hereby reclassified as publicly defined options The IP Deskphone supports 9 vender specific options in this range and will continue to do so for backward compatibility However as suggested in RFC3942 the use of these options should be discouraged to avoid potential future collisions 40 AVAYA An example DHCP provisioning string is as per the following Nortel i2004 B slip 47 11 62 20 p1 4100 al 1 r1 255 s2ip 47 11 62 21 p2 4100 a2 1 r2 2 xip 47 11 62 147 xp 5000 xa g menulock p vq y vcp 3 vmp 4 vlanf y pc y pcs a pcd a
17. The software is available by phone model under Phones Clients and Accessories These software loads have not been introduced as the default loads for the IP Deskphones shipped from Avaya UNIStim software release 4 1 for IP Deskphones delivers enhancements and general quality improvements to Avaya s IP Telephony Solution including 1 UNIStim 4 0 functionality delivered onto the 1165E IP Deskphone 2 Secure Signaling using DTLS Enhancements and Quality improvements 3 Adjustable open microphone warning tone during Zone Paging 4 UNIStim VPN client interoperability extended to include Avaya VPN Gateways Enhancements 1 UNIStim 4 0 functionality delivered onto the 1165E IP Deskphone applies to the 1165E IP Deskphone only UNIStim software release 4 1 delivers the complete UNIStim 4 0 software functionality onto the 1165E IP Deskphone When UNIStim software release 4 0 availability was announced in November 2009 no 1165E IP Deskphone load was included in the suite of software loads The UNIStim software release 4 1 load for the 1165E IP Deskphone specifically software load 0626C7J now delivers the UNIStim 4 0 functionality onto the 1165E IP Deskphone The functionality delivered with UNIStim software release 4 0 that is also now available on the 1165E IP Deskphone includes e UNIStim VPN Client UVC e Feature and Application Licensing Secure Signaling using DTLS e Secure Call Recording SCR e Design for Ope
18. UNIStim 3 4 0624C6T NTYSOSBEGS 01 1120E IP Deskphone GSA RoHS UNIStim 3 4 0624C6T NTYSO5AEE6 01 1140E IP Deskphone Graphite with Icon Keycaps RoHS UNIStim 3 4 0625C6T NTYSO5BEE6 01 1140E IP Deskphone Graphite with English keycaps RoHS UNIStim 3 4 0625C6T NTYSO5BEGS 01 1140E IP Deskphone GSA RoHS UNIStim 3 4 0625C6T Recall that Figure 1 presented in the previous section above provides an explanation of where to identify the PEC and Hardware Release Number on the white product label located on the back of the IP Deskphone If UFTP software download is used within the Communication Server 1000 environment Avaya recommends that the software image for the 1120E IP Deskphone and 1140E IP Deskphone on the signaling server be upgraded to the minimum allowable software for the respective PEC and Hardware Release Communication Server 1000 release 5 0 and greater will interpret denial of software downgrade responses from the new hardware phones However Communication Server 1000 prior to release 5 0 requires patch MPLR23154 to interpret correctly the phones denial of software downgrade responses Failure to install the patch introduces the risk that the call server may continuously try and 10 AVAYA downgrade the software thereby denying service to the phone MPLR23154 is available at VO status on the Nortel ESPL website and is deployed only by contacting your Technical Support Representative If TFTP software download is
19. digits The password prompt window simply closes and the behavior is identical to that of an incorrect password entry The user will assume the incorrect password has been entered and try again Thus even if the correct password is guessed during the 5 minute period it will be ignored This effectively reduces the guess entry rate to 3 guesses every 5 minutes Once the password has been entered access to the Local Tools menu remains active for 5 minutes During the 5 minutes the menu can be freely navigated exited and entered without being prompted again for the password When the 5 minutes expires the menu is closed The password must be reentered to access the Local Tools menu 50 Appendix J Restore to Factory Defaults applies to all the IP Deskphones The UNIStim software release 3 0 for IP Deskphones introduced the ability to restore an IP Deskphone to a factory default configuration This can be useful when redeploying an IP Deskphone from one location to another when starting to use an IP Deskphone with unknown history or to reset to a known baseline configuration With UNIStim software release 3 0 and greater the following keypad sequence is used to reset all provisioning parameters to a factory default I IUZISIE S 9 IMACI FIL Where MAC corresponds to the MAC address of the IP Deskphone which can be found on a label on the back of the IP Deskphone Since a MAC address can contain the letters A thro
20. information to all IP Deskphones that support the auto provisioning feature e g system prv e ZONE provisioning file provides provisioning information to IP Deskphones that belong to a unique defined zone or group e g headartr prv e TYPE provisioning file provides provisioning information to all the IP Deskphones of a particular model types i e 1140E prv e DEVICE provisioning file provides provisioning information to a specific single device based on the device s MAC address i e 001365FEF4D4 prv The provisioning files contain the provisioning Info Block only The IP Deskphone continues to use the configuration file s for obtaining software and font file updates The provisioning files are text based file which contains parameters that require provisioning The provisioning files can be downloaded via either TFTP server or a HTTP server The address of the server is provisioned either manually via DHCP option 66 or via An example of using hierarchal provisioning files using system zone and type provisioning files is as per the following system prv System level provisioning file Applies to all phones file zt zone headqrtr unid Main tower menulock p vq y vcp 3 vmp 4 pcs a pcd a st y cachedip n igarp n eapidl DEV1024 eapid2 TOW2234 eappwd D3c6v5 cdiff 13 mdiff 12 prov 47 11 232 115 dns 47 11 20 20 dns2 47 11 20 21 ct 20
21. more readable by preventing the letters in the font from becoming distorted and difficult to identify But in some rare instances the hinting may impact the proportional spacing resulting in characters appearing too close or too far apart Some models of Plantronics Bluetooth headset may unexpectedly become unpaired applies to the 1140E 1150E and 1165E IP Deskphones An issue was uncovered with certain Plantronics Bluetooth headsets including the formerly validated Plantronics Voyager 510 5105 in which the headset may unexpectedly become unpaired If the unpair occurs during an active call all audio will be lost to and from the headset In such a situation the call will remain active and the user is recommended to switch to handset or handsfree 14 AVAYA Due to the severity of this issue Avaya does not recommend the use of the Plantronics Voyager 510 510S headset For a complete list of wired and wireless headsets that Avaya has confirmed provide acceptable audio quality when used in conjunction with Avaya IP Deskphones please refer to the Product Bulletin P 2006 0084 Global Rev7 Headsets for Nortel IP Phones 2 step upgrade may be required applies to the 1120E and 1140E IP Deskphones One important note when upgrading the 1120E IP Deskphone and 1140E IP Deskphone to UNIStim software release 4 1 from an load previous to 0624C1B or 0625C1B respectively is that a 2 step upgrade will be required The 1120E IP Deskphone and 1140E cannot
22. need to be transfer to the CICM Element Manager If the software is included in the installation files some manual administrator configuration will still be required If the software is not included in the installation file the administrator can transfer these software loads to the CICM Element Manager configure the 21 terminal s Recommended and Minimum software levels and the Element Manager will propagate the software to the CICM The user will be prompted to upgrade their software at their own convenience For details on using the CICM Element Manager to configure the recommended software and how to upgrade the IP Deskphones refer to the CICM Administration and Security NN10252 611 06 03 in the section titled Downloading firmware to the CICM Element Manager System Compatibility and Requirements System Compatibility and Requirements System Notes and Advisements Avaya formerly Nortel Contact Recording and Quality Monitoring CRQM 7 0 The Secure Call Recording feature in UNIStim software release 4 0 and greater interworks with Avaya formerly Nortel Contact Recording and Quality Monitoring release 7 0 For additional information on Avaya CRQM solution and its support for Secure Call Recording please refer to the CRQM 7 0 Planning Installation and Administration Guide NN44480 300 Avaya formerly Nortel VPN Router NVR 8 00 or greater The UNIStim VPN Cli
23. parameter provides an attribute that specifies if the parameter was previously provisioned manually or automatically If the provisioning parameter is AUTO the IP Deskphone can receive the value from automatic provisioning sources based on the precedence rule If one manually changes the parameter the attribute value is MANUAL If the attribute is MANUAL the provisioning information from automatic provisioning sources is ignored except for the standard DHCP parameters If one enables DHCP then the phone s IP address the subnet mask and the default gateway address which the IP Deskphone obtains from the DHCP server overwrites any manually configured value 42 Provisioning information from a provisioning source with high priority will overwrite the provisioning information from a provisioning source with low priority Manual provisioning always has the highest priority If one configure stickiness and the current provisioning source does not provide the provisioning information for the particular parameter the last received provisioning value is used The default value of the stickiness attribute is AUTO 43 Appendix G Manual Configuration Menu 1120 1140 1150E and 1165E IP Deskphones The full screen based configuration menu structure below presents the complete configuration menu now available on the 1120E 1140E 1150E and 1165E IP Deskphones EAP Mode Disable MD5 PEAP TLS I
24. the Local Tools menu including the Network Configuration menu If enabled access to the Local Tools menu is password protected and the password is prompted by a pop up window One must type the password from the dial pad and press the center of the navigation cluster enter key to enter the Network Configuration menu The default password is 26567 738 color set but this password can be changed by the system administrator When an incorrect password is entered the Local Tools menu is not opened To thwart password guessing only 3 incorrect password entries in a row are allowed After the 3 incorrect entry the password entry is ignored for 5 minutes During this period of time the password prompt is displayed and the entered digits accepted however the phone will not process the incoming digits The password prompt window simply closes and the behavior is identical to that of an incorrect password entry The user will assume the incorrect password has been entered and try again Thus even if the correct password is guessed during the 5 minute period it will be ignored This effectively reduces the guess entry rate to 3 guesses every 5 minutes Once the password has been entered access to the Local Tools menu remains active for 5 minutes During the 5 minutes the menu can be freely navigated exited and entered without being prompted again for the password When the 5 minutes expires the menu is closed The password must be reentered to acce
25. to all the IP Deskphones Even though the speech volume and ringer volume is controlled by the IP Deskphone the user selected preferences are stored by the Communication Server 1000 Prior to release 5 0 of the Communication Server 1000 the server did not save the user selected preferences across a phone reboot Thus if the phone rebooted for whatever reason the speech volume and ringer volume would be reset to their default values Upgrading to release 5 0 or greater of the Communication Server 1000 corrects this issue Power disruption during software upgrade will corrupt the upgrade applies to all the IP Deskphones During a software upgrade if a power disruption is experienced by the phone the software upgrade will fail In some instances a power disruption during an upgrade may also corrupt the existing software on the phone If this corruption should occur the phone will fail over into its boot code known as BootC will automatically try to restore the phone s software from the image on a call server But for the 2007 the 1100 Series and the 1200 Series IP Deskphones if the phone s software was obtained from a TFTP server instead in order to restore or upgrade the software from BootC a manual TFTP download from BootC must be performed The Manual TFTP Download from BootC Procedure is documented in the IP Phones Fundamentals NN43001 368 Regardless caution should be exercised to avoid power disruptions during software
26. upgrades 16 Quality Improvements In addition to delivering the enhancements listed above the UNIStim software release 4 1 for IP Deskphones also continues to improve the overall quality of the IP Deskphone software through the delivery of ongoing resolution of CRs and closed cases Numerous quality improvements have been delivered and 7 customer cases have been closed in UNIStim 4 1 UNIStim software release 4 1 for IP Deskphones close the following cases Closed Cases Case Description 090330 09018 IP Deskphone ARP table may become full 091009 31321 Noise may be heard when switching to secure SRTP call 090818 00084 Cannot control the beep volume with Application Gateway AG zone paging 091117 54529 IP Deskphone fails to register if too many DHCP offers are provided 091201 61674 GEM icons are too bright when attached to an 1165E IP Deskphone 100125 87603 IP Deskphone does not send EAP LOGOFF when an attached PC is unplugged 090904 10920 2007 IP Deskphone TFT Digits being dialed flicker on the display 17 IP Deskphone Compatibility UNIStim software release 4 1 for IP Deskphones is compatible with the following IP Deskphones IP Deskphone Compatibility PEC Description Software File NTDU96xxxxxx 2007 IP Deskphone 0621C7D bin NTYS0O2xxxxxx 1110 IP Deskphone 0623C7
27. used and the TFTP server is not upgraded to the minimum allowable software or greater the TFTP server will continuously try and downgrade the software in the phone The new hardware phone will prevent the downgrade resulting in the phone being denied service a Communication Server 1000 environment containing SRG and SRG50 branch office systems two SRG Smart Updates SU exist to allow the SRG and SRG50 platforms respectively to interpret denial of software downgrade responses from the new hardware phones Failure to install the patches introduces the risk that the call server may continuously try and downgrade the software thereby denying service to the phone For SRG 200 and SRG 400 release 1 5 the denial of software downgrade support is included in BCM R400 SU System 024 and later For SRG50 release 3 0 the denial of software downgrade support is included in BCM050 R300 SU System 197 and later This SU is not available for SRG50 release 2 0 If the above SRG patches are not installed then the umsUpgradeAll Main Office system command should not to be executed when the branch office sites has the new hardware 1120E IP Deskphone or the new hardware 1140E IP Deskphone and the IP Deskphone software at the Main Office precedes UNIStim software release 3 1 For complete details on the minimal allowable software for the new hardware changes in the 1120E IP Deskphone and 1140E IP Deskphone please refer to Clarify Bulletin 2009009363 Rev2 New Mi
28. D 1 ID 2 Password Enable VPN Protocol Mode Authentication PSK User ID PSK Password XAUTH Method XAUTH User ID XAUTH Password VPN Server 1 VPN Server 2 VPN DSCP VPN MOTD Timer Enable 802 1ab LLDP DHCP No Yes Set IP Net Mask Gateway DNS1 IP DNS2 IP Local DNS IP CA Server Domain Name Hostname 51 IP Port S1 Action Retry 51 PK FFFFFFFFFFFFFFFF S2 IP Port S2 Action Retry S2 PK FFFFFFFFFFFFFFFF Ntwk Port Speed Auto 10BT 100BT Ntwk Port Duplex Auto Force Full Force Half XAS Mode Text Mode Graphical Secure Graphical This parameter is called Graphical XAS on the 1165E IP Deskphone 44 XAS IP XAS Port Enable Voice 802 10 VoiceVLAN No VLAN Auto Enter VLAN ID The Auto option in the VoiceVLAN menu is only available if DHCP is provisioned to Yes above or if LLDP is enabled above VLAN Filter Ctrl Priority Bits Auto 0 1 2 3 4 5 6 7 Media Priority Bits Auto 0 1 2 3 4 5 6 7 Enable Nortel Auto Qos DSCP Override This DSCP Override menu item is only presented if Enable 802 1ab LLDP
29. FFF S2 IP Port S2 Action Retry S2 PK FFFFFFFFFFFFFFFF Ntwk Port Speed Auto 10BT 100BT Ntwk Port Duplex Auto Force Full Force Half Phone Mode Hidden Full Reduced XAS Mode Text Mode Graphical Full Screen Secure Graphical Secure Full Screen XAS IP Port Enable Voice 802 1Q VoiceVLAN No VLAN Auto Enter VLAN ID The Auto option in the VoiceVLAN menu is only available if DHCP is provisioned to Yes above or if LLDP is enabled above respectively VLAN Filter Ctrl Priority Bits Auto O 1 2 3 4 5 6 7 Media Priority Bits Auto 0 1 2 3 4 5 6 7 Enable Nortel Auto QoS DSCP Override This DSCP Override menu item is only presented if Enable 802 1ab LLDP is enabled above and Control DSCP or Media DSCP are not manually set below Control DSCP xx Media DSCP xx 46 AVAYA Enable PC Port PC Port Speed Auto 10BT 100BT PC Port Duplex Auto Force Full Force Half Enable Data 802 10 DataVLAN No VLAN Enter VLAN ID Data Priority Bits Auto 0 1 2 3 4 5 6 7 PC Port Untag All Enable Stickiness Cached This Cached IP menu item is only presented if DHCP is provisioned to Yes above Ignore GARP Enable SRTP PSK SRTP PSK Payload ID 96 115 120 Provision XXX XXX XXX XXX Provision Zone ID The 2007 IP Deskphone contains a password protection mechanism to lock out access to
30. IP Deskphone to ignore any DSCP value received from the Communication Server 1000 Element Manager and the Info Block applies to all the IP Deskphones Because of the precedence order in auto provisioning mode i e the value has not been overridden manually if the IP Deskphone receives a LLDP MED Network Policy TLV from the network infrastructure the phone will provision its DSCP from the LLDP MED Network Policy TLV and not from the Call Server or Info Block When the phone receives a Network Policy TLV from the network infrastructure it sets its voice VLAN L2 Priority and DSCP to the value specified in the VLAN ID field L2 Priority field and DSCP Value field respectively Thus if the Network Policy TLV is received any QoS values also received from the Call Server i e Telephony Manager and or Element Manager or Info Block it will be ignored Special Note The feature DSCP provisioning precedence override available in UNIStim software release 3 3 and greater provides a work around to this advisory IP Deskphone s default for Auto VLAN changed to Enabled And Auto VLAN now supports a No VLAN option applies to the 2007 1110 1120E 1140E 1150E 1210 1220 and 1230 IP Deskphones In software loads prior to UNIStim software release 2 2 for 2007 1100 Series and 1200 Series IP Deskphones one had to manually provision whether the phone was to be installed in an 802 1Q VLAN environment or not The default configuration for the phone was assu
31. IP TLS 2 Not supported in UNIStim HTTPS 4 Not supported in UNIStim GXAS 8 VPN 16 DTLS 32 SCR 64 Licensing 128 Below is an example of a CERT section in a configuration file In this example a PKCS 12 device certificate will be downloaded into DCP 2 and will be marked as being available for all applications The version associated with the device certificate will be marked as 5 Finally the in the filename is substituted with the IP Deskphone s MAC address so that each phone will download its own unique device certificate e g 001365ff7d69 pfx CERT DOWNLOAD MODE AUTO VERSION 000005 P P ILENAME pfx ROFILE 2 URPOSE 1 Please note that since negative one means that the device certificate can be used by all applications it cannot be combined with other values 25 AVAYA Device Certificates Profiles DCP As of UNIStim software release 4 0 for IP Deskphones support for Device Certificate Profiles DCP is available A DCP provides the ability to support mixed SCEP and or PKCS 12 device certificates installs by specifying the installation method for each certificate independent of each other A DCP also allows arbitrary sharing of device certificates across one or more applications The number of DCP supported is dependant on the phone model The number of profiles supported by phone model is shown in the table below DCP
32. J bin NTYSOS3xxxxxx 1120E IP Deskphone 0624C7J bin NTYSO5xxxxxx 1140E IP Deskphone 0625C7J bin NTYSO06xxxxxx 1150E IP Deskphone 0627C7J bin NTYSO07xxxxxx 1165E IP Deskphone 0626C7J bin NTYS18xxxxxx 1210 IP Deskphone 062AC7J bin NTYS19xxxxxx 1220 IP Deskphone 062AC7J bin NTYS20xxxxxx 1230 IP Deskphone 062AC7J bin Call Server Compatibility and Requirements UNIStim software release 4 1 is compatible with the Avaya Call Servers listed below Note that the 1200 Series IP Deskphones are only supported on Communication Server 1000 release 5 5 and greater SRG 50 release 3 0 BCM 50 release 3 0 BCM 450 release 1 0 and Communication Server 2100 CICM 10 1 MR2 Communication Server 1000 Communication Server 1000 Compatibility and Requirements Call Server Release Notes and Advisements CS 1000 6 0R Avaya recommends an upgrade to this UNIStim software release 4 1 at the earliest opportunity IP Line 6 00 18 i ET App Support for DTLS is available for UNIStim IP Phone Software Release 4 0 and above with Communication uis Server 1000 CS1000 Release 6 0 along with the following patches nortel cs1000 tps 6 00 18 65 07 1386 000 51000 6 00 18 65 04 1386 000 These patches are available for download from www nortel com support website CS 1000 5 5 J Avaya recommends an upgrade to this UNIStim software release at the earliest opportunity IP Line 5 5 12 85 5 5 12 The DTLS and SCR feat
33. N CC UU or CC UU The TN must be in one of the formats shown above The numbers in the TN can be separated by spaces dashes or any combination thereof The numbers can either have leading zeros to fill the field size or not e g LLL can be 096 or just 96 Format errors resulting in no processing of the reg provisioning are silently discarded no error message is provided The reg item s must be at the end of the file s provisioning info data items No other provisioning info items should come after it them This is required to optimize the speed of the parsing The following is an example of a valid Node and TN provision string that could be included in any of the PRV files Set Auto Node and TN reg 00 1B BA F8 82 0D CS1K S1 123 096 1 22 01 reg 00 1B BA F8 82 0E CS1K S1 123 096 1 22 02 39 Appendix Auto Provisioning IP Deskphone with the Info Block via DHCP applies to all the IP Deskphones The new Nortel specific option type 12004 was introduced in UNIStim software release 2 2 for IP Deskphones The Nortel i2004 B specific option type expands the number of parameters that can be provisioned to include all those previously provisioned in the existing option type of Nortel i2004 A plus more In software loads prior to UNIStim software release 2 2 for the 2007 and 1100 Series IP Deskphones the IP Deskphones could obtain only limited provisioning parame
34. RTEL avaya com 52 Equipment Setup and VPN Once the language is selected the Equipment Setup and VPN screen is presented as depicted below Nortel Phone VPN Configuration Wizard v 01 00_00 19 Steps Equipment Setup and VPN 1 Welcome and Language selection Verify that your modem phone and computer are properly connected Set 2 Equipment Setup and YPN mouse over the image for more details 3 Select Data Files Yr 4 Prepare Phone for Configuration 5 Autodiscover Phone 5 Configure Phone 7 Confirmation and Finish If you have a VPN connection it must be disconnected before proceeding with the wizard The Equipment Setup and VPN screen shows that the PC running the Phone VPN Configuration Wizard must either be plugged into the PC port of the IP Deskphone or into a multi port router or hub to which the IP Deskphone is also connected Please be advised that if a VPN client is running on the PC the VPN client on the PC must be disconnected to allow the Phone VPN Configuration Wizard to provision the IP Deskphone Once the Phone VPN Configuration Wizard finishes the VPN client running on the PC can be re established Select Data Files Once the PC that is running the Phone VPN Configuration Wizard is connected in one of the requested setup the next screen as depicted below asked the user to select the Data Files The data files are the configuration and provisioning files that were supp
35. TP PSK with Communication Server release 5 0 patch MPLR24632 is required on the Communication Server 1000 The Communication Server 1000 patch is located in the Meridian PEP library at the www nortel com support web site Current release of SRTP PSK is not backward compatible with older version of SRTP PSK applies to the 2007 1110 1120E 1140E and 1150E IP Deskphones As stated above running SRTP using PreShared Keys PSK is still a valid option in the IP Deskphones But one important note when upgrading the IP Deskphones to the current releases of software is to realize that the current releases of SRTP PSK is not compatible with older versions of SRTP PSK The minimum software releases for which the current release of SRTP PSK is backward compatible is UNIStim software release 1 3 0621C3N 0623C3G 0624C3G 0625C3G and 0627C3G for the 2007 1110 1120E 1140E and 1150E IP Deskphone respectively Backlight Interaction with USB devices applies to the 2007 1120E 1140E and 1150E IP Deskphones Some USB devices i e Mice or Keyboards send regular coordinate update messages to the phone even when the device is not being used This can cause the sleep mode for the backlight to not be properly invoked Certain USB mice do not work with the 2007 IP Deskphone applies to the 2007 IP Deskphone only It has been discovered that certain USB Mice do not work with the 2007 IP Deskphone If the mouse does not transit information in the Production
36. an EAP authentication method 1 2 md5 EAP MD5 peap PEAP MD5 tls EAP TLS eapid1 Character string up to 32 characters 802 1x EAP device ID1 1 2 eapid2 Character string up to 32 characters 802 1x EAP device 102 1 2 eappwd Character string up to 32 characters 802 1x EAP password 1 2 ca Character string up to 80 characters Certificate Authority CA server cahost Character string up to 32 characters Certificate Authority CA host name 30 cadomain Character string up to 50 characters Certificate Authority CA domain name cdiff Value from 0 to 255 Diffserv code points for control messages mdiff Value from 0 to 255 Diffserv code points for media messages prov Character string up to 50 characters Provisioning server address or URL if the string is prefixed with http the phone will connect to a HTTP server otherwise the phone will connect to a TFTP server dns Character string up to 50 characters Primary DNS server URL dns2 Character string up to 50 characters Secondary DNS server URL ct Value from 0 to 15 for 1100 Series IP Contrast value Deskphones Value from 7 to 39 for 2007 IP Deskphone br Value from 0 to 15 Brightness value bit 0 5 seconds Backlight timer 1 1 minute 2 5 minutes 3 10 minutes 4 15 minutes 5 80 minutes 6 1 hour 7 2 hours 8 always on dim y yes As of UNISt
37. arameter has to be modified to point to the PC running the Phone VPN Configuration Wizard The Wizard provides the IP address of the PC that needs to be entered into the Provisioning server address parameter as shown in the below 55 AVAYA avaya com Nortel Phone VPN Configuration Wizard v 01 00_00 19 Steps Prepare Phone for Configuration 1 Welcome and Language selection Input Provisioning Server IP address 2 Equipment Setup and VPN Select the item Provision TFTP IP 3 Select Data Files Use the phone keypad to input your IP address as it 5 Autodiscover Phone 192 168 0 104 6 Configure Phone 7 Confirmation and Finish Press the Apply on the phone to startthe software update Updating software Wait for your phone to restart before going to the next step Cancel Once the phone has been upgraded to UNIStim software release 4 0 or greater the phone should be able to enter Listening Mode The IP Deskphone will reboot after the new software is downloaded Again during reboot the user must watch the phone screen for when the Nortel text banner not the Nortel icon is displayed The Nortel text banner will be displayed for roughly 5 seconds During this 5 second window the user must press the key sequence of mute 5 6 mute If successful the phone will display Listening Mode on the screen 56 Autodiscover Phones Listening Mode Once the phone is in Li
38. auto provisioned are provided below Auto Provisioning DCP Parameters dcpsource1 scep Method used to install device certificates pkcs12 dcpactive1 n Inactive Profile is active or not y active dcppurpose1 Character string made up of Specifies which phone applications can use this device a All applications certificate v VPN TN ca s Multiple values can be cascaded e g 959 but a DIES can only be used by itself s SCR 9 GXAS e EAP TLS Provisioning the dcppurpose parameter on a DCP defined for a PKCS 12 certificate will overwrite the initial purpose established at installation time by the PURPOSE command in the DEV_CERT section of the configuration file 26 Licensing The new Info Block parameters that have been created to allow the DCP parameters that apply only to to be auto provisioned are provided below These SCP specific parameters provide control over SCEP device certificate renewal and deletion Auto Provisioning SCP Parameters dcprenew1 Integer value but also supports the Number of days prior to certificate expiry that a certificate following special values renewal is requested 1 Never 0 Immediately dcpdelete1 n No action If set to y forces the device certificate to be deleted y Delete dcpautocn 1 Manual Automatically construct the Certificate Name usin
39. be upgraded directly to the newly released software if they are currently running software previous to 0624C1B and 0625C1B respectively Instead the phones must first be upgraded to 0624C1B and 0625C1B or newer recommend 0624C3G and 0625C3G Once the phones are running at least 0624C1B and 0625C1B software they will accept being upgraded to UNIStim software release 4 1 respectively 2 step upgrade may be required to load Asian fonts applies to the 2007 IP Deskphone only Adding Asian languages to a 2007 IP Deskphone running UNIStim software release 1 3 0621 or earlier requires a 2 step process since the configuration file format has changed to support the new font downloads 1 One must first upgrade the 2007 IP Deskphone software to using TFPT with the former configuration files BasicConfig folder or upgrade the software from the call server 2 Once the 2007 IP Deskphone is running the new software one must update the TFTP server to the new configuration files AsianConfig folder to download the Asian font files Running SRTP PSK with Communication Server 1000 release 5 0 requires a patch applies to the 2007 and 1100 Series IP Deskphones In association with Communication Server 1000 release 5 0 UNIStim software since release 2 0 delivered media stream protection using SRTP UNIStim Keys USK However running SRTP using PreShared Keys PSK is still a valid option in the IP Deskphones But if one wishes to run SR
40. business critical converged multimedia infrastructure For more information on the capabilities available with the SMC 2450 please refer to the Product Bulletin P 2006 0131 Global 2450 22 Appendix A Certificate Installation applies to the IP Deskphones Installing CA Root Certificate using the IP Deskphone s configuration file The recommended means to install a Certificate Authority CA root certificate on an IP Deskphone is to use the phone s configuration file e g 1140e cfg An example of the modified configuration file is shown below where cacert pem contains the PEM format CA root certificate USER_KEYS DOWNLOAD_MODE AUTO PROTOCOL TFTP VERSION 1 FILENAME cacert pem When the phone boots and connects to the TFTP server the phone will download the certificate The installer will then be prompted to accept the fingerprint of the initial certificate file Once accepted the certificate is saved and the phone will be ready to use the CA root certificate Installations of all subsequent root certificates are authenticated by an attached signature There will be no prompt to accept a fingerprint after the first certificate is installed Installing CA Root Certificate and Device Certificates using SCEP In UNIStim software release 3 0 support for Simple Certificate Enrollment Protocol SCEP was introduced to allow the IP Deskphone to request both a CA root certificate and then a device certif
41. contrast levels on icons on the Expansion Module The changes were necessary to improve the display quality during low contrast settings 1110 IP Deskphone may experience a double reboot when upgrading software applies to the 1110 IP Deskphone only If the 1110 IP Deskphone is upgraded or downgraded to from UNIStim software release 4 1 while Asian font files are installed in the phone a double reboot may occur during the upgrade or downgrade procedure After the second reboot the phone will be fully operational and will maintain its selected language choice This advisory is simply to provide notification that the upgrade or downgrade procedure may now be lengthened due to the double reboot IP Deskphone may appear locked when downloading large font files over the VPN applies to the 1120E 1140E 1150E and 1165E IP Deskphones It has been discovered that when using the VPN feature on home based phones that the phone may appear locked when downloading large files such as font files to the phone This issue is due to Internet delay and the fact that the phone s TFTP client is inefficient to transfer large files across the Internet Unfortunately the IP Deskphone does not have a progress indication to inform the user that the download is still in progress and in fact the phone is not locked Users are advised to wait should the phone be downloading font files over the Internet As a additional measure one can also look to the back of th
42. d to KRS as shown on the diagram below Once the comma delimited file of MAC addresses has been selected click Continue Step Plea Or Click Continue to manually define each MAC Addre Note This is the only chance you will have to up have to be added manually one at a time lect the System ID file a file with a list of comma separated MAC Addr ciated with this Site file All other MAC Addresses will elete Temp Keycode nd requirement of MA on a single line Log Note 00 00 00 0 00 00 00 00 00 00 00 00 00 00 DD 0000000000 System ID File D Profiles sswan Desktop IF Browse Contact Global Support To manually type in each MAC address instead leave the System ID File field blank and simply click Continue The next screen simply request information on the System location Once it is entered click Continue If the MAC addresses were supplied by a comma delimited file after entering the location information the next screen displayed is a summary screen But if the MAC addresses were not supplied by a comma delimited file after entering the location information the next screen as depicted below allows the user to enter the MAC addresses manually The MAC addresses are entered one ata time in the field labeled MAC Address ID After each MAC address is entered click on Add which will then bring up a new blank MAC Address ID field to allow the entry of the next MAC a
43. ddress This process should be repeated until all the MAC addresses have been entered When all the MAC addresses have been entered click on Continue Current summary Site Name CAMPUS City Ben Lor Country UNITED STATES State Prov California Step Add bel id in a text box he site by entering a MAC Click the Continue button are done M to Mode Delete Temp Keycode MAC Address 0 ACTION Log Note 00 11 22 33 44 Add B Feature Manage B Contact Global Support After all the MAC addresses have been entered either manually or from a file a summary screen as shown below will be presented to allow the user to review the list of MAC addresses 62 gt Log Out B Technical Support B Register Product Control gt Product Registration gt Generate gt Gen Temp Keycode Retrieve Keycode Retrieve Custom Reset Auth Code Remap Site Documentation Forms amp USER GUIDES Regenerate Keycode gt Migrate to Server Made gt Delete Temp Keycode gt Log Note B eAuth Code Management B Reports B utility B Contact Global Support gt This section enables you to register new products into the Keycode Retrieval System so that you can add or transfer features to the product in the future USER SuperF SuperL TYPE KRS Support Super User GROUP All Customer Groups Current Summary Site Name CAMPUS 1 Country UNITED STATES S
44. dress is found in more than one valid association across the different PRV files the association that the phone ultimately accepts will be the one in the highest priority file The precedence order of the PRV files from highest priority to lowest is device zone type then system as shown above A format has been defined which is similar to the existing auto provisioning info block items to provision the Node and TN values The new Node and TN provision string has the following format reg MACaddr CallServerType ConnectServer NodelD TN The items can be separated by spaces or commas or any combination of them The string is case insensitive so uppercase lowercase or mixed case is all acceptable MACaddr Delimiters in the MAC address can be dashes colons spaces or any combination thereof The following are examples of valid MAC address formats 00 13 65 FE F4 D4 00 13 65 4 04 00 13 65 FE F4 D4 001365FEF4D4 CallServerType Currently the implementation only supports the Communication Server 1000 thus the only supported CallServerType is CS1K ConnectServer Only values S1 and S1S2 are supported at this time NodelD The Node ID can be any number from 0 9999 38 The same format is used for the Terminal Number as would be entered the TN prompt on the phone s display during registration So two formats exist Large system TN LLL SS CC UU or LLL SS CC UU Small system T
45. ds of different environments UNIStim software release 4 1 introduces a new parameter to the Info Block to allow the periodic warning tone volume to be adjusted The new Info Block parameter allowing the periodic warning tone volume to be auto provisioned is provided in the table below Please refer to Appendix B for the complete list of parameters supported within the Info block Periodic Warning Tone Provisioning Parameter xatv 61 no tone 26dB 20dB 16dB A3dB 9dB 6dB OdB Alternate tone volume If the periodic warning tone volume value is set to 0 representing no tone then no tone is generated by the phone Instead the handsfree indicator LED flashes while the microphone is active Feature Advisement Manual configuration of the periodic warning tone volume is not supported If a secure connection to the Application Gateway is provisioned the periodic warning tone is not generated by the phone and thus the volume control parameter is ignored 4 UNIStim VPN Client interoperability applies to the 1120E 1140E 1150E and 1165E IP Deskphones UNIStim software release 4 0 introduced an integrated VPN Client inside the 1100 Series IP Deskphones The UNIStim VPN Client UVC is supported on all the 1100 Series IP Deskphones phones except the 1110 IP Deskphone The UVC allows the IP Deskphone to be deployed remotely and maintain a connection back to
46. e campus 1 i Iv 63 On Generate Keycode page the system for which a keycode is to be generated must be identified The system is identified by entering the system ID i e the same site name used when the system was registered Once the system ID is entered click on Continue To generate a keycode one must either have a numeric authorization code or one can search for a specific Purchase Order PO The example screen below depicts searching for a PO Click Go to PO after entering the PO number Product Registration croup All Customer Groups gt Generate Keycode Retrieve Keycode Step 1 Select your Site Name Documentation Forms amp 00 11 00 11 00 11 Site Name 00 11 eAuth Code 00 11 Ma ent 00 11 CAMPU USER GUID Migrate to Server Mode Step 2 Enter the Auth Code to the list To remov Auth Cod Auth Code and click Remove Note No more than 100 Auth Codes can be entered at one time Add to validate your Auth Code and add it check the check box next to a validated Auth Code Search for Purchase Order Nortel Order m m PO COEO Customer PO test Alternate Other Order v lt gt Once the correct PO is found the next screen will show a list of each licensed feature on the PO On this licensed feature screen the user can select the quantity of each licensed feature required within the keycode Please no
47. e be aware if VLAN filtering is enabled on the phone one must ensure that voice packets are tagged with the appropriate VLAN ID as they exit the network switch else the packets will be dropped by the filter Change in behavior of entering an asterisk to manually provision the Provision parameter in the network configuration menu applies to the 2007 1120E 1140E and 1150E IP Deskphones In UNIStim software prior to release 3 2 0621C6M 0624C60 0625C60 and 0627C60 on the 2007 1120E 1140E and 1150E IP Deskphones respectively the asterisk key could not be used to input the dot for defining an IP address in the Provision parameter in the network configuration menu Since the Provision parameter in the network configuration menu can accept both a URL as well as an IP address the entry is a text based field causing the asterisk key to be accepted as an actual asterisk But since this is different from other parameters that accept only an IP address where the asterisk key is used to represent the dot the inconsistent behavior of this field can be confusing With UNIStim software release 3 2 and greater the typing of the asterisk key in the Provision parameter in the network configuration menu has slightly changed Now if the asterisk key is pressed twice relatively quickly it will input the dot Pressing the asterisk key once will still input the asterisk character consistent with previous behavior 12 AVAYA Throu
48. e connected to an 1120E 1140E and 1150E IP Deskphone through a powered USB hub If it is connected to the phone directly it will cause the phone to completely shut off service to the USB port In Windows Server 2008 IAS has been replaced with Network Policy Server NPS 11 The 1165E IP Deskphone can support the Algo 4900 USB ATA connected directly as long as the 1165E IP Deskphone is locally powered with an AC adapter If the 1165E IP Deskphone is obtaining it power from the network via Power over Ethernet POE then the Algo 4900 USB ATA must be connected to through a powered USB hub Constant humming sound may be heard in Avaya formerly Nortel USB Headset Adapter applies to the 1120E 1140E 1150E and 1165E IP Deskphones A constant humming noise is sometime heard through the headset when either the Enhanced USB Headset Adapter or the Mobile USB Headset Adapter is connected to the 1120E 1140E 1150E or 1165E IP Deskphone The humming noise heard within the headset can be corrected by upgrading the Headset Adapter firmware to version 2 00 98 or greater The USB Headset Adapter firmware version 2 00 98 is available for download from the Software Download link under Support and Training on the Nortel website located at http support nortel com The firmware is available for the 1120E 1140E 1150E and 1165E IP Deskphone models under Phones Clients and Accessories as file Adapter3v2 0098 zip To load the v
49. e phone at the link activity LED to confirm network activity is still occurring and in fact that the phone is not locked The DOWNLOAD_MODE cannot be FORCED for license keycode files applies to the 1100 Series IP Deskphones An issue was discovered with the DOWNLOAD_MODE command in the LICENSING section of the phone s configuration file Unfortunately only the AUTO option can be used at this time to download license keycode files into the phone Support for the FORCED option in DOWNLOAD_MODE is being fixed and will be delivered in a future build of UNIStim software A USB Hub cannot be used to simultaneously connect a mouse and a keyboard to the USB port of the 2007 IP Deskphone applies to the 2007 IP Deskphone only The USB port on the 2007 IP Deskphone will not support the connection of both a mouse and a keyboard connected via a USB hub The USB port on the 2007 IP Deskphone is restricted to supported either a USB mouse or a USB keyboard but not both simultaneously A 2 step upgrade may be required to load UNIStim software release 4 1 on the 2007 IP Deskphone applies to the 2007 IP Deskphone only Due to changes in the memory structure of the 2007 IP Deskphone a 2 step upgrade may be required to load UNIStim software release 4 1 onto the 2007 IP Deskphone if the upgrade is performed with TFTP If the 2007 IP Deskphone is currently running UNIStim software release 3 2 0621C6M or greater then one will be able to upgrade using TFTP direct
50. e signaling using DTLS feature Since the quality of the DTLS feature was not at an acceptable level at the time support for DTLS was delayed on the Communication Server 1000 until the quality concern was addressed The identified quality concerns have now been addressed and support for DTLS is available for UNIStim IP Phone Software Release 4 0 and above with Communication Server 1000 CS1000 Release 6 0 along with the following patches nortel cs1000 tps 6 00 18 65 07 i386 000 nortel cs1000 csv 6 00 18 65 04 i 386 000 These patches are available for download from the www nortel com support website AVAYA Additional information on support for DTLS on Communication Server 1000 can be found in this document as well as in updated CS1000 Release 6 0 Product Bulletin and NTP documentation and in Communication Server 1000 Security Management Fundamentals NTP NN43001 604 04 AC Updates will be provided as more details become available The alternative to secure signaling between the IP Deskphone and the Communication Server 1000 is to deploy the Secure Multimedia Controller SMC 2450 Feature Availability The DTLS feature will be available once the Communication Server 1000 Release 6 including the related Service Update patches is provided and installed and the UNIStim 4 1 software release is installed on the IP sets Further more a root certificate corresponding to the server certificate must be installed on all phones Plea
51. ease 4 1 to verify its performance on this CICM product The 1165E and 1210 IP Deskphones are not supported on CICM 10 1 CICM 10 0 Upgrading the phone s software is dependent upon CICM performing regression test activities on UNIStim Succession software release 4 1 to verify its performance on this CICM product 20 The 1165E and 1200 Series IP Deskphones are not supported on CICM 10 0 CICM 9 0 Upgrading the phone s software is dependent upon CICM performing regression test activities on UNIStim Succession software release 4 1 to verify its performance on this CICM product The 1165E and 1200 Series IP Deskphones are not supported on CICM 9 0 IP Deskphone Software Upgrade Methods Communication Server Dependent Upgrading the IP Deskphone software in a Communication Server 1000 environment The 2007 1100 Series and 1200 Series IP Deskphones supports remote software upgrades through both a TFTP process and the more automated UFTP process direct from the Communication Server 1000 Note that the 1200 Series IP Deskphones are only supported on Communication Server 1000 release 5 5 or later Therefore the software can be upgraded by either UFTP or TFTP Also note that the 1165E IP Deskphone is only supported on Communication Server 1000 release 5 0 or later Therefore the software can be upgraded by either UFTP or TFTP For information on the TFTP software upgrade process for the Commun
52. ed as a PKCS 12 file and loaded onto the phone The PKCS 12 certificate is downloaded to the IP Deskphone the IP Deskphone s configuration file 1120e cfg 1140e cfg and 1150e cfg A new section called DEV CERT must be added to the configuration file to specify the PKCS 12 file to be loaded Both the Accept prompt and the CA Password prompt will time out after 30 seconds If either times out the installation of the device certificate is not completed and the phone will restart this process after waiting 1 hour This process will repeat as long as the CA Server and Domain Name are defined and the device certificate is not successfully installed is assumed that the password has been provided by an out of band method e g email 24 CERT section supports five command lines e DOWNLOAD MODE required command The DOWNLOAD MODE can be either FORCED or AUTO If FORCED the VERSION command is ignored and the licenses files are always downloaded If AUTO the application looks at the VERSION and downloads the certificate files only if they are a newer version than what is currently stored on the phone e VERSION optional command if this command is not present version 0 is assumed The VERSION command specifies the version of the certificates being downloaded When certificates are written to the phone s memory the value for the cfg file s VERSION field or 0 if VERSION is not in the
53. ense to load multiple licenses for the same feature the quantity selected should always be the same as the number of MAC addresses 64 Welcome SuperF SuperL gt Log Out B Technical Support B Register B Product Contro gt Product Registratior Generate gt Gen Temp Keycode Retrieve Keycode Retrieve Custom v Reset Auth Code Remap Site Documentation Forms amp USER GUIDES Regenerate Keycode gt Migrate to Server Mode Delete Temp Keycode Log Note B Feature Manage B Administration eAuth Code Management B Reports B Utility B Contact Global Support lt KEYCODE RETRIEVAL SYSTEM Ut Retrieve History In this section you can search for a System or Site and retrieve the history and any corresponding keycodes USER SuperF SuperL TYPE KRS Support Super User All Customer Groups Site Id Site Name CAMPUS 1 001 00 11 22 33 44 00 11 22 33 44 00 11 22 33 44 00 11 22 33 44 0 00 11 22 33 44 00 11 22 33 44 Product List Associated System Id Associated System Id Associated System Id Associated System Id Associated System Id Associated System Id Current Configured Feature s IP client SRS feature token 4 units Auth Codes Used UNIStim One Year Standard 758528988 License gt w 2 Note that each MAC address keycode can be viewed by selecting the
54. ent UVC feature in UNIStim software release 4 0 and greater interworks with Avaya formerly Nortel VPN Routers running release 8 00 and greater Avaya formerly Nortel VPN Gateway NVG 8 0 1 or greater The UNIStim VPN Client UVC feature in UNIStim software release 4 1 interworks with Avaya formerly Nortel VPN Gateways running release 8 0 1 and greater Nortel Application Gateway 2000 6 3 and higher This software release provide support to interwork with Nortel Application Gateway 2000 AG2000 release 6 3 The Nortel Application Gateway solution delivers packaged applications on the IP Deskphones desktop extending the phone s capability beyond telephony features For more information on the capabilities of the AG2000 please refer to the Product Bulletin P 2008 0005 Global The AG2000 does not support the 1150E IP Deskphone Secure Multimedia Controller SMC 1 0 This software release continues to provide support to interwork with the Secure Multimedia Controller SMC 2450 The SMC 2450 is a purpose built application firewall delivering an integrated inside threat security solution to protect IP Deskphones and multimedia communication servers The SMC 2450 creates a Secure Multimedia Zone around the converged infrastructure to protect against Denial of Service attacks and other security threats while pre configured policy settings simplify deployment and ensure the integrity and availability of the
55. ersion 2 00 98 firmware onto the USB Headset Adapter perform the following procedure Download the firmware file Adapter3v2 0098 zip from the Nortel Technical Support web site Load the file Adapter3v2 0098 zip onto a PC 2 3 Uncompress unzip the file to obtain Adapter3v2 0098 exe 4 Connect the USB Headset Adapter to the PC 5 Start the Adapter3v2 0098 exe application to load the firmware onto the device IP Deskphone s performance will be diminished during broadcast storms applies to all the IP Deskphones By default network traffic to the IP Deskphone will be accepted based on the packet s destination MAC address The phone will therefore accept in addition to all unicast packets sent to the phones MAC address all broadcast and multicast packets as well If the network environment results in a high amount of broadcast or multicast traffic the IP Deskphone s performance may be impacted If Voice 802 1Q is enabled on the phone the phone can then be provisioned to filter some or all of the broadcast or multicast traffic If VLAN Filter is enabled packets will be accepted by the phone based on the packet s destination MAC address as well as the packet s VLAN tag Untagged packets and packets with a VLAN tag different from the Voice VLAN ID will be prevented from reaching the phone This will protect the voice application from excessive traffic sent to the broadcast address or to the multicast addresses But pleas
56. file becomes the new stored version value against which any future comparisons are made e FILENAME required command the filename of the device certificate file to be downloaded The individual device certificate file name is MAC pfx or MAC p12 where MAC is the phone s 12 characters MAC address to which the certificate is associated The FILENAME command can either reference a specific certificate file for which only the phone with that specific MAC address will load the file or the FILENAME command can use the asterisk to represent all MAC addresses If the asterisk is used each individual phone will upon reading this command substitute its own MAC address into the filename thereby assuring that the phone only downloads its specific device certificate file e PROFILE required command The PROFILE command specifies the index of the DCP where the device certificate is to be installed e PURPOSE required command The PURPOSE command specifies which application s can use the PKCS 12 device certificate defined in the DCP Supported values for PURPOSE are shown in the table below To specify multiple purposes simply add each application s value for example to use the same certificate for both VPN and GXAS enter the value 24 16 8 To indicate that the device certificate can be used by all applications enter the value of negative one 1 5 PURPOSE command values Application Value Note EAP TLS 1 S
57. for its provisioning information The precedence rule from highest priority to lowest priority for IP Deskphone provisioning is as follows e Manual provisioning e Automatic provisioning using Link Layer Discovery Protocol LLDP from an 802 1ab enabled network switch e Automatic provisioning using Info Block contained within provisioning files and transferred via TFTP or HTTP Provisioning files contain their own precedence order based on the file type Info Block carried by the Device specific provisioning file Info Block carried by the Zone specific provisioning file Info Block carried by the Type specific provisioning file Info Block carried by the System specific provisioning file e Automatic provisioning using Info Block contained within DHCP option strings and transferred via DHCP Acknowledge message DHCP provision contain its own precedence order based on the DHCP option Info Block carried by the Nortel i2004 B DHCP option Former provisionable parameters carried by the Nortel i2004 A DHCP option Note that VLAN A option is still supported with both Nortel i2004 B DHCP and Nortel i2004 A DHCP options e Automatic provisioning from the call server and or associated telephony manager using UNIStim Last automatic provisioned value e Factory default Automatic provisioning defines provisioning control for each parameter One can either manually or automatically provision each parameter Each provisioning
58. g 4 Automatic cadomain and cahost Character string of 128 characters CA name included in the SCEP request to identify requested CA note that not all CA require the CA name dcphostnameoverride1 Character string of 128 characters Override hostname cahost for this DCP only dcpattrcn1 Character string of 128 characters If Auto CN is disabled this value is used instead of combining cadomain and cahost dcpattrextkeyusage1 Character string made up of one of the Define the Extended Key Usage attributes to be requested following characters for the device certificate a E K any The default is clientAuth c clientAuth 7 RFC 4945 m iKEIntermediate no Extended Key Usage Each of the parameters in the above two tables are replicated an additional 5 times for 1100 Series IP Deskphones except the 1110 IP Deskphone an additional 4 times for the 1110 IP Deskphone and the 1200 Series IP Deskphones and an additional 2 times for the 2007 IP Deskphone The additional parameters will have the same name as above except that the character 1 on the end will be replaced by the character 2 3 etc up to the maximum number of DCP supported Below are a couple of examples of provisioning DCP The first example shows the configuration of DCP 1 for VPN using SCEP and the configuration of DCP 2 for DTLS and SCR using SCEP dcpsource1 scep dcpactive1zy dcppurposet
59. ghput may be slow for large file transfers on conversions from GigE to 100Mbit applies to the 1120E 1140E 1150E and 1165E IP Deskphones In networks in which a PC is connected to the IP Deskphone s PC port and the PC s NIC speed is 100Mbit but the network speed is at GigE large file transfers to the PC can take quite a long time This is an issue with large file transfers only Due to the speed mismatch between the phone s two ports the buffers in the phone can overflow resulting in retransmissions Although the IP Deskphones support Ethernet flow control 802 3x the support is only implemented on the phone s PC port not on the phone s network port Ethernet flow control is a mechanism were the IP Deskphone can request a brief pause from the transmitting Ethernet device if the IP Deskphone buffers are about to overflow Ethernet flow control cannot be implemented on the phone s network port since it impacts the phone s voice quality As a result in environments were the network is GigE but the PC NIC is only 100Mbit large file transfers from the network to the PC can take quite a long time On the other hand since Ethernet flow control is implemented on the phone s PC port in environments were the PC NIC is GigE but the network is only 100Mbits large file transfers should be well managed by the phone s Ethernet flow control mechanism Receiving a LLDP MED Network Policy TLV from the network infrastructure will cause the
60. icate to be loaded into the IP Deskphone To successfully install certificates using SCEP the following phone parameters must be configured either manually or using auto provisioning Server the URL of the SCEP interface of the CA Server As an example for a Microsoft CA server this would be http www lt lt ca_url com gt gt certsrv mscep mscep dll e Domain Name the domain to which the phone will belong e g acme com e Hostname the name assigned to the phone For some authentication servers i e Microsoft IAS this must match a username that can be authenticated in the server If left blank the hostname will be automatically filled with NTIPPxxxxxx where the final 6 characters are the last 6 hex characters from the phone s MAC address When the phone boots with the above configuration a CA root certificate will be requested from the CA Server Once the CA root certificate is received the prompt CA Fingerprint will be displayed on the phone s screen The installer must press the Accept softkey to install the CA root certificate Once accepted the certificate will be saved on the phone and the prompt will never appear again After the CA root certificate is installed a Device certificate must be installed Depending on the CA Server configuration the user may be prompted to enter a challenge password If no challenge password is required the installer must simply select the OK softkey Once the challenge pass
61. ication Server 1000 please refer to the IP Phones Fundamentals NN43001 368 For information on the UFTP software upgrade process for the Communication Server 1000 please refer to the IP Line Fundamentals NN43100 500 Upgrading the IP Deskphone software in a Survivable Remote Gateway SRG environment For information on the software upgrade process for the SRG200 400 please refer to the Main Office Configuration Guide for SRG200 400 Ris1 5 553 3001 207 For information on the software upgrade process for the 5850 please refer to the Main Office Configuration Guide for SRG50 Ris 2 0 553 3001 207 Upgrading the IP Deskphone software in a Business Communication Manager BCM environment Upgrading the IP Deskphone s software is dependent upon a BCM system patch that includes the UNIStim software This is applicable to all BCM platforms BCM system patches will be delivered initially as atomic patches that are individually installable These patches will be rolled up into a monthly Smart Update SU which includes all atomic patch content since the previous SU Patches and SU are posted for partner access on the www nortel com support web site under Voice Multimedia amp Unified Communications then under the respective BCM platform Upgrading the IP Deskphone software in a Communication Server 2100 CICM environment Depending on the MR level the UNIStim software will either be included in the installation files or will
62. im software release 1 3 or greater including the current UNIStim software the link speed and duplex mode is reset to Auto representing Auto negotiation With the phone now configured for Auto negotiation a duplex mode mis match will occur if the other end of the link is still provisioned to force the link to 10Mbit Full Duplex or 100MBit Full Duplex But since UNIStim software release 3 1 for IP Deskphones the means to provision the network port speed and the network port duplex mode has been available in the Info Block If a duplex mis match occurs as a result of the software upgrade the speed and duplex mode can forced by provisioning them via the Info Block This is possible because the auto negotiation will pick the correct speed but the wrong duplex mode Since the speed is correct but the duplex mode is wrong transmission can occur albeit of poor quality The duplex mismatch will impact the time taken for the phone to receive the Info Block but re transmission mechanisms built into the transmission protocols should allow the Info Block to eventually be received by the phone thus correcting the resetting of link speed and duplex mode to Auto Proportional spacing may not be optimal applies to the 2007 1110 1120E 1140E 1150E and 1210 IP Deskphones The 2007 1110 1120E 1140E 1150E and 1210 IP Deskphones support graphical fonts The supported fonts include hinting or intelligence to the font outline making the font
63. im software release 3 4 the previously n no supported dim parameter is no longer supported since its functionality is superseded by the dimt parameter The phone will still accept the dim parameter to prevent errors when reading existing provisioning files but the parameter will be ignored in favor of the new dimt parameter dimt 0 Off Phone inactivity timer to dim the screen 2007 IP T 5 seconds Deskphone only 2 1 minute 3 5 minutes 4 10 minutes 5 15 minutes 6 30 minutes 7 1 hour 8 2 hours sst 0 Off Phone inactivity timer to initiate the slide show 2007 IP T 1 minute Deskphone only 2 5 minutes 3 10 minutes 4 15 minutes 5 30 minutes 6 1 hour 7 2 hours bt y yes Enable Bluetooth 1140E IP Deskphone and 1150E only n no zone Character string up to 8 characters Zone ID 31 file Character string up of the following character 2 read zone file t read type file d read device file For system specific provisioning file specifies what other provisioning files to read hd Character string up of the following character w wired b Bluetooth n none Headset type ar y yes n no Enable Auto recovery arl critical ma major mi minor Auto recovery level critical ma major mi minor Log level ssh y yes n n
64. individual MAC from the Product List dropdown box If selected a summary will be displayed as shown below indicate Current Configured features the line items or authcodes last used creation date and the keycode itself lt Keycode Number 6 Last Update Date 2009 10 14 21 12 49 0 Created By Super Customer Name NORTEL NETWORKS 598 Customer ID 9N0212 Nortel Order COEO 4 Note In order to cut paste contents please sel down to get all content Keycode ect the box heading first i e Keycode and then drag lt xml version 1 0 standalone yes gt lt keycode gt Use ONLY zcars ss 11121 2009 10 14 21 12 49 lt signedby gt lt uid gt 0011223344af lt uid gt lt keytype gt 3 lt keytype gt lt sequence gt 1 lt sequence gt lt datestamp gt 2009 10 14 21 12 49 lt datestamp gt lt regioncode gt Global lt regioncode gt lt eid gt lt eid gt lt feature gt lt code gt IpClientSRSToken lt code gt lt data gt 4 lt data gt lt name gt IP client SRS feature token lt name gt lt expiry gt 2019 10 14 lt expiry gt lt userData gt lt param id SContract lt value gt 2010 10 14 lt value gt lt gt lt signedby gt CKLT 1 3 Generic Development Nortel Internal Download Keycodes as ZIP Download Individual Keycode View Auth Code History l gt K d At this point the choice is to either download the individual keycode license view the authcode specifics o
65. inue advances to the next screen SUPPORT amp TRAINING AL gt IP CLIENTS gt PRODUCT REC Welcome KEYCODE RETRIEVAL SYSTEM 2 SuperF SuperL EN Product Registration 00 This section enables you to register new products into the Keycode Retrieval B Technical Support System so that you can add or transfer features to the product in the future B Register USER SuperF SuperL TYPE KRS Support Super User Product Control GROUP All Customer Groups gt Product Registration gt Generate Keycode E Step Please enter the Site for your site Press the Continue button after finishing gt Gen Temp wi H d lt Required Field Retrieve Keycode Retrieve Custom Note Site Name must NOT contain Blank Spaces gt Reset Auth Code Rem Bite Site Name Campus_1 gt Documentation Forms amp USER GUIDES gt Regenerate Keycode Cancel gt Migrate to Server Mode gt Delete Temp Keycode gt Log Note r Im m 61 AVAYA avaya com At present for IP Clients UNIStim VPN Client licenses one must register the MAC address of each IP Deskphone onto which a license is to be installed The MAC addresses can be provided to KRS using one of two methods 1 using a comma delimited file of MAC addresses to KRS or 2 manually typing in each MAC address To use a comma delimited file of MAC addresses select the Browse button to locate the file on the computer connecte
66. l server 29 y yes Enable VLAN filter on voice stream n no nis a auto negotiation Network port speed 1 10 10 Mbps 100 100 Mbps nid a auto negotiation Network port duplex 1 f full duplex half duplex pc y yes Enable PC port n no pcs a auto negotiation PC port speed 10 10 Mbps 100 100 Mbps pcd a auto negotiation PC port duplex f full duplex half duplex dq y yes Enable 802 1Q for PC port n no dv y yes Enable VLAN for data n no dvid Value from 1 to 4094 VLAN ID for data VLAN dp Value from 0 to 8 802 1Q p bit for data stream Provisioning this value to 8 tells the phone to use the value it receives from the LLDP Network Policy TLV or from the call server pcuntag y yes Enable stripping of tags on packets forwarded to PC port n no y yes Enable 802 1ab LLDP 1 n no pk1 Character string of16 character 51 PK 2 representing 16 hexadecimal digits pk2 Character string of 16 character S2 PK 2 representing 16 hexadecimal digits st y yes Enable stickiness provisioning is persistent in the event a n no new info block is not received cachedip y yes Enable cached IP n no igarp y yes Ignore GARP n no y yes Enable SRTP PSK n no eap dis disable Disable or choose
67. lied by the System Administrator and which are stored somewhere on the PC The Select Data File screen asked the user to locate either the zip file containing the configuration and provisioning files or the directory where the configuration and provisioning files are located 53 AVAYA avaya com Nortel Phone VPN Configuration Wizard v 01 00_00 19 Steps Select Data Files 1 Welcome and Language selection Selectthe data files that will be used to configure your phone 2 Equipment Setup and VPN Use the Browse button to select the directory or zip file on your computer where they are stored 4 Prepare Phone for Configuration 5 Autodiscover Phone 6 Configure Phone 7 Confirmation and Finish Prepare Phone for Configuration Once the data files configuration and provisioning files are located the Prepare Phone for Configuration Screen provides instructions for placing the phone into Listening Mode Listening Mode allows the phone to listen for the Phone VPN Configuration Wizard to establish a connection and transfer the data files The Prepare Phone for Configuration screen is depicted below Nortel Phone VPN Configuration Wizard 01 00 00 19 Steps Prepare Phone for Configuration 1 Welcome and Language selection In this step you will set the phone into Listening Mode 2 Equipment Setup and VPN Note The software version on the phone may not support listening mode 3 Select Data Files en
68. ly to UNIStim software release 4 1 But if the 2007 IP Deskphone is running any software prior to UNIStim software release 3 2 and the upgrade is performed with TFTP then the phone must first be upgraded to UNIStim software release 3 2 before subsequently upgrading to UNIStim software 4 1 The 2 step up upgrade is not required if the upgrade is performed from the call server using UFTP AVAYA Minimum allowable software on the 1150E IP Deskphone with new hardware changes applies to the new hardware 1150E IP Deskphone only Hardware changes in recent 1150E IP Deskphones impose a restriction on the minimum allowable software version on these phones The new hardware phone will absolutely accept an upgrade to UNIStim software release 4 1 But the new hardware 1150E IP Deskphone will NOT accept a downgrade to any software version previous to UNIStim software release 3 4 0627C6T Any attempt to download a software version previous to UNIStim software release 3 4 will result in the phone responding with a denial of software downgrade response The minimum allowable software is dependant on the phone s PEC and hardware release number and is provided in the table below Minimum Allowable Software PEC Hardware Description Minimum Software Release NTYSO6AAE6 07 1150E IP Deskphone Graphite with Icon Keycaps RoHS UNIStim 3 4 0627C6T NTYSO6ABE6 07 1150E IP Deskphone Graphite with English keycaps RoHS UNIStim 3 4 0627C6T
69. m release 4 0 The Phone VPN Configuration Wizard will then guide the user through the steps to use the Phone VPN Configuration Wizard to actually upgrade the phone s software The diagram below depicts the screen presented to guide the user through the software upgrade procedure if the phone did not successfully enter Listening Mode Nortel Phone VPN Configuration Wizard v 01 00_00 19 Steps Prepare Phone for Configuration 1 Welcome and Language selection The phone requires a software upgrade to proceed 2 Equipment Setup and VPN Wait for the phone bootup complete to avoid administrator 3 Select Data Files password Press the Services key on the phone twice in quick succession 5 Autodiscover Phone Services Select the Network Configuration menu Scroll and navigate to the item Provision TFTP IP Use Right and Left Navigation keys to scroll central Enter key to edit S Have you navigated to the item Provision TFTP 6 Configure Phone 7 Confirmation and Finish To upgrade the IP Deskphone s software the Provisioning server address in the Network Configuration menu needs to be modified to point to the PC running the Phone VPN Configuration Wizard The steps required are detailed in the Prepare Phone for Configuration screens depicted above and below Initially the Provisioning server address parameter has to be located as instructed in the screen above After which the p
70. mand pointing to a DTLS server connection Following table highlights connection scenarios based on combinations of client and server DTLS configurations Client Server DTLS Server DTLS Server Action Byte Off Best Effort DTLS Only UNIStim Switch over to DTLS 7 No DTLS from start D TLS from start connection Table 1 Client and Server Config Combinations Note that the client is assumed to have installed a root certificate of CA that has also issued the corresponding server certificate Interoperability with SMC Server The DTLS feature may function with existing SMC servers on the premises after special configuration Specifically e SMC must not be configured to Force Security e SMC must not be configured to Upgrade to Secure Mode e Clients must be configured with either Action byte value of 1 or 7 DTLS secure ports Table 2 must be open in the firewall e that only one type of encryption is possible at any given moment If SMC configuration is setup as above only DTLS encryption will be used to encrypt signaling and vice versa Use of Certificates DTLS feature depends on installed certificates on both client and server A minimum of one root certificate is needed to be installed on the client for server authentication as of UNIStim Rel 4 0 For client or Mutual authentication support for future releases a client or device certificate is also needed to be installed on
71. ming that the phone was not being deployed into an environment supporting a Voice VLAN The default source for VLAN assignment was no VLAN For the phones to be deployed into a voice VLAN environment the phone had to be manually provisioned with either a Voice VLAN ID or manually provisioned to accept and Auto VLAN assignment With UNIStim software commencing with release 2 2 and continuing with present UNIStim software the default configuration for the phone now has Auto VLAN assignment via DHCP enabled But realizing that not all phones will be deployed in an 802 1Q VLAN environment the Auto VLAN assignment support has also been updated to support both an 802 1Q VLAN environment and an environment without 802 1Q VLANs With Auto VLAN enabled if VLAN information is provided within the DHCP option type VLAN A the phone will use the VLAN information to provision a voice VLAN However if no VLAN A option type is provided by DHCP the phone will assume that no VLAN is to be provisioned 13 AVAYA Although the default configuration for voice VLAN has changed the new default configuration will not be applied to field upgrades A limitation of the new functionality is that it could only apply to new phones being shipped from the factory with UNIStim software release 2 2 or greater The default configuration of Auto will not be applied to field upgrades Upgrading software does not change any pre established values already in the phones
72. mmunication Server 1000 to upgrade the IP Deskphone The 1110 1150E 1165E and 1200 Series IP Deskphones are not supported on SRG 50 2 0 SRG 200 400 1 5 Avaya recommends an upgrade to this UNIStim software release at the earliest opportunity No SRG patches are required to support the Enhanced Software Download feature that allows the IP Deskphone software supported on the SRG 200 400 1 5 to remain in synch with the Communication Server 1000 Main office In addition if the Main is Communication Server 1000 release 4 5 or later no patch is necessary on the Communication Server 1000 to upgrade the IP Deskphone The 1110 1150E 1165E and 1200 Series IP Deskphones are not supported on SRG200 400 Ris1 5 Business Communications Manager BCM BCM Compatibility and Requirements Call Server Release Notes and Advisements 50 5 0 Upgrading the phone s software is dependent upon Smart Update SU that includes the UNIStim software Although UNIStim software release 4 1 for IP Deskphones is GA quality at the time of this writing the extent of BCM support is being confirmed 19 AVAYA The 1150E and 1165E IP Deskphones are not supported on BCM 50 5 0 BCM 50 3 0 Upgrading the phone s software is dependent upon a BCM Smart Update SU that includes the UNIStim software Although UNIStim software release 4 1 for IP Deskphones is GA quality at the time of this writi
73. n an hourly basis if the password prompt times out e provide more control over the attributes of the requested device certificate e provide the ability to force a device certificate to be deleted e allow the CA Server configuration to support a URL containing an FQDN hostname instead of only an IP address For additional information on installing certificates into the IP Deskphone please refer to the IP Phones Fundamentals NN43001 368 Installing Device Certificates using PKCS 12 As of UNIStim software release 4 0 the IP Deskphone s certificate support was enhanced to support PKCS 12 device certificates as well PKCS 12 is a standard which allows a device certificate and its private key to be encrypted for secure transmission A PKCS 12 file is encrypted by a user defined password when it is created Then to extract the device certificate with its private key the recipient must know the password After the PKCS 12 file is downloaded the user is prompted to enter the password If the prompt times out the installation is aborted The advantage of using PKCS 12 rather than SCEP is that with PKCS 12 an administrator has full control over the device certificate attributes The disadvantage of using PKCS 12 is that installed device certificates cannot be automatically renewed It is up to the Administrator to keep track of when device certificates will expire To update a device certificate that is about to expire a new certificate must be generat
74. ng the extent of BCM support is being confirmed The 1150E and 1165E IP Deskphones are not supported on BCM 50 3 0 BCM450 5 0 Upgrading the phone s software is dependent upon a BCM Smart Update SU that includes the UNIStim software Although UNIStim software release 4 1 for IP Deskphones is GA quality at the time of this writing the extent of BCM support is being confirmed The 1150E and 1165E IP Deskphones are not supported on BCM 450 5 0 BCM450 1 0 Upgrading the phone s software is dependent upon a BCM system update SU that includes the UNIStim software Although UNIStim software release 4 1 for IP Deskphones is GA quality at the time of this writing the extent of BCM support is being confirmed The 1150E and 1165E IP Deskphones are not supported on BCM 450 1 0 BCM 200 400 4 0 Upgrading the phone s software is dependent upon a BCM Smart Update SU that includes the UNIStim software Although UNIStim software release 4 1 for IP Deskphones is GA quality at the time of this writing the extent of BCM support is being confirmed The 1110 1150E 1165E and 1200 Series IP Deskphones are not supported on BCM 200 400 Communication Server 2100 Centrex IP Client Manager CICM CICM Compatibility and Requirements Call Server Release Notes and Advisements CICM 10 1 MR2 Upgrading the phone s software is dependent upon CICM performing regression test activities on UNIStim Succession software rel
75. nimum Firmware Requirement for 1120E IP Deskphone and 1140E and Clarify Bulletin 2009009916 Rev1 New Product Codes for 1120E IP Deskphone and 1140E EAP MD5 and Microsoft Windows Server 2008 applies to all the IP Deskphones If access control is enabled on the IP Deskphone and MD5 is chosen as the EAP mode realize that EAP MD5 is not available by default in the Microsoft Windows Server 2008 NPS but can be turned on Please refer to Microsoft support for more details on enabling EAP MD5 In addition minimally Service Pack 2 is required on the Windows Server 2008 NPS to support the IP Deskphones using MD5 access control PC Port resets during software upgrade applies to the 2007 IP Deskphone only The PC port on the IP Deskphones temporarily resets during software upgrades and during phone resets due to configuration changes As a result traffic to and from the network and a PC connected to the IP Deskphone s PC port will be disrupted during these periods Minimal firmware required on the Algo 4900 USB ATA applies to the 1120E 1140E 1150E and 1165E IP Deskphones The Algo 4900 USB ATA must have firmware version v1 00 32v or greater before connecting the adapter to the IP Deskphone A Windows based configuration tool to upgrade the ATA firmware version can be found at the Algo web site http www algosolutions com products usbATA fw download html Also note that the Algo 4900 USB ATA is classified as a high power USB device and must b
76. nimum allowable software version on these phones The new hardware phones will absolutely accept an upgrade to UNIStim software release 4 1 But the new hardware 1120E IP Deskphone and new hardware 1140E IP Deskphone will NOT accept a downgrade to any software version previous to either UNIStim software release 3 1 or UNIStim software release 3 4 respectively depending on the level of hardware changes Any attempt to download a software version previous to minimum allowable software will result in the phone responding with a denial of software downgrade response The minimum allowable software is dependant on the phone s PEC and hardware release number and is provided in the table below Minimum Allowable Software PEC Hardware Description Minimum Software Release NTYSOSADE6 01 1120E IP Deskphone Graphite with Icon Keycaps RoHS UNIStim 3 1 0624C6J NTYSOSBDE6 01 1120E IP Deskphone Graphite with English keycaps RoHS UNIStim 3 1 0624C6J NTYSOSBDGS 01 1120E IP Deskphone GSA RoHS UNIStim 3 1 0624 6 NTYSO5ACE6 50 1140E IP Deskphone Graphite with Icon Keycaps RoHS UNIStim 3 1 0625C6J NTYSO5BCE6 50 1140E IP Deskphone Graphite with English keycaps RoHS UNIStim 3 1 0625C6J NTYSOBBCGS 01 1140E IP Deskphone GSA RoHS UNIStim 3 1 0625C64J NTYSO3AEE6 01 1120E IP Deskphone Graphite with Icon Keycaps RoHS UNIStim 3 4 0624C6T NTYSO3BEE6 01 1120E IP Deskphone Graphite with English keycaps ROHS
77. o Enable SSH sshid Character string between 4 and 12 characters SSH user ID 2 sshpwd Character string between 4 and 12 characters SSH password 2 bold y yes n no Enable bold on font display menupwd String between and 21 characters containing only numeric digits asterisk and hash i e only the dialpad symbols Administrator password 2 vvsource n no VLAN a auto VLAN via DHCP lv auto VLAN via VLAN Name TLV Im auto VLAN via Network Policy TLV Source of VLAN information srtpid 96 115 120 Payload type ID ntqos y yes n no Enable Nortel Automatic QoS dscpovr y yes n no DSCP Precedence Override vpn y enable n disable Enable the UNIStim VPN Client UVC within the phone vpntype 1 Nortel VPN Only Nortel VPN devices are supported at this time 32 aggressive Authentication mode main vpnauth psk preshared key Authentication credential certificate X 509 certificate vpnxauth 0 none X Authentication type 1 password vpnpskuser Character string up to 64 characters PreShared Key PSK User ID vpnpskpwd Character string up to 64 characters PreShared Key PSK password vpnxauthuser Character string up to 64 characters X A
78. r download all the keycodes as a single ZIP file To download the specific IP Clients keycode being displayed select Download Individual Keycode But to download all the keycode at once select Download Keycodes as ZIP Download and save the individual keycode file or the combined keycode ZIP file to the PC connected to KRS This file must now be transferred to the IP Deskphone provisioning server to load the keycode onto the IP Deskphone Expanding a Site and Licensing Additional Phones If the site is expanding and one needs to register additional MAC addresses one must create a new Site name within KRS to register the additional phones It is recommended however to use the original site name but add a suffix to distinguish between the two registrations All the remaining steps as outlined above now still apply to the new registration 66 References and Related Documents Product Bulletin P 2009 0143 Global UNIStim Software Release 4 0 for IP Phones IP Phones Fundamentals NN43001 368 IP Phone 1165E User Guide NN43101 102 Clarify Bulletin 2010009988 Rev3 Minimum IP Phone Software Requirement for IP Phone 1150E Clarify Bulletin 2009009363 Rev2 New Minimum Firmware Requirement for IP Phone 1120E and 1140E Clarify Bulletin 2009009916 Rev1 New Product Codes for IP Phone 1120E and 1140E Product Bulletin P 2006 0084 Global Rev7 Headsets for Nortel IP Phones IP Line Fundamentals NN43100 500 Main
79. r retry count dhcp y yes Enable DHCP n no xip Value from 0 0 0 0 to 255 255 255 255 XAS server IP address xp Value from 0 to 65535 XAS server port number xa Character string made up of the XAS server action code XAS Mode and Phone Mode following character g graphical XAS mode Note that there is no explicit character to select text mode f full screen XAS mode Instead the lack of specifying graphical g implies the s secure XAS mode XAS mode is text h hidden Phone mode reduced Phone mode Also note that there is no explicit character to select Full phone mode Instead the lack of specifying either hidden h or reduced implies the phone is to be provisioned for Full phone mode Please be careful not to confuse Full Screen XAS mode f with Full phone mode Note that hidden Phone mode and reduced Phone mode are supported on the 2007 IP Deskphone only unid Character string up to 32 characters Unique network identification menulock f full lock Menu lock mode p partial lock u unlock y yes Enable 802 1Q for voice 1 n no vcp Value from 0 to 8 802 1Q control p bit for voice stream Provisioning this value to 8 tells the phone to use the value it receives from the LLDP Network Policy TLV or from the call server vmp Value from 0 to 8 802 1Q media p bit for voice stream Provisioning this value to 8 tells the phone to use the value it receives from the LLDP Network Policy TLV or from the cal
80. rability DfO e Enhancements to Certificate Support For a brief description of the functionality delivered with UNIStim software release 4 0 please refer to the Product Bulletin P 2009 0143 Global UNIStim Software Release 4 0 for IP Phones For complete details on the functionality delivered with UNIStim software release 4 0 please refer to the IP Phones Fundamentals NN43001 368 or the IP Phone 1165E User Guide NN43101 102 2 Secure Signaling using DTLS Enhancements and Quality improvements applies to the IP Deskphones UNIStim software release 4 0 first delivered the capability to encrypt the signaling communication between the IP Deskphone and the call server using standards based Datagram Transport Layer Security DTLS DTLS guarantees a secure connection between the IP Deskphone and the call server ensuring the integrity and confidentiality of call control In addition numerous DTLS quality improvements have been delivered in UNIStim software release 4 1 including a fix for CR Q02096646 IP Deskphone 12x0 is locked up when making a call from Express Directory via DTLS Forthis reason Avaya strongly recommends an upgrade to UNIStim software release 4 1 with associated CS1000 patches in all environments where one intends to use DTLS Support for DTLS was introduced with Communication Server 1000 CS1000 Release 6 0 and intended to be available with UNIStim software Release 4 0 However an issue surfaced with the UNIStim secur
81. ret this as a Service Downgrade security threat Local site admin must evaluate the implications of such configuration and avoid if necessary In this example connection to server S1 is configured to operate in DTLS mode whereas S2 is configured for regular unencrypted UNIStim mode Note the Action Byte value of 7 for S1 and 1 for S2 Also note the port number which is assigned specially for DTLS CS1000 default is 4101 In general CS1000 is using the convention that each secure port is 1 its corresponding non secure port E g Ports Un secure 4100 7300 5100 5105 Secure 4101 7301 5101 5106 Table 2 DTLS CS1000 Port Assignments Server Configuration The DTLS server CS1K maybe configured in 3 modes 1 DTLS Off Always Un secure 2 DTLS Always Always Secure 3 DTLS Best Effort Upgrade to Secure if possible In Always Un Secure mode for the call server the client can only connect via regular UNIStim e g Action byte value 1 port 24100 In Always Secure mode the server only accepts DTLS client connections E g in this case the client may only use Action Byte value 7 and Port 4101 In Upgrade to Secure mode of CS1000 the client may be configured in either DTLS or Non DTLS mode If non DTLS mode is configured the call server will accept initial connection on Non DTLS UNIStim and then upgrade it to DTLS by sending a new Server Switch com
82. ring this period of time the password prompt is displayed and the entered digits accepted however the phone will not process the incoming digits The password prompt window simply closes and the behavior is identical to that of an incorrect password entry The user will assume the incorrect password has been entered and try again Thus even if the correct password is guessed during the 5 minute period it will be ignored This effectively reduces the guess entry rate to 3 guesses every 5 minutes Once the password has been entered access to the Local Tools menu remains active for 5 minutes During the 5 minutes the menu can be freely navigated exited and entered without being prompted again for the password When the 5 minutes expires the menu is closed The password must be reentered to access the Local Tools menu 45 Appendix Manual Configuration Menu 2007 IP Deskphone The full screen based configuration menu structure below presents the complete configuration menu now available on the 2007 IP Deskphone EAP Mode Disable MD5 PEAP TLS ID 1 ID 2 Password Enable 802 1ab LLDP DHCP No Yes Set IP Net Mask Gateway DNS1 IP DNS2 IP CA Server Domain Name Hostname 51 IP Port S1 Action Retry S1 PK FFFFFFFFFFFFF
83. ription Values Server To view if the current MSL 51 action byte is set to 7 Config local configuration is setup for DTLS Nga S2 Action byte is set to 7 Both 51 and 52 action bytes set to 7 None S1 or S2 Action bytes not 7 Session Current UNIStim session Active Current UNIStim session is DTLS Info info Inactive Current UNIStim session in not DTLS Certificate Certificate Distinguished lt String gt Last used server certificate DN DN Name sent from the copied from the certificate as is server Certificate Issuer of the specified lt String gt Last used server certificate issuer Issuer Certificate Note that DTLS may still be possible by dynamic server redirect from the primary 81 or S2 typically DTLS when possible configuration of the call server AVAYA Last Error Description of last error Auth Fail Authentication failed if any Timeout DTLS Server was unreachable None No Errors in the last session N A Not application initial state Table 3 DTLS Diagnostic Information Security Error Display If a DTLS session fails handshake a security error is triggered This event is displayed on the user terminal Phone display screen in the form of text message Here is how it will be displayed Signaling Security Error Figure 1 DTLS Handshake Failure Error Display This event will also result in an entry into the sec
84. se see Appendix A for details Feature Activation The feature is activated by server configuration parameters on the phone specifically the Action Byte value A designated value of 7 triggers a DTLS only session while a value of 1 allows regular initial registration of the phone with an option to be upgraded later to DTLS session depending on server configuration The parameters can be configured using a DHCP auto provisioning file or manual mode Here is an example on how such a configuration may look like ID Server IP Address Port Action Byte Retry Count S1 192 168 100 100 4101 T 10 S2 192 168 100 200 4100 1 10 Table 1 DTLS Client Example Configuration The feature may also be activated dynamically by the call server While within the existing UNIStim session the call server may send a Download Server Information UNIStim command to the client contents of which match information contained in Table 1 typically with server ID 3 A Quick Server Switch command follows resulting in IP Deskphones being connected to the specified server which may be different than any of the statically configured ones Warning The example as mentioned above may lead to a situation where a secure connection may be inadvertently downgraded to a non secure one by creating a network unavailability condition Although intent of this functionality is to allow for service continuation and redundancy some environments may interp
85. ss the Local Tools menu 47 Appendix I Manual Configuration Menu on 1110 1210 1220 and 1230 IP Deskphones The single line based configuration menu structure below presents the complete configuration menu now available on the 1110 and 1200 Series IP Deskphones EAP O N 1 M 2 3 T 0 if 1 or 2 or 3 ID 1 also if 1 or 2 ID 2 Password LLDP Enable 0 N 1 Y 0 DHCP 0 N 1 Y 1 if 0 Set IP Netmsk Def GW DNS1 IP DNS2 IP CA Server Domain Name Hostname S1 IP S1 Port S1 Action S1 Retry Count S2 IP Xxx Xxx XXX XXx S2 Port S2 Action S2 Retry Count Speed 0 A 1 10 2 100 0 if 1 or 2 Duplex 0 A 1 F 2 H 0 Cfg XAS 0 N 1 Y 1 if 1 XAS IP XXX XXX XXX XXX 48 Voice 802 1Q 0 N 1 Y 1 if 1 Voice VLAN 0 N 1 Y 0 if 1 VLAN Cfg 0 Auto 1 Man 1 This VLAN menu is only presented if DHCP is provisioned to Y above or if LLDP Enabled is provisioned to Y above if 1 VLAN ID VLAN Filter 0 N 1 Y 0 Ctrl pBits 0 7 8 Au 8 Media pBits 0 7 8 Au 8 NT AutoQOS 0 N 1 Y 0 DSCP Ovride 0 N 1 Y 0 This DSCP Override menu item is only presented if LLDP Enable is enabled above and neither the Control DSCP or
86. st 10 When certificate is provisioned both a CA root certificate and a device certificates must be installed in the phone Please refer to Appendix A Certificate Installation for details on installing a CA root certificate and a device certificate into the phone If a FQDN is entered the remote user s local network must have access to DNS to resolve the entered name Typically in a home environment this would be the service provider s DNS 33 dcpcaname1 Character string of 128 characters CA name included in the SCEP request to identify requested CA note that not all CA require the CA name dcphostnameoverride1 Character string of 128 characters Override hostname cahost for this DCP only dcpatircn1 Character string of 128 characters If Auto CN is disabled this value is used instead of combining cadomain and cahost dcpattrextkeyusage1 Character string made up of one of the Define the Extended Key Usage attributes to be requested following characters for the device certificate anyExtendedKeyUsage The default is clientAuth c clientAuth RFC 4945 m iKEIntermediate no Extended Key Usage xatv 0 no tone Alternate tone volume 1 36dB 2 26dB 3 20dB 4 16dB 5 13dB 6 9dB 7 6dB 8 OdB usb y enabled UBS port enabled 3 n disabled usbm
87. stening Mode the next screen of the Phone VPN Configuration Wizard guides the user to discover the IP Deskphones that are in Listening Mode The user is prompted to start the discovery process by pressing the Autodiscover Phone button The Autodiscover Phone screen is shown in the diagram below Nortel Phone VPN Configuration Wizard 01 00 00 19 Steps Autodiscover Phone 1 Welcome and Language selection This step will automatically discover connected phones 2 Equipment Setup and VPN 3 Select Data Files 4 Prepare Phone for Configuration Autodiscover Phone 6 Configure Phone Press to search for connected phones 7 Confirmation and Finish Cancel The Autodiscover process will find all phones in Listening Mode on the network In most cases there will only be one phone discovered the phone that the user placed in Listening Mode But if for whatever reason several phones are found in Listening Mode the user will be prompted to select the phone they wish to provision from a list The phone s MAC address is used as the selection mechanism to decide which phone is to be configured 5 The MAC address of the IP Deskphone can be found on a label on the back of the IP Deskphone 57 AVAYA avaya com The diagram below depicts the Autodiscovery mechanism in progress and indicates that one phone has been discovered Nortel Phone VPN Configuration Wizard 01 00 00 19 Steps Autodiscover Phone 1
88. sure to follow these steps explicitly y pone 5 Autodiscover Phone soon as text banner appears on the display press the 6 Configure Phone following keys in quick succession 7 Confirmation and Finish Cej Mute Mute Confirm the phone displays Listening Mode Note there is a delay before listening mode is entered Yes J 54 Autodiscover Phones The IP Deskphone must now be power cycled and when the IP Deskphone is rebooting the user must watch the phone screen for when the Nortel text banner not the Nortel icon is displayed The Nortel text banner will be displayed for roughly 5 seconds During this 5 second window the user must press the key sequence of mute 5 6 mute on the phone as shown on the Prepare Phone for Configuration screen If successful the phone will display Listening Mode on its screen If the phone successfully entered Listening Mode please skip ahead to the Autodiscover Phones Listening Mode section below If the phone did not successfully enter Listening Mode the user can answer No on the Prepare Phone for Configuration Screen The Phone VPN Configuration Wizard will ask the user to try again and after two unsuccessful attempts the Phone VPN Configuration Wizard will assume the phone cannot be placed in Listening Mode because the software release on the phone is prior to UNISti
89. taining SRG and SRG50 branch office systems two SRG Smart Updates SU exist to allow the SRG and SRG50 platforms respectively to interpret denial of software downgrade responses from the new hardware phones Failure to install the SU introduces the risk that the call server may continuously try and downgrade the software thereby denying service to the phone For SRG 200 and SRG 400 release 1 5 the denial of software downgrade support is included in BCM R400 SU System 024 and later For SRG50 release 3 0 the denial of software downgrade support is included in BCM050 R300 SU System 197 and later This SU is not available for SRG50 release 2 0 If the above SRG SU are not installed then the umsUpgradeAll Main Office system command should not to be executed when the branch office sites has the new hardware 1150E IP Deskphone and the IP Deskphone software at the Main Office precedes UNIStim software release 3 4 For complete details on the minimal allowable software for the new hardware changes in the 1150E IP Deskphone please refer to Clarify Bulletin 2010009988 Rev3 Minimum IP Phone Software Requirement for IP Phone 1150E Minimum allowable software on the new hardware 1120E IP Deskphone and new hardware 1140E IP Deskphone applies to the new hardware 1120E IP Deskphone and the new hardware 1140E IP Deskphone Hardware changes in recent 1120E IP Deskphones and 1140E IP Deskphones impose a restriction on the mi
90. tate Prov California City Ben Lomond Step Review the following configuration Click Save to confirm and save the configuration IMAC Address 00 11 22 33 44 aa 00 11 22 33 44 ab 100 11 22 33 44 00 11 22 33 44 ad 00 11 22 33 44 ae 00 11 22 33 44 af m avaya com Once the user is satisfied that all the MAC addresses are correct click Save to confirm and save the configuration If the Save is successful a Thank You confirmation will be displayed Registration is now complete and one is ready to generate the keycode by selecting Generate Keycode from the side bar on the left The Generate Keycode page will be presented as shown below Welcome BT2 F BT2 L gt Log Out Technical Support B Register B Product Control gt Product Registration gt Generate Keycode gt Retrieve Keycode gt Documentation Forms amp USER GUIDES gt Migrate to Server Mode B eAuth Code Management Contact Global Support t See ae PARTNERS GENERATE KEYCODE KEYCODE RETRIEVAL SYSTEM Generate Keycode With Auth Code amp Purchase Order This section allows a Nortel Networks customer to generate a keycode with an auth code or a purch order UL USER BT2 F BT2 L TYPE External Site Admin User GROUP All Customer Groups Step 1 Enter the Site Name for which you want to generate the keycode Then select continue to proceed Enter Site Nam
91. te that KRS requires that the quantity selected be evenly divisible by the number of registered MAC addresses For example if 6 MAC addresses were registered then one must select multiples of 6 i e 6 12 18 24 etc Once the quantity of each licensed feature has been specified click on Continue KRS will then show a summary of the current PO selection Clicking on Continue returns the user to the select PO screen again where if one wish they can search for additional PO s from which to pull additional licenses to add to the Keycode Once all the necessary PO have been reviewed selecting Go To Summary will take move KRS to the final summary screen showing the system ID list of MAC addresses PO s feature s and quantity selected going into the keycode If everything is correct in the summary clicking on Generate Keycode starts the actual keycode generation Generation of the keycode can take between 10 and 20 seconds When complete the KRS will show the Retrieve History screen On the Retrieve History screen as shown below KRS will display keycode associated to each MAC address 16 KRS also supports wildcard searching By entering the first few characters of a PO number all PO s with that string that are associated with your customer account will be returned At the time of this writing the only licensed feature in UNIStim software release 4 0 is the UVC so there will only be one line item 18 Since it doesn t make s
92. ters via Nortel specific DHCP options The Nortel specific DHCP option types supported included e Nortel i2004 A a unique identifier for provisioning Nortel call server information into the IP Deskphone VLAN A a unique identifier for provisioning 802 10 VLAN information into the IP Deskphone With the introduction of the UNIStim software release 2 2 for the 2007 and 1100 Series IP Deskphones a new Nortel specific option type was introduced 12004 The new Nortel i2004 B specific option type expands the number of parameters that can be provisioned to include all those previously provisioned in the existing option type of Nortel i2004 A plus more The existing option type of Nortel i2004 A will continue to be supported for backward compatibility In fact the new software will accept both option types although it is recommended to either remain with the existing option type or move to the new option type but not both In the event that the IP Deskphone receives both option types values provisioned with the new option type of Nortel i2004 B will have a higher priority than values provisioned with the old option type Nortel i2004 A DHCP option type VLAN A continues to be supported DHCP support for provisioning the IP Deskphones requires DHCP to send a class identifier option with the valid option type in each DHCP Offer and DHCP Acknowledgement The IP Deskphone supports both vendor specific sub ops and site specific options
93. the corporate network by establishing a Virtual Private Network VPN tunnel The UVC feature can be used by telecommuters or remote workers to maintain a corporate phone connection from their remote location The UVC within the IP Deskphone is the client end of the tunnel The corporate end of the tunnel is terminated by an enterprise VPN router or gateway UNIStim software release 4 0 introduced interoperability with the Avaya formally Nortel VPN Router NVR family running software release 8 00 or greater UNIStim software release 4 1 expands the interoperability of the UVC to also include the Avaya formally Nortel VPN Gateway NVG family running software release 8 0 1 or greater AVAYA Product Advisements The following is a list of advisements associated with UNIStim software release 4 1 Some advisements remain from previous releases of software whereas other advisements reflect new or changed behavior introduced with UNIStim software release 4 1 Advisements that are new to UNIStim software release 4 1 or have changed since previous releases of UNIStim software are prefixed with NEW NEW Slight change to the contrast level on the icons on the 1100 Series Expansion Module when the Module is attached to an 1165E IP Deskphone applies to the 1165E IP Deskphone only After upgrading to firmware 0626C7J on the 1165E IP Deskphone if an 1100 Series Expansion Module is attached the user will notice slight changes to the
94. the phone See Appendix for some more information Clients Without a Root Certificate This special case addresses a practical deployment issue when a specific customer is in the phase of deploying DTLS and not all sets have root certificates installed To avoid a possible service disruption during DTLS deployment the clients without a root certificate will continue to register in regular UNIStim mode Once these clients get the root certificates installed their connection will be switched over to DTLS if the server is configured with DTLS Best Effort mode However all such clients must continue to use Action Byte 1 Here is a table to elaborate this further Client Server Server DTLS Server Action Byte DTLS Off Best Effort DTLS Only No connection No connection No connection Table 2 Client Behaviour Without a Root Certificate Use of Self Signed Certificates Self signed server certificates are not allowed If a server presents a self signed certificate the certificate will be rejected and connection terminated Please see Appendix B Error Reference source not found for more information DTLS Diagnostics The local diagnostic feature of IP phones can be used to view diagnostic information To access this data access the local diagnostics menu as usual ie pressing globe icon twice The explanation of diagnostic data information is outlined in the following table Item Desc
95. tion and Finish Confirmation and Finish Configure Phone Click the Configure Phone button to start configuring your phone Configure Phone Cancel After the phone has been successfully configured the Confirmation and Finish screen is presented The Confirmation and Finish screen is shown below At this point the phone is ready to connect to the corporate network Nortel Phone VPN Configuration Wizard v 01 00_00 19 Steps 1 Welcome and Language selection 2 Equipment Setup and VPN 3 Select Data Files 4 Prepare Phone for Configuration 5 Autodiscover Phone 6 Configure Phone Confirmation and Finish To ensure that the phone has been successful configured check the following indicators Look for the basic information on the screen such as date time type of call server directory number Lift the handset and listen for dial tone Ifthe phone is not successfully configured repeat the steps in this wizard or contact your network administrator Cancel 59 AVAYA avaya com Appendix L Nortel Keycode Retrieval System KRS The home page of KRS is the Login and Product Select page as shown in the diagram below If you do not already have a KRS account click on Customer Registration and follow the instructions to request an account SOLUTIONS PRODUCTS SERVICES SUPPORT amp TRAINING PARTNERS HOME gt TECHNICAL SUPPORT gt ONLINE SELF SERVICE gt KEYCODE RETRIEVAL SYSTEM KRS
96. ugh F the letters A B and C can be entered via the 2 key on the dialpad and letters D E and F can be entered via the 3 key For example an IP Deskphone with MAC address 00 19 E1 E2 17 12 would be reset to factory default when the sequence 73639001931321712 is entered on the keypad Please note that the keypad sequence will only be accepted by the phone after the IP Deskphone has finished its boot up procedure 51 Appendix K Phone VPN Configuration Wizard This Appendix will walk though the few steps required to use the Phone VPN Configuration Wizard Using the Phone VPN Configuration Wizard involves seven simple steps including 1 U ol o AR A E Au 5 7 Welcome and Language selection Equipment Setup and VPN Select Data Files Prepare Phone for Configuration Autodiscover Phone Configure Phone Confirmation and Finish Welcome and Language selection Upon launching the Phone VPN Configuration Wizard the user is presented with the welcome screen At the welcome screen the user can select from a choice of languages English is the default The diagram below shows the welcome screen Nortel Phone VPN Configuration Wizard 01 00 00 19 Welcome and Language selection Welcome to the Nortel Phone VPN Configuration Wizard This wizard will help you connect and set up your phone Please confirm your language preference gt Phone VPN Configuration Wizard NO
97. ures are not supported this platform CS1000 5 00W Avaya recommends an upgrade to this UNIStim software release at the earliest opportunity IP Line 5 00 31 SS 5 00 31 The DTLS and SCR features are not supported on this platform The 1200 Series IP Deskphones are not supported on this platform 18 Survivable Remote Gateway SRG SRG Compatibility and Requirements Call Server Release Notes and Advisements 50 3 0 Avaya recommends upgrade to this UNIStim software release the earliest opportunity No 5850 patches are required to support the Enhanced Software Download feature that allows the IP Deskphone software supported on the SRG50 to remain in synch with the Communication Server 1000 Main office In addition if the Main Communication Server 1000 is on release 4 5 or later no patch is necessary on the Communication Server 1000 to upgrade the IP Deskphone The 1150E and 1165 IP Deskphones are not supported on the SRG50 3 0 SRG 50 2 0 Avaya recommends an upgrade to this UNIStim software release at the earliest opportunity No SRG 50 patches are required to support the Enhanced Software Download feature that allows the IP Deskphone software supported on the SRG 50 to remain in synch with the Communication Server 1000 Main office In addition if the Main is Communication Server 1000 release 4 5 or later no patch is necessary on the Co
98. urity log file see below Security and ECR Logs A DTLS handshake failure other than a server unreachable case results in a security error Such errors are logged in security log file The log can be viewed at the phone console with the following command PDT gt listsecuritylogs Other DTLS error and related information is logged into ECR based logging facility To view this file following command needs to be typed on the vxShell PDT gt printLogFile General DTLS logs are registered with severity level Info 3 Adjustable open microphone warning tone during Zone Paging applies to 2007 1120E 1140E 1150E and 1165 IP Deskphones One of the applications supported by the Nortel Application Gateway is Zone Paging In an environment in which Zone Paging is enabled an IP Deskphone end user can initiate a page from his or her phone When a page is initiated in handsfree mode the IP Deskphone s microphone becomes active For security reasons in order to notify the end user that the phone s microphone is active a periodic warning tone also known as an alternate tone is generated by the phone In some environments this periodic warning tone can be disruptive In UNIStim software prior to release 4 1 the periodic warning tone volume could not be adjusted But with UNIStim software release 4 1 the periodic warning tone volume can be adjusted to suit the nee
99. uthentication User ID vpnxauthpwd Character string up to 64 characters X Authentication password vpns1 Character string up to 64 characters IP address or FQDN of the primary VPN server vpns2 Character string up to 64 characters IP address or FQDN of the secondary VPN server vpndiffcpy y copy DSCP from inner packet Source of DSCP value for the tunnel traffic Determines if n use vpndiff value DSCP value is copied from inner packet to outer packet or if vpndiff is used vpndiff 0 255 If vpndiffcpy n then this value is used for the DSCP value for the tunnel traffic vpnmotd 0 999 Message of the Day MOTD timer dcpsource1 scep Method used to install device certificates pkcs12 dcpactive1 n Inactive Profile is active or not y Active dcppurposet Character string made up of the Specifies which phone applications can use this device following character certificate a All applications v VPN Multiple values can be cascaded e g 959 but a can DTLS only be used by itself s SCR 9 GXAS e EAP TLS Licensing dcprenew1 Integer value but also supports the Number of days prior to certificate expiry that a certificate following special values renewal is requested 1 Never 0 Immediately dcpdelete1 n No action If set to y forces the device certificate to be deleted y Delete dcpautocn1 0 Manual Automatically construct the Certificate Name using 1 Automatic cadomain and caho
100. ve Custom Reset Auth Code gt Remap Site gt Documentation Forms amp pie Heme USER GUIDES System Id Regenerate Keycode Migrate to Server Mode Delete Temp Keycode Log Note Management B Reports KEYCODE RETRIEVAL SYSTEM Product Registration This section enables you to register new products into the Keycode Retrieval System so that you can add or transfer features to the product in the future KRS Support Super USER TYPE SuperF SuperL Uzer GROUP All Customer Groups Step Query available sites by entering text in any combination of the two query fields and then click the Search button Matching sites will be displayed in the result list Note that the result list will show only the first 50 sites that satisfy the query so you may need to further refine your query Create a new site by clicking the Create button System ID search format 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00 CC 00 00 00 00 00 DD 0000000000EE n m K gt avaya com Before a keycode can be generated the system for which the keycode is to be generated must be registered To begin Registration one selects Create on the Product Registration Screen After which the screen as shown below will allow one to enter a site name that will be used to identify the system Please note that blank spaces are not allowed within the site name Once a site name is entered clicking on Cont
101. word is entered or the OK softkey is pressed the phone will then request a device certificate and Waiting for Approval will be displayed on the phone s screen Depending on the CA Server configuration it may be necessary for the installer to manually approve the certificate request using the CA Server All subsequent certificates must be signed 5 For the Microsoft CA Server MSCEP installation allows the option of configuring a challenge password If configured the user must access http www lt lt ca_url gt gt certsrv mscep mscep dll with a web browser to obtain a temporary password For the EJBCA CA Server the password if any defined for the End Entity for each phone must be entered 23 After the certificate is approved automatically or manually the Waiting for Approval prompt will be removed Once approved the phone is ready to use the device certificate As of UNIStim software release 4 0 the IP Deskphone s support for SCEP was enhanced to e allow certificates installed using SCEP to be associated with a specific device certificate profile DCP e allow the definition of the number of days prior to expiry when the phone should attempt to renew the device certificate automatically default is 90 days e eliminate the need to be prompted for the CA fingerprint during renewal although the user is still prompted for the CA password e automatically repeat the prompt for certificate renewal o

Avaya UNIStim Software release 4.1 Notice

Contents

Download Pdf Manuals

Related Search

Related Contents