Phone Systems

Previous Thread
Next Thread
Print Thread
Rate Thread
IP office and remote IP phone
#633757 11/13/19 12:26 AM
Joined: Mar 2008
Posts: 228
Member
OP Offline
Member
Joined: Mar 2008
Posts: 228
I have a new ip office we are installing, the user Wants a 9608 phone at his home. We have set up many ip phones, but usually on the same network. DO I need to set up a VPN or is there a simple way?

Bluewater Sailing
https://www.patreon.com/bePatron?u=5256033
Re: IP office and remote IP phone
Joined: Jul 2001
Posts: 3,266
Moderator-Avaya-Lucent, Antique Tele
*****
Offline
Moderator-Avaya-Lucent, Antique Tele
*****
Joined: Jul 2001
Posts: 3,266
Open up the specific ports on the firewall, and whitelist ONLY the user's home IP to get access through the firewall. The extension is a "remote worker", you can have up to 4 without any additional licensing.

Or, program the firewall with an IPSec Group VPN, program the 9608 with matching parameters. Now you can have as many as the firewall will allow.

In both cases, be sure the remote subnet is different from the IP Office's local subnet, and you have a default route to the firewall, or add explicit routes as needed


Re: IP office and remote IP phone
Joined: Mar 2008
Posts: 228
Member
OP Offline
Member
Joined: Mar 2008
Posts: 228
Thanks Tommy - but which end needs the white list? the router at the office? Think they just have a residential router, D-link or linksys at the office same thing at the home.

Re: IP office and remote IP phone
Joined: Jul 2001
Posts: 3,266
Moderator-Avaya-Lucent, Antique Tele
*****
Offline
Moderator-Avaya-Lucent, Antique Tele
*****
Joined: Jul 2001
Posts: 3,266
https://documentation.avaya.com/bun...erR11.0/page/Remote_HTTP_Extensions.html

At the office, you need a Static Public IP Address, the Internet modem should be set in Bridge mode, and they need a real firewall.
In the firewall, you allow connections on ports 1719, 1720, and 46750 through 50750 (but verify the RTP range on the VoIP tab of the IPO's LAN port)
The firewall must BLOCK connections on those ports from any other source, or you WILL be hacked

At this point, you might as well program an IPSec VPN on the firewall, program the built in IPSec VPN in the 9608 phone, and now the phone can connect from anywhere, even if the home's public ip changes, or you eventually need more remote phones.

Re: IP office and remote IP phone
Joined: Mar 2008
Posts: 228
Member
OP Offline
Member
Joined: Mar 2008
Posts: 228
Just got back from the site, bad news, they have a cisco router, not a residential one.

Re: IP office and remote IP phone
Joined: Jul 2001
Posts: 3,266
Moderator-Avaya-Lucent, Antique Tele
*****
Offline
Moderator-Avaya-Lucent, Antique Tele
*****
Joined: Jul 2001
Posts: 3,266
So have their IT Vendor add the programming for a remote phone or the IPSec VPN


Link Copied to Clipboard
Forum Search
Most Recent 5 Post
UX5000 that was migrated to a SV8100
by oobie - 08/14/20 07:47 PM
CISC version needed
by Yoda - 08/14/20 05:40 PM
Office server 100
by bditech - 08/13/20 05:50 PM
Definity support
by ALB300 - 08/13/20 01:53 PM
HELP toshiba DP5130-FSDL system compatability
by Duane F. - 08/12/20 09:57 PM
Who's Online Now
21 members (OBT, justbill, Curlycord, Ruben, Yoda, hbiss, gelehu, Noobed2336, nortelvoip, BobRobert, Silversam, hitechcomm, DonaldR, Carl Navarro, JBean3329, ECI Tech, EV607797, Mercenary Roadie, morephones, RATHER BE FISHING, usedphones), 276 guests, and 97 robots.
Key: Admin, Global Mod, Mod
Popular Topics (Views)
Forum Statistics
Forums94
Topics93,877
Posts636,836
Members49,330
Most Online5,661
May 23rd, 2018
Today's Birthdays
ARCADIAN, galleno64, Pyronius, Todd Burke
Newest Members
gertter, bmerri19, Henry VIII, jmontler, barryv
49329 Registered Users
Get Tech Support Now! Click the banner below
Get Tech Support Now!
EMP & Lightning Home Surge Protection
EMP - Click Here!
Top Posters (30 Days)
dexman 40
DonaldR 23
hbiss 21
Ruben 17
EMP Shield for Commercial - Home & Vehicle
Use Coupon code SAVE - Click Here!
Servpro Ventura 24-Hour Emergency Service
Free Estimates call us now 24Hours
Contact Us | Telephone System Tech Support | Terms of Service

Sundance Communications is not affiliated with any of the above manufacturers.
©Copyright Sundance Communications 1998-2020
Trusted Partners