Avaya 9600 manual Security

Page 34

Network Requirements

Table 6: Transmitted Packets (Source = SIP IP Telephone) (continued)

Destination Port

Source Port

Use

UDP or TCP?

 

 

 

 

RTCPMONPORT

PORTAUD +

RTCP packets transmitted to

UDP

 

1 (if

an RTCP monitor

 

 

PORTAUD

 

 

 

is even) or

 

 

 

PORTAUD –

 

 

 

1 (if

 

 

 

PORTAUD

 

 

 

is odd)

 

 

 

 

 

 

System-specific

Any unused

Transmitted signaling

UDP

 

port number

protocol packets

 

 

 

 

3 of 3

 

 

 

 

Security

For information about toll fraud, see the respective call server documents on the Avaya support Web site. The 9600 Series SIP IP Telephones cannot guarantee resistance to all Denial of Service attacks. However, there are checks and protections to resist such attacks while maintaining appropriate service to legitimate users.

9600 Series SIP IP Telephones support Transport Layer Security (TLS) for signaling and for secure communications (SRTP). This standard allows the telephone to establish a secure connection to a HTTPS server, in which the upgrade and settings file can reside. This setup adds security over another alternative.

Communications between the 9600 Series SIP IP telephone and the Personal Profile Manager (PPM) can also be secured by setting the CONFIG_SERVER_SECURE_MODE parameter.

You also have a variety of optional capabilities to restrict or remove how crucial network information is displayed or used. These capabilities are covered in more detail in Chapter 6: Server Administration and include:

Depending on the SIGSIGNAL parameter, supporting signaling channel encryption while registering, and when registered, with appropriately administered Avaya Communication Manager.

Restricting the response of the 9600 Series SIP IP Telephones to SNMP queries to only IP Addresses on a list you specify.

Specifying an SNMP community string for all SNMP messages the telephone sends.

Restricting dialpad access to Craft Local Procedures to experienced installers and technicians and requiring password entry to access Craft procedures.

Restricting the end user’s ability to use a telephone Options application to view network data.

34 9600 Series SIP IP Telephones Administrator Guide SIP Release 2.0

Image 34
Contents Issue 2 December Security Introduction SIP Enablement Services SES Administration Telephone Software and Binary Files Appendix C Sample Station Forms 121 Index 135 Introduction About This GuideIntroduction Rsvp Change HistorySIP Software Release VmonFor more information, see Visiting User Administration What’s New in SIP Software ReleaseWhat’s New in SIP Software Release Useexchangecontacts PHY1DUPLEX PHY2DUPLEX InterdigitdialingtimeoutdurationUseexchangecalendar Document Organization Other DocumentationPage Administration Overview and Requirements Series IP TelephonesAdministration Overview and Requirements IP Addresses AdministrationQuality of Service Tagging and VlanParameter Data Precedence Lldp DhcpAdministrative Process Administrative ChecklistNetwork Requirements LANTelephone Initialization Process Telephone to LLDP-Enabled NetworkTelephone to Network Telephone and File Server Telephone to Dhcp ServerTelephone and the SES Server Error Conditions Page Network Assessment Network RequirementsHardware Requirements Server Requirements Dhcp ServerHTTP/HTTPS Server Required Network InformationNetwork Time Protocol NTP Server Registration and Authentication Other Network ConsiderationsQoS Reliability and PerformanceIeee 802.1D and 802.1Q SIP Station Number Portability Parameters in Real-Time Possible ValuesTCP/UDP Port Utilization UDPUDP/TCP Transmitted Packets Source = SIP IP TelephoneRange CNA RTPSecurity Registration and Authentication Page Switch Compatibility Communication Manager AdministrationCommunication Manager Administrative Requirements Call Server RequirementsSIP Trunk Administration System-Level Preparation TasksIP Interface and Addresses Call Routing AdministrationUDP Port Selection L2QVLAN Rsvp and RTCP/SRTCPL2QSIG Auto Hold Voice Mail IntegrationCall Transfer Considerations Conferencing Call Considerations Telephone AdministrationFNU Call Forward CM/SIP IP Telephone Configuration Requirements CM/SIP IP Telephone Configuration Requirements Services SES Button Assignments Administering Stations Xxxxxx whereAdministering Features Communication Manager Administration Click on Launch Administration Web Interface SIP Enablement Services SES AdministrationUsing the Web Browser to Configure SES IntroductionClick Continue Software Checklist Server AdministrationDhcp and File Servers Dhcp Server Administration Configuring Dhcp for 9600 Series SIP IP TelephonesParameters Set by Dhcp Description Dhcp Generic Setup Option 52 Overload Option, if desired Option 42 Sntp ServerOption 51 Dhcp lease time Option 53 Dhcp message typeOption 59 Dhcp lease rebind time Select Start--Settings--Control Panel Dhcpack Setting of System Values Set toWindows NT 4.0 Dhcp Server Select Start--Programs--Admin Tools--DHCP Manager Define the Telephone IP Address Range Set the Subnet MaskSelect Scope under Dhcp Options Click Edit ArraySelect the Global parameter under Dhcp Options Select Defaults from the DHCPOptions menu Activating the LeasesSelect Start--Programs--Administrative Tools--DHCP Windows 2000 Dhcp ServerCompleting the New Scope Wizard dialog box displays Under Predefined Options and Values, click Add Change the Data Type to StringHttp Generic Setup General Download Process Telephone Software and Binary FilesSoftware Choosing the Right Binary File and Upgrade Script File Series SIP IP Telephone Scripts and Binary FilesUpgrade Script File Settings FileContents of the Settings File SET Sntpsrvr 192.168.1.111 SET Gmtoffset -500 SET Dstoffset Group System Value # ENDAdministering Telephone Options Administering Options for the 9600 Series SIP IP TelephonesAgcspkr AgchandAgchead AudasysConfigserver CallfwddelayConfig Server CalltransferCoverageaddr SettingmodeCountry USA CurrentskinDscpaud DOT1XEAPS MD5DOT1XSTAT DscpsigDefault ENABLEG726 ENABLEG711UENABLEG722 ENABLEG729Enhdialstat EnablerediallistRemovaltimer ExchangeserverDomains InterdigittimeoutHttpexception HttpproxyLanguages LldpenabledLANG0STAT LocalloglevelMediaencryption LogcategoryLogos MsgnumMycertcaid MusicsrvrMwisrvr Mycertcn $SERIALNOOutbound NodigitstimeoutMycertwait SubscriptionPHY2VLAN PhnnumofsaPHY2PRIO PoeconssupportProvideedited PresenceserverPPM DialingCalendar QkloginstatProvideexchange Provide LogoutRtcpmonport RtcpcontRtcpmon RtpportlowSipconferenceconti SipsignalSipportsecure NUESnmpstring SkinsSnmpadd SpeakerstatTlssrvrid TcpkeepalivetimeTimeformat TrustcertsVumode VutimerRegistrationtimer WaitforVlan Tagging Vlan ConsiderationsWmlproxy Vlan Default Value and Priority Tagging Vlan DetectionVlan Separation Vlan Separation Rules Then DNS Addressing Ieee802.1X Pass-Through and Proxy Logoff 802.1X Supplicant OperationAdministering Telephone Options Link Layer Discovery Protocol Lldp TIA Lldp MED LLDP-MED BootnameMAC / PHY TIA Lldp MEDSubtype = Impact of TLVs on System Parameter Values Parameter Name ImpactPoecons Visiting User AdministrationSupport Emergency Number Administration Language Selection Enhanced Local Dialing Enhanced Local Dialing Enhanced Local Dialing Requirements Administering Applications and Options Customizing Telephone Applications and OptionsAdministering Standard Avaya Menu Entries Avaya a Menu AdministrationAdministering the WML Browser Avaya a Menu Administration Page Appendix a Glossary of Terms Encryption MediaChannel ProxyRegistration SignalingUnnamed VoIPPage Appendix B Related Documentation Ietf Documents ITU Documents ISO/IEC, ANSI/IEEE DocumentsPage Station Appendix C Sample Station FormsStation Options Station Feature Options Enhanced Call ForwardingAbbreviated Dialing Station Feature Button AssignmentsStation Site Data Button AssignmentsCall Center System Parameters EAS FEATURE-RELATED System ParametersService Observing VectoringIP Network Region IP Address MappingVlan Media ParametersINTER-GATEWAY Alternate ROUTING/DIAL Plan Transparency Backup Servers in Priority Order Security ProceduresTCP Signaling Link Establishment for Avaya H.323 Endpoints Stations with OFF-PBX Telephone IntegrationFAX TDD/TTYNumbering PUBLIC/UNKNOWN Format WANCAC Igar CPNAutomatic Trace Route on IP Dtmf Transmission ModeRtcp Monitor Server Media Gateway IP EndpointClass of Restriction FRLClass Restriction COR ID SID Optional FeaturesOptional Features IP Port Capacities Used UsedDS1 MSP? ARS?ATMS? System Parameters Customer-Options Optional Features screen Index Numerical108 Snmp
Related manuals
Manual 4 pages 45.27 Kb

9600 specifications

The Avaya 9600 series is a robust line of desktop phones designed to meet the needs of modern business communication. Tailored for users who require advanced functionalities, the 9600 series offers a rich set of features that enhance productivity and collaboration in the workplace.

One of the standout features of the Avaya 9600 series is its high-resolution graphical display. The intuitive interface with customizable menu options makes it easy for users to navigate through various functions and settings. The color screen enhances visibility and allows for clearer visual communication, essential for today’s fast-paced business environments.

In terms of audio quality, the Avaya 9600 series excels with high-definition voice technology. Users can benefit from crystal-clear audio, which minimizes misunderstandings during calls and enhances remote collaboration. The phones are equipped with full-duplex speakerphone functionality, ensuring that all parties can be heard clearly during conference calls.

Another significant characteristic of the Avaya 9600 series is its support for a wide range of communication protocols, including Voice over IP (VoIP) and SIP (Session Initiation Protocol). This versatility enables seamless integration with various communication systems, making the 9600 series suitable for companies of all sizes. The phones can connect to both cloud-based and on-premise solutions, allowing businesses to choose the best communication strategy for their needs.

User personalization is a key aspect of the 9600 series. The phones come with programmable function keys that allow users to customize their setup according to individual preferences and frequently used features. Additionally, the series supports Bluetooth and USB connectivity, enabling users to connect a variety of headsets and accessories for enhanced audio options.

Security is paramount in business communications, and the Avaya 9600 series addresses this with advanced security features. The phones support encryption protocols to protect sensitive information during calls, ensuring that businesses can communicate confidentially without the risk of eavesdropping.

Lastly, the Avaya 9600 series is designed for scalability. As organizations grow, the phones can easily be integrated into existing systems or expanded to accommodate additional users without requiring significant changes to the infrastructure.

In summary, the Avaya 9600 series is a powerful communication tool that combines advanced features, superior audio quality, and robust security to empower businesses. Its adaptability and user-friendly design make it a preferred choice for organizations aiming to enhance their communication efficiency and productivity.