Security | Avaya 4600 specs

Suggestions for Installation and Configuration

Security

In VoIP, physical wire is replaced with an IP connection. The connection is more mobile. Unauthorized relocation of the IP telephone allows unauthorized users to send and receive calls as the valid owner. For further details on toll fraud, see the DEFINITY® or Avaya Communication Manager documents mentioned in Related Documents on page 15.

Any equipment on a data network, including a 4600 Series IP Telephone, can be the target of a Denial of Service attack. Usually, such an attack consists of flooding the network with so many messages that the equipment either:

●spends so much time processing the messages that legitimate tasks are not processed, or

●the equipment overloads and fails.

The 4600 Series IP Telephones cannot guarantee resistance to all Denial of Service attacks. However, each Release has increasing checks and protections to resist such attacks while maintaining appropriate service to legitimate users.

All 4600 Series IP Telephones that have WML Web applications and run R2.2 software support Transport Layer Security (TLS). This standard allows the phone to establish a secure connection to a HTTPS server, in which the phone’s upgrade and settings file can reside. This setup adds security over the TFTP alternative.

You also have a variety of optional capabilities to restrict or remove how crucial network information is displayed or used. These capabilities are covered in more detail in Chapter 4: Server Administration, and include:

●As of Release 2.0, restricting the 4600 Series IP Telephone’s response to SNMP queries to only IP Addresses on a list you specify.

●As of Release 2.0, specifying an SNMP community string for all SNMP messages sent by the telephone.

●As of Release 1.8, restricting dialpad access to Local Administration Procedures, such as specifying IP Addresses, with a password.

●Removing dialpad access to most Local Administration Procedures.

●Restricting the end user’s ability to use a telephone Options application to view network data.

Issue 2.2 April 2005 33

Image 33

Avaya 4600 manual Security

Contents

Series IP Telephone Copyright 2005, Avaya Inc All Rights Reserved Introduction Requirements Diffserv Appendix a Avaya 46xx IP Telephone MIB 123 Appendix D Administering Thin Client Directories 143 Page Intended Audience About This Guide Document Organization Change History Terms Used in This Guide What’s New in Release VoIP QoS Administrative Conventions Used in This GuideItalics Related Documents Online DocumentationDefinity Documentation Release Avaya Communication Manager Software Documentation Release Series IP Telephone Installation Guide Series IP Telephones Safety Instructions IP Telephone User Guide 4601/4602/4602SW IP Telephone Stand Instructions4602/4602SW IP Telephone User Guide 4610SW IP Telephone User Guide Ietf Documents ITU Documents ISO/IEC, ANSI/IEEE Documents Customer Support Introduction Overview of Voice over IP VoIPData and Voice Network Similarities Tandem Coding Delay and Jitter Standard Voice Coding Standards Http QoS Snmp Network Assessment , , and Figure TCP/UDP Port Utilization Another IP endpoint Media Gateway orVoice Monitoring Manager Snmp MIB Viewer DNS Server Tftp ServerCNA Server Http Server Web or Proxy Server Directory ServerFTP Server IP Softphone Reliability and Performance Suggestions for Installation and ConfigurationApplications Series IP Telephone Another 4600 Series IP Telephone IP Address Lists and Station Number Portability Security Series IP Telephones Registration and AuthenticationDual Connection Architecture Single Connection Architecture Dhcp and File Servers WAN Considerations Telephone to Network Initialization ProcessDhcp Server to Telephone Telephone and File Server Telephone and the Avaya Media Server Page Hardware Requirements Requirements Additional Hardware Requirements Media Server Avaya IP IP Telephone ReleaseExcept Series IP Telephone Safety Instructions See the 4600 Series IP Telephone Installation GuideSoftware Requirements Requirements Server Administration IP Telephone Installation Guide 4600 IP Telephone Installation GuideDhcp Vlan 4600 IP Telephone Installation Telephone Installation GuideSson Dhcp Guide Dhcp TFTP/HTTP Software Checklist Dhcp and File ServersDefinity Release From Required Network Information Dhcp Software Alternatives Choosing a Dhcp Configuration Dhcp Generic Setup Dhcp Server Administration Dhcpack Setting of System Values Set to Select Start--Settings--Control PanelWindows NT 4.0 Dhcp Server Select Scope--Create Select Start--Programs--Admin Tools--DHCP Manager Example Select Dhcp Options--Defaults in the menu Select Scope under Dhcp Options Click Edit ArraySelect option 003 from the Unused Options List Select the Global parameter under Dhcp Options Select Defaults from the DHCPOptions menu Verifying Your Configuration Windows 2000 Dhcp Server Select Start--Programs--Administrative Tools--DHCP Example Click the Configure Options... option Completing the New Scope Wizard dialog box displaysUnder Predefined Options and Values, click Add Change the Data Type to String Activating the New Scope Tftp Tftp Generic Setup Avaya Tftp Suite Pro Select System--SetupTftp Server on S8300 Media Server Start--Programs--Avaya Tftp Server--TFTPServer32 Dnssrvr DomainHttpsrvr Httpdir Procpswd PHY2STATRtcpmon Vmlhome Http Http Generic Setup Series IP Telephone Scripts and Application Files Server Administration Choosing the Right Application File and Upgrade Script File Server Administration Contents of the Upgrade Script # END Group System Value Contents of the Settings File Ieee 802.1D and 802.1Q QoS Diffserv UDP Port Selection Parameters in Real-Time Possible Values Network Audio Quality Display on 4600 Series IP Telephones Rsvp and Rtcp Vlan Considerations Administering Options for the 4600 Series IP Telephones Cnaport AuthCnasrvr Dhcpstd Telephone country code. The administered Procstat StaticTlssrvr Entering Options Using the Telephone Dialpad DNS AddressingCustomizing the Site-Specific Option Number Sson Enhanced Local Dialing Server Administration Customizing the 4630/4630SW IP Telephone Directory Application Parameters 2253, Lightweight Directory AccessProtocol v3 UTF-8 String Representation of Distinguished Voice Mail Application Parameters Web Access Application Parameters Setting/Parameter Name Type 4630/4630SW Backup/Restore Call Log Archive Server Administration Ftpuserstat Tpslist Subscribelist Application Status Flag Appstat Backlight Parameters 4621SW, 4622SW, and 4625SW onlyBaklightoff Application Status Flags and Their Meaning Appstat Value This is the default value Issue 2.2 April 2005 Setting/Parameter Name Type Error Conditions Troubleshooting Guidelines Troubleshooting Guidelines Some Error Conditions in Operation of 4600 Series IP Telephones Condition Cause/ResolutionResolution As above Troubleshooting Guidelines PBX Resolution None Cause The 46xxupgrade.scr file was Series IP Telephone Installation Guide See of the 4600 Series IP Telephone Installation Guide Clear Administrative Option Clear all values? =no #=yes Mute 2 5 3 2 7 # Mute C L E a R # Reset Administrative Option Reset System ValuesMute 7 3 7 3 8 # Mute R E S E T # Reset values? =no #=yes Restart the Telephone Mute 8 4 3 9 # Mute V I E W # View Administration Option PWB SN Parameter Values Name System Value FormatPWB Vlan ID Aaa.bbb.ccc.ddd Error Messages Cause The telephone is seeking a gatekeeper on During Registration Addr option. The 4600 Series IP Telephone Cause The specified extension is already in use During Operation 4630/4630SW IP Telephone User Guide, or Troubleshooting the 4601 IP Telephone Visual Indication Message Waiting indicators at top of phone Awaiting user entry Troubleshooting the 4601 IP Telephone Page Downloading the Avaya 46xx IP Telephone MIB Appendix a Avaya 46xx IP Telephone MIBPage Introduction General Background Browser Features and Behavior Document Skeleton Content-Based Style Logical Style Physical Spacing and Layout Physical Style Lists Lists and Tables Images Frames Links Forms Character Entities ColorsFonts Design Guidelines CookiesFixed-Width Objects Images Maintaining Context Click-to-Dial Functionality User Interaction Generated code is rendered as this Web Page Appendix C Creating Web Sites for Other Series IP Telephones Page Appendix D Administering Thin Client Directories Page Push Content Appendix E The Push Feature For More Information on Push Push Priorities Index Delay and Jitter Snmp