Toshiba CTX28 manual Client Firewall Considerations, Dos and Don’ts for Setting Up the System

IP Telephony and QSIG Over IP

Pre-installation Guidelines

Client Firewall Considerations

When installing a CTX with IP, you need to obtain information about your client’s firewall.

❐Will the client allow you access through their firewall? If not, you will have to configure around their firewall.

In case of providing services like packet filtering by setting a firewall between the terminal used for the “IPT Anywhere” environment and the BIPU-MIA interface, you need to prepare an appropriate setting that allows IPT control signals and voice signals to penetrate the packet filter and other features of the firewall.

❐If your clients are using Zonealarm® and Microsoft Windows XP®, you have to enable the following:

•COM surrogate: access to trusted & Internet

•Generic Host Process: access to trusted & Internet

•Microsoft Distributed Transaction Coordinator (MS DTC) console program: access to trusted & Internet AND access as a server to trusted & Internet

•Internet Information Services (IIS): access to trusted & Internet

•Windows Management Instrumentation (WMI): access to trusted & Internet

Dos and Don’ts for Setting Up the System

CTX IP Telephones and Strata Net are not compatible with older CTX line cards. If IP Telephones access any of the line cards listed below, the user will experience unacceptable echo return loss and voice quality. For best speech quality we recommend using the appropriate CTX cards for CTX IP telephone connections.

Make sure that you have Printed Circuit Boards (PCBs) that are compatible with CTX R2.0 and higher software and the IP telephones.

•Do not use – RCOU1A, RCOS1A, REMU1A (two-wire), RDDU1A, RGLU1A, RGLU2A

•OK to use – RCOU3A, RCOS3A, REMU1A (four-wire), REMU2A (two-wire/four-wire), RGLU3A. and RDDU2A.

•Must use VPN for remote IP telephones that connect over the Internet with BIPU-M1A.

•With the BIPU-M2A, the IP telephone will now work with DSL and cable routers.

When connecting remote IP telephones to the BIPU-M2A over the Internet, a VPN router is needed to circumvent Network Address Translation (NAT) and firewall issues by tunneling. Otherwise, the BIPU-2MA must be configured with a public IP address outside the network firewall. See “IPT Anywhere” on page 9-13.

9-2 Strata CTX I&M 06/04