Register J100 Series SIP Handset to Avaya IP Office - Using Public IP and TCP (No Certificates)

Program Avaya IP Office System

System, System Tab

Use Preferred Phone Ports can be enabled if you require, this will mean you will need to use the port 8411 to access the 46xxsettings.txt file of the system (this is referenced later in the document) 

It also means port 443 is not required to be used for port forwarding

Messaging Server should be set to Avaya Spaces (to allow instant messaging to be stored in Avaya Spaces)

System LAN1, VoIP Tab: SIP Registrar Enable – ticked

System LAN1, VoIP Tab: SIP Remote Extn Enable – ticked

System LAN1, VoIP Tab: SIP Domain Name – Enter the Public IP address 

System LAN1, VoIP Tab: SIP Registrar FQDN - Enter the Public IP address, to which the SIP endpoint should send its registration request. This address must be the external IP address of the router that uses the same public IP address programmed in the Avaya phone system (this router will also contain the port forwarding to the Avaya phone system IP address)

System LAN1, VoIP Tab: UDP – enabled – set UDP Port to 5060 and Remote UDP Port to 5060

System LAN1, VoIP Tab: TCP – enabled – set TCP Port to 5060 and Remote TCP Port to 5060

System LAN1, VoIP Tab: RTP Port Number Range - Minimum 46750, Maximum 50750

System LAN1, VoIP Tab: Port Number Range (NAT) – Minimum 46750, Maximum 50750

System LAN1, VoIP Tab: Enable RTCP Monitoring on Port 5005 – Enabled

System LAN1, VoIP Tab: Scope – RTP-RTCP

System LAN1, VoIP Tab: Initial Keepalives – Enabled

System LAN1, VoIP Tab: Periodic Timeout - 5

NOTE

As port 5060 is a default port, if you were to open port 5060 and port forward on the router to the Avaya phone system, you will receive registration requests from hackers. A suggestion would be to change the port 5060 UDP and TCP for both local and remote to a different port number (example 5066) be aware that if this was done after existing SIP phones (J Series and IX Workplace would need to be reset to default to connect to the system using the new port 5066 if previously using port 5060)

NOTE

The RTP Port Number Range can be changed if required

If changed then any existing port forwarding of the original range will also need to be changed to match the new range

RTP ports are used for voice traffic (2 ports from the range are used at random when a call is established for inbound/outbound voice traffic)

System LAN1, Network Topology Tab: STUN Server Address - IP Address of STUN Server 0.0.0.0

System LAN1, Network Topology Tab: Firewall/NAT Type – One-To-One NAT

System LAN1, Network Topology Tab: Binding Refresh Time (seconds) – 0

System LAN1, Network Topology Tab: Public IP Address – Customers Public IP Address

System LAN1, Network Topology Tab: Stun Port: 19302

System LAN1, Network Topology Tab: Public Port UDP – 5060 (this will be blanked out)

System LAN1, Network Topology Tab: Public Port TCP – 5060 (this will be blanked out)

NOTE

A STUN server might be required on some networks. In our example we are not using a STUN Server Address and the Firewall/NAT Type is One-To-One NAT which means the internal port and external ports are the same

If you would like to use different ports for internal and external, then another Firewall/NAT Type would need to be selected to allow the external (Public Ports) to be configured

System, VoIP, VoIP Security: Set Media Security to Preferred

Create User

User, User Tab: Name – Enter Username

User, User Tab: Password – Enter Password (this password will be used by IX Workplace Softphone)

User, User Tab: Account Status – Enabled

User, User Tab: Full Name – Enter Full Name

User, User Tab: Extension – Enter Extension Number

User, User Tab: Email Address – Enter Email Address

User, User Tab: Profile – Power User (confirm the boxes are ticked as they show below)

User, Telephony, Supervisor Settings Tab: Login Code – Enter Login Code and Confirm Login Code

Tick Reserve Last Call Appearance

Confirm there are a minimum 3x Appearance buttons

User, SIP Tab: SIP Name - Enter the telephone number to display on outbound calls

User, SIP Tab: Contact - Enter the telephone number to display on outbound calls

Select OK to create the user

Create SIP Extension

Once the User has been created, if prompted

Create a SIP Extension

Enter the Phone Password to match the User Login Code

Select OK

Extension – Check and confirm there is a SIP Extension created to match the Users extension number

If not, then create a SIP Extension

Set the Base Extension number to match the User extension number

Set the Phone Password to match the User Login Code

Select the VoIP tab and Disable Allow Direct Media Path

Select OK to create the Extension

Save Configuration and Reboot the System

Select File, Save Configuration

Select Immediate (to save and restart the system immediately) or When Free (to save and restart the system when all calls and lines are not in use)

Connect the J Series handset to the network the Avaya LAN is connected to (power via PoE or power adaptor)

When prompted select No to “Allow Auto Provisioning” 

Select Admin, enter the access code CRAFT (27238), select Enter. Scroll down and select Reset to Defaults, then select Reset when it shows Clear and Reset phone

 

Wait till the handset reboots and when prompted select No to “Allow Auto Provisioning”

The handset will obtain IP address details from the local DHCP server (see below if you need to program this manually)

When prompted to enter the File Server Address / provisioning Details, select OK (middle button on phone)

We are not using TLS, so it is not enabled in the System programming, 

You will need to change to http://    (use backspace to delete the S)

Enter the Public IP address and port 8411 (example: http://159.121.42.241:8411)

 

The handset will reboot and upgrade firmware if required, 

Then prompt for the Username (extension number) 

And

Password (login code)

Enter Extension Number and Login Code and select Enter

Confirm the screen shows the correct extension name and number and the button programming is correct

NO DHCP Server on Network

If no DHCP server is available on the network, select Admin and enter the passcode CRAFT and OK

Select IP Address and Ethernet IPv4, Disable Use DHCP

Statically Assign the below

Phone IP

Gateway IP

Mask IP

Save and Exit. The handset will reboot

Wait till the handset reboots and when prompted select No to “Allow Auto Provisioning”

Follow steps above for configuring the File Server Address

Troubleshooting

SIP Proxy List Empty showing on the screen

Phone does not reboot once entering the Provisioning Server Details

Access the Avaya IPO security settings

Select Services, HTTP and set the Service Security Level to Unsecure + Secure

This will open the Service Ports 80 (8411) and 443 (411)

Save the Security Settings

Confirm you can browse to the settings file (example)

http://192.168.42.1:8411/46xxsettings.txt