IP Office - Job Aid Using a Dedicated T1/PRI PPP ISP Link

IP Office - Job Aid Using a Dedicated T1/PRI PPP ISP Link Summary This document shows by example the configuration to create a dedicated WAN PPP link to an ISP over a set of T1 or PRI line channels. 041 Issue 3 (20th January 2003)

Overview Using a Dedicated T1/PRI PPP ISP Link Overview This document shows by example the configuration to create a dedicated WAN PPP link to an Internet Service Provider (ISP) over a set of T1 or PRI line channels. Note: The ISP must support this mode of connection and will need to provide details of the required settings. If multiple channels are to be used, then the ISP must support Multilink PPP. The basic steps are: 1. Create a Firewall: 2. Create a Service: 3. Create a Virtual WAN Port: 4. Create an IP Route: 5. Configure the Line Channels: Using a Dedicated T1/PRI PPP ISP Link Page 2

1. Create a Firewall 1. Create a Firewall WARNING: WAN connections can be used without a firewall. However for any WAN connection to or through the Internet, Avaya strongly recommend that a firewall is setup and used to control the types of traffic allowed. The normal installation process for IP Office creates a default firewall for internet access. We are repeating the process here in case a firewall was not setup during original installation or if you want to apply different firewall settings to the T1 PPP link. 1. Start Manager and load the IP Office configuration. 2. In the left-hand panel, click on Firewall Profile to display the list of the existing profiles. 3. Right-click on the displayed list and select New. Double-click on a existing profile if you want to edit and use it. 4. Enter an appropriate name, such as Internet01, in the Name field. 5. Set the protocols settings as required by the customer. The defaults, are shown above. 6. Proceed to 1a following. Using a Dedicated T1/PRI PPP ISP Link Page 3

1. Create a Firewall 1a. Block NetBIOS/DNS Access NetBIOS and DNS traffic from your network to the internet is normally not needed and causes unnecessary line usage and costs. You can block it by adding a custom filter to the internet firewall profile. 1. With the firewall profile open, click on the Custom tab. 2. Right-click on the Notes area and select Add. 3. In the Notes field enter an appropriate name such as Drop NetBIOS/DNS. 4. Set the Direction to Drop. 5. In the IP Protocol field enter 6 (TCP). 6. In the Match Offset enter 20. 7. In the Match Length enter 4. 8. In the Match Data field enter 00890035 (the IP Office will insert the remaining zeros). 9. In the Match Mask field enter ffffffff. 10. Click on OK. 1b. Allow Ping for Testing Sending pings through the firewall may be useful for testing the internet connection. Remember to remove this custom entry afterwards unless the customer also want to be able to send pings. 1. With the firewall profile open, click on the Custom tab. 2. Right-click on the Notes area and select Add. 3. In the Notes field enter an appropriate name such as Allow ICMP (PING). 4. Set the Direction to Bothway. 5. Set the IP Protocol to 1 (ICMP). 6. Set the Match Offset to 20. 7. Set the Match Length to 0. 8. Set the Match Mask to F7. 9. Click on OK to save the custom setting and OK to save the profile. Using a Dedicated T1/PRI PPP ISP Link Page 4

2. Create a WAN Service 2. Create a WAN Service The service defines features such as the ISP assigned IP address, the bandwidth required and the firewall to use. 2a. Create a New WAN Service 1. In the left-hand panel, click on Service to display the list of existing services. 2. Right-click on the list and select New. 3. Select WAN Service and then click on OK. 4. The configuration form for a service should appear. 2b. Configure the WAN Service Service Tab 1. Select the Service tab. 2. In the Name field enter an appropriate name, such as Internet. Note: This will also automatically create a RAS entry with the same name. 3. Enter the Account Name, Password and Telephone Number details provided by the ISP. 4. For the Firewall Profile select the firewall created previously. Using a Dedicated T1/PRI PPP ISP Link Page 5

2. Create a WAN Service 2c. Configure the WAN Service Bandwidth Tab 1. Click on the Bandwidth tab. 2. Set the Maximum No. of Channels to the maximum number of channels that the service should use. In this example 12 channels were used. Note: The maximum number of channels that can be used will be limited by the number of data channels supported by the IP Office Control Unit and not already in use. 3. Leave all the other entries at their default values. 2d. Configure the WAN Service IP Tab If the ISP has alloacted IP address details then enter them through this tab. If the IP Address and IP Mask define a different domain from the IP Office's own LAN settings (those in the System LAN1 or LAN2 tab), then NAT is automatically applied. 1. Click on the IP tab. 2. In the IP Address field enter the IP address specified by the ISP. 3. In the IP Mask field enter the IP Mask specified by the ISP. Using a Dedicated T1/PRI PPP ISP Link Page 6

2. Create a WAN Service 2e. Configure the WAN Service PPP Tab The settings shown are typical. The actual settings must match thos e required by the ISP. For example, if Cisco routers are being used then IPHC needs to be ticked. 1. Click on the PPP tab. 2. Ensure that the following options are selected. Leave all other options at their default settings. Multilink. Compression Mode: Disable. Callback Mode: Disable. Access Mode: Digital64 3. Click on OK. Using a Dedicated T1/PRI PPP ISP Link Page 7

3. Create the Virtual WAN Port 3. Create the Virtual WAN Port 1. In the left-hand panel, click on WAN Port to display a list of existing ports. 2. Right-click on the displayed list and select New. 3. In the Name field, enter either LINEx.y where: LINE must be in uppercase. x is the line number. For a PRI/T1 module in Slot A this will be 1. For a PRI/T1 module in Slot B this will be 5. y is the lowest numbered channel number to be used by the WAN link minus 1. For example, if the lowest channel to be used is channel 1 then y = 1-1 = 0. 4. In the Speed field enter the total combined speed of the maximum number of channels sets in the Service. In this example, 12 channels x 64000 bits = 76800. Note: The maximum number of channels that can be used will be limited by the number of data channels supported by the IP Office Control Unit and not already in use. 5. Set the Mode to SyncPPP. 6. In the RAS Name field, select the RAS name created when the new Service of that name was created. 7. Click on OK. Using a Dedicated T1/PRI PPP ISP Link Page 8

4. Create an IP Route 4. Create an IP Route Note: By leaving the IP address details blank this becomes the default route for any IP traffic not for the IP Office's LAN. To route IP traffic via other WAN routes, specific IP address details need to be entered in the IP Route form for those routes. 1. In the left-hand panel, click on IP Route to display the list of existing routes. 2. Right-click on the list area and select New. 3. In the Destination field, select the name given to the WAN Service created previously. 4. Leave the Metric at default value of 1. 5. Click on OK. Using a Dedicated T1/PRI PPP ISP Link Page 9

5. Configure the Line Channels 5. Configure the Line Channels This stage of the process differs according to the type of line being used. 5a. T1 Line 1. In the left-hand panel, click on Line to display the list of existing lines. 2. Double-click on the line previously entered in the WAN Port settings. 3. Check that the Channel Allocation order matches that required by the ISP. Cisco routers typically use 1->24. 4. Select the channels to be used in the WAN PPP link and change their Channel Type to Clear Channel 64k. You can use the Shift key to select and edit the appropriate channels all at the same time. 5. Click on OK. 6. Click on OK again. 7. Send the configuration to the IP Office and reboot. Using a Dedicated T1/PRI PPP ISP Link Page 10

5. Configure the Line Channels 5b. T1 PRI Line 1. In the left-hand panel, click on Line to display the list of existing lines. 2. Double-click on the line previously entered in the WAN Port settings. 3. Check that the Channel Allocation order matches that required by the ISP. Cisco routers typically use 1->23. 4. Select the channels to be used in the WAN PPP link and change their Admin to Out of Service. You can use the Shift key to select and edit the appropriate channels all at the same time. 5. Click on OK. 6. Click on OK again. 7. Send the configuration to the IP Office and reboot. Using a Dedicated T1/PRI PPP ISP Link Page 11

5. Configure the Line Channels Performance figures and data quoted in this document are typical, and must be specifically confirmed in writing by Avaya before they become applicable to any particular order or contract. The company reserves the right to make alterations or amendments to the detailed specifications at its discretion. The publication of information in this document does not imply freedom from patent or other protective rights of Avaya or others. Intellectual property related to this product (including trademarks) and registered to Lucent Technologies have been transferred or licensed to Avaya. All trademarks identified by the or are registered trademarks or trademarks, respectively, of Avaya Inc. All other trademarks are the property of their respective owners. This document contains proprietary information of Avaya and is not to be disclosed or used except in accordance with applicable agreements. Any comments or suggestions regarding this document should be sent to "wgctechpubs@avaya.com". 2003 Avaya Inc. All rights reserved. Avaya Sterling Court 15-21 Mundells Welwyn Garden City Hertfordshire AL7 1LZ England Tel: +44 (0) 1707 392200 Fax: +44 (0) 1707 376933 Email: contact@avaya.com Web: http://www.avaya.com Using a Dedicated T1/PRI PPP ISP Link Page 12