H323 Telephone Installation Page 89
Issue 23e (Friday, February 15, 2019)IP Office™ Platform 11.0
Comments on this document? infodev@avaya.com
TLS Support: Adding the Identity Certificate
7.3 Enabling TLS on the IP Office
The IP Office system can use a number of TLS options.
To enable TLS mode:
1. Using IP Office Manager, load the server's configuration.
2. Select System.
3. Select LAN1 or LAN2 tab as appropriate and then select the VoIP tab.
4. The TLS operation is controlled by the H.323 Signalling over TLS field. Select the TLS mode required:
·
Disabled
Do not use TLS. Phones configured for TLS fallback to normal TCP connection.
·
Preferred
Use TLS with telephones configured for TLS but also allow normal TCP connections from other telephones.
·
Enforced
Require TLS. Refuse connections from telephones not configured for TLS. Note that when this option is
selected, the Remote Call Signalling Port is fixed to 1300.
5. Click OK and
6. Save the configuration changes and allow the system to reboot.
7.4 Enabling TLS on the Telephone
The TLS setting for the telephone is accessed through its Debug menu.
·
Note: When existing telephones upgrade to TLS capable firmware, the H.323 signalling over TLS setting defaults
to on. However, with systems not configured for TLS operation the telephones fallback to using TCP connection.
To enable TLS on the telephone:
1. Press MUTE followed by CRAFT process password and #.
·
The menu can be accessed on phones using the default CRAFT process password. However, in that case you
can only view the settings, you cannot change them.
2. Scroll to and select DEBUG.
3. Scroll to H.323 signalling over TLS.
4. Change the setting as required.
5. Click Save.
6. Click Exit. The phone is restarted using the new setting.
87
To Next Page
Loading...
