Avaya 9600 Series - Configuring VPN System Parameters; Administrative Pre-Requisites for Authentication; Preparing Avaya Aura Communication Manager

Configuring VPN system parameters
Appendix A: VPN Parameters lists the system parameters that you need to configure for VPN tunnel
establishment, and in general. Certain parameters will be set automatically based on the VPN
security gateway you indicate in the NVVPNCFGPROF parameter in the 46xxsettings.txt file or
using the Special VPN procedure; see VPN Configuration Profiles in Appendix A: VPN
parameters on page 49 for information on these automatically-set configuration parameters.
Important:
When using the settings file to establish VPN values, place all of your VPN parameters before
any model-specific parameters.
For detailed information regarding system parameters, see Appendix A: VPN parameters on
page 49.
Administrative Pre-requisites for authentication
Authentication is performed during VPN tunnel initialization only if the NVXAUTH parameter is set to
"enabled." The following system parameters are used for authentication and are described in detail
in Appendix A: VPN Parameters:
• NVXAUTH - Specifies whether XAUTH user authentication is enabled or disabled; must be
enabled for authentication.
•
NVVPNUSER - Specifies the user name to use during VPN authentication; can be null and
entered on the VPN User Name Entry screen.
• NVVPNPSWD - Specifies the user’s VPN password; can initially be null and entered on the
VPN Password Entry screen if NVVPNUSER contains a non-null value and
NVVPNUSERTYPE is set to "1" (user can edit the user name).
• NVVPNPSWDTYPE - Specifies whether the VPN user password will be stored, and if so, how
it is stored.
• NVVPNUSERTYPE - Specifies whether the end user can ("1") or cannot ("2") change the VPN
user name.
When authentication is enabled, three potential authentication entry screens display, depending on
the values of these VPN authentication parameters. See
Chapter 6 -User Authentication and VPN
Sleep on page 34 for a description of each authentication screen.
Preparing Avaya Aura
®
Communication Manager
A 9600 Series IP Telephone that will be used in your virtual private network is configured the same
as other IP telephones on the call server running
Avaya
Aura
®
Communication Manager. Even
though the phone is physically located outside of the corporate network, it will behave the same as
other LAN-based Avaya IP telephones once the VPN tunnel has been established.
Configuration Preparation
March 2015 VPN Setup Guide for 9600 Series IP Telephones 15
Comments? infodev@avaya.com