Professional Documents
Culture Documents
SSDFG
SSDFG
IP Office IP Office
Scalability
Select 9.1 9.1
SE capacity to 2500 users (up from 2000)
IP Office IP Office
Resiliency
Select 9.1 9.1
Improved SE Resiliency
SE Resiliency to Expansion
SE VMware HA
IP Office IP Office
New Capabilities
Select 9.1 9.1
Integration with LDAP and Active Directory
Location Resilience
Select only feature provides the ability for a group of extensions to
fallback to a given node in the SCN.
The fallback system for a group of extensions is defined at the
Location level.
Supported phones: 96x1, 96x0, and16xx series
New Web Control option allows you to increase the Primary HDD
size from the default 100GB at a later date.
– First increase the virtual machine disk size using vSphere Web
Client
– Then increase the root partition size from Web Control
SM Line Licensing
R9.0 R9.0
WebLM = WebLM =
1 1
R9.0 R9.0 WebLM=2
WebLM=3 WebLM =
WebLM = WebLM WebLM
1 1 WebLM
R9.0 R9.1
WebLM 9.1=1
WebLM =
1 9.1 = 1
R9.0 R9.1
PLDS Branch Use Case PLDS for Branch Use Case
Authorization Codes are Support for resistance to New configuration item for
assigned to User and not brute force attack Fallback options in SCN
User rights. Forced lockout New column in SSA for
Generation of Alarms and extension location
Audit Trail
IP Office support a more New code for the No User IP Office supports the ability
flexibility for Locale Time Sourcecode tab to override barred number, if
Zones. they are entered into Speed
Dial
New destination selection for Additional Short Codes IP Office allow the monitoring
Huntgroup fallback added for Time profile of other users Mailboxes
flexibility
SSA, SNMP, and Syslog alarms and audit trail log will be generated once an
Extension or IP Address pair or IP address has been blocked.
Entries with last failed attempt older than 20 minutes are removed from the
failed list.
Old Huntgroup
Selection
New Huntgroup
Selection
Shortcodes:
Set HGOOS - Change the service mode to “Out Of Service”
Clear HGOOS - Change the service mode to “ Controlled by Time
Profile” for HGs that are under a time profile administration, the rest of
them will change to “ In Service “ © 2014 Avaya, Inc. All rights reserved.
Manager & Web Management UI
Latch Active
Latch Inactive
Feature Overview
Programmable button on user phone to monitor MWI status of another user's
voice mailbox
Pressing the button takes user to that mailbox.
Works for users and hunt groups, across the SCN
Feature requirements:
Compatible Systems: SE, IP500v2
Feature supported in any Edition except Basic Mode.
No special license requirements.
Either Embedded Voicemail or Voicemail Pro.
Prior to 9.1, the Message Waiting Indicator (MWI) for SIP sets did not honour
the short codes or TAPI commands designed to activate it
Useful in systems where a third party voicemail system is used
Very important to new business.
New Short codes to control MWI : *98*N# and *99*N#
N";Mailbox Msgs=1" and N";Mailbox Msgs=0" Turn MWI On or Off
SIP-based devices do not always have the capabilities to accept a normal SIP
page
SIP standards are not well enough defined to cover all features - may not be
implemented as expected
A new drop-down on the SIP Extension VoIP tab has been added, with
caption "3rd Party Auto Answer" and options "None" (default), "RFC 5373",
"answer-after", "device auto answers"
Provides wider compatibility for 3rd party, generic, standard SIP extensions.
When setting is not "None", the device will be able to accept Page and Auto
Answer calls, including reverse call for CTI Make Call.
May apply to other devices such as door phones and "walkie talkie" radio
2. Created a new SIP Line Advanced tab to house the more rarely used
special settings.
The Engineering tab has been added in this release to be explicit about
configuration items that should not generally be adjusted in a production
network.
*The Merge with Service Disruption feature is not limited to SIP Trunks. It
is indicated to an administrator via a warning dialog prior to being offered
the Save Configuration dialog with Merge selected.
Enabling the Auto Create Sip New Security and setting for
Extn / User doesn’t require SysMonitor
reboot anymore
Adding and removing a
DECT line doesn’t require
reboot anymore
Enabling the Auto Create Sip Extn / User doesn’t require reboot
anymore
– The feature behaves just as before, but activation / deactivation doesn’t require
reboot
– After activation, adding a new SIP users should be possible using default 0000
password
Two new protocols have been added to the existing Sys Monitor interface:
HTTP and HTTPS; both use Web Sockets
2 User Stories delivered.
Story ID Description
IPOFFICE-60637 Secure Sys Monitor login
The existing core Sys Monitor service (TCP + UDP 50794) which is
unsecure for both login and data was upgraded to support secure login
The Sys Monitor data is routed via a new web socket. The IP Office acts as
the Web Socket server, Sys Monitor is the client.
Both HTTP and HTTPS options available, the authentication is RFC2617
basic for HTTPS and RFC2617 digest for HTTP
The Web Socket server port is the same as the default HTTP port (80,
configurable) or HTTPS port (443, configurable)
For 9.1, there is a new requirement that Security Users must change the
default passwords
If a login is attempted to the IP Office with the Manager using the default
password, the user will be prompted to change the password:
If we try to connect using Sys Monitor with the default password, the
application will give us a message stating that the password must be first
changed using the Manager:
For HTTP and HTTPS, in the case of a failed login we receive a 4xx error
code and we use it in the Sys Monitor application to tell the user why the login
fails:
In order to be able to also give a similar notification for old legacy interfaces a
minor protocol change had to be implemented ( Sys Monitor legacy interface
did not previously give any feedback on failed logins, it would just drop the udp
or tcp connection ):
IP Office
IP Office
Redundant PBX
Setup with IP DECT and IP Office
Find the IP Office Line with Proprietary Transport Type and SCN
Networking Level that has as Gateway Address the address of the
Redundant PBX (a.k.a. Backup IP Office for the IP DECT System).
For this IP Office Line tick the Backs up my IP Dect Phones checkbox in the
SCN Backup Options.
In System Status one can now view all IP DECT Systems that the current IP
Office is (correctly) configured as either Primary PBX or Redundant PBX
(Backup IP Office). The local system, if it exists, will be first – this is the IP
DECT System for which the current IP Office is Primary PBX.
For each of the IP DECT Systems the current status, some details, and the
list of IP DECT extensions will be displayed.
Upgrade version
Proxy if required
Option to schedule
Backup server
Proxy if required
Restore Points
If Self Administration has not been configured for the user they
will see the following error message:
Group Fields
General Full Name, Password, Locale Login Code, Deny Auto Intercom
Voicemail Voicemail Code, Email Address, Email notification options,
Voicemail On, Voicemail Ringback
DND DND On/Off, Exception List
Mobility Mobility On/Off, Mobile Number
Forwarding Forwarding On/Off, Forwarding Number, Forwarding on No
Answer, Forwarding On Busy
Personal Directory Add, Remove
Button Programming Abbreviated Dial, Absence Text, Account Code, Auto Answer,
Call Forward All, Call Park, Call Park to Other, Call Pickup, Call
Pickup Any, Conf Meet Me, Drop Call, Flash Hook, User BLF,
Group BLF, Page, Park and Page, Twinning, Ringer Off, Send All
Calls, Suppress Digits
There is also a software download tab where the user can access
the softphone and desktop client applications:
Alt F4
Alt F3
© 2014 Avaya, Inc. All rights reserved.
IP Office 9.1 Web Management - Self
Administration Accessibility – 508 Compliance
New
Old
Old New
Better compliance with SHA-256 and RSA key A new identity certificate
Avaya’s CEC length 2048 bits. screen is now available in
recommendations “Set” certificates can be Web Manager.
either self-signed or Web Manager a “Set”, a
signed by another CA. “View” and a “Delete”
Telephony identity identity certificate
certificate can be set function
separately.
“Set” function can import Set for the self-signed Certificate chaining
files with .p12, .pfx or .crt identity certificate. supported.
file extensions. “string” field up to 8 can “Apply” for identity
be configured for a certificate propagation.
maximum of 511
characters.
Self-signed certificate is
built with 3 default
Subject Alternate Names. © 2014 Avaya, Inc. All rights reserved.
Deployment and Management Tools- Signature
Default Signature/Key Size
Support for 500 Hunt Group Queue Integration with One-X Portal
Hunt/Presence Groups Monitoring Monitoring active web
Support for 150 nodes conferences
Conferencing: Security:
Web Collaboration
195
3/26/2014
Bridge Details 243 Start Time 3/26/2014 17:30 EndTime 18:00
Participants of
Conference# 4 Time Zone GMT+5:30 Duration 30(Minutes)
Primary
Secondary
ICU
Manager
The legacy TFTP Interface for IPO VMPro communication has been moved
to web sockets
The end user should not see any difference
The passwords used for securing TFTP Interface will remain the same and
if configured will now be used for the web socket interface.
1. Higher Scalability
2. Cloud Support:
Exchange On Premise
Sync 2500 users
Sync 2500 users
EWS Adapter EWS Adapter
The following Icons can appear to the right of the participant’s name
Button to Open
Your Web Collaboration
Link to Join
Contacts
Web
Collaboration
Join a
Contact’s
Web
Collaboration
Session
Outlook Plugin
One-X Portal
Whiteboard Example
Web Collaboration
For Example
System Default Shortcode
Code : *66*N#
Feature : Conference Meet Me
Telephone Number : N
Secure Real-time Transfer Send email messages View the presence status of
Protocol (SRTP). * Send instant messages other users
Transport Layer Configure Auto-Answer Manage your presence
Security(TLS) & server Complete Blind Transfer status
certificate validation
Application Icon
&
Flash Screen
273
© 2014 Avaya, Inc. All rights reserved.
Change Password & Rules
275
© 2014 Avaya, Inc. All rights reserved.
Web Collaboration Avaya Communicator for IPADs Web
Collaboration icon
Avaya Communicator for Windows Web
Collaboration icon
276
© 2014 Avaya, Inc. All rights reserved.
Auto Answer
Avaya Communicator for Windows
277
© 2014 Avaya, Inc. All rights reserved.
Simultaneous mode
278
© 2014 Avaya, Inc. All rights reserved.
Presence & IM
279
© 2014 Avaya, Inc. All rights reserved.
AdHoc Conference
280
© 2014 Avaya, Inc. All rights reserved.
Conference Participants
281
© 2014 Avaya, Inc. All rights reserved.
Blind Transfers
287
© 2014 Avaya, Inc. All rights reserved.
Installing Certificate for Avaya Communicator for Windows
3
4
2
1. A new license called IP Mac softphone was created for the new Mac
Softphone
2. The older versions of the Mac softphone and Windows softphone will
not be distributed, but customers can still use them after they upgrade
3. The older MAC and Windows softphone clients must use a new
Legacy softphone license
4. The new license which will be automatically generated (one time only)
by the upgrade. The number of licenses generated depends on the
number of Power Users + Teleworkers + Mobile Workers and Office
Workers (the latter two also require upgrade licenses, i.e. Mobile
Worker Upgrade and Office Worker Upgrade)
5. Customer who have purchased new Mac licenses should upgrade their
MACOS and use the newest MAC client. Otherwise they run a risk of
having old MAC clients that cannot access their new MAC Softphone
licenses. New MAC clients will try to use the new license first, if none
is available it will look for an old one that is available
The major change in the appearance of the softphone is in the display of the
call panel
With MAC Softphone version 4, there is just one Messages window where all
your instant messages – regular IMs, group chat (ad-hoc group chats), and
chat rooms (group chat using chat rooms set up on an XMPP server), and
broadcast IMs – appear
Prior to 9.1, the Message Waiting Indicator (MWI) for SIP sets
did not honour the short codes or TAPI commands designed
to activate it
Useful in systems where a third party voicemail system is
used
Very important to new business.
Android Settings
IPO’s IP address
IPO’s IP address
Next click on the “Generate” button you will see this pop
up, click on the link and save the Certificate with Extn
.P12 in a safe place. Click OK.
Now open IPO Manager go to Advanced > Security settings > System > Certificates, click on Set choose Import Cert from file
Android Settings
To Add to Team
Android Interface:
Select the number from Paste the number into Call OR Conference the
Signature the dial Pad number
Switch is ON
Ongoing 3PCC call,
RED bar appears
© 2014 Avaya, Inc. All rights reserved.
UI Optimized Experience to Enable VoIP (iOS)
H.323 lines with Supplementary Services set to IP H.323 lines are migrated to IP Office Lines
Office SCN
A system with a prior release configured with an IP Office Lines with Transport Type Proprietary/Networking
H.323 line with H.450 Supplementary Services will Level SCN interworks with previous releases configured with an
not interwork with IP Office Lines with Transport H.323 SCN line
Type Proprietary and Networking Level SCN
Transport Type – Defines which protocols should be used for Call and Network
Signaling.
Proprietary – H.225 Call Signaling over TCP roughly equivalent to H323 Lines.
Transport Web Socket Client/Server – an HTTP / HTTPS initiated TCP pipe through which Call and
Type Network Signaling is tunneled
Media Media Security (SRTP) – offered on all Transport Types and Network Levels.
Security
Deployment
Hosted Site Public IP Address
Customer Site
Private IP Address
B Firewall/ A Firewall/
Expansion Primary WebSocket Tunnel
NAT 1to1NAT
Configuration
Deployment
Hosted Site Public IP Address
Customer Site
Private IP Address
B Firewall/ A Firewall/
Expansion Primary WebSocket Tunnel
NAT 1to1NAT
SSA
Public IP Address
Release 9.1 implements NAT traversal for Media over IP Office Lines Private IP Address
WebSocket Tunnel
Hosted Site
Customer Site
B Firewall/ A Firewall/
Expansion NAT Primary
1to1NAT
Configuration (Primary)
Configuration (Expansion) Network topology > Firewall / NAT Type set to One-To-One
NAT. This setting is not discoverable by the STUN server if
RTP keep-alives for RTP and RTCP must be enabled available. Setting One-To-One NAT will also fix public ports
(System>LANx>VoIP>RTP)
for remote workers.
No special Network topology configuration required. Note: It Network topology > Public IP Address should be set to A.
might be configured if expansion module has remote workers
or public SIP trunks, but that is not relevant for this feature.
Presence of NAT is
displayed in SysMonitor
when the lines are
coming up.
– Server Side indication that the Client has detected that the Server is behind a NAT
– H323Evt: CMH323Trunk::BehindNatIndic: Line 2: received BehindNatIndic 1, IsWebSocketServer 1.
– Client Side indication that the Server has detected that the Client is behind a NAT
– H323Evt: CMH323Trunk::BehindNatIndic: Line 19: received BehindNatIndic 1, IsWebSocketClient 1.
• Process can be
automated
• Feature does not
require a license
• Feature only runs on
Linux servers not
Super
IP500v2
User
Login
ASG Debug
IP Office
1. The ASG services default listening port 2222 is configurable but this
will cause the ToolsA connect2 service to be disconnected
2. the AVG and SAL Gateway firewall rules only knows the 2222 port for
the ASG connections for now
3. If the default port is changed, the Inventory xml file from IP Office
which contains the ASG port will have to be updated then uploaded to
the GRT gateway
4. By default the ASG services add additional users that can access the
system only through the connection port 2222 (by default)
5. To permanently disable the service, the user can opt for disabled state
in WebControl
1. The most secure connection requires the highest level user (super user)
1. Fresh Install
4. ASG over SSLVPN 3. Install AFS file from rfa.avaya.com ASG over any interface
6. IP Office upgrade
TCP Stack
Enhancements
SLOW!
Unnecessary TCP
re-transmissions Web Manager
prevent connection
to Web Manager
TCP Stack
The main objectives are to improve performance and Enhancements
retransmission handling of lost or delayed TCP
packets
* Over fast interfaces this feature makes no difference. There is no TCP packet loss.
© 2014 Avaya, Inc. All rights reserved.
Deployment and Management Tools
An enhanced TCP stream tool has been
added in SysMonitor (Status menu-
>TCP Stream Data).
Embedded File Manager is being used to upload and download the same file over a simulated 50
Kbps slow link with a 2 MB file transfer .
File Manager - 2 MB file transfer
Prior to R9.0 release, the download speed was half that of the upload speed.
Packets Packets Packets Packets Time to
IPO->PC Forwarded Dropped by Forwarded by Dropped by Complete
IP500v2 Operating Bandwidth by Router Router Router Router File size File Transfer Transfer
Build System Application (Kbps) (PC->IPO) (PC->IPO) (IPO->PC) (IPO->PC) (KB) Activity (secs)
9.0 WinXP Mgr EFM 50 1550 0 2337 2138 1976 download 759
9.0 WinXP Mgr EFM 50 1986 1673 3962 0 1976 upload 343
9.0 WinXP Mgr EFM 3000 1250 0 2455 0 1976 download 5
9.0 WinXP Mgr EFM 3000 1988 0 3968 0 1976 upload 10
Now in R9.1 they are almost equal. See the time difference in red
8. The inventory xml file can now be fetched from UCM as it is now eligible for GRT
registration. UCM now supports SSL VPN service configuration with the need to
use SSL VPN NAPT
On Server Edition, the Web Control browser interface on Avaya supported hardware
servers can show the model and material code. Here is the view for the Dell R620 server
replacing the HP DL360 server.