Internet Telephony PBX System IPX-300 Series IP PBX and VRT-401 with VPN Application Copyright © PLANET Technology Corporation. All rights reserved.

Case 42: IPX-300 and VIP-254T with VPN Application We're using the IPX-300, VIP-254T and VIP-480FO to perform the calling party, and via VRT-401 / MH-2001 to establish the VPN connection at each sides. The VPN device of Headquarters can select the VRT-401 or MH-2001, it bases on the numbers of your branches. Please refer to the following descriptions and insert proper parameters configurations into the each device for establish the voice communications. Environment Setting: Headquarters (192.168.0.0/24) MH-2001: WAN IP 210.66.155.87 LAN IP 192.168.0.1 Branch-A (192.168.1.0/24) VRT-401_A: WAN IP 210.66.155.79 LAN IP 192.168.1.1 Branch-B (192.168.2.0/24) VRT-401_B: WAN IP 210.66.155.80 LAN IP 192.168.2.1

Topology

VPN Environment setting VPN Tunnel between Headquarters and Branch-A MH-2001 settings Add the WAN Address objects for Branch-A and Branch-B. To add WAN address objects for Branch-A and B. Branch-A: IP Address : 192.168.1.0 Subnet Mask : 255.255.255.0 Branch-B: IP Address : 192.168.2.0

Headquarters VPN setting VPN Tunnel between Headquarters and Branch-A MH-2001 VPN settings Add an IPSec autokey entry for Branch-A Name: VPN-1 Remote Gateway VRT-401_A WAN IP: 210.66.155.79 Preshared key: 123456789 IPSec VPN Parameters 3DES MD5 Group2 No-PFS These parameters must match with remote site

Headquarters VPN setting VPN Tunnel between Headquarters and Branch-A MH-2001 VPN settings Add an IPSec Tunnel entry for Branch-A Assign the Local LAN (Headquarters subnet) and Remote LAN (Branch-A subnet) Select the IPSec Autokey entry for Branch-A

Headquarters VPN setting VPN Tunnel between Headquarters and Branch-A MH-2001 Policy settings Add an Outgoing Policy for VPN Tunnel to Branch-A Destination Address: Select the Branch1 (192.168.1.0/ 255.255.255.0) Tunnel: Select VPN1 tunnel for Branch-A

Headquarters VPN setting VPN Tunnel between Headquarters and Branch-A MH-2001 Policy settings Add an Incoming Policy for VPN Tunnel to Branch-A Source Address: Select the Branch1 (192.168.1.0/ 255.255.255.0) Tunnel: Select VPN1 tunnel for Branch-A

Branch-A VPN setting VRT-401_A VPN setting Remote VPN: MH-2001 WAN IP 210.66.155.87 Local LAN Subnet: 192.168.1.0 255.255.255.0 Remote LAN Subnet: 192.168.0.0 These parameters must match with MH-2001 VPN settings

VPN Tunnel between Headquarters and Branch-A After configuring the VPN settings of MH-2001 and VRT-401, the VPN Tunnel will be established. You can check the status of MH-2001 and VRT-401. And then the Headquarters and Branch-A can access the resource to each other.

Finish VPN setting VPN Tunnel between Headquarters and Branch-B Repeat above setting procedure for Headquarters and Branch-B. After you configure it, the Headquarters and Branch-B can also access to each other. Thus, the Branch-A and Branch-B both can access to Headquarters properly. Now, we can start to configure the VoIP devices, please check following procedure.

Login IPX-300 and browse to [Network Setup -> WAN & LAN Setup] page to assign the WAN port as 192.168.0.100, and LAN port to other network segment. To assign WAN port as same network segment with MH-2001 IP Address : 192.168.0.100 Subnet Mask : 255.255.255.0 Default Gateway : 192.168.0.1 (MH-2001 LAN port IP address)

Browse to [Extension Management -> SIP Extension] page, and to create accounts for VIP-480FO and VIP-254T.

Browse to [Trunk Management -> Gateway Trunk] page to create the Gateway Trunk for the FXO gateway. IP :192.168.0.2 (VIP-480FO IP Address) Port : 5060 (SIP Port) Afterward click the Insert to add that

Browse to [Trunk Management -> Dialing Rules] page to add the Trunk Group To add a Dialing Rules for VIP-480FO Phone NO. : 0 Delete Length : 0 Trunk Group : 192.168.0.2:5060

Browse to [Attendant Number] page to assign a AA extension number for Gateway hotline setting.

Browse to [Save & Logout] page Click on the button to save previous modification and take effect, the system will rebooting, please wait for 50 sec

Login VIP-480_H(192.168.0.2) and browse to [Advance Setup ->VoIP Basic] page to setting port number configuration. VoIP Basic Configuration: Number :101 Check Reg Account: 101 Password: 123 Use Public Account: Enable Check Hunting Member Port 1, 2 3 and Port 4 This function is when the port 1 be communicating, and it another SIP calls from network will forward this call to other ports automatically.

SIP Proxy Setting: Domain/Realm: 192.168.0.100 SIP Proxy Server: 192.168.0.100/5060 SIP Authentication : Enable About the IP address please refer to previous topology. Click the button to complete the VoIP Basic configuration.

27 Browse to [Dialing Plan] page to add the Dialing Plan Number. Incoming Dial Plan Settings: Outgoing no: 0 Length of Number: 1 ~ 1 Delete Length: 1 Prefix no.: Null Destination Telephone Port : 1 27

Select the [Hot Line Setting] of gateway to add the Hot Line Number. Hot Line Number Setting : Port 1 Number : 555 Port 2 Number : 555 Port 3 Number : 555 Port 4 Number : 555 Click on the button to complete the modification. Click the Save Configuration hyper-link to save the whole parameters and then click the Reboot to restart system.

Setup VIP-480FO_A and VIP-480FO_B Login to VIP-480FO_A (192.168.1.2) & VIP-480FO_B (192.168.2.2) Repeat the above procedures to setup the VIP-480FO_A & B accounts number (201 & 301) , and register to IPX-300 (192.168.0.100)

Login VIP-254T and browse to [Network -> LAN Settings] page, assign the IP Type to DHCP Client for obtaining IP from VRT-401.

Browse to [SIP Settings -> Service Domain] page to assign registration account. Active: ON Display Name : 100 User Name : 100 Register Name : 100 Register Password : 123 Proxy Server : 192.168.0.100

Browse to [Phone Book -> Speed Dial Setting] page to add speed dial number 0

Browse to [Save & Reboot] page to save and reboot machine

Setup VIP-480FO_A and VIP-480FO_B Login to other VIP-254T (192.168.1.3 & 192.168.2.3) Repeat the above procedures to setup the accounts number (200 & 303) , and register to IPX-300 (192.168.0.100)

Dialing Procedures: A. Headquarter site 1. VIP-254T(Ext.100) pickup the handset and hearing a dial-tone, then to input a number 0# 2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line 3. To input a local phone number call to User A, such as 22551234 B. Branch A site 1. VIP-254T(Ext.200) pickup the handset and hearing a dial-tone, then input a number 201# 2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line. C. Branch B site 1. VIP-254T(Ext.300) pickup the handset and hearing a dial-tone, then to input a number 301# D. Internal Call 1. Each VIP-254T call the extension number for internal communications: 100 / 200 / 300

E. PSTN incoming call to Headquarter site 1. The User A call the PSTN line number to Headquarter 2. User A will hear the IVR of IPX-300 3. User A dials the extension number talk with VIP-254T: 100 F. PSTN incoming call to Branch A 1. The User A call the PSTN line number to Branch A 2. User A will hear the IVR of IPX-300, 3. User A dials the extension number talk with VIP-254T: 200 C. PSTN incoming call to Branch B 1. The User A call the PSTN line number to Branch B 3. User A dials the extension number talk with VIP-254T: 300 NOTE: The mentioned parameters and network settings in this sample be carefully modified to meet the real-world applications.