Maintenance and Services

 View Only
  • 1.  Avaya VPN phones with IKE version 2

    Posted 02-08-2021 03:29 PM
    I am testing a 9608 phone using VPN.
    The issue is that the H.323 firmware that I am using (6.8202) does not accept IKE version 2
    And new VPN concentrators don't support IKE version 1 "deprecated" due to security algorithms.

    So we need to know what is the Avaya phone that supports IKE version 2.

    Below are the options found on the Avaya phone that I am testing:

    IKE Encryption Algorithm:
    0 = Any
    1 = AESCBC-128
    2 = 3DES-CBC
    3 = DES-CBC
    4 = AES-CBC-192
    5 = AES-CBC-256

    IKE Auth. Alg Authentication algorithm for IKE:
    0 = Any
    1 = MD5
    2 = SHA

    IPsec options are the same to Encryption and Authentication
    Here is the source webpage – Look at page 21 - https://downloads.avaya.com/css/P8/doc...

    ------------------------------
    Halj Br
    Voice Network Engineer
    Wipro
    ------------------------------


  • 2.  RE: Avaya VPN phones with IKE version 2

    Posted 02-09-2021 11:09 PM
    Here are the settings we used. There were other steps required in the process as well.
    Settings - VPN


    ------------------------------
    Tim Eddinger
    Enterprise Networks Manager
    Seneca Foods Corp
    Marion NY
    ------------------------------



  • 3.  RE: Avaya VPN phones with IKE version 2

    Posted 02-10-2021 09:44 AM
    Thanks for fast reply Tim,

    I am using for authentication and encryption option "any" that will include AES and SHA-1 (same as you)
    About Key group I am using the same as you.
    I just got a reply from Avaya about IKEv2, see below:

    • 1. At the time of this writing 96xx/96x1/J1xx phones which support VPN mode only support IKEv1 protocol.
    • 2. There is GRIP request open which requested the support of IKEv2 with development Team.


    ------------------------------
    Halj Br
    Voice Network Engineer
    Wipro
    ------------------------------