topic Embedded Gaia(SMB), Avaya 9611 VPN in Spark Firewall (SMB)

Embedded Gaia(SMB), Avaya 9611 VPN

Jon_Fallon — Fri, 08 May 2020 04:11:12 GMT

Hello,

Has anyone had any experience setting up VPN on a Avaya phone to an SMB gateway? I see documentation for legacy Check Point code, but nothing for the SMB appliance. I've tried to translate some of it, but the granularity in VPN settings on the SMB devices for Remote Access clients is nothing like the full Gaia appliances.

Any tips would be greatly appreciated.

Re: Embedded Gaia(SMB), Avaya 9611 VPN

G_W_Albrecht — Fri, 08 May 2020 10:55:05 GMT

Afaik this is a cable-bound VoIP (SIP) desktop phone ! So what do you mean by VPN ? I would rather suggest to look into

sk113573: How to configure VoIP on Locally Managed 600 / 700 / 910 / 1100 / 1200R / 1400 appliances

Re: Embedded Gaia(SMB), Avaya 9611 VPN

Jon_Fallon — Sat, 09 May 2020 00:03:21 GMT

The 9600 series have VPN functionality that allows them to "emulate" vendor's IPsec VPN clients and connect as a Remote Access endpoint. https://support.avaya.com/css/P8/documents/100092405

I can't quite seem to nail down the settings to allow it to connect. I've found forums on SonicWall and Sophos's site that detail the settings, but nothing for CP SMB appliances.

Was hoping the information was out there, or perhaps there was some tribal knowledge roaming around.

Re: Embedded Gaia(SMB), Avaya 9611 VPN

G_W_Albrecht — Mon, 11 May 2020 09:07:35 GMT

I think this also has to do with the number of users - the document referenced shows much bigger hardware than SMB !

Also, we can see :

SET NVVPNSVENDOR 3

Specifies the security gateway Vendor to be used.
1 = Juniper PSK with Authentication or Juniper Certificate with Authentication

2 = Cisco PSK with Authentication or Cisco Certificate with Authentication

3 = Checkpoint Security Gateway

Other needed settings have to be constructed following the SMB specific values.