Edgewater Networks 4200 Series User manual

4200 Series
Converged Network Appliance
Quick Start Guide
This guide helps you to install and connect to the 4200 Series
converged network appliance. You may then use the online
help files or user manual contained on the enclosed CD to
configure the 4200 to meet the specific needs of your
environment.
This guide also provides examples of typical 4200 Series
deployments that can be used as a guideline for your
installation.

Before you begin you must have:
oA computer with a web browser (Microsoft internet Explorer or
Netscape Navigator)
oAt least 2 ethernet cables
oThe following information supplied by your VoIP service provider
IP address of the WAN interface
IP address of the Softswitch

Step 1 – connect all of the cables
•Connect an ethernet cable between LAN port 1 on the 4200 and your
computer’s ethernet port
•Connect another ethernet cable between the WAN port on the 4200 and your
external router, cable modem or xDSL modem
•Plug one end of the power adapter into an AC outlet and the other end into
the power receptacle on the 4200

Step 2 – connect to your 4200
The 4200 is shipped with a pre-configured IP address on its LAN port of 192.168.1.1.
To connect to the 4200, do the following:
•Configure your PCs ethernet adapter to use an IP address of 192.168.1.2
and a subnet mask of 255.255.255.0. (If using a LAN switch then the
switch must support 100Mbps full duplex).
•Launch a Web browser on the PC and enter the URL 192.168.1.1.
•Press Return. The initial 4200 main configuration menu appears.
•Select the Network link - enter the username "root" and the password
"default."
•Continue to configure the LAN and WAN ports and the rest of the
appliance using the information in Step 3 below as a guideline.

Step 3 – plan your configuration
Suggested Deployment
A typical 4200 installation uses an
external router, xDSL or cable modem to
terminate the WAN link. The 4200 is
then connected directly to the WAN
termination device to provide critical
functions for enterprise voice and data
traffic. The LAN port of the 4200 is
connected to the enterprise ethernet
local area network (typically a layer 2
switch).
10/100 Ethernet
Switch
WAN IP
65.93.xxx.xxx
4200
IP Phones
PC’s
Default Gateway
65.93.110.1
Public Address Pool
For Servers
67.52.xxx.xx1
67.52.xxx.xx2
67.52.xxx.xx3
67.52.xxx.xx4
Client Adaptor
Analog Phone
WAN Termination
(eg. xDSL Modem)
Softswitch
TFTP Server
Internet
In this example a single public IP address
is used to proxy for all of the IP phones
and to route to multiple PC’s installed on
the LAN. Additionally, a static NAT is
used to route to the publicly addressable
servers.
The 4200 provides the following services:
•WAN/LAN IP routing
•NAT/PAT translation for IP phones
and PC’s. This allows a single
public IP address to be used on
the WAN link to represent all of
the private IP addresses assigned
to the LAN IP phones and PC’s.
•Static NAT entries. This enables the customer to use a WAN public IP address
for data servers (web, mail, ftp, etc.) connected behind the 4200. These
servers can then be configured with private IP addresses for additional
security.
•A “VoIP” aware firewall. A full layer 7 gateway for voice traffic and a stateful
packet inspection firewall for data traffic.
•Traffic shaping and priority queuing to guarantee the quality of VoIP traffic.
These mechanisms protect voice and data traffic from contending for the
same network resources to guarantee low latency and the highest call quality
possible for VoIP traffic. At the same time they ensure the best utilization of
WAN bandwidth by enabling data traffic to burst up to full line rate in the
absence of voice calls. Precedence is given to traffic for the range of
addresses reserved for the IP phones.
•Call Admission Control (CAC). CAC uses a deterministic algorithm to decide
when there are insufficient network resources available to adequately support
new calls and then return the equivalent of a “fast busy” to new call requests.

•DHCP server and FTP/TFTP relay. These features are used to simplify and
expedite the IP configuration of phones and PC’s. This also includes VoIP
signaling gateway information (MGCP and SIP).
•Call quality monitoring and test tools.
4200 configuration:
•Firewall enabled
•VoIP ALG enabled
•NAT enabled
•SNAT enabled
•Routing enabled
•Traffic shaping enabled
•DHCP server enabled
Benefits
•Security of private IP addresses and voice aware firewall
•Traffic shaping prioritizing voice over data traffic.
•Recover bandwidth for data when not used for voice
•Simplified management and administration
•Simplified adds, moves and changes
•Scalability – the single public IP address can continue to be used for new
subscribers to the service.
Installing The 4200 With Existing Infrastructure
In enterprise networks with existing routers and firewalls, the 4200 can be
configured as a VoIP Application Layer Gateway only, which maintains the functions
and services of the existing network appliances. It allows all of the existing network
devices to continue to handle data traffic, while the 4200 handles voice and video
traffic.
In the deployment below, the 4200 is connected to the Internet via a WAN
termination device. The enterprise ethernet network is then connected to the LAN
port on the 4200. In this example a single public IP address is used to proxy for all of
the IP phones and the 4200 routes data traffic to the public side of the firewall.
Firewall
WAN Termination
(eg. xDSL Modem)
E-300
4200
L2 Switch
The 4200 provides the following services:

•WAN/LAN IP routing
•NAT/PAT translation for IP phones. This allows a single public IP address to
be used on the WAN link to represent all of the private IP addresses assigned
to the LAN IP phones.
•A “VoIP” aware firewall. A full layer 7 gateway for voice traffic.
•Traffic shaping and priority queuing to guarantee the quality of VoIP traffic.
These mechanisms protect voice and data traffic from contending for the
same network resources to guarantee low latency and the highest call quality
possible for VoIP traffic. At the same time they ensure the best utilization of
WAN bandwidth by enabling data traffic to burst up to full line rate in the
absence of voice calls. Precedence is given to traffic for the range of
addresses reserved for the IP phones.
•Call Admission Control (CAC). CAC uses a deterministic algorithm to decide
when there are insufficient network resources available to adequately support
new calls and then return the equivalent of a “fast busy” to new call requests.
•DHCP server and FTP/TFTP relay. These features are used to simplify and
expedite the IP configuration of phones. This also includes VoIP signaling
gateway information (MGCP and SIP).
•Call quality monitoring and test tools.
4200 configuration:
•VoIP ALG enabled
•NAT enabled
•Routing enabled
•Traffic shaping enabled
•DHCP server enabled
Benefits
•Security of private IP addresses and voice aware firewall
•Traffic shaping prioritizing voice over data traffic.
•Recover bandwidth for data when not used for voice
•Simplified management and administration
•Simplified adds, moves and changes
•Scalability – the single public IP address can continue to be used for new
subscribers to the service.
Although not recommended the 4200 and IP phones can be installed behind an
existing enterprise firewall. In this instance the firewall will have to be configured to
allow access to and from the 4200 public IP address for the following ports:
Port Type Firewall Ports to Open
UDP 161 (SNMP) and 162 (SNMPTRAP)
RTP 1056 to 1255
TCP SSH TCP 22 for remote management & TCP 80 for WAN configuration-
downloads
Telnet 23
FTP TCP 21 for state-full TCP-session control from 4200 to Edgewater
FTP server

MGCP 2427, 2429, 2432, and 2727
NTP 123
SIP 5060 and 5075
IP phones normally point to a local NTP server for their time reference. The NTP
port 123 needs to be opened if your network does not have an NTP server.
Please Note: Traffic shaping for this configuration is only available if the enterprise
data devices are also installed behind the 4200.
4200 Web Based GUI Configurations
The web page configurations for the various 4200 deployments are as follows. The two
darker-shaded rows in the table below indicate the minimum configuration required for
each deployment.
4200
GUI Configuration
Page
Suggested
Deployment 4200 with existing
infrastructure 4200, behind an existing firewall
Network Yes Yes Yes
VoIP/ALG Yes Yes Yes
NAT Yes Optional Yes
Firewall Yes Optional, but
recommended Optional, but recommended
DHCP Yes Yes (but should be
disabled if DHCP server
already exists)
Yes (but should be
disabled if DHCP server
already exists)
Traffic Shaper Yes Yes Optional (depends on
network topology)
Traffic Simulator Only for
testing Only for testing Only for testing
System As needed As needed As needed
Please visit our website at www.edgewaternetworks.com or contact the
Edgewater Technical Assistance Center at 408.351.7255 for additional
information or assistance.
2730 San Tomas Expressway, Suite 200, Santa Clara, California 95051
[email protected]
Copyright© 2004, Edgewater Networks, Inc.All rights reserved.