Nortel 1000 Con?guration guide Instruction Manual

Nortel Application Gateway 1000/2000
Nortel Application Gateway Release 6.1
Administration Guide
Configuration and Operation
Document Number: NN42360-600
Document Release: Standard 01.06
Date: January 2007
Year Publish FCC TM
Copyright © 2007 Nortel Networks. All rights reserved.
Produced in Canada
The information in this document is subject to change without notice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented
without express or implied warranty. Users must take full responsibility for their applications of any products
specified in this document. The information in this document is proprietary to Nortel Networks.
Nortel, Nortel (Logo), the Globemark, SL-1, Meridian 1, and Succession are trademarks of Nortel Networks.
Title page

iii
Application Gateway Administration Guide
Contents
Preface ix
Audience ix
Organization ix
Related Documentation xi
CHAPTER 1Application Gateway Overview 1
Introduction to Voice Applications 1
Introduction to Transformed Applications 3
Licensing 3
Security 4
Security Features 4
Implementation Workflow 5
CHAPTER 2Basic Administration 7
Using the Administration Tool 7
Downloading Product Documentation 9
Setting the System Date and Time 9
Changing the Root Administrator Password 10
Using the Serial Console 10
Managing Licenses 11
Guidelines 12
Uploading License Files 12
Viewing License Information 13
Changing the License Status of an IP Phone 14
Generating a Secure Certificate 14
Overview of the Certificate Signing Request 15
Installing the Cygwin UNIX Environment for Windows 16
Generating a CSR 17
Unencrypting the Private Key 18
Converting to a PEM-Formatted Certificate 18
Combining the Private Key with the Signed Certificate 20
Generating Trusted Certificates for Multiple Levels 20

Contents
Application Gateway Administration Guide
iv
Uploading a Certificate to the Application Gateway 21
Getting Design Studio to Recognize a Certificate 22
Upgrading the Application Gateway Software 23
Reinstalling the Application Gateway Software 24
Saving and Restoring the Configuration 25
Restarting the Application Gateway 26
Shutting Down the Application Gateway 26
CHAPTER 3Network Connection Configuration 27
Prerequisites 27
Configuring Network Interface Settings 28
Configuring Ports 29
Specifying DNS Settings 29
Adding Host Aliases 30
Configuring Routes 30
Configuring Dynamic Routing 31
Adding, Testing, and Removing a Static Route 32
Static Route Example 33
Creating an Application Gateway Cluster 34
Cluster Prerequisites 36
Creating a Cluster 37
Maintaining a Cluster 38
Specifying the Default URL 38
CHAPTER 4Voice Office Configuration Requirements 41
Voice Office Application Prerequisites 41
Customizing the Voice Office Menu 42
Setting the Language of the Voice Office User Interface 43
Enabling Communication between the Phones and Application
Gateway 44
Configuring the Graphical XAS (GXAS) Port on the Application
Gateway 46
Enabling Automatic Dialing 46
Specifying a Source for Phone IP-to-DN Mappings 46

v
Application Gateway Administration Guide
Contents
Deployment Notes 47
Configuring a Call Server or CSV Connection 48
CSV File Format Specifications 49
CHAPTER 5LDAP/CSV Directory Configuration 51
Express Directory Overview 52
Express Directory Features 53
Configuring the Application Gateway to Use LDAP Directories 54
Specifying LDAP Attributes for Voice Office Operations 57
Looking Up Attributes in Your LDAP Directory 60
Configuring the Application Gateway to Use Directory Files in CSV
Format 63
CSV File Format Specifications 65
Adding Dialing Rules 66
Synchronizing the Application Gateway with Your Directories 67
CHAPTER 6Broadcast Server Installation 69
Overview of Broadcast Server 70
Network Deployment 70
Subscriber and Distribution List Source 71
Broadcast Server Operation with Clusters 72
Hardware and Software Overview 73
Software Server Requirements 73
Installing Broadcast Server Software 74
Microsoft IIS Configuration 74
Broadcast Server Software Installation 76
Connecting the Application Gateway and Broadcast Server 76
Synchronizing the Broadcast Server and Application Gateway
Clocks 77
Confirming Installation and Configuration 78
CHAPTER 7Zone Paging Configuration 79
Overview of Zone Paging 80
Network Deployment 81

Contents
Application Gateway Administration Guide
vi
Zone List Source 81
Paging Setup and Operation with Clusters 82
Managing Paging Zones 83
Viewing Extensions in an Imported Zone 83
Adding and Changing Custom Zones 84
CHAPTER 8Visual Voicemail Configuration 89
Overview of Visual Voicemail 90
Configuring Nortel Messaging 91
Configuring Visual Voicemail 92
CHAPTER 9Smart Agent Configuration 95
Smart Agent Features 97
Smart Agent Operation 98
Smart Agent Number Recognition 99
Smart Agent Number Manipulation 100
Overlay Area Codes 101
Unsupported Number Patterns and Dialing Provisions 102
Other Limitations 103
Smart Agent Operation with Microsoft Outlook Contacts 103
Smart Agent Deployment 104
Changing Outlook 2002 Security Settings for Smart Agent 105
Helping Users with Deployment and Use 106
User Connection Requirements and Notes 107
Configuring Smart Agent 108
Changing the Smart Agent Port 108
Configuring Phone Number Handling 108
Configuring the LDAP Connection 109
Adding Local Smart Agent Users to the Application Gateway 111
Testing the Smart Agent Deployment 112
Adding Click-to-Call Links to Web Applications 113
Adding Click-to-Call Links to Windows Applications 114

vii
Application Gateway Administration Guide
Contents
CHAPTER 10 Transformed Applications 115
Features 115
Back-End Application Transformation 116
Support for Multiple Formats 117
Conversion Features 117
Data and Session Management 118
Security 119
Security Levels 120
Security Issue for WAP Phones 121
Connections and Sessions 121
Transformation Controls 122
URL Request Handling of Transformed Applications 123
Managing Design Studio User Accounts 124
Configuring the External Public Protocol, Address, and Port 125
Configuring URL Filtering 127
Configuring Session and Connection Settings 127
Selecting an Input Character Encoding 129
Disabling Unrestricted Proxy 129
Specifying Outbound Proxy Settings 130
CHAPTER 11 Logging and Monitoring Application Gateway Operations 131
Configuring and Working with System Logs 131
Interpreting the System Log 133
Broadcast Server 134
Call Server synchronization for IP/DN mapping 134
CSV synchronization for IP/DN mapping 136
LDAP 136
Licensing 137
Socket listeners 137
Transformed applications 138
Enabling and Viewing SNMP and Health Logs 138
Viewing the W3C-Formatted HTTP Request Log 138
Enabling and Viewing SNMP Logs 139
Enabling and Viewing Health Logs 139
Monitoring Application Gateway Operations 141

Contents
Application Gateway Administration Guide
viii
CHAPTER 12 Troubleshooting 143
General Issues (Hardware, Licenses, Certificates) 143
Connectivity Issues 145
Express Directory 146
Visual Voicemail 147
Broadcast Server 148
Smart Agent 151
Zone Paging 152
I NDEX 153

ix
Application Gateway Administration Guide
Preface
This preface describes who should read the Application Gateway
Administration Guide, how it is organized, and related documentation.
Audience
This guide is intended for system administrators responsible for
connecting the Application Gateway to a network and configuring its
operation for voice applications as well as for connected devices (call
server, directory servers, and so on).
This document assumes that the Application Gateway has been installed
according to the Application Gateway Quick Start Guide and that the
administrator has experience configuring networks and an understanding
of call servers and their protocols.
Organization
This guide is organized as follows:
Chapter Title Description
Chapter 1 Overview Provides a conceptual background to Application
Gateway operation with voice applications and
transformed applications.
Chapter 2 Basic Administration Describes general Application Gateway
administration tasks and describes how to use the
Administration Tool interface and the serial
console.
Chapter 3 Network Connection
Configuration
Describes how to connect Application Gateways to
your network and specify network settings such as
ports, DNS servers, and dynamic or static routes.

Organization
xApplication Gateway Administration Guide
Chapter 4 Voice Office
Configuration
Requirements
Explains the configuration requirements that apply
to all or multiple Voice Office applications. Also
describes how to customize the Voice Office menu.
Chapter 5 LDAP/CSV Directory
Configuration
Describes how to the configure LDAP and/or CSV
directory sources used for several voice
applications.
Chapter 6 Broadcast Server
Installation
Unlike other Voice Office applications, Broadcast
Server runs on a separate Windows server,
connected to the Application Gateway. This
chapter describes how to install and test Broadcast
Server. For configuration and usage information,
refer to the Broadcast Server User Guide.
Chapter 7 Zone Paging
Configuration
Describes how to configure and manage paging
zones.
Chapter 8 Visual Voicemail
Configuration
Explains how to configure the Application
Gateway with your Unified Messaging IMAP and
SMTP servers.
Chapter 9 Smart Agent
Configuration
Describes Smart Agent operation, features,
deployment, and configuration.
Chapter 10 Transformed
Applications
Administration
Describes the operation and administration of
transformed applications.
Chapter 11 Logging and
Monitoring
Application Gateway
Operations
Describes how to configure and view system,
health, and SNMP logs, and work with a variety of
network monitoring applications.
Chapter 12 Troubleshooting Describes how to recover from a crash and
troubleshoot common issues.
Chapter Title Description

Related Documentation
xi
Application Gateway Administration Guide
Related Documentation
For additional information about the Application Gateway, refer to the
following guides:
•Application Gateway Quick Start Guide
•Application Gateway Network Integration Guide
•Application Gateway Hardware Installation Guide
•Application Gateway Release Notes
You can download all Application Gateway and Voice Office application
documentation from the Application Gateway Administration Tool
(Administration > Downloads). The Administration Tool also includes
online Help.
Design Studio, Broadcast Server, and Smart Agent, which run on personal
computers, include online Help.

Related Documentation
xii Application Gateway Administration Guide

1
Application Gateway Administration Guide
Chapter 1
Application Gateway Overview
The Application Gateway 1000/2000 is a network appliance that
transforms and delivers data and enhanced voice applications to IP
telephones. The following topics provide an overview to the Application
Gateway and the applications that it delivers:
•Introduction to Voice Applications, page 1
•Introduction to Transformed Applications, page 3
•Licensing, page 3
•Security, page 4
•Implementation Workflow, page 5
Introduction to Voice Applications
The Voice Office Applications Suite is a set of packaged telephony
applications. The Voice Office applications enable enterprises to leverage
their IP telephony investments and increase workforce productivity by
delivering converged applications to the screens and speakers of Nortel IP
phones.
Voice Office applications include:
•Express Directory provides an LDAP-based, organization-wide
directory with high speed, real time pruning.
•Visual Voicemail enables users to see a visual list of their voice
messages with the ability to select the most important ones to review,
without having to listen to each message serially. During message
playback, the user can play, pause, and rewind using labeled soft keys
rather than using cryptic control codes.
•Zone Paging enables users to page through groups of IP phones in
specific zones without the expense of installing an overhead paging
system.

Chapter 1 Application Gateway Overview
Introduction to Voice Applications
2Application Gateway Administration Guide
•Broadcast Server delivers alerts, such as emergency, IT, and weather
messages, to IP phones.
•Smart Agent enables Windows PC users to initiate calls from a desk
phone by clicking public switched network telephone numbers in
Internet Explorer or a phone number, contact name, or email address
in Outlook/Outlook Express email messages and Contacts pages.
Click-To-Call links can also be added to Windows and Web-based
applications.
The general network architecture for Voice Office applications follows.

Application Gateway Administration Guide
Chapter 1 Application Gateway Overview
Introduction to Transformed Applications
3
Introduction to Transformed Applications
The Application Gateway delivers business applications to Nortel IP
telephones. The Application Gateway can operate with other network
devices including switches, routers, and cache engines in order to
optimize service performance and enhance user experience.
The Application Gateway installs into any network infrastructure without
requiring changes to the existing hardware or back-end software. The
Application Gateway sits in front of content servers and works with other
networking products such as cache engines, web servers, firewalls, Virtual
Private Network (VPN) solutions, and routers.
The Application Gateway can display a hierarchical application portal on
IP phones for quick access to applications. Design Studio is a PC-based
application that you use to create transformation rules for Web
applications, modify the Application Menu that displays on devices, and
upload changes to an Application Gateway.
Licensing
Note Refer to the Application Gateway Release Notes for additional licensing
information specific to IP phones.
Application Gateway Software is enabled by user licenses which allow use
of the Server Software in increments defined by a license. A license enables
the Application Gateway to deliver applications to a user.
Each IP phone must have a license. A license is assigned to an IP phone’s
MAC address the first time that the phone contacts the Application
Gateway. When a phone registers with the Application Gateway, the
number of available licenses decreases by one. Thus, if you purchase 100
IP phone licenses, 100 of your phones can register with the Application
Gateway. Once all allowed licenses are associated with a phone,
additional connection attempts are denied.
The Application Gateway administrator can free a license by changing the
status of an phone to unlicensed. A phone’s status can be later changed
back to licensed, if needed.
Refer to the Application Gateway Release Notes for capacity information.

Chapter 1 Application Gateway Overview
Security
4Application Gateway Administration Guide
For more information, see the following topics:
•Managing Licenses, page 11
•Changing the License Status of an IP Phone, page 14
Security
The Application Gateway is fully protected against worms, viruses, and
other Internet attacks. The Application Gateway is built on proprietary
software, not a traditional operating system such as Windows, and the
Application Gateway contains no API that a worm or virus could run on.
As a result, the Application Gateway is not vulnerable to worms and
viruses that are compiled for traditional operating systems. In this respect,
the Application Gateway appliance is more like a closed router rather than
a server.
In addition, the Application Gateway has few open ports and those ports
send packets directly to Application Gateway processes.
The Application Gateway has been tested to ensure that no high- or
medium-risk security vulnerabilities exist. The Application Gateway can
be installed in any network with confidence that it introduces no
additional security risks.
Many microbrowser devices, including IP phones lack security and
encryption features. The Application Gateway, when used with secure
web and application servers, can reduce the potential security issues
associated with using such equipment.
Security Features
Security features of the Application Gateway include the following:
•Supports Basic authentication.
•Supports 196-bit TLS SSL encryption, as well as lower and higher bit
values defined in your certificate. You might prefer to lower the
encryption if performance is more important than security.
•SSL support includes HTTPS, IMAPS, POPS, and SSMPT. Supports
secure cookies.

Application Gateway Administration Guide
Chapter 1 Application Gateway Overview
Implementation Workflow
5
SSL support allows you to deploy the Application Gateway behind a
firewall to provide a secure gateway to protect IP telephone
connections beyond the firewall.
•Supports digital certificates in Privacy Enhanced Mail (PEM) format
that include a private key.
•Requires few open ports. The complete list of required ports is in the
Pre-Installation Checklist.
Implementation Workflow
The following general steps provide a suggested workflow for
implementing Voice Office applications.
1. Determine which applications are to be deployed and to which
phones.
2. Customize the Voice Office Menu accordingly, as described in
“Customizing the Voice Office Menu,” page 42.
3. Specify the language in which the application interface should display
on the phones, as described in “Setting the Language of the Voice
Office User Interface,” page 43.
4. For the purposes of initial testing, point a few phones to the
Application Gateway, as described in “Enabling Communication
between the Phones and Application Gateway,” page 44.
5. Enable automatic dialing, as described in “Enabling Automatic
Dialing,” page 46.
6. Complete the configuration required to supply the Application
Gateway with a mapping of phone IP addresses to extensions (DNs),
as described in “Specifying a Source for Phone IP-to-DN Mappings,”
page 46.
7. Configure the applications that you want to deploy. If you are
deploying Express Directory, Visual Voicemail, Zone Paging, or
Broadcast Server, complete the directory configuration as described in
“LDAP/CSV Directory Configuration,” page 51.
8. Verify your implementation on the test phones.
9. Deploy the applications to users by pointing their phones to the
Application Gateway.

Chapter 1 Application Gateway Overview
Implementation Workflow
6Application Gateway Administration Guide

7
Application Gateway Administration Guide
Chapter 2
Basic Administration
The following topics describe how to administer your Application
Gateway:
•Using the Administration Tool, page 7
•Using the Serial Console, page 10
•Managing Licenses, page 11
•Generating a Secure Certificate, page 14
•Upgrading the Application Gateway Software, page 23
•Reinstalling the Application Gateway Software, page 24
•Saving and Restoring the Configuration, page 25
•Restarting the Application Gateway, page 26
•Shutting Down the Application Gateway, page 26
Using the Administration Tool
This topic describes how to open and log out of the Administration Tool,
plus it provides information on the following tasks:
•Downloading Product Documentation, page 9
•Setting the System Date and Time, page 9
•Changing the Root Administrator Password, page 10
The Administration Tool contains the full set of network and operation
configuration commands. When you license additional applications, your
Administration Tool might include commands not shown in this guide’s
sample screens. The Administration Tool also provides access to a variety
of standard network monitoring tools, including Ethereal Network
Monitor, xNetTools, Traceroute, fnetload, and System Monitor.

Chapter 2 Basic Administration
Using the Administration Tool
8Application Gateway Administration Guide
To open the Administration Tool:
1Make sure that the Application Gateway is running.
2From a web browser, connect to the Application Gateway by entering the
URL:
https://ipAddress:adminPort
where:
- ipAddress is the IP address of your Application Gateway (the default IP
address is 10.20.30.40 with a netmask of 255.255.0.0)
- adminPort is the administration port of your Application Gateway (9001)
3If a Security Alert dialog box appears, click Yes.
The Administration > Downloads page appears.
You can download documentation from this page without logging in.
4Click the tab for the settings that you want to configure.
The Administration Tool login dialog appears.
5Enter your administrative username and password.
Note When working with the Administration Tool, click Submit or Commit
Changes to save changes.
The Administration Tool times out after 10 minutes of inactivity and
requires that you log in to continue working.
To log out of the Administration Tool:
•Click Administration > Logout.