Nortel 1000 Con?guration guide Quick setup guide

Nortel Application Gateway 1000/2000
Nortel Application Gateway Release 6.1
Network Integration Guide
Planning
Document Number: NN42360-200
Document Release: Standard 01.04
Date: January 2007
Year Publish FCC TM
Copyright © 2007 Nortel Networks. All rights reserved.
Produced in Canada
The information in this document is subject to change without notice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented
without express or implied warranty. Users must take full responsibility for their applications of any products
specified in this document. The information in this document is proprietary to Nortel Networks.
Nortel, Nortel (Logo), the Globemark, SL-1, Meridian 1, and Succession are trademarks of Nortel Networks.
Title page

iii
Application Gateway Network Integration Guide
Contents
Audience v
Organization v
Conventions vi
Related Documentation vi
CHAPTER 1Overview 1
Voice Office 2
Transformed Applications 3
Security 3
Deployment Planning 4
Network Impacts 5
CHAPTER 2Security Planning 7
Application Gateway Security Overview 7
General Security Issues 9
Application Gateway Security Solutions 11
Authentication 11
Secure Socket Layer 12
Cookies and Secure Cookies 13
Other Security Features 13
CHAPTER 3Deployment Planning 15
Overview 15
The Application Gateway Pre-Installation Checklist 16
Considerations for Integrating the Application Gateway into an IP Phone
Enterprise 16
Location of Call Servers, IP Phones, and LDAP Servers 17
Location of Web/Intranet Content 17
Administration and Redundancy Requirements 17
Relative Performance of Network Segments 18
Quality of Service (QoS) 18
Sample Configurations 19

Contents
Application Gateway Network Integration Guide
iv
Application Gateway Location Relative to a Firewall or
Router 19
Application Gateway Operation with a Router 20
CHAPTER 4Network Impacts 21
I NDEX

v
Application Gateway Network Integration Guide
Preface
This preface describes who should read the Application Gateway Network
Integration Guide, how it is organized, and its document conventions.
Audience
This installation guide is intended for IT professionals and other
individuals responsible for determining how the Application Gateway is
to integrate into a network.
Organization
This guide is organized as follows:
Chapter Title Description
Chapter 1 Overview Provides an executive summary of this guide.
Chapter 2 Security Planning Provides a starting point for security
planning and contains a general discussion of
security issues.
Chapter 3 Deployment Planning Discusses issues to consider when planning
how to integrate the Application Gateway
into your network and contains sample
configurations.
Chapter 4 Network Impacts Provides a summary of how Application
Gateway operation impacts a network.

Conventions
vi Application Gateway Network Integration Guide
Conventions
This guide uses the following conventions:
Notes use the following conventions:
Note Means reader take note. Notes contain helpful suggestions or other
important information.
Tips use the following conventions:
Tip Means the following information will help you solve a problem. The tips
information might not be troubleshooting or even an action, but could be
useful information.
Cautions use the following conventions:
Caution Means reader be careful. In this situation, you might do
something that could result in equipment damage or loss of
data.
Related Documentation
For additional information about the Application Gateway, refer to these
guides:
•Application Gateway Hardware Installation Guide
•Application Gateway Administration Guide
Convention Description
boldface font Commands and HTML element names are in
boldface.
boldface screen
font
Information you must enter is in boldface screen
font.

1
Application Gateway Network Integration Guide
Chapter 1
Overview
This document discusses issues to consider when planning how the
Application Gateway will integrate into your network. Topics covered
include the basic functions and operation of the Application Gateway,
with emphasis on security and the interactions between the Application
Gateway and your network. This chapter provides an executive summary
of network integration considerations.
The Nortel Application Gateway delivers business applications to the
screens and speakers of Internet-enabled IP telephones. The applications
delivered to IP Phones include Nortel Voice Office applications and
transformed business applications.
Chapter

Chapter 1 Overview
Voice Office
2Application Gateway Network Integration Guide
Voice Office
Voice Office is a suite of packaged
telephony applications that requires no
development work. The Voice Office
Application Suite enables enterprises to
further leverage their IP telephony
investments and increase workforce
productivity by delivering converged
applications to the screens and speakers of
IP phones.
Voice Office applications include:
•Visual Voicemail enables users to see a
visual list of their voice messages with the
ability to select the most important ones to review, without having to
listen to each message in a serial fashion. During message playback,
the user can play, pause, forward, reply, and rewind using labeled soft
keys rather than using cryptic control codes.
•Express Directory provides an LDAP-based, organization-wide
directory with high-speed, real-time pruning. This new directory user
interface reduces the time to look-up and dial in by 75% compared to
current solutions.
•Zone Paging enables authorized users to page to groups of IP
telephones in specific zones without the expense of installing an
overhead paging system
•Broadcast Server delivers priority messages such as emergency, IT,
and weather alerts in the form of text, graphics and audio alerts to IP
telephones.
•Smart Agent enables a Windows PC user who is connected to an
Application Gateway to dial a number by clicking it in Internet
Explorer, Outlook, and Outlook Express.

Application Gateway Network Integration Guide
Chapter 1 Overview
Transformed Applications
3
Transformed Applications
In addition to delivering Voice Office applications to IP phones, the
Application Gateway also provides the ability to transform existing
business applications for the screens of IP phones.
Transformed applications are delivered to the screen of the device using
the Application Gateway and are customized using the visual
development toolkit, Design Studio. Transformed applications appear as
though they were custom-developed for the IP telephone, often without
change to any of the underlying applications. Transformed applications
include time clocks, email, sales force automation, school attendance,
inventory look-up, and patient records, for example.
Security
The Application Gateway is a transparent network appliance that
implements and supports industry-standard security techniques. The
Application Gateway sits behind a corporate firewall and is resistant to
invasion. It has been tested to ensure that it has no high- or medium-risk
security vulnerabilities, and no UNIX, Web server, URL, or port
vulnerabilities.

Chapter 1 Overview
Deployment Planning
4Application Gateway Network Integration Guide
The Application Gateway fully complies with the security protocols used
by other devices. For example, if your IP telephones support secure
communications, the Application Gateway connection with the
telephones will be secure. The Application Gateway uses only published
interfaces to IP telephones and systems.
For a more in-depth discussion of Application Gateway security, see
Chapter 2, “Security Planning.”
Deployment Planning
The Application Gateway installs into any network infrastructure without
requiring changes to the existing hardware or back-end software. The
Application Gateway sits in front of content servers and works with other
networking products such as cache engines, web servers, firewalls, and
routers.
The Application Gateway is designed for flexible network deployment.
The location of an Application Gateway in a network is largely based on
the configuration of the existing network.
Regardless of the network deployment chosen, the only requirements that
must be met to ensure correct operation are as follows:
•The client devices (IP telephones) must be able to contact the
Application Gateway on the network.