Requirements

Bandwidth

Ensure that the upload bandwidth is at least 90 kB/s (720 kb/s) with latency no greater than 150 ms (round trip). This specification ensures that Avaya Global Services can provide remote support through the SSL VPN service.

Authentication

• For a small number of IP Office systems, you can use the Avaya VPN Gateway (AVG) local database to create user data needed for authentication.

• Large deployments require a RADIUS server. Avaya recommends that you use the Avaya Identity Engines Ignition Server as the RADIUS server.

• The IP Office system uses digital certificates to verify the identity of the AVG at end of the SSL VPN tunnel. You must configure certificates in AVG, and you must install the necessary X.509 certificates in the IP Office certificate store.

Licensing

The SSL VPN Service does not require a license key.

Limitations

Small Community Networks

If you deploy IP Office systems in a Small Community Network (SCN), you can configure an SSL VPN service between specific nodes in the SCN and the AVG. You cannot use the SSL VPN connection to remotely access other nodes in the SCN topology: the SSL VPN service communicates only with the IP Office system that is its endpoint. You must configure an SSL VPN service for each node in the SCN that you want to access remotely.

Certificates

You can store a maximum of 25 certificates in the IP Office trusted certificate store.

HTTP version

If you use a browser with HTTP version newer than 1.1, you may be unable to connect to a LAN device using SSL VPN NAPT. If you have difficulty connecting to a LAN device, change your browser settings to use HTML version 1.1.