Akixi Installation Requirements (Siemens HiPath 3000)

lynxfatkidneyedNetworking and Communications

Oct 26, 2013 (3 years and 9 months ago)

140 views



Document Version:
1.0.0.8
,
Page
1

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.

Akixi Installation Requirements (Siemens HiPath 3000)


Introduction

This document
describes the
required activities
that should be
completed
by the
R
eseller
before
the deployment of Akixi hosted services at a Customer site. Please complete the
tasks specified in this document as follows:



Read this document.



Complete all configuration &
information collection tasks
specified by th
is document.

Note that
sub
-
sections
which
require completion
or information to be provided
are
marked with a


character.



Complete the checklist
below
.



Sign and return this document to Akixi

at least

5 working days prior to the deployme
nt of
Akixi hosted services at the

Customer

site.


Checklist

Activity

Completed
(

)

A

Customer contact details and user information specified.


B

Public & internal IP addresses of
the
Customer site’s internet router &
t敬数桯湥 獹獴敭 灲潶id敤
I 慮d
f 捡c
捯cfirm t桡t t桥 C畳t潭or 桡猠a
獴慴楣ally 慳獩g湥d fm 慤摲敳猠潮 t桥 灵扬i挠獩摥 of t桥ir i湴nr湥t r潵ter
.


C

The device configuration list of the Customer’s telephone system has
扥敮 灲潶i摥搬d慮d

agr敥 t桡t

will 湯tify Akixi imm敤i慴敬y of 慮y
獵s獥s略nt 摥vi捥⁣潮figur慴楯渠
捨cnge献


a

Customer’s telephone system and HG 1500 card configured.


b

Customer’s internet router configured.


c

q桥 s潩捥⁎ctw潲k mr潶i摥r 桡s 敮慢l敤 C䱉LC慬l敲ea r散ei灴.







pig湡ture

f a杲敥gt桡t f 桡v攠e敡d t桩猠摯捵浥ct i渠nt猠敮tirety
慮搠d 桡v攠捯e灬et敤 t桥 捨ccklist 慳
m慲k敤 慢潶攬e慮d t桡t 慮y 慤摩ti潮慬 w潲o猠湥c敳獡ry 慳⁡ 捯c獥q略湣攠ef 湯n
-
t慳欠
捯浰c整楯渠m慹 摥l慹 t桥 摥灬潹m敮t of Akixi 桯獴敤 獥rvi捥猠慴 t桥 C畳u潭敲 獩te.



pig湥搠Eo敳ell敲e:









mri湴nk慭a:



a慴敤a









Document Version:
1.0.0.8
,
Page
2

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.

A.
Customer Contact
Details & User Information

Site Details

Primary

Contact Name:


Company Name:


Address 1:


Address 2:


Address 3:


Postcode:


Tel No:


Akixi Site License Required

Site License Required

(Tick One Option


):

Akixi Lite

Akixi 1000

Akixi 2000





Required Akixi
Application

User

(Supervisor)
List

Please complete this section listing the Akixi application users that require access to the
Akixi Service in order to actually run reports:

E
-
mail Address

Send
Welcome
E
-
mail
1

Akixi

Reporting
License
2

Contact Name

Internal
Station
(Call no)

Tel / DDI
No.



Yes or No


































Extension and ACD Agent Exclusion List

Please list the extensions and ACD agents that are to be excluded from
reporting and billing.

Extension(s):



Agent(s):






1

Indic
ate whether Akixi should send an automated Welcome e
-
mail for the new application user.

2

Please specify from: Lite, Presence, 1000, or 2000
.











Document Version:
1.0.0.8
,
Page
3

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.


B.
Required
P
ublic
& Internal
IP
A
ddress
es

Static Public IP Address

Required

Note that
C
ustomer must have a statically assigned IP address on the public side of their
router.

Required
IP Address
es

Please specify the following IP addresses:

Customer’s
m畢li挠o潵ter
fm A摤r敳猺


Customer’s
f湴nr湡l o潵t敲e
fm A摤r敳猺


eim慴栠㌰〰 ed ㄵ〰 C慲携


eim慴栠㌰〰 M慩渠䱁n f湴敲f慣a:


If not known directly, the public IP address of the Customer’s router
may be obtained by
browsing to one of the following free internet sites when connected to the internal side of the
Customer’s local area network:

http://www.whatsmyip.org/

http://whatismyipaddress.com/

http://www.myipaddress.com/

http://www.ip
-
adress.com/

C.
Provide Device Configuration Of Customer’s Telephone System

A comprehensive
list of the
Customer’s
telephone system’s device configuration is required

as follows:

Entity/Device Type

Required Information

Normal
Stations

All normal stations, IP extensions,
and
POT/analogue
devices:



Call no.



Device
Name
.

Virtual Stations / Pilot Numbers

All devices used as pilot numbers for routing calls:



Call no.



Device Name.

Voice Mail / IVM Ports

All voice mail devices.



Call no.



Device

Name.

Trunk Devices

All trunk devices including IP trunk devices:



Code value, which normally starts from 7801.



Route Name.

Hunt Groups

/ IVM Groups

All normal hunt groups including MULAP / RNA / etc.

group types and also all IVM / voice mail hunt
groups:



Call no, which normally start
s

from
350.



Device
Name.



Hunt group member station list per group.

UCD Groups

All configured UCD Extensions / Stations /ACD groups:



Call no, which normally starts from 440.

Note that these must be assigned
using the last 60
Group Index position(s)
, which is

741 & above for the
HiPath
35x0/
37
x
0
, and position(s) 91 & above for the
HiPath
3
3x
0
.



Device Name against Call no.







Document Version:
1.0.0.8
,
Page
4

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.



Assigned ID member list per UCD group.


Additionally, whenever the device configuration
of the Customer’s telephone system is
subsequently changed, Akixi needs to be notified immediately so that the Akixi hosted
service’s configuration can also be appropriately changed in order for it to monitor the
telephone system

correctly
.

D.
Configure
Customer’s Telephone System & HG 1500 Card

Overview

Since most
of the
required telephone system configuration is network
-
related, the
subsequent
diagram illustrates how the Akixi hosted service monitors the Customer’s
telephone system via a remote CSTA con
nection

using the following
hypothetical
HiPath &
router IP address configuration
:

Customer’s
Public Router IP Address:

1.1.1.1

Customer’s
Internal Router IP Address:

192.168.1.254

HiPath 3000 HG 1500 Card:

192.168.1.
199

HiPath 3000 Main LAN Interface:

192.168.1.2
00




Configure Telephone System For Remote CSTA Connection

Enable the telephone system to accept CSTA connections from the Akixi Hosted Service as
follows:



Configure Default Gateway In HG 1500 Card



Document Version:
1.0.0.8
,
Page
5

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.

1.

Ensure that the Customer’s internal router IP address (192.168.1.254 in the example
above) is set as the HG 1500 card’s default gateway under “Explorers


Routing


IP Routing


Default Router”
,
which is
indicated as item 1 in the screenshot of the
HG 1500

web
-
based configuration tool
shown
below
:




Enable LAN Interface & HIP Forwarding

2.

Verify that
HIP forwarding
is enabled
in the “Basic Settings”

tab under
“Network..”
within the HiPath 3000 Manager tool
.

3.

Also
ensure that the
IP address
o
f the HiPath’s main (CPU) LAN address
is set
in the
“Basic Settings”

tab under
“Network..” within the HiPath 3000 Manager tool
.




Enable Routing Entry For Akixi Hosted Service

4.

Create
a routing table entry for the
assigned
IP address of the Akixi Hosted Ser
vice
for the corresponding Customer
(
a “
79.
x
.
x
.
x” address provided to you in a separate e
-
mail
), specifically setting its route to the IP address of the HG 1500 card.


LIM Module Support

The use of the LIM module instead of the HG 1500 card is also supported for Akixi service
connectivity in customer environments with
up to
5
0

extensions and a
maximum usage
capacity
of
150

call attempts per hour.

When deploying with the LIM module, follow
the same instructions as per the HG 1500 card
installation with the following exceptions:



Configure Default Gateway In HG 1500 Card

This configuration step isn’t necessary.



Document Version:
1.0.0.8
,
Page
6

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.



Enable LAN Interface & HIP Forwarding

Select the “LIM” Protocol setting option inst
ead.



Enable Routing Entry For Akixi Hosted Service

The routing table entry should be created with the “Gateway” option set to the internal
addre
ss of the customer’
s internet router

(e.g. 192.168.1.254 in the previous example)
.

Other Required Telephone Syst
e
m

Complete the following non
-
network related telephone system configuration:



For security purposes unless specifically required, restrict (prohibit) all stations from
making international & premium rate calls.



Set on (check) the

“CSTA application active”
flag within the

Plus Product Flags


tab
under

System
p
arameters
...” within the HiPath 3000 Manager tool
.



Unset (uncheck) the


Direction
p
refix sen
t

via CSTA

flag within the

Plus Product Flags


tab under

System
p
arameters
...” within the HiPath 3000 Man
ager tool
.



Set on (check) the “Silent monitoring” flag against all stations assigned to Akixi
application users within the Stationview screen of the HiPath 3000 Manager tool
.

E.
Configure Customer’s Internet Router

NAT / Port Redirection

Arrange for
the
Customer’s internet router / firewall to have a NAT / port redirection entry
created for TCP port 7001, which maps to the internal IP address of the HiPath’s main LAN
interface.

This basically
maps
TCP port 7001
on the public side of the router
to the
HiPa
th
CPU
’s

IP address

and allow
s

inbound access for the CSTA protocol
.

For example, using the previously specified hypothetical HiPath & router IP address
configuration:

Example NAT / Port Redirection Mapping Entry

Protocol:

TCP

Public / WAN IP Address:

Any

or 1.1.1.1

Public Port:

7001

Mapped / Private IP Address
:

192.168.1.200

Private Port
:

7001


Firewall
Filter
Rules

Arrange for
the
Customer’s internet router / firewall to have
the appropriate firewall rules to
specifically only allow the Akixi
Hosted Service inbound access over TCP 7001.

Typically on most firewall configurations, this can be achieved using two individual firewall
rules in a chain: the first that allows inbound access on TCP port 7001 from the Akixi Hosted
Service, and
then
a sec
ond

rule
, which blocks any other IP address
es

accessing
TCP
port
7001.

For example:

Example
Firewall Chain Entry 1

Action:

Pass/Allow Immediately, Then Exit
Rules
Chain

Direction:

Inbound (WAN/Public


Private)

Protocol:

TCP

Source IP Address:

79.
x
.
x
.
x

(Assigned IP Address Of Akixi Service)

Source Subnet Mask:

255.255.255.255 (/32)

Source Port:

Any



Document Version:
1.0.0.8
,
Page
7

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.

Destination IP Address
:

Any

Destination Port
:

7001

Example
Firewall Chain Entry 2

Action:

Block / Prohibit Immediately

Direction:

Inbound (WAN/Public


Private)

Protocol:

TCP

Source IP Address:

Any

Source Port:

Any

Destination IP Address:

Any

Destination Port:

7001


Router Rules Shown Graphically

For
further illustration
,
implementation of
the NAT & firewall entries explained
above is also
shown
graphically:



Both non
-
Akixi servers on IP addresses
2
0.
2
0.
2
0.
2
0 and
3
0.
3
0.
3
0.
3
0 are blocked by the 2
nd

firewall chain entry from inbound access on TCP port 7001.

The Akixi Server is allow
ed

inbound access by the first firewall chain entry
,

and
then
the NAT
/ port redirection rule
also
maps the inbound connection attempt to the main LAN interface of
the HiPath 3000

telephone system
.



Document Version:
1.0.0.8
,
Page
8

Of
8

Copyright
© 201
3

Aki
xi Limited, All Rights Reserved.

F.
Enable
CLI/CallerID Receipt

Verify with the Customer’s
V
oice
N
etwork
P
rovider that CLI/CallerID information is being
transmitted on inbound calls received via all voice network trunk devices.