Top Banner
1 DEPLOYMENT MODES OF THE MiVoice Border Gateway There are four Network Profiles Choosing the correct Network Profile is key for a successful Mitel UC Deployment What is happening behind the scenes when you pick a Network Profile? What does Custom Configuration do?
18

DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

Aug 28, 2018

Download

Documents

vancong
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

1

DEPLOYMENT MODES OF THE MiVoice

Border Gateway

• There are four Network Profiles

• Choosing the correct Network Profile is key for a successful Mitel UC Deployment

• What is happening behind the scenes when you pick a Network Profile?

• What does Custom Configuration do?

Page 2: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

2

COMMON SMB/SME DEPLOYMENT

TOPOLOGIES

SERVER-GATEWAY SERVER-GATEWAY

Carrier

Network

MBG/

Virtual MBG

Local

Users

MiVoice

Business/Virtual

MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Client

Network

Public

Internet

Carrier

Network

MBG/

Virtual MBG

2-port

Firewall

Local

Users

MiVoice

Business/Virtual

MiVoice

Business

MiCollab/

Virtual

MiCollab

Client

Network

Remote

Users

Public

Internet

Page 3: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

3

COMMON ENTERPRISE

DEPLOYMENT TOPOLOGIES

SERVER-ONLY-DMZ-SRC SERVER-ONLY-DMZ

Carrier

Network

3-port

Firewall

Local

Users

MiVoice

Business/

Virtual MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Public

Internet

Client

Network

MBG/

Virtual MBG

DMZ

MBG/

Virtual MBG

W\SRC

Daisy-Chain

Carrier

Network

3-port

Firewall

Local

Users

MiVoice

Business/Virtual

MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Public

Internet

Client

Network

MBG/

Virtual MBG

DMZ

Page 4: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

4

COMMON DEPLOYMENT TOPOLOGIES MiVOICE BORDER GATEWAY AS FIREWALL IN SERVER-GATEWAY MODE

• MiVoice Border Gateway is

deployed at the network edge

and serves as the enterprise

network firewall for all voice

and data connections

• MiVoice Border Gateway

supports Teleworker Sets, SIP

Trunk, Web Proxy and Secure

Recording Connector (SRC) for

TW sets.

• Can be co-resident with MAS

• Suitable for some SMB, used

when a client firewall does not

exist.

SERVER-GATEWAY

Carrier

Network

MBG/

Virtual MBG

Local

Users

MiVoice

Business/

Virtual MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Client

Network

Public

Internet

Page 5: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

5

COMMON DEPLOYMENT TOPOLOGIES MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE

FIREWALL

• MiVoice Border Gateway is

deployed at the network edge and

alongside an existing firewall

• MiVoice Border Gateway supports

Teleworker Sets, SIP Trunk, Web

Proxy and Secure Recording

Connector (SRC) for remote sets.

• High degree of security through

Authentication and Encryption

• All “other” traffic allowed through

Corporate Network is handled by

the Corporate Firewall.

SERVER-GATEWAY

Carrier

Network

MBG/

Virtual MBG

2-port

Firewall

Local

Users

MiVoice

Business/

Virtual MiVoice

Business

MiCollab/

Virtual

MiCollab

Client

Network

Remote

Users

Public

Internet

Page 6: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

6

COMMON DEPLOYMENT TOPOLOGIES MiVOICE BORDER GATEWAY IN DMZ WITH 3-PORT FIREWALL

• MiVoice Border Gateway is deployed

in the DMZ alongside a 3-port

firewall

• External Teleworker endpoints

connect via the firewall to MiVoice

Border Gateway, which then initiates

a connection to the LAN via the

same firewall

• MiVoice Border Gateway supports

Teleworker Sets, SIP Trunk, and Web

Proxy

• Highest degree of security.

• Recommended Deployment

SERVER-ONLY-DMZ

Carrier

Network

3-port

Firewall

Local

Users

MiVoice

Business/Virtual

MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Public

Internet

Client

Network

MBG/

Virtual MBG

DMZ

Page 7: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

7

7

COMMON DEPLOYMENT TOPOLOGIES MiVOICE BORDER GATEWAY IN DMZ

CHAINED WITH MBG ON LAN

• MiVoice Border Gateway is deployed in the DMZ alongside a 3-port firewall

• Second MiVoice Border Gateway is deployed on the LAN with Secure Recording Connector (SRC)

• External “Recorded” endpoints connect via the firewall to MiVoice Border Gateway, which then proxies a connection to the LAN MiVoice Border Gateway w\SRC

• MiVoice Border Gateway supports Teleworker Sets, SIP Trunk, Web Proxy

• Can be used to record both LAN and WAN sets.

SERVER-ONLY-DMZ-SRC

Carrier

Network

3-port

Firewall

Local

Users

MiVoice

Business/

Virtual MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Public

Internet

Client

Network

MBG/

Virtual MBG

DMZ

MBG/

Virtual MBG

W\SRC

Daisy-Chain

Page 8: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

8

COMMON DEPLOYMENT TOPOLOGIES DAISY-CHAIN FOR LOCAL STREAMING

• Downstream Gateway is “Chained” to Upstream Gateway

• Reduces WAN Bandwidth

• MiVoice Border Gateway can be deployed in either DMZ or Network Edge

• Local Streaming not compatible with SRC

DAISY CHAIN FOR LOCAL STREAMING

Carrier

Network

3-port

Firewall

Local

Users

MiVoice

Business/

Virtual MiVoice

Business

MiCollab/

Virtual

MiCollab

Remote

Users

Public

Internet

Client

Network

MBG/

Virtual MBG

DMZ

MBG/

Virtual MBG

W\SRC

Daisy-Chain

Downstream

MBG

Local

Streaming

Remote

Users

Page 9: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

9

TROUBLESHOOTING &

TRAINING

Page 10: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

10

• One-way Audio

• Mitel SIP Trunks Not Registering

• Remote IP Phone will not Boot

Top 3 Issues

Page 11: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

11

MiVOICE BORDER GATEWAY INTERFACE

DASHBOARD

Page 12: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

12

MiVOICE BORDER GATEWAY INTERFACE

METRICS

Page 13: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

13

MiVOICE BORDER GATEWAY INTERFACE

DIAGNOSTICS

Page 14: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

14

MiVOICE BORDER GATEWAY INTERFACE

DIAGNOSTICS

Page 15: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

15

MiVOICE BORDER GATEWAY INTERFACE

DIAGNOSTICS

Page 16: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

16

MiVOICE BORDER GATEWAY INTERFACE

FILE TRANSFERS

Page 17: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

17

MiVOICE BORDER GATEWAY INTERFACE

DIAGNOSTICS

Page 18: DEPLOYMENT MODES OF THE MiVoice Border … · MiVOICE BORDER GATEWAY IN SERVER-GATEWAY MODE ASTRIDE THE FIREWALL ... • High degree of security through Authentication and Encryption

18

MiVOICE BORDER GATEWAY INTERFACE

FILE TRANSFERS