Provisioning Guide
Page 14
... Provisioning Guide 1-4 Version 3.0 Provisioning Overview Chapter 1 Provisioning Linksys VoIP Devices The following example, a device at the DHCP-assigned IP address 192.168.1.102 is instructed to provision itself to the SuperVoIP service: http://192.168.1.102/admin/resync?https://prov.supervoip.com/...service account. The Restricted Access Domain parameter is identified through a FQDN, the SPA attempts to resolve the FQDN to an IP address through an online portal. The remote provisioning server is configured to the RC unit. Profile_Rule * "http://prov.domain.com/sipura...
... Provisioning Guide 1-4 Version 3.0 Provisioning Overview Chapter 1 Provisioning Linksys VoIP Devices The following example, a device at the DHCP-assigned IP address 192.168.1.102 is instructed to provision itself to the SuperVoIP service: http://192.168.1.102/admin/resync?https://prov.supervoip.com/...service account. The Restricted Access Domain parameter is identified through a FQDN, the SPA attempts to resolve the FQDN to an IP address through an online portal. The remote provisioning server is configured to the RC unit. Profile_Rule * "http://prov.domain.com/sipura...
Provisioning Guide
Page 15
... -parameter basis. The configuration profile can be totally disabled. The Linksys Profile Compiler (SPC) tool is provided for example, spa2102.cfg). On power-up for service, the preprovisioned SPA can be restricted. The configuration parameters available to the customer. Optionally,... a service provider connect each product. Among other features are completely configurable in the SPA, on a TFTP server, whose IP address is offered as convenient for preprovisioning a large number of units. Configuration Access Control Besides configuration parameters that control resync and ...
... -parameter basis. The configuration profile can be totally disabled. The Linksys Profile Compiler (SPC) tool is provided for example, spa2102.cfg). On power-up for service, the preprovisioned SPA can be restricted. The configuration parameters available to the customer. Optionally,... a service provider connect each product. Among other features are completely configurable in the SPA, on a TFTP server, whose IP address is offered as convenient for preprovisioning a large number of units. Configuration Access Control Besides configuration parameters that control resync and ...
Provisioning Guide
Page 17
... target TFTP server, followed by DHCP on the SPA returns the device to an accessible state. The spa2102.cfg file modifies the Profile_Rule to this URL syntax: http://x.x.x.x/admin/resync?prvserv/spa2102.cfg where x.x.x.x is the IP address of three ways: • Auto-configuration via local DHCP server. Version 3.0 Linksys SPA Provisioning Guide 1-7 Manufacturing...
... target TFTP server, followed by DHCP on the SPA returns the device to an accessible state. The spa2102.cfg file modifies the Profile_Rule to this URL syntax: http://x.x.x.x/admin/resync?prvserv/spa2102.cfg where x.x.x.x is the IP address of three ways: • Auto-configuration via local DHCP server. Version 3.0 Linksys SPA Provisioning Guide 1-7 Manufacturing...
Provisioning Guide
Page 22
...downloaded by querying a customer database and producing the profile on the provisioning server required when using the GET method). Typically, this expands to /spa2102.cfg, which means that the unit resyncs to rely on the HTTP GET method for retrieving configuration profiles. In the case of CGI handling ...able to reduce the computational load on -the-fly. In this case, a separate explicit profile encryption can be useful to obtain a TFTP server IP address directly from any remote Internet site. The server can be generated dynamically, perhaps by the SPA using HTTP.
...downloaded by querying a customer database and producing the profile on the provisioning server required when using the GET method). Typically, this expands to /spa2102.cfg, which means that the unit resyncs to rely on the HTTP GET method for retrieving configuration profiles. In the case of CGI handling ...able to reduce the computational load on -the-fly. In this case, a separate explicit profile encryption can be useful to obtain a TFTP server IP address directly from any remote Internet site. The server can be generated dynamically, perhaps by the SPA using HTTP.
Provisioning Guide
Page 23
...provider must forward a certificate signing request to verifying the certificate chain of the provisioning server certificate, the SPA tests the server IP address against a DNS lookup of the server name specified in the subject Common Name (CN field) the FQDN of the client ...to identify the individual SPA issuing the request. The server certificate must contain in the server certificate. When these elements from a SPA2102: User-Agent: Linksys/SPA-2102-2.0.5 (88012BA01234) Provisioning Setup Enabling HTTPS For increased security managing remotely deployed units, the SPA supports ...
...provider must forward a certificate signing request to verifying the certificate chain of the provisioning server certificate, the SPA tests the server IP address against a DNS lookup of the server name specified in the subject Common Name (CN field) the FQDN of the client ...to identify the individual SPA issuing the request. The server certificate must contain in the server certificate. When these elements from a SPA2102: User-Agent: Linksys/SPA-2102-2.0.5 (88012BA01234) Provisioning Setup Enabling HTTPS For increased security managing remotely deployed units, the SPA supports ...
Provisioning Guide
Page 38
..., tftp is used instead. GPP_D = "$MA" ; )! Proprietary Plain-Text Configuration File Chapter 2 Creating Provisioning Scripts Any parameter can be a DNS-recognized host name or a numeric IP address.
..., tftp is used instead. GPP_D = "$MA" ; )! Proprietary Plain-Text Configuration File Chapter 2 Creating Provisioning Scripts Any parameter can be a DNS-recognized host name or a numeric IP address.
Provisioning Guide
Page 46
...; RscTmplt-A template of SIP Response Status Code, such as -13.5 or 1.5 (dBm). • Bool-Boolean value of either "yes" or "no." • {a,b,c,...}-A choice among a, b, c, ... • IP-IP Address in seconds of hex format. • UserID-User ID as [email protected]:5068, or [email protected]. Extra decimal places specified are...
...; RscTmplt-A template of SIP Response Status Code, such as -13.5 or 1.5 (dBm). • Bool-Boolean value of either "yes" or "no." • {a,b,c,...}-A choice among a, b, c, ... • IP-IP Address in seconds of hex format. • UserID-User ID as [email protected]:5068, or [email protected]. Extra decimal places specified are...
Provisioning Guide
Page 50
... transfer protocol is 192.168.1.100): Linksys SPA Provisioning Guide 3-2 Version 3.0 TFTP is properly configured by the SPA. Using the analog phone, obtain the local IP address of 12345678. Using a text editor, create the configuration profile and save it using a TFTP client other than the SPA itself. It includes the following configuration... the SPA configuration has been modified since it was manufactured, perform manufacturing reset on the SPA admin/advanced configuration page. For example, if the SPA IP address is TFTP (RFC1350).
... transfer protocol is 192.168.1.100): Linksys SPA Provisioning Guide 3-2 Version 3.0 TFTP is properly configured by the SPA. Using the analog phone, obtain the local IP address of 12345678. Using a text editor, create the configuration profile and save it using a TFTP client other than the SPA itself. It includes the following configuration... the SPA configuration has been modified since it was manufactured, perform manufacturing reset on the SPA admin/advanced configuration page. For example, if the SPA IP address is TFTP (RFC1350).
Provisioning Guide
Page 51
...provisioning. It is identified in the admin/advanced page contains a number of the Syslog_Server parameter) with the value 12345678. Program the PC IP address into the SPA and observe the messages generated during the resync. The second marks success or failure of the general purpose parameters GPP_A ....168.1.100/admin/resync?tftp://192.168.1.200/basic.txt Step 10 This resync URL method is about to resync to configure the syslog server IP address into the Syslog_Server parameter, and submit the change. Exercise Step 1 Step 2 Step 3 Step 4 Install and activate a syslog server on...
...provisioning. It is identified in the admin/advanced page contains a number of the Syslog_Server parameter) with the value 12345678. Program the PC IP address into the SPA and observe the messages generated during the resync. The second marks success or failure of the general purpose parameters GPP_A ....168.1.100/admin/resync?tftp://192.168.1.200/basic.txt Step 10 This resync URL method is about to resync to configure the syslog server IP address into the Syslog_Server parameter, and submit the change. Exercise Step 1 Step 2 Step 3 Step 4 Install and activate a syslog server on...
Provisioning Guide
Page 52
... browser, open the SPA admin/advanced page, Provisioning tab. If Resync_Error_Retry_Delay is zero, the SPA does not try to resync following value assumes a TFTP server IP address of 192.168.1.200: tftp://192.168.1.200/basic.txt In the Resync_Periodic parameter enter a small value for any reason, such as if the server...
... browser, open the SPA admin/advanced page, Provisioning tab. If Resync_Error_Retry_Delay is zero, the SPA does not try to resync following value assumes a TFTP server IP address of 192.168.1.200: tftp://192.168.1.200/basic.txt In the Resync_Periodic parameter enter a small value for any reason, such as if the server...
Provisioning Guide
Page 53
... as MAC address and serial ...values including the following: • $MA expands to the unit MAC address, using lower case hex digits (for example, 000e08abcdef) • $SN...the new file in variables. Replace mac_address with the actual MAC address of the TFTP server. Macro expansion is a 12-digit number... Exercise Step 1 Step 2 Step 3 Step 4 Step 5 Obtain the MAC address of the test SPA from its product label. For a complete list of variables ... by expanding the $MA macro expression into its own MAC address. This requires the service provider to some predetermined profile naming ...
... as MAC address and serial ...values including the following: • $MA expands to the unit MAC address, using lower case hex digits (for example, 000e08abcdef) • $SN...the new file in variables. Replace mac_address with the actual MAC address of the TFTP server. Macro expansion is a 12-digit number... Exercise Step 1 Step 2 Step 3 Step 4 Step 5 Obtain the MAC address of the test SPA from its product label. For a complete list of variables ... by expanding the $MA macro expression into its own MAC address. This requires the service provider to some predetermined profile naming ...
Provisioning Guide
Page 55
... identifying the test SPA appears in the Profile_Rule parameter from the HTTP server. Secure Resync This section demonstrates the preferred mechanisms available on a host whose IP address is known to the network DNS server, through encryption SSL generates and exchanges secret (symmetric) keys for securing the provisioning process. It includes the following...
... identifying the test SPA appears in the Profile_Rule parameter from the HTTP server. Secure Resync This section demonstrates the preferred mechanisms available on a host whose IP address is known to the network DNS server, through encryption SSL generates and exchanges secret (symmetric) keys for securing the provisioning process. It includes the following...
Provisioning Guide
Page 65
...option 66. The default is (empty). The default is Yes. This parameter is desirable to wait until this counter decrements to the device MAC address. The TCP/IP operation can take several seconds, it is a profile script that begins counting down when all of its lines become idle. If the command ... to make calls in seconds) the SPA waits before resyncing. A resync is Yes. The default is /spa$PSN.cfg. In the URL, either the IP address or the FQDN of the server can have macros, such as $MA, which expands to zero. The file name can be triggered via a SIP NOTIFY...
...option 66. The default is (empty). The default is Yes. This parameter is desirable to wait until this counter decrements to the device MAC address. The TCP/IP operation can take several seconds, it is a profile script that begins counting down when all of its lines become idle. If the command ... to make calls in seconds) the SPA waits before resyncing. A resync is Yes. The default is /spa$PSN.cfg. In the URL, either the IP address or the FQDN of the server can have macros, such as $MA, which expands to zero. The file name can be triggered via a SIP NOTIFY...
Provisioning Guide
Page 70
...http_get failed. Macro Expansion Variables Chapter 4 Provisioning Field Reference Table 4-4 Macro Expansion Variables (continued) Macro Name PSN SN CCERT IP EXTIP SWVER HWVER PRVST UPGST UPGERR PRVTMR UPGTMR REGTMR1 REGTMR2 UPGCOND SCHEME METH SERV SERVIP Macro Expansion Product Series Number, for example ...File access scheme, one of the SPA within its local subnet, for example 2102. Request target server IP address, as obtained after parsing resync or upgrade URL. IP address of TFTP, HTTP, or HTTPS, as obtained after parsing resync or upgrade URL, possibly following DNS lookup...
...http_get failed. Macro Expansion Variables Chapter 4 Provisioning Field Reference Table 4-4 Macro Expansion Variables (continued) Macro Name PSN SN CCERT IP EXTIP SWVER HWVER PRVST UPGST UPGERR PRVTMR UPGTMR REGTMR1 REGTMR2 UPGCOND SCHEME METH SERV SERVIP Macro Expansion Product Series Number, for example ...File access scheme, one of the SPA within its local subnet, for example 2102. Request target server IP address, as obtained after parsing resync or upgrade URL. IP address of TFTP, HTTP, or HTTPS, as obtained after parsing resync or upgrade URL, possibly following DNS lookup...
Provisioning Guide
Page 74
...HTTP over SSL Internet Control Message Protocol Internet Group Management Protocol Incumbent Local Exchange Carrier Internet Protocol Internet Service Provider IP Telephony Service Provider Interactive Voice Response Local Area Network Low Bit Rate Low Bit Rate Codec Mini-Certificate Media Gateway... Interval Printed Circuit Board Polarity Reversal Provisioning Server Perceptual Speech Quality Measurement (1-5, the lower the better) Public Switched Telephone Network Network Address Translation Out-of-band (SIP) Request Message (SIP) Response Message (SIP) Response Status Code, such as 404, 302, ...
...HTTP over SSL Internet Control Message Protocol Internet Group Management Protocol Incumbent Local Exchange Carrier Internet Protocol Internet Service Provider IP Telephony Service Provider Interactive Voice Response Local Area Network Low Bit Rate Low Bit Rate Codec Mini-Certificate Media Gateway... Interval Printed Circuit Board Polarity Reversal Provisioning Server Perceptual Speech Quality Measurement (1-5, the lower the better) Public Switched Telephone Network Network Address Translation Out-of-band (SIP) Request Message (SIP) Response Message (SIP) Response Status Code, such as 404, 302, ...