User Guide
Page 2
... installed updated firmware/software for detailed information on that menu item. • To find specific information in any screen for help for ISG50 application examples. • Subsequent chapters are needed to configure a feature and how to ensure that screen and supplementary information. •...Related Documentation • Quick Start Guide The Quick Start Guide is accurate. Note: It is recommended you how to make the ISG50 hardware connections and access the Web Configurator wizards. (See the wizard real time help in configuring that the information in this guide, use ...
... installed updated firmware/software for detailed information on that menu item. • To find specific information in any screen for help for ISG50 application examples. • Subsequent chapters are needed to configure a feature and how to ensure that screen and supplementary information. •...Related Documentation • Quick Start Guide The Quick Start Guide is accurate. Note: It is recommended you how to make the ISG50 hardware connections and access the Web Configurator wizards. (See the wizard real time help in configuring that the information in this guide, use ...
User Guide
Page 5
... Table of Contents Contents Overview ...3 Table of Contents ...5 Part I: User's Guide 25 Chapter 1 Introducing the ISG50 ...27 1.1 Overview ...27 1.1.1 PBX ...27 1.1.2 Security and Routing ...28 1.1.3 Application Scenarios ...28 1.2 Rack-mounted Installation ...31 1.2.1 Rack-Mounted Installation Procedure 32 1.3 Connecting the Frame Ground ...32 1.4 Front Panel ...33 1.4.1 Front Panel LEDs ...33 1.5 3G PCMCIA Card...
... Table of Contents Contents Overview ...3 Table of Contents ...5 Part I: User's Guide 25 Chapter 1 Introducing the ISG50 ...27 1.1 Overview ...27 1.1.1 PBX ...27 1.1.2 Security and Routing ...28 1.1.3 Application Scenarios ...28 1.2 Rack-mounted Installation ...31 1.2.1 Rack-Mounted Installation Procedure 32 1.3 Connecting the Frame Ground ...32 1.4 Front Panel ...33 1.4.1 Front Panel LEDs ...33 1.5 3G PCMCIA Card...
User Guide
Page 6
...Quick Setup ...70 5.2.1 Choose an Ethernet Interface 70 5.2.2 Select WAN Type ...71 5.2.3 Configure WAN Settings ...72 5.2.4 WAN and ISP Connection Settings 72 5.2.5 Quick Setup Interface Wizard: Summary 75 5.3 VPN Quick Setup ...76 5.4 VPN Setup Wizard: Wizard Type ...77 5.5 ... Physical Ports 92 6.3.1 Interface Types ...92 6.3.2 Default Interface and Zone Configuration 93 6.4 Terminology in the ISG50 ...94 6.5 Packet Flow ...94 6.5.1 Routing Table Checking Flow 95 6 ISG50 User's Guide Configuration 79 5.5.2 VPN Express Wizard - Scenario 82 5.5.5 VPN Advanced Wizard - Scenario ...78...
...Quick Setup ...70 5.2.1 Choose an Ethernet Interface 70 5.2.2 Select WAN Type ...71 5.2.3 Configure WAN Settings ...72 5.2.4 WAN and ISP Connection Settings 72 5.2.5 Quick Setup Interface Wizard: Summary 75 5.3 VPN Quick Setup ...76 5.4 VPN Setup Wizard: Wizard Type ...77 5.5 ... Physical Ports 92 6.3.1 Interface Types ...92 6.3.2 Default Interface and Zone Configuration 93 6.4 Terminology in the ISG50 ...94 6.5 Packet Flow ...94 6.5.1 Routing Table Checking Flow 95 6 ISG50 User's Guide Configuration 79 5.5.2 VPN Express Wizard - Scenario 82 5.5.5 VPN Advanced Wizard - Scenario ...78...
User Guide
Page 7
... 111 7.3.2 Configure the WAN Trunk ...112 7.4 How to Set Up an IPSec VPN Tunnel 113 7.4.1 Set Up the VPN Gateway ...114 7.4.2 Set Up the VPN Connection 115 7.4.3 Configure Security Policies for the VPN Tunnel 116 7.5 How to Configure User-aware Access Control 116 7.5.1 Set Up User Accounts ...117...
... 111 7.3.2 Configure the WAN Trunk ...112 7.4 How to Set Up an IPSec VPN Tunnel 113 7.4.1 Set Up the VPN Gateway ...114 7.4.2 Set Up the VPN Connection 115 7.4.3 Configure Security Policies for the VPN Tunnel 116 7.5 How to Configure User-aware Access Control 116 7.5.1 Set Up User Accounts ...117...
User Guide
Page 8
...Internal Calls ...136 8.1.1 Configure SIP Extensions ...136 8.1.2 Connect IP Phones ...140 8.1.3 Register IP Phones ...140 ...Connection ...143 8.3.2 Creating a Dialing Rule for PSTN 144 8.3.3 Assigning an LCR to an Authority Group 146 8.4 Making ITSP Calls ...147 8.4.1 The ITSP Connection ...148 8.4.2 Creating a Dialing Rule for ITSP 151 8.4.3 Assigning an LCR to an Authority Group 152 8.5 Making ISDN Calls ...154 8.5.1 The ISDN Connection... ...155 8.5.2 Creating a Dialing Rule for ISDN 156 8.5.3 Assigning an LCR to an Authority Group 158 8.6 ISDN...
...Internal Calls ...136 8.1.1 Configure SIP Extensions ...136 8.1.2 Connect IP Phones ...140 8.1.3 Register IP Phones ...140 ...Connection ...143 8.3.2 Creating a Dialing Rule for PSTN 144 8.3.3 Assigning an LCR to an Authority Group 146 8.4 Making ITSP Calls ...147 8.4.1 The ITSP Connection ...148 8.4.2 Creating a Dialing Rule for ITSP 151 8.4.3 Assigning an LCR to an Authority Group 152 8.5 Making ISDN Calls ...154 8.5.1 The ISDN Connection... ...155 8.5.2 Creating a Dialing Rule for ISDN 156 8.5.3 Assigning an LCR to an Authority Group 158 8.6 ISDN...
User Guide
Page 13
... this Chapter 367 24.1.2 What You Need to Know ...368 24.1.3 Before You Begin ...370 24.2 The VPN Connection Screen ...370 24.2.1 The VPN Connection Add/Edit (IKE) Screen 371 24.2.2 The VPN Connection Add/Edit Manual Key Screen 377 24.3 The VPN Gateway Screen ...379 24.3.1 The VPN Gateway Add/Edit Screen...
... this Chapter 367 24.1.2 What You Need to Know ...368 24.1.3 Before You Begin ...370 24.2 The VPN Connection Screen ...370 24.2.1 The VPN Connection Add/Edit (IKE) Screen 371 24.2.2 The VPN Connection Add/Edit Manual Key Screen 377 24.3 The VPN Gateway Screen ...379 24.3.1 The VPN Gateway Add/Edit Screen...
User Guide
Page 14
... 27.4 The E-Mail Screen ...435 27.5 The Fake IP Screen ...435 27.6 The Peer to Peer Screen ...436 27.6.1 How the Peer-to-Peer SIP Connection Works 437 27.6.2 Add Peer-to-Peer Local Net 438 27.6.3 How Local Net and Peer-to-Peer Work Together 439 27.7 The QoS Screen... Screen ...442 27.8.1 Setting Up the TAPI Driver and Utility on Your Computer 443 27.9 Network Technical Reference ...447 Chapter 28 Voice Interfaces ...448 14 ISG50 User's Guide
... 27.4 The E-Mail Screen ...435 27.5 The Fake IP Screen ...435 27.6 The Peer to Peer Screen ...436 27.6.1 How the Peer-to-Peer SIP Connection Works 437 27.6.2 Add Peer-to-Peer Local Net 438 27.6.3 How Local Net and Peer-to-Peer Work Together 439 27.7 The QoS Screen... Screen ...442 27.8.1 Setting Up the TAPI Driver and Utility on Your Computer 443 27.9 Network Technical Reference ...447 Chapter 28 Voice Interfaces ...448 14 ISG50 User's Guide
User Guide
Page 27
... overview of the following networks: • A traditional Public Switched Telephone Network (PSTN): ISG50-PSTN • An Internet connection to an Internet Telephony Service Provider (ITSP): all ISG50 models • An Integrated Services Digital Network/Basic Rate Interface Network (ISDN BRI): ISG50-ISDN Each telephone connected to an IP PBX has an extension assigned to it an ideal...
... overview of the following networks: • A traditional Public Switched Telephone Network (PSTN): ISG50-PSTN • An Internet connection to an Internet Telephony Service Provider (ITSP): all ISG50 models • An Integrated Services Digital Network/Basic Rate Interface Network (ISDN BRI): ISG50-ISDN Each telephone connected to an IP PBX has an extension assigned to it an ideal...
User Guide
Page 28
... ports and load balancing. You can also use a 3G cellular USB (not included) for the ISG50. 28 ISG50 User's Guide The ISG50 lets you set up multiple networks for connecting publicly accessible servers. The De-Militarized Zone (DMZ) increases LAN security by providing separate ports for your... and other by providing VoIP telephony features. Figure 1 IP PBX Example ITSP Internet ISG PPSSTTNN/ISDN The ISG50 can function as a transparent firewall in an existing network with the reliability of the ISG50's features. See Chapter 2 on page 37 for a more detailed overview of the LAN1, ...
... ports and load balancing. You can also use a 3G cellular USB (not included) for the ISG50. 28 ISG50 User's Guide The ISG50 lets you set up multiple networks for connecting publicly accessible servers. The De-Militarized Zone (DMZ) increases LAN security by providing separate ports for your... and other by providing VoIP telephony features. Figure 1 IP PBX Example ITSP Internet ISG PPSSTTNN/ISDN The ISG50 can function as a transparent firewall in an existing network with the reliability of the ISG50's features. See Chapter 2 on page 37 for a more detailed overview of the LAN1, ...
User Guide
Page 29
...users record calls. • VLAN and QoS enhance voice quality. • Fax over protection for VPN connections and VoIP. 1.1.3.2 DMZ Installation Use the ISG50 with a USG, ZyXEL's Unified Threat Management (UTM) firewall to add more security services like B) use Web services such as ...services and internal server access for teleworkers (A and C in -one Application Scenario Headquarters A LAN Chapter 1 Introducing the ISG50 B DMZ ISG FAX WAN1 C WAN2 ITSP PSTN/ISDN D VoIP Services: • VoIP phones and smartphones can also forward them by email. • Conference room extensions...
...users record calls. • VLAN and QoS enhance voice quality. • Fax over protection for VPN connections and VoIP. 1.1.3.2 DMZ Installation Use the ISG50 with a USG, ZyXEL's Unified Threat Management (UTM) firewall to add more security services like B) use Web services such as ...services and internal server access for teleworkers (A and C in -one Application Scenario Headquarters A LAN Chapter 1 Introducing the ISG50 B DMZ ISG FAX WAN1 C WAN2 ITSP PSTN/ISDN D VoIP Services: • VoIP phones and smartphones can also forward them by email. • Conference room extensions...
User Guide
Page 30
...ISG WAN2 FAX ITSP PSTN/ISDN D 1.1.3.3 Parallel to a USG Connect the ISG50 to the Internet and a USG model's LAN to give the VoIP a physically separate Internet connection to a USG Headquarters FAX LAN D ISG PSTN/ISDN WAN1 WAN2 ITSP C DMZ USG WAN1 WAN2 A B 30 ISG50 User's Guide Figure 4 ...Installation Parallel to keep bursts of using the ISG50 along with a USG. Here is an example...
...ISG WAN2 FAX ITSP PSTN/ISDN D 1.1.3.3 Parallel to a USG Connect the ISG50 to the Internet and a USG model's LAN to give the VoIP a physically separate Internet connection to a USG Headquarters FAX LAN D ISG PSTN/ISDN WAN1 WAN2 ITSP C DMZ USG WAN1 WAN2 A B 30 ISG50 User's Guide Figure 4 ...Installation Parallel to keep bursts of using the ISG50 along with a USG. Here is an example...
User Guide
Page 31
... to peer VoIP calling and faxes over IP without using a rackmounting kit. Follow the steps below to anchor the rack securely before installing the unit. ISG50 User's Guide 31 Figure 5 N-Site Application Site 1 LAN DMZ ISG FAX Site 2 LAN VPN VPN DMZ ISG VPN FAX LAN Site 3 ISG FAX DMZ 1.2 Rack... In addition to one of the application scenarios already described, you can also use site-to-site VPNs to connect ISG50s at the sides and 20 cm in Germany, you can be mounted on a standard EIA rack using an ITSP and remote dial-out to make ...
... to peer VoIP calling and faxes over IP without using a rackmounting kit. Follow the steps below to anchor the rack securely before installing the unit. ISG50 User's Guide 31 Figure 5 N-Site Application Site 1 LAN DMZ ISG FAX Site 2 LAN VPN VPN DMZ ISG VPN FAX LAN Site 3 ISG FAX DMZ 1.2 Rack... In addition to one of the application scenarios already described, you can also use site-to-site VPNs to connect ISG50s at the sides and 20 cm in Germany, you can be mounted on a standard EIA rack using an ITSP and remote dial-out to make ...
User Guide
Page 32
Figure 7 Rack Mounting 1.3 Connecting the Frame Ground Connect the frame ground on the rack. Use a 18 AWG or larger green-and-yellow frame ground wire. 32 ISG50 User's Guide Chapter 1 Introducing the ISG50 Use a #2 Phillips screwdriver to use the proper screws may damage the unit. 1.2.1 Rack-Mounted Installation Procedure 1 Align one bracket with the holes...
Figure 7 Rack Mounting 1.3 Connecting the Frame Ground Connect the frame ground on the rack. Use a 18 AWG or larger green-and-yellow frame ground wire. 32 ISG50 User's Guide Chapter 1 Introducing the ISG50 Use a #2 Phillips screwdriver to use the proper screws may damage the unit. 1.2.1 Rack-Mounted Installation Procedure 1 Align one bracket with the holes...
User Guide
Page 33
...ISG50 Connect the frame ground before you connect any other cables or wiring. Shut down the device, wait for a few minutes and then restart the device (see Section 1.7 on . The ISG50 had an error or has failed. The ISG50 is turned off. The ISG50 is booting. ISG50 User's Guide 33 The ISG50... is not ready or has failed. The ISG50 is a hardware component failure. Figure 9 ISG50-PSTN Front Panel Figure 10 ISG50-ISDN Front Panel 1.4.1 ...
...ISG50 Connect the frame ground before you connect any other cables or wiring. Shut down the device, wait for a few minutes and then restart the device (see Section 1.7 on . The ISG50 had an error or has failed. The ISG50 is turned off. The ISG50 is booting. ISG50 User's Guide 33 The ISG50... is not ready or has failed. The ISG50 is a hardware component failure. Figure 9 ISG50-PSTN Front Panel Figure 10 ISG50-ISDN Front Panel 1.4.1 ...
User Guide
Page 34
...is sending or receiving packets on this port through a 10/100M connection. On The port has ISDN layer 1 activated. Blinking The ISG50 is sending or receiving packets on this port through a 1000M connection. Blinking The ISG50 is sending or receiving packets on this port through a 10/... following ways to manage the ISG50. 34 ISG50 User's Guide Yellow On The Ethernet port has a successful 1000M connection but is sending or receiving packets on this port through a 10/100M connection. BRI Green Off The port is malfunctioning or ISDN layer 1 is ringing. Blinking...
...is sending or receiving packets on this port through a 10/100M connection. On The port has ISDN layer 1 activated. Blinking The ISG50 is sending or receiving packets on this port through a 1000M connection. Blinking The ISG50 is sending or receiving packets on this port through a 10/... following ways to manage the ISG50. 34 ISG50 User's Guide Yellow On The Ethernet port has a successful 1000M connection but is sending or receiving packets on this port through a 10/100M connection. BRI Green Off The port is malfunctioning or ISDN layer 1 is ringing. Blinking...
User Guide
Page 37
...Phones - C: VoIP Gateways - Other SIP based IP PBXs with built in SIP processing which you to call the telephones connected to the peer IP PBX without going through a telephone service provider. D: ATAs - Telephones that convert voice into IP packets... them as a link to communicate with the ISG50. E: Peer IP PBXs - ISG50 User's Guide 37 B: Softphones - Analog Telephone Adapters (for example ZyXEL's P-2024) aggregate a large number of the ISG50. 2.1 Features Voice over Internet Protocol (VoIP) Implementation The ISG50 uses SIP (Session Initiation Protocol) to the IP...
...Phones - C: VoIP Gateways - Other SIP based IP PBXs with built in SIP processing which you to call the telephones connected to the peer IP PBX without going through a telephone service provider. D: ATAs - Telephones that convert voice into IP packets... them as a link to communicate with the ISG50. E: Peer IP PBXs - ISG50 User's Guide 37 B: Softphones - Analog Telephone Adapters (for example ZyXEL's P-2024) aggregate a large number of the ISG50. 2.1 Features Voice over Internet Protocol (VoIP) Implementation The ISG50 uses SIP (Session Initiation Protocol) to the IP...
User Guide
Page 39
...or landline. Click-To-Talk The Click-To-Talk (CTT) feature allows you to create an HTML link that skill. ISG50 User's Guide 39 Connecting several ISG50s together to access their telephone extension. Figure 13 Scalable Design ITSP ISG ISG ISG Automatic Call Distribution Automatic Call Distribution (...- This is known as Skill-Based Routing (SBR). When the ISG50 receives an incoming call, it assigns the call by the ISG50 administrator and constitute a set up one of phones connected to specific groups of the ISG50's extensions. Next, it categorizes the call to the one of the...
...or landline. Click-To-Talk The Click-To-Talk (CTT) feature allows you to create an HTML link that skill. ISG50 User's Guide 39 Connecting several ISG50s together to access their telephone extension. Figure 13 Scalable Design ITSP ISG ISG ISG Automatic Call Distribution Automatic Call Distribution (...- This is known as Skill-Based Routing (SBR). When the ISG50 receives an incoming call, it assigns the call by the ISG50 administrator and constitute a set up one of phones connected to specific groups of the ISG50's extensions. Next, it categorizes the call to the one of the...
User Guide
Page 40
Set up multiple connections on the same port, or set up VPN tunnels with other companies, branch offices, telecommuters, and business 40 ISG50 User's Guide In either case, you can balance the loads between two sites over the Internet or any insecure network that uses TCP/... for communication. Figure 14 Applications: Multiple WAN Interfaces ISG Virtual Private Networks (VPN) Use IPSec VPN to the Internet on different ports. The ISG50 also offers hub-and-spoke IPSec VPN. Chapter 2 Features and Applications Set up multiple connections to provide secure communication between them.
Set up multiple connections on the same port, or set up VPN tunnels with other companies, branch offices, telecommuters, and business 40 ISG50 User's Guide In either case, you can balance the loads between two sites over the Internet or any insecure network that uses TCP/... for communication. Figure 14 Applications: Multiple WAN Interfaces ISG Virtual Private Networks (VPN) Use IPSec VPN to the Internet on different ports. The ISG50 also offers hub-and-spoke IPSec VPN. Chapter 2 Features and Applications Set up multiple connections to provide secure communication between them.
User Guide
Page 41
You can add interfaces and VPN tunnels to zones. ISG50 User's Guide 41 Chapter 2 Features and Applications travelers to provide secure access to your own custom zones. Figure 15 Applications: VPN Connectivity ISG Flexible Security Zones Many security settings are made by zone, not by interface, port, or network. You can also set up additional connections to the Internet to change security settings in the ISG50. You can create your network. As a result, it is much simpler to set up and to provide better service.
You can add interfaces and VPN tunnels to zones. ISG50 User's Guide 41 Chapter 2 Features and Applications travelers to provide secure access to your own custom zones. Figure 15 Applications: VPN Connectivity ISG Flexible Security Zones Many security settings are made by zone, not by interface, port, or network. You can also set up additional connections to the Internet to change security settings in the ISG50. You can create your network. As a result, it is much simpler to set up and to provide better service.
User Guide
Page 43
... minutes after 3 consecutive, failed login attempts. Figure 17 Login Screen ISG50 User's Guide 43 The Login screen appears. By default, the ISG50 automatically routes this request to its HTTPS server, and it is properly connected. You can use the Web Configurator, you must • Use Internet...and go to http://192.168.1.1. See the Quick Start Guide. 2 Open your ISG50 hardware is recommended to keep this setting. CHAPTER 3 Web Configurator The ISG50 Web Configurator allows easy ISG50 setup and management using an Internet browser. 3.1 Web Configurator Requirements In order to use...
... minutes after 3 consecutive, failed login attempts. Figure 17 Login Screen ISG50 User's Guide 43 The Login screen appears. By default, the ISG50 automatically routes this request to its HTTPS server, and it is properly connected. You can use the Web Configurator, you must • Use Internet...and go to http://192.168.1.1. See the Quick Start Guide. 2 Open your ISG50 hardware is recommended to keep this setting. CHAPTER 3 Web Configurator The ISG50 Web Configurator allows easy ISG50 setup and management using an Internet browser. 3.1 Web Configurator Requirements In order to use...