www.planet.com.tw

IPX-300 SeriesIP PBX and VRT-401 with VPN Application

Internet Telephony PBX System

Copyright © PLANET Technology Corporation. All rights reserved.

2 / 30

www.planet.com.tw

We're using the IPX-300, VIP-254T and VIP-480FO to perform the calling party, and via VRT-401 / MH-2001 to establish the VPN connection at each sides.The VPN device of Headquarters can select the VRT-401 or MH-2001, it bases

on the numbers of your branches.Please refer to the following descriptions and insert proper parameters

configurations into the each device for establish the voice communications.

Case 42: IPX-300 and VIP-254T with VPN ApplicationCase 42: IPX-300 and VIP-254T with VPN Application

Environment Setting:Headquarters (192.168.0.0/24)MH-2001: WAN IP 210.66.155.87 LAN IP 192.168.0.1

Branch-A (192.168.1.0/24)VRT-401_A: WAN IP 210.66.155.79 LAN IP 192.168.1.1

Branch-B (192.168.2.0/24)VRT-401_B: WAN IP 210.66.155.80 LAN IP 192.168.2.1

3 / 30

www.planet.com.tw

Topology

4 / 30

www.planet.com.tw

VPN Environment setting

VPN Tunnel between Headquarters and Branch-AMH-2001 settingsAdd the WAN Address objects for Branch-A and Branch-B.

To add WAN address objects for To add WAN address objects for Branch-A and B.Branch-A and B.Branch-A:Branch-A:IP Address : IP Address : 192.168.1.0192.168.1.0Subnet Mask :Subnet Mask : 255.255.255.0 255.255.255.0Branch-B:Branch-B:IP Address : IP Address : 192.168.2.0192.168.2.0Subnet Mask :Subnet Mask : 255.255.255.0 255.255.255.0

5 / 30

www.planet.com.tw

Headquarters VPN setting

VPN Tunnel between Headquarters and Branch-AMH-2001 VPN settingsAdd an IPSec autokey entry for Branch-A Name:Name:

VPN-1VPN-1

Remote GatewayRemote GatewayVRT-401_A WAN IP:VRT-401_A WAN IP:210.66.155.79210.66.155.79

Preshared key:Preshared key:123456789123456789

IPSec VPN ParametersIPSec VPN Parameters3DES3DESMD5MD5Group2Group2No-PFSNo-PFS

These parameters must maThese parameters must match with remote sitetch with remote site

6 / 30

www.planet.com.tw

VPN Tunnel between Headquarters and Branch-AMH-2001 VPN settingsAdd an IPSec Tunnel entry for Branch-A Assign the Local LAN Assign the Local LAN

(Headquarters subnet) and (Headquarters subnet) and Remote LAN (Branch-A subnet)Remote LAN (Branch-A subnet)

Select the IPSec Autokey Select the IPSec Autokey entry for Branch-Aentry for Branch-A

Headquarters VPN setting

7 / 30

www.planet.com.tw

VPN Tunnel between Headquarters and Branch-AMH-2001 Policy settingsAdd an Outgoing Policy for VPN Tunnel to Branch-A

Destination Destination Address:Address:Select the Branch1 Select the Branch1 (192.168.1.0/(192.168.1.0/ 255.255.255.0)255.255.255.0)

Tunnel:Tunnel:Select VPN1 tunnel for Select VPN1 tunnel for Branch-ABranch-A

Headquarters VPN setting

8 / 30

www.planet.com.tw

VPN Tunnel between Headquarters and Branch-AMH-2001 Policy settingsAdd an Incoming Policy for VPN Tunnel to Branch-A

Source Address:Source Address:Select the Branch1 Select the Branch1 (192.168.1.0/(192.168.1.0/ 255.255.255.0)255.255.255.0)

Tunnel:Tunnel:Select VPN1 tunnel Select VPN1 tunnel for Branch-Afor Branch-A

Headquarters VPN setting

9 / 30

www.planet.com.tw

VRT-401_A VPN setting

Remote VPN:Remote VPN:MH-2001 WAN IPMH-2001 WAN IP210.66.155.87210.66.155.87

Local LAN Subnet:Local LAN Subnet:192.168.1.0192.168.1.0255.255.255.0255.255.255.0

Remote LAN Subnet:Remote LAN Subnet:192.168.0.0192.168.0.0255.255.255.0255.255.255.0

These parameters must These parameters must match with MH-2001 VPN match with MH-2001 VPN settingssettings

Branch-A VPN setting

10 / 30

www.planet.com.tw

VPN Tunnel between Headquarters and Branch-AAfter configuring the VPN settings of MH-2001 and VRT-401, the VPN Tunnel will be established. You can check the status of MH-2001 and VRT-401.And then the Headquarters and Branch-A can access the resource to each other.

11 / 30

www.planet.com.tw

Finish VPN setting

VPN Tunnel between Headquarters and Branch-B

Repeat above setting procedure for Headquarters and Branch-B.After you configure it, the Headquarters and Branch-B can also access to each other. Thus, the Branch-A and Branch-B both can access to Headquarters properly.

Now, we can start to configure the VoIP devices, please check following procedure.

12 / 30

www.planet.com.tw

Login IPX-300 and browse to [Login IPX-300 and browse to [Network Setup -> WAN & LAN SetupNetwork Setup -> WAN & LAN Setup] page] page to assign the to assign the WAN port as 192.168.0.100, and LAN port to other network segment.WAN port as 192.168.0.100, and LAN port to other network segment.

To assign WAN port as same network To assign WAN port as same network segment with MH-2001segment with MH-2001IP Address : IP Address : 192.168.0.100192.168.0.100Subnet Mask :Subnet Mask : 255.255.255.0 255.255.255.0Default Gateway :Default Gateway : 192.168.0.1 192.168.0.1 (MH-(MH-2001 LAN port IP address)2001 LAN port IP address)

13 / 30

www.planet.com.tw

Browse to [Browse to [Extension Management -> SIP ExtensionExtension Management -> SIP Extension] page, and to create accounts for ] page, and to create accounts for VIP-480FO and VIP-254T.VIP-480FO and VIP-254T.

14 / 30

www.planet.com.tw

Browse to [Browse to [Trunk Management -> Gateway TrunkTrunk Management -> Gateway Trunk] page] page to create to create the Gateway Trunk for the FXO gateway.the Gateway Trunk for the FXO gateway.

IP :IP :192.168.0.2 (VIP-480FO IP Address)192.168.0.2 (VIP-480FO IP Address)Port : Port : 5060 (SIP Port) 5060 (SIP Port) Afterward click the Afterward click the InsertInsert to add that to add that

15 / 30

www.planet.com.tw

Browse to [Browse to [Trunk Management -> Dialing RulesTrunk Management -> Dialing Rules] page ] page to add the Trunk Groupto add the Trunk Group

To add a Dialing Rules for VIP-480FOTo add a Dialing Rules for VIP-480FOPhone NO. : Phone NO. : 00Delete Length :Delete Length : 0 0Trunk Group :Trunk Group : 192.168.0.2:5060 192.168.0.2:5060

16 / 30

www.planet.com.tw

Assign a AA extension number :Assign a AA extension number :Attendant Number 1 : Attendant Number 1 : 555555

Browse to [Browse to [Attendant NumberAttendant Number] page] page to assign a AA to assign a AA extension number for Gateway hotline setting.extension number for Gateway hotline setting.

17 / 30

www.planet.com.tw

Click on the button to save Click on the button to save previous modification and take effect, the previous modification and take effect, the system will rebooting, please wait for 50 secsystem will rebooting, please wait for 50 sec

Browse to [Browse to [Save & LogoutSave & Logout] page] page

18 / 30

www.planet.com.tw

Login VIP-480_H(192.168.0.2) and browse to [Login VIP-480_H(192.168.0.2) and browse to [Advance Setup -Advance Setup ->VoIP Basic>VoIP Basic] page to setting port number configuration.] page to setting port number configuration.

VoIP Basic Configuration:VoIP Basic Configuration:Number :Number :101101Check RegCheck RegAccount:Account: 101 101Password: 123Password: 123Use Public Account:Use Public Account: Enable EnableCheck Hunting MemberCheck Hunting MemberPort 1, 2 3 and Port 4Port 1, 2 3 and Port 4

This function is when the port 1 This function is when the port 1 be communicating, and it anothbe communicating, and it another SIP calls from network will forer SIP calls from network will forward this call to other ports autward this call to other ports automatically.omatically.

19 / 30

www.planet.com.tw

SIP Proxy Setting:SIP Proxy Setting:Domain/Realm:Domain/Realm:192.168.0.100192.168.0.100SIP Proxy Server:SIP Proxy Server:192.168.0.100/5060192.168.0.100/5060SIP Authentication :SIP Authentication : EnableEnable

About the IP address About the IP address please refer to previous please refer to previous topology.topology.

Click the button to complete the VoIP Click the button to complete the VoIP Basic configuration.Basic configuration.

20 / 30

www.planet.com.tw

Browse to [Browse to [Dialing PlanDialing Plan] page to add the Dialing Plan ] page to add the Dialing Plan Number.Number.

Incoming Dial Plan Settings:Incoming Dial Plan Settings:Outgoing no: Outgoing no: 00 Length of Number: Length of Number: 1 ~ 11 ~ 1Delete Length: Delete Length: 11Prefix no.: Prefix no.: NullNullDestination Telephone Port :Destination Telephone Port : 1 1

2727

21 / 30

www.planet.com.tw

Select the [Select the [Hot Line SettingHot Line Setting] of gateway] of gateway to add the Hot to add the Hot Line Number.Line Number.

Hot Line Number Setting :Hot Line Number Setting :Port 1 Number :Port 1 Number : 555 555Port 2 Number :Port 2 Number : 555 555Port 3 Number : Port 3 Number : 555555Port 4 Number : Port 4 Number : 555555

Click on the button to complete Click on the button to complete the modification.the modification.Click the Click the Save ConfigurationSave Configuration hyper-link hyper-link

to save the whole parameters and then to save the whole parameters and then click the click the RebootReboot to restart system. to restart system.

22 / 30

www.planet.com.tw

Setup VIP-480FO_A and VIP-480FO_B

Login to VIP-480FO_A (192.168.1.2) & VIP-480FO_B (192.168.2.2)

Repeat the above procedures to setup the VIP-480FO_A & B accounts number (201 & 301) , and register to IPX-300 (192.168.0.100)

23 / 30

www.planet.com.tw

Login VIP-254T and browse to [Login VIP-254T and browse to [Network -> LAN SettingsNetwork -> LAN Settings] page, assign the IP Type to ] page, assign the IP Type to DHCP Client for obtaining IP from VRT-401.DHCP Client for obtaining IP from VRT-401.

24 / 30

www.planet.com.tw

Browse to [Browse to [SIP Settings -> Service DomainSIP Settings -> Service Domain] page] page to assign registration account.to assign registration account.

Active: Active: ONONDisplay Name : Display Name : 100100User Name :User Name : 100 100Register Name :Register Name : 100 100Register Password :Register Password : 123 123Proxy Server :Proxy Server : 192.168.0.100 192.168.0.100

25 / 30

www.planet.com.tw

Browse to [Browse to [Phone Book -> Speed Dial SettingPhone Book -> Speed Dial Setting] page] page to add speed dial number 0to add speed dial number 0

26 / 30

www.planet.com.tw

Browse to [Browse to [Save & RebootSave & Reboot] page] page to save and reboot machineto save and reboot machine

27 / 30

www.planet.com.tw

Setup VIP-480FO_A and VIP-480FO_B

Login to other VIP-254T (192.168.1.3 & 192.168.2.3)

Repeat the above procedures to setup the accounts number (200 & 303) , and register to IPX-300 (192.168.0.100)

28 / 30

www.planet.com.tw

Dialing Procedures:A. Headquarter site 1. VIP-254T(Ext.100) pickup the handset and hearing a dial-tone, then to input a number 0# 2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line

3. To input a local phone number call to User A, such as 22551234

B. Branch A site

1. VIP-254T(Ext.200) pickup the handset and hearing a dial-tone, then input a number 201#

2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line.

3. To input a local phone number call to User A, such as 22551234

C. Branch B site

1. VIP-254T(Ext.300) pickup the handset and hearing a dial-tone, then to input a number 301#

2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line

3. To input a local phone number call to User A, such as 22551234

D. Internal Call

1. Each VIP-254T call the extension number for internal communications: 100 / 200 / 300

29 / 30

www.planet.com.tw

E. PSTN incoming call to Headquarter site 1. The User A call the PSTN line number to Headquarter 2. User A will hear the IVR of IPX-300 3. User A dials the extension number talk with VIP-254T: 100

F. PSTN incoming call to Branch A

1. The User A call the PSTN line number to Branch A

2. User A will hear the IVR of IPX-300,

3. User A dials the extension number talk with VIP-254T: 200

C. PSTN incoming call to Branch B

1. The User A call the PSTN line number to Branch B

2. User A will hear the IVR of IPX-300,

3. User A dials the extension number talk with VIP-254T: 300

NOTE:

The mentioned parameters and network settings in this sample be carefully modified to meet the real-world applications.

www.planet.com.tw