HP ProCurve Networking

» Contact

ProCurve Networking by HP - Application notes



Contents
» 1. Introduction
» 2. Architecture
» 3. Configuration
» 3.1 Check PoE compatibility on ProCurve Switch 3500yl
» 3.2 Check PoE compatibility on ProCurve Switch 2610
» 4. Configuring QoS support
» 4.1 Configure QoS on the phone
» 4.2 Configure QoS on the switches
» 5. Network access control via phone MAC authentication
» 5.1 Configure the Aastra phone for MAC authentication
» 5.2 Configure the ProCruve switch
» 6. Firmware versions
» 7. Reference documents

Downloads
» ProCurve switch interoperability with Aastra NexSpan IP terminals and 91xx SIP phones (PDF)

1. Introduction
This document shows how ProCurve switches and the Aastra NexSpan IP Terminal or NexSpan 91xx SIP phones interoperate to build a secure and easy-to-manage network. Both rely on standard protocols:

  • 802.3af, the standard for Power-over-Ethernet (PoE), enables the switch to allocate up to 15.4W of power per port.
  • Quality-of-Service (QoS) mechanisms enable the network to give voice flow—which is sensitive to delay, jitter and packet loss—priority over the data traffic, to guarantee that the communications will continue in case of congestion.
  • MAC authentication of the phone provides network access control.

» Return to top

2. Architecture
The platform referenced in this application note contains:

  • One or more servers with the following services: Active Directory, DHCP, DNS, Certificate Authority, IAS.
  • Latest versions of ProCurve Manager Plus (PCM+) and Identity-Driven Manager (IDM).
  • Aastra NeXspan i760 IP Terminal or Aastra NexSpan 9133i SIP phone.
  • A ProVision Switch 3500yl or 2610-PWR with the latest firmware version. A similar configuration can also be used with a ProCurve 5400zl series switch or a 8212zl series switch. The configuration commands are identical for these products and the 3500yl.
  • A client laptop that can be plugged into the phone dual port for multiple authentication tests or used as a network analyzer (e.g., Wireshark)
Figure 1. Setup for ProCurve-Mitel interoperability
Figure 1. Setup for ProCurve-Aastra NexSpan IP terminal and 91xx SIP phone interoperability

» Return to top

3. Configuration
This section explains how to configure an Aastra phone and the ProCurve switch.

3.1 Check PoE compatibility on ProCurve Switch 3500yl

ProVision switches support standard PoE (802.3af), and so do Aastra phones. When the phone is plugged into a port on the ProCurve Switch 3500yl, the phone boots up.

To view the power consumption of the phone, issue the following command on the switch: To view the power consumption of the phone, issue the following command on the switch
Where X is the port into which the phone is plugged.

3.2 Check PoE compatibility on ProCurve Switch 2610

On a 2610 switch, the command to view power consumption is:To view the power consumption of the phone, issue the following command on the switch
Where X is the port into which the phone is plugged.

For example, the power consumption of an Aastra SIP 9133i phone is approximately 2 watts:
To view the power consumption of the phone, issue the following command on the switch

The power consumption of an i760 phone is approximately 2.2 watts:
To view the power consumption of the phone, issue the following command on the switch

» Return to top

4. Configuring QoS support
This section explains how to configure Quality of Service parameters.

4.1 Configure QoS on the phone
Quality of Service parameters can be configured on the phone using the phone’s web interface.

To configure QoS on the Aastra phone:

  1. To access Aastra phone web interface, use a web browser and go to the phone’s URL:
    http://<phone-ip-address>
  2. By default the login credentials are:
    • Username: admin
    • Password: 22222
  3. From the Network Settings menu, you can set DSCP values for the different voice and signalization protocols, including SIP, RTP, and RTCP:
    To view the power consumption of the phone, issue the following command on the switch

» Return to top

4.2 Configure QoS on the switches
The recommended method is to have a dedicated VLAN for voice and configure the QoS parameters for the VLAN. The L2 and DSCP policy advertised are based on the actual QoS configuration for the voice VLAN. By default these values are:

  • L2 priority 6
  • DSCP 46, which corresponds to the Expedited Forwarding (EF) class

To modify the 802.1p or DSCP values:To modify the 802.1p or DSCP values

For more information on QoS settings on ProCurve switches, please refer to the following documents:


» Return to top

5. Network access control via phone MAC authentication
This section explains how to configure MAC authentication. To learn more about MAC authentication and its use, benefits and implementation, please refer to ProCurve Security Application Note AN-S2, How to configure MAC authentication on a ProCurve switch.

5.1 Configure the Aastra phone for MAC authentication
For MAC authentication, nothing needs to be configured on the phone itself. However, the phone’s MAC address (usually written at the rear of the device) must be entered in Active Directory (or the directory you will use with RADIUS).

  • To enter the phone MAC address in Windows Active Directory, create a new user with these credentials:
    • Username: <MAC address of the phone>
    • Password: <MAC address of the phone>

» Return to top

5.2 Configure the ProCurve switch
To configure the ProCurve switch for MAC authentication:
     1. Configure the switch ports for MAC authentication: 1. Defining a VLAN as voice VLAN enables LLDP-MED

     2. Enter the RADIUS information in the switch configuration: 2. Then configure LLDP-MED. LLDP-MED must be configured on the switch to support MED TLVs, in particular network policy and capabilities

     3. View the authentication of the phone in the RADIUS log or in IDM: To obtain information about the phone, issue the command


» Return to top

6. Firmware versions
Firmware versions of the switches used for this application note are as follows:
  • K.13.09 for the ProCurve ProVision switches (5406zl, 3500yl, 8212zl)
  • R.11.07 for the ProCurve Switch 2610-PWR

Firmware version of the Aastra phones are as follows:

  • R5.1B1 for the Aastra NexSpan i760 IP Terminal


» Return to top

7. Reference documents
For further information about how to configure ProCurve switches to support convergence, please refer to the following links:

» Return to top