 |
|
|
|
This document describes how ProCurve switches and Nortel IP phones interoperate to build a secure and easy-tomanage
network. Both the switch and the phone rely on standard protocols:
- 802.3af, standard for Power-over-Ethernet (PoE) enables the switch to allocate up to 15.4 watts of power per port.
- Quality-of-Service (QoS) mechanisms enable the network to give voice flow—which is sensitive to delay, jitter and packet loss—priority over the data traffic, to guarantee that the communications will continue in case of congestion.
- LLDP-MED is a discovery protocol that enables switches to get some layer 2 information about a phone (such as its model, firmware, location, etc.) and automatically allocate certain network parameters (VLAN and QoS) to the phone.
- 802.1X is the most recommended authentication method for access control on the network. It is recognized as a standard, and is implemented by most IP telephony constructors. Multiple 802.1X authentication enables authentication both of a phone plugged into a switch and of a user plugged into the dual port of the phone, while assigning them different profiles (VLAN, QoS, bandwidth).
» Return to top
|
|
|
|
|
|
The platform contains:
- One or more servers with the following services: Active Directory, DHCP, DNS, Certificate Authority, IAS.
- Latest versions of ProCurve Manager Plus (PCM+) and Identity-Driven Manager (IDM).
- Nortel IP Phone 1140E.
- A ProVision Switch 3500yl or 2610-PWR with the latest firmware version. A similar configuration can also be used with a ProCurve 5400zl series switch or a 8212zl series switch. The configuration commands are identical for these products and the 3500yl.
- A client laptop that can be plugged into the phone dual port for multiple authentication tests or used as a network analyzer (e.g., Wireshark)
Figure 1. Setup for ProCurve-Nortel interoperability
» Return to top
|
|
|
|
|
|
This section explains how to configure a Nortel phone and the ProCurve switch.
3.1 Check PoE compatibility on ProCurve Switch 3500yl
ProVision switches support standard PoE (802.3af), and so do Nortel phones. When the phone is plugged into a port
on the ProCurve Switch 3500yl, the phone boots up.
To view the power consumption of the phone, issue the following command on the switch:
Where X is the port into which the phone is plugged.
For a Nortel IP Phone 1140E power consumption is around 6,000 milliwatts (Power Class 3):
3.2 Check PoE compatibility on ProCurve Switch 2610
On a 2610 switch, the command to view power consumption is:
Where X is the port into which the phone is plugged.
» Return to top
3.3 Set up the Nortel phone
To reset a Nortel phone to factory default configuration and launch the startup sequence for network setup:
- Reset the phone. When the Nortel logo appears on the phone’s screen you have 4 seconds to press the 4 soft keys just under the screen. Press them one after another, moving from left to right. If you are successful, you enter configuration mode.
- On the Nortel Phone 1140E, the first time you enter configuration mode, you are prompted for a password.
- Enter the password. By default this password is 26567*738. (This corresponds to the word COLOR*SET on the phone keyboard.) If you enter the correct password, you enter the configuration menu.
- When you enter the configuration menu, you obtain a screen where all configuration option are listed:
- To move between lines use the left and right arrows.
- To enter one of the configurable fields press the Enter button in the middle of the arrows. To validate the field also press this button.
The configuration menu on the Nortel IP Phone 1140E contains the following items:
- To validate the settings, including any changes, select the Apply&Reset soft key.
» Return to top
|
|
|
|
|
|
This section explains how to configure Quality of Service parameters.
4.1 Configure QoS on the phone
Nortel phones support 802.1p priority marking.
4.2 Configure QoS on the switches
The recommended method is to have a dedicated VLAN for voice and configure the QoS parameters for the VLAN. The L2 and DSCP policy advertised are based on the actual QoS configuration for the voice VLAN. By default these values are:
- L2 priority 6
- DSCP 46, which corresponds to the Expedited Forwarding (EF) class
To modify the 802.1p or DSCP values:
To view which DSCP and QoS values are configured:
For more information on QoS settings on ProCurve switches, please refer to the following documents:
» Return to top
|
|
|
|
|
|
This section explains how to configure LLDP-MED support.
5.1 Configure LLDP-MED support on the Nortel phone
To enable LLDP-MED on the Nortel phone:
- Follow the startup sequence (described above under “3.3 Set up the Nortel phone”).
- At the question Enable 802.1ab (LLDP)?, check the box to activate LLDP.
- Then, later in the sequence, at the VoiceVLAN question, choose the LLDP-MED method.
» Return to top
5.2 Configure LLDP-MED on the switch
To configure LLDP-MED on the switch:
1. Define a VLAN as a voice VLAN. This enables LLDP-MED. For example:
2. Then configure LLDP-MED. LLDP-MED must be configured on the switch to support MED TLVs, in particular
network policy and capabilities. For example:
3. To obtain information about the phone, issue the show lldp info command. For example:
Where X is the port into which the phone is plugged. The results appear as in this example:
» Return to top
5.3 Configure LLDP-MED fine grained power allocation
On a ProVision switch with K.13.XX firmware release you can have the port automatically configure power if the link
partner is able to support PoE. When LLDP is enabled, the information about the power usage of the PD is available
and the switch can then comply with or ignore this information. You can configure PoE on each port according to the
PD (IP phone, wireless device, etc.) specified in the LLDP field. The default configuration is for PoE information to be
ignored if detected through LLDP.
Nortel phones support the MED TLV that enables LLDP-MED fine grained power allocation.
To enable LLDP power allocation on the switch, use the command poe-lldp-detect globally or on an interface.
To view the power consumption of the phone: use the command show power-over-ethernet brief.
Without poe-lldp-detect enabled, by default the power is allocated by usage:
This output shows that PoE-LLDP detect is enabled on port 24, where the Nortel phone is plugged:
This time only 10 watts of power are allocated to the phone, by value.
» Return to top
|
|
|
|
|
|
This section explains how to configure 802.1X support.
6.1 Configure 802.1X login credentials on the phone
To configure the Nortel phone for 802.1X:
- At the beginning of the startup sequence, answer the following questions as shown:
- Enable 802.1X (EAP): Check the box to activate EAP.
- Device ID: Supply the username as defined in Active Directory.
» Return to top
6.2 Configure 802.1X login credentials on the phone
To configure 802.1X on the switch:
1. Enable 802.1X on the phone ports:
2. Enter the RADIUS information in the switch configuration:
» Return to top
6.3 Configure multiple 802.1X sessions
To configure multiple 802.1X sessions:
- Modify the switch configuration for the port connected to the phone. Configure it so the voice VLAN is tagged and the data VLAN untagged.
- Set the client-limit parameter on the switch to 3 to enable both the PC and the phone to authenticate. For example:
The data VLAN can also be dynamically assigned using Identity Driven Manager.
» Return to top
|
|
|
|
|
|
To get the same results as in this application note, ensure you have at least the following firmware versions. 7.1 Switch firmware versions
Switch firmware versions used for this application note are as follows:
- K.13.09 for ProVision switches (5406zl, 3500yl, 8212zl)
- R.11.07 for 2610-PWR
7.2 Phone firmware version
The Nortel IP Phone 1140E firmware version used for this application note is as follows:
- 0625C6E
7.3 Upgrade the phone firmware
To upgrade the phone firmware using a TFTP server:
- Create an account on the Nortel Web site.
- Then download two files from Nortel Web site to a TFTP server. The files are:
- Extract the 1140E.cfg file from BasicCfg1.zip and ensure it is on the TFTP server. When the phone is reset, it
first looks for the 1140E.cfg file. You have to edit this file and modify it with the new firmware name, here
0625C6E.bin, and the address of your TFTP server.
- Use the phone setup menu described above under “3.3 Set up the Nortel phone” to give the phone the IP
address of the TFTP server.
Here is an example of the file 1140E.cfg, after being modified:
This concludes the procedure for interoperating Nortel IP phones and ProCurve switches.
» Return to top
|
|
