Smart Business Communications System potx

Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Smart Business Communications System 1.1 Implementation Guide Cisco Validated Design I March 3, 2008 Text Part Number: OL-15666-01 Cisco Validated Design The Cisco Validated Design Program consists of systems and solutions designed, tested, and documented to facilitate faster, more reliable, and more predictable customer deployments. For more information visit www.cisco.com/go/validateddesigns. ALL DESIGNS, SPECIFICATIONS, STATEMENTS, INFORMATION, AND RECOMMENDATIONS (COLLECTIVELY, "DESIGNS") IN THIS MANUAL ARE PRESENTED "AS IS," WITH ALL FAULTS. CISCO AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THE DESIGNS, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE DESIGNS ARE SUBJECT TO CHANGE WITHOUT NOTICE. USERS ARE SOLELY RESPONSIBLE FOR THEIR APPLICATION OF THE DESIGNS. THE DESIGNS DO NOT CONSTITUTE THE TECHNICAL OR OTHER PROFESSIONAL ADVICE OF CISCO, ITS SUPPLIERS OR PARTNERS. USERS SHOULD CONSULT THEIR OWN TECHNICAL ADVISORS BEFORE IMPLEMENTING THE DESIGNS. RESULTS MAY VARY DEPENDING ON FACTORS NOT TESTED BY CISCO. CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R) Smart Business Communications System 1.1 Implementation Guide © 2008 Cisco Systems, Inc. All rights reserved. 1 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 CONTENTS Solution Overview 3 Solution Components 5 Installation Checklist 6 Provisioning Sequence 8 Initial Setup 8 Pre-configured Functionalities of UC520 8 Launch Cisco Configuration Assistant 10 Create a Community of Smart Business Communications System Devices 10 Verify Smart Business Communications System Community and Upgrade the System Software 12 Internet Connection 14 Configuring Wide Area Networking 14 Configuring Domain Name System 15 Options for PSTN Calls 17 Initial PRI Configuration 17 Telephony Configuration 18 Basic Keysystem Telephony Configuration 19 Basic PBX Configuration with Analog PSTN Trunk 22 Online Help for Advanced Telephony Configuration 25 Smart Business Communications System Network Expansion 26 Expanding Wired LAN with CE520 Switch 27 Verify Integrated Autonomous WLAN 30 Smartports Configuration 31 Expanding Integrated WLAN 33 Configuring Controller-based Wireless Network 37 Initializing the WLC-526 Controller 37 Adding the WLC-526 to the Smart Business Communications System Community 39 Create SSIDs for Controller-based WLAN 41 Verify Client Association in Controller-based WLAN 43 Online Help for Advanced Wireless LAN Configuration 46 Additional Configurations for Smart Business Communications System 48 Configuring Admin Username and Password 49 Configuring Date and Time 49 Configuring Local Area Networking and VLANs 50 Contents 2 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Configuring IP Routing 51 Configuring Network Address Translation 52 Configuring Firewall 53 Running Security Audit 54 VPN Service for Teleworkers 55 Configuring VPN Server 55 Software VPN Client for Mobile Workers 57 Hardware VPN Client for Home Offices of Teleworker 57 Summary 60 Appendix A—References 60 Corporate Headquarters: Copyright © 2007 Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA Smart Business Communications System 1.1 Implementation Guide Solution Overview The Cisco Smart Business Communications System is designed for small- and medium-sized businesses (SMB) to provide voice, data, video, security, and wireless capabilities—while integrating with existing applications, such as calendar, E-mail, and customer relationship management (CRM). The Cisco Smart Business Communications System provides a complete portfolio of Cisco Unified Communications products, as well as wired and wireless networking solutions. It provides access to the right mix of key communications, productivity, and business applications. This document provides a practical guide to provision a unified network for a smart and secure business where everyday communications are made easier, faster, and more efficient. It enhances information provided in the Smart Business Communications System 1.1 Design Guide with illustrations of hardware platforms and specific requirements of the SMB customer. Using the implementation guidance provided in this publication, Cisco partners and resellers can help small-to-medium size businesses (SMB) to leverage the full value of voice and data networks by deploying reliable secure Cisco Unified Communications 500 Series devices (UC520), Cisco Catalyst Express 520 Series switches (CE520), Cisco 500 Series Wireless Express Mobility Controllers (WLC526), autonomous or controller-based (AP521 or LAP521) access points (AP), and IP end points from Cisco Systems. The Cisco Smart Business Communications System is provisioned using Cisco Configuration Assistant—an easy-to-use Graphical User Interface (GUI)-based tool. Implementation guidance provided in this document and the design guidance covered in the Smart Business Communications System 1.1 Design Guide combine to provide a verified reference—ensuring that individual system components, and those configurable using Cisco Configuration Assistant, work well together. This implementation guide describes implementation of a secure voice and data network that supports up to 48 voice-users and up to 250 data-users with centralized controller-based wireless LAN capability. The core of this unified network is the UC 500 Series device, which provides data networking, integrated security, local call processing, integrated messaging, and voice gateway services. The Cisco 871w at a home office or mobile worker location provides data networking and integrated security services, but leverages the main office for call processing, messaging, and voice gateway services. The Smart Business Communications System provides the following capabilities: • Wide Area Network (WAN) access • Local Area Network (LAN) switching 4 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Solution Overview • Controller-based Wireless LAN connectivity • Integrated security • Call processing • Integrated messaging • GUI-based provisioning using Cisco Configuration Assistant (CCA) • GUI-based network management using Cisco Monitor Director Agent and Cisco Monitor Director This unified network for SMB customers provides a great deal of enhanced functionality. However, it is implemented with the objective of reducing the overall complexity of the system. This enables partners and customers with varying levels of technical knowledge to deploy the Smart Business Communications System solution. Figure 1 illustrates network topology of the Smart Business Communications System. Figure 1 Smart Business Communications System Topology WAN connectivity on the UC520 device is provided through a FastEthernet port by connecting the UC520 LAN port to the LAN port of the device provided by the Internet service provider—such as a cable or DSL modem. PSTN trunks can be either analog FXO, ISDN BRI, T1/E1 PRI or a mix of two such connections. Data connectivity is not supported on via BRI or PRI of a UC520 device—only voice can be used. 222712 WS-CE520 Fax UC520 Cisco 871W Main Office Teleworker At Home Office (optional) Mobile Worker At any public place (optional) Cisco Configuration Assistant and Cisco Monitor Director Agent Cable/DSL Modem Cisco Monitor Director V Internet IP PSTN IP V Partner Site WLC526 LAP521 IP 5 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Solution Components Solution Components Two general network schemes are addressed in this publication: fully wired networks; and networks supporting wireless clients. Table 1 provides a list of the hardware platforms used to build the system without wireless. Table 2 provides a list of hardware and capacity to add the wireless solution in Smart Business Communications System system. PSTN voice calls, and Analog stations capacity as same as shown in Table 1. Note Even though one AP can support seven 802.11b or 12 802.11g wireless IP phones, very large numbers of wireless data users on a single AP might impact wireless voice quality. Table 3 lists the various software applications required to provision and manage all of the products in the design summarized in this publication. Download the latest version of software to a common directory of your laptop PC. Ta b l e 1 Hardware Platforms for SBCS Wired-only Solution—Sample Configuration Number of Voice-Users Wired Data-Users PSTN Voice Calls 1 1. The VIC slot in all models can be used to increase the number of supported PSTN calls or analog stations by four. Analog Stations 1 UC Device Access Switch 0-8 8 4 4 UC520-8U No 9-16 16 4 4 UC520-16U WS-CE520-8PC 17-24 24 8 4 UC520-24U WS-CE520-8PC (2) 25-32 32 8 0 UC520-32U WS-CE520-24PC 33-48 56 12 2 2. If the 48-user model has T1/E1 port, the number of PSTN calls can be 23 or 30. 0 UC520-48U WS-CE520-24PC (2) Home Office 4 NA NA C871 No Ta b l e 2 Hardware Platforms for SBSC with Wireless Solution—Sample Configuration Number of Voice-Users Wired Data-Users Wireless Data-Users UC Device Access Switch Wireless LAN Solution 0-8 8 Up to 20 UC520W-8U No Integrated AP 9-16 16 Up to 60 UC520W-16U WS-CE520-8PC Integrated AP or 1-2 AP521s 1 1. Up to three autonomous Cisco IOS-based AP-521s (including a UC520W’s integrated AP) can be used to increase coverage when there are fewer users, but those users are spread across a large area. Only controller-based WLANs be used for more that 16 voice-users Smart Business Communications System solution. 17-24 24 Up to 90 UC520-24U UC520-24U Three AP521 or WLC526 & 3-6 LAP521 25-32 32 Up to 120 UC520-32U WS-CE520-24PC WLC526 (1), LAP521s (3-6) 33-48 56 Up to 240 UC520-48U WS-CE520-24PC (2) WLC526 (1-2), LAP521s (4-12) Home Office 4 NA C871 No Integrated AP 6 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Installation Checklist Installation Checklist Before beginning the deployment of the Smart Business Communications System, be sure that you have completed the following tasks prior to installation or configuration of any of the networking or Voice over IP (VoIP) components. The remainder of this document focuses on configuration of various features and functionality not present in the factory-default configuration installed on the UC520. Installation checklist: • Installation of Cisco Configuration Assistant (CCA) must be completed. See http://www.cisco.com/go/configassist. Click Data Sheet to verify compatible hardware and software for CCA. • It is desirable to download all the latest software, in the event that an upgrade of the Smart Business Communications System components required. See Table 3. • Ensure the availability of Internet connectivity at the customer premise. Gather the IP address(es), network mask, and DNS server information from the Internet service provider. • Ensure the availability of PSTN access at the customer location via either FXO, BRI, or T1/E1 PRI. • Remove the UC520 from its packaging. Place the UC520, CE520, and WLC-526 units in a location that allows for access to the front panel, such as FastEthernet Ports, and FXO/FXS or BRI or T1 ports. Ensure that all components have access to electrical power and remote connections such as PSTN and the Internet. Ta b l e 3 Software Applications Required Location Purpose Software Applications A PC at customer’s main office Provision of all devices listed in Table 1 or Table 2. Cisco Configuration Assistant, Version 1.5 from: http://www.cisco.com/go/configassist (click download software) Upgrading UC520 device. Version 4.2.6 of UC520-Complete ZIP/TAR with all components from: http://www.cisco.com/cgi-bin/tablebuild.pl/UC520 Upgrading CE520 switch. http://www.cisco.com/kobayashi/sw-center/index.shtml Click Switches Software. On next web page click LAN Switches and navigate to download Cisco IOS software for applicable Catalyst Express 520 switch. Upgrading WLC-526 Controller http://www.cisco.com/cgi-bin/tablebuild.pl/520_series_Wireless_ LAN_controller Network Monitoring & Management Cisco Monitor Manager version 1.1.2 Follow this link to download: http://www.cisco.com/en/US/products/ps7244/index.html Mobile worker’s laptop PC Access to main office Appropriate Cisco VPN Client Software from: http://www.cisco.com/cgi-bin/tablebuild.pl/vpnclient-3des IP Phone connected to main office Cisco IP Communicator, version 2.1.2 from: http://www.cisco.com/cgi-bin/tablebuild.pl/ip-comm Teleworker’s home-office Cisco IOS image on Cisco 871 router c870-advipservicesk9-mz.124-11.XW5 image from http://www.cisco.com A PC at the partner site Monitoring and management of customer network Cisco Monitor Director version 1.1.2 Follow this link to download: http://www.cisco.com/en/US/products/ps7246/index.html 7 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Installation Checklist • Ensure that the appropriate grounding wires and other electrical safety issues have been addressed. – Details of safety and electrical requirements of the UC520 and CE520, refer to data sheets at the following URL: http://www.cisco.com/en/US/partner/products/ps7293/products_data_sheets_list.html – Details of safety and electrical requirements of the WLC-526 and LAP-521, refer to data sheets at the following URL: http://www.cisco.com/en/US/products/ps7320/products_data_sheets_list.html http://www.cisco.com/en/US/products/ps7319/products_data_sheets_list.html • Verify the factory default VLAN, internal IP addresses, SSID, and dial plan to be used. See Table 4 and Table 5: Note We recommend using a static IP address for WAN port to support teleworkers. Make sure to gather IP address(es), network mask, and DNS information from Internet service provider of customer. Ta b l e 4 Network Design Specifications Network Attribute Factory Default Value Comments Data VLAN ID/Name 1/Default Also used for 802.1Q Trunk Voice VLAN ID/Name 100/Cisco-Voice Data Network/Network Mask 192.168.10.0/ 255.255.255.0 First 10 addresses are reserved Voice Network/Network Mask 10.1.1.0/255.255.255.0 First 10 addresses are reserved Smartport role for all switch ports IP Phone+Desktop Only IP Phone or a Desktop can be connected Smartport role for all expansion slots Switch A CE520 switch or WLC-526 can be connected Service Set ID (SSID) for Data WLAN uc520-data Only on integrated wireless of UC520 Service Set ID (SSID) for Voice WLAN uc520-voice Only on integrated wireless of UC520 WAN Connection DHCP Works only when DHCP address provided by ISP Ta b l e 5Voice Dial Plan Service/Call Coverage Number to dial Comments Extensions Dial Plan 20x Three-digit dialing pre-configured as factory default. PSTN dialing for external call 9 Both incoming and outgoing calls—Enabled as factory default. Auto Attendant Pilot Number 600 Must be enabled and provisioned using CCA. Voice Mail Pilot Number 601 Must be enabled and provisioned using CCA. Intercom 20x Optional—Requires 2 ephone-dns as must be configured in pairs. Paging 101, 102, etc. Optional—Provisioned using CCA. Call Park 701, 702, etc. Optional—Provisioned using CCA. Hunt Group Pilot Number 501 Optional—Provisioned using CCA. 8 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Provisioning Sequence Provisioning Sequence This document follows a logical sequence of steps needed to provision most common deployment scenario. The following provisioning sequence is reflected in the remainder of the document: 1. Initial Setup—Unpack and connect UC520 device. See the “Initial Setup” section on page 8. 2. Verify pre-configured plug-and-play functionalities. See the “Pre-configured Functionalities of UC520” section on page 8. 3. Upgrade the system software if necessary. See the “Verify Smart Business Communications System Community and Upgrade the System Software” section on page 12. 4. Provision Internet connection and DNS. See the “Internet Connection” section on page 14. 5. Provisioning for off-net (external) calls. See the “Options for PSTN Calls” section on page 17. 6. IP Telephony—Provision voicemail, auto-attendant and voice-users. See the “Telephony Configuration” section on page 18. 7. Wired network expansion by adding CE520 device(s). See the “Expanding Wired LAN with CE520 Switch” section on page 27. 8. Wireless LAN using integrated AP (for 8 to 16 user models only). See the “Verify Integrated Autonomous WLAN” section on page 30. 9. Expanding or adding wireless LAN using Autonomous AP (AP-521). See the “Expanding Integrated WLAN” section on page 33. 10. Controller based wireless LAN using WLC526. See the “Configuring Controller-based Wireless Network” section on page 37. 11. Additional configurations for SBCS network. See the “Additional Configurations for Smart Business Communications System” section on page 48. 12. Provisioning VPN service for mobile and teleworkers. See the “VPN Service for Teleworkers” section on page 55. Initial Setup This section is independent of specific customer requirements and prepares a baseline implementation. It is assumed that a working Internet broadband connection exists at the customer premise. It is also assumed that customer has working telephone lines (analog or digital) from the public PSTN that have been verified as operational prior to Smart Business Communications System installation. Pre-configured Functionalities of UC520 Complete the following initial setup steps. This will initialize the Smart Business Communications System Unified Communication Network with pre-configured basic data and voice functionality. Step 1 Before going to customer premise to deploy Smart Business Communications System, please be sure to install the Cisco Configuration Assistant software on your laptop PC. Download all the latest software as referred in Table 3. Step 2 Connect all IP phones and PCs, along with the Internet connection and public switch telephone network (PSTN) phone lines (FXO, BRI, or T1/E1 PRI) to the appropriate ports on the UC520 as illustrated Figure 2. Power-up the UC520 device. Do not start CCA software. [...]... related to main Voice window will appear Smart Business Communications System 1.1 Implementation Guide OL-15666-01 25 Smart Business Communications System Network Expansion Figure 16 Online Help as a Guide for Advanced Telephony Configuration Smart Business Communications System Network Expansion This section helps customers expand the Smart Business Communications System network for wired and/or autonomous... shown in Figure 21 Smart Business Communications System 1.1 Implementation Guide 30 OL-15666-01 Smart Business Communications System Network Expansion Figure 21 Integrated Autonomous Wireless LAN Smartports Configuration This section describes the steps to verify and make changes to LAN QoS settings using pre-defined device roles known as Smartports Smart Business Communications System devices can... visible in the topology Add the CE520 to the community by clicking the right-button of mouse See Figure 19 Smart Business Communications System 1.1 Implementation Guide 28 OL-15666-01 Smart Business Communications System Network Expansion Figure 19 Adding CE520 Switch to Smart Business Communications System Community Note Step 8 Accept any security dialogue windows presented after clicking Start button... Adding CE520 to the community will make all devices connected to CE520 visible as shown in Figure 20 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 29 Smart Business Communications System Network Expansion Figure 20 Topology View after Adding CE520 in Smart Business Communications System Verify Integrated Autonomous WLAN As shown in Table 4 on page 7, the factory default SSIDs... Controller-based Wireless Network” section on page 37 Smart Business Communications System 1.1 Implementation Guide 26 OL-15666-01 Smart Business Communications System Network Expansion Expanding Wired LAN with CE520 Switch This section describes the steps to initialize a CE520 switch in order to prepare it for connecting to an existing Smart Business Communications System network Step 1 Step 2 Figure 17 Refer... automatically suggest which Smartport to be used (for more information on that process, see the “Expanding Integrated WLAN” section on page 33) Step 1 Click Configure > Smartports Select a port on the Smartports window See Figure 22 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 31 Smart Business Communications System Network Expansion Figure 22 Smartport Roles Configuration... OL-15666-01 11 Initial Setup Figure 5 Topology View of Smart Business Communications System Network Verify Smart Business Communications System Community and Upgrade the System Software Complete the following steps to verify the creation of community by restarting CCA Verify that UC520 device has the latest system software If not, upgrade the system software using the latest version listed in Table... to Smart Business Communications System network later in this guide Close the CCA application, and save the topology when a screen is presented to do so Restart the CCA Verify that the relevant community is present in pull-down menu as shown in Figure 6 Click OK to connect to the Smart Business Communications System community (and to subsequently manage it) Figure 6 Verify Community Creation Smart Business. .. Configuration This section outlines the steps required to configure telephony for SMB offices in two different modes: PBX and Keysystem Refer to Smart Business Communications System 1.1 Design Guide for the description of PBX and Keysystem modes Smart Business Communications System 1.1 Implementation Guide 18 OL-15666-01 Telephony Configuration Caution You must decide in advance which telephony mode... automatically move to the AA & Voicemail tab Smart Business Communications System 1.1 Implementation Guide OL-15666-01 19 Telephony Configuration Figure 12 Selecting Voice System Type Step 3 Enter 600 for Auto Attendant Extension, and 601 for Voicemail Access Extension as shown in Figure 13 The window will automatically move to the Users tab Smart Business Communications System 1.1 Implementation Guide 20 OL-15666-01 . 12 Smart Business Communications System 1.1 Implementation Guide OL-15666-01 Initial Setup Figure 5 Topology View of Smart Business Communications System Network Verify Smart Business Communications. Configuration Assistant 10 Create a Community of Smart Business Communications System Devices 10 Verify Smart Business Communications System Community and Upgrade the System Software 12 Internet Connection. other company. (0711R) Smart Business Communications System 1.1 Implementation Guide © 2008 Cisco Systems, Inc. All rights reserved. 1 Smart Business Communications System 1.1 Implementation