<div>This is pretty much word for word from the Cisco Mobile Worker/Office SRND from some years back, it has not been updated in some time, at least not since I last looked at it personally about a year or so ago. I guess the one thing I noticed that changed is the router model.
</div>
<div> </div>
<div>We deployed about 40 7960's and 837's I believe back then. It was fairly easy and straight forward. The 837's were configured with the ezvpn I think, and connected back to cisco concentrator over a fiber internet connection at the main office. Of course each of the home users were on cable modems which worked out fine for us.
</div>
<div> </div>
<div>Our issues were spotty, and I blame it on the internet completely. I was against deploying the solution personally, because it was being deployed to sales and recruiting people who worked independtly all over the US, they are the heaviest phone users. And yet we were giving them phone service that we simply could not quarantee, and no one in mgmt could understand why. They would complain about the quality, ask me about it, I would tell them the issue time and time again and they didn't want to hear it, in fact they would tell me how to fix it "upgrade our bandwidth" or "upgrade their bandwidth" ughhh.. what a nightmare.
</div>
<div> </div>
<div>Anyway, the solution is pretty much what they told you and is simple. Basically configure the router to hand out DHCP to the devices connected to it, include the TFTP option 150 info of your callmanagers. Make sure the router can establish a vpn connection back to the main office, and that you allow the appropriate data to pass obviously. Router boots up, grabs internet IP on the BVI port I believe, but I don't think it establishes the VPN tunnel at this point. I think it takes traffic "such as the phone trying to hit addresses that reside on the VPN" to cause the vpn tunnel to establish. Anyway, so then phone boots up grabs DHCP from router, including TFTP.. then trys to hit TFTP and causes vpn tunnel to establish. Pulls info and registers if you will with callmanager. You can QoS it to death and it will work to some extent, but ultimately and obviously your simply at the mercy of the internet.
</div>
<div> </div>
<div>Good luck with it. ;-)<br> </div>
<div> </div>
<div> </div>
<div><span class="gmail_quote">On 10/25/06, <b class="gmail_sendername">Steve Miller</b> <<a href="mailto:millerman1@cox.net">millerman1@cox.net</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div bgcolor="#ffffff">
<div><font face="Arial" size="2">The following is information that I have rec'd regarding the installation of a 7961 at someone's house who is using cable or DSL. Is there anything else that we might need to think about? Thank you!
</font></div>
<div><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"></span></font> </div>
<div><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Notes from Cisco Engineer:</span></font></div>
<div><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"></span></font> </div>
<div><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">The remote equipment at the home office would consist of a Cisco 871 router and a Cisco phone with a power block. The Cisco 871 would function as the home office's firewall and router (and would connect to either a cable modem or a DSL modem depending on the site). The router would be configured to have an IPSec tunnel back to the office network (most likely configured off of your existing concentrator). The remote Cisco 871 would be configured with DHCP and have the TFTP scope option set to tell all devices the IP address of the Call Manager server (note the router has a built-in four port switch).
</span></font></div>
<div>
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">
At that point, the IP Phone would register normally to the Call Manager servers using the IPSec tunnel as it's communication path. The keepalives from the phone to the CM servers would keep the IPSec tunnel up and running 24/7.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">
The restrictions on this type of deployment are:</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> -must use G729 codec due to bandwidth restrictions</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> -extremely limited QoS control since we are going across the Internet</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> -security policies need to be visited since the remote office would have access to the corporate internal network (this one is a biggie)
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> -sub-issue regarding calling from home office to home office. This is doable but adds additional security and deployment issues.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> -need to consider the standard IT management overhead associated with supporting home equipment.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"></span></font> </p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Thank you!</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p></div></div></div><br>_______________________________________________<br>cisco-voip mailing list
<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">
https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br><br></blockquote></div><br>