Cisco SPA2102-AU Provisioning Guide

Cisco SPA2102-AU Manual

Cisco SPA2102-AU manual content summary:

  • Cisco SPA2102-AU | Provisioning Guide - Page 1
    Linksys SPA Provisioning Guide Version 3.0 Corporate Headquarters Linksys 121 Theory Drive Irvine, CA 92617 USA http://www.linksys.com Tel: 949 823-1200 800 546-5797 Fax: 949 823-1100
  • Cisco SPA2102-AU | Provisioning Guide - Page 2
    Linksys SPA Provisioning Guide Copyright ©2007 Cisco Systems, Inc. All rights reserved.Specifications are subject to change without notice. Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. Other brands and product
  • Cisco SPA2102-AU | Provisioning Guide - Page 3
    1-5 SPA Provisioning Flow 1-6 Using HTTPS 1-8 How HTTPS Works 1-8 Server Certificates 1-9 Client Certificates 1-9 Linksys Certificate Chain Structure 1-9 Provisioning Setup 1-10 License Keys 1-11 Software Tools 1-11 Server Configuration 1-11 TFTP 1-12 HTTP 1-12 Linksys SPA Provisioning Guide iii
  • Cisco SPA2102-AU | Provisioning Guide - Page 4
    Parameters 2-15 Enables 2-15 Triggers 2-16 Configurable Schedules 2-16 Profile Rules 2-17 Report Rule 2-19 Upgrade Rule 2-19 Data Types 2-20 Provisioning Tutorial 3-1 Preparation 3-1 Basic Resync 3-2 TFTP Resync 3-2 Syslog 3-3 Automatic Resync 3-4 Linksys SPA Provisioning Guide iv Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 5
    13 Provisioning Field Reference 4-1 Configuration Profile Parameters 4-1 Firmware Upgrade Parameters 4-4 General Purpose Parameters 4-6 Macro Expansion Variables 4-7 Internal Error Codes 4-9 Acronyms Glossary Example SPA Configuration Profile Contents Version 3.0 Linksys SPA Provisioning Guide v
  • Cisco SPA2102-AU | Provisioning Guide - Page 6
    Contents Linksys SPA Provisioning Guide vi Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 7
    . • SPA9000-IP PBX with Auto-Attendant; can be used with the SPA400, which provides a SIP-PSTN gateway • Linksys Analog Telephone Adapters (ATAs): • PAPT2T-Voice adapter with two FXS ports • SPA1001-Small VoIP adapter • SPA2102-Voice adapter with router • SPA3102-Voice adapter with router and PSTN
  • Cisco SPA2102-AU | Provisioning Guide - Page 8
    • SPA900 Series IP phones: • SPA901-One line, small, affordable, no display • SPA921-One-line business phone • SPA922-One-line business phone with Power over Ethernet (PoE) support and an extra Ethernet port for connecting another device to the LAN • SPA941-Default is two lines, upgradeable to four
  • Cisco SPA2102-AU | Provisioning Guide - Page 9
    ATAs: • AA Quick Guide • IVR Quick Guide • SPA Provisioning Guide The following documentation describes how to use other Linksys Voice System products: • SPA9000 Administrator Guide • LVS CTI Integration Guide • LVS Integration with ITSP Hosted Voicemail Guide • SPA900 Series IP Phones Administrator
  • Cisco SPA2102-AU | Provisioning Guide - Page 10
    Technical Support Preface Linksys SPA Provisioning Guide x Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 11
    Setup, page 1-10 • Where to Go From Here, page 1-15 Note A Linksys VoIP device is generically referred to in this document as a SPA. Unless otherwise noted, the instructions in this document apply equally to the SPA9000, Linksys Analog Telephone Adapters (ATAs), and SPA900 Series IP phones
  • Cisco SPA2102-AU | Provisioning Guide - Page 12
    access to the ATA administration web server. Provisioning Overview Linksys VoIP products support secure remote provisioning and firmware upgrades. Configuration profiles can be generated using common, open source tools, facilitating integration into service provider provisioning systems. Supported
  • Cisco SPA2102-AU | Provisioning Guide - Page 13
    are customized by Linksys so when the unit is started, it tries to contact the Linksys provisioning server to download its customized profile. User intervention is not required to initiate or complete a profile update or firmware upgrade. Remote firmware upgrade is achieved via TFTP or HTTP, but not
  • Cisco SPA2102-AU | Provisioning Guide - Page 14
    : https://prov.supervoip.com/linksys For both initial and permanent access, the provisioning server relies on the SPA client certificate for authentication and supplies correct configuration parameter values based on the associated service account. Linksys SPA Provisioning Guide 1-4 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 15
    disabled, via provisioning. The Internet domains accessed by the SPA for resync, upgrades, and SIP registration for Line 1 can be restricted. These and other features are described in detail in administration guides for each product. SPA Configuration Profiles The SPA configuration profile defines
  • Cisco SPA2102-AU | Provisioning Guide - Page 16
    in support of secure provisioning. This section describes the high-level provisioning flow supported by release 1.0 in the context of a service provider application. The SPA provisioning flow is illustrated in Figure 1-1. Figure 1-1 SPA Provisioning Flow Linksys SPA Provisioning Guide 1-6 Version
  • Cisco SPA2102-AU | Provisioning Guide - Page 17
    , using this URL syntax: http://x.x.x.x/admin/resync?prvserv/spa2102.cfg where x.x.x.x is the IP address of the specific SPA and prvserv is the target TFTP server, followed by a profile path. • Edit Profile_Rule parameter. Open the provisioning pane on the SPA web interface, and enter the TFTP URL
  • Cisco SPA2102-AU | Provisioning Guide - Page 18
    when they seek to establish an HTTPS connection with the provisioning server. This procedure is described in the "Enabling HTTPS" section on page 1-13. How HTTPS Works Starting with firmware release 2.0.6 , the SPA implements SSL, which lets the SPA client to connect to servers using HTTPS. HTTPS
  • Cisco SPA2102-AU | Provisioning Guide - Page 19
    . The clients try to authenticate the server certificate when connecting via HTTPS, and reject any server certificate not signed by Linksys. This mechanism protects the service provider from unauthorized access to the SPA endpoint, or any attempt to spoof the provisioning server. This might allow
  • Cisco SPA2102-AU | Provisioning Guide - Page 20
    Server Certificates SPA Root CA Certificate List SPA Firmware Load SPA PKEY CERT Authenticates Server in HTTPS Connection Authenticates Client in HTTPS Connection Provisioning Server CERT PKEY VoIP Service Provider Provisioning Server Entity HTTPS Server Configuration Files Root
  • Cisco SPA2102-AU | Provisioning Guide - Page 21
    Devices Provisioning Setup Provisioning Setup This section describes setup requirements for provisioning a SPA and includes the following topics: • License Keys, page 1-11 • Software Tools, page 1-11 • Server Configuration, page 1-11 • TFTP, page 1-12 • HTTP, page 1-12 • Enabling HTTPS, page 1-13
  • Cisco SPA2102-AU | Provisioning Guide - Page 22
    deployed remotely, HTTP offers greater provisioning reliability, given NAT and router protection mechanisms. The SPA is able to obtain a TFTP server IP address directly from the DHCP server through DHCP option 66. If this is done, a Profile_Rule need be configured only with the profile filepath on
  • Cisco SPA2102-AU | Provisioning Guide - Page 23
    that would be accepted as valid by the SPA: CN=sprov.callme.com CN=pv.telco.net/mailto:[email protected] CN=prof.voice.com/[email protected] In addition to verifying the certificate chain of the provisioning server certificate, the SPA tests the server IP address against a DNS lookup of the server name
  • Cisco SPA2102-AU | Provisioning Guide - Page 24
    server for specific information. Firmware release 2.0.6 supports the following cipher suites for SSL connection to a server using HTTPS. Future release updates may implement additional cipher suites. Table 1-2 Cipher Suites Supported for Connecting to an HTTPS Server Numeric Code 0x0039 0x0035
  • Cisco SPA2102-AU | Provisioning Guide - Page 25
    Chapter 4, "Provisioning Field Reference" on the Provisioning tab of the administration web server. Look up the expansion for an acronyms use in this Appendix A, "Acronyms" document. Define a term used in this document. Appendix B, "Glossary" Version 3.0 Linksys SPA Provisioning Guide 1-15
  • Cisco SPA2102-AU | Provisioning Guide - Page 26
    Where to Go From Here Chapter 1 Provisioning Linksys VoIP Devices 1-16 Linksys SPA Provisioning Guide Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 27
    , page 2-8 • Using Provisioning Parameters, page 2-15 • Data Types, page 2-20 SPA Configuration File The SPA configuration profile defines the parameter values for a specific SPA device. The profile lets you determine the value for each parameter used by the SPA and also to determine the user access
  • Cisco SPA2102-AU | Provisioning Guide - Page 28
    attribute: ua. The user-access attribute defines access to the administration web server for a specific parameter by the User account. Access by the Admin account is unaffected by this attribute. The ua attribute, if present, must have one of the following values: • na-no access • ro-read-only • rw
  • Cisco SPA2102-AU | Provisioning Guide - Page 29
    40; and .), are also translated. Note The SPA firmware does not support the full Unicode character set, but only the ASCII subset. The profile in Example 2-3illustrates character escapes. This example defines an information hotline dial plan, which sets the Dial_Plan[1] parameter equal to ( S0
  • Cisco SPA2102-AU | Provisioning Guide - Page 30
    Format Configuration File Chapter 2 Creating Provisioning Scripts The element names that are recognized by the SPA can be derived from the SPA administration web server field names as follows: • Append [n] to each of the numbered parameters, where n is the line, user, or extension
  • Cisco SPA2102-AU | Provisioning Guide - Page 31
    encryption may require recompilation of the tool (so as to enable the AES code). The SPA firmware has been tested against version openssl-0.9.7c. If encrypted, the profile expects the file to have the same format as generated by the following command: Version 3.0 Linksys SPA Provisioning Guide 2-5
  • Cisco SPA2102-AU | Provisioning Guide - Page 32
    . Appendix C, "Example SPA Configuration Profile" provides an example of a typical SPA2102 configuration text file. Other ATAs are similar. However, the MAC address of the target SPA, and only that SPA can decode it • Explicit key-based encryption of the CFG file. Linksys SPA Provisioning Guide 2-6
  • Cisco SPA2102-AU | Provisioning Guide - Page 33
    sample configuration source files (for both plain text and XML formats), corresponding to the accompanying firmware release. The commands for producing sample files are as follows: # sample plain.txt to be used as source file for eventual spc compilation: Version 3.0 Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 34
    the corresponding names appearing in the SPA web interface, with the following modifications: • Spaces between words are replaced by underscores, for example Multi_Word_Parameter • Parameters with a numeric identifier use a bracketed index syntax to identify the line, extension, or user (for example
  • Cisco SPA2102-AU | Provisioning Guide - Page 35
    , and Resync_Trigger_* parameters. Macro Expansion Several provisioning parameters undergo macro expansion internally prior to being evaluated. This preevaluation step provides greater flexibility controlling the resync and upgrade activities of the SPA. The parameter groups which undergo macro
  • Cisco SPA2102-AU | Provisioning Guide - Page 36
    " section on page 4-7 for the complete list of variables available for macro expansion. These include general purpose parameters, several product identifiers, certain event timers, and provisioning state values. For example, for a SPA with MAC address 000E08012345, the expression: spa$(MAU)config
  • Cisco SPA2102-AU | Provisioning Guide - Page 37
    Provisioning Scripts Proprietary Plain-Text Configuration String Operands Yes Yes No No No No For legacy support to firmware versions prior to 2.0.6, the not-equal-to operator the syntax "( expr )?" as in the following upgrade rule example: ( $SWVER ne 2.0.6 )? http://ps SPA Provisioning Guide 2-11
  • Cisco SPA2102-AU | Provisioning Guide - Page 38
    configuration files and firmware loads in Profile_Rule* and Upgrade_Rule parameters, respectively. The syntax is as follows: [ scheme:// ] [ server [:port name or a numeric IP address. The port is the destination UDP or TCP port number. The filepath must 12 Linksys SPA Provisioning Guide Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 39
    the SIP registration parameters: name, number, auth-secret, enclosed in an XML element hierarchy as follows: J. Smith 14085551234 732091751563sfd Version 3.0 Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 40
    combined, by enclosing them within the same set of square brackets. The following are examples page 2-15 • Enables, page 2-15 • Triggers, page 2-16 • Configurable Schedules, page 2-16 • Profile Rules, page 2-17 • Report Rule, page 2-19 • Upgrade Rule, page 2-19 2-14 Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 41
    and upgrade URL commands issued through the SPA administration web server. Both of these parameters are set to yes by default. In addition, the Resync_From_SIP parameter controls requests for resync operations via a SIP NOTIFY event sent from the service provider proxy server to the SPA. If enabled
  • Cisco SPA2102-AU | Provisioning Guide - Page 42
    resync may cause configuration parameter values to change. This, in turn, causes a firmware reboot, which terminates any voice connection active at the time of the resync. If a resync operation fails because the SPA was unable to retrieve a profile from the server, if the downloaded file is corrupt
  • Cisco SPA2102-AU | Provisioning Guide - Page 43
    , if a remote upgrade attempt fails, the SPA retries the upgrade in 30 minutes, then again after one more hour, then in two hours. If it still fails, it subsequently retries every four to five hours, until it succeeds. Profile Rules The SPA provides multiple remote configuration profile parameters
  • Cisco SPA2102-AU | Provisioning Guide - Page 44
    If Resync_Fails_On_FNF is set to No, then the SPA accepts a file-not-found response from the server as a successful resync. The default value for Resync_Fails_On_FNF is Yes. Report Rule The SPA provides a mechanism for reporting its current internal configuration to the provisioning server. This is
  • Cisco SPA2102-AU | Provisioning Guide - Page 45
    other SIP notifies, with the SPA requiring authentication from the requesting server before honoring the request to issue a report. Each SIP NOTIFY report request generates one attempt to transmit the report. Retries are not supported. Upgrade Rule The SPA provides one configurable remote upgrade
  • Cisco SPA2102-AU | Provisioning Guide - Page 46
    such as "sip.Linksys.com:5060", or "109.12.14.12:12345". It can contain up to 63 characters. • Phone-A phone number string, such as 14081234567, *69, *72, 345678, or a generic URL such as [email protected]:5068, or [email protected]. It can contain up to 39 characters. • ActCode-Activation code for
  • Cisco SPA2102-AU | Provisioning Guide - Page 47
    2s Segment 4: On=1.0s, Off=4.0s Total Ring Length = 60s • FreqScript-A mini-script that specifics the frequency and level parameters of a tone. used in a segment, the components are summed together. Example 1-Dial tone: 350@-19,440@-19;10(*/0/1+2) Number of Frequencies = SPA Provisioning Guide 2-21
  • Cisco SPA2102-AU | Provisioning Guide - Page 48
    Scripting syntax used to define configuration resync and firmware upgrade rules. • DialPlanScript-Scripting syntax used to specify Line 1 and Line 2 dial plans. Notes: • represents a configuration parameter name. In a profile, the corresponding tag is formed by replacing the space with an
  • Cisco SPA2102-AU | Provisioning Guide - Page 49
    and Linksys voice devices, it is useful to install an Ethernet packet sniffer (such as the freely downloadable Ethereal/Wireshark). For HTTPS transactions, you can use the ssldump utility. A Linksys VoIP device (SPA) can retrieve a configuration profile from a provisioning server and update its
  • Cisco SPA2102-AU | Provisioning Guide - Page 50
    the SPA configuration has been modified since it was manufactured, perform manufacturing reset on it using the IVR RESET option (**** 73738#). Open the PC web browser on the SPA admin/advanced configuration page. For example, if the SPA IP address is 192.168.1.100): Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 51
    and after the resync has either completed or failed. This server is identified in the web server administration (admin/advanced, System tab, Syslog_Server parameter). It is instructive to configure the syslog server IP address into the SPA and observe the messages generated during each exercise
  • Cisco SPA2102-AU | Provisioning Guide - Page 52
    . Exercise Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Using the PC web browser, open the SPA admin/advanced page, Provisioning tab. Define the Profile_Rule parameter. The following value assumes a TFTP server IP address of 192.168.1.200: tftp://192.168.1.200/basic.txt In the
  • Cisco SPA2102-AU | Provisioning Guide - Page 53
    . Copy the basic.txt configuration file to a new file named spa_mac_address.cfg and place the new file in the virtual root directory of the TFTP server. Replace mac_address with the actual MAC address of the SPA. Open the SPA admin/advanced page, Provisioning tab. Enter the following value
  • Cisco SPA2102-AU | Provisioning Guide - Page 54
    TCP connection between a SPA client behind a firewall or NAT device and a remote provisioning server on the Internet service provider must install and configure the HTTP server. The SPA does not require any special configuration setting on the server to be able to resync using HTTP. If a standard web
  • Cisco SPA2102-AU | Provisioning Guide - Page 55
    current firmware version, and serial number. Secure Resync This section demonstrates the preferred mechanisms available on the SPA for securing the provisioning process. It includes the following topics: • Basic HTTPS Resync, page 3-7 • HTTPS With Client Certificate Authentication, page 3-9 • HTTPS
  • Cisco SPA2102-AU | Provisioning Guide - Page 56
    , the command to generate the basic CSR file is as follows: openssl req -new -out provserver.csr Step 4 Step 5 This command generates a public/private key pair, which the server must also authenticate the client, as demonstrated in the next exercise. Linksys SPA Provisioning Guide 3-8 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 57
    Chapter 3 Provisioning Tutorial Secure Resync HTTPS With Client Certificate Authentication In the factory default configuration, the server does not request SSL client certificates from clients. After changing the configuration to enable client authentication, the server requires a client
  • Cisco SPA2102-AU | Provisioning Guide - Page 58
    , page 3-12 • Parameter Name Aliases, page 3-12 • Proprietary Profile Format, page 3-13 Profile Compression A configuration profile in XML format can become quite large if all parameters are individually specified by the profile. To reduce the load on the provisioning server, the SPA supports
  • Cisco SPA2102-AU | Provisioning Guide - Page 59
    resync, the new file is downloaded by the SPA and used to update its parameters. The file size of such a small profile is not reduced by gzip. Compression is only useful with larger profiles. For integration into customized back-end provisioning server solutions, the open source zlib compression
  • Cisco SPA2102-AU | Provisioning Guide - Page 60
    number and SIP registration password with names such as SIP-number and SIP-password. These names can be mapped to the SPA canonical names (User_ID_1_ and Password_1_ ) before being applied to SPA Line 1. In many instances, the back-end provisioning solution used by the service provider can perform
  • Cisco SPA2102-AU | Provisioning Guide - Page 61
    password> 512835907884 Store the file in the TFTP server virtual root directory. Open the test SPA web interface on the admin/advanced page, Provisioning tab, and edit GPP_A to contain the alias map indicated above (do not enter new lines through the web interface
  • Cisco SPA2102-AU | Provisioning Guide - Page 62
    Profile Formats Chapter 3 Provisioning Tutorial Step 5 Step 6 Step 7 Modify the test SPA profile rule to point to the new profile: tftp://192.168.1.200/account.cfg Click Submit All Changes. Upon resync, the SPA retrieves the new file, recognizes its binary format and updates the two specified
  • Cisco SPA2102-AU | Provisioning Guide - Page 63
    all resync actions independently of firmware upgrade actions. Set to yes to enable remote provisioning. The default is Yes. Triggers a resync after every reboot except for reboots caused by parameter updates and firmware upgrades. The default is Yes. Version 3.0 Linksys SPA Provisioning Guide 4-1
  • Cisco SPA2102-AU | Provisioning Guide - Page 64
    to zero. This parameter is the value that is initially loaded into the error retry timer. If this parameter is set to zero, the device immediately retries to sync with the provisioning server following a failed attempt. The default is 3600 seconds. Linksys SPA Provisioning Guide 4-2 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 65
    a file-not-found response from the provisioning server constitutes a successful or a failed resync. A failed resync activates the error resync timer. The default is Yes. This parameter is a profile script that evaluates to the provisioning resync command. The command is a TCP/IP operation and an
  • Cisco SPA2102-AU | Provisioning Guide - Page 66
    . The default is $PN $MAC - Resync failed: $ERR. The target URL to which configuration reports are sent. This parameter has the same syntax as the Profile_Rule parameter, and resolves to a TCP/IP command with an associated URL. A configuration report is generated in response to an authenticated SIP
  • Cisco SPA2102-AU | Provisioning Guide - Page 67
    attempt completes successfully. The default is $PN $MAC -- Successful upgrade $SCHEME://$SERVIP:$PORT$PATH -- $ERR. Syslog message issued after a failed firmware upgrade attempt. The default is $PN $MAC -- Upgrade failed: $ERR. This field is empty. Version 3.0 Linksys SPA Provisioning Guide 4-5
  • Cisco SPA2102-AU | Provisioning Guide - Page 68
    on the device configuration web page, and they are not included in the configuration report sent in response to a SIP NOTIFY command. The default is (empty) General purpose provisioning parameters. These parameter can be used as variables in provisioning and upgrade rules. They are referenced
  • Cisco SPA2102-AU | Provisioning Guide - Page 69
    hex digits, for example, 000e08aabbcc. MAC address using upper case hex digits, for example 000E08AABBCC. MAC address using lower case hex digits, and colons to separate hex digit pairs, for example 00:0e:08:aa:bb:cc. Product Name, for example SPA2102. Version 3.0 Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 70
    or upgrade URL. Deprecated alias for SCHEME, do not use. Request target server host name, as obtained after parsing resync or upgrade URL. Request target server IP address, as obtained after parsing resync or upgrade URL, possibly following DNS lookup. Linksys SPA Provisioning Guide 4-8 Version
  • Cisco SPA2102-AU | Provisioning Guide - Page 71
    a SIP request. SIP request times out while waiting for a response. General SIP protocol error (for example, unacceptable codec in SDP in 200 and ACK messages, or times out while waiting for ACK). Dialed number invalid according to given dial plan. Version 3.0 Linksys SPA Provisioning Guide 4-9
  • Cisco SPA2102-AU | Provisioning Guide - Page 72
    Internal Error Codes Chapter 4 Provisioning Field Reference 4-10 Linksys SPA Provisioning Guide Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 73
    Configuration Protocol Domain Name Server Dynamic Random Access Memory Digital Subscriber Loop Digital Signal Processor Data Terminal Alert Signal (same as CAS) Dual Tone Multiple Frequency Fully Qualified Domain Name Frequency Shift Keying Foreign eXchange Station Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 74
    Public Switched Telephone Network Network Address Translation Out-of-band (SIP) Request Message (SIP) Response Message (SIP) Response Status Code, such as 404, 302, 600 Real Time Protocol Round Trip Time Streaming Audio Server Session Description Protocol Linksys SPA Provisioning Guide A-2 Version
  • Cisco SPA2102-AU | Provisioning Guide - Page 75
    Trivial File Transfer Protocol Transmission Control Protocol User Agent Micro-controller User Datagram Protocol Uniform Resource Locator Voicemail Visual Message Waiting Indication/Indicator Voice Quality Wide Area Network Extensible Markup Language Version 3.0 Linksys SPA Provisioning Guide A-3
  • Cisco SPA2102-AU | Provisioning Guide - Page 76
    Appendix A Acronyms Linksys SPA Provisioning Guide A-4 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 77
    access-Customers have direct access to the long-distance provider via a special circuit (T1 or private lines). The circuit is hardwired from the customer site to the POP and does not pass through the LEC switch. The dial tone is provided from the long-distance carrier. Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 78
    customer responsibilities begin. Direct Inward Dialing (DID)-Allows an incoming call to bypass the attendant and ring directly to an extension. Available on most PBX systems and a feature of Centrex service. Dual Tone Multifrequency (DTMF)-Better known as the push button keypad. DTMF replaces dial
  • Cisco SPA2102-AU | Provisioning Guide - Page 79
    : Parallel/Sequential "" ; "" ; "0" ; # options: 0/1/2/3 "" ; "" ; # *** Configuration Profile Provision_Enable Resync_On_Reset Resync_Random_Delay Resync_Periodic Resync_Error_Retry_Delay Forced_Resync_Delay "Yes" ; "Yes" ; "2" ; "3600" ; "3600" ; "14400" ; Linksys SPA Provisioning Guide C-1
  • Cisco SPA2102-AU | Provisioning Guide - Page 80
    PORT$PATH" ; Log_Resync_Success_Msg $SCHEME://$SERVIP:$PORT$PATH" ; Log_Resync_Failure_Msg "Yes" ; "Yes spa$PSN.cfg PN $MAC -- Requesting resync "$PN $MAC -- Successful resync "$PN $MAC -- Resync failed: $ERR" ; # *** Firmware Upgrade *** SIP Timer Values (sec) Linksys SPA Provisioning Guide C-2
  • Cisco SPA2102-AU | Provisioning Guide - Page 81
    Response Status Code Handling NAT Support Parameters Handle_VIA_received Handle_VIA_rport Insert_VIA_received Insert_VIA_rport Substitute_VIA_Addr Send_Resp_To_Src_Port STUN_Enable STUN_Test_Enable "No" ; "No" ; "No" ; "No" ; "No" ; "No" ; "No" ; "No" ; Version 3.0 Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 82
    Mini_Certificate[1] SRTP_Private_Key[1] No # *** Supplementary Service Subscription Call_Waiting_Serv[1] Block_CID_Serv[1] Block_ANC_Serv[1] Dist_Ring_Serv[1] Cfwd_All_Serv[1] Cfwd_Busy_Serv[1] "Yes" ; "Yes" ; "Yes" ; "Yes" ; "Yes" ; "Yes" ; Linksys SPA Provisioning Guide C-4 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 83
    Idle_Polarity[1] Caller_Conn_Polarity[1] Callee_Conn_Polarity[1] "Forward" ; # options: Forward/Reverse "Forward" ; # options: Forward/Reverse "Forward" ; # options: Forward/Reverse # *** Call Forward Settings Cfwd_All_Dest[1] Cfwd_Busy_Dest[1] Version 3.0 Linksys SPA Provisioning Guide C-5
  • Cisco SPA2102-AU | Provisioning Guide - Page 84
    " ; "No" ; # *** Distinctive Ring Settings Ring1_Caller[1] Ring2_Caller[1] Ring3_Caller[1] Ring4_Caller[1] Ring5_Caller[1] Ring6_Caller[1] Ring7_Caller[1] Ring8_Caller[1] # *** Ring Settings Default_Ring[1] ! "1" ; # options: 1/2/3/4/5/6/7/8 Linksys SPA Provisioning Guide C-6 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 85
    SPA Configuration New VM Available" ; # options: New VM Available/New VM Becomes Available/New Password[2] Use_Auth_ID[2] Auth_ID[2] Mini_Certificate[2] SRTP_Private_Key[2] No # *** Supplementary Service Subscription Call_Waiting_Serv[2] "Yes" ; Version 3.0 Linksys SPA Provisioning Guide
  • Cisco SPA2102-AU | Provisioning Guide - Page 86
    Enable_IP_Dialing[2] "No" ; # *** FXS Port Polarity Configuration Idle_Polarity[2] Caller_Conn_Polarity[2] Callee_Conn_Polarity[2] "Forward" ; # options: Forward/Reverse "Forward" ; # options: Forward/Reverse "Forward" ; # options: Forward/Reverse Linksys SPA Provisioning Guide C-8 Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 87
    Appendix C Example SPA Configuration Profile Version 3.0 # *** Call Forward Settings Cfwd_All_Dest[2] Cfwd_Busy_Dest[2] Cfwd_No_Ans_Dest[2] Cfwd_No_Ans_Delay[2] 20" ; # *** Selective Call Forward Settings Cfwd_Sel1_Caller[2] Cfwd_Sel1_Dest[2] Cfwd_Sel2_Caller[2] Cfwd_Sel2_Dest[2]
  • Cisco SPA2102-AU | Provisioning Guide - Page 88
    Appendix C Example SPA Configuration Profile # *** Ring Settings Default_Ring[2] ! "1" ; # VMWI_Ring_Policy[2] "New VM Available" ; # options: New VM Available/New VM Becomes Available/New VM Arrives ; # *** Distinctive Ring/CWT Pattern Names C-10 Linksys SPA Provisioning Guide Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 89
    SPA Configuration Profile Version 3.0 Ring1_Name Ring2_Name Ring3_Name Ring4_Name Ring5_Name Ring6_Name Ring7_Name Ring8_Name "Bellcore-r1" ; "Bellcore-r2" ; "Bellcore-r3" ; "Bellcore-r4" ; "Bellcore-r5" ; "Bellcore-r6" ; "Bellcore-r7" ; "Bellcore-r8" ; # *** Ring and Call Waiting Tone Spec
  • Cisco SPA2102-AU | Provisioning Guide - Page 90
    Appendix C Example SPA Configuration Profile CID_Act_Code )/DTMF(Denmark)/ETSI DTMF/ETSI DTMF With PR/ETSI DTMF After Ring/ETSI FSK/ETSI FSK With PR(UK) FXS_Port_Power_Limit "3" ; # options: 1/2/3/4/5/6/7/8 Protect_IVR_FactoryReset "No" ; C-12 Linksys SPA Provisioning Guide Version 3.0
  • Cisco SPA2102-AU | Provisioning Guide - Page 91
    256-bit encryption 1-2 A access initial and permanent 1-4 access control 1-5 Admin account 1-5 administration web server 1-4 Analog Telephone Adapters 5-vii Apache 1-14 A through P macro 4-7 attackers protecting SPA from 1-9 authentication certificates 1-9 authorities, certificate 1-9 automatic
  • Cisco SPA2102-AU | Provisioning Guide - Page 92
    4-9 error codes 4-9 Ethernet packet analyzer 1-11 explicit profile encryption 1-12 EXTIP macro 4-8 F factory default configuration 1-5 firmware release 2.0 1-2 firmware upgrades 1-2 log messages 1-15 Firmware Upgrade section 4-4 Forced_Resync_Delay parameter 4-3 FQDN redundant provisioning servers
  • Cisco SPA2102-AU | Provisioning Guide - Page 93
    N NAT devices ATAs with 1-2 O open (XML-style) format 1-5 OpenBSD, SPC for 1-6 OpenSSL software package 1-11 OpenSSL utility 1-13 P PAPT2T 5-vii password protection 1-5 PATH macro 4-9 Perl language tools 1-11 permanent access 1-4 plain-text format 1-5 PN macro 4-8 PORT macro 4-9 premium features 1-
  • Cisco SPA2102-AU | Provisioning Guide - Page 94
    obtaining 1-13 server configuration, troubleshooting 1-11 SERVIP macro 4-8 SERV macro 4-8 setup, provisioning 1-10 signing root authorities 1-9 SN macro 4-8 software tools 1-11 SPA1001 5-vii SPA2102 5-vii SPA3102 5-vii SPA9000 5-vii SPA900 Series IP phones 5-viii SPA provisioning flow 1-6 SPC 1-5 SP
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94

Corporate Headquarters
Linksys
121 Theory Drive
Irvine, CA 92617
USA
Tel: 949 823-1200
800 546-5797
Fax: 949 823-1100
Linksys SPA Provisioning Guide
Version 3.0