Release Ntes fr Avaya Scpia PathFinder Firewall Traversal Versin 8.3.7.0.4 Fr Slutin 8.3.7 January 2017
2000-2017 Avaya Inc. All intellectual prperty rights in this publicatin are wned by Avaya Inc. and are prtected by United States cpyright laws, ther applicable cpyright laws and internatinal treaty prvisins. Avaya Inc. retains all rights nt expressly granted. All prduct and cmpany names herein may be trademarks f their registered wners. This publicatin is AVAYA Cnfidential & Prprietary. Use pursuant t yur signed agreement r Avaya plicy. N part f this publicatin may be reprduced in any frm whatsever r used t make any derivative wrk withut prir written apprval by Avaya Inc. N representatin f warranties fr fitness fr any purpse ther than what is specifically mentined in this guide is made either by Avaya Inc. r its agents. Avaya Inc. reserves the right t revise this publicatin and make changes withut bligatin t ntify any persn f such revisins r changes. Avaya Inc may make imprvements r changes in the prduct(s) and/r the prgram(s) described in this dcumentatin at any time. If there is any sftware n remvable media described in this publicatin, it is furnished under a license agreement included with the prduct as a separate dcument. If yu are unable t lcate a cpy, please cntact Avaya Inc and a cpy will be prvided t yu. Unless therwise indicated, Avaya registered trademarks are registered in the United States and ther territries. All registered trademarks recgnized. Fr further infrmatin cntact Avaya r yur lcal distributr r reseller. Release Ntes fr Avaya Scpia PathFinder Firewall Traversal Versin 8.3.7.0.4, January 2017 http://supprt.avaya.cm
Table f Cntents What s New... 3 PathFinder Platfrm Supprt... 3 Integrating with Other Cmpnents... 4 Upgrading t this release... 5 Upgrading frm Versin 7.7, 8.2 r 8.3 t Versin 8.3.7.0.4... 5 Installing/Upgrading the PathFinder Client... 6 Reslved Issues... 6 Knwn Issues... 6 General Deplyment Tips... 8 What s New This dcument cntains late breaking r ther infrmatin that supplements these Scpia PathFinder cmpnents: PathFinder Server package versin 8.3.7.0.4 PathFinder Client package versin 8.3.0.0.6 (Optinal) PathFinder 8.3.7.0.4 is a maintenance release. It brings the fllwing enhancements: Reslved H.460 endpint registratin failure when main GK changes GK ID n the fly Reslved t many pen files issue (navaya) Reslved registratin/unregistratin lp between an XT and a PathFinder Server n XT rebt (specific versin XT) Reslved Restricted Access List issue PathFinder Platfrm Supprt PathFinder current servers (P/N 55678-00610/55678-00810/55678-30610 r 55678-00620/55678-00820/55678-30620) and the servers they replaced (P/N 55678-00604/55678-00804/55678-30604 r 55678-00603/55678-00803/55678-30603) can be upgraded t versin 8.3.5.0.1. The fllwing upgrade paths are supprted: Upgrade supprt: frm versin 7.7, 8.2 r 8.3 t versin 8.3.7.0.4 Dwngrade supprt: frm versin 8.3.7.0.4 t versin 7.7, 8.2 r 8.3 PathFinder servers based n lder hardware (P/N 55678-00601 r P/N 55678-00602) cannt be upgraded t versin 8.3 and cntinue t use the previus supprted versins. Release Ntes fr Avaya Scpia PathFinder Firewall Traversal What s New 3
PathFinder servers based n the new hardware (P/N 55678-00610, 55678-30610, 55678-00810, 55678-00620, 55678-30620, 55678-00820) can nly run versin 8.3 and abve. Integrating with Other Cmpnents PathFinder versin 8.3.7.0.4 is cmpatible with the fllwing Scpia prduct versins: Avaya Scpia Management versin 8.3.7.0.22 Avaya Scpia Elite 5000 versin 7.7.10.1 Avaya Scpia Elite 6000 versin 8.3.7.8 Avaya Scpia Desktp Server versin 8.3.700.034 Avaya Scpia XT5000 versin 8.3.7.51 Avaya Scpia XT7100 versin 8.3.7.51 Avaya Scpia XT4200 versin 8.3.7.51 Avaya Scpia XT4300 versin 8.3.7.51 Avaya Scpia XTE240 versin 8.3.7.51 Avaya Scpia XT1000 versin 2.5.416 Avaya Scpia VC240 versin 2.7.1.7 Avaya Scpia Vide Gateway versin 7.7.0.30.13 Avaya Scpia Streaming and Recrding versin 8.3.5.0.6 Avaya Scpia Enhanced Cmmunicatin Server (ECS) versin 8.3.0.121.0 The PathFinder Server versin 8.3.7.0.4 is cmpatible with the fllwing PathFinder Client versins: PathFinder Client V7.1.2.0.3 PathFinder Client V7.1.2.0.1 PathFinder Client V8.2.1.0.3 PathFinder Client V8.3.0.0.6 PathFinder versin 8.3.7.0.4 is interperable with the fllwing endpints and firewalls: H.460 Endpints: Avaya Scpia VC240 Avaya Scpia XT1000 Avaya Scpia XT4200 Avaya Scpia XT4300 Avaya Scpia XT5000 Avaya Scpia XTE240 Avaya Scpia XT7100 TANDBERG MXP Series TANDBERG Edge Series TANDBERG C Series Release Ntes fr Avaya Scpia PathFinder Firewall Traversal Integrating with Other Cmpnents 4
TANDBERG EX 90 TANDBERG SX 20 Aethra X5 Aethra X7 Sny PCS-1 Sny PCS-TL50 Sny PCS-XG80 Sny PCS-G70 LifeSize v4.1 r higher Plycm HDX Series v2.5.1 and v2.6 Nn-H.460 Endpints: Plycm VSX Series Plycm PVX 8.0.1/8.0.2 Plycm VS 4000 Sny PCS-G50 Firewalls: CheckPint Juniper Micrsft ISA Upgrading t this release Upgrading frm Versin 7.7, 8.2 r 8.3 t Versin 8.3.7.0.4 Befre yu begin When upgrading frm versin 7.7 t versin 8.3.7.0.4, a new license is required. Use the Avaya licensing prtal t retrieve a new license. Yu d nt need a new license when upgrading frm versin 8.2 r 8.3.x t versin 8.3.7.0.4 T upgrade frm versin 7.7, versin 8.2 r versin 8.3.x t versin 8.3.7.0.4, fllw this prcedure: 1. Dwnlad the new upgrade file t yur cmputer. 2. Use WinSCP t transfer the file t the Scpia PathFinder Server: a. Drag the new.pkg update file t the /updates flder in the Scpia PathFinder Server. b. Select Cpy when prmpted. 3. Run PuTTY t cnnect t the Scpia PathFinder Server. 4. Install the update as fllws: Release Ntes fr Avaya Scpia PathFinder Firewall Traversal Upgrading t this release 5
a. Enter 4 in the Main menu t access the System Menu. b. Enter the menu item 2 t upgrade the Scpia PathFinder Server versin. c. Enter the menu item crrespnding t the installatin file yu just transferred t the Scpia PathFinder Server. Fr infrmatin n updating, backing up and restring the Scpia PathFinder Server, see the Deplyment Guide fr Scpia PathFinder Server. Installing/Upgrading the PathFinder Client Befre installing PathFinder Client versin 8.3.0.0.6, uninstall the lder versin (except fr versin 8.2.1.0.3). Fr infrmatin n installing the PathFinder Client n Windws 2000 Prfessinal, Windws 2000 Server, Windws 2003 Server, Windws 2008 Server, Windws XP, Windws Vista, Red Hat 9.0 desktp versin and Red Hat Enterprise Linux ES release 4, see Hw t Install the PathFinder Client chapter in the User Guide fr PathFinder Client. Windws 7 is nw als supprted fr installing and running the PathFinder Client as a nrmal applicatin (see knwn issue sectins when PathFinder Client is installed as a Windws Service). The PathFinder Client can be run n a Virtual Machine as lng as the supprted OSs are respected. Reslved Issues Table 1: List f reslved issues in versin 8.3.7.0.4 Descriptin f issue H.460 endpint registratin failure when main GK changes GK ID n the fly. T many pen files issue, which eventually required t rebt (navaya). Registratin/unregistratin lp between an XT and a PathFinder Server n XT rebt (specific versin XT) Access List issue Knwn Issues Table 2: This sectin details the list f limitatins and issues that remain unreslved in this versin: List f knwn issues in this versin Descriptin f issue Release Ntes fr Avaya Scpia PathFinder Firewall Traversal Reslved Issues 6
Rarely, upn Pathfinder services restart, n "PwerDwn" trap will be sent t the SM. The ECS Call Fallback feature is nt supprted. H.323 Fast Start is nt supprted. H.245 Tunneling in H.225 is nt supprted. Advanced MCU cascading features are nt supprted when meetings are cascaded using the PathFinder Servers. Lw vide quality may be experienced in very high bandwidth, abve 2M, when cnnecting Scpia Elite and Sny XG80 thrugh the PathFinder Server. The gatekeeper displays the call destinatin alias as null and the destinatin type as unknwn when a private endpint calls an unregistered public endpint using its IP address, since the public endpint is nt registered t the gatekeeper. Plycm HDX 9002, HDX 7000 and VSX 7000 d nt wrk prperly when using the H.460 prtcl and the PathFinder Server is set t multiplexing. Plycm HDX ccasinally crashes when calling with H.460 via the PathFinder Server. Plycm HDX FECC ccasinally des nt wrk prperly in MCU cnferences. LifeSize Team 220 FECC ccasinally fails t perate with the PathFinder Server. LifeSize Rm 200 has n Keep Alive fr H.460 cmmunicatins, causing it t unregister during a call, due t timeut. Tandberg C40 FECC des nt perate crrectly in MCU cnferences. Tandberg C20 dual vide ccasinally fails during an MCU cnference. On sme Windws 7 64bit systems, the PathFinder client has t be installed as a nrmal applicatin, nt as a Windws service. When installed as a Windws service, the behavir is nt predictable. It will wrk n sme machines and wn t wrk n sme ther machines. Autmatic lgin t PFS web GUI frm Scpia Management fails when HTTPS is enabled. Release Ntes fr Avaya Scpia PathFinder Firewall Traversal Knwn Issues 7
General Deplyment Tips The fllwing list includes imprtant infrmatin which is relevant t different deplyment aspects: The PathFinder Enterprise Gatekeeper feature requires the ECS t supprt Neighbrs n prts ther than 1719 (because multiple Enterprise Gatekeepers will be delegated by a single PathFinder Server). In additin, the PathFinder Dialing URI feature requires that yu add the PathFinder Server as a Neighbr t the central ECS using the PathFinder Server IP address and prt 1719. When wrking with the Scpia ECS, yu must enable the DHCP envirnment in the zne ptin. If Micrsft Internet Explrer displays new pages incrrectly after the server is upgraded, use the Shift key with the Internet Explrer Refresh buttn t refresh the page. If the PathFinder Client smetimes discnnects frm the PathFinder Server after having been cnnected fr a while, the cnnectin timeut value f yur firewall may be t shrt. Try changing the Keep Alive interval t a smaller value. If the cnnectin is very slw when directly calling an alias which is registered t the gatekeeper in a frmat similar t a DNS name, verify that the DNS cnfiguratin f the PathFinder Server is crrect frm the administratr cnsle. When using High Definitin endpints, we recmmend changing the endpint MTU size t a value smaller than 1500 bytes. Deplying the PathFinder in Dual NIC mde is recmmended nly when the tw NICs are cnnected t different subnets. When installing the PathFinder Client n Windws Vista r n Windws 7 please make sure t cnfigure the native Windws firewall t allw H.323 Endpint registratin and H.323-related traffic. Refer t the Scpia Prt Security Guide fr mre infrmatin. Release Ntes fr Avaya Scpia PathFinder Firewall Traversal General Deplyment Tips 8