Recent Posts

Pages: [1] 2 3 ... 10
1
Introduction and Announcements / Hello World
« Last post by rikko on Today at 11:40:25 AM »
Hello fellow mitelians,

I hail from around the world, working for a moving hotel. :) My experience is respectable with Ericsson systems, although for a decade now I'm pocking fingers in 3300. Recently, company had downsized, and person who got the boot was the PABX admin. Somebody had to take over, so here I am. Formally educated in telecom, I can find my way around, but out of necessity I must level my game up.

Thank you

2
MiVoice Office 250/Mitel 5000 / Re: 6940w phones with phone manager
« Last post by lundah on Today at 11:09:43 AM »
You may need updated firmware for the 6940w's, you'd have to check the MCS documentation on how to apply the firmware update.
3
The engineering guidelines for the MBG on edocs.mitel.com list all of the required ports, as well as recommendations for deploying in a DMZ environment.
4
As far as I know TFTP is the only transfer protocol supported. In order for malicious firmware to be injected, the TFTP server would have to allow PUT (upload) access, which I don't believe the MBG allows, it allows GET (download) transactions only. In addition, you could block UDP 69 at the firewall which would force using the backup port of UDP 20001.
5
Yes I did, are they considered the best practice then?
6
doesn't hackers usually use the tftp protocol to gain access to servers for this case which is the MBG server and why tftp is usually not considered safe to allow through the firewall.
7
MiVoice Office 250/Mitel 5000 / Re: 6940w phones with phone manager
« Last post by thenewguy on Today at 10:20:38 AM »
I just reread my post, it's a little misleading.   I have a bunch of 6940s working on this system.  However when I try to use the 6940w it will not come up.  I can take a non W phone and it will work on the extension.    I know I had run into a software issue with bringing up W phones on a 3300 system on older software.  I figure this is the same thing. 
8
I don't... honestly I find the best way to use the MBG is the way it was intended, with two interfaces, one on the LAN and one directly on the WAN. I don't have any customers doing it any other way.

That said, pretty sure the process is well documented that tells you what ports, etc need to be open/mapped... have you checked the docs and knowledge base?
9
What is your concern with the firmware using an unsecure protocol? The phone downloads the firmware and verifies the checksum before applying it, there isn't any real security concern here...
10
What would your best practice for setting up firewall rule for the MBG???
Pages: [1] 2 3 ... 10