1. Internet Telephony PBX System
IPX-300 Series
IP PBX and VRT-401 with VPN Application
Copyright © PLANET Technology Corporation. All rights reserved.

2. Case 42: IPX-300 and VIP-254T with VPN Application
We're using the IPX-300, VIP-254T and VIP-480FO to perform the calling party, and via VRT-401 / MH-2001 to establish the VPN connection at each sides.
The VPN device of Headquarters can select the VRT-401 or MH-2001, it bases on the numbers of your branches.
Please refer to the following descriptions and insert proper parameters configurations into the each device for establish the voice communications.
Environment Setting:
Headquarters ( /24)
MH-2001: WAN IP
LAN IP
Branch-A ( /24)
VRT-401_A: WAN IP
LAN IP
Branch-B ( /24)
VRT-401_B: WAN IP
LAN IP

3. Topology

4. VPN Environment setting
VPN Tunnel between Headquarters and Branch-A
MH-2001 settings
Add the WAN Address objects for Branch-A and Branch-B.
To add WAN address objects for Branch-A and B.
Branch-A:
IP Address :
Subnet Mask :
Branch-B:
IP Address :

5. Headquarters VPN setting
VPN Tunnel between Headquarters and Branch-A
MH-2001 VPN settings
Add an IPSec autokey entry for Branch-A
Name:
VPN-1
Remote Gateway
VRT-401_A WAN IP:
Preshared key:
IPSec VPN Parameters
3DES
MD5
Group2
No-PFS
These parameters must match with remote site

6. Headquarters VPN setting
VPN Tunnel between Headquarters and Branch-A
MH-2001 VPN settings
Add an IPSec Tunnel entry for Branch-A
Assign the Local LAN (Headquarters subnet) and Remote LAN (Branch-A subnet)
Select the IPSec Autokey entry for Branch-A

7. Headquarters VPN setting
VPN Tunnel between Headquarters and Branch-A
MH-2001 Policy settings
Add an Outgoing Policy for VPN Tunnel to Branch-A
Destination Address:
Select the Branch1 ( / )
Tunnel:
Select VPN1 tunnel for Branch-A

8. Headquarters VPN setting
VPN Tunnel between Headquarters and Branch-A
MH-2001 Policy settings
Add an Incoming Policy for VPN Tunnel to Branch-A
Source Address:
Select the Branch1 ( / )
Tunnel:
Select VPN1 tunnel for Branch-A

9. Branch-A VPN setting VRT-401_A VPN setting Remote VPN: MH-2001 WAN IP
Local LAN Subnet:
Remote LAN Subnet:
These parameters must match with MH-2001 VPN settings

10. VPN Tunnel between Headquarters and Branch-A
After configuring the VPN settings of MH-2001 and VRT-401, the VPN Tunnel will be established. You can check the status of MH-2001 and VRT-401.
And then the Headquarters and Branch-A can access the resource to each other.

11. Finish VPN setting VPN Tunnel between Headquarters and Branch-B
Repeat above setting procedure for Headquarters and Branch-B.
After you configure it, the Headquarters and Branch-B can also access to each other. Thus, the Branch-A and Branch-B both can access to Headquarters properly.
Now, we can start to configure the VoIP devices, please check following procedure.

12. Login IPX-300 and browse to [Network Setup -> WAN & LAN Setup] page to assign the WAN port as , and LAN port to other network segment.
To assign WAN port as same network segment with MH-2001
IP Address :
Subnet Mask :
Default Gateway : (MH-2001 LAN port IP address)

13. Browse to [Extension Management -> SIP Extension] page, and to create accounts for VIP-480FO and VIP-254T.

14. Browse to [Trunk Management -> Gateway Trunk] page to create the Gateway Trunk for the FXO gateway.
IP : (VIP-480FO IP Address)
Port : 5060 (SIP Port)
Afterward click the Insert to add that

15. Browse to [Trunk Management -> Dialing Rules] page to add the Trunk Group
To add a Dialing Rules for VIP-480FO
Phone NO. : 0
Delete Length : 0
Trunk Group : :5060

16. Browse to [Attendant Number] page to assign a AA extension number for Gateway hotline setting.

17. Browse to [Save & Logout] page
Click on the button to save previous modification and take effect, the system will rebooting, please wait for 50 sec

18. Login VIP-480_H( ) and browse to [Advance Setup ->VoIP Basic] page to setting port number configuration.
VoIP Basic Configuration:
Number :101
Check Reg
Account: 101
Password: 123
Use Public Account: Enable
Check Hunting Member
Port 1, 2 3 and Port 4
This function is when the port 1 be communicating, and it another SIP calls from network will forward this call to other ports automatically.

19. SIP Proxy Setting:
Domain/Realm:
SIP Proxy Server:
/5060
SIP Authentication : Enable
About the IP address please refer to previous topology.
Click the button to complete the VoIP Basic configuration.

20. 27 Browse to [Dialing Plan] page to add the Dialing Plan Number.
Incoming Dial Plan Settings:
Outgoing no: 0 Length of Number: 1 ~ 1
Delete Length: 1
Prefix no.: Null
Destination Telephone Port : 1 27

21. Select the [Hot Line Setting] of gateway to add the Hot Line Number.
Hot Line Number Setting :
Port 1 Number : 555
Port 2 Number : 555
Port 3 Number : 555
Port 4 Number : 555
Click on the button to complete the modification.
Click the Save Configuration hyper-link to save the whole parameters and then click the Reboot to restart system.

22. Setup VIP-480FO_A and VIP-480FO_B
Login to VIP-480FO_A ( ) & VIP-480FO_B ( )
Repeat the above procedures to setup the VIP-480FO_A & B accounts number (201 & 301) , and register to IPX-300 ( )

23. Login VIP-254T and browse to [Network -> LAN Settings] page, assign the IP Type to DHCP Client for obtaining IP from VRT-401.

24. Browse to [SIP Settings -> Service Domain] page to assign registration account.
Active: ON
Display Name : 100
User Name : 100
Register Name : 100
Register Password : 123
Proxy Server :

25. Browse to [Phone Book -> Speed Dial Setting] page to add speed dial number 0

26. Browse to [Save & Reboot] page to save and reboot machine

27. Setup VIP-480FO_A and VIP-480FO_B
Login to other VIP-254T ( & )
Repeat the above procedures to setup the accounts number (200 & 303) , and register to IPX-300 ( )

28. Dialing Procedures:
A. Headquarter site
1. VIP-254T(Ext.100) pickup the handset and hearing a dial-tone, then to input a number 0#
2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line
3. To input a local phone number call to User A, such as
B. Branch A site
1. VIP-254T(Ext.200) pickup the handset and hearing a dial-tone, then input a number 201#
2. You will be hear a ring-back tone afterward, and then get a dial-tone form PSTN line.
C. Branch B site
1. VIP-254T(Ext.300) pickup the handset and hearing a dial-tone, then to input a number 301#
D. Internal Call
1. Each VIP-254T call the extension number for internal communications: 100 / 200 / 300

29. E. PSTN incoming call to Headquarter site
1. The User A call the PSTN line number to Headquarter
2. User A will hear the IVR of IPX-300
3. User A dials the extension number talk with VIP-254T: 100
F. PSTN incoming call to Branch A
1. The User A call the PSTN line number to Branch A
2. User A will hear the IVR of IPX-300,
3. User A dials the extension number talk with VIP-254T: 200
C. PSTN incoming call to Branch B
1. The User A call the PSTN line number to Branch B
3. User A dials the extension number talk with VIP-254T: 300
NOTE:
The mentioned parameters and network settings in this sample be carefully modified to meet the real-world applications.