5610 VPNremote discover problem

[teletechman]

I have a IPO 406V2 4.2.23 with a cisco asa5505 that I am trying to connect to, the VPN connects and the tunnel shows in the cisco but the phone does not access the TFTP server and just show discover. I have had the h245 and 323 inspect disabled I have also hard coded the IP address of the IPO and the file server(TFTP) which is the VM server with Solar Winds TFTP server. Been at this for 3 days and am going nuts help.
Mike

 

[Bas1234]

Does the tftp server has a gw addr, or try the asa as gw.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[teletechman]

I'm not sure where you are talking about, in the IPO I have 2 IP route set up testing this,
1)
Address 0.0.0.0
mask 255.255.255.0
gateway 10.0.0.1 the ASA5505
dest Lan1
2)
Address 172.17.2.0 set up in the ASA for the VPN phone pool
mask 255.255.255.0
gateway 10.0.0.1
dest Lan1
I don't see a way of changing anything in the TFTP server.

 

[mlaurence]

What do you see concerning H323 Registration requests within Monitor?

Cisco-CCNA; Avaya- ACSS

 

[Bas1234]

Who is the tftp server? IP406 or do you have a separate server?

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[teletechman]

@Mlaurence I see no h323 traffic in the monitor.
@Bas1234 the TFTP server is the VM box with Solar winds free TFTP server install we can manually download from the TFTP server via the VPN connection with a PC and TFTP request so I know it has connect.
Mike

 

[teletechman]

Well Gentlemen it is 5 O'Clock and I think I deserve a beer so I will get back to you all in the morning. Enjoy

 

[teletechman]

Anyone got anymore ideas about this?

 

[teletechman]

Anyone connect a ASA5505 to a VPNremote phone 5610, I am having it stuck in discovery, vendor TS said that they can't help me and if I wanted to use a block of time they would push it up to Avaya. My router guy is saying it is setup correctly but I can't ping the phone from the VM server which is the TFTP server.
Mike

 

[Bas1234]

I have them working on different ASA's

Used;
IKE/IKE2 3DES/MD5/DH2
IKE Xchg Mode Agressive
Remote Net 0.0.0.0/0
Cisco Xauth with PSK
Cert Ex/DN disabled
Copy TOS no
File srvr IPO
Conn Check Always
Qtest Disabled
VPN start mode Script.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[teletechman]

unique thing about this is the fact that we tried the phone on our office network and it works, through a Sonicwall to the ASA5505 across a PRI circuit. But when we try it on the shop network through a ASA5505 to the ASA5505 across a cable network it hangs on discovery. My router guy says this does not make sense since it is an ecrypted tunnel and should not block anything on the outgoing side.
Mike

 

[amriddle01]

Data guys love the word "should" problem is there is a big difference between should and does

http://www.ipoffice.tel

 

[Bas1234]

@teletechman, could it be that the local network range from the main site is in the same range as the remote vpn site?

most likely 192.168.1.0/24? if so, change it or put an extra router with Lan/Wan between it.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[Bas1234]

that extra router needs to be at the remote site and the wan in a different network.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[teletechman]

@Bas1234 the remote site which is local to me is 172.17.30.xxx the main site which is remote to me is 172.17.2.xxx and the IPO is on a 10.0.0.xxx LAN. The office LAN it works on which is local to me is 192.168.101.60 not sure what is causing it to block on the shop network but I am trying it a home tonight and see if I have any problems.