Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

5610 VPNremote discover problem

Status
Not open for further replies.

teletechman

Technical User
Aug 27, 2008
1,681
US
I have a IPO 406V2 4.2.23 with a cisco asa5505 that I am trying to connect to, the VPN connects and the tunnel shows in the cisco but the phone does not access the TFTP server and just show discover. I have had the h245 and 323 inspect disabled I have also hard coded the IP address of the IPO and the file server(TFTP) which is the VM server with Solar Winds TFTP server. Been at this for 3 days and am going nuts help.
Mike
 
Does the tftp server has a gw addr, or try the asa as gw.

Avaya_Red.gif

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool )
______________________________________
 
I'm not sure where you are talking about, in the IPO I have 2 IP route set up testing this,
1)
Address 0.0.0.0
mask 255.255.255.0
gateway 10.0.0.1 the ASA5505
dest Lan1
2)
Address 172.17.2.0 set up in the ASA for the VPN phone pool
mask 255.255.255.0
gateway 10.0.0.1
dest Lan1
I don't see a way of changing anything in the TFTP server.
 
What do you see concerning H323 Registration requests within Monitor?

Cisco-CCNA; Avaya- ACSS
 
Who is the tftp server? IP406 or do you have a separate server?

Avaya_Red.gif

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool )
______________________________________
 
@Mlaurence I see no h323 traffic in the monitor.
@Bas1234 the TFTP server is the VM box with Solar winds free TFTP server install we can manually download from the TFTP server via the VPN connection with a PC and TFTP request so I know it has connect.
Mike
 
Well Gentlemen it is 5 O'Clock and I think I deserve a beer so I will get back to you all in the morning. Enjoy
 
Anyone connect a ASA5505 to a VPNremote phone 5610, I am having it stuck in discovery, vendor TS said that they can't help me and if I wanted to use a block of time they would push it up to Avaya. My router guy is saying it is setup correctly but I can't ping the phone from the VM server which is the TFTP server.
Mike
 
I have them working on different ASA's

Used;
IKE/IKE2 3DES/MD5/DH2
IKE Xchg Mode Agressive
Remote Net 0.0.0.0/0
Cisco Xauth with PSK
Cert Ex/DN disabled
Copy TOS no
File srvr IPO
Conn Check Always
Qtest Disabled
VPN start mode Script.

Avaya_Red.gif

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool )
______________________________________
 
unique thing about this is the fact that we tried the phone on our office network and it works, through a Sonicwall to the ASA5505 across a PRI circuit. But when we try it on the shop network through a ASA5505 to the ASA5505 across a cable network it hangs on discovery. My router guy says this does not make sense since it is an ecrypted tunnel and should not block anything on the outgoing side.
Mike
 
@teletechman, could it be that the local network range from the main site is in the same range as the remote vpn site?

most likely 192.168.1.0/24? if so, change it or put an extra router with Lan/Wan between it.

Avaya_Red.gif

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool )
______________________________________
 
that extra router needs to be at the remote site and the wan in a different network.

Avaya_Red.gif

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool )
______________________________________
 
@Bas1234 the remote site which is local to me is 172.17.30.xxx the main site which is remote to me is 172.17.2.xxx and the IPO is on a 10.0.0.xxx LAN. The office LAN it works on which is local to me is 192.168.101.60 not sure what is causing it to block on the shop network but I am trying it a home tonight and see if I have any problems.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top