9608 VPN handset issues - Discover and failing on TAR file

[Manie3]

Hi

Currently have a 96XX handset that is configured for VPN. Have an ipo on 9.19

The firewall is a sonicwall which has been configured to allow the VPN.

This is the current configuration i have on the phone.

VPN Phone Setup


Setting Entry

General
VPN Enabled
VPN Vendor Other
Gateway Address

Auth Type
Auth Type PSK with Xauth

User Cred
VPN User Type Any
VPN User XXX

Password Entry
User Password XXXX

IKE PSK
IKE ID (Group Name) GroupVPN
Pre-Shared Key (PSK) XXXXX

IKE Phase 1
IKE ID Type KEY_ID
IKE Xchg Mode Aggressive
IKE DH Group 2
IKE Encryption Alg 3DES
IKE Auth Alg SHA-1
IKE Config Mode disabled

IKE Phase 2
IPSec PFS DH Group No PFS
IPsec Encryption Alg 3DES
IPsec Auth Alg SHA-1
Protected Network 192.168.0.0/24

IKE Over TCP
IKE Over TCP Auto


The phone obtains the tar file to upgrade remotely then suddenly fails. Once this happens The phone gets to contacting call server then sits in discover mode.

Any tips on going forward.

Thank you

 

[Westi]

if it can't even connect to the phone system then you most likely have a routing issue of some sort

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[Manie3]

Hi Joe

That's what I thought. The firewall needs either a static route added to allow the phone through alternatively set up dhcp over vpn so the user can take the phone anywhere and plug it in.

 

[Manie3]

Just to let you know that changing the:

IKE Phase 1
IKE ID Type KEY_ID

To

IKE Phase 1
IKE ID Type FQDN

resolved the issue

Thank you

ACSS (Manieee on a new account)