Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

9608 VPN phone 1

Status
Not open for further replies.

telecotek1

Vendor
Nov 13, 2007
390
US
Are these still not working as VPN phones? I thought this issue had been fixed. I have a 9620L works like a champ - 9608 no joy. Debugging on the wan/lan where shows zero traffic coming from my 9608 it's like its not even trying to register the phone even tho the phone hangs at discovering. Not 100% sure what firmware is on my fileserver so maybe (just maybe) this can be resolved with the latest firmware.
 
the ipo is 9.0 not 100% sure what firmware is on my fileserver here in my home office where im staging the vpn phones. So let me try upgrading the phones to the latest 9608 firmware. I'm using a checkpoint 1100 series firewall and it's been a bit of a pain to get this to work. Had to pull a certificate file from the checkpoint and then convert the file then upload it into the phone. The 9620 works and worked reliably for a month not a single hiccup but the 9608 doesn't even send a single packet to register. It may be sending something but it's definitely not showing up in my debugs on the firewall.
 
Upgrade the phones to the latest firmware.
They must be at 6.3 at least.

BAZINGA!

I'm not insane, my mother had me tested!

 
If you are grabbing the latest files from the avaya support portal, make sure that you download the zip file WITHOUT the "U" in the name. The "U" versions have encryption (including VPN) disabled.
 
upgraded the phone to 6.4 and still doesn't work. What a colossal waste of time. that strange thing is the tunnel is up hanging at discover. Like it's not even trying to register event ho it says discovering the ip add of the ipo. Not a peep on the firewall traces from the 9608 - 9620 traces show communication as it should. very closed to throwing these 08's out the window and running them over with my car. [auto] [banghead]
 
You do have an iproute matching the IP address that you gave the phone?

BAZINGA!

I'm not insane, my mother had me tested!

 
yep. I have 2 phones on my desk one is a 9620 (works) the other is a POS9608 that doesn't. I have a default route accepting anything... Nothings worse than staring at the phone while it reboots for the 100th time.
 
You have to use mode config. Are you?
What router do you have?

BAZINGA!

I'm not insane, my mother had me tested!

 
Yes that mode.

BAZINGA!

I'm not insane, my mother had me tested!

 
It wasn't enabled - phone still not registering once enabled tho. Thanks for trying anyway.
 
incase anyone else runs into this problem I tried the following firmware versions on 9608's that didn't work. VPN Tunnel completes but phone wont register. Firewall debug traces show no attempts to register from the local ip of the 9608 phone subsequently the 9620 shows traffic when the same debug command is issued against the local ip of the working 9620L.

9608's Firmware (Didn't work)
6.3.16
6.4.014

Checkpoint 1100 firewall R75.20.69

The phone that works...
9620L 3.2.12A Firmware
 
Clear the phone in the craft menu and reprogram.

Can you offer some insight into your network layout?

turn off the 9620 when you connect the 9608....

ACSS - SME
General Geek

 
@hairless
Pretty typical network - at the location where the IP Office is there Is the connection from the ISP (FIOS 50/50) goes into the WAN Interface of the checkpoint. The checkpoint has a 6 port switch built into it. The IP Office plugs directly into one of the switch ports. The home office has the typical cable modem and the phones are plugged directly into it. I'll mention this but I don't think it really matters - this customer has several site to site vpn tunnels to branch office. I have tried unplugging the 9620 when attempting to activate - I've also cleared the phone and reprogrammed. I'm much stronger at networking then I am at voice these days so I don't think it's networking issue but who knows. Like I said the phone goes into to discover but you don't see any traffic from this phone at all. I have read other folks form older version before the 9608's were officially supported saying that when they ran debugs they would see packets with partial IP address like it chopped off the last octet. I'm not even seeing a dropped or discarded packets - nothing. Like it's not even trying. The one thing that I didn't do is clear the phone after I reflashed the phone to another version. I'll give that another try I guess but I'm pretty burnt on this. I latterly rebooted those damn phones a 100 times. I may just get some 9620 phones and call it a day. All tho I really don't like the button layout on those 9620's.

HQ/IP office location
192.168.7.0/24

Home Office
192.168.1.0/24


 
Have ipo 9.0.5. 4 out of 12 9608 vpn phones have the same issues you are having. 8 out of 12 works. Firewall guy thinks that something is being blocked from the remote site. Did anyone found something new?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top