9608 VPN

[critchey]

I have a 9608 phone VPN'ing back to a R8.1(95) system that is getting stuck on discovering. The phone is successfully navigating the VPN tunnel, connecting, and I even see the traffic from the phone and the system responding to the request in monitor. However, I just keep seeing the phone asking and the IPO responding but it sure seems like the phone is not getting the response from the IPO.

Sonicwall firewall is used for the VPN, and of course, the Sonicwall people are blaming the phone system... I can't for the life of me think of a way this could be the IPO causing the issue. I do know the IPO can NOT ping the phone when it is VPN'ed but the Sonicwall can ping the phone. It is weird the phone is getting traffic from the phone without being able to ping it. I see in monitor the IPO is using port 1719 but the phone is using ports in the 49000 range... so my best guess is port 1719 is being blocked or misrouted.

If anyone has anything I can try via the IPO I will be happy to try. If anyone has run into this issue and has figured it out I would love some help here.

The truth is just an excuse for lack of imagination.

 

[Qzwsa]

What are your IP routes set to? That's where I would start.

- Qz

 

[critchey]

Have a default IP route:
IP 0.0.0.0
Subnet 0.0.0.0
Gateway 10.10.10.1 (Sonicwall internal IP)
Destination LAN2 (they had issues with LAN port so using WAN port)

Since both the phone's IP and the IPO IP are on the same subnet of 10.10.10.X I wouldn't think an IP route would even matter but this should work.

The truth is just an excuse for lack of imagination.

 

[Westi]

The VPN phone should not be on the same network.
The IPO will not send the packages to the router as it thinks it is local.

Make the VPN range for the phone 10.10.11.0 then you should be good

Joe
FHandw, ACSS, ACIS

"Dew knot truss yore Spell Cheque

 

[critchey]

@Westi thank you that makes perfect sense to me. I will ask them to change the subnet and see if that fixes the issue and report back.

The truth is just an excuse for lack of imagination.