Authenticatin error in a H323

[AlfonsoSF]

Hi

I have a very silly question. Some easy task is giving me problems,
I am trying to conect a 9608G to remote IPO500V2 R11.1.1.0.0).
First of all I try to connect using the site to site VPN we have. (we will set up phone vpn after).

Of course, we can ping one - each other, manage the IPO from the other side , etc.
In the ipo, we have the H323 extension created with a well-known code.
The user is also created as usual with the same well-known code. Powr-user and end-point licenses availables.
The phone is in h323 signaling and load the software from the file server (the ipo) and in the 6.8304 release

When we try log in from the phone in the IPO, and ext and pass are given we get "Autentiction error". The password is the correct.

At the sismon, with only H323 tics we get :

113200293mS H323Evt: Recv GRQ from 192.168.xx.188:49301
113200293mS H323Evt: e_H225_AliasAddress_dialedDigits alias
113200294mS H323Evt: found number <300>
113200357mS H323Evt: H323PhoneUser Operational: Src=192.168.xx.188:54706 Dst=10.10.xx.200:1300
115275952mS H323Evt: H323PhoneUser TLSOperational: Src=192.168.xx.188:54706 Dst=10.10.xx.200:1300 Resumed=false

Where 192.168.xx.188 is the phone, 300 the extension and 10.10.xx.200 the ipo (lan2. We are in a vpn and lan2 is connected directly to the soniwall )

That is a many times done task, but i look for a mistake, times and times and I see no mistake.

Any idea ??

Thanks a lot !!

 

[teletechman]

Try turning off the TLS for the H323 extensions and try to connect with TCP. Sounds like you might have a cert issue.
Mike

 

[AlfonsoSF]

At the IPO side, is "same that system(deactivated)"

At the phone side, in debuf, I can see H323 signaling over TLS = on but it's view only.
How can I modify this ?

 

[AlfonsoSF]

Finally it works moving to SIP.

 

[derfloh]

But 9600 series Phone need a third party IP endpoint license to work and will have only basic functionality.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[tac84]

I know it sounds stupid, but make sure the H.323 Gatekeeper hasn't accidentally disabled. I've had that happen when I removed all active H323 extensions and replaced them with J series SIP phones. Inbuilt security feature I think.

Check System | LAN 1/2 | H323 Gatekeeper enable and H323 remote extn enable.

Thanks, Tim
Adelaide, Australia