Avaya 9641g over OpenVPN tunnel

[MightyMrMatt]

I have a client that decided to setup a remote office phone. After banging my head in the wall for a full day trying to get Remote Worker to function, I decided to just set up a VPN site-to-site tunnel and connect the phone that way. The router actually has OpenVPN built into it. I can use it to create a tunnel from the remote office straight to the IPO server. Both sides can ping devices on each other's LANs. However, the phone can't seem to find the Call Server, even though I can ping the IP. Do I need to have certian ports open with OpenVPN for this to work?

 

[IPGuru]

After banging my head in the wall for a full day trying to get Remote Worker to function, I decided to just set up a VPN

Good call, Not only is NAT traversal a security nightmare it is also not very reliable & some of the ports used are blocked by some ISP's

I cant see any major reason why this should not work.

A VPN should not block any ports
Do you have the correct gateway programmed into the handset?
Have you removed the remote worker setting form the users (it s not required when not using NAT Traversal)


Do things on the cheap & it will cost you dear

 

[amriddle01]

Make sure local and remote ranges aren't the same

 

[MightyMrMatt]

Gateway was right and both networks had different IP ranges, but it turns out my tunnel was not up full. I got the tunnel working and the phone is now connecting to the PBX, but when I go to log in the phone, it asks for a Security Code, then I get a message saying "Login failed: No License Available". I enabled Remote Worker on the Extension and it works fine now, but I didn't think I needed the Remote Worker enabled over VPN. Did I miss something?

 

[janni78]

What network is the phone on?
Had an issue with on customer that their network wasn't a private range and that required Remote Worker on the phones even though it was a routed network.

"Trying is the first step to failure..." - Homer

 

[MightyMrMatt]

It's on a private network, run over an Asus router at that office.

 

[amriddle01]

The router may be NATing through the VPN

 

[janni78]

But are they using a private range?

192.168.0.0 - 192.168.255.255
172.16.0.0 - 172.31.255.255
10.0.0.0 - 10.255.255.255

"Trying is the first step to failure..." - Homer

 

[MightyMrMatt]

Yes, it's a 192.168.1.0 IP range.