Avaya IPO and Remote Phones 2

[chazrc]

Can someone provide a list of ports that need to be forwarded to get the 1616 phone working remotely? I am on the new 8.0.16 release. Phone says Discover and the Public IP on the screen.
Also, I can see the phone trying to login or lat least mention of that extension in monitor, but no luck yet.

Ping is on on the router that the IPO is on, and we set the h.323 extension up, and allowed remote extensions in the user profile.

Thanks,

Chaz

 

[IPmonkey]

From the Manager help files, although I'm sure I had read it somewhere else aswell. Thanks for the Star!

H323 Remote Extn Enable: Default = Off. Software level = 8.0+.
The system can be configured to support remote H323 extensions in the case where NAT is used in the connection path. This could be the case where the IP Office is located behind a corporate NAT/Firewall router and/or the H323 phone is located behind residential NAT enable router. The use of this option and the interaction and configuration of external third party elements is beyond the scope this help file. When this setting is enabled, the Allow Remote Extn option is available on the Extension | VoIP form of those extensions that are remote. The LAN's Network Topology settings are used to control address translation between the remote extensions location and the system. It also makes visible the configuration of the RTP Port number Range (Remote Exten) settings below.

· This option is not supported if the Firewall/NAT Type (System | LAN1 | Network Topology) is set to Symmetric Firewall or Open Internet.

· Currently only 9600 Series phones are supported as H323 remote extensions.

 

[chazrc]

So the 9600s phones will work without a VPN like my 9630G

And the other Avaya phones require a VPN? Just trying to make sense of the different Avaya phone types because we are a new Dealer.

My next task is to get the Softphone working remotely.

Thanks
Chaz

 

[gwebster]

@chazrc - "9600s phones" is a generic term for all of the models which start with "96".

 

[bonus99]

Hello everyone,

Sorry to Hijack this thread but it looks like problem solved for chazrc and I wanted to bring my issue in as it is very similar and I really am at the end of my tether on this one.

Any help will be very much appreciated indeed!

I have R8 without the pref edition so can have the 2 x remote H.323 only which have been configured and checked and double checked to be configured correctly.

Have a 9620L telephone with the latest bin file

Phone is configured correctly and I can see the 1719 port forward on the firewall.

However, the phone gets to "registering" and then flips back to discover!

The firewall is a Zywall USG 50 and I have even had Zyxel support look at the config of the firewall and say it is OK.

I cannot get STUN to work (does it have to?)

I set the Network Topology in LAN 1 to the outside IP and the firewall type to unknown, the public port is "0" (is this right?)

The config has been checked with my normal support route and passed as OK.

I really do not know what else to try.

Any ideas?

Thanks for reading this far!




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[IPmonkey]

What does system monitor display when the phone is registering?
Could the system be missing an IP Route?

 

[bonus99]

Thanks IPmonkey.

There is an IP route in their although I was not sure that these phones needed that?
Cannot see anything on the monitor which would point to the firewall, I only see 1719 forward on the firewall and nothing else.

I will go back to Zywall (BTW - excellent support from Zxyel, hardly any wait time and their guys just Teamviewer in and check your configuration)

Cheers

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[tlpeter]

1719 is not enough.

You need 1719, 1720 and 49152 till 53247 forwarded.


BAZINGA!

I'm not insane, my mother had me tested!

 

[bonus99]

Hi tlpeter,
Thanks for your reply.

I have 1719-UDP
1720-TCP
49152 -53247 -UDP
all set to forward to the IP Office

However, in the firewall log, I only see forward to 1719, here is an example from the log:

2012-02-28 09:20:45
notice
Firewall
priority:2, from WAN to ZyWALL, UDP, service AVAYA-IP-Phone, ACCEPT [count=3]
xxx.xxx.xxx.xxx:17853
10.1.2.2:1719
ACCESS FORWARD

Cheers

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[amriddle01]

I suspect it's a routing issue, what is the IP route that you say is in the system? It may not be correct

 

[bonus99]

Thanks Andrew.

The local IP address of the telephone is 192.168.9.44
The IP route is as follows:
192.168.9.0
255.255.255.0
172.20.100.254
LAN1

Cheers


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[amriddle01]

Yes, that isn't doing anything and isn't required. 192.168.9.0 is local traffic so does not need a route to be handled, also even if you needed that route it wouldn't work as 172.20.100.254 is not a valid gateway when the system is 192.168.9.44, it would also need to be a 192.168.9.x address.

When you find out what the actual gateway address is for that network the route you will need is as follows:

IP address - 0.0.0.0
IP mask - 0.0.0.0
Gateway - 192.168.9.X (where X is the actual gateway)

That should take care of it

 

[amriddle01]

Oh hang on, sorry misread, what address is the system on? I thought you said the system address was 192.168.9.44...duh

 

[amriddle01]

I suspect the issue is this is a remote phone not a VPN phone, so the traffic will be coming from an external routable address not the 192.168.9.x address range as that isn't routable on the net, do you have a 0.0.0.0 route in the system? If not you need one

 

[bonus99]

I did have one, however, it was going out on LAN2. I have put a route in for LAN2 for the SIP connection and also a 0.0.0.0 0.0.0.0 172.20.100.254 (gateway) LAN1

I Will test when I have fixed the issue with the 9620L test phone, which will not allow me in on the CRAFT access and just goes to restarting! And it is static IP

Thanks for your advice as always

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[tlpeter]

Do you remote worker turned on on the system tab?
Do you have it enabled on the extension?
Do you have it enabled for the user?


BAZINGA!

I'm not insane, my mother had me tested!

 

[bonus99]

Yes,yes and yes.
I followed the guide word for word.

Latest is that I managed to get a 5602SW to log on to the switch and make a call out but no speech. I know this is off on a tangent somewhat but, I tried it as my 9620L is not letting me in on the CRAFT to configure.

The 9620 tries to register but just says "PHONE" in the top left corner



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[bonus99]

Some progress

I plugged my 9620L in a different LAN and managed to get in on CRAFT - really strange

I reset the phone and input the addresses etc and now have 2 x phones connected with working display and can call each other but NO VOICE

Looks like a CODEC issue now.

Almost there!

Will be celebrating if I get this working tonight

Any idea on the lack of voice?

Will have a hunt for the answer in the forums

Cheers


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I don't think I know anything.
I am never able to help anyone!

 

[Bas1234]

1720-TCP needs to be UDP if im not mistaken.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[amriddle01]

Docs say 1720 TCP, but doing both can't hurt

No voice means blocked ports/misdirected traffic normally

 

[Bas1234]

The manager help doesn't :S

1719

H.323 RAS
UDP
H.323 Status. VoIP device registering with the system.

1720

H.323/H.245
UDP
H.323 Signalling. Data to a registered VoIP device.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________