Avaya onex Agent over vpn login issues

[annie37]

Hello Team,
Avaya onex Agent 2.5.6 to Avaya CM
Users are not able to login over VPN only locally
can anybody confirm if this is the only ports that we need to open
Port 443 for 1XA to Communicate with one-X Agent Central Management
Port 5222 for XMPP to Avaya Presence Server
Port 1719 UDP/H323 RAS to CM
Port 1720 TCP/H323 Signalling for CM
Port 3268 for Microsoft AD

 

[kyle555]

i'd compare a pcap in the office vs over vpn

MTU maybe? I've seen some apps have very large packets at certain points that cause weird things to happen

 

[avayaguy23]

You are using it as a true soft client? You then need to include all of your gateways

 

[annie37]

yeah I'm not sure about MTU, I thought that this was pointing more like a port issue but, the documentation is not really clear about all the ports need it.
that is correct we are using this as a soft client

 

[kyle555]

pcap inside and out - you'll see what ports its really using

 

[avayaguy23]

You are missing a lot of ports then. You will need to create a firewall group for media gateways. Udp ports 2048 - 65535 bi directional. You will also need to figure out the ports for your CM along with your lsp/ess

 

[annie37]

Thanks, we already have running Avaya one-x Communicator 6.2.6 with no issues but, it looks like the One-x client use a different port range.

 

[avayaguy23]

You sure you aren’t running on your ess? That would def cause a problem.

 

[Stinney]

We've encountered timing issues where if the password for the agent login is more than 4 digits the agent can't log in. If we change the password to 4 digits, they can log in over VPN.

- Stinney

“The man who asks a question is a fool for a minute, the man who does not ask is a fool for life.” - Confucius

 

[annie37]

that is correct.
thanks, we are already using a 4 digits PW for the agent login.