BMC400 IP Phone Question

[michugana]

We have a Nortel BCM400 phone system with i2002 IP Phones. All but 1 of our IP phones are used internally on our network. We want to start rolling these out to our remote users who are in locations that arent connected to our headquarters via point-to-point vpns.

I started configuring this on our firewall and opened the following ports.

UDP 7000
UDP 20000 to 20255
UDP 28000 to 28255
UDP 51000 to 51200

I setup the phone to connect to the externally exposed ip address that nats to our phone system. The phone establishes a connection to our server just fine.

When i pick up the phone, i dont get a dial tone. However, i can make calls to internal extensions and external numbers. When the calls are answered, I can not hear them and they cannot hear me.

I dont know where to look next. Any help would be appreciated.

Thanks.

 

[TLDuk]

Sorry i`m confused you state you are using a point to point VPN and then state the bcm is behind a nat..

The fault you are describing occurs usually when the ip phone is behind a nat...

Can you just clarify you network topology please

 

[michugana]

All our current working IP phones are coming across point-to-point vpn tunnels from our other offices. But we want to start rolling them out to our staff that are not located in offices where there are tunnels (alot of them work from their home offices).

Both our office and my home (where i am testing from) are behind NAT.

 

[TLDuk]

The quick answer it you can not use an i2002 phone behind a NAT router the phone reports to the server with its internal ip address, but the bcm can not route back to it..

The home work will need to be part of the point to point VPN or use software ip phones on a PC with VPN connectivity..

 

[michugana]

From the BCM Monitor, on the tab for IP Devices, I do see the phone in question listed there with my external ip address.

On my firewall at home, I opened these ports (UDP 20000 to 20255, UDP 28000 to 28255, UDP 51000 to 51200) and nat all the traffic to these ports to the internal ip for the phone.

So I figured that would work. Anyways, I do appreciate your response. If you happen to think of anything else I could try, I am all ears.

Have a great weekend.

 

[TLDuk]

If you have a look at the registered phones in the BCM programing what ip address does it have there ?

 

[michugana]

Under registered phones, that phone has the external ip of my router at home (71.170.xxx.xxx) not my 10.x.x.x address.

Thanks.