Can get VOIP remote phone to work - keeps discovering

[ablafferjr]

Here's the deal. Trying to connect VOIP external phone w/o VPN.
Avaya Essential Ed R 9.0.400.965
Control Unit IP 500v2
IP Phone is 9608G
Phone is set to connect to public IP address of firewall which routes to internal IP of Avaya controller
Lan1 is enable NAT; DHCP mode = disabled; VOIP tab H323 gatekeeper is enabled and remote extension is enabled
Remote UDP and TCP both 5060; Public IP is for firewall.
Lan2 IP address is public IP; RIP Mode is RIP Broadcast; DHCP is server; VOIP tab H323 gatekeeper and remote extn enabled
Network Topology STUN Server address is entered STUN port enabled; Public IP is firewall; Firewall/NAT type is static port block.

When I connect the phone internally extension etc come up fine. When I take it external it boots up and then goes into discoivery mode.

What am I doing wrong or missing?

 

[AvayaGuru77]

Did you open all port forwarding required for remote phones?

1719 H.323 RAS UDP H.323 Status.
VoIP device registering with the IP Office.

1720 H.323/H.245 TCP H.323 Signalling.
Data to a registered VoIP device.

49152 to 53247*

​

RTP/RTCP UDP
Dynamically allocated ports used during VoIP calls for RTP and RTCP
traffic. The port range can be adjusted through the System | Gatekeeper tab.

 

[holdmusic34]

& incoming ICMP must be allowed

See this thread with an answer from Ista4 (whoever he is....)

[URL unfurl="true"]https://support.avaya.com/forums/showthread.php?t=1546[/url]

Chef de claque (IP Office, Xima, Xirrus)

 

[ablafferjr]

Thanks for the replies. I have the 1719 and 1720 ports open and also the outbound ranges as well.
Incoming ICMP is allowed. Sorry had to double check that they were already set-up on the firewall before I replied to your posts.

Still no joy.

I am using a SonicWall TZ210 at the office with recent firmware and Comcast at the remote site w/o a hardware firewall.
Not sure if that mattered.

 

[holdmusic34]

And 801.q is turned off? That thread is really all that is required.

VPN on a 9608 is preferred. Even with an inexperienced IT guy you can talk them through in less than an hour.

Chef de claque (IP Office, Xima, Xirrus)

 

[ablafferjr]

Yes, I just checked and 801.q is turned off on the phone.
The phone boots.
The Http and Https info comes up with the public IP address of the firewall at work.
Contacting call server.
Registering.
Then discover public IP address.
Then discover IPO address.
Registering.
Lather rinse repeat.