Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco PIX VPN and BCM

Status
Not open for further replies.

mustanggt90

IS-IT--Management
Sep 8, 2005
2
US
Hello everyone. I have been struggling the past few days trying to make my softphones work through a cisco based PIX VPN. I'm new to configuring my BCM so please bare with me.
I had to put a default gateway in my BCM but I was able to make it so that I can ping the BCM through my VPN.
I can ping and connect with netbios or any other type of protocol to every server on the network once I make VPN connection but all I can do is ping the BCM. I'm at a loss and running out of ideas.
Network Diagram:
network.jpg


Routes From The BCM:
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.5 1
10.10.11.0 255.255.255.0 10.10.11.1 10.10.11.1 1
10.10.11.1 255.255.255.255 127.0.0.1 127.0.0.1 1
10.10.15.0 255.255.255.0 10.10.15.1 10.10.15.1 1
10.10.15.1 255.255.255.255 127.0.0.1 127.0.0.1 1
10.255.255.255 255.255.255.255 10.10.15.1 10.10.15.1 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.5 192.168.1.5 1
192.168.1.5 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.1.255 255.255.255.255 192.168.1.5 192.168.1.5 1
192.168.249.100 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.249.255 255.255.255.255 192.168.249.100 192.168.1.5 1
224.0.0.0 224.0.0.0 10.10.11.1 10.10.11.1 1
224.0.0.0 224.0.0.0 10.10.15.1 10.10.15.1 1
224.0.0.0 224.0.0.0 192.168.1.5 192.168.1.5 1
255.255.255.255 255.255.255.255 10.10.15.1 10.10.15.1 1

I'm lost, what am I missing here? Any help will be greatly appreciated.
Thanks
 
Can you ping the BCM internally?

Is this and ADSL circuit?

The VPN address given to the laptop 192.168.249.10 is the subnet 255.255.255.0

If it is the laptop is in a seperate subnet to the BCM.

I would check the PIX rather than the BCM.

The PIX will be doing all the routing.

The BCM should be available if you have set the PIX firewall ip address (192.168.1.1) as the next hop router on net link manager on the BCM.

Are you using a routing protocol on the PIX RIP or OSPF ?

Marshall


 
mrmarshall:
Thanks for the reply. I can ping the BCM from my VPN from the laptop fine. I can also ping from a telnet session on the BCM to my laptop. I have also applied an alias'd IP address of 192.168.249.5 to the BCM but I cannot ping that IP address on the BCM from my laptop.
The connection is being made to a T3 from a cable modem. We're a cable ISP.
I can ping both ways, but cannot connect with my softphone which is what is weird.
As to the routing protocol on the PIX I'll have to get back into it to check.
Thanks again
 
Have you opened the following ports on the PIX firewall or set the forwarding of these ports to the BCM.



Signaling between the IP telephones and the Business Communications Manager uses Business Communications Manager port 7000. However, voice packets are exchanged using the default RTP ports 28000 through 28255 at the Business Communications Manager, and ports 51000 through 51200 at the IP telephones. If these ports are blocked by the firewall or NAT, you will experience one-way or no-way speech paths.

Marshall

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top