CONNECT 2 AVAYA IP406 V2 BETWEEN 2 SITES 1

[pkondilys]

Hey Guys,

Anybody that can help or shed some light on best way to connect 2 avaya ip406 v2 units over a leased line? if I do this, and I have the vcm module installed, will employee at location A be able to reach employee at location B over the wan to avoid phone carrier costs? Any documentation would help!

Thanks

 

[pkondilys]

i found this communication in the log:

158302162mS Interface Rx: v=LAN1 LAN
ARP - Request.
192.168.4.1 (00d0680d3a62) is requesting the mac address of 192.168.4.15
0000 00 01 08 00 06 04 00 01 00 d0 68 0d 3a 62 c0 a8 ..........h.:b..
0010 04 01 00 00 00 00 00 00 c0 a8 04 0f 00 00 00 00 ................
158302162mS Interface Tx: v=LAN1 LAN
ARP - Reply.
192.168.4.15 is replying to 192.168.4.1 with its mac address (00e00702517c).
0000 00 01 08 00 06 04 00 02 00 e0 07 02 51 7c c0 a8 ............Q|..
0010 04 0f 00 d0 68 0d 3a 62 c0 a8 04 01 ....h.:b....
158302491mS CMMap: a=10.12 b=0.0 B0
158302867mS CMMap: a=10.12 b=0.0 B1
158303243mS CMMap: a=10.12 b=0.0 B0
158303548mS Interface Rx: v=LAN1 LAN

 

[pkondilys]

and this communication as well:

158307164mS Interface Rx: v=LAN1 LAN
Ethernet Header info - dst=00e00702517c src=00d0680d3a62 len=60
IP Header info - Dst=192.168.4.15 Src=192.168.4.1 vl=0x45 tos=0x00 len=43 id=0xcc1c
ttl=93 flg=0x00 off=0x0000 pcol=17(UDP) sum=0x0845
UDP Header info - DstPort=50795(IPO Voice Networking) SrcPort=50384 Len=23 Sum=0x0000
LBWV AVRIP (1)
requiresvoicemail 0 operational 1 version 0 recordsupported 0
IPaddr 255.255.255.255 hops=0 voice=0
0000 00 01 00 00 ff ff ff ff 00 00 ..........

 

[pkondilys]

ok guys...some more info that might help:

all routes check out ok.

avaya at site A (192.168.1.31) can ping and see avaya at site B (192.168.4.15)

I ran tcpdumps on firewall(gateways) and i see traffic between the 2 avaya units, but I only see port 50795 and 50799 traffic.

I see no traffic for H323 traffic which I assume is the way how avaya talks to each other and exchanges information about extensions?

 

[pkondilys]

fyi.....found this info:

SCN Signalling

IP Office SCN use a signalling similar to RIP is order to update each other of there presence. This traffic can be seen in the IP Office Monitor application as AVRIP packets. This traffic is broadcast and sent to port 50795 on which each IP Office system listens. Each IP Office in the SCN broadcasts an regular update every 30 seconds. Additionally BLF updates are broadcast when applicable up to a maximum of every 5 seconds. Typically the volume is less than 1Kbps per IP Office system.

seems users info is sent out over port 50795. I do see this traffic, but why don't the avay units register the users at each site? Am I missing some licensing maybe?

 

[mattKnight]

>all routes check out ok.

How are you testing that?

Take Care

Matt
If at first you don't succeed, skydiving is not for you.

 

[ProviderReborn]

Have you got any access list of either ports or IP's which could be stopping this.

With the two guys looking at your configs I would say its not the IP Offices, sorry to be so negative and keep blaming network but SCN is easy peasy as you can probably see.

I now would be looking at a few things

A) Default both units and rebuild SCN on default units.
B) Bring Site B to Site A and network locally overriding the WAN aspect of things.
C) Did you Biff your VCM when it was miss fitted?

Your WAN, is this Point to Point or is it going into a cloud?
I ask as some thing maybe blocked Provider side of things.

ACA - IP Office Implement
ACA - IP Telephony
CCENT - Cisco ICND1
CCNA - Working towards.

 

[mattKnight]

biffing" the VCM wouldn't prevent dialling and SCN setup; it would only manifest as speech issues...

Take Care

Matt
If at first you don't succeed, skydiving is not for you.

 

[pkondilys]

guys,

i'm hoping when u say biff, u mean messed up the card install?

also, my wan is poit to point going over E1 (same as T1 is states)

 

[intrigrant]

I see this in your trace:
154777771mS IP Routing Table - section 1
Destination Netmask Gateway Interface Metric Type
255.255.255.255 255.255.255.255 192.168.4.15 LAN1 1 I
224.0.0.0 240.0.0.0 192.168.4.15 LAN1 1 I
192.168.4.0 255.255.255.0 192.168.4.15 LAN1 1 I
0.0.0.0 0.0.0.0 192.168.4.1 LAN1 1 S
192.168.1.0 255.255.255.0 192.168.4.1 LAN1 1 S
192.168.100.0 255.255.255.0 192.168.4.1 LAN1 1 S
192.168.234.0 255.255.255.0 192.168.4.1 LAN1 1 S
192.168.202.0 255.255.255.0 192.168.4.1 LAN1 1 S
192.168.3.0 255.255.255.0 192.168.4.1 LAN1 1 S
192.168.99.0 255.255.255.0 0.0.0.0 RemoteManager 1 S
1 S
As you have only one gateway delete all routes and leave this:

Destination Netmask Gateway Interface
0.0.0.0 0.0.0.0 192.168.4.1 LAN1
192.168.99.0 255.255.255.0 0.0.0.0 RemoteManager


NIHIL NOVI SUB SOLE

 

[pkondilys]

thats all i have now in the static routes....
just 2 of them.
still getting no user info exchanged, and also under system status, the lines show scn = not enabled.

also, i deleted the scn lines, and rebuilt from scratch just in case.

 

[kurthansen]

So it is a VPN tunnel between the two IP Offices or a Point to Point?

 

[pkondilys]

point to point between 2 sites.

 

[kurthansen]

Sorry I have noticed that you have said that more then once. But what I can't under stand is you said you look in your firewall to see tcp traffic. So you have a firewall on this point to point link?

Could you make a diagram something like this?
IPO1---R1------R2----IPO2
| |
F1 F2
| |
Internet

 

[pkondilys]

sure...here you go:

IPO1--SWITCH1--FIREWALL1---ROUTER1
|
|
ROUTER2--FIREWALL2--SWICTH2--IPO2

 

[pkondilys]

sorry....it came out wrong...trying again

IPO1--SWITCH1--FIREWALL1
|
ROUTER1
|
|
ROUTER2
|
FIREWALL2--SWICTH2--IPO2

 

[pkondilys]

ok...cant get the lines lined up...but u get the picture..
router1 is connected to firewall1 and so on....

 

[pkondilys]

also router1 is connected to router2 via point to point serial E1(T1) line.

 

[kurthansen]

So Router1 and Router2 also get you to the internet? Maybe they do something different where you are but our PTP are secured and we don't need a firewall. They also don't get us to the internet so that is why we don't need a firewall.

My guess is your firewall is only allowing ICMP though some type of access list or it is doing odd stuff with the h323 protocol. I know Cisco has fixups on h323 that will mess up IPO traffic.

 

[pkondilys]

router1 and router2 dont give me internet. i'll probably just eliminate the firewall all together, and get back to you guys with some feedback...thanx for the help.

hope its the firewall in the end....

 

[pkondilys]

also forgot to mention that even though traffic goes through firewall properly, we even checked with vendor and we could see traffic and broadcasts between both ipo's, they just wont exchange user data...thats where i got stumped...