Connecting BCM 400 and remote IP phones via VPN

[khayulay]

I am very new to BCM and would like to get advice about setting up IP phones in remote location. Our main office has BCM 400 and there are about 7 regional representatives work from home in different states. Our company wants to give them IP phones and assign extensions so when someone call their extension it ring in their homes. 6 of them use DSL and 1 use Cable modem and all use NAT router.

As far as I know BCM 400 has VPN Concentrator built into it. From some of the information I read on Net it is best to create site-to-site VPN between remote offices and main office and connect IP phone through it. I am thinking to put Contivity 221 on each location and connect IP phone through it.

Now come my questions..can I tell BCM 400 which range of IP address to assign to VPN connections? Can I put Contivity 221 behind NAT router in remote locations? I am not exactly sure how everything will work together. Here is what I have in mind let me know if this is possible or not..

BCM 400 Public IP (64.x.x.100)
BCM 400 LAN IP (192.168.0.100) (connected to main office LAN)
BCN 400 VPN Concentrator configured to assign 192.168.1.1 - 192.168.1.20 ( I want to keep this in different IP range than LAN so remote users can not reach inside main office LAN)
Configure Contivity 221 as DHCP client (so it can get IP address from NAT router in the remote office and then will establish the VPN with BCM 400)
IP phones are assigned static IP address of 192.168.1.21 to 192.168.1.27
Send Contivity 221 and IP phone to the remote office and they can connect IP phone to Contivity and Contivity to their NAT router.

Is it possible or I am missing something? Is there any other way to do it? I would really appreciate your comments/suggestions.

Thanks in advance.
ZM

 

[3Sixty]

Hi Khayulay

I have some information on my website for setting up the VPN tunnels you are welcome too. It is for the BCM and contivity so you are welcome to it. (contiviy client and unit)

The only thing you need to be aware of is, If you want your sales reps to have the ability to dial each other from home you will need a contivity that will route tunneled traffic.

The BCM is a chopped down contivity with support for 16 vpn tunnels but does not support tunnelling between VPN tunnels as far as I am aware(someone correct me if I am wrong). You will require a keycode to enable the IPSEC on the BCM and this is expensive.

Marshall

http://www.marshallshouse.co.uk

 

[khayulay]

Thank you Marshall. I downloaded the VPN guide from your site. By the way great site with lots of info.

My main concern is I am not sure remote IP phones will work or not from behind the NAT routers that reps are using in their houses and how would I configure everything.

So you think the VPN Concentrator comes with BCM 400 might not be able to route calls between 2 VoIP users calling each other?

 

[3Sixty]

I know it does not in the UK but maybe someone will correct me for anywhere else in the world. The routers would need a VPN tunnel in place and then the phone would have no issue with the NAT because it would be private routing. Most routers support vpn pass through.

What make are the routers?

Marshall

http://www.marshallshouse.co.uk

 

[khayulay]

Thanks Marshall.

The routers are one MN-700, one Dlink DI-604, four Linksys and one said only white box with no name on router.

If Contivity allows split tunneling then I am thinking to ask them to remove their routers and only use Contivity. So Contivity will route only VoIP packets through VPN tunnel and all other traffic through their ISP.

Somewhere on this forum I read that on Nortel, split tunneling need to be configured on server side. I will need to find out BCM 400 support that or not.

 

[3Sixty]

The BCM 400 will support split tunneling.

Marshall

http://www.marshallshouse.co.uk

 

[khayulay]

Thanks alot for your help Marshall.