Connecting I2002 phones to a BCM behind a firewall

[WRW1970]

Hello All,

I have a simple scenario here, looking for (hopefully) a simple solution. Any help would be greatly appreciated.

I have a BCM 50 at my office behind a BSR222 firewall/router.

My BSR222 router is on a Public Static IP address with an internal IP address of 192.168.1.5

I want to allow 5 employees to work from home. They all have i2002 Nortel phones on their desks at the office. I want them to be able to take the phone home, plug it into their home cable/dsl routers and have their phones work (without any action on their part).

I have S1 set to the internal IP address of the BCM (for when they are in the office) and S2 set to the public IP address of the BSR222 (with NAT to the BCM) for when they are home. I also changed the port to 5000 (default was 4200).

I setup NAT on the BSR222 to the following:

Source is ANY for all

Port 5000 UDP/TCP to forward to the internal IP address of the BCM (192.168.1.5)

Port 7000 UDP/TCP to forward to the internal IP address of the BCM (192.168.1.5)

Ports 28000-28255 UDP/TCP to forward to the internal IP address of the BCM (192.168.1.5)

Ports 51000-51200 UDP/TCP to forward to the internal IP address of the BCM (192.168.1.5)

I am still getting server unreachable from the i2002 phones when they are outside the firewall.

Any suggestions? I know some of you may save to use a VPN router at their home but that is not an option here (we are not an IT company and that would be too complicated for the users).

Thank you in advance,
Bill

 

[CTCINY]

I always have voice issues when trying to do it that way but I can always get them to register using port 7000 not 5000

___________________________________________
If it's true that our species is alone in the universe, then I'd have to say that the universe aimed rather low and settled for very little.---George Carlin

 

[SupportDude]

Maybe an easier path would be to use i2050 softphones, assuming the users login to your VPN with their PC's.

-SD-

http://www.mysupportguy.net

 

[oldestgeek]

You said you had the internal address of the BSR222 set to 192.168.1.5. Are you sure that isn't the BCMs address? Even if you get this to work it won't be secure and the conversations could be captured. You really should use a VPN.

 

[WRW1970]

Sorry, my error... the internal IP of the BSR222 is 192.168.1.1, the BCM is 192.168.1.5

Thanks for the responses so far, like I said VPN really isn't an option in this case. I do not want to use softphone either.