Does anyone have IPRO working with a software VPN client?

[workinonphones]

I am having little success getting Phone Manager IPRO working with a software VPN client. Started out using Microsoft VPN on 2003 server w/ the built-in PPTP VPN client. When that didn't work, I tried connecting to the Linksys RV082 router using the Greenbow VPN client. I get the same result. Phone Manager connects but I don't get the speaker/microphone control and I get an error: "Failed to register with IP Office for VoIP operation! Contact your system administrator." It works fine inside the network just not using VPN. I can also connect to Manager and ping the IPO. Any suggestions?

 

[SPIPOffice]

I have a customer who using software vpn client and is softphone works fine.
i'mnot sure what client they use, I will find out.
You may want to check the IP route/gateway

 

[Morrack]

When you connect with the vpn client, are you able to ping the IPO? If so I would look into blocked ports, especially 1719 and 1720.

Peter

 

[workinonphones]

Finally got it working! The Greenbow VPN client doesn't assign a virtual adapter to the VPN connection and the local IP address in the VPN set-up didn't match my actual IP address. Once I changed this, it popped right up.
Thanks for the suggestions!

 

[johncan20]

hi

i have a checkpoint securemote VPN but am struggling to get it working, i have all ports open at the mo.
It works in the office ok. Can you expand on this "The Greenbow VPN client doesn't assign a virtual adapter to the VPN connection and the local IP address in the VPN set-up didn't match my actual IP address. Once I changed this, it popped right up." how do i go about this?

thanks

John

 

[workinonphones]

Are you using a software VPN client and if so, which one?

 

[milestoned]

I had the same problem with a check point firewall not sure if it started working for that customer. I no-longer work for that company. But here's what I found out when I worked on it.

First off if you use sysmonitor to see what is attempting to connect to the IP Office while you are trying to connect with phone mgr you will see the pubic address of the location you are attempting to connect from. This being said you would have to build routes in the IP Office for every public subnet (not possible). 1st step verify that the VPN client is handing you an address on the same subnet as the IP Office. 2nd take a look at how the check point handles H.323 traffic. if it's doing antyhing to 323 traffic stop it! That could be your problem right there. Ports 1719 and 1720 need to be open and 49000 and up.If I do a netstat from machine runing phone mgr it will show me waitng for a connection on port 50797, it uses a high port range and its choses ports at random.

 

[johncan20]

i am using checkpoint securemote as the VPN client.

thanks vendor,

i have all ports open so i dont think it can be a port issue at the moment. could that still affect h.323 traffic?

can i use a differnet subnet for the VPN clients but put that in the IPO? if so what sort of route statement do i need to put in?

thanks

John

 

[milestoned]

You need to build a route in the IP office. If the subnet from the vpn client is 192.168.2.0 and your IP Office is 192.168.1.0.

Build a route like so:

IP Address 192.168.2.0
Subnet mask 255.255.255.0
Gateway 192.168.1.1 (The IP Address of the Firewall)
Destination LAN 1
Metric 1

Just because you have all ports open does not mean that checkpoint isn't doing anything with h.323 traffic - apples and oranges. You ned verfiy the h.323 settings on the firewall.

Miles

 

[milestoned]

One more common problem. Make sure the codec you are chooseing in the VoIP extention feild (IP Office)is what you set in the soft phone as first choice.