Equinox - Presence and Contacts not working when external to IP500 3

[bigfrenchy1986]

I have an issue with Equinox currently where I have no Presence or Contacts when using Equinox remotely. Everything voice related is working correctly, I can make and receive calls to/from the IPO. However I have a Red Triangle in the top right stating "Access to Avaya Equinox contacts is currently limited" and "Contact service is currently unavailable"

I have set the Equinox App up using the URL method http://[SIP DOMAIN]/46xxsettings.txt to get the configuration for Equinox. Which pulls the 46xxsettings.txt file successfully and allows log in.

Has anyone else had this issue and what did you do to resolve it?

N.B. When on the LAN it works absolutely fine with Presence and Contacts.

 

[Travis Harper]

I have the same issue. I suspect it is cert related, but I can not verify.

My hunch is that it is related to DNS and Certs, although when I generated the cert I did add an entry for the public IP for external DNS resolution... so I could be wrong.

Anyone know what port presence is using? It's no longer using 5222 or 5223.

 

[intrigrant]

You need to use https over port 443 or 411(preferred) and a valid FQDN and a valid configurated certificate.

Enable System > LANx > "Use Preferred Phone Ports" to enable the use of port 411
Enable the Gatekeeper, SIP registrar and "Layer 4 Protocol" TLS>
Fill in the WAN ipaddress in system > LANx > "Network Topology" > "Public IP Addrss"
Fill in System > DNS data
Enable System > VoIP > VoIP > "Direct Media Within NAT location" if Voip audio fails
Set System > VoIP > VoIP Security to "Preferred". This is optional, it has impact to all IP Phones!
Assign the appropriate users a "Power User" License and enable "One-X Portal Services", "Enable Desktop/Tablet Voip Client" and "Enable Mobile VoIP Client" only
Get a DNS A-record like voip.customerdomain.com assigned to the customers WAN IP Address
On the local DNS server voip.customerdomain.com must point to the local IP Office IP Address.
On the firewall forward TCP port 411 and 5061 to IP Office and forward UDP 46750 upto 50750 towards the IP Office.
The below part about the 46xxsettings file is only to to bypass a bug in the Equinox Client 3.5.5 using a 3rd party Certificate.

First what is needed is to download a copy of the AUTOGENERATED 46xxsettings.txt file using your browser. You may need to change the HTTP setting in system configuration to disable http for Avaya Clients only to be able to download this file.
Modify the 46xxsettings file under the heading "# SETTINGSK1XX" and add "SET TLSSRVR voip.customerdomain.com"
Next modify the 46xxsettings file, find the section "# SETTINGSEQNX" and add a line after it with the FQDN for your system as follows "SET TLSSRVR voip.customerdomain.com"
At the bottom of the SETTINGSEQNX section there is a line that states "GOTO END" modify that line to "GOTO NONSPECIALS"
Then at the bottom of the entire fill add in "# NONSPECIALS"
Your additions should look like this in the file:

## IPOFFICE/11.0.4.0.4 build 1 192.168.110.30 AUTOGENERATED
# SETTINGSK1XX
SET TLSSRVR ipo.domain.com
-----------------------------------
# SETTINGSEQNX
SET TLSSRVR ipo.domain.com
GOTO NONSPECIALS
# SETTINGS1603
----------------------------------
# END
GET 46xxspecials.txt
# NONSPECIALS​

Configure a self signed certificate in IP Office using the security manager and use these parameters:
The Subject Alternative Name(s) field should include the following entries, each separated by a comma. Multiple entries are required if using both LAN1 and LAN2:

DNS entries for the system's LAN1 and/or LAN2 SIP Domain Name, eg. DNS:voip.customerdomain.com
[ul][li]DNS entries for the system's LAN1 and/or LAN2 SIP Registrar FQDN, eg DNS:voip.customerdomain.com[/li]
[li]IP entries for the system's LAN1 and/or LAN2 IP addresses, eg. IP:192.168.42.1, IP:192.168.43.1[/li]
[li]If supporting remote workers, add an IP entry with the public IP address of the IP Office.[/li]
[li]SIP URI entry for the LAN1 and/or LAN2 SIP Domain Name, eg. URI:sip:voip.customerdomain.com[/li]
[li]SIP URI entry for the LAN1 and/or LAN2 IP address, eg. URI:sip:192.168.42.1[/li]
[li]If using a separate HTTPS file server, add a SIP URI entry for the file server's domain name.[/li]
[/ul]​

Install the certificate if the IP Office onto the device
Install Equinox as per manual and use "

https://FQDN:411/46xxsettings.txt"

as the website to connect to FQN=voip.customerdomain.com

 

[qtelcom]

The below part about the 46xxsettings file is only to to bypass a bug in the Equinox Client 3.5.5 using a 3rd party Certificate.

I see Equinox Client 3.5.6 is out, is that bug fixed and these steps are no long necessary?

 

[intrigrant]

It seems so...

 

[davea2]

I am having this same issue with a new client

We have version 3.5.6, a 3rd party UCC certificate (GoDaddy)and ports 411 and 5061 forwarded to the IPO.
They are not using Zand, but neither am I amd mine works on our in house kit no problem with the same arranment.
Do I need any other ports open?

device was configured with

https://sip.domain.com:411/46xxsettings.txt

using autogenerated.

Works no problem on the corp. WiFi

Thanks!

dave

 

[davea2]

Although he reports no red triangle when out of the office...

 

[davea2]

So, I find that presence and contacts do not work outside the LAN on Android and iPhone clients but seems to work fine on the Windows client...

 

[intrigrant]

Firewall... Wrong certificate..

 

[davea2]

My initial thought was firewall, however the windows client outside the office works fine - are there differences in port use?
Also I guess the cert is OK too if it's accepted by the Windows client?

 

[davea2]

Si it seems the only phone put of 3 not working for presence and contact is mine.
an iPhone and another Android phone work fine.
Windows clients work fine.

My phone works perfectly with our in-house kit.

I thought mine may be remembering old data so deleted any certificates I found on my phone and even uninstalled and re-installed the app.

Still nothing.

So, must be my phnoe but cannot figure out what!