External Softphone Not Working

[Tisty]

Hello guys,

Sorry if I've missed anything.

Basically I have my lab environment and run a Softphone client (Avaya Equinox) works perfectly local on the same subnet as my IP office.

I'm trying to route it externally from my phone when I'm off the network. Appreciate that this is a VM and I have one IP for my IPO which is the local IP as it's running in my house.

I've change then SIP Registrar port to 5062 also. I've done some NAT'ing using my FortiGate to forward any requests hitting my public IP on port 5062 and re direct it to the IPO. I've done traces on the FortiGate and it actually seems to be passing traffic as I can see the policy being allowed - bytes are also going up on the policy.

However for some reason on the Softphone it says "invalid extension or password" if I tell the app to use the internal address it works fine again.

At a lost end here

IPO version is the latest release 11.0

Cheers,
Chris

 

[icet500]

You will need to enable the remote ext on lan1 or lan2 interface and have at least teleworker profile for that user.

Make sure you have a default route to your firewall.

 

[Westi]

The firewall profile in the LAN - Network Topology is also playing a role. You need the public IP in the entry and the port set to your 5062
I usually use static port block and it works

Joe
FHandw, ACSS (SME)

Remembering intrigrant 2019

 

[Tisty]

Hello Guys,

I really thought that you both fixed my problem when I read this, this morning. So i've ticked on remote extension and set the port to also 5062.

I've set the port to 5062 also on the network topology section also. See screenshots: Still having the Invalid extension or password error though...... 100% happy with my firewall as it's not stopping the flow.

Appreciate your help guys!

Cheers,
Chris

 

[Tisty]

Just one more note from me, this is the monitor capture. Doesn't seem to tell me a lot thoug.... So it's hitting the system.

 

[teletechman]

Did you set both the system and the user to remote user?
Mike

 

[Tisty]

Hello,

I've set them as a power user. I don't recall there being a setting for "remote user" ?

Thanks,
Chris

 

[Tisty]

Just seen it, yes under the power user remote worker is enabled.

 

[derfloh]

You also need SIP FQDN and domain set up.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN