H323 Remote Phones

[maccabee333]

Hi Guys,

I know this has been asked alot and all the help files are available. however we cannot seem to get this up and running. Every time the handset just sits at discover.

We have checked the firewall at site and the remote router has been checked and changed to 3 other types of basic adsl router.

If i check monitor I can see the handset talking to the system.

I get this in my monitor trace:

58579253mS H323Evt: IRCheckTimer: GRQ record deleted (user name=; extn-num=800)
58579253mS H323Evt: IRCheckTimer: GRQ record deleted (user name=; extn-num=800)
58579253mS H323Evt: IRCheckTimer: GRQ record deleted (user name=; extn-num=800)
58579253mS H323Evt: IRCheckTimer: GRQ record deleted (user name=; extn-num=800)
58579254mS H323Evt: IRCheckTimer: GRQ record deleted (user name=; extn-num=800)
58579254mS H323Evt: IRCheckTimer: GRQ record deleted (user name=; extn-num=800)
58579394mS RasRx: v=IFace=LAN2, Src=78.xxx.xxx.xxx:53014, Dst=87.xxx.xxx.xxx:1719 peb=0
RasMessage = gatekeeperRequest

58579395mS H323Evt: Recv GRQ from 4e19e511
58579395mS H323Evt: e_H225_AliasAddress_dialedDigits alias
58579395mS H323Evt: found number <800>
58579396mS RasTx: v=Src=87.xxx.xxx.xxx:1719, Dst=78.xxx.xxx.xxx:49302 peb=0
RasMessage = gatekeeperConfirm

58584395mS RasRx: v=IFace=LAN2, Src=78.xxx.xxx.xxx:53014, Dst=87.xxx.xxx.xxx:1719 peb=0
RasMessage = gatekeeperRequest

58584396mS H323Evt: Recv GRQ from 4e19e511
58584396mS H323Evt: e_H225_AliasAddress_dialedDigits alias
58584396mS H323Evt: found number <800>
58584397mS RasTx: v=Src=87.xxx.xxx.xxx:1719, Dst=78.xxx.xxx.xxx:49302 peb=0
RasMessage = gatekeeperConfirm

58591702mS RasRx: v=IFace=LAN2, Src=78.xxx.xxx.xxx:53015, Dst=87.xxx.xxx.xxx:1719 peb=0
RasMessage = gatekeeperRequest

58591703mS H323Evt: Recv GRQ from 4e19e511
58591703mS H323Evt: e_H225_AliasAddress_dialedDigits alias
58591704mS H323Evt: found number <800>
58591704mS RasTx: v=Src=87.xxx.xxx.xxx:1719, Dst=78.xxx.xxx.xxx:49303 peb=0
RasMessage = gatekeeperConfirm

58597103mS RasRx: v=IFace=LAN2, Src=78.xxx.xxx.xxx:53015, Dst=87.xxx.xxx.xxx:1719 peb=0
RasMessage = gatekeeperRequest

58597104mS H323Evt: Recv GRQ from 4e19e511
58597104mS H323Evt: e_H225_AliasAddress_dialedDigits alias
58597104mS H323Evt: found number <800>
58597105mS RasTx: v=Src=87.xxx.xxx.xxx:1719, Dst=78.xxx.xxx.xxx:49303 peb=0


The 87.xxx.xxx.xxx is the main site that holds the IP Office and the 78.xxx.xxx.xxx is the IP of the remote phone.

Thanks to anyone if they can help on this.


If only my girlfriend was as usefull as tek-tips

follow me on Twitter @TheIanMac

 

[Hovus]

Do you have a 0.0.0.0 0.0.0.0 LAN GW IP route?
Did you run STUN and did it find your Public IP?
Is the public IP pingable from the internet?
What's the phone type?
Does the firewall have any type of SIP or H323 helpers?

 

[maccabee333]

yes to the IP route. Yes the STUN found the public IP and is Port restricted cone nat. Both IP's are pingable. its a 9608 handset and no the firewall does not have any sip or H323 helpers.

Thanks

If only my girlfriend was as usefull as tek-tips

follow me on Twitter @TheIanMac

 

[Hovus]

You have 1719 tcp, 1720 udp, 5005 udp, 49152-53246 udp port forwarded to the LAN IP of the IPO?
Do you see the traffic to and from the phone in the firewall logs?
Do you have H323 Gateway Enable, H323 Remote Extn Enable in LAN1/2 enabled?
Do you have Enable Remote Worker in the User profile?
Do you have Allow Remote Extn in the Extn profile?

Also,

What firewall make / model is it?

 

[maccabee333]

Yes to all. Its a cisco 1841

If only my girlfriend was as usefull as tek-tips

follow me on Twitter @TheIanMac

 

[amriddle01]

Ah, Cisco, I have found both Cisco and Draytek to be troublesome (i.e don't work), when used system side for remote phones. Also the same user end is bad

 

[amriddle01]

BTW, it's not the routers at fault as thy work fine with the Mitel equivalent setup, so it's Avaya's poor implementation of the process

 

[Hovus]

MBG is just such a more complete product for remote phone solutions...gotta love Mitel.

 

[amriddle01]

No, not even using that. With the 5000HX you just forward some ports (as with Avaya) you tell the system it's external address (no STUN required) and then point any IP phone to the external address, no specific phones or licences required and it works 100% I have never seen it not work

 

[Hovus]

Never tried it like that. We only work with 2000s, 200s, and 3300s. Always have the luxury of MBG.

 

[tlpeter]

maccabee333, we have the same router and i stopped after trying for a week.
So if you find a solution then i really want to know the solution!!!



BAZINGA!

I'm not insane, my mother had me tested!

 

[tidypants]

Is there any solution to this problem?

 

[maccabee333]

got It working now. Thank god!!!

We have taken it off the Cisco and put it directly on the internet. Not supported and slightly risky i know We are going to try a different cisco and see if that works. I agree that Draytek can be a problem as it was a pain to set up but have managed to get our office working with a draytek. Its just the pesky Cisco that the client has to have.

@tlpeter I will keep you updated on how we get on. should be putting another cisco in this next week.

Thanks for the help anyway guys.

If only my girlfriend was as usefull as tek-tips

follow me on Twitter @TheIanMac

 

[maccabee333]

also tlpeter what STUN are you using? I found that some stun servers like 132.177.123.13 would report blocking firewall however the voiceflex stun server. stun.voiceflex.com (cant remmeber the IP) worked perfectly.

If only my girlfriend was as usefull as tek-tips

follow me on Twitter @TheIanMac

 

[tlpeter]

I am nut sure which stun server it is (name) but i use 216.93.246.14

BAZINGA!

I'm not insane, my mother had me tested!

 

[maccabee333]

ok well not sure if you will have more luck with the voiceflex one for some reason it worked a whole lot better for me. Im hopefully getting the system put back behind an 1841 for more testing today/tomorrow. Ill keep you posted if I get it to work.

If only my girlfriend was as usefull as tek-tips

follow me on Twitter @TheIanMac