IP Office 9.0 one x mobile preferred VoIP mode: VoIP registration failed 8

[sq12345]

Hi Guys, does anyone try the one x mobile one x mobile preferred VoIP mode?

I get the error:

VoIP registration failed

The application is operational with the exception of the VoIP feature which is experiencing problems registering with the server. (error 13:0)

I have HTC ONE android.

 

[digicx]

Hi XIXOUNI

maybe this will be help

on user field
profile > power user ( you need to have a licensed for this)
Enable (thick) Softphone, onex portal service, remote worker, mobile voip client

on system field, Voip Tab
(tick) H323 Gatekeeper enable
(untick) Auto-create extn

SIP
(tick) SIP trunks enable, sip regiter enable, Sip remote ext enable
(untick) Auto create Extn/User

Domain : put you full fqdn address

(tick) UDP, TCP, TLS

 

[digicx]

hi all
this is my topology

192.168.18.11/ipo.mydomain.com (IPO 500 box)
192.168.18.7/onex.mydomain.com (one x portal server)

for ipo.mydomain.com i set up on IPO, under voip tab on domain names
for onex.mydomain.com i set up on xmpp record on one x portal server,

both of fqdn is resolve internal ip from inside network, voip call and everything is working fine inside

for publishing my ipo ive done this,
public ip exp 9.1.1.1 , registering in to two fqdn , ipo.mydomain.com & onex.mydomain.com

for nat and firewall ive done this
all req to port tcp 5060 and udp 5060 and tls 5061, i will fwd that req to internal ip 192.168.18.11 (IPO server)
all req to port tcp 5222, 5244.5269.8444.8080, i fwd in to internal ip 192.168.18.7 (onex portal server)

but still im having problem when connecting from outside network, i can be able to login only voip still having an issue, the rest feature is fine,
any other thing should i do to make voip call working ?

i appreciate your input all, im almost insane dealing with this guy

 

[VikeshR]

Are all opened on the router? Does the router support hair-pinning
5060 TCP UDP TLS
5061 TCP TLS
1719TCP
1720TCP
http 80 tcp


Ports 5222, 5269 and 8444 need to be opened on the customer's firewall or router, if the mobility client is to be used on a cellular network or if external XMPP access is required.
Ports 8086, 9094 and 9095 need not be opened on the customer's firewall or router.
Please see page 45 of the user manual

 

[tlpeter]

VikeshR, you forgot the RTP ports that needs to be opened too.
IF you do not then no speech at all.


BAZINGA!

I'm not insane, my mother had me tested!

 

[digicx]

@vikesR @tlpeter

sorry for asking again and again, i still cant see the clear picture here,
as you said we need to open like this, CMIIW
5060 TCP UDP TLS
5061 TCP TLS
1719TCP
1720TCP
http 80 tcp
49152-53246 RTP port
ALL OF THIS PORT IS FWD TO IPoffice IP addreess , is it correct ?

and then since i want to publish to outside network i also open this like below :
Ports 5222,5269,8444,8086,9094 and 9095
all of this port is forwarded to one x portal, is it correct ?

we are using sonicwall and yes its support hair-pining,

appreciate your help

 

[malibu1979]

Since the app uses port 5060 and the sip trunk uses port 5060, will there be a conflick? IPO is on lan1, which is the companys network and the sip trunk is on lan2, which is a vlan.

 

[JhonQ]

Hello all, I have my IPO R9 and a UCM module with power users working perfect on local site with VOIP mode and I dont have a DNS server and I do not own a domain so I was wondering if it is possible just to make power users work via VPN clients based on android, Im right or not? or that is the only way to get users working remotely?

Thanks in advance

 

[liquidshokk]

49152-53246 to IPO, another one that will get hacked within 48hours"

What port range is safe to use instead please?

 

[tlpeter]

A different range

BAZINGA!

I'm not insane, my mother had me tested!

 

[liquidshokk]

Wasn't sure if there is a particular range I should avoid so they don't clash. Maybe a range people use as not likely to..

 

[tlpeter]

Check the documents and you will find a range.
Discussing it here is food for hackers

BAZINGA!

I'm not insane, my mother had me tested!

 

[agsr4ever]

So after spending some time trying to get OneX mobile to work externally. OneX was working internally so this is what i had to do to make it work externally.

Under our network firewall i opened up all the listed ports on the Avaya documentation.

Only the RTP, SIP, and H323 ports are forwarded to the IP Office IP address.
XMPP, UDP, TCP, TLS ports point to the the OneX IP address.
SIP ALG needs to be off

OneX Portal (http://[IPADDRESS]:8080/onexportal-admin.html)configuration:
>Configuration>IM/Presence/XMPP Domain Name: onex.domain.com

IP Office Manager Configuration:

>System>System> Enable Sofphone HTTP Provisioning: Enable
>System>LAN>VOIP>SIP Trunks Enabled: Enable
>System>LAN>VOIP>Auto Create Extension: Enable
>System>LAN>VOIP> SIP Remote Extension Enabled: Enable
>System>LAN>VOIP> Domain: Public IP/Domain (I used our routers public static IP since customer does not have domain)
>System>LAN>VOIP> UDP, TCP, and RTP (use these for the firewall and port forwarding)

>System>LAN>Network Topology>STUN Server Address: Usually provided by SIP Provider or search for "avaya free stun server" there is a bunch out there some on this forum as well

>System>LAN>Network Topology>Public IP: Router IP/Public IP

I used these to test the fuctionality of the client from the external network (instead of having to use the mobile client to test)
Login credentials= OneX Mobile user login and password(power user/telecommuter)
https://[IPADDRESS]:8444/rest/my/im-info
https://[IPADDRESS]:8444/rest/my/sip-info

This is what it would show on the browser (If you see the below information then you are done with the configuration)
<sip-info>
<identity>111@[EXTERNAL-IPADDRESS]</identity>
<userName>111</userName>
<password>123123</password>
<displayName>JohnD</displayName>
<privateAddress>[INTERNAL-IPADDRESS]</privateAddress>
<publicAddress>[EXTERNAL-IPADDRESS]</publicAddress>
<udpPrivatePort>XXXX</udpPrivatePort>
<udpPublicPort>XXXX</udpPublicPort>
<tcpPrivatePort>XXXX</tcpPrivatePort>
<tcpPublicPort>XXXX</tcpPublicPort>
<tlsPrivatePort>0</tlsPrivatePort>
<tlsPublicPort>0</tlsPublicPort>
<payloadType>101</payloadType>
<signalingQos>136</signalingQos>
<voiceQos>184</voiceQos>
<videoQos>184</videoQos>
</sip-info>


Hopefully this helps!

 

[roberttek]

Hi agsr4ever

I have some issues in one-x portal.

WE configured everything as per doc and the above threads.

One -x Mobile is working perfectly in voip mode in internal wifi.

We are able to call internal and external from one-x mobile(Android & IOS) in VOIP Mode.

But when we tried this in 3g voip is registering we are able to call .

But there is no voice Path both side.

There is no firewall here in this setup.

I have 2 fqdns publicly resolving . One for one x and other for ipoffice.

i configured split dns with the public ip. Wan cable is directly connected to one-x server.

I forwarded the ports 5060(TCP & UDP),5061 and RTP(49152-53246) ports to ipoffice from One-x Server.

Please help me to sort out this issue

 

[Bas1234]

2 Days and your system will be hacked!!!!

Change the Port Number range NAT in LAN1 or 2 from 49152-53246 into 53000-53246 in the Manager, and close down the public range also to 53000-53246

Make sure the router supports NAT Loopback, and that when you ping your FQDN from internal LAN your reply is from the public WAN IP.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[roberttek]

Hi Bas1234

Thanks for the reply

i changed the ports in LAN1 NAT to 53000-53246.

In the ip office firewall we have to do any comfiguration.

I selected open internet in the lan 1 firewall selection.

i only use the lan 1 for this setup/

through vpn its working.

but from external nw we are able to call but no sound each side.


please reply me.

 

[Bas1234]

In the Avaya Manager did you changed the NAT ports?
On LAN1 > Network Topology > fill in 198.27.81.168 on the STUN server.
Save config, reopen it, then hit RUN STUN and wait, it should fill in the public WAN IP addr and NAT type.
If it returns with blocking firewall you problem is in the firewall, it should return with "???? Cone NAT"

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[nrazaq]

having same issue, but for my side VoIP ports are blocked by Government is there any solution for that too ?

 

[Bas1234]

Change ports is the best thing to do, so choose a port 5010-5090 or any other free port. Voip ports use 5060-5061 so changing these and they wouldn't know. It should work for you aswell

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[nrazaq]

I was thinking that mobile phone app is using same 5060 port. i will check it.
but i have few other sip tunnels do i need to change that everwhere ?

 

[Bas1234]

The app uses 5000 and up for rtp and the sip port provided by the ipo using stun.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________