IP Office video softphone over site to site VPN tunnel 1

[Juancho2015]

Hi.
A new customer of mine has IP softphones implemented through a VPN tunnel. They do not register unless NAT/Masking is configured in VPN gateway/firewall.
- IP office 500V2 9.0
- IP Office softphone 6.1 3.2.3.49
- Both ends have Sophos 210 and 310 as VPN gateway/firewall.
- We´re using LAN1 for local phones and LAN2 for remote phones (over the tunnel)

Theese are the SIP messages capture:
Register request:

IP office rejection:

 

[holdmusic34]

Licensing – If more than two (2) remote extension users are be supported, the system must include available Power User licenses for those users.

A private Avaya IP Office Video Softphone registration is not supported over NAT (Network Address Translation); the limitation is related to the HTTP provisioning which is not supported for Public IP addresses BUT yes there are no issues if a Public IP addresses is defined to the AVAYA IP Office LAN1 ethernet OR if connected via VPN or LAN.

So, make sure it's licensed correctly and it should work.

Depending on the URI configuration the ICR can be completely ignored.

If your URI is configured to use internal data then the IP Office will look into the user's SIP tab and if you have *'s it will look into ICR.

A madman with a taste for speed.

 

[Juancho2015]

Hi, Holdmusic34.
The point is that we are trying to register the softphones over a VPN, they are not pointing to a public IP address.

Can I use Avaya Communicator instead of video softphone?

 

[holdmusic34]

Communicator for Windows would be the better option.

Haven't detailed whether you have the correct licensing though mate.

Depending on the URI configuration the ICR can be completely ignored.

If your URI is configured to use internal data then the IP Office will look into the user's SIP tab and if you have *'s it will look into ICR.

A madman with a taste for speed.

 

[Juancho2015]

Hi.

I have 6 Power Users and 200 Teleworkers

 

[TheSmash]

Check System > System > Enable Softphone HTTP Provisioning

Default = Off.
This option must be enabled if the IP Office Video Softphone is being supported.

EDIT - LOL just seen this "IP office 500V2 9.0" - Very flakey SIP stack in this version. Good luck!

 

[Juancho2015]

Softphone HTTP Provisioning is enabled but softphones experience the described issue when trying to register through the IPSec site to site tunnel. They only register when NAT/Masking is implemented but not without it.

 

[sizbut]

So use it. What's the problem with that?

Stuck in a never ending cycle of file copying.

 

[Juancho2015]

The problem is that I have a couple 1608 phones on remote site and they don´t work with NAT/Masking.