IP phones over Internet

[todori]

Greetings,

we are using MD110 TSW with IPLU cards (H.323 protocol). Recently we decided to open 1 IPLU IP address to Internet and bypass company firewall in order to allow phone calls over ADSL. When we did it, we cannot connect to IPLU card over Internet with physical IP phones. Strangely, when using PC with ACC (Aastra Communication Client) we can subscribe and talk from anywhere in the world with no problems (and no vpn connection but direct connection to Internet). When I connect IP phone (Dialog 4425) it cannot start and I have message "User not logged on". When I enter correct IP extension but wrong password phone recognizes it and alerts me that I have entered wrong password - that shoes there is some communication between IPLU and phone. Our Ericsson support says that it should work, and it really does work when using PC.
Why do my physical phones not work this way and PC softphone does work?
Thank you in advance.

 

[parnum]

Have you http:// onto the phone to view debug log to see what happens, or done wireshark track on the phone?

best parnum

 

[todori]

I have checked web configuration of the physical phone. It seems that "Debug log" option does not work because last entry is from "70-01-01 00:00:00" and it is not changing with time.
Option "show phone configuration" gives me

-------------------------------------------
HW ver./Application CAA1580043 ver./Boot ver.:R2E/A/R7E/R3L

It's a DBC425 02 Extension Number: 3433
The phone is NOT logged on!

The phone is configured for MX_ONE
Current gatekeeper IP:xxx.xxx.xxx.xxx
Backup Gatekeeper IP Address: 0.0.0.0
Domain(from DHCP server):lan
Domain(from config. file):
DHCP is used
gatekeeperId:LIM*
Configured TTL:600
gH323Debug:0
gkUsed:4
Used TTL:540

IP Address:192.168.1.3
Current software server IP:130.100.17.80
Port 1 Link UP with 100 Mbps FULL DUPLEX
Port 2 Link DOWN
----------------------------------------------------

IP address of the gatekeeper is correct, I just don't want to broadcast it
IP address of software server 130.100.17.80 is default address written in config file and I have not changed it. It appeared when I entered 0.0.0.0 to avoid problems with software server which is unavailable. I have placed config files on local computer on remote site and entered its IP address and it did not help.
Is there a way for me to "unlock" debug log option? Wire Shark is beyond my knowledge and I would like to avoid it as long as possible

Thank you in advance.

 

[parnum]

[DebugLevel]
H323Debug=4
RTPDebug=4

in the config file sets the level, so change and reboot the phone to pick up change.

You need to stop avoiding Wireshark and start using it now and it will all become clearer, you will see your blocked path. I do not believe it is above your level, you just need to run it and look at where the packets fail.

best parnum

 

[whosrdaddy]

are you using the phone behind a router?



-----------------------------------------------------
What You See Is What You Get
Never underestimate tha powah of tha google!

 

[todori]

Thank you parnum I will definitely try WireShark.

whosrdaddy, yes phone is behind ADSL router.

 

[whosrdaddy]

H323 with NAT is asking for trouble.
your router needs to be H323 aware.

http://www.technodata.org/files/technical/H323-NAT Technical Guide.htm

your best bet is using a fixed VPN connection over internet (for example juniper netscreen solutions)

/Daddy

-----------------------------------------------------
What You See Is What You Get
Never underestimate tha powah of tha google!

 

[todori]

We are using CISCO vpn router, I think it is 871 and it works well, but now it is in Vancouver for Olympic games. I wanted to try to connect with ADSL for another event while Vancouver crew is away.
I will have to wait for vpn router to come back then

Tnx.