IP phones over VPN on BCM200?

[jamaster14]

Im having some issues getting IP phones to work at a remote location over a VPN connection. The setup is as follows:

Main Site:
--------------

BCM200 3.7
BSR222

Remote Site:
--------------
BSR222
PoE Switch


The vpn connection is made between the two BSRs. The BCM 200 plugs from Lan2 into one of the switched ports on the BSR. The VPN connection shows as being up and active in the logs on the BSR's. The BCM200 has 10 seats for ip phones, and a voip gateway keycode.

when i plug an ip phone into the BSR at the remote site, the BSR shows it has been assigned an ip address, but the phone keeps searching to locate the server on its display

not really sure where to go from here... havent been able to find any helpful documents on nortels site.

 

[jamaster14]

@nsanto17.


here is a screen shot from the router's SA monitor showing the VPN tunnel is up:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=vpnup.png&newest=1

Here is a screenshot of the log showing it has been established:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=vpnlogup.png

As far as S1 and S2 where are those set? is it on the BCM? if so what menu is it under?

 

[nsanto17]

S1 & S2 are set on the IP sets.

Based on your Netowork Diagram can you ping the local address of the remote BSR? (192.168.3.1)????

 

[jamaster14]

@nsanto

- are you asking if i can ping the remote BSR(192.168.3.1) from the main site?

if so, then im not sure id have to try it. ill head over there in a bit. but in general:

from the main site(mendon)i can ping:
the bcm(192.168.12.200)
the bsr(192.168.12.201)
the warwick wan(96.x.x.x)

from the remote site(warwick) i can ping:
the bsr(192.168.3.1)
the mendon wan(98.x.x.x)
i can NOT ping the BCM(192.168.12.200) or remote BSR(192.168.12.201)

-how can i access the section to enter in S1 ans S2 on the ip phones?

thanks for the responses, it is a huge help and i really appreciate it

 

[nsanto17]

I would tend to beleive that when you get to the main site (mendon) you will not be able to ping 192.168.3.1.

In the mendon site what is the gateway your DHCP is giving out? is it different then 192.168.12.201???

If it is then you will need a static route set up in your gateway saying

all traffic for 192.168.3.0 should go though 192.168.12.201

I hope this makes sense.

I need to know what gateway the DHCP servers are giving out??? that is critical...

 

[jamaster14]

@nsanto17

- i agree... i doubt i will be able to ping 192.168.3.1 when i get to mendon.

- at the mendon site, im not sure what the gateway the DHCP server(bsr) is giving out. there is no gateway field/setting in the LAN settings menu in the BSR. is there somewhere/way i can check this?

-you said: "all traffic for 192.168.3.0 should go though 192.168.12.201

I hope this makes sense."

yes that makes sense to me.

-you said:
"I need to know what gateway the DHCP servers are giving out??? that is critical..."

if you can direct me to where i can find this i will post it for you, i want to make sure im getting the right info from the right place

 

[nsanto17]

since you have no VLANs then anything you connect to that LAN will get the DHCP data from the BSR as long as the BSR is the only DHCP server on the network.

Connect a PC to that lan and do an IPCONFIG /ALL in the command prompt and give me all the details you get.

 

[jamaster14]

here are the BSR LAN and WAN settings in mendon:

WAN:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=wanmendonside-1.png

LAN:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=lanmendonside-1.png

and the BSR LAN and WAN in warwick:

WAN:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=wanwarwickside-1.png

LAN:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=lanwarwickside-1.png

 

[jamaster14]

Im here at the mendon site now. here is some information you requested:

Connected to the switch port in the BSR, an ipconfig/all generates the following:

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8057 PCI-E Gigabit Ether
net Controller
Physical Address. . . . . . . . . : 00-24-BE-80-BF-68
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::dc7f:4336:3d81:c1a4%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.12.203(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Wednesday, August 11, 2010 2:18:47 PM
Lease Expires . . . . . . . . . . : Saturday, August 14, 2010 2:18:46 PM
Default Gateway . . . . . . . . . : 192.168.12.201
DHCP Server . . . . . . . . . . . : 192.168.12.201
DHCPv6 IAID . . . . . . . . . . . : 268443066
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-A8-5D-F1-00-24-BE-80-BF-68

DNS Servers . . . . . . . . . . . : 71.250.0.12
71.243.0.12
NetBIOS over Tcpip. . . . . . . . : Enabled


- i can NOT ping 192.168.3.1(i am in mendon)

 

[jamaster14]

After checking the configuration at the mendon site, the first site map i posted was a bit inaccurate. the warwick site was correct however its slightly different in mendon in that there is another switch i left out.

here is an updated site map, its 100% accurate:

http://s89.photobucket.com/albums/k204/jamaster14/?action=view&current=CertifiedSiteMap.jpg

 

[nsanto17]

if you do a tracert 192.168.3.1 where what is the last hop?

 

[jamaster14]

it doesnt get very far:


Tracing route to 192.168.3.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.12.201
2 * * * Request timed out.
3 * * * Request timed out.

when pinging the remote WAN(warwick):

C:\Users\Jamaster>tracert 96.253.60.67

Tracing route to static-96-253-60-67.prvdri.fios.verizon.net [96.253.60.67]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 192.168.12.201
2 2 ms 3 ms 2 ms L300.BSTNMA-VFTTP-77.verizon-gni.net [98.118.42.
1]
3 4 ms 4 ms 4 ms G6-0-577.BSTNMA-LCR-05.verizon-gni.net [130.81.9
6.124]
4 8 ms 8 ms 9 ms P13-0-0.BSTNMA-LCR-06.verizon-gni.net [130.81.30
.67]
5 5 ms 5 ms 5 ms so-7-2-0-0.BOS-BB-RTR2.verizon-gni.net [130.81.2
9.174]
6 8 ms 8 ms 8 ms P12-0-0.PRVDRI-LCR-02.verizon-gni.net [130.81.29
.31]
7 10 ms 9 ms 9 ms L1.PRVDRI-VFTTP-08.verizon-gni.net [130.81.247.1
49]
8 21 ms 14 ms 16 ms static-96-253-60-67.prvdri.fios.verizon.net [96.
253.60.67]

 

[nsanto17]

This indicates that the Tunnel is not working as desired.

I am not fimilair with the BSR devices. We use MPLS where ever we can and then we use Netgear VPN prosafe firewalls for the VPN. Works like charm.

From what i can see your tunnel is not working properly.

 

[jamaster14]

nsanto17

thanks for the info... any idea what specifically isnt working? a settings or area to look into? i can post screen shots if that helps