IPKII and PVA MG16 IP Phones, No Audio Path

[viper222]

OK, I have an IPKII with a PVA loaded as a Megaco 16. I have the CPU, and PVA card behind a firewall, and have programmed

10-12-01,02,and 03 with my LAN IP Address info, I have 10-12-06, the NAPT Router, check marked and 10-12-07 NAPT Router IP Address setup as my WAN IP Address. I have 10-12-08 ICMP Redirect also check marked.
also
84-05-01,04, and 05 setup with my LAN info, (basically the same as in 10-12-01, 02, and 03)

What is happening is, if I am onsite, and use the IP address of the MGC as the local LAN of the PVA card everything works great. If I am offsite at another location WITH OR WITHOUT another router in play (ie: I have tried it by staticing the ITH phone as the WAN IP address so I could elimenate one router from the equation) it will not work. It will connect to the MGC, it will give FULL control, you can do everything, it rings, you can dial, but you just have NO talk path. Under my Router at the Site where the IPKII is, I have made sure ports 2944,2945 - 10020,10021 - 14150,14152 are pointed to the PVA Local Lan IP address and I have set the MGC on the IP Phone to the Wan whee the IPK is behind. Like I said, it connects, has FULL control, just no talk path. Remember, on the phone side, I even connected directly to the WAN of the ISP to make sure it wasn't a router issue on this end.

Does anyone have any ideas

OR AT LEAST, does anyone have this scenario working, an IPKII behind a firewall, with ports routed, and phones offsite using internet connections.

I have installed this setup many times in the past using IAD cards with the latest version of firmware.

 

[smoom]

Use a port scanner, something is blocked on your firewall.

 

[pave35]

You MUST use routable addresses(public IP address) on the PVA and CPU. You cannot use NAT at the main site only on the remote site.
This is because on a call set up the PVA card responds to the IP phone with a packet containing an IP header with the address of the router. Inside of this packet there is a field called Session Description Protocol (SDP). The SDP reports the Remote Connection IP Address as the private address of the PVA card (E.g. 192.168. etc). The IP phone at that point attempts to comunicate to the non-routable address hence the loss of speech path.