J179 H.323 VPN Phones "Discover" after enabeling TLS and updating Ports 2

[dsm600rr]

Hello All,

I have a few VPN Phones that stopped working after enabling TLS and updating Remote Ports on the IPO

I do not see anywhere to update any ports on the J179. Is this a certificate error? I do not see any Certificate Errors in SSA.

Phones currently VPN back to a Cisco ASA and the tunnel builds just fine.

Thoughts?

ACSS

 

[derfloh]

The web interface (and perhaps the admin TUI) should show it.

Check 46xxsettings.txt for TRUSTCERTS. There it should reference WebRootCA.pem

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[dsm600rr]

derfloh: Yes Sir:

SET TRUSTCERTS WebRootCA.pem

I will enable the web interface on the phone and take a look.

ACSS

 

[dsm600rr]

derfloh: I found this, however I am not sure if it actually took the certificates needed for TLS:

Should I upload the root-ca.crt to the J179?

ACSS

 

[dsm600rr]

All - Remote SIP phone is working perfectly after loading the root-ca.crt

ACSS

 

[derfloh]

You have to ensure that the same that is delivered as WebRootCA.pem. No need to upload it manually then.

Or add the TRUSTCERTS parameters in 46xxspecials.txt referencing your root certificate.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[dsm600rr]

derfloh: I may not even needed to manually upload the root-ca.crt, I did it just because.

ACSS