J179 - Remote via TLS

[Johnhyde]

Hi

I've been trying to connect a J179 via TLS and cannot get it to work and not sure where I'm going wrong.

I can get the IX workplace working fine remotely over TLS, just not the phone.

Using a self cert from the IP Office.
Looking at other posts, it could be I've got something wrong with the cert, but then the workplace works fine.

Example i'm using:
DNS:domain.com, DNS:ix.domain.com, IP:1.1.1.1, IP:192.168.43.1, URI:sip:domain.com, URI:sip:ix.domain.com, URI:sip:1.1.1.1, URI:sip:192.168.43.1

The error I can see in monitor
TLS:Alert Src=192.168.43.1:5061 Dst=1.1.1.1:18986 Code=48 Level=Fatal
TCP Connection error 104 for Src=192.168.43.1:5061 Dst=1.1.1.1:18986

Any ideas where I'm going wrong?

Thanks

John

 

[shamorau]

Have you put your Public ip in the network topology tab of the LAN interface? have got port forwarding on the router to enable this for your domains? I would also recommend you get a cert for security if you are going to have access remotely to handsets.

 

[dsm600rr]

Not a good idea without an ASBCE

ACSS

 

[Johnhyde]

Yes the public IP has been setup, and is using a cert.

The IX Workplace works fine, just not the IP Phone.

IP Phone connects to the system as it getting it's update files, but when login in getting acquiring service.

 

[dsm600rr]

Are you using the correct password?

ACSS

 

[shamorau]

have you checked your cert then to see if its pointing at the correct IP address? have you uploaded it into the secure store and file management?

 

[Johnhyde]

The IP address is correct, the phone does connect to the system as I can see the phone is getting its update files.

As you mentioned, I think this is an issue with the cert, I'm using a self-cert, and I've uploaded it directly onto the ip phone.

Does the cert need to be in a particular format and stored in a particular folder?

Thanks

 

[Johnhyde]

Does anyone know the format the cert needs to be and which folder i need to put it?

Thanks