KXNS700 Remote EXT without

[Kierso]

Hi Guys,

Has anyone got remote extension working without a VPN.
I have an NS700 at the latest build connected to a draytek router.

The phone has been registured locally but when I take it to a remote site with a BT router the Phone will not connect.

At remote site I have set the PBX IP address to the address of the PBX ISP IP address and put port forwards on to the router.

Would someone know the exact set rules and ports?

Thanks

 

[obtsystems]

Do you have access to Panasonic dealer channel there is a PowerPoint the ports to forward to the system

 

[Kierso]

Hi obtsystem,

Thanks for your reply.

I have got a document dont know if it is up to date and followed the steps pointing the ports to the system IP address.
I have pointed some ports to the DSP. 16000 to 16055 etc.
This is a draytek router under port redirection.

See image attached

I have also attached the powerpoint

Ive changed an edited ports etc. Phone registures on system side but has fault under extension.

 

[Kierso]

Sorry see attached

 

[Kierso]

Here is the image

 

[obtsystems]

I think you problem is the ,16000 to 16511 is wrong
The draytec redirect is sending each port to a ip range. You will have to use open port to get the port range go to one address

 

[Kierso]

I did have the 16000 16055 port range set as open to system at 42.88. I will try this again and remove the range from Port forward. Does the ports not to be pointed to dsp card?

 

[obtsystems]

Yes it does but with the way it's is done on your router it was sending it to ip 189-144 range. I am doing one today with a draytec router and is my first one using that router and I saw the different with open port and I think you should use open port and redirect if it is coming in on one port and out on the lan on another port. I will post back or you let us know if it worked

 

[TheCoreWithin]

Hi Kierso,

im using Panasonic Products whit DrayTek Vigor routers to,
please use open ports instead of port redirections

So u can have set 1 IP for Multiple Ports
Use Port Redirection only for external port (example) 80080 to (internal) port 80
Open Ports are 1 on 1

if u need help config your router (draytek) let me know,

PS I strongly recomend an VPN for data safety, why not do other site an draytek to? (and build VPN?)

Panasonic TDA/TDE/NCP/NS Series

 

[Kierso]

HI Guys,

Thanks for all your responses. I would like to have set up a VPN but the person I believe will be moving between sites. This would be a sales guy who wants to unplug phone at one location and plug it in somewhere else.

Since then I have Opened Ports on the router at the systems end, as shown below.

Ports open UDP 16000 to 16059 to DSP card on system

Ports open UDP 2727 to 2727 to system Internal IP Address
Ports open UDP 9300 to 9300 to system Internal IP Address
Ports open UDP 123 to 123 to system Internal IP Address

Ports open TCP 7547 to 7547 to system Internal IP Address
Ports open TCP 37547 to 37547 to system Internal IP Address
Ports open TCP 7580 to 7580 to system Internal IP Address
Ports open TCP 37580 to 37580 to system Internal IP Address

Port Forward (Port Redirection)
Ports open UDP 15060 to 5060 to system Internal IP Address

I have then pointed the Phone to the External (Internet service providers) IP Address and have not did anything to the router at the remote end. The router at the remote test end is a BT home router.

The phone doesn’t connect but repeats saying "Server Connecting 1"
Would anyone have any further suggestions?

Thanks

 

[Kierso]

HI Guys,

I have now been advised that the BT Routers are the problem.
I will change this out an test and let you know.

cheers.

 

[TheCoreWithin]

why :

Port Forward (Port Redirection)
Ports open UDP 15060 to 5060 to system Internal IP Address

and not 5060 to 5060 ?


btw its NT series right? or UT Series?


Panasonic TDA/TDE/NCP/NS Series

 

[Kierso]

The Phones are NT series

I did a single port forward as specified on guide 15060 to 5060 system DSP address

 

[obtsystems]

they have to be the NT5xx series.
the port 15060 is for sip so you don't need that one

you need the external ip of the system side set into the media server and default is 16000 for nat voice.
point ports 16000-16511 or less to the dsp card address
Ports open UDP 2727 to 2727 to system Internal IP Address
Ports open UDP 9300 to 9300 to system Internal IP Address




These are for ut phones so not needed
Ports open UDP 123 to 123 to system Internal IP Address

Ports open TCP 7547 to 7547 to system Internal IP Address
Ports open TCP 37547 to 37547 to system Internal IP Address
Ports open TCP 7580 to 7580 to system Internal IP Address
Ports open TCP 37580 to 37580 to system Internal IP Address

 

[TheCoreWithin]

Yes like obt says,

and 15060 is an example in the document ( u need to set that in the UT system to if u do that) else yust firewall whit your draytek on 5060 wwhit system objects / groups whit your wan

still recmmend VPN between 2 drayteks, so u dont need to do that all,

if u need help whit the 2 drayteks i willing to help you to build VPN / Firewalls on them, so its secure
2 networks in 1 i sugest even VLAN / QoS on the draytek.

Panasonic TDA/TDE/NCP/NS Series

 

[obtsystems]

Even though the ports are open you need to tell the firewall it is allowed
If you do this correctly it is secure