Mitel 3300 WAN Port for remote access

[braindead2]

Can anyone help, I'm trying to setup the Mitel 3300 for remote access via DSL on the WAN Port.

I have setup the Mitel WAN port for a static address in the DSL router IP range, and setup port forwarding on the PPTP port number 1723. I have programmed PPTP form with the username/password and to give me a IP adddress back in the same subnet as the 3300 which is on default 192.168.1.2

The VPN works and the system returns the IP address 192.168.1.251 as programed in the PPTP form. However, I cant access the 3300 on 192.168.1.2. I can ping the L2 switch on 192.168.1.1 but thats about it.

Really need a break as its driving me nuts!!!

 

[Supernova99]

Have you checked your firewall and port forwarding forms?

Share what you know - Learn what you don't

 

[braindead2]

Kind off, I have turned off the firewall for the WAN port and turned off PPTP pass through as well. What do I have to setup in the port forwarding form?

 

[Supernova99]

check the internal help it has a lot of info of what needs to be programmed.

I would think that you will need TCP ports 80 and 443 pointed at your internal IP address if you want to connect over the WAN

Share what you know - Learn what you don't

 

[braindead2]

Just done that and still the same, I set up port forwarding for ports 80 & 443 to 192.168.1.2 but still cant get to 192.168.1.2

The internal help on the Mitel 3300 is limited when trying to setup something like this. There is nothin that says "this is how you have to set it up in this senario

 

[Supernova99]

Have you programmed the routing form?

Share what you know - Learn what you don't

 

[braindead2]

No, what address do I have to put in there?

do I have to put in the controler addy 192.168.1.2 255.255.255.0?

 

[Supernova99]

you should have both local and remote networks programmed
e.g. 192.168.1.0 255.255.255.0
10.1.1.0 255.0.0.0


Share what you know - Learn what you don't

 

[Supernova99]

This document might be usefull

http://www.mediafire.com/?anc6i2eig5mia

Share what you know - Learn what you don't

 

[braindead2]

It has the defaults 192.168.0.0.255.255.0.0 in there which would cover both networks

i.e.The controller is on 192.168.1.2 255.252.255.0

The default address on the WAN connection is 192.168.2.251 255.255.255.0, but the TTPT gives me back an IP address of 192.168.1.251

and I an ping the L2 switch address 192.168.1.1 no problem.

 

[Supernova99]

does your WAN display a public IP address?

Share what you know - Learn what you don't

 

[braindead2]

No, its programmed as a private static 192.168.2.251 from the Demon ASDL router and I use port forwarding on the Demon ASDL router to forward PPTP trafic from the public IP address to 192.168.2.251

 

[Supernova99]

is it worth giving the WAN network a different network address other than 192.168 e.g. 172.16 or 10.0
It is very odd that your TFTP is being resolved with the 192.168.1.251

Share what you know - Learn what you don't

 

[braindead2]

I have uploaded my IP configuration to

http://www.mediafire.com/?wlu7in47tl6snl7

And would be really greatfull if you could have a look t for me. I'm going to have to raise a ticket with Mitel If I cant find a resolve

 

[Supernova99]

I have had a look and it seems fine to me
the only questions I have are

Can you ping 192.168.1.2?
Also can you telnet to it?
are you able to setup a wireshark trace to see what is being sent/blocked

Share what you know - Learn what you don't

 

[braindead2]

It worked there for about 5 mins. I accessed it twice via telnet and browser. Called my boss who accessed it and called me back to say it was working. I called another engineer who couldn't access it. Now I cant access it again.

1)I can ping 192.168.1.3 which is the layer 2 switch
2)If I ping 192.168.1.1 I get destination unreachable from 192.168.1.3 (which is correct as 192.168.1.1 is not on the system
3)If I ping 192.168.1.2 it just times out

are there any session limits of anything like that on the system?

 

[Supernova99]

looks like a routing issue to me
you could try disabling the firewall temporarily

Share what you know - Learn what you don't

 

[jonmyk]

Doesn't your L2 address have to be the same as your gateway for this to work? Might just be brain fog but I seem to remember some case where the gateway & the L2 requires the same IP address.

"The only problem with common sense is that it's not that common

 

[wireman50]

I suspect this is not an issue with your setup but with the machines being used to browse to the 3300. I have this with one of my sites. My MTU is set to 1300 and so is the firewall and I can browse to it no problem however anyone who's MTU is set to 1500 cannot...(or even 1462) So I sugest trying various MTU's especially twhatever the firewall is set to because if its wrong you are unlikely to ever reliably browse to the Mitel.(Mitel is set to 1500 MTU by the way)

 

[veenstrahiem]

It might be nothing, but what kind of ip-adres does the pc have that makes the vpn to the mitel, if youre using the same kind of subnet 192.168.1.xxx it will not work very well.