Mitel 3300 with APC and MBG in DMZ - No Way Audio

[manutdfan1988]

We have a Mitel 3300 system which I am trying badly to reconfigure to our new network architecture which includes a proper DMZ behind a firewall.

The system has an APC card with MBG loaded and 2 NIC's (LAN and WAN).

My main question is if it is possible to configure this so that the MBG and MCD sit on different internal networks, as the configuration on the MBG always asks for a local IP before configuring external IP, the external IP is set to an address on the DMZ network which is NAT'ed by the firewall. The MBG is in DMZ mode, however it still has 2 NIC's enabled which I believe is incorrect for this config as reading manuals it says in DMZ mode there should only be 1 NIC active on MBG.

Because this is on an APC card it shares the NIC's with the MCD system which leads me to believe they cannot sit on different LAN networks, we also have VLAN's setup for the networks in question which may further complicate the issue.

Configuring it as below example has allowed teleworker SIP phones to connect but when making calls they get no way audio.


MCD - 10.2.0.20
MBG LAN - 10.2.0.21
MBG WAN - 10.2.4.17

MCD GW - 10.2.0.1
MBG GW - 10.2.4.1

10.2.0.x network is main server network and 10.2.4.x is the DMZ network.


Would appreciate some guidance if anyone knows how to configure the above, or whether it will require moving the MBG off the APC card and onto a seperate machine.

 

[LoopyLou]

Not sure because I have never worked on the APC other then when in an MXe Server. However with a shared NIC that NIC has to be attached to the DMZ and therefore addressing would need to be relevant to that ie if you did give the MBG an address from the DMZ and then the 3300 an address not in the DMZ would there be routing that could work with that?

I'd tell you a UDP joke but I'm afraid you won't get it. TCP jokes are the best because you always get them.

 

[DoubleUT]

The MBG has a test tool did you try that? The first test could be trying an Minet phone as the teleworker. SIP might be an issue for the Firewall. The fact that you can connect and communicate proves that your on the correct way.