Mitel 6000/Mitel 3300 One-Way Audio Teleworker

[fluiddesigns]

All,

I have been scouring the web looking for answers and have come up short. We just changed internet providers and I got everything up and running except this pesky little issue with one our Teleworker users. I can hear him but he can't hear me. He says he can't hear anything when he dials into his voicemail either. Problem is he's the only teleworker user right now.

So let me give you guys the setup.

Cisco ASA with a Vlan for the Phones/3300 using a global IP

I didn't do this setup but have left it as is.

/--Cisco ASA Outside Interface - IP 96.XXX.XXX.106
Public Internet ------ Network Switch ---
\--Server/Gateway port of Mitel 6000 MAS - IP 96.XXX.XXX.109

/--- Mitel 3300 - 192.168.46.2
Private Network -----Cisco ASA phone interface ---
\--Local Port of Mitel 6000 - 192.168.46.5

Review config from MAS
Networking Parameters
Server Mode servergateway
Local IP address / subnet mask 192.168.46.5/255.255.255.0
Internet Visible IP Address 96.XXX.XXX.109
External IP address / subnet mask 96.XXX.XXX.109/255.255.255.0
Gateway 96.XXX.XXX.1
Additional local networks 192.168.46.0/255.255.255.0
10.2.10.0/255.255.255.0 via 192.168.46.1
DHCP server disabled

So the MAS is OUTSIDE of the ASA firewall. And the firewall is grabbing it's public IP to through the same switch. So I can ping the public IP of the MAS from both the inside computers and the firewall on all interfaces. This was all working until I switched providers and all I did was change my IP address which I'm sure I've made the changes everywhere. Am I supposed to specific a public somewhere on the 3300?
Thank you for your help in advance.

 

[kwbMitel]

When the one way that fails is outbound it is fairly obvious that you have a routing issue.

The packets from the inside phones are not routing back out thru the MAS but instead routing out the standard internet connection for PC's.

You need to setup your gateway routing to send packets originating from the voice vlan to the MAS.

**********************************************
What's most important is that you realise ... There is no spoon.

 

[fluiddesigns]

Where my confusion lies is that this was working and I didn't change any routing statements in my ASA. So my question here is should I be setting up a route statement that sends all packets from the voice vlan to the Internal address of the MAS? Now will this affect current internal users?? They are all up and running so no need to mess them up. Remember this issue is only with the teleworker not the rest of the users.

 

[LoopyLou]

Typically you need to allow the internal voice LAN traffic to route to the external MAS IP address ( i.e internet facing ). Have seen firewalls that block that by default.

The beatings will continue until morale improves.

 

[fluiddesigns]

This is the error I'm getting on my Cisco ASA when I try to make calls

3 Jan 27 201408:53:40305006 96.XXX.XXX.109 portmap translation creation failed for udp src phones:192.XXX.XXX.21/50068 dst outside:96.XX.XXX.109/20011


I can't seem to find the rule to get this to work....

 

[jrgood0852]

I would run the TW analyzer tool and see what it shows. Also, make sure all necessary ports are open to allow voice traffic from his service provider.

Always look out for the next guy because it may be you!

 

[kwbMitel]

The TNA will only show the status to the external port of the TW server.

The issue is that the return packets from the internal sets are routing out the wrong internet connection.

**********************************************
What's most important is that you realise ... There is no spoon.

 

[fluiddesigns]

Issue was whoever previously configured the firewall didn't assign the phone vlan to be part of the global interface. Once I added global (phones) etc all was well. The rules were all useless without this.

 

[jrgood0852]

Thanks for clarifying, KWB. I've only used it once.

Always look out for the next guy because it may be you!