Mitel Foritgate to Fortigate XNet - No Audio

[lost49]

Hi there

I am having trouble with a XNet connection running over a Fortigate to Fortigate VPN between two ICP 3300. The connection will come up and routing between the two systems works (ie I can dial extensions on each system) however there is no audio across the line.

This was previously running over a Juniper VPN and it was working 100%. We have had to move away from this setup due to business reasons.

I read an article about removing SIP fixup on firewalls as this could interfere with quality, however from what I have seen the XNet is running on a different port to SIP so I'm not sure if that would make any difference.

People connect to each of the 3300s and can make calls and if we dial the direct dial in numbers we can chat to the other system so this tells me that the two Mitels are just not talking to each other properly.

I can post configs if need be.

Any help with this would be appreciated.

Thanks

 

[lost49]

Alrighty everything is working now.

With an XNet link the phones need to be able to route to each other.

Who knew?

 

[danramirez]

I have about 15 VPNs and 3300s at each end using fortigate 60s, 100s, 50s and 30s.

It seems that the 3300s are communicating to each other but not the phones, rememeber phones are P2P and after call set up, phones need a path for talking to each other.

It looks you have wrong policies and/or routes set up in your firewalls. I will issue an user and password for you so you can have a look at one one of my firewalls.

Send me an email and I will provide access details

daniel

@

wtelecom

.com

Make sure:

-Use Route-VPNs
-It's always a good practice not to allow the phones to have access to the internet, only to the other end of the VPN.

Regards,

Daniel Ramirez

 

[lost49]

Great
I've been working with our Mitel system (on a very basic level it seems) for the last year. I was not aware that the phones were actually P2P once the initial contact through the PBX was made.

I'll lock down my phones to only be able to get to each other.

Thanks for info

 

[danramirez]

yes they are...

try this: make a call from one IP phone to another and disconnect the PBX from the network.

You will be able to continue your conversation over the phones but... you won't be able to clear the voice path as there won't be any call control to execute your commands.

Great you have sorted it out!!

Regards,

Daniel Ramirez