Mitel Micollab working from outside only

[voipneerd]

Hi All
I've customer facing issue with micollab soft-phone over lan-AP. Soft phone working from outside.
But from inside it's register . And when try to call phone extensions

From UC --->>> IP Phone
IP phone parties answer but on UC the call still rining

From IP Phone ---->> UC
It's working fine

MIcollab deployed with 2 nic
nic 1 -- LAN
NIC2 -- DMZ

We have 2 DN server
external FQDN assinged for the DMZ
Internal FQDN Assinged with the LAN IP

Any thoughts how to solve it

BR

 

[TBird-Dave]

I have the exact same issue. Please update this if you find the answer. I will do the same.

 

[Billz66]

Micollab Nic2 = DMZ
this isnt supported
Nic 2 can only be Public IP

you probably need a seperate MBG in DMZ and cluster that to micollab
set Public Ip to nat to MBG IP

If I never did anything I'd never done before , I'd never do anything.....

 

[TBird-Dave]

Hey Billz remote, this works perfectly. everything is traversing the firewall through the DMZ. When I bring the softphone in house is where the trouble begins. I have the Mitel guy checking to see if trusted networks are defined, which may the issue. We are using DNS FQDN (same names), pointing to the private IP address of MBG (only one nic so I guess I'm a little different than voipneerd) on the inside, but pointing to public (NAT) IP on outside. I will be opening a service request with Mitel shortly so I'll keep everyone posted as to the outcome.

 

[sarond]

I would start by getting some packet captures from the MBG of both scenarios and compare.

What is your PRACK setting in "MBG > Settings > SIP Options > PRACK support" maybe change it to see if it makes a difference.

@TBird-Dave - You won't be able to point to the internal of the MBG for MiCollab SIP Softphone, it needs to be WAN address of the MBG or the MiCollab server.

 

[TBird-Dave]

the private IP is the only IP on the MBG. The external IP is a function of the firewall. Is the MBG coded somewhere where it knows it's public IP?

 

[TBird-Dave]

ok I'll do some more testing and see what shakes. Thanks for your input!

 

[sarond]

Sorry, I missed that you only had a single NIC so must be in DMZ mode.

 

[TBird-Dave]

yes. I am getting the Mitel guy to add the trusted networks to this server before I test any more. The question I now have is, does the MBG know what the NAT IP is? Not sure that matters because the firewall would be sending all data to the private address anyway. Therefore, if I'm sending directly to the private address, the MBG shouldn't know the difference. So I'm going to hang my hat on the "trusted network" component for the moment. I'll get back to you later today.

 

[sarond]

Even in DMZ mode the MBG will need to know the public IP.

What does your network profile look like on the MBG?

Yes you will also need trusted networks to be correct as these will be considered local.

 

[TBird-Dave]

I added the trusted networks to the list it seems a little better, but not 100% I can dial outbound but cannot dial certain extensions inside. I get one way if I dial. However If I dial the softphone from the other extension, it works. One other thing I noticed it the MODE is "Custom" You guys are talking about "DMZ" mode Im looking at that next.

 

[sarond]

In custom mode what is your set-side and icp-side streaming addresses?

set-side is normally WAN address after NAT (public IP), icp-side is the internal IP of the MBG.