Need IP406 help with VOIP over a VPN

[johnnybravo1979]

Quick question that I can't seem to find any help on. I have two sites connected through a vpn.

IP406
Site 1 (main) .1 subnet
Phone sys .42 subnet
remote site .2

We have a mix of Digital and IP phones at the main site, all working wonderfully. (Ip phones are 192.168.42.xxx)

The VPN is established and working well.

My question is, should the IP phone at the remote site be on that local subnet, or that of the phone system?

It seems like everything I try, I get "Discover xxx.xxx.xxx.xxx"

Or am I missing something in IPOffice that I should be doing?

Thanks for your help!

Btw, this is going through a Hotbrick 800/G and a SoHo401VPN

 

[as1981]

I have this working but using switch vlans. The remote IP phone is in the voice vlan. Not sure if that helps you?

 

[kwing112000]

It sounds like maybe you need a IP route in the IPO to get to the remote phone. something like

192.168.2.0
255.255.255.0
Gateway to that network
LAN1


Kevin Wing
ACA- Implement IP Office
Carousel Industries

 

[IPXTech]

So long as you have routes setup between the .1 and .42 subnets, having the IP phones setup on the local subnet at the remote site should be fine. Just want to make sure that you've got whatever device is doing your routing is setup to route between those two subnets, then add an IP Route in the IP Office to make sure it can talk to the .1 subnet as well. Then you should be all good.

 

[tlpeter]

The phone must be in the network where it is !
When it is in the .42 then it must have an ipin the .42 network

The settings "router" is the vpn gateway on the remote site
Callsv is the ipoffice

In the ipoffice program an iproute to the vpn gateway on the ipoffice site

The vpn gateways do know how to route the calls (if setup right)


ACA - Implement IP Office
ACS - Implement IP Office
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[drewdown]

The phones don't need to be on the same subnet. Configure DHCP at the remote site to use option 176 and point the phones to the IP Office. IE if your IP Office switch's IP is 10.10.1.20/24 and your phone is on 10.10.42.x/24 then your 176 DHCP option for scope 10.10.42.0 would be:

MCIPADD=10.10.1.20.MCPORT=1719

And if your routing is configured correctly you don't need any routes on the IP Office.

I have this exact setup but with more than 1 VPN tunnel and each location the phones are separate subnets.

 

[johnnybravo1979]

Thanks for your tips guys, I'm still working on this. Would it be safe to assume that if I can't ping the phone system from the remote site, then a phone wouldn't work?

 

[amriddle01]

Yes, if a ping can't get through that's pretty good evidence the link isn't working/configured correctly

ACS - IP Office Implement

 

[amriddle01]

Just looking at the original post you say the VPN is working well but yet you can't ping through it which would suggest otherwise.

ACS - IP Office Implement

 

[kwing112000]

You are correct. It sounds like the IPO can not reply. this indicates a Ip route may be needed. If you can ping other devices on the remote network then it is the IP route.

Kevin Wing
ACA- Implement IP Office
Carousel Industries

 

[drewdown]

Can you ping other devices at the remote site? If so then yes it would be safe to assume that. Can you ping the IP office from the remote site? If you can then you are halfway there.

How is DHCP handled at the remote site? You could statically assign IP options to the phones, but that can be a pain with a lot of them.

 

[keke6608]

I met same problem a few weeks ago. I changed the firewall ICMP from drop to bothway on IPO, then It is working.

 

[johnnybravo1979]

Well, I got it working, it came down to just needing an IP route in IPO. I couldn't ping the phone system from the remote site because IPO didn't know the route to get back with the ping reply. I just needed to enter the gateway for the remote site. After I put in that route, I was able to ping the crap out of the phone system from the remote site.

Thanks for everyone's help. This forum is a fountain of knowledge.