No voice on Avaya Workplace when remote since switching to SIP

[nick3c]

Hi,

My customer was using Avaya Workplace fine. Internal and External. We migrated from ISDN to SIP, then it broke for users who are external. Works fine internally or externally using a VPN, but externally without VPN, which the mobile app is using, does not work. Logs in and can place and receive calls, but no voice. I have even tried Mute and un-mute, still nothing. This points to RTP ports, but I have tried everything I can to fix it, but not really getting anywhere. Any ideas?

Images of my setup attached. I have tried with Direct Media Path on and off. I do not have an SBC, just a WatchGuard Firewall.

I have ports Incoming to the IPO using SNAT on:
UDP 5060
TCP 5060
TCP 5061
UDP 40750-50750
UDP 6060
TCP 6060
TCP 6061
TCP 411
TCP 8411

I then have the following ports allowed out from the IPO IP Address:
UDP 5060
UDP 40750-50750

I have been battling with this for weeks. So any help would be gratefully received.

Nick

 

[sizbut]

This points to RTP ports" - Maybe, but equally points to Codecs, and/or SIP ALG on the firewall.

Stuck in a never ending cycle of file copying.

 

[nick3c]

Thanks you your reply. SIP ALG is off. Shall I just tick and select all Codecs to cover me?
Thanks again

 

[sizbut]

I said Codecs before spotting that you weren't using an ASBCE (which does have settings which set what codecs are allowed). However it never hurts to check that everything is supporting the same set of codecs wherever possible.

Stuck in a never ending cycle of file copying.

 

[derfloh]

Maybe direct media is enabled in SIP trunk?

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[nick3c]

Hi,

Cannot see Direct Media Path enabled on the VoIP tab on the SIP Line.

Bugging me so much

 

[vfotineas]

Hi
Do you use ASBCE?
If not how the workplace register to IPO without VPN?

 

[derfloh]

I usually set the Firewall to "static port blocking". Don't know if this will make a difference.

You should have a look at the SIP messages and check the SDP information as well as you should check if all the needed ports are open in your firewall.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[nick3c]

Thanks everyone for your replies thus far. We do not have an ASBCE. Just a WatchGuard Firewall with port forwarding. We just a FQDN for the connections, which resolve internally to the internal IP and externally to the external IP. As I said, until we moved from ISDN to SIP it was all working perfectly.
I will test static port blocking, but if that doesn't work, what are the best Trace options to monitor RTP traffic?

Thanks again

Nick

 

[derfloh]

As mentioned... Check for SDP within SIP messaes and look if all is correct.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[nick3c]

Avaya Monitor confuses the hell out of me as I am an IT Engineer, not a phone one. I have checked all options on SIP and Media Trace Options and performed a test call. I have attached the Log file. Would someone mind taking a look for clues please?

I have changed the source number to be 01394123456, and the destination to 07812345678.

Thank you so much

Nick

 

[nick3c]

Morning,

Sorry to chase, was anyone able to decipher the Monitor Log? Thank in advance. We may have to pay for professional help with this case

Nick