Ping or no ping?

[Draeus]

Hey Avaya Tekkies,

I am working on an IP Office that I finally got to ping in and out (thanks to reading some of the old posts here). It's directly connected to the net (fiber connection comes in RJ45). Well, comes in, hits a switch, and then from the switch goes out twice, once to a router and once to the Avaya. There is no firewall rule on the Avaya. I know, it's not even close to ideal, but it's what it is right now until I can get some things working and then put security in place. It also has an IP on the internal network.

Anyway, every so often I stop being able to ping or connect to the public IP it is on anymore. I haven't timed it, but maybe an hour or two. When that happens, I have to remote into the site, open the system status, ping out once, and then it's good to go again for awhile. I am just wondering if anyone else has ran into an issue like this before I check with the fiber company to see if they have some weird setting on their end.

Thanks in advance!

 

[Bas1234]

When that happens they are trying to hack you.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[sgrossman]

What is the IP address you are using?

 

[Draeus]

Not sure if you are kidding or not, Bas, since that actually seems like it could be a good security feature. But there are no failed login attempts or anything. I at least have the passwords changed.

Sgrossman, I'd tell ya, but you'd have to promise to set up my SIP lines for me It won't be like that for very long anyway. I just needed to test some stuff and ran into the ping issue.

 

[IPGuru]

It's directly connected to the net (fiber connection comes in RJ45)

Never ever do this!
make sure the system is placed behind a NAT firewall with no port forwarding as an absolute minimum!
unless you are using remote H323 phone (Nat traversal) or one-x mobility clients there is no need for any port forwarding
if you do need port forwarding then only forward the minimum necessary
NEVER forward the IPO Admin ports.

if you need to administer the IPO Via the internet either configure a VPN or restrict access to known addresses at the network border.


A Maintenance contract is essential, not a Luxury.
Do things on the cheap & it will cost you dear