Remote H.323 extension. So close....

[thrtnastrx]

Adding a remote H.323 extension to a new customer 8.1, SonicWALL and 9608. STUN type is Full Cone NAT with proper ports opened on SW. When trying to login the phone the LCD shows "registration error" and the SonicWALL logs show Registration Reject. The extension (x9506) is programmed to allow remote extension, but I can't get it to connect. Right now I'm testing outside of our firewall in our office (not the customer's office) so the phone has a public IP. Does anyone know what I'm missing?



5 07/30/2012 13:32:32.128 Debug VOIP VoIP 64.60.174.28 (H.323) Endpoint added

4 07/30/2012 13:32:32.128 Debug VOIP H.323/RAS Registration Reject 192.168.11.220, 1719, X0 64.60.174.28, 49303, X1 Security Denial (9506)

3 07/30/2012 13:32:32.128 Debug VOIP VoIP 64.60.174.28 (H.323) (9506) Endpoint removed


APSS - ACIS - ACSS

 

[amriddle01]

You need to allow it in the extn and also the user

 

[thrtnastrx]

Forgot to mention that I even set the user as a Power User even though I know I don't have to. Enable Remote Worker is enabled.


APSS - ACIS - ACSS

 

[Westi]

what is on the other side? That can also cause problems

Joe W.

FHandw, ACSS

http://convergednetworks.ca

 

[thrtnastrx]

I added H.323 Gatekeeper Discovery (port 1718) to the list of opened ports and now the phone is working.


APSS - ACIS - ACSS

 

[jamie77]

Does the extn have a login code to register the phone? This is not needed for local IP phones but I believe it is for Remote phones.

Jamie Green

Football is not a matter of life and death-It is far more important!!!!

 

[tlpeter]

thrtnastrx, you need to open these ports

1719 UDP
1720 TCP
The RTP ports configured on the lan port where you enabled the remote worker option.
you need to enable remote worker on the extension that is used.
You need to enable remote worker on the user that logs in on the extension that is a remote worker.
You need to be sure that the external IP address can be pinged.
You need to turn off 801.q on the phone.

Did you do all these steps?


BAZINGA!

I'm not insane, my mother had me tested!

 

[amriddle01]

He has it working now

 

[mrplacid]

I have followed all of the steps above but the phone toggles between phone and registering.

Monitor:

2152267mS H323Evt: Recv GRQ from 56b1b940
2152267mS H323Evt: e_H225_AliasAddress_dialedDigits alias
2152267mS H323Evt: found number <217>

 

[mrplacid]

I'm struggling with this one too!

I have followed all of the steps above but the phone toggles between registering and phone.

Monitor:

2152267mS H323Evt: Recv GRQ from 56b1b940
2152267mS H323Evt: e_H225_AliasAddress_dialedDigits alias
2152267mS H323Evt: found number <217>

Any advice much appreciated.

 

[tlpeter]

That looks like a router that won't allow the remote worker.
What router do you have (both sides)

BAZINGA!

I'm not insane, my mother had me tested!

 

[mrplacid]

Draytek IP Office side and BT Home Hub remote side.

 

[bartshandle]

Draytek is not "supported" according to the Avaya Tier IV tech I spoke with. They also said that none of them could get Linksys products to work either. I have not confirmed their findings but I thought this may be helpful.

 

[tlpeter]

Try this on the Draytek:

In the 2820, check the option Firewall. In the recent releases they've implemented sth called 'Strict Security Firewall' which is enabled by default! This needs to be switched off as it messes with your IPO connectivity to the outside world. I've seen several 'weird' things going on myself with that function enabled. (For instance, SIP trunk registering fine, untill you reboot. Just no traffice 'allowed in' from the provider anymore. Switching off SSF fixes that instantly.)

Also, please be aware that in current releases also Bandwith Management>Quality of Service is enabled by default. It will limit your upload speed! QoS is divided into 3 classes + other, and each gets 25%. The 3 classes are obviously not defined by default so you end up with 25% of your upload bandwith because all traffic is classified as 'Other'.

This all also applies on the 2710 (the single WAN sister of the 2820), and the new VDSL modems (2750 and 2850).

And while I'm handing out Draytek tips anyways, for any of you guys using them in an ADSL2(+) situation, we've recently come across ADSL2+ connections which were training in just above ADSL1 speed (>8Mbit), but also training on different speeds all the time. Turns out they were sort of 'on the edge' of ADSL2+ distance from the operator switch. Also seeing a lot of CRC Rx Errors (in the thousands!).

The solution was to set the ADSL protocol to G.DMT (ADSL1). The line will then train on 8Mbit max, but stable, without errors! Fixed a lot of sites for us!

PS i use a Linksysy SPA-3102 for the port forwarding and works very well.


BAZINGA!

I'm not insane, my mother had me tested!

 

[amriddle01]

Cut and paste special, wasn't the originally Sean's Peter?

 

[tlpeter]

No from NLpeterK

Cheap star hopefully

BAZINGA!

I'm not insane, my mother had me tested!

 

[IPmonkey]

Draytek 2830 in our office and Remote H323 works for us?
Problem most likely to be the BT Home Hub.
I have another site where we are struggling to get them working and the main site has a BT Business Hub.

 

[tlpeter]

IPMoney,

Amriddle did mention those BT home hub as not working in a different thread.
So stop finding a solution, you wont get any


BAZINGA!

I'm not insane, my mother had me tested!

 

[amriddle01]

Well, as odd as it seems we had a BT homhub work the other day, it seems a Draytek office side with BT homehub doesn't work..... but if you can (with older Drayteks) roll the Draytek firmware back to 3.3.3 and it will start working with the homehub, did for us anyway

 

[IPmonkey]

tpeter, its the bt business hub at the office end that I'm looking for a solution for?
Andy was the bt home hub at the users home or at the main site?