Remote H323 Extension on domestic router

[jimbo1007]

After spending a few days looking online of how to connect a 9620 handset to the IP Office so it can be used as a remote extension I still have a couple of questions which I hope someone may be able to clear up.

Firstly, I have been told that I need to modify the 46xxsettings.txt file on the 9620 but there is no mention of this on the manager help tool when looking at remote h323 extensions, so I think this may only be needed when a vpn to vpn connection is in place however please confirm whether this is actually needed with h323 remote extension?

The manager help tool then states that the public IP address needs to be forwarded to the IP Office. The ports 1719, 1720, RTP ports and UDP 5005 need to be opened on the router. The customer has a Netgear DG834 router, does anyone know of any guide which can explain how to do this on the netgear?

Thanks in advance,

 

[Westi]

Remote phones work without changing anything in the 46xx settings file as you thought.

I use a Netgear FVS336GV2 and the way this works is you need to create the service under the security option (namely give it a name and tell it the port(s) to use) then assign these services in the security - Firewall options to point to the IP address of the phone system.
You need to also differentiate between UDP and TCP ports as 1719 is UDP and 1720 is TCP that is all and then it works like a charm without encryption that is so make sure that you know.

I just checked into the manual of the router

http://kbserver.netgear.com/pdf/dg834_g_b_manual_v2.pdf

there are firewall inbound rules that you can put in and also services like on my router.

Joe W.

TeleTechs.ca
FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[jimbo1007]

That's great, thanks Joe I will give this ago when I'm back on site.

Also I have two 9620s on site at the moment. They have been configured as h323 using auto create user and the extension but the manager guide says to create the extensions manually. Do you know if I can amend these existing handsets or should I do a clear and start again? I know I need to put in the public ip as the call serve address so perhaps this is the only way. I am hoping not though as I have not done a manual set up before.

 

[Westi]

you can change the settings in the extension to allow Remote User even if it is already created.
If your system is on the Internet turn auto create off even if you only port forward it is on the Internet so again turn the auto create off

Joe W.

TeleTechs.ca
FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[jimbo1007]

Thats great thank you. Please could you let me know where I need to change the call server address to the public ip address. It says this is phone configuration on manager help so im assuming somewhere on the handset?

Also with regards to where I enter the STUN address I have found two bits of conflicting information. On an installation guide I found the following;

b. If STUN reports the Firewall/NAT Type as one of the following, the network must be reconfigured if
possible, as these types are not supported for remote H.323 extensions: Static Port Block, Symmetric NAT
or Open Internet.

But then on a distributors blog shown below, it says to set the firewall/nat type to static port block.

http://blogs.scansource.com/h323-remote-phone-quick-setup-guide/

Please let me know which is correct?

 

[ncarter2]

b. If STUN reports the Firewall/NAT Type as one of the following, the network must be reconfigured if
possible, as these types are not supported for remote H.323 extensions: Static Port Block, Symmetric NAT
or Open Internet.

This is incorrect, I think they have it backwards in the Documentation. Those are the Nat types that DO work...

 

[jimbo1007]

Ok thank you