Remote Mitel handsets

[andy4uk]

Hi Guys,

I have received this unusual request from a customer, firstly I explained to them that neither us or Mitel would support this setup.......

The customer would like remote handsets without using Teleworker and VPN, They would like to have certain ports open and try!!!!

I have also explained that they may also have security implications and would really recommend that they install a Telework, as this not only controls the remote handset securly but also deals with compression, jitter and so on.

Has anyone setup a remote handset in this way before..... if so can you advise ho this was done as the customer has already tried, have also opened up ports - the phone connects to the Mitel controller, you get dial tone, you are also able to call internally and externally..... however you get no speech!!!!!

Any help I would be extremly greatfull.

Cheers

 

[kwbMitel]

If I were in your situation, I'd tell the customer they were on their own. As you've said, the solution is not supported.

If they insist, make it clear that all development time is billable regardless of outcome. That usually shuts them up.

*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[IrwinMFletcher]

Same problem as people have with Teleworker, they think they open up the ports, but not all of them. Sounds like they have opened the Minet ports, but not the UDP streaming ports. Or, they've just allowed the IP address of the remote set and the controller.

 

[Canuckvoip]

I guess that if you opened up all the ports that are listed in the teleworker engineering guide, it might work but doubt it.
There are so many ports though that even if it did work your 3300 could be exposed to "ping of death/denial of service" type attacks I think.

I don't think your normal port forwarding will ever work. You would have an outside chance of success with a proper hardware based dmz...

Dave

You can't believe anything you read... unless of course it's this.

 

[MitelInMyBlood]

We've done this..... though it required a Cisco 831 vpn/ipsec router on the client side ($400+). What we had to do was basically create a LAN extension over a VPN tunnel. Network security folks were not happy. It was also not economically feasible. TW is absolutely the way to go.