Routing Mitel

[cmcinnes]

Hi All

I am a tek tips virgin and dont have the greatest knowledge of mitels, but thecompnay i work for have a mitel 3300, using 5215 IP phones what i have been asked is to find out if it is at all possible to have a mitel 5215 IP phone located at your home (for days that we will be working from home) and have it conenct to the companies 3300 ASU on their internal network?? we have triued to test this but failed as we believe that the phone cannot route through a default way. As i said i dont have the greatest of knowledge on this and i looking to help my boss on this one. Any help woud be very greatful

 

[MitelInMyBlood]

The feature you need requires Mitel's Teleworker software package, basically the 6000 MAS server and model 5220 IP phones. The server software is quite inexpensive and since it runs under Linux you can install it on basically any old Pentium-II class machine you have available (or faster).

 

[cmcinnes]

Hi MitelInMyBlod

Thanks for the quick reponce and for the information given. So just to be clear there is no chance that the 5215 IP Phone can support this as we have bought 30 of them, the server wont be a problem but the phones could be.

Thanks Again

Chris

 

[MitelTech]

Well, there is an "out" instead of using Teleworker. Teleworker is an awesome product (have a teleworker set right here beside me) but you can get around it. This may be a more expensive solution, but, you can establish a IPSec VPN between the corp. lan and the users home, then statically assign the needed info in the IP phone and it would register to the corp. 3300ICP. I've done this using 2 IPCop boxes (just Google IPCop if you don't know what it is) and it works fine. If you don't know what an IPSec VPN is then this is probably beyond your skill set. As far as costs are concerned, IPCop is free and will run on ancient old hardware (my servers were PII 333's with 128Ram). But, I will go on record as saying the Teleworker solution is a much better idea.

 

[cmcinnes]

Thanks MitelTech

I am ok with VPN's ETC, what our idea is, is to create a vpn connection from home to the corperate network where the DC has an external IP to take the VPN connections and an internal IP connected to the IP Phone switch and we are using RRAS to send the packets onto the IP Phone switch to access the 3300ICP, but so far we have been unable to get the phone to use the gateway (as when we configure the static IP on the phone we try and ping the 3300ICP and it fails, althogh the PC with the VPN connection can ping it no problem.

Thanks

Chris

 

[MitelTech]

That's fine as long as the 2 networks are distinct and routable. This needs to be a hardware solution, not software on a pc.

 

[MitelInMyBlood]

To expand on this just a little... Actually you CAN use your 5215 sets, also the 5020 (rev G or above) and the 6010 Teleworker software is really cheap, comparatively speaking, tho I cannot provide specifics. Probably in the neighborhood of a couple hundred bucks or so, give or take. It is a very elegant solution and very highly recommended.

Here are a few points to beware of;
-Be very sure the Ethernet ports to which the Teleworker server will be connected are _FULL DUPLEX_
-When deploying the Teleworker Server as a gateway, the external server interface _MUST_ have a publicly-routable static IP address assigned to it. Sorry, it cannot reside behind a NAT'ed router
-If the server is being set up in a VLAN, be sure to put the server on the VOICE VLAN, not the data vlan, for reasons which should be obvious.

For Teleworker release 3.1 (current release) Mitel recommends PC Server hardware having an 800 Mhz CPU speed and 256 Megs RAM with 10g HDD and a CD Rom reader. Single Ethernet interface for server use only, dual Ethernet ports for Server/Gateway applications. It runs Red Hat Linux 7.3 which will be provided on the software CD.

Teleworker is not at all expensive to set up and deploy and from the sound of things you already have some phones which will work with it.

 

[cmcinnes]

A big thank to everyone for their guidance. I got to work today and set up all the VPN connection etc, the phones are commiunicating with the 3300ICP, the phone on the VPN can sent out voice data but cannot recieve any. Does anyone know why this might be??

thanks again

chris

 

[MitelTech]

Certain ports are being blocked by your VPN solution, or there is an improperly configured default gateway somewhere.
Generally, when a set does not receive voice it means the IP path back from the far end device (other ip set or 3300 if it is a TDM call) is incorrect. Meaning, one of the subnet's involved default gateway does not have a path to the network containing the remote user.

 

[MitelTech]

Another thought, since you are able to complete the TFTP download (part of the sets bootup procedure) that means the 3300 can send data to the phone just fine. So, if TDM calls (trunks or analog devices) to the remote user fail, then it's a port problem. If TDM calls work but IP set to IP set calls fail, I'd look at the default gateway issue. I'll look up the ports needed so you can check in to that.

 

[MitelTech]

Alright, as far as voice is concerned it runs on ports 9000 & 9002 according to the engineering guidelines.

 

[MitelTech]

The doc also mentions UDP ports 5000 to 5256 as speech channels as well. Let us know how you make out.

 

[cmcinnes]

Thanks MitelTech

Really appreicate it, you are right it is to do with the gateway and the mitel unable to route the packets back properly, let me explain what we have been trying to do so far

To test our the theory we have been using and ADSL Router and a PC, and one 5215IP Phone, to simulate the home part of the VPN, the PC has 2 Network cards, 1 on a 192.168.0.0 network the other on a public IP, we used the PC to connect to the Corp VPN where it recieved a 10.x.x.x IP, on the corp firewall we added an IP which is on the Phone Network, so once the VPN conencts we can ping the Mitel 3300ICP, we then set the 5215IP phone on a 192.168.0.4 address and added a route for it on the 3300ICP, we were then able to make and recieve calls no problem, but we could not send voice data. The reason i discoverd is becuase the mitel 3300ICP has no physical was of routing onto the 192.168 network.

So our next plan to to configuer VPN servers at the home side of the network and the corp side of the network us 10.x.x.x. network so that the IP's recived once connected to the VPN are alway 10..x.x.x, so in theory the mitel ICP3300 will have no problem routing the packets back

Please let me know if this is total garbage and cant work as i dont want to spend most of the day setting this up for it to fail.

Failing this i think my boss will be buying the teleworker software

Thanks

Chris

 

[cmcinnes]

Just an update

The VPN Server to VPN server worked great can make and recieve call no problems.

Thanks to everyone for their info on the matter.

Top Forum

Chris