SCN connection going up and down

[redswine]

Any reason on the IPO side that an SCN connection will every 5-15 minutes drop and then come back up 5-15 minutes later. I've deleted the lines, rebooted, rebuilt them and rebooted again and the problem persists. The IT guy has rebooted the routers at each location. The curiosity of this is that it never seemed previous to me switching the 0.0.0.0 ip route from LAN1 to LAN2 to accommodate the new remote IP phones that the IT guy could not figure out how to get to work through his Cisco ASA firewall either through VPN or port forwarding. So I bypassed his firewall and gave the IPO a public ip address (and secured it) on LAN2. I also am now routing the the SIP trunks via LAN2. But since then, I have had issues with the SCN line. Here's my config:

Main site 10.1.10.253/255.255.255.0/10.1.10.1
VA site: 192.168.10.5/255.255.255.0/192.168.10.1

Main site IP Routes: 0.0.0.0/0.0.0.0/Public IP
10.1.10.0/255.255.255.0/10.1.10.1
192.168.10.0/255.255.255.0/10.1.10.1

VA Site: 0.0.0.0/0.0.0.0/192.168.10.1

 

[janni78]

What I read from this is that you've connected the IP Office directly to the internet with a public IP with no firewall in front of it?

"Trying is the first step to failure..." - Homer

 

[Westi]

0.0.0.0 route directly on the public IP is a bad idea. Not sure how you secured the interface but the built in firewall is a joke.
Take a router/firewall and put it between, create a IPSec VPN and connect the site together. That will also give you some troubleshooting abilities within the VPN status
Remote phones do not have to connect to the IP Office on the public IP address, rather forward port 1719 to the ip office and the RTP ports (google the specs, there is lots of stuff out there and maybe even a FAQ)

Nevertheless, dropped SCN
do all the phones drop as well when that happens? if yes the it is either the Internet connection or the IPO
Ping program to internal and external address will shed light on it but only as a basic tool.

Joe
FHandw, ACSS (SME)

Remembering intrigrant 2019

 

[redswine]

I know it's a bad idea, I'm still annoyed at their IT guy. But to answer your question, no, the IP phones, nor the SIP trunks are affected. Only the SCN which is the only thing connected to LAN1.

 

[icet500]

So now you are using lan1 for scn, what type of connection between the sites? Mpls or vpn?

Is this a server edition or ipo500v2?

Switch the scn lines on both location to websocket and use same password then see what happens!

 

[redswine]

So now you are using lan1 for scn, what type of connection between the sites? Mpls or vpn?

Is this a server edition or ipo500v2?

Switch the scn lines on both location to websocket and use same password then see what happens!

VPN, IPO500v2

I'm not sure what you mean by websocket

 

[TouchToneTommy]

On IP Office Line, change Transport from Proprietary to Websocket Server at one side and Websocket Client at the other. Enter the same Password/Confirm Password all around.

This changes the protocol to HTTP and finds its way through firewalls easier.

WebSocket Client / Websocket Server: A WebSocket connection is an HTTP / HTTPS initiated TCP pipe through which Call signalling and Network Signaling is tunneled. This transport type is used to connect IP Office systems through the cloud.