SCN (IPO_VoiceNetworking) 50795 errors

[daz306td]

Does anyone have experience of implementing Avaya IP Office (500) systems hosted either side of R65?

I'm recieving errors with the UDP packet IPO_VoiceNetworking (port 50795) used for small community networking. The R65 box reports "message_info: Server to client packet of an old UDP session", checking the protocols associated to the IPO_VoiceNetworking service is was bound to 'none'.

If I change this to a SIP protocol I see the following on the firewall "Attack: Malformed SIP datagram Attack Information: Invalid or no 'CSEQ' field"

I just dont seem to be able to route this community networking traffic and I'm wondering if theres a misconfigration somewhere so that my firewall will except the IPO_VoiceNetworking 50795 traffic ?

Something missing in my IP office configuration (the Invalid or no 'CSEQ' field message leads me to believe this) or mis-configured protocols on the firewall I'm not sure ?

thanks in advance

 

[Bas1234]

Is there a VPN tunnnel between the IPO's?

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[daz306td]

Nope. They are on different sites separated by a private circuit. So to expand on that my config is:


FW1----------------------FW2
10.8.250.1 10.7.250.1
| |
| |
| |
| |
AvayaSystem1 AvayaSystem2
10.8.250.5 10.8.250.1

FW1 on site one and FW2 on site two. thanks.

 

[Bas1234]

Then it will not work, they must be in the same LAN or thru VPN.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged
___________________________________________

 

[daz306td]

Can I ask why? Everything else routes fine I dont understand why a VPN is necessary

 

[IPOfficeIreland]

you network config is wrong, private circuit is fine as long as you allow all traffic.



You have system1 on 10.8.250.5 which will have a default route of 10.8.250.1, this is fine,

But system2 on 10.8.250.1 with default route of 10.7.250.1.
1st off this is the same ip as FW1??? second, how can it get to 10.7.250.X if it is on 10.8.250.x subnet??? put the 2nd IPO on .7 subnet and use default route FW2 and it should be fine.

 

[daz306td]

Sorry! Typo !

FW1----------------------FW2
10.8.250.1 10.7.250.1
| |
| |
| |
| |
AvayaSystem1 AvayaSystem2
10.8.250.5 10.7.250.1

 

[IPOfficeIreland]

try again, your system2 is same ip as fw2.

 

[daz306td]

FW1----------------------FW2
10.8.250.1 10.7.250.1
| |
| |
| |
| |
AvayaSystem1 AvayaSystem2
10.8.250.5 10.7.250.5

increased UDP timeout on firewall for the serivce IPO_VoiceNetworking 50795 - seems to have improved things

 

[hairlessupportmonkey]

turn off your timeouts of anything voice related.