SCN on Site to Site VPN between countries

[mikedphones]

Anyone want to take a shot? Looking for direction for their IT people.

Setting up a 500V2R5 and 500V2R7 with SCN. Licenses in place, VCMs in place. I am thinking firewall issue. I was told that the releases should be only 1 apart not 2, but i would think it work, just not be supported. True?

User directories between systems meshed so that you can see each other when building huntgroups or using soft console. DSS icons lamp in phone manager between sites.

I cannot call. I get dead air for 11 seconds and then a fast busy. 11 seconds because I pushed out the time from default of 4 seconds on the line tab in voip.

Is there are specific port and protocol I should have them zero in on for the completion of the call?

Here's a piece of monitor:

248448646mS H323Evt: v=0 stacknum=18 State, new=NullState, old=Initiated id=2480
248448647mS CMLineRx: v=18
CMReleaseComp
Line: type=IPLine 18 Call: lid=0 id=2480 in=0
Cause=38, Network out of order
248448647mS CMTARGET: 0.2478.0 397 Conf Rm.0: Re-target after NetworkOOO - Try: Shortcode(764)
248448648mS CMTARGET: 0.2478.0 397 Conf Rm.0: ADD TARGET (N): number=764 type=100 depth=1 nobar=1 setorig=1 ses=0
248448648mS CMTARGET: 0.2478.0 397 Conf Rm.0: TARGET: Not in dial plan
248448648mS CMTARGET: 0.2478.0 397 Conf Rm.0: CancelTimer CMTCNoAnswerTimeout
248448649mS CMTARGET: 0.2478.0 397 Conf Rm.0: PrepareTransferTargets Found 0 target
248448649mS CMCallEvt: 0.2479.0 397 TargetingEP: RequestEnd 0.2480.0 397 H323TrunkEP
248448649mS CMCallEvt: 0.2479.0 -1 BaseEP: DELETE CMEndpoint f52e0be8 TOTAL NOW=6 CALL_LIST=3
248448650mS CMCallEvt: 0.2480.0 397 H323TrunkEP: StateChange: END=B CMCSOffering->CMCSCompleted
248448652mS CMLOGGING: CALL:2012/01/1913:22,00:00:00,000,118,O,764,764,ConfRm,,,0,,""n/a,0
248448652mS CD: CALL: 0.2478.0 BState=Disconnecting Cut=1 Music=0.0 Aend="Conf Rm(118)" (8.5) Bend="Guest Room(764)" [Line 18] (268.1) CalledNum=764 (Guest Room) CallingNum=118 (Conf Rm) Internal=0 Time=12914 AState=Dialled
248448653mS CD: CALL: 0.2478.0 Deleted
248448654mS CMExtnEvt: Conf Rm: CALL LOST (CMCauseNetworkOOO)
248448654mS CMExtnEvt: Conf Rm: Extn(118) Calling Party Number(118) Type(CMNTypeInternal)
248448654mS CMCallEvt: 0.2478.0 -1 Conf Rm.0: StateChange: END=X CMCSDialled->CMCSCompletedTone
248448654mS CMExtnEvt: v=3 State, new=CMESCompleted old=Proceeding,0,0,Conf Rm
248448655mS CMExtnCopyCallLostMsg: v=3
CMReleaseComp
Line: type=NoLine 0 Call: lid=0 id=2478 in=0
Cause=17, User busy
248448656mS CMCallEvt: 0.2480.0 -1 H323TrunkEP: StateChange: END=X CMCSCompleted->CMCSDelete
248448656mS CMCallEvt: END CALL:397 (f52dc284)
248448658mS CMCallEvt: 0.2480.0 -1 BaseEP: DELETE CMEndpoint f52c3cd4 TOTAL NOW=5 CALL_LIST=2
248448659mS CMMap: a=2.18 b=0.0 Mapper::FreeCodec freed CMRTVocoder resource busy 0, total 20

 

[mikedphones]

Hi guys, so as I said, the one way ping thing seems to be an issue. I am thinking if I can't ping both ways, trying H323 trunks is just a waste of time at this point. I am having them look at their routers to see what's up. Waiting to hear back on the routers in use, I think they are Permimeter. The time difference between sites just adds the drama and drags this out longer! I will keep you posted if I have any luck.

 

[mikedphones]

Update

So the sites are now able to ping back and forth via SSA after they played with the routers. The same issue still is there where I can see DSS status and extension info has exchanged between sites, but a call to an extension on the far end results in a very brief flash of that extension's name, silence for 11 seconds which is the time out on the H323 Voip line field and then fast busy.

Pretty confident it's a router setting. I know with Sonicwall we make sure H323 Transformations is set to off, etc.

This site uses: Checkpoint UTM1 270 piece?

Anyone know this piece or what to be aware of when setting this up?

 

[tlpeter]

Tell them to stop blocking ports and see what happens.
If that works then hand them over a list op ports being used by the IPO.


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl

 

[mikedphones]

they claim all ports are open. I passed the list on. I was thinking perhaps more a setting or protocol item.

 

[mikedphones]

So just to update those who offered help on this; still not up. Although as mentioned earlier, I can ping both ways now, see DSS status of each others exts, just cant make a call. A call to the far end flashes briefly on my screen with their name and then times out to fast busy following the time set on the Voip line tab. I can try the H323 line, but not sure it will matter if it is blocked somehow anyway on the routers. Both SSA ends show SCN is up.

These are Checkpoint routers. Anyone have any dealings with them or options that I should reference in Checkpoint's terminology?

Thnx

 

[tlpeter]

Are both systems on the same level yet?
If not then do it!


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl

 

[IPGuru]

is configure this to be a simple h323 trunk before you try to get SCN functioning (then upgrade as advised)

call setup works but no speech

either the voice traffic ports are being blocked (49152 upwards)
(I have often been told all ports are open only to fine the IT team were 'Mistaken')
or there is a routing issue (try switching of Direct media path to prove.

I have also had problems with checkpoint in the past so this may need looking at


Computers are like Air conditioners:-
Both stop working when you open Windows

 

[mikedphones]

At the site for a little while, I setup H323 with H450 Supplemental. Not sure which supplemental to use as long as I set both IPO the same.

Anyhow, In SSA I can see the line grabbed, the call completes, I hear ringing on my end but when it answers at the far end, including VM PRO on their end, I just hear silence. The time continues to count on SSA, the call does not drop.

At the moment, I have tried it with Direct media both checked and unchecked at both ends, it only asked for a merge, not sure if it should really be immediate or not.

Should I be using H450 for this simple end to end test or select None? Also the compression is set to automatic at both ends as well.

Thanks!

 

[tlpeter]

What codec is it using?
What is set to (automatic can be set to something too)
The IPline should be set to SCN and not H450


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl

 

[mikedphones]

Hi TL

At present, I was trying to get it down to a plain H323 (No SCN) line as many have suggested to see if it will work at all.

Although I have tried it a few ways, currently, I have both ends set for

Compression Mode: Auto
Supplemental: NONE (also tried H450)
Allow Direct Media Path: Unchecked

In SSA I can see when I dial

shortcode 6 (6N, dial 3K1, N)

and pull the IP Trunk, and when I enter a far end extension number, it shows in SSA as alerting and continues to do so until it answers (either goes to vm or if it's a fax, the fax answers). Once it answers, I hear silence and the call stays up pretty much until I hang up.

So unless I should be setting up the H323 line differently than I have, would we all agree blocked ports?

 

[tlpeter]

Agreed.
Be sure that the ports 49152 till 53246 (UPD) are open.


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl

 

[amriddle01]

You shouldn't use dial 3k1 for this, just plain Dial

http://www.ipoffice.tel

 

[mikedphones]

OK
To confirm, for basic testing using an H323 line:

Shortcode 6 in my example.
Dial NOT Dial 3K1 (per amriddle01)
Tel number: N

Direct media - not checked
Suplemental: None

Set the same on both ends.
Correct?