Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SCN on Site to Site VPN between countries

Status
Not open for further replies.

mikedphones

Vendor
Oct 11, 2005
467
US
Anyone want to take a shot? Looking for direction for their IT people.

Setting up a 500V2R5 and 500V2R7 with SCN. Licenses in place, VCMs in place. I am thinking firewall issue. I was told that the releases should be only 1 apart not 2, but i would think it work, just not be supported. True?

User directories between systems meshed so that you can see each other when building huntgroups or using soft console. DSS icons lamp in phone manager between sites.

I cannot call. I get dead air for 11 seconds and then a fast busy. 11 seconds because I pushed out the time from default of 4 seconds on the line tab in voip.

Is there are specific port and protocol I should have them zero in on for the completion of the call?

Here's a piece of monitor:

248448646mS H323Evt: v=0 stacknum=18 State, new=NullState, old=Initiated id=2480
248448647mS CMLineRx: v=18
CMReleaseComp
Line: type=IPLine 18 Call: lid=0 id=2480 in=0
Cause=38, Network out of order
248448647mS CMTARGET: 0.2478.0 397 Conf Rm.0: Re-target after NetworkOOO - Try: Shortcode(764)
248448648mS CMTARGET: 0.2478.0 397 Conf Rm.0: ADD TARGET (N): number=764 type=100 depth=1 nobar=1 setorig=1 ses=0
248448648mS CMTARGET: 0.2478.0 397 Conf Rm.0: TARGET: Not in dial plan
248448648mS CMTARGET: 0.2478.0 397 Conf Rm.0: CancelTimer CMTCNoAnswerTimeout
248448649mS CMTARGET: 0.2478.0 397 Conf Rm.0: PrepareTransferTargets Found 0 target
248448649mS CMCallEvt: 0.2479.0 397 TargetingEP: RequestEnd 0.2480.0 397 H323TrunkEP
248448649mS CMCallEvt: 0.2479.0 -1 BaseEP: DELETE CMEndpoint f52e0be8 TOTAL NOW=6 CALL_LIST=3
248448650mS CMCallEvt: 0.2480.0 397 H323TrunkEP: StateChange: END=B CMCSOffering->CMCSCompleted
248448652mS CMLOGGING: CALL:2012/01/1913:22,00:00:00,000,118,O,764,764,ConfRm,,,0,,""n/a,0
248448652mS CD: CALL: 0.2478.0 BState=Disconnecting Cut=1 Music=0.0 Aend="Conf Rm(118)" (8.5) Bend="Guest Room(764)" [Line 18] (268.1) CalledNum=764 (Guest Room) CallingNum=118 (Conf Rm) Internal=0 Time=12914 AState=Dialled
248448653mS CD: CALL: 0.2478.0 Deleted
248448654mS CMExtnEvt: Conf Rm: CALL LOST (CMCauseNetworkOOO)
248448654mS CMExtnEvt: Conf Rm: Extn(118) Calling Party Number(118) Type(CMNTypeInternal)
248448654mS CMCallEvt: 0.2478.0 -1 Conf Rm.0: StateChange: END=X CMCSDialled->CMCSCompletedTone
248448654mS CMExtnEvt: v=3 State, new=CMESCompleted old=Proceeding,0,0,Conf Rm
248448655mS CMExtnCopyCallLostMsg: v=3
CMReleaseComp
Line: type=NoLine 0 Call: lid=0 id=2478 in=0
Cause=17, User busy
248448656mS CMCallEvt: 0.2480.0 -1 H323TrunkEP: StateChange: END=X CMCSCompleted->CMCSDelete
248448656mS CMCallEvt: END CALL:397 (f52dc284)
248448658mS CMCallEvt: 0.2480.0 -1 BaseEP: DELETE CMEndpoint f52c3cd4 TOTAL NOW=5 CALL_LIST=2
248448659mS CMMap: a=2.18 b=0.0 Mapper::FreeCodec freed CMRTVocoder resource busy 0, total 20

 
That trace is not enough.
Can you ping the other site from SSA?
And from the other site?
What does SSA say about the IP trunk?


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl
logolantel.png
 
VPN's are inherently secure, and are just connections between secure networks so they should not be blocking any traffic on the VPN at all, they should have all ports all protocols open between sites.

"CMCauseNetworkOOO" that means as far as the system is concerned the link is down so they must have a routing issue or are blocking ports :)

Untitled-1.png
 
Can you link an R5 system to a R7 system in a SCN?
I know it's not supported but will it work?
 
It won't work.
I think it is blocked by the software itself.


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl
logolantel.png
 
Are you sure both are V2?

"Setting up a 500V2R5 and 500V2R7 with SCN"

There is no such thing as a 500V2 and 5.0. Maybe he meant 500V1?
 
Site A is here.
Site B is over there

If I open SSA here at Site A to my local IPO I can ping Site B.

If I open SSA there at Site B via RDP to their server, I CANNOT ping here, site A.

If I open SSA here, input their IPO address, I connect fine, but cannot ping back to the IPO here.

I can open Manager at site B via RDP to their server and see the R7, but it show unsupported naturally.

I can run monitor from their server B over their and see my activity here A eventhough I cannot ping here with SSA. ?????

As mentioned earlier, we have exchanged user info, Phone manager can create a user icon that shows red when far end users are on their phone.

The lack of ping certainly looks to be the issue, eventhough there is some connectivity. They claimed they opened everything. Perhaps a protocol?

Thoughts?

Also, are we ok R5 & R7?

Lastly, both have multisite networking licenses, they have R5 with VCM32, we have R7, Combo Cards and endpoints.

 
Indeed, I would drop down to just plain H323 trunks and use shortcodes for routing, just to test it once you have proved the link by each system pinging the other using SSA :)

Untitled-1.png
 
Sorry! R5 is 500V1 Hardware in SSA says Running professional, compact flash: empty. no reference to SD card.
 
Site A is here, IP) 500V2 R7.
Site B is over there, IPO500V1 R5

If I open SSA here at Site A to my local IPO I can ping Site B.

If I open SSA there at Site B via RDP to their server, I CANNOT ping here, site A.

If I open SSA here, input their IPO address, I connect fine, but cannot ping back to the IPO here.

I can open Manager at site B via RDP to their server and see the R7, but it show unsupported naturally.

I can run monitor from their server B over their and see my activity here A eventhough I cannot ping here with SSA. ?????

As mentioned earlier, we have exchanged user info, Phone manager can create a user icon that shows red when far end users are on their phone.

The lack of ping certainly looks to be the issue, eventhough there is some connectivity. They claimed they opened everything. Perhaps a protocol?

Thoughts?

Also, are we ok R5 & R7?

Lastly, both have multisite networking licenses, they have R5 with VCM32, we have R7, Combo Cards and endpoints.

 
You are not OK!!!
You cannot do a SCN with more then one version overlap.
The R5 site must be at least on 6.x but better on 7.0


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl
logolantel.png
 
Got it. I am not sure how much control I have over the R5 site. I am wondering if I should downgrade (bad idea - i agree) to R6 since I am under 100 days.

Still would that cause the inability to not be able to ping with SSA only in one direction? Is that another problem altogether?

Last question, I checked off direct media path on both. Correct?

Thanks
 
If you cant ping 1 system to the other then you have a data routing issue
this should be rectified before you even think about looking at voip/scn connectivity.


direct media path should normally be on if you get call setup but no speech path then turning it off can be a temporary solution while you get the routing paths corrected.


Computers are like Air conditioners:-
Both stop working when you open Windows
 
We have SCN a 500V1 R5 working with 2 500V2 R7 in US for about a month now. It will work, books says not to do, but they are working.

 
Thanks all. The first thing I will work to resolve is pinging both ways. Until that, I am dead in the water. It's just so weird to me that they can see each others extension numbers, show in use DSS status, but cannot complete a call.

I watched it Friday. When I pickup and dial and extension over there, it flashes the name of the extension on the far end for a split second, leaving just the extension number on the screen and then there is silence for 11 seconds (the timeout I set it to on the line/voip, up from the default of 4 seconds) and then returns a fast busy.

Anyhow, if anyone has any ideas, let me know and I will try them and report back for all out benefits. If I get pinging to fly in both directions and still can't make a call, I will report that too.
 
Hi, i have this issue also. V5 with V7, i have found if i hang up on the call before it gets the busy tone and redial it makes connection and speech path.
 
Guys, you both have issues and both do not do it the supported way!!!

Get supported and try again!


BAZINGA!

I'm not insane, my mother had me tested!

www.lantel.nl
logolantel.png
 
First try it without the scn option enabled on the h.323 trunk and create shortcodes for dialing remote numbers.
If that give the same result then there is a network problem like the option "voip inspect" or something like that in the vpn routers

If it ain't dutch it ain't much
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top