SCN on Wan Port of IPO

[clarkstyx18]

SCN on Wan Port of IPO


I need to connect site A Lan IP 192.168.11.x Phone Range 192.168.42.x
to site B with LAN IP 192.168.12.x Phone Range 192.168.41.x, both sides
are already connected to VPN. LAN 1 can ping LAN 2 vice versa.
The question is, instead of putting LAN IP and Phone IP on the same range,
can we do something like this.

Site A Wan IP --> 192.168.11.100 (same range as LAN A)
Site B Wan IP --> 192.168.12.100 (same range as LAN B)

Create IP Line for Site A with Site B Ip Address (will do the same for both)

Make IP Route for both sites..

Will this work?
**SCN licenses are already uploaded

 

[clarkstyx18]

i did this setup and its not working..

in addition to my config above

Site A IP Route

0.0.0.0
0.0.0.0
192.168.11.1
Lan 2


Site B
0.0.0.0
0.0.0.0
192.168.10.1
Lan 2




still it is showing SCN status DOWN.. anyone who can help me with this?

 

[hairlessupportmonkey]

Site A Wan IP --> 192.168.11.100 (same range as LAN A)
Site B Wan IP --> 192.168.12.100 (same range as LAN B)

Site A IP Route

0.0.0.0
0.0.0.0
192.168.11.1
Lan 2


Site B
0.0.0.0
0.0.0.0
192.168.10.1
Lan 2

Is that a typo above or is that your mistake...? ( can you see the error?)

ACSS - SME
General Geek

 

[clarkstyx18]

sorry, I didnt get you, can you please tell me whats wrong with my config?

 

[clarkstyx18]

oooopss, yeah its a typo, Site B IP range is 192.168.10.X and not 192.168.12.x

 

[clarkstyx18]

I tried pinging Site A IP Office to SIte B using system status and its pinging, same thing when I try to ping form a computer

I tried pinging Site B IP Office to Site A using system status but its not pinging, but from computers, I can ping to the remote IPO

 

[hairlessupportmonkey]

I guess its a network issue then.....

ACSS - SME
General Geek

 

[clarkstyx18]

okay, I just found out that its just an IP route issue, below is my new IP route settings.. Both sites are pinging now but SCN still shows
down, tried recreating H323 trunks and rebooting the system but it seems it wont go up. I believe it has something to do with the network, but how can I prove to the customer that its a network issue?


192.168.10.205 >> IP address of WAN
255.255.255.0
192.168.11.1
Lan 2


Site B
192.168.11.205
255.255.255.0
192.168.10.1
Lan 2

 

[hairlessupportmonkey]

whats creating the VPN tunnel?

ACSS - SME
General Geek

 

[clarkstyx18]

currently, they are using Draytek 2830 on both sides, Could it be SIP or H323 alg? Im just waiting for the network admin to arrive and we will try disabling the ALG on both.. if this didnt work, any other suggestions?

 

[clarkstyx18]

okay, so it turned out that SIP ALG is disabled on the draytek router, there is not option for H323 alg as well.. any other ideas?

 

[montyzummer]

on your h323 trunk s are they both set to scn and what have you set as your gateway ip address on both sides of the trunks ?

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[clarkstyx18]

yes, they are both h323 trunks, gateway ip address is the IP address of the opposite site..

this will be my 3rd time to setup SCN, first two was a success with Sonicwall and Checkpoint firewall, this site has Draytek 2830 which is my first time in setting up SCN on this router..

 

[montyzummer]

if you run monitor and select h323 and scn options and drop the rest what can you see??, you could always use the interface tab and lock the traffic down to the two ip addresses of the units.

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[clarkstyx18]

this is what I see on the sysmon

 

[AACon]

What is 192.168.11.10?

-Austin
ACE: Implement IP Office

 

[clarkstyx18]

It is the wan ip of site A.. scn are configured through Wan port

 

[AACon]

Your addresses are all over the map.
What is 192.168.10.205 and 11.205?

Your routes should be
192.168.10.0/255.255.255.0/192.168.11.1/LAN2 on the 11 system
192.168.11.0/255.255.255.0/192.168.10.1/LAN2 on the 10 system

If your H323 gateway address are x.x.x.10 and your route only specifies x.x.x.205, it will never reach that address.

-Austin
ACE: Implement IP Office

 

[clarkstyx18]

192.168.10.205 and 11.205 are the wan IP addresses of each IP office.. I've tried doing that Ip route you are suggesting but the other site wont ping.. so I have to put the specific ip address of each boxes..

 

[AACon]

You just said 192.168.11.10 is the WAN ip address. So which is it? 192.168.11.205, or 11.10?

Maybe you should, for giggles, upload the configs to a drop box or something and post links. I have a feeling something is just configured wrong.

-Austin
ACE: Implement IP Office