Server Edition 9.0 analog ports get fast busy at remote V2 cabinet

[KCFLHRC]

So, I'm an IPO noob so be gentle. I have a server edition 9.0 with a V2 cabinet at a remote site for analog faxes etc. 1 combo, 2 phone 8 and a VCM 32. Whenever I come off hook on the analog ports I get a fast busy. Cant call them either, fast busy. I can ping through the monitor back to the Server no problem. One issue I do see is that in the monitor the licensing shows an error, like it cant pull the licenses from the server. This was working and all of a sudden stopped. Also in the monitor if I look at one extension it says Call Barred. I think it is a network issue but not sure. Anyone seen this?

 

[sizbut]

What does System Status say about the expansion?

Stuck in a never ending cycle of file copying.

 

[KCFLHRC]

The expansion shows green in the system status, and will start flashing if I reboot it

 

[sizbut]

No, I meant the System Status Application.

Stuck in a never ending cycle of file copying.

 

[derfloh]

When you see license errors the expansion system is in total not licensed. So check the SCN trunks. I assume the firewalls building the VPN have been replaced or the config has been changed.

 

[KCFLHRC]

I see the V2 cabinet in System Status Application. As to the firewall, correct, it has been replaced with a new one. The SCN trunks show down

 

[derfloh]

Then it some kind of ALG however it is called in the firewall (H323 fixup, VoIP fixup, VoIP helper...)

With R9.1 you can make the trunk type websocket. That helps much in these scenarios but for me it is only a workaround.

 

[KCFLHRC]

So what would I tell the firewall guys to look for? It is a Juniper I believe

 

[derfloh]

To disable everything that should optimize VoIP traffic.

 

[KCFLHRC]

The firewall guys have said they are not blocking anything, but this isn't my first rodeo so I really don't believe them.

 

[derfloh]

ALGs don't block connections but change packets so that IPO is not able to get it's proprietary information.

 

[KCFLHRC]

Thanks derfloh, I will see if I can get them to look at it again. Is ALG Application Layer Gateway?

 

[derfloh]

Yes

 

[KCFLHRC]

Customer says no ALG on the network

 

[derfloh]

They are hidden very well on some firewalls.

If you want it easy tell him with the old firewall it worked and with the new it doesn't. So it is a problem with the firewall...

You can't know the config of every firewall...

 

[KCFLHRC]

Understood, unfortunately it always seems that it is up to us to prove to them it is their problem. Not always an easy thing to do. I'm almost to the point of changing the IP address of the V2 and moving it to the main site to prove to them it works there.