Teleworker

[smwein]

Can someone explain to me why teleworker doesn't work through a firewall and must be in a dmz. We were trying to set it up through a pix 515 but we get no audio. The phone can make and get calls but once the call is connected no audio either way. I know it is not supported but i was just want an explaination.

Thanks

 

[Matt85]

if you find this out please let me know because i HATE using teleworker as my internet gateway i would much rather use microsoft small business server 2003 but my dealer and my experience cannot do it alone. plus i think mitel made it a pain the ass to work with a firewall anyway cause they want to control it all!

Matthew McGowan
Reynolds Park

http://www.rpyc.info

 

[Mitelpassion]

I don't think we can really blame Mitel for this. The problem has to do with natting VOIP. It's a problem in the industry. You get different types of natting. Can't really explain this in detail as I myself struggle with this a little but I can almost say for sure that it's not a Mitel specific problem.

E

 

[Matt85]

is there a solution if i want to use microsoft sb server 2003 as my gateway? anyone know if it has a DMZ or does the DMZ have to be a piece of hardware and not software simulation.

Matthew McGowan
Reynolds Park

http://www.rpyc.info

 

[tilf]

I have tried this with software DMZ's and it doesnt work, I also tried various workarounds using the older Microsoft ISA firewall software and had no joy.

Seems it has to be a physical DMZ.

In these cases however i put the teleworker in server and gateway mode but just used it for the VOIP traffic, 1 nic was 'dirty side' of the firewall with its Public IP, the other nic was on the 3300 VLAN.

 

[TheMitelGuy]

First the MAS 6000 is a wonderful product and actually has a very powerful firewall. It was originally created by eSmith a Linux only company. Mitel has done well with this product.

As for using Microsoft SBS 2003 as a gateway/router, you can do this, as long as you have multiple IPs from your ISP. It sounds like you are trying to make the solution work as cheap as possible (or you would have multiple IPs). You want cheap, you have cheap... AND IT WORKS. AND, NOT ONLY DOES IT WORK, it is extremely easy to setup and maintain.

Getting back to the original posting/question, your PIX 515 (a good product as well) is not permitting the audio, because the ports used for audio and the ports used for call control (MiNet) are not the same. In your tele-worker manual you will find a list of all ports that need to be open. A solution you may want to consider is a Hardware VPN with the Crisco, pardon me, Cisco products. By doing this, your Mitel IP Phone will beable to talk directly on the same network as the 3300/200 without the need for the MAS 6000 box.

Let me know if you still continue to have problems with your setup....

MITEL... It's about | YOU!

 

[Matt85]

I'm looking at getting a security/firewall hardware appliance. do most of these have dmz ports built into them? or do u know to program the settings because i am going to buy one because we have SBS 2003 and i just have the MAS6000 disconnected right now till i figure it out.

Matthew McGowan
Reynolds Park

http://www.rpyc.info

 

[MitelInMyBlood]

By using the Hardware VPN with something like the Crisco, pardon me too.. Cisco 831 DSL router you also remove any limitation on the model of IP phone you put out there. With the hardware VPN any of them will work. I have an old March Networks 5140 on my desk that I love mainly because it has the old 4000-series full size handset.

 

[TheMitelGuy]

MitelInMyBlood - wait until you see the new handset for the 52xx and 53xx series NICE!!!

It's on the MOL under LAST 30 DAYS...

 

[Matt85]

are u talking about the 5224 cause they improved that one a little bit and seems pretty nice and made a little hook so when its on the desk it doesn't accidently fall off the hook. i don't get it why did you guys both say crisco is it cause they are our competitor? have any of you tried sonicwall? or any other device becuase i'm looking for a firewall/security appliance not a router especially not DSL because we have a T1 Adtran router already.

Matthew McGowan
Reynolds Park

http://www.rpyc.info

 

[CMAC1]

One of the problems that we have encountered with the Firewall config is;

The Teleworker has a legal

http://www address

on its external interface.

ALL devices need to be able to talk to this address - including internal (LAN) devices.

BUT what happens (a lot of the time) is that when an internal (LAN) device requests this external address the firewall sends the packets to its external port - When it needs to send it to its DMZ port.

Can be done - we have got a few working on the PIX 515e DMZ Firewall. AND THEY WORK REALLY WELL!!!

 

[TheMitelGuy]

The new handsets are not yet out. The 5212/24 do not yet have the new handset, but they will start shipping with the 5212/24 in July. The new handset is really nice and is more full length (still fits in the cradel).

Just wait until the 5330 and 5340 come out - July. Oh my, these will probably be Mitel's nicest phones yet. Amazing. Specially at their price, hands down, Cisco has to go back to the drawing board.

ABC = Anything But Cisco. I'm just not a fan of a product that is 20x what it's worth. Mitel themselves are getting good profit out of their products, so you can just imagine how Cisco is doing.

 

[MitelInMyBlood]

At the risk of this thread collapsing into a Cisco bashing discussion, yes I've seen the Call Manager... actually we have one in our lab, fully Q.sig integrated into our Mitel network. It's a demo that was steeply discounted so they could get their foot in the door and was actually up and running before we had our first 3300. Now there's two 3300s and a 200 ICP in the same rack as the CM.

ABC, yes, that's the creed of the folks over at HP & Foundry Networks, isn't it?

As for the 52xx handsets, gee whiz it's about time. I was at a NAMU meeting (Forum I think they called it) at Caesar's in Vegas some years ago where we first saw the 52xx sets and did some groaning then about the "new" handset. A year later at Dallas they had changed the arch of the handset, but IMO still no meaningful improvement. That evening Don Smith must have felt like he stepped into a pit of vipers when he wandered over to our table full of beligerent drunks and got quite an earful of descriptive expletives about the handsets.

By the way, in case you have someone's ear, there's several who can no longer attend the annual NAMU bash when it's held in Kanata. Post-9/11 internat'l travel for discretionary trips (tradeshows, etc) has been cut.

 

[TheMitelGuy]

1) You will like the new handset. Generation III (3). Very nice to work with.

2) I have to agree that there was no "meaningful improvement." Unfortunately there was not much they could work with, in terms of using the same cradle. The design department has really put their thinking caps on for this one.

3) Don always listens - he's a good guy.

4) The reason the meeting always ends up in Kanata is because Terry (Mr. Matthews) has opened a 18 floor hotel next to Mitel. The hotel, named the "Brook Street Hotel" is probably the most amazing hotel you will ever stay in. There is a 5220d or 5235 in every room. It's worth a stay. It's a five diamond resort - right next to Mitel. All (most) Mitel functions utilize this hotel. It's normally $549/night/room. When you stay with a Mitel event I think it's only $114/night/room.

5) USA/Canada travel. Not sure what your comment comes from, but as a person that travels back and forth between Ontario and several US states, our policies are much the same as the Americans. As long as you don't have any criminal record, nor are you entering for illegal means, you are more then welcome in our country. We are not bad people. Our views may be different on a few (very small amount) issues, but for the most part, our countries are pretty much the same, with the same look, feel and values. I would not fear for one second coming to Canada. Our immigration people are very friendly.

 

[MitelInMyBlood]

Unfortunately corp policy disallows international travel for discretionary purposes. Training is another matter. Maybe we can include a brief but compelling "course" in the program format

Yes, Don is a great guy & he does listen.

So when is the I.P.O. ?

 

[TheMitelGuy]

I.P.O. press releases are already out. Check out Mitel's new website.

http://www.mitel.com

Totally redone.

For some reason, although it's is really International Travel, we don't view it as such in Canada. I understand it is, but going to the USA is just the same as flighing to a different province. Other then immigration at the air port or driving across the bridge to go to the Buffalo air port, there is no difference in the travel. I could understand if you had to go to Mexico or across the ocean to the YK...

 

[MitelInMyBlood]

Nice job on the web site! Yup sure as the dickens there was the IPO announcement. Thanks for the heads-up.

Our corp security dept has become very anal about int'l travel, requiring passports even when they aren't yet legally required, pre-arranging local contacts for medical and legal representation, instructing us to NOT wear company logo items during the trip, etc.

Now back to the topic of the Teleworker...

 

[rdahl]

Am I hear right that you will be able to by a new and improved handset for our 5212/5224 phones? I hear lots of complaints on those too. Don't ge me wrong the system is nice, but the handsets are for little people.

 

[TheMitelGuy]

Generation 3 has not been released. July for 5330 & 5340 IP phones and August/September for remaining sets.

 

[MitelInMyBlood]

I cannot imagine there being a retrofit for existing 5200 series instruments. The handset cradle is too small.