TLS error and phone won't connect to IPOffice

[Shermanchicken]

IP 500 V2 9.1.4.0 has two remote sites with vpn tunnels already in place. The first site I installed three 1616 IP phones and are up and working. The other site the 1616 IP phones that I am trying to install and the get to the point that I can enter the extension number and password but as soon as I enter it the phone does nothing then goes to the Discover xxx.xxx.xxx.xxx
screen.

All phones are licensed. I also took one of the sets that wasn't working to the main location and installed it on the network there and it works. I can from the problem site connect to the IPOffice with Manager and System Status. IP routes are similar to the good remote site and their IT company has checked their settings.

In the system status I get an security alarm with a TLS error and Monitor displays this when I reboot the phone at the trouble location:

Thank you for any insight.



3:32:33 17863720mS PRN: TLS:Alert Src=192.168.1.200:411 Dst=192.168.2.50:33862 Code=48 Level=Fatal
13:32:33 17863720mS ERR: TLS:Fatal Error on connection Src=192.168.1.200:411 Dst=192.168.2.50:33862

 

[Okkie26]

TLS is not the issue, cause this is only used for SIP stations.

Did you enter an IP Address on the extensions in the IP Office manager?

If so, remove them..

Try to determine the IP Address of a station via the A menu.

then try to ping this address from IP Office using system status.

 

[Shermanchicken]

I entered the IP address on the phones themselves. I will try to ping them from system status. If it fails what am I looking for? The addresses matchup with what their network is and I can open manager from the remote site.

 

[Okkie26]

Did you enter VLAN on the stations?

 

[Shermanchicken]

No I did not.

 

[Okkie26]

IP phones on the same subnet as the workstations?

 

[Shermanchicken]

Yes they are. For example

Phone: 192.168.2.50
Router: 192.168.2.1

Workstation: 192.168.2.20

 

[Okkie26]

The the provider must block a port (1720)

 

[Shermanchicken]

I thought port 1720 and 1719 needed to be open. Is that incorrect? Could I have IT who manages their network block the port in their router?

 

[Shermanchicken]

I see what you mean. The ports are open. IT is double checking to make sure that the provider isn't blocking them. Thank you.