VPN problem with IPO 406 V1 and 5600 phones

[Descalante]

I can't register two remote extensions through a VPN. Only one or the other register and work but not both.
This is my environment:
5602/5610 -> LinksysRouter -> Internet -> Fortinet -> IPO406V1

Three months ago I set up the VPN between Linksys Router and Fortinet Firewall, and the 5610 had been working correctly through the VPN. Yesterday a new extension was added in the same remote site, but only one was able to register. Nothing was changed in the VPN setup and I was very surprised when I saw the extraneous behavior. If both extensions are connected at the same timer neither can register succesfully. If one is connected and registered succesfully, when the second is added the first one is unregistered and the new extension tries to use its extension number, sometimes with succesfull register using the wrong number.
I tried to use monitor application to troublesooht the situation, but the first problem was because it is not possible to filter IP traffic by extension number, even if I filter using the IP address (gateway address in this case), there is a lot of messages not easy to understand, all extensions appears to be sending messages to the gateway.
I think the problem is because the IPO is not allowing two remote extensions to use the same IP address, which should be absolutely normal, but as they are remote, the IPO would see the gateway address instead of real phones' IP addresses.
Any comment or advise would be greatly appreciated.
Thanks.
Daniel Escalante.

 

[kwing112000]

The phones can not use the same IP Address. THey have to be different.

 

[Descalante]

Probably my first explanation was not clear enough. Obviously I have two different IP addresses in the phones (172.16.10.11 and 172.16.10.12), but they are getting access to the IPO through the same VPN and gateway. So, the IPO reports two extensions registering with the same IP address (192.168.1.254). At least is what the Monitor reports when I check IP phone status.

These are the address I am using in the setup:
At central site:
IPO 192.168.1.1
VMPro 192.168.1.5
Gateway (Fortinet) 192.168.1.254

At remote site:
Ext#303 172.16.10.11
Ext#305 172.16.10.12
Gateway (Linksys) 172.16.10.254

The VPN is set up to allow traffic from network 172.16.10.0 to 192.168.1.0 and viceversa.

Thanks in advance.

 

[tlpeter]

So your phone is programmed like this ?

172.16.10.11
255.255.255.0
172.16.10.xxx (vpn router)
etc etc etc

Router should be your vpn router at the remote site !
callsv is the ipoffice wich is 192.168.1.1

Monitor should show you the ip adres of the phone and it does not matter is has a different ip adres


ACA - Implement IP Office
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[kwing112000]

When those phone hit the IPO they should be different IPs. do you have some sort of NAT going on accross the VPN.

 

[Descalante]

Yes, tlpeter, the phones are set as you indicate. The very extraneous situation I saw in the Monitor was that the remote extensions appear to be registered with the gateway address (192.168.1.254)instead of IP phone.
Today I recreate a lab environment using an smalloffice and two linksys routers. In Monitor IP phone status, remote extensions appear registered with the phone IP address, and the MAC indicated belongs to gateway. Everything works ok.
So what can be wrong with IP406?
IP406 has release 3.2.54, small office has 4.0.10 but I can't upgrade IP406 to release 4 because it is version 1
The fact that IP406 V1 has an internal hub instead of a switch, may be causing a problem ... I really don't think so ... but who knows ? ...
I'm evaluating the option of restart the IP406 to factory default and start with a blank configuration.

Regards.
Daniel

 

[IPOfficeIreland]

hi descalante

when you plug a 2nd ip phone in what error message do you get?

Is the new IP phone actually a new phone or switched from somewhere else?

have you tried HOlD Reset# on both phones then program from scratch.

 

[Descalante]

In most test, I did't get an error message, the 2nd phone just display the extension number, but the line is dead. If I check the IP Phone status in manager, I see the extension number indicating the phone type is unknown.
In other cases the 2nd phone indicates just for a moment the new extension number but it switch inmediately to show the extension number of the one already connected.

I had restarted the phone to factory default (hold - reset#) with the same extraneous behavior.

Daniel

 

[tlpeter]

In the ipoffice did you make two ip extensions ?
Did you gave them an ipadres or did you leave it 0.0.0.0 ?
Is direct media path checked or unchecked ?

I think it is a good idea to set an ipadres in it with direct media path unchecked and a codec of G729


ACA - Implement IP Office
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[Descalante]

In accord with the last configuration I have, all over 60 IP extensiones have Direct Media Path unchecked and codec G729.
If I set an address different to 0.0.0.0 the phones doesn't register and indicate password error. I find if I match the IP address in the phone and Manager, the registering is succesfully done. In the case of remote extensions I need to set in manager the gateway IP address, if I set the real phone's IP address it never register (password error).

 

[tlpeter]

You must fill in the ipadres that the ipphone has ,It must match !!!

The ipphones internal can have direct media path checked !

I did not say to do that for all phones (only the remote phones)


So in manager your two ipextensions must have the ipadresses 172.16.10.11 and 172.16.10.12




ACA - Implement IP Office
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[Descalante]

I already test with the IP address defined in the manager. The phones indicate password error unless I set the gateway address (192.168.1.254)

 

[IPOfficeIreland]

Descalante, i think your problem is the fact that the phones don't register unless you have an ip address in manager matching.

This never happens for me, do you have Auto Create H323 Extension turned off? Try turning on.

 

[puregold]

This is occuroing because............

An IP phone will remember what it was last time it was live.

When you plug an IP handset in it will try to assume its last known ext number.

So lets say you plug it in, it will try and come us 250 becasue thats what it was last time ( you would want to work this way if you move your phone from office to office etc).

When you plug the second handset in, is that trying to come as the same ext number?

Try something, plug 1 handset in, and let it come up. Once it has come up on the keypad press

hold 564633 #

It will then say ext=

Put in a completely new and never used before ext number. (if you havent got auto create turned on you will need to create a voip ext manually for this)

It should then come up as that ext.

Then plug the second one in and let that come up, does that come up ok?

I think you will find that works, your problem is that your 2 handsets are competeing for the same ext number, when the second tries to come up as the firsts ext number it deregisters it and nicks the ext number.

ACE - Avaya Certified Expert
ACI - Avaya Certified Instructor