VPNRemote Phone 2.3 Looses talk path and disconnects after a fixed period of hours 2

[PhonesAllDay]

Hi,

Using Avaya CM 6.01, VPNRemote Phone 2.3, and 4621 IP Phones. Cisco ASA V8.4 (4) EG and IOP 5520's. Keep alive's are all set to maximum, H.323 inspect is set to OFF. The group policy DfltGrpPolicy value to 0.

Phones periodically loose their dial tone and talkpath, then reboot themselves between 8-18 hours. On the data side they can see a pattern and predict when a phone will disconnect. The error they see is "Lost Service". This is happening on several phones installed in remote home offices with good high speed internet connections verified by speed test results.

Thanks for any advice/troubleshooting tips.

PhonesAllDay

 

[BIS]

I can't help you, but I have exactly the same problem...

If you get any further it would be great of you could post it here - I certainly will if I find a solution.

 

[PhonesAllDay]

For sure I will update you!

 

[Mark568B]

We used to have that problem too and if I remember right the problem went away after we started using a20bVPN23255.bin and b20d01b2_3.bin

 

[PhonesAllDay]

Hi Mark,

We have:
a20bVPN232_4.bin as the application file
b20d01b2_3.bin as the boot file.

The latest software for 46xx VPNRemote as I understand it is this file: Avaya VPNRemote Software H323_VPN_232_4 2.1.x.zip

I was not able to find a20BVPN23255.bin, is that for the 96xx or is there a newer VPNRemote software released?

Thank you,

PhonesAllDay

 

[Mark568B]

PAD,

We use 4621sw phones. We had a hard time getting a20BVPN23255.bin.
You will also need to update your 46vpnupgrade.scr file.

 

[PhonesAllDay]

Wow! Thank you Mark!!! I will try this and let you know!

 

[BIS]

Just curious - did you solve this issue PhonesAllDay?

 

[BIS]

Well, I will update this in case anyone runs into the same issue

We upgraded our ASA to v9.1 (4)
We are using a10bVPN2303.bin as application file (and b10d01b2_3.bin as the boot file)

On the VPN settings side we have these:
IKE Parameters DH2-3DES-MD5
IKE ID TYPE KEY-ID
DH Group 2
Encrypt ALG 3DES
Auth ALG MD5
IKE Xchg mode Aggressive
IKE Condfig mode Enable
XAUTH Enable
Cert Expiry Check Enable
Cert DN Check Disable


IPSEC PARAMETERS ANY-ANY-None
Encrypt ALG Any
Auth ALG Any
DH Group None


On the ASA, a few things needed to be changed.
- Disable h323, h225 and SIP inspection
- Set the IKE rekey time to something like 24 hours
- Set the login count for remote clients to something higher than the default 3 (you will see “connection preempted” in the logs if more than 3 phones try to connect).

Especially the login count was important for us. Now the VPN phones are stable.

Hope this helps someone running into this issue.

 

[mgraval]

I had this same problem for years, and the best way to fix it is to ditch the 46xx series VPN phones and upgrade the 96xx series phones. Avaya stopped developing new firmware on the 46xx series VPN phones for a reason, something like 8-9 years ago. I have replaced most with 96xx and haven't had any issues whatsoever. You can get the 9608's for about $150 each and the power brick for another $30-40. Trust me, money well spent.

 

[BIS]

Good point mgraval - might try that as well.