YA Softphone and Citrix VPN

[gotrojans]

Does anyone have experience with making the YA softphone 3.2 to work via a Citrix VPN solution? We are experiencing one way audio via the Citrix VPN.

Interestingly, the YA softphone works via the Citrix VPN solution when using a Verizon wireless card. It just doesn't work from cable or DSL.

Any suggestions would be helpful.

Thanks

Ron

 

[Mitelpassion]

one way audio is usually indicative of firewall or port blocking issues. also natting voip is not a simple as it seems. Check you're firewall configs

 

[gotrojans]

Thanks for the reply.

Yes. I am thinking that the Citrix Access Gateway/client is blocking some voice related ports as well. The CAG is a SSL VPN solution. The YA documentation states support for either IPSec or PPTP (Verizon wireless card uses a PPTP connection.) Our Citrix guru is looking into the ports issue on the Citrix side. Otherwise, we'll have to open ports in the firewall.

According to the YA Admin guide, the ports below are required to be open.

2114 TCP (client/server authentication)
2115 TCP (licensing server)
2116 TCP (telephony server)
35000 TCP (YA presence server)
37000 TCP (web collaboration)
6800 TCP (minet)
6801 TCP (secure minet)
6802 TCP (secure minet)
5000 to 5414 UDP (voice)
9000 UDP (voice)
9002 UDP (voice)
50000 to 50255 UDP (voice)

I will post if we were successful with the CAG or if we needed to open ports in the firewall.

Ron

 

[CMAC1]

Dunno if this helps but....

Sometimes (mostly on outside line calls) it is possible to get one way speech because;

The call to an internal handset uses port 9000 but when you dial a trunk you get a reply from the E2T card on port 9002.

If your client has its own firewall it sees this as an unsolicited reply and therefore rejects the packets from port 9002 - this give you one way voice on external calls!!

 

[gotrojans]

Thanks for your response.

As it stands, I have all of the ports open in the firewall that are required by the YA solution per the admin documentation that I mentioned in a past post.

Consequently, the one-way audio seems to be due to the Citrix Access Gateway which is a SSL VPN (not officially supported by Mitel). As you and others have suggested, there seems to be a problem with the YA client receiving the replies, acknowledgements, etc.. from the 3300 ICP, YA server. Or rather, the 3300 ICP, YA server doesn't know the route back to the YA client due to the CAG.

In terms of the CAG, it is configured per Citrix' VOIP document which refers to Cisco, Nortel and Avaya but not Mitel.

FYI, I emailed support at the vendor who actually makes YA. I didn't hear from the vendor, but I did hear that the vendor contacted Mitel. Then Mitel contacted our business partner. At the end of the day, Mitel has not supported our adventure with the Citrix VPN solution.

Ron

 

[MitelTech]

Try binding the YA client to the Citrix VPN IP address. In Control Panel there is the <insert name here> app that is actually emulating the phone (it's a blue Mitel logo). When you open it you will see a red > beside the IP YA is using. Move the > and stop/start the phone emulation. See if that helps at all.