CaNiBuS

I have a vpn appliance. From behind that appliance I am having trouble connecting to my Definity using either softphone or hardphone.

The Definity is on 192.168.0.0 and the vpn appliance is on 192.168.223.0

Is there a procedure that I need to do as far as ip-network-region? It works fine locally, just not from behind the vpn appliance.

When I do a list trace ras ip-station 899 this is what I get:

11:14:43 rcv RRQ endpt 192.168.223.2:4218 switch 192.168.0.40:1719 ext 899
11:14:43 snd RCF endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:14:43 rcv NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:14:43 snd NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext
11:14:43 rcv NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:14:43 snd NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext
11:14:44 rcv NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:14:44 snd NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext
11:14:44 rcv NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:14:44 snd NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext
11:14:44 rcv NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:14:44 snd NSM endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext
11:15:13 denial event 2011: IP FURQ-No Q931 msg rcvd endpt 192.168.223.2 data9
11:15:13 snd URQ endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext 899
11:15:14 rcv UCF endpt 192.168.223.2:4213 switch 192.168.0.40:1719 ext

Does that denial event mean anything to anyone?

liquidvw

You need to make sure that your firewall will allow UDP port 1719 and TCP port 1720 to the IP address of your Clan's. Also you will need to open UDP ports for the talkpath. They are customizable on cha ip-network-region X.

PBXtech.info

 

CaNiBuS

Well, its vpn so theres really no ports to allow. Everything is wide open on the WatchGuard/VPN server side, and on the VPN appliance (Linksys WRV54G) side, all firewalling is turned off.

Is it possibly something to do with network-regions?

CaNiBuS

Anyone done this before?

fataldata

I had issues using NAT and a non-routable IP address on the server. However since you are doing VPN I wouldn't think you are having the same issue that I did. The stations would register with the switch but the talk path would fail. The problem involved destination address for the server being encapsulated in the voice bearer payloads. To discover this issue I used a protocol anaylzer on my remote station.
I realize this is not the same issue you are having. However the use of a protocol analyzer may provide some clues or you may just see VPN traffic? Good Luck.

__________________
Systems In Use:
S8700 CM3.0 and S8710 CM3.1.1