SIP with Layer 3 across VPN

[helper_1]

V3000 with 6_5_22 in SIP.  3102 phones across VPN worked properly until booted system into SIP.  Any suggestions?

This message was edited by helper on 4-19-10 @ 8:37 AM

[DanCarroll]

different ports used when in SIP mode.

5060 needs to be opened, plus others I am sure.

[helper_1]

Thank you for that information.  Both routers/firewalls are setup to allow all ports, there is nothing being blocked at this time.

[helper_1]

Need to update this....it is a V3001R system.

[helper_1]

Also have the error message reporting:

H3LinkLayer    E ** Packet unPadded length size 756 and Buffer Size 14336 **

[bosoxfan_1]

question: phones don't work, how? the calls are getting across? the phone is ringing?

but no audio?

is this a signalling issue or audio issue?

If audio issue, is it no audio or one way audio?

Thanx

[helper_1]

The phones are not connecting to the phone system.  They do not regester to the system.  The bootup of the phone device goes to the point of "Connecting to NCP - NCP IP:XXX.XXX.XXX.XXX", then the phone reboots after sometime.

[merlin_1]

V3000 with 6_5_22 in SIP.  3102 phones across VPN worked properly until booted system into SIP.  Any suggestions? 

So what you are saying is the tels will not boot up after upgrading to R6.5.22 in SIP mode ? 

Sounds like  definately something across the VPN . The tels will reboot after a certain amount of time as they are POE tels . So they worked before but not now ....

standard open ports are the same as we only change the audio on port 5060 . All other ports are

2093

2094

2095 

2096 .

So if the tels do not boot up , they cannot get to the NBX . A dumb question but do the remote tels have static IP addresses ? Or a DHCP server with Option 184 set up ? In SIP mode , IP OTF no longer works . Only Standard IP which means ALL cards and tels MUST have an IP address DHCP or static .....

This message was edited by merlin on 4-21-10 @ 10:00 AM

[bosoxfan_1]

Another suggestion.. If all ports are open, I am wondering if it is a packet fragmentation issue.

Usually going througha firewall will fragment the packets.. Try resetting the parameter on your firewall.

Parameter "fragment packets larger than WAN MTU"  must be set to 1500.  Also parameter "forward packets to remote VPN" must be enabled.

[helper_1]

I will check those settings on the firewalls.

This is the situation now.  There are two different locations in Isreal.  Main location has a V3001R running SIP on 6_5_22.  The remote location does not have a system.  Main location phones are able to connect to the phone system on the LAN but can not connect to any other location whether tied with VPN or with PTP circuit.  The remote location can not connect to any system whether VPN or PTP.  Both networks have firewalls that are completely open and SIP settings have been confirmed on these units.  Wondering if anyone has had experience with Isrealy ISP connections and if this could be an issue with their internet networks in the country.