INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Jobs

NBX V3001 VS IPSEC VPN (LINUX BASED)

NBX V3001 VS IPSEC VPN (LINUX BASED)

(OP)
Hi all!

I have a very small branch office (with a single phone) and we're using Linux (racoon) to connect it via VPN to our nbx v3001.

The phone rings but no voice gets to the phone.

What am I doing wrong?

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

No audio both side ?
IP Phone had a static IP ??
NBX had ip-on-fly ?
NBX use a static ip for each device ?

Port on Firewall open udp 2093-2094-2095-2096

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

(OP)
Hi my friend...

No audio on both sides...

NBX and Phone and adsl external connection have all static ip.

The little netgear router / firewall (I use in the branch office) to connect to a linux ipsec vpn server maybe should be configured with port forwarding you suggested?

Thanks for your help!

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

You must have STATIC IP LIcence on NBX or IP-ON-FLY .
Because if you see , normally on same LAN each phone haven't ip address set , all work via mac-address .

For conencted on other LAN each Device on LAN with NBX need IP .

Correct you have signalling , but not have audio because device on same LAN NBX haven 't IP .

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

(OP)
This is not so clear to me...

I have this problem because my astaro firewall (that was acting as vpn ipsec server) subscription is ended so I thought to use racoon on linux to prepare a vpn ipsec server for free.

Is this helpful to understand better the scenario?

Thank you for your kind helpò

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

Hi sorry , before crash your astaro all work fine ??

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

(OP)
Yes my friend.

The astaro license died and because of cheap netgear routers in branch offices I'm forced to use a free ipsec vpn server with preshared key (only vpn supported on the branch offices' side).

I thought about linux and I've chosen racoon to prepare a vpn server.

It worked great for computer and applications but the phone is acting as I've told: it reacts to ping, it rings but no audio both ways.

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

OK ,

Only port open for voice is udp 2093-2094-2095-2096 and only one port for signalling TCP 1040 if i remember correct .

If default gateway is same of older astaro , you need trace with wireshark if you have packet incoming to side NBX ( udp 2093-2094-2095-2096 ) and packet out to side Phone ( udp 2093-2094-2095-2096 ) .

Only one port 2093-2094-2095-2096 transport voice , in this moment i don't remenber

RE: NBX V3001 VS IPSEC VPN (LINUX BASED)

(OP)
I finally got it!

There were two problems:

a) a static route to be added (to let nbx communicate successfully BOTH ways with the branch office) and
b) NAT *has* to be disabled to let the phone work correctly when using my linux vpn server and SADLY gateway for internet

So now I need to find out if I can use both of the functions at the same time... :/

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Resources

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close