5610 IP problem connecting through tunnel to IP412 - Help needed

[tmckeown]

Hi,
We recently had an Avaya IP412 phone system installed. Now, I'm trying to work out a few problems left. We have three locations. Each location has domain controllers. Each location has a Watchguard Firebox III-700. All of the Firebox's have a manual IPSEC tunnel configured. So, all our locations are linked. We have no problems with the tunnels. I can print, ping, connect, copy, etc. to any computer or printer in any location. Unfortunately, our new 5610 IP phones don't want to work over the tunnel. I can get them to work while in location #1, but after moving them to location #2 and reconfiguring them, they don't connect. Here is some system information:

Location #1
IP412: 10.11.1.11/16
Voicemail server: 10.11.1.13/16
Firewall/gateway: 10.11.1.1/16

Location #2
Network: 192.168.1.0/24
Firewall/gateway: 192.168.1.3


5610 setup for location #1
Phone= 10.11.4.23
CallSv= 10.11.1.11
CallSvPort= 1719
Router= 10.11.1.1
Mask= 255.255.0.0
FileSv= 10.11.1.13
802.1Q=auto
VLANID= 1
VLANTEST= 60

5610 setup for location #2
Phone= 192.168.1.252
CallSv= 10.11.1.11
CallSvPort= 1719
Router= 192.168.1.3
Mask= 255.255.255.0
FileSv= 10.11.1.13
802.1Q=auto
VLANID= 1
VLANTEST= 60

Can someone please help me on this? Does anything look wrong? Is there some known issue with 5610 phones connecting over a tunnel?

Thanks for the help.
Tom

 

[bakeacake]

Is there a IP route in the 412?

 

[tmckeown]

Yes there is. We just found the problem. It seems bizarre to me, but if QoS is enabled on the phones, they will not connect to the phone system through an IPSEC tunnel. Hard to believe.

I'm going to write to Watchguard and let them know.
I hope this saves someone else the trouble I went through.

 

[workinonphones]

How do you disable QOS on the IP phone? I'm having the same problem using Netgear VPN routers. Maybe it's the same issue.

 

[tmckeown]

When reconfiguring the phone, there is an option for 802.1Q auto, on, off. Select off. That worked for us.

 

[GDVillarreal]

802.1Q is not QoS, its for VLAN tagging. To configure QoS tagging settings on an IP Phone, use MUTE Q O S #.

Glad it worked for you though.

 

[tmckeown]

Yep, my mistake. It was VLAN support that gave us the trouble.