Avaya 9650c over existing sonicwall site to site vpn

[cwhite432]

I have a multi site setup with one IP Office phone system at the main office. Phones at branch offices connect to main office over existing site to site VPNs setup with Sonicwall TZ series firewalls. Everything is working fine for most phones. I tried replacing 1600 series phone with a 9650c (and a 9608) and the phones would seem to connect to the phone system. Phone even did a firmware upgrade from phone system. When I try to log in a user I get an error and the phone won't login. Phone can login to system with no issues when setup at the main office. The only difference is the vpn and IP subnet of the remote location. Other 1600 phones at the remote office work fine over the vpn. Is there something different about the 9600 phones that would be blocked for some reason?

 

[amriddle01]

Subnet will not matter so it will be the VPN/Router blocking something, what error do you actually get?

 

[cwhite432]

I can't remember exactly what it said and I'm not at the location currently. It didn't give an error code or anything and for the life of me I can't remember what it actually said. It was just odd. The vpn is set to allow all traffic to and from both sites. Address information is setup statically in the phones and I just mirrored address info set on the 1600 phone that currently works. Just weird that other models work fine but a 9600 won't.

 

[amriddle01]

It is odd, but Sonicwalls are known for being touchy/trigger happy, there are a few settings on them that can be turned off that can interfere that aren't obvious. Having not used one for ages I can't remember the exact names but basically any H323 inspect maps and/or ALGs/helpers etc need to be off

 

[cwhite432]

The only thing I can find on the sonicwall that would fall under that category that is enabled is "Enable H.323 Transformations" That is turned on. I can try and turn it off on both ends and see if that makes a difference. Is the action of the phone logging in considered an H.323 connection? Instinct tells me that it's not but I've been wrong before... one time. jk

 

[IPGuru]

Just to confirm
you are not programming he VPN options in the 96XX handset?
(you have a hardware VPN so the phone should be configured as if it was on a std network)

2nd always disable any Voip assistance features in routers & firewalls, they do nothing except break functionality!

A Maintenance contract is essential, not a Luxury.
Do things on the cheap & it will cost you dear

 

[cwhite432]

Yes that is correct. The VPN is from Sonicwall to Sonicwall with the phone having a private IP in the remote subnet. I will be onsite next week and will try again disabling the "Enable H.323 Transformations". Thanks

 

[cwhite432]

I was finally able to make it onsite and disabling the "Enable H.323 Transformations" fixed the issue. Thanks for the help.

 

[amriddle01]

Cool