Avaya - Model 9650 & VPN

[Hick22]

Hi all,

slowly making progress on setting up a VPN tunnel between an Avaya 9650 & Juniper VPN (SSG140).

Having an issue however, with the following displayed on the phone...

Gateway (displaying my Gateway IP Address)
Exchanging Keys
Building VPN Tunnel
No Call Server Address - Resetting

Phone Restarts and cycles through the above again.

The logs on the Juniper Firewall look good, with Phase 1 & 2 negotiations completing and an alarm showing the my VPN phone is 'UP' on the Firewall Event Log, so from the Firewall side, all looks ok.

I recently updated my Juniper Firmware, so is well above the required version.

Any ideas on the above would be greatly appreciated!

Many Thanks!

 

[intrigrant]

You have to manually enter the ip address of your phone system and the fileserver.

A simple mind delivers great solutions

 

[Hick22]

Thanks for the reply!

I have an IP Pool setup on the Juniper Firewall, which is assigning an IP Address to the VPN phone as it establishes its connection via the VPN.

Do you think I also need to add manually, an IP Address to the phone too?

When I cycle through the Menu options on the VPN configs, the only IP address of the phone I see is the one its been assigned to from my broadband router...

 

[intrigrant]

When the phone boots up you see a message "Press * to configure", press *
If it ask for a password that is either nothing or it is 27238, press # after password.
If the phone reboots the password is wrong otherwise it will ask for the phone ip address, leave it to 0.0.0.0 press #
keep pressing # until is asks for the mc ipaddress, enter the ip address of the ipo press # and do so until it asks for a fileserver ip address, fill in the ip address of the ipo then keep pressing # until it asks to save settings, confirm twice, phone reboots and now it should work.

A simple mind delivers great solutions

 

[Hick22]

Thanks again for that, however when I press # during the boot & VPN startup procedure, it just takes me through to the phone options, which I've already setup and I'm unable to find the options for the 'mc ip address'...

 

[intrigrant]

The settings shown for static address installation are:
[ul]
[li]Phone =This is the phone's IP address. To accept the current value, press # or enter a value and then press #. If entering a new value, press the * key to enter a '.' character between digits.[/li]
[li]CallSv = This is the address of the H.323 gatekeeper. For IP Office systems this is the IP address of the IP Office LAN.
[li]CallSvPort = This is the Gatekeeper transport layer port number. For Avaya IP phones the value used should be 1719. To accept the current value, press # or enter a value and then press #.[/li]
[li]• Router =[/li]
[li]This is the address of the phone's default IP gateway. For IP Office this is typically the IP address of the IP Office LAN. To accept the current value, press # or enter a value and then press #.[/li]
[li]• Mask =[/li]
[li]This is the phone's IP Mask (also called the subnet mask). The mask is used with the IP address to indicate the phone's subnet. This should match the IP mask set for the IP Office Unit.[/li]
[li]• FileSv =[/li]
[li]This is the address of the file server from which the phone should request software and settings files. Enter the address of the TFTP or HTTP configured with the Avaya IP phone software file set.[/li]
[li]• 802.1Q =[/li]
[li]To change the setting press *. Press # to accept the value.[/li]
[li]• VLAN ID =[/li]
[/ul]

A simple mind delivers great solutions

 

[intrigrant]

The settings shown for static address installation are:
[ul]
[li]Phone =This is the phone's IP address. To accept the current value, press # or enter a value and then press #. If entering a new value, press the * key to enter a '.' character between digits.[/li]
[li]CallSv = This is the address of the H.323 gatekeeper. For IP Office systems this is the IP address of the IP Office LAN.
[li]CallSvPort = This is the Gatekeeper transport layer port number. For Avaya IP phones the value used should be 1719. To accept the current value, press # or enter a value and then press #.[/li]
[li]Router = This is the address of the phone's default IP gateway. For IP Office this is typically the IP address of the IP Office LAN. To accept the current value, press # or enter a value and then press #.[/li]
[li]Mask = This is the phone's IP Mask (also called the subnet mask). The mask is used with the IP address to indicate the phone's subnet. This should match the IP mask set for the IP Office Unit.[/li]
[li]FileSv = This is the address of the file server from which the phone should request software and settings files. Enter the address of the TFTP or HTTP configured with the Avaya IP phone software file set.[/li]
[li]802.1Q = To change the setting press *. Press # to accept the value.[/li]
[li]VLAN ID =[/li]
[/ul]

A simple mind delivers great solutions

 

[intrigrant]

I could add a third one but I'll keep it simple....

A simple mind delivers great solutions

 

[CarGoSki]

When intrigrant type MC ipaddress he means the Call Server address otherwise known as the LAN 1 address. Some cases use LAN 2 address.

 

[Hick22]

Hi again!

Still battling with this unfortunatly... I eded up wiping the configs completely, both from the phone & the Juniper Firewall/VPN...

Still getting stuck at exactly the same point though...Can not connect to the Call Server IP Address...

The phones connects fine via the VPN tunnell, can see the HTTP Server, then goes to discover the Call Server IP address and it just sits on the same screen saying discover xx.xx.xx.xx and never progresses...

If I plug the same phone into the network, using the same Call Server IP Address, it connects fine...

Any ideas!?!

Many Thanks!