IP-LDK60: Connecting a LIP-6012D trough internet

[mario82]

Hi All Masters here!

I have a LG-Nortel IPLDK 60 console and i want to connect a VoIP Phone LIP-6012D trough internet.

Office 1(Cancun): It has the LIP-6012D phone connected to internet trough a DSL Modem.

Office 2: (Monterrey City): It has the IPLDK 60 PBX, at the Edge of the Network there is a Router with a Public IP Address and all UDP and H.323 Traffic forwarded to the internal IPLDK IP Address.

I connected the phone this way using different LAN Subnets, and it worked fine with the same port filter rules. The problem is when i do it from the internet. Even i can see traffic reaching PBX with my sniffer hitting 5588 port, but the phone can't get to work.

Can some one help?, I'read this post every day and it's really good and i thing this will be a good topic.

Thanks in advanced

 

[doktor]

Audio Channels - H.323 (RTP/RTCP) (IP Network) 6000-6011, 8000-8011 and 9000 - 9011 (UDP) should be opened or forwarded.


///doktor

 

[mario82]

Hi Doktor

Thanks to you for reply...i have set this on my Router/Firewall already:

Ports Type Forward to
1-65535 UDP 192.168.1.253 (PBX Internal IP)
1720,1503 TCP 192.168.1.254 (This is for H323)

On the other side i have my Sniffer and i can see this comming through:
No.Time Source Destination Protocol Info
10 3.441349 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
12 3.643685 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
14 3.807265 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
17 4.693144 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
19 4.694784 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
20 4.695503 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
22 4.696186 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
25 4.710618 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
27 4.895451 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588
29 5.097618 189.224.63.4 192.168.2.152 UDP Source port: 5588 Destination port: 5588

One thing i've noticed doing the same thing between subnets is this:

1 - Phone tries to connect to PBX using port 5588 UDP
2 - Phone tries to make a call and it uses 8000 - 8010 UDP

As you can see i have enabled all possible UDP Traffic on my router.

I wonder if it's possible to achieve this the way i'm trying to do it.

Thanks

 

[mario82]

Sorry:

192.168.1.253 it's really this -> 192.168.2.152, my mistake.

 

[morenot]

Si el telefono lo conectas en tu red, funciona?

If you connect the phone in your nwtwork, it works?

Saludos

JLMT//

 

[morenot]

Utliza DMZ apuntando a la direccion del Ipldk
Use DMZ pointing to ipldk ip address

Saludos..

JLMT//

 

[mario82]

Ok, yes that would be my next step. Using DMZ, I just want to be sure that the way i'm trying is correct.

I'll do it asap and let you know.

 

[mario82]

Well, i used DMZ pointing to my PBX but no luck, even i use DMZ on the LIP Phone side and still the same problem, can't get it working.

I wonder if i need to use SIP instead H.323.

Can some one provide a link or PDF guide to do this? I mean configure SIP on IP LDK

Thanks in advanced

 

[morenot]

Mario:
Yo estoy en Monterrey, hablame al 80409409, ext. 226
Jose Luis Moreno

 

[mario82]

Thanks all for reply this post, but i never found a way to make it work this way, so i bought a VPN Client Firewall and i did it through IPSEC Tunneling.

I think this is the best way..or at least the only one i know.

 

[doktor]

Thanks for your update...

///doktor

 

[mario82]

Hi all, i just want to be more specific on this for anyone trying to do the same thing.

Implementation i did was using a CISCO WRV210 equipment and Fortinet 60B, as IPSEC is a standard protocol this should work with any other equipment no matter what brand you use.

Both working with DSL and DynDNS.

IT works very nice and plus...CISCO has implemented QoS port based, so you can set bandwithd amount you need to guarantee quality on voice calls.

Thanks.