Latest VPN Firmware For 5620 / 5610 - Phones go into discovery mode.

[johndjmix]

Hi All.

I have an IP Office Small office Edition (IP 401 G) running....4 office digital phones, 3 remote IP phones at employee's homes.

The remote IP phones are 5610SW IP and 5620SW IP with the VPN Firmware, they connect back to a PIX 501 sitting next to the IPO unit in the office. It all works great, except sometimes (Several times a day) a remote phones will all of a sudden go into discovery mode. At that point it will not reconnect. You must power them down the phone, wait 5 minutes, then boot it back up. If you do not wait the 5 minutes when rebooting, and just reboot it it will NOT connect and just go into discovery. Somehow this 5 minute period clears something somewhere.

On the reboots where it hits discovery, it seems to connect the VPN fine, and i see http and tftp requests in manager for it trying to fetch the files, and see the station trying to register, yet on the phone screen it seems to not be able to get through to the http and tftp server. I don't understand how i can see the requests come in but the phone isnt able to transfer the files. This makes me think its not a VPN issue, since if it was i wouldnt get any requests in....very stumped here!

System info:

IPO: IP 401 NG Running 4.2(14)

5620 Phone:
Application File: i20aVPN23252
Boot File: x20d01a2_3

What is the latest firmware for the phones? I downloaded the latest manager, but i dont see VPN firmware in the manager directory. Is it just built in to all the new firmware?

Thanks for the help in advance, ive spent the last 3 days trying to figure this out.

--John

 

[Hovus]

Sounds like a keepalive issue on the tunnel itself.

I have dreamed a dream, but now that dream has gone from me.

 

[johndjmix]

Any idea about the software version on the phones? Would love to upgrade it just dont see VPN software in the new manager.

--John

 

[hairlessupportmonkey]

VPN firmware is in a ZIP file in the extracted manager download.

something like \Admin_XX_XX\bin\VPN Phone\H323_xx<blah>.ZIP

ACSS - SME
General Geek

 

[intrigrant]

If you see the requests from the phone hitting IP Office the Acks from IP Office cannot reach the phone, the phone think there is no gatekeeper and goes on discovery.
So for some reason sometimes the Acks from IPO does not reach the phone and IPO does not except new requests from that phone for a amount of time ( five minutes you said? ). Rebooting IPO would force it to accept new registration requests.

A simple mind delivers great solutions

 

[johndjmix]

hairlessupportmonkey: Not there...just looked. Thats in version 8.1. Do I need to download the binarys also? (Just got the admin package).

intrigrant: That makes sence, ill try rebooting the IPO next time it happens.

--John

 

[johndjmix]

Found the files, thans hairlesssupportmonkey.....i was looking in the installed dir, not the extracted download.

--John

 

[johndjmix]

Here is what im getting in Monitor when it happens. This makes no sence to me how they are trying to connect...why, if they can try to connect, do they get a http 905 and fail tftp. Any why only intermittently.

789109mS H323Evt: Recv GRQ from c0a82932
789109mS H323Evt: e_H225_AliasAddress_dialedDigits alias
789109mS H323Evt: found number <501>
794803mS H323Evt: Recv GRQ from c0a82932
794803mS H323Evt: e_H225_AliasAddress_dialedDigits alias
794803mS H323Evt: found number <501>
799796mS H323Evt: Recv GRQ from c0a82932
799797mS H323Evt: e_H225_AliasAddress_dialedDigits alias
799797mS H323Evt: found number <501>

--John

 

[hairlessupportmonkey]

it has to be a network related issue.

ACSS - SME
General Geek

 

[johndjmix]

Yea, i tend to agree at this point. Going to order a ASA 5505 to replace the aging pix 501.

Thanks guys...

--John

 

[johndjmix]

Put in the ASA 5510 last night. What a difference. Phones connect every time, stay connected and establish the VPN fast and perfect every time.

Thanks for the help guys.

--John