R6 Essentials Remote Extension 1

[maxse]

Is this possible on R6 without a VPN?

 

[Westi]

No, it came out with R8.0 so the only way to do it is to put your phone as well as your IP Office on the open Internet.
Nasty way to do it so please don't.

Joe W.

FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[maxse]

In other words a full 1:1 NAT would work in this case?

The issue is we have a firewall that doesnt seem to work with the Avaya built in VPN client. I'm thinking that we will get another firewall, create a site to site and that should work.

 

[Westi]

I am not 100% sure what the 1:1 NAT would do but as far as i know it would still be an Internal address and that will most likely not work but it is worth a shot if you want to spend the 1/2 hr to set it up

Joe W.

FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[maxse]

Just tried it...it adds a static ip from the isp to the firewall and pushes all ports/traffic through to the local ip and presents its ip as the public ip. This doesnt seem to work.

This should work just fine with a standard point to point VPN correct? Doesnt need to be specific firewall/hardware?

 

[Westi]

any one should do it you have the basic encryption methods

Joe W.

FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[Westi]

Thanks for the star maxse

has been a while since I have gotten one. Was a bit inactive for a while.

Joe W.

FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[maxse]

You got it!

So if we simply upgrade the 500v2 from R6 to R9 Essentials we will be able to forward some ports and connect an IP phone directly without VPN access?

This is just s software upgrade that allows remote extensions without VPN?

 

[tlpeter]

Not just upgrade, you need more.
You need to setup H.323 remote worker and have a teleworker license per phone (first four are free)
You then need to setup port forwarding and set the RTP ports for that (i suggest to use non standard ports)


BAZINGA!

I'm not insane, my mother had me tested!

 

[IPGuru]

Maxse
Do yourself a favour & implement A VPN
Even when correctly configurd Nat traversal is very hit and miss, it is not worth the potential security risk or the agravation it causes.


A Maintenance contract is essential, not a Luxury.
Do things on the cheap & it will cost you dear

 

[maxse]

That certainly makes sense, we have a Cisco Meraki MX60 Firewall, we will add their Z1 gateway to establish a site-to-site VPN. That should work...