VPN Remote on Netgear FVS338 1

[socalsteve]

IP500 4.2.11, netgear fvs338, 5621sw IP phones

I have several sites with these routers and running (1) vpn remote phone on them. I am now tring to install (2) phones on 1 router and have followed:

http://marketingtools.avaya.com/kno...edProjects/bulletins/techtips/184_techtip.htm

the only thing i added to the steps was to create a second vpn client in the router and match that client name and password in the phone. I am testing this from the site where the ip office is located. the first phone comes right up but the second phone gets an IKE exchange error. Is there anything i need to do on the router, phone or IP Office to allow (2) vpn phones to work?

 

[socalsteve]

moving back to the top of the list

 

[PhoneGuyNJ]

You need to setup a seperate user (client) for the 2nd phone. Also make sure that you have enough IP's in the VPN configuration.

I have the same setup. My only issue is that the phones reboot every 60 minutes.

 

[socalsteve]

you need to change the lifetime in the router. i have seperate clients in the router

 

[Pepp77]

Interesting I can help here I think as I have recently setup a site with 3 users connecting to a netgear FVS338 router.

I used the mode config approach (ie option 1 on that techtip).

I setup one VPN client - which I used on all 3 phones.

I then setup a mode config record with 10 usable IP addresses init (I changed this to 100 due to having to change the SA lifetime to 12 hours (to stop the 60 minute reboot problem) - which locks an IP address up if the phone is rebooted before this time annoyingly).

Finally I created an IKE policy, ticked yes under do you want to use Mode config record and selcted the mode config record I had just created.

Hopefully the following links work as they are screengrabs of my 3 pages for this:-

http://i25.photobucket.com/albums/c62/pja77uk/client.jpg

http://i25.photobucket.com/albums/c62/pja77uk/ikepolicy.jpg

http://i25.photobucket.com/albums/c62/pja77uk/modeconfig.jpg

Hope this helps.

 

[socalsteve]

Thanks Pepp77, I'll try just using 1 vpn client in the router even though that sounds strange. You would think that the router would need to identify each phone on a seperate client name and password.

 

[socalsteve]

I tried using only 1 vpn client in the router and changed the user name in the vpn settings on the phone but still got IKE phase 1 no response. I am testing this from the site where the router and IP Office are. Is there any reason his would affect 1 phone working but not the other?

 

[Pepp77]

Im surprised if you'll get any to work if you are doing it from the ite where the IP is located as you shouldnt be able to create a VPN from within the network you are trying to connect to.

Also I found that when I was setting them up from my office I couldnt connect and got IKE problems if I tried to connect from our network, but could connect when connected firectly to our second DSL connections router.

 

[socalsteve]

Yes, 1 phone definitly connects as a vpn phone from inside the other still won't. Add this to voicemail to email using google gmail not working and you got a headache on your hands.

 

[IPOfficeIreland]

vm to email still not working steve?

 

[socalsteve]

still not working with gmail.....

 

[socalsteve]

I cannot get a second phone to work. Pepp77 you didn't do any other steps other than exactly what is listed in tech tip 184?

 

[Pepp77]

Steve - nope the only things I did differently to the tech tip was change the PSK and the user names.