[b]One way communication between VPN[/b]
[b]One way communication between VPN[/b]
(OP)
Scenario:
Have 3Com NBX100 VOIP NBX System located in corprate office. Each remote site A and B are linked thru Sonicwall TZ170 VPN using T1 line to the corprate office. Each site have at least 3 3COM phone stations. VPN tunnells are sharing datas as well as voice.
Problems:
When site A initiating a call to site B's phone extension, can hear site B but site B can't hear site and vice versa when Site B initiatin a call to Site A's phone extension; but there is no problem to call to corporate office except sometimes the sounf quality is not good and can only hear one way communication.
Does anyone has this kind of problems? Please help. Thank you.
Have 3Com NBX100 VOIP NBX System located in corprate office. Each remote site A and B are linked thru Sonicwall TZ170 VPN using T1 line to the corprate office. Each site have at least 3 3COM phone stations. VPN tunnells are sharing datas as well as voice.
Problems:
When site A initiating a call to site B's phone extension, can hear site B but site B can't hear site and vice versa when Site B initiatin a call to Site A's phone extension; but there is no problem to call to corporate office except sometimes the sounf quality is not good and can only hear one way communication.
Does anyone has this kind of problems? Please help. Thank you.
RE: [b]One way communication between VPN[/b]
I browsed 3Com support and see something about ARP. I called them and they said I should put the NBX on a public IP and mentioned something about NAT. This can't be the solution as a VPN is supposed to be instead of NAT or a public IP.
At first I thought that it must be my VPN hardware and was actually debating getting the sonicwall. Now it seems that it is not neccessarily the case. So I hope someone else can help us. Thanks.
RE: [b]One way communication between VPN[/b]
I've called to sonicwall and the technician thought it might be an issue with access policy in the Sonicwall appliance. He promised to investigate the settings and troubleshoot it today. I'll post the outcome when it's available.
Just wandering if you need to pay 3Com when you call their tech support?
RE: [b]One way communication between VPN[/b]
RE: [b]One way communication between VPN[/b]
Since we have enough of pool of public IP addresses, I put the NBX system outside firewall and give it static public address. Each remote site's station also given a public IP address, for example, Site A has 4 Phone stations and I have to give all those 4 phones w/ 4 different public IP addresses and you can't have all those 4 phones sitting behind the firewall and do NAT instead (With the NAT config., you can only have one phone sit behind the firewall).
The draw back of this setting is that I have to do all the new wirings and separated from our data network which beat the whole purpose of efficientcy and scalability.
By the way, just talk to Sonicwall people. he suggested to set the NBX system to use Standard IP instead of IP on the Fly. Double check on the knowledge base in several internet forums, and most of them suggesting Standard IP. I'm gonna try it later today.
RE: [b]One way communication between VPN[/b]
RE: [b]One way communication between VPN[/b]
3Com should build a router that auto forwards NBX traffic to their phones.
The good news is that 3Com is converting to SIP in an upcoming release of software so you will be able to use a SIP aware firewall at HO and the remote offices. VPN's will not be needed anymore.
Unfortuneately this will take time.
In the meantime is the pcxset and hardphone on the same remote home VPN?
I suspect ARP requests are being set through the VPN tunnel and not locally through the layer 2 network. This prevents the Since NBX uses layer 2 protocols. By using standard IP every phone will use a dedicated IP address and the CPU should create a database of extension to IP address mapping instead of attempting all communications over the layer 2 network.
Another issue with hardware based VPN's over public internet is that they are typically only available 85% of the time this results in choppy speech or possibly dropped calls.
Talk to a carrier about a managed layer 2 bridged connection or VPN service with SLA's between offices. This is often required for good quality VoIP (QoS).
RE: [b]One way communication between VPN[/b]
Now I resort to using 3Com router 3CR870 and 3CR860 to link our remote offices. This router is a VPN router that support NBX traffic as well but it's a lame firewall not like sonicwall.
Sonicwall Tech support find out the problems regarding NBX system. They said that 3Com is using a propriertary multicast, that's why it won't work on VPN tunnel.
Just implemented this router yesterday in corporate office and will implement it later in remote office. Won't know the outcome not until later on today.
RE: [b]One way communication between VPN[/b]
What is not so good about the 3Com routers and I wonder if even the 3Coms are better than the linksys I am using now (albeit not as good as the SonicWall).
Please keep me posted on the answers from SonicWall. Thanks.
RE: [b]One way communication between VPN[/b]
3Com router I mentioned above is almost identical with linksys router except is has an option for NBX. Other than that nothing special. The configuration of the router is pretty simple and a little bit tricky when you set up a site to site VPN. it's web-based configuration.
I check online vendor, those router price range are from $100 to $350. So it's not bad compare to Sonicwall but a little pricey compare to Linksys.
RE: [b]One way communication between VPN[/b]
Did you still have to do standard-IP instead of IP on the fly?
My linksys has a dual WAN connection which I like but the rest is nothing special. I wonder if I could use the 3Com router WITH my linksys?
Your thoughts?
RE: [b]One way communication between VPN[/b]