Equinox - Presence and Contacts not working when external to IP500
3

Question

Equinox - Presence and Contacts not working when external to IP500

bigfrenchy1986 (Programmer)

(OP)

19 Feb 19 12:40

I have an issue with Equinox currently where I have no Presence or Contacts when using Equinox remotely. Everything voice related is working correctly, I can make and receive calls to/from the IPO. However I have a Red Triangle in the top right stating "Access to Avaya Equinox contacts is currently limited" and "Contact service is currently unavailable"

I have set the Equinox App up using the URL method http://[SIP DOMAIN]/46xxsettings.txt to get the configuration for Equinox. Which pulls the 46xxsettings.txt file successfully and allows log in.

Has anyone else had this issue and what did you do to resolve it?

N.B. When on the LAN it works absolutely fine with Presence and Contacts.

Travis Harper (TechnicalUser) · Answer 1 · 2019-04-26 22:36:20

I have the same issue. I suspect it is cert related, but I can not verify.

My hunch is that it is related to DNS and Certs, although when I generated the cert I did add an entry for the public IP for external DNS resolution... so I could be wrong.

Anyone know what port presence is using? It's no longer using 5222 or 5223.

intrigrant (Systems Engineer) · Answer 2 · 2019-04-27 04:08:32

You need to use https over port 443 or 411(preferred) and a valid FQDN and a valid configurated certificate.

Enable System > LANx > "Use Preferred Phone Ports" to enable the use of port 411
Enable the Gatekeeper, SIP registrar and "Layer 4 Protocol" TLS>
Fill in the WAN ipaddress in system > LANx > "Network Topology" > "Public IP Addrss"
Fill in System > DNS data
Enable System > VoIP > VoIP > "Direct Media Within NAT location" if Voip audio fails
Set System > VoIP > VoIP Security to "Preferred". This is optional, it has impact to all IP Phones!
Assign the appropriate users a "Power User" License and enable "One-X Portal Services", "Enable Desktop/Tablet Voip Client" and "Enable Mobile VoIP Client" only
Get a DNS A-record like voip.customerdomain.com assigned to the customers WAN IP Address
On the local DNS server voip.customerdomain.com must point to the local IP Office IP Address.
On the firewall forward TCP port 411 and 5061 to IP Office and forward UDP 46750 upto 50750 towards the IP Office.
The below part about the 46xxsettings file is only to to bypass a bug in the Equinox Client 3.5.5 using a 3rd party Certificate.

First what is needed is to download a copy of the AUTOGENERATED 46xxsettings.txt file using your browser. You may need to change the HTTP setting in system configuration to disable http for Avaya Clients only to be able to download this file.
Modify the 46xxsettings file under the heading "# SETTINGSK1XX" and add "SET TLSSRVR voip.customerdomain.com"
Next modify the 46xxsettings file, find the section "# SETTINGSEQNX" and add a line after it with the FQDN for your system as follows "SET TLSSRVR voip.customerdomain.com"
At the bottom of the SETTINGSEQNX section there is a line that states "GOTO END" modify that line to "GOTO NONSPECIALS"
Then at the bottom of the entire fill add in "# NONSPECIALS"
Your additions should look like this in the file:

## IPOFFICE/11.0.4.0.4 build 1 192.168.110.30 AUTOGENERATED
# SETTINGSK1XX
SET TLSSRVR ipo.domain.com
-----------------------------------
# SETTINGSEQNX
SET TLSSRVR ipo.domain.com
GOTO NONSPECIALS
# SETTINGS1603
----------------------------------
# END
GET 46xxspecials.txt
# NONSPECIALS

Configure a self signed certificate in IP Office using the security manager and use these parameters:
The Subject Alternative Name(s) field should include the following entries, each separated by a comma. Multiple entries are required if using both LAN1 and LAN2:

DNS entries for the system's LAN1 and/or LAN2 SIP Domain Name, eg. DNS:voip.customerdomain.com

DNS entries for the system's LAN1 and/or LAN2 SIP Registrar FQDN, eg DNS:voip.customerdomain.com
IP entries for the system's LAN1 and/or LAN2 IP addresses, eg. IP:192.168.42.1, IP:192.168.43.1
If supporting remote workers, add an IP entry with the public IP address of the IP Office.
SIP URI entry for the LAN1 and/or LAN2 SIP Domain Name, eg. URI:sip:voip.customerdomain.com
SIP URI entry for the LAN1 and/or LAN2 IP address, eg. URI:sip:192.168.42.1
If using a separate HTTPS file server, add a SIP URI entry for the file server's domain name.

Install the certificate if the IP Office onto the device
Install Equinox as per manual and use "https://FQDN:411/46xxsettings.txt" as the website to connect to FQN=voip.customerdomain.com

qtelcom (Vendor) · Answer 3 · 2019-05-01 18:26:52

Quote (intrigrant)
The below part about the 46xxsettings file is only to to bypass a bug in the Equinox Client 3.5.5 using a 3rd party Certificate.

I see Equinox Client 3.5.6 is out, is that bug fixed and these steps are no long necessary?

intrigrant (Systems Engineer) · Answer 4 · 2019-05-01 20:34:16

RE: Equinox - Presence and Contacts not working when external to IP500

intrigrant (Systems Engineer) 1 May 19 20:34

It seems so...

davea2 (TechnicalUser) · Answer 5 · 2019-05-22 08:39:06

I am having this same issue with a new client

We have version 3.5.6, a 3rd party UCC certificate (GoDaddy)and ports 411 and 5061 forwarded to the IPO.
They are not using Zand, but neither am I amd mine works on our in house kit no problem with the same arranment.
Do I need any other ports open?

device was configured with https://sip.domain.com:411/46xxsettings.txt using autogenerated.

Works no problem on the corp. WiFi

Thanks!

dave

davea2 (TechnicalUser) · Answer 6 · 2019-05-22 10:15:12

Although he reports no red triangle when out of the office...

davea2 (TechnicalUser) · Answer 7 · 2019-05-22 16:35:47

So, I find that presence and contacts do not work outside the LAN on Android and iPhone clients but seems to work fine on the Windows client...

intrigrant (Systems Engineer) · Answer 8 · 2019-05-22 17:07:21

RE: Equinox - Presence and Contacts not working when external to IP500

intrigrant (Systems Engineer) 22 May 19 17:07

Firewall... Wrong certificate..

davea2 (TechnicalUser) · Answer 9 · 2019-05-22 17:37:23

My initial thought was firewall, however the windows client outside the office works fine - are there differences in port use?
Also I guess the cert is OK too if it's accepted by the Windows client?

davea2 (TechnicalUser) · Answer 10 · 2019-05-23 16:31:47

Si it seems the only phone put of 3 not working for presence and contact is mine.
an iPhone and another Android phone work fine.
Windows clients work fine.

My phone works perfectly with our in-house kit.

I thought mine may be remembering old data so deleted any certificates I found on my phone and even uninstalled and re-installed the app.

Still nothing.

So, must be my phnoe but cannot figure out what!

Come Join Us!

Posting Guidelines

Equinox - Presence and Contacts not working when external to IP500
3