×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

any cheat sheets or docs on installing remote VPN 96xx telephone

any cheat sheets or docs on installing remote VPN 96xx telephone

any cheat sheets or docs on installing remote VPN 96xx telephone

(OP)
I am looking for any assistance, docs, cheat sheets etc that might help me install a remote 96xxG telephone to a customer network using the in-phone VPN. ? The firewall appliance is a Cisco 5506 ASA.

No issues connecting a laptop using the Cisco Anywhere client. I guess I should ask if it can use the same user login as a remote user? or does something need to be different? Also, what about making sure certain firewall ports are open?

Thanks for the help.

Z

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

(OP)
So it appears to be trying to establish a VPN tunnel, but fails.

The error I get is IKE Phase 1 no response.

Can anyone tell me if I can use the spelled out DNS name of the VPN Tunnel? Or do I need to list the actual physical IP address?

And just to clarify that I shouldn't need any settings on the IP office other than sitting up the user?

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

(OP)
I have the DNS set to 75.75.75.75 does this work?

Also, if the VPN Gateway doesn't answer, then perhaps they are missing something on their end? Opening up a port on the Gateway?

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

If you have dynamic IP address or two or more WAN at the IPO site, you can use dynamic DNS.
You can set it up at the phone with no problem.

I can send you prodedure for Sonicwall firewalls.

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

Does the client not already have a site to site vpn between firewalls setup? That's how we've always setup remote phones. Never did the phone VPN thing.

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

(OP)
this is a single user at a remote site. Using remote desktop on the laptop to connect. We are just trying to connect the phone.

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

I've always used the public IP of my ASA, and not an FQDN. Try that - if we take away DNS as an issue and still have problems then you can start looking at the next steps.

Right now your VPN server isn't answering the initial request. Once you get over that issue you'll be well on your way.

One word of advice - create a VPN user for the phone with no password expiry. You don't want to have to walk the user through changing the VPN password on the phone every time they change their password.

http://www.adventuresinvoip.ca/

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

(OP)
an update. We seem to have gotten the phone to connect through the VPN. It was a matter of making sure all the settings on the VPN matched the settings on the phone. I was lucky to have a tech person who knew the Cisco quite well.

We still have not gotten the phone fully operational.

We can establish the tunnel, exchange keys, and I can even see a couple of txt files being download from the call server. It sees the call server and even contacts it. I can get to the field where is asks for extension number and password, which I enter. Then it seems to almost instantly time out and the screen goes to "discover 10.1.4.1" (IP address of IP Office). its almost like it can see the call server and connect, but its not getting any response from the call server.

One thing to note. The IP Office is at version 9.1 and this is a brand new phone, so I assume its probably at version 10 or higher. Could this be causing an issue? I might go onsite and just do a firmware update locally.

RE: any cheat sheets or docs on installing remote VPN 96xx telephone

make sure that the Cisco doesn't try to "improve" the h.323 with some voice settings in the firewall.
Cisco is famous for that because they tweak their own voice products but that sometimes breaks the Avaya stuff.
SIP ALG also off just in case smile

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close