No Dial Tone or Dialing over VPN
No Dial Tone or Dialing over VPN
(OP)
Hi All,
We are having an issue with one of our remote workers. The phone logs in to the extension, but there is no dial tone and the user cannot dial out or receive calls.
We have about 60 people working remotely with the same phones and this is the only one that is not working.
The set is a 9611G connecting through a Cisco VPN to an ASA5510. I can see in the VPN monitor in the ASA that the phone gets an IP address. However, in SA when I do a Status Station #ext, under CALL CONTROL SIGNALING, Set End shows as 0.0.0.0. with a blank Port. Switch-End shows the proper IP address and port. We have sent the user a second phone and switch, but it still has the same problem.
The user has RCN internet service and uses an eero for mesh Wi-Fi. The phone is plugged into a PoE switch, which is then plugged into one of the LAN ports on the main eero router. The computer is also plugged into the switch and is connecting in to the office over a Forticlient VPN connection and is working without issue. I have tried having the user bypass the eero, but if we plug straight to the modem, it cannot connect to the VPN at all. I have verified that the eero is set to receive a DHCP address from the modem, so I would think that the phone would also.
The Avaya system is an Aura CM 5.2 (soon to be upgraded to 8). My knowledge of the system is minimal. I don't know what to look at next.
We are having an issue with one of our remote workers. The phone logs in to the extension, but there is no dial tone and the user cannot dial out or receive calls.
We have about 60 people working remotely with the same phones and this is the only one that is not working.
The set is a 9611G connecting through a Cisco VPN to an ASA5510. I can see in the VPN monitor in the ASA that the phone gets an IP address. However, in SA when I do a Status Station #ext, under CALL CONTROL SIGNALING, Set End shows as 0.0.0.0. with a blank Port. Switch-End shows the proper IP address and port. We have sent the user a second phone and switch, but it still has the same problem.
The user has RCN internet service and uses an eero for mesh Wi-Fi. The phone is plugged into a PoE switch, which is then plugged into one of the LAN ports on the main eero router. The computer is also plugged into the switch and is connecting in to the office over a Forticlient VPN connection and is working without issue. I have tried having the user bypass the eero, but if we plug straight to the modem, it cannot connect to the VPN at all. I have verified that the eero is set to receive a DHCP address from the modem, so I would think that the phone would also.
The Avaya system is an Aura CM 5.2 (soon to be upgraded to 8). My knowledge of the system is minimal. I don't know what to look at next.
RE: No Dial Tone or Dialing over VPN
1) Is the phone programmed correctly i.e. is it getting teh call server address and so on?
2) Is H323 inspection turned off on the ASA?
Take Care
Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.
RE: No Dial Tone or Dialing over VPN
Thanks for your reply.
1) Before the current phone left the office, we tested it through a CradlePoint and it logged in and worked just fine, so I believe that it is programmed correctly.
2) No, it is turned on. Both "H.323 H.225" and "H.323 RAS" are turned on (I'm not sure which one counts here - or both). They are both using the default map.
One more thing I just noticed. Under IP ENDPOINT DATA, Native NAT Address shows the IP address assigned by the ASA. Looking at another station that is working fine through the VPN, the same setting shows as "not applicable".
RE: No Dial Tone or Dialing over VPN
I strongly recommend that you disable it; both options are relevant. Avaya's implementation of H323 (extending the protocol) doesn't match Cisco's ideas of what H.323 should look like and I have had problems with inspection turned on on Cisco. However, having re-read your initial post, I think the ASA is common to all handsets, so this is unlikely to be the issue.
What device is creating the VPN at the remote end?
Take Care
Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.
RE: No Dial Tone or Dialing over VPN
For all of our users, the handset is creating the VPN at the remote end.
RE: No Dial Tone or Dialing over VPN
I have seen an issue with Avaya VPN phones not working when the home equipment hands out 10.x.x.x addressing. I would check to see what IP address the home network is giving out. you may need to have them change that to 192.168.x.x
RE: No Dial Tone or Dialing over VPN
Good thought, but the user's local network uses a 192.168.X.X scheme.
We have now ordered a FortiGate 30E to configure and send to the user. Hopefully that will allow the phone to work.
RE: No Dial Tone or Dialing over VPN
Are you running checkpoint?
RE: No Dial Tone or Dialing over VPN
Checkpoint VPN? No, Cisco.
RE: No Dial Tone or Dialing over VPN
Since this is only one phone check what type of Router/Firewall they are using and see what it supports for ALG parameters.
RE: No Dial Tone or Dialing over VPN
They are not using either subnet that you mentioned. Although, I did find out that the subnet they are using is the same subnet as our VoIP system in the office. I wonder if that could be an issue.
They have an eero router from RCN. I researched a bit online and have seen mention that eero routers do not have SIP ALG turned on, and it cannot be turned on.
RE: No Dial Tone or Dialing over VPN
1. Please provide to us crypto map ACL and filter
2. IP address of your phone
3. IP address your CM and G450/430 or other media gateway
RE: No Dial Tone or Dialing over VPN
This issue has now come up twice. It turns out that the local subnet of the user's eero router was in conflict with our local subnets here at the office. Both users had an eero router with RCN Internet service.
As I mentioned in a comment above regarding the first case, we discovered that the user's local eero subnet was the same subnet as our VoIP subnet in the office. In the second case, the subnet was not the same as the VoIP subnet, but was the same as another subnet in our network. I don't know why it was causing an issue in the second case, as it should not have been attempting to reach the switch and thinking that the subnet was local.
In any event, the symptoms were the same in both cases. The phone would connect to the Cisco VPN and would then successfully log into the extension. The user would get no dial tone and could not make or receive calls. The phone may then just show "Connecting..." on the screen and the only thing that you can do to affect anything is restart the phone.
SOLUTION
You will need to ask the user for permission to log into their account to control the eero router. You cannot simply enter the default gateway address in a browser at their location to access the eero router's settings. You will need to install the eero app on a mobile device to access it. This will work from a remote location - I have done it from the office both times. Note that these steps are from memory, so it may be slightly different, but it's close:
RE: No Dial Tone or Dialing over VPN
Thanks for the update and detailed solution information. Definitely star worthy.
RE: No Dial Tone or Dialing over VPN