×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

9608 VPN

9608 VPN

(OP)
I have a 9608 phone VPN'ing back to a R8.1(95) system that is getting stuck on discovering. The phone is successfully navigating the VPN tunnel, connecting, and I even see the traffic from the phone and the system responding to the request in monitor. However, I just keep seeing the phone asking and the IPO responding but it sure seems like the phone is not getting the response from the IPO.

Sonicwall firewall is used for the VPN, and of course, the Sonicwall people are blaming the phone system... I can't for the life of me think of a way this could be the IPO causing the issue. I do know the IPO can NOT ping the phone when it is VPN'ed but the Sonicwall can ping the phone. It is weird the phone is getting traffic from the phone without being able to ping it. I see in monitor the IPO is using port 1719 but the phone is using ports in the 49000 range... so my best guess is port 1719 is being blocked or misrouted.

If anyone has anything I can try via the IPO I will be happy to try. If anyone has run into this issue and has figured it out I would love some help here.

The truth is just an excuse for lack of imagination.

RE: 9608 VPN

What are your IP routes set to? That's where I would start.

- Qz

RE: 9608 VPN

(OP)
Have a default IP route:
IP 0.0.0.0
Subnet 0.0.0.0
Gateway 10.10.10.1 (Sonicwall internal IP)
Destination LAN2 (they had issues with LAN port so using WAN port)

Since both the phone's IP and the IPO IP are on the same subnet of 10.10.10.X I wouldn't think an IP route would even matter but this should work.

The truth is just an excuse for lack of imagination.

RE: 9608 VPN

The VPN phone should not be on the same network.
The IPO will not send the packages to the router as it thinks it is local.

Make the VPN range for the phone 10.10.11.0 then you should be good

Joe
FHandw, ACSS, ACIS

"Dew knot truss yore Spell Cheque"

RE: 9608 VPN

(OP)
@Westi thank you that makes perfect sense to me. I will ask them to change the subnet and see if that fixes the issue and report back.

The truth is just an excuse for lack of imagination.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close