atcomsystems.ca/forum Forums TDM Business Telephone Systems Samsung Telephones & Systems Loss of audio when changing to private with public

7100 with 8 MGI Channels, 4 Analogue trunks. 8 iDCS phones and one 3105 at the main site and 4 SMTi5220 at a remote office.

We've been working through a VPN tunnel and it has been flawless. However, they are noticing problems with the data connection on the tunnel so they would like to move the phones off the VPN tunnel. First step, change the ip address to private with public.

As soon as I do this we loose audio on all the phones at the remote office.

Reconfigure the phone to access the system via the public address and have the same problem.

We have the 30000~30015, 40000~40015, and the 45000~45015 all forwarding to the OS ip address.

Any ideas what's going on here?

All help, greatly appreciated.

When you say you are losing audio, are you just losing the speech path or signalling as well. Is time and date good on the IP sets? What I normally do is put the 7100 on the DMZ and make sure all works and then back through all the port stuff if it does work on the DMZ using a port checker tool to verify all ports that should be open are. Sorry clear as mud, I hope you understand what I'm saying.
Good Luck,

Try it with MPS off, as you may be missing some ports there.

We tend to put the full range in unless its a 2 cab 7030.
30000-30031
40000-40127

Mmc838

Put the ip range of the remote site in (192.168.1.255)

That'll fix the issue until you reconfigure the phones to use the public ip

Ok,

Thanks!!!

Adding the Ip addresses to 838 did the trick for local phones.

For remote phones, the IT guys tell me the forwarding is in place but I am trying to connect a phone from here at my office first and though I can get the time and extension up and dial the other stations, again, I have no audio.

Ideas?

-W

Ok,

Tried scanning the ports using nmap and they all seem to be open.

Still have no audio.

-Will

When you look in programming, what audio ports on listed in the extension info? Does it show 9000?

For IP phones connecting from not inside a VPN you need to have ports 6100 6000 9000 9001 forwarded to the processor IP. I recommend doing both UDP/TCP that's my opinion. Make sure that you have the public IP assigned in Public address 1 section of lan parameters.

All the ports are set to forward to the system and show open with an nmap test.
In this instance, the internal ip addresses if the main system is 192.168.1.xxx and the remote site, currently connected through VPN tunnel is 192.168.3.xxx
Should both ranges be in 838?

public IP address showing correctly in 830 and mgi configuration (it's a 7100 so it propagates)

Are those IP phones white list enabled? If they are, did you add the public ip address of the remote site in mmc875?