atcomsystems.ca/forum Forums TDM Business Telephone Systems Toshiba Telephones & Systems Toshiba IP phones through SonicWall

We have 4 locations linked via T-1 with Toshiba CTX systems interconnected. Other locations w/o Toshiba phone systems connect to our main location via DSL and/or T1 internet VPN tunnels to our SonicWall Pro2040. We recently added a MIPU card at our main location to allow IP phones to connect. We have an outside address mapped to the MIPU which is on the local subnet (192.168.1.14).

The problem:

IP phones work from all subnets connected via T1, but will not work from outside or through subnets which connect via VPN tunnels to our SonicWall Pro2040. The phones read "tcp error on IPU". Our Toshiba tech can see the ip phones connect, register a mac address, extension, etc, but fail to connect. The SonicWall is preventing connection. Connecting from the web yield the same error message and our SW vendor says the outside address is mapped to pass all ports to the inside MIPU address.

Our phone vendor is unfamiliar with SW. Can anyone offer a solution?

The MIPU has to have a Static Public IP address assigned, and be connected directly to the WAN. It will not work when placed behind a firewall. Your Toshiba vendor should know this.

We generally place a little 5 port switch where the service comes in and send one port to the MIPU and one port to the firewall.

Try that. I bet it starts working

That's called NAT translation... will not work. Have your IT guy set up a DMZ zone in the Sonic Wall, so that your MIPU can have a PUBLIC IP address... then everything will work.

Or, as Voyager said, you can pop a switch in between... it's a poor second-rate solution, since every switch or IP device adds latency to your connection, but it WILL work...

Isn't that redundant?

----

I agree with Voyager. A simple, hub or unmanaged switch will do the trick.

It is one hop, from the outside world, which is your slowest connection in the LAN/WAN anyways, so latency shouldn't be an issue. If you think it will be though, ping Google with the switch, then without it and compare.

I realize that I am a year late to the party but it happens. I have a cix100 with an mipu, and I want remote phones to work with it. I have already tried the DMZ and that gave a pathway but no speach, so I messed with the NAT settings but nothing worked. Next I went with a switch in between the modem and router with one feed straight to the ip card. Now I am trying to think how to program the card since it isn't through the router, what is the subnet and router addresses?

Since you replied to a very old thread, I could assume you have tried searching. I think the moderators here prefer that you start a new tread rather then bumping an old one.

You are correct in installing a hub between the 2 devices, but you need a 2nd Public IP address. Your router either has a static (which means your Internet provider gave you information which was entered into the router) or dynamic (which the router automatically pulled an IP address and info from the provider).

You need 2 static IP addresses from your internet provider, one for the router, and the second for the MIPU card. The IP and gateway info would be provided by your provider.

Try using Wireshark you will need to lay your hands on a hub. Put the Ip handset onto the hub with a pc running Wireshark and monitor the traffic. If you are unfamiliar with Wireshark you should still be able to send the logs to your system maintainer who can give you advise as to where the issue lies.

The issue lies in the fact that he needs to get the static IP, SubNet and Gateway and put that baby outside the firewall.