atcomsystems.ca/forum
Posted By: samlee561 NEC SL1100 over VPN - 04/11/18 08:22 PM
I had this phone system passed on to me as I took a new job, and I am quickly learning a lot about it however I am struggling to figure out an issue.

We have a two Cisco RV320 creating a VPN tunnels between offices, and trying to configure the remote phones to hit the local SIP server.

I can ping back and forth across the network

The Local Cisco Router 10.1.10.1
The Remote Cisco Router is 192.168.3.1

The local SIP server IP address is 10.1.10.112

The remote phone is setup as the following

IP 192.168.3.155
Subnet 255.255.255.0
Gateway 192.168.3.1

SIP IP 10.1.10.112

It is getting SIP server not found error

Any IDEAS?

Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/11/18 08:39 PM
A lot. Is this an existing VOIP network or are you just setting it up?
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/11/18 08:53 PM
It is a new VPN addition to existing phone system

Posted By: samlee561 Re: NEC SL1100 over VPN - 04/12/18 01:43 AM
Are there additional configuration that needs to be made in order for the traffic to travel over the vpn?
Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/12/18 12:08 PM
Depends on what you have programmed in network setting on the system. Why a VPN vs just doing NAT?
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/12/18 01:02 PM
We need the VPN for other purposes, but this decision was put in play before I was actually hired.

Is there no advantage to sending the traffic across the VPN?
Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/12/18 01:20 PM
Depends on what you need the VPN for. VPN's in my experience simply add latency and steal bandwidth. But regardless you need to look at your network config on your phone system. Is the VPN actually working? Is the phone programmed correctly? Have you tested the phone on the local network to make sure it's functioning?
Posted By: usbuild Re: NEC SL1100 over VPN - 04/12/18 01:43 PM
Did you have a remote phone working before you added vpn? If so how two sites were connected before?
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/12/18 04:40 PM
Yes the VPN is working I can ping from either side and have even transferred a file across.

Phone were connected with a Public IP address as the SIP Server previously, we are trying to use the VPN for security purposes.
Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/12/18 04:46 PM
Well first question did you turn off NAT on the phones?
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/13/18 12:34 PM
I'm very green when it comes to this phone system, no I did not turn it off, it is currently set to Dynamic
Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/13/18 01:31 PM
Nat transversal needs to be off.
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/18/18 12:55 PM
I thought we had this issue resolved. I turned off NAT traversal.
Extension to extension calls work fine
We can dial and receive calls, but the audio is not being passed across the VPN

Setup
Local Router 10.1.10.x
Site to Site VPN via Cisco RV320
Remote location 192.168.3.x

Phones in remote site
IP address of 10.1.10.x
Gateway is IP address of Router at local site
Nat Traversal Disabled
Sip Server is Local SIP server 10.1.10.x
RTP & Self SIP ports are set to even numbers out of range or conflict

Any idea what I am missing?

Posted By: dans Re: NEC SL1100 over VPN - 04/18/18 01:17 PM
I see no mention of the IP address for the DSP resource, you will not have audio if one has not been configured.
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/18/18 01:36 PM
Does this need to be set on the phone? Extensions were working fine before we put them behind the VPN.
Posted By: dans Re: NEC SL1100 over VPN - 04/18/18 03:57 PM
If it was working before the VPN means the DSP resource was setup, see 84-26-01 for IP address

Have you contacted Cisco about this issue?
Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/18/18 05:10 PM
Look in 10-58 to make sure your local network (VPN etc) is defined. It's probably trying to send the packets via NAT like it's been programmed to do.

192.168.0.0 255.255.0.0 etc if you are on a 172.x.x.x or 10,x,x,x these need to be properly defined.
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/18/18 08:21 PM


Originally Posted by Coral Tech
Look in 10-58 to make sure your local network (VPN etc) is defined. It's probably trying to send the packets via NAT like it's been programmed to do.

192.168.0.0 255.255.0.0 etc if you are on a 172.x.x.x or 10,x,x,x these need to be properly defined.

There is nothing defined in 10-58

Just to be clear before I make this change to the PBX programming

in 10-58 I should have


IP address #1
10.1.10.0
255.255.255.0

IP Address #2
192.168.3.0
255.255.255.0


10.1.10.x is my PBX
192.168.3.x is my remote network


?
Posted By: Coral Tech Re: NEC SL1100 over VPN - 04/18/18 09:50 PM
This basic IP routing 101. The only 3 you need that should cover everything is:

10.0.0.0 sub 255.0.0.0
172.16.0.0 sub 255.240.0.0
192.168.0.0 sub 255.255.0.0

Posted By: usbuild Re: NEC SL1100 over VPN - 04/18/18 11:42 PM
I think you should read the manual first before you get too far or better off hire Certified Installer to do it for you.
If you still feel like messing with it watch this video

Posted By: samlee561 Re: NEC SL1100 over VPN - 04/19/18 12:54 PM
Thanks for all your help guys, I have a certified Tech, but he doesn't know why this isn't working....

There is a lot of pressure from the top to figure this one out, which is why I am reaching out on here.

I have updated 10-58 this morning, and everything is still working locally. There was nothing in the routing there before hand.

Have to wait a few hours for the employees to get in at the remote location, I will be sure to update this thread when I know if it worked or not.

ubuild - thanks for the video
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/19/18 04:42 PM
Thank you Coral Tech - That was the issue!!!!!

I added 10.1.10.0 & 192.168.3.0 to 10-58 and it work!!!!
Posted By: usbuild Re: NEC SL1100 over VPN - 04/19/18 04:48 PM
Btw, have you disabled sip alg
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/20/18 11:43 PM
yes sip Aalg was disabled
Posted By: samlee561 Re: NEC SL1100 over VPN - 04/21/18 10:59 PM
Coral Tech check your PMs, I really want to talk to you.
© Sundance Phone System Forums - VOIP & Cloud Phone Help