I have an Inter-tel 5000 system in the office and a 8622 IP phone in my home. The 5000 is NATed through my Firewall with all ports open between the Firewall and my home. Ports 5004 to 5070 are being forwarded from my Linksys router to my phone. My phone gets an ip address, connects to the NATed address and displays my name and extension. When I make a call I can hear the person on the other end but they cannot hear me.

Any ideas would be greatly appreciated.

First and foremost, what version is the 5000?
What PM setup do you have? 5200, 5400, 5600?

We ran into this problem a few times during install and it seemed to always come down to a critical port or three being blocked.

At the router in between our 5000 and the Internet, we have the following ports open...

TCP 4000, 5566 and 5570.

UDP 2427, 4000, 5004, 5060, 5567 and 6004 thru 6247.

I'll see if I can find my notes as to what we encountered specifically and how we fixed it. I hope this helps in the interim.

It probably is yer home router. Make sure yer router is using the latest firmware. If you decide to upgrade the firmware, make sure you do a backup first as a firmware upgrade will probably nuke yer router DB.

What firewall are you using in yer office?

I think we should start with learning what version call processing is. It's crucial to eliminate the switch version and programming before flashing routers, specifically since a 5000 doesn't care about far-end NAT (from it's perspective). What if its 1.0?

Also, assuming the version does support NAT, the version used directly determines which UDP ports must be open.

The system was only installed a few months ago. Its a CS-5400. Program version is 2.0.8.288. System Version is 2.0.8.290 and Voice Processor version is 2.0.8.1. Company Firewal is Checkpoint NGX R61. In my Firewall log the only event I see is 5566 from my phone to the NAT address. I don't see anything else.

Two things come to mind.

1. Check the P600x connections (you'll have 2) and verify they BOTH have the correct IP information.
Could be an invalid gateway on one.

2. Do you have the NAT address programmed on BOTH P600x connections?

I have a P6001 and a P6101. The P6101 is the only one with an IP address. The NAT address was set at 255.255.255.255 so I changed it to the correct NAT address. I now see more traffic appearing in the FW log in both directions, ports 5566, 6292, 5006, 6138 and 5567 but still have no voice coming through from the external phone.

Thanks For the Help, Much Appreciated!!

Few things to check start with these.

Both 6001, and 6101 have fields for the NAT address and they poth need there own address.

Second, under the your ext you will find IP Settings. Located here "system\devices and feature code\endpoints\(ext)\IP Settings" You will see a option for NAT Address Type. By defualt it is set to AUTO, try changing it to NAT. They have had some problems with the Auto setting.

Trevor, does the phone work correctly when plugged into your office LAN?

At home, have you tried forwarding all ports to your phone with your Linksys router or bypassing the router altogether (using it's DMZ port if it has one or connecting your cable/dsl modem directly to the phone)?

Jake, you are right. I see that the default Audio Stream Receive Port range is UDP 6004 thru 6247 for 1.0 and UDP 6004 thru 7039 for 2.0.

Is that only the default port range for the Inter-Tel 5000 with the endpoint Audio Stream Receive Port range being 5004 thru 5068?

I'm running a 5200 - 2.0.8.288. For my system, Audio Stream Receive Port for P6001 is set to 6004 and Devices and Feature Codes\Endpoints\1107\IP Settings\Network Configuration is set for 5004. Does the P6001 setting override the endpoint extension setting, vice versa or is one for the endpoint and one for the 5000? Should the values for these settings match?

I would think that at the minimum, Trevor should have the following ports open on both firewalls:
Audio Stream Receive Port (endpoint default UDP 5004 - 5068, P6001 default UDP 6004 - 6603 and P6101 default UDP 6604 - 7039)
IP Terminal TCP Call Control Port (default TCP 5566)
IP Terminal General Purpose UDP Port (default UDP 5567)
Listening Port (default TCP 4000) for remote DB programming if desired

possibly also:
TCP Call Control Port (default TCP 5570)
MGCP Receive Port (default UDP 2427)

MRBr6, my installer also suggested using NAT or Native for NAT Address Type due to problems with the Auto setting. That said, we have been running OK with Auto but some weird problems are prompting me to change this to either NAT or Native as appropriate.

You mean P6001 has no IP address at all or no NAT address? Bottom line, both P6XXX's need a private IP, SM, GW and in your case, an NAT address programmed. I'd still be very surprised if the residential gateway router was to blame. You could try making a DMZ at the residential site to rule it out, I just think that it's a system setting to eliminate first.

oorrrrr, you could get a packet capture. That'll tell us EXACTLY what's happening on the wire.

I've run into this problem before, The problem was because Inter-Tel doesn't support passing through a NAT Firewall.

What i did was setup a DMZ on my firewall so it isn't passing through the NAT - works perfectly!

All newer code supports NAT at one or both ends.

Not true, depends on the code, and Trevors code is all good with NAT.

I do not think my home gateway is to blame; I plugged my phone directly into my cable modem and got a public address and got the same result. I checked with Time Warner Cable and the only ports they block is http(s) and ftp coming in. On my Home router I have ports 1000 to 8000 being forwarded to the phone.

My Firewall is completely open between the two NATed addresses assigned to the P6xx1s and my home network.

P6001 is the processor module and does not show as having an IP, GW & SM, only a NAT address. The processor module has a private IP address etc.

I have tried changing the NAT Address type from Auto to NAT and Native and I still get no audio.

If I call the voicemail system and try to leave a message it tries to record for 5 seconds and then tells me to speak up. If I continuously turn the mute on and off while leaving the message it records for longer but no sound is recorded so the phone is otherwise working ok.

I have not been able to test the phone in the office. My next move is to have one of the phones in the office that I know works shipped out to me.

If you have any other ideas please let me know. I appreciated all the help.

Thanks,

Trevor.

It probably isn't the gateway.

Go into programming and look at these three fields. your P600x numbers may be reversed from my example, but the system won't care.

IP Connections

• P6000: Should have a NAT IP programmed
• P6001: Should have a private IP, SM, GW & NAT IP programmed

IP Settings/Base Server IP Settings

• You should see a different private IP than the P600x with the IP from above steps and the same SM & GW

As long as the IP fields are all unique (and populated) the system should be good. After verifying all of this then adjust the NAT Type field if it doesn't pass the audio. Also, if the IP settings on the main Processor Module need to be changed you'll want to do a reset.

It sounds to me like it could be 2 possible issues.

1st it sounds like it may be a 5400 not a 5200. If that is the case you actually need to public IP addresses. The phone is most likely connecting to call control on the base processor of p6000 but trying to get audio via the 5400 on p6001. I personally love the 5000 but that is one thing that I really dislike.

Second have you checked to make sure that someone did not put the phone in a network group. If the phone is set to use peer-to-peer audio that could also be causing a one-way or no audio condition.

Great thread! I am having the same issues. I just got done checking my P6000 and 6001. They both now have a nat address in them. both of these users are going through cable modems. There is another employee that has a cable modem ahd her 8662 works fine.
We just got this system last week. And the company that installed it is still looking at some of the issues we are having. I still can't find the naswer to this problem. Things are heating up and I am trying to learn this system as quickly as possible. There has been no training yet. Any more hints on this issue?

Great thread! I am having the same issues. I just got done checking my P6000 and 6001. They both now have a nat address in them. both of these users are going through cable modems. There is another employee that has a cable modem ahd her 8662 works fine.
We just got this system last week. And the company that installed it is still looking at some of the issues we are having. I still can't find the naswer to this problem. Things are heating up and I am trying to learn this system as quickly as possible. There has been no training yet. Any more hints on this issue?

Quite often it is the far-end firewall that is producing the problem. Make sure those firewalls have the newest firmware available or replace them if they are no longer supported. Sometimes you can program the fone port into a DMZ on a consumer firewall that will fix yer issue. If one user is working fine, then the issue is not w/ the PBX, it is w/ hardware between the PBX and the fone.