Greetings,
We have a customer moving to an IP Office from a N* with a Citel box. The Master (local) Citel box was set up with an external IP address and port forwarding to a local IP address that was the Citel Gateway. The remote had it's own lan address and passed traffic to the external ip address forwarded to the gateway.
We are currently testing the IP office to the 9620 we have server ticked and a local address of 192.168.1.150 on lan 2 subnet 255.255.255.0 and gateway 192.168.1.254 in the ip route.
on the 9620 we have the external address listed as the call server and gateway sometimes the set comes up with the extn and password prompt then goes to discover and the external address stays there awhile then reboots. Please forgive my ignorance first time setting this up any and all help would be appreciated.
TIA,
John

Sounds like a routing issue...is the phone on the same subnet as the IPO?

Here's the set up the IPO is 192.168.1.150 there is an external ip address 12.xxx.xxx.xxx that has ports 5060 5005 1719 1720 and 49152-53246 forwarded to 192.168.1.150 according to the it guy. the far end has a home Samsung router with DHCP and the 9620L. The firewall at the main company office is a Sonic Wall TZ210. In IPO we have H323 Gatekeeper ticked and Remote User and in User remote worker ticked. The 9620L has time and date the extension number and audibly rings if called, it does not have dial tone or speech path. Past experience leads me to believe this is a UDP port issue just not sure what I'm missing?
TIA,
John

Ok, so you are using the remote worker functionality. Personally, I would go for the VPN option as it locks the network down better, but i digress.

The only thing i can think of, is make sure that SIP ALG is turned off on the users home router (if that is even a setting). And hence my reasoning for not liking the port forwarding options. too many variables. now you have to worry about the Office side router, as well as the user side router....And some of them just dont work.

Again, i would use VPN instead.

Back to the drawing board suggested VPN. The IT guy said he can't do it because he needs an endpoint IP address and the far end goes from the cable router to the firewall giving the firewall an internal Lan address. I suggested using one of the spare ports on the cable router for the phone so it would be the external IP address he's looking for and since the phone is a client looking back to the Ip address of the main site I'm not 100 percent sure what the issue is.
Any thoughts?
Thanks,
John

All you need to do is set up an IPSEC VPN from the office, and configure the client on the phone. When the phone gets plugged into an open internet connection, it creates the VPN from the phone to the VPN device.

There is configuration information on the Knowledgebase.