Welcome to ISAserver.org

VoIP Panasonic and ISA2006 Site-to-Site VPN Problem (hear only calling party)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> VoIP Panasonic and ISA2006 Site-to-Site VPN Problem (hear only calling party)

Page: [1]

Message

<< Older Topic Newer Topic >>

VoIP Panasonic and ISA2006 Site-to-Site VPN Problem (he... - 30.Jun.2008 3:27:39 AM

P.V.

Posts: 2
Joined: 12.Feb.2007
Status: offline

We have few offices with ISA2006 Server and site-to-site VPN between them.
Office 1 Lan: 10.18.147.x
Office 2 Lan: 192.168.0.x
Office 3 Lan: 192.168.1.x
In each office we also have Panasonic IP-PBX TDA Series with VoIP Gateway TDA0490 16-channel. Then we set public ip addresses for IP-GW16 - we hear both sides. But if we set internal ip addresses and VoIP goes through ISA Server VPN - we hear only calling party.

In ISA "Firewall Policy" added rule which allow traffic between Internal and "VPN-LANs" for these protocols:
TCP: 1720
UDP: 1719
TCP: 1712-1724
UDP: 5004-5035

If we view "Monitoring" "Logging" on ISA Server that receives call, then we see:
192.168.1.x xxx-PROXY - UDP - - 27.06.2008 7:43:09 5008 0 0 0 0xc0040029 FWX_E_PORT_ZERO_PACKET_DROPPED 0x0 0x0 Firewall - 27.06.2008 11:43:09 10.18.147.x 0 Unidentified IP Traffic Denied Connection 192.168.1.x Internal Sever - -

Source: Internal (192.168.0.x:5012)
Destination: xxx-VO (10.18.147.x)
Protocol: Unidentified IP Traffic (UDP:0)

P.S. Sorry for bad english.

Post #: 1

Featured Links*

RE: VoIP Panasonic and ISA2006 Site-to-Site VPN Problem... - 30.Jun.2008 9:19:01 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Disable the H.323 filter on all the firewalls.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to P.V.)

Post #: 2

RE: VoIP Panasonic and ISA2006 Site-to-Site VPN Problem... - 2.Jul.2008 5:31:01 AM

P.V.

Posts: 2
Joined: 12.Feb.2007
Status: offline

A lot of thanks. After that communication works perfect at both sides.
P.S. We tried to configure H.323 filter, but not disable.

(in reply to tshinder)

Post #: 3

RE: VoIP Panasonic and ISA2006 Site-to-Site VPN Problem... - 2.Jul.2008 10:08:38 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Great!

Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to P.V.)

Post #: 4