• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

IP Phones, Inter-tel, ISA 2004

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Server Publishing >> IP Phones, Inter-tel, ISA 2004 Page: [1]
Login
Message << Older Topic   Newer Topic >>
IP Phones, Inter-tel, ISA 2004 - 15.Sep.2006 5:54:13 PM   
phippsinc

 

Posts: 19
Joined: 15.Sep.2006
Status: offline
I am trying to get off-network IP Phones working with our Inter-tel phone system.

According to the doc from Inter-tel this should be possible behind NAT/firewall by "opening" some select ports. I am almost there except for the fact that the remote IP phone hears no audio. The phone dials properly (however, there is no "ring tone" heard in the earpiece), the called phone rings and when I pick up the called phone, I can speak and the remote phone hears, but if I speak into the remote phone, the local phone has no audio.

I have created "server publishing" rules that map the public ip to the private ip of the Inter-tel system. The inter-tel doc has an example for a CISCO router as follows:

ip access-list extended s0in
   permit tcp any host 208.13.17.2 eq 5566
   permit udp any host 208.13.17.2 eq 5567
   permit udp any host 208.13.17.2 range 5004 5069
   deny ip any any

I have created 3 server publishing rules publishing the ports/ranges above.

Anyone have any ideas? As you might expect, getting to a truly technical person at Inter-tel is proving to be a monumental task!
Post #: 1
RE: IP Phones, Inter-tel, ISA 2004 - 17.Sep.2006 2:55:36 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Phil,

Create an Access Rule that allows the phone system outbound access to all protocols and sites.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to phippsinc)
Post #: 2
RE: IP Phones, Inter-tel, ISA 2004 - 21.Sep.2006 4:11:38 PM   
phippsinc

 

Posts: 19
Joined: 15.Sep.2006
Status: offline
Tom, thanks for the suggestion. I already have that rule in place.

(in reply to tshinder)
Post #: 3
RE: IP Phones, Inter-tel, ISA 2004 - 22.Sep.2006 10:09:45 PM   
phippsinc

 

Posts: 19
Joined: 15.Sep.2006
Status: offline
I'm getting the following error: Server publishing rule [IPRC 5567 at 0.19] that maps 192.168.0.19:5567 UDP to 216.150.xxx.xxx:5567 for protocol [IP Phone Traffic udp 5567] was unable to bind a socket for the server. The server publishing rule cannot be applied.
The failure is due to error: 0x80070034

(in reply to tshinder)
Post #: 4
RE: IP Phones, Inter-tel, ISA 2004 - 23.Sep.2006 5:00:48 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Try restarting the Firewall service.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to phippsinc)
Post #: 5
RE: IP Phones, Inter-tel, ISA 2004 - 2.Feb.2007 8:58:19 PM   
sethph

 

Posts: 6
Joined: 27.Aug.2006
Status: offline
Hello.  I am having a similar problem here.  I have the same Inter-Tel system in place and I am trying to configure an IP phone for access from anywhere.  I have created a server publishing rule that allows traffic from a specific address on the external network to the phone system's internal IP address.  The phone connects just fine to the system, however there is no audio.  When I monitor the logs for the connection I can see that the traffic coming through the ISA server goes from the External network to the Internal network using the specified protocol and the specified rule but the resulting message is Failed Connection Attempt.  I have opened all the necessary ports and I see nowhere where traffic is being denied, it simply just says failed connection.  I have been working on this for days with 3 different Inter-Tel technicians and we have not been able to resolve this.  There are no alerts indicating an improperly configured rule, nor is there anything in the event logs that indicate something is not right.  I am running ISA server 2004 Standard Edition with Service Pack 2 intsalled.  I have also allowed all traffic from the phone cpu to the external network as well.  Any advice given will be appreciated.   Thanks.

(in reply to tshinder)
Post #: 6
RE: IP Phones, Inter-tel, ISA 2004 - 3.Feb.2007 10:47:41 AM   
phippsinc

 

Posts: 19
Joined: 15.Sep.2006
Status: offline
Well, I have mine working perfectly now. I hope what I did to solve me will help you. Inter-tel and I beat our heads against the wall for many days. One day while poking around in ISA2004 I decided to change one setting - and that did it for me. The setting is the one that says "Reqests appear to come from the ISA server". This is located on the TO tab on the server publishing rule.

We are now up and running in good fashion.

...jeff

(in reply to phippsinc)
Post #: 7
RE: IP Phones, Inter-tel, ISA 2004 - 5.Feb.2007 11:43:25 AM   
sethph

 

Posts: 6
Joined: 27.Aug.2006
Status: offline
I did what you suggested and it works perfectly now!!!  Thank you soooooooo much!!!!!!

(in reply to phippsinc)
Post #: 8
RE: IP Phones, Inter-tel, ISA 2004 - 5.Feb.2007 4:29:05 PM   
phippsinc

 

Posts: 19
Joined: 15.Sep.2006
Status: offline
A nice bottle of red wine would be nice.

(in reply to phippsinc)
Post #: 9
RE: IP Phones, Inter-tel, ISA 2004 - 5.Feb.2007 6:48:02 PM   
sethph

 

Posts: 6
Joined: 27.Aug.2006
Status: offline
Incedentally, how did you get it to work from the inside network without having to reprogram the phone?  Split DNS, new IP route in the router, or another ISA rule?

(in reply to phippsinc)
Post #: 10
RE: IP Phones, Inter-tel, ISA 2004 - 12.Feb.2007 8:30:08 PM   
H4ppyGilmore

 

Posts: 199
Joined: 8.Apr.2006
Status: offline
You don't need any special rule to get the IP phone working from inside the network. Your IP phone will just loop back through ISA.  I believe the IP phone card in the PBX system doesn't care if the client address is public IP or private IP.  

(in reply to sethph)
Post #: 11
RE: IP Phones, Inter-tel, ISA 2004 - 20.Mar.2008 12:13:28 PM   
Matt-Helm

 

Posts: 25
Joined: 6.Aug.2004
From: At My Desk
Status: offline
are your UDP rules set to receive or receive/send?

I'm having the same problems...

(in reply to H4ppyGilmore)
Post #: 12
RE: IP Phones, Inter-tel, ISA 2004 - 20.Mar.2008 12:35:09 PM   
sethph

 

Posts: 6
Joined: 27.Aug.2006
Status: offline
Here is what I have as far as ports in the Rule.  Its probably a bit of overkill but I haven't had much time to go back and eliminate the unnecessary ports. 

Primary Connections: 
1000-2000 TCP Inbound
4000           TCP Inbound
5566           TCP Inbound
4000           TCP Receive Send
5004-5069 UDP Receive Send
5566           UDP Receive Send
5567           UDP Receive Send
5570           UDP Receive Send
6004-7039 UDP Receive Send
6604           UDP Receive Send

Secondary Connections:
4000           TCP Outbound
5566           TCP Outbound
4000           UDP Send Receive
5004-5069 UDP Send Receive
5566           UDP Send Receive
5567           UDP Send Receive
6004-7039 UDP Send Receive
6604           UDP Send Receive


Again, forgive the probably unneeded amount of open ports in this as I have not had the time to go back and eliminate them.  I had to open so many of them because the Inter-Tel technicians are not even aware of what traffic their own hardware uses. 

(in reply to Matt-Helm)
Post #: 13
RE: IP Phones, Inter-tel, ISA 2004 - 1.Apr.2008 11:23:37 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
It's an unfortunate problem when vendors do you understand their own products. Make you wonder how secure such products can be?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to sethph)
Post #: 14
RE: IP Phones, Inter-tel, ISA 2004 - 5.Oct.2009 8:10:30 AM   
RPDH

 

Posts: 1
Joined: 5.Oct.2009
Status: offline
Hi all,

I know this is an old call, but I thought I would add a note (in the hope if may help someone else). I have recently had the pleasure  of setting up VoIP handsets for a client, whos InterTel switch sits behind two firewalls (a perimiter firewall, with an ISA2004 firewall behind that). As such, there was double NAT tranverstal taking place. The rules I used to get it working were as follows:

On the perimter firewall:

Forward the following ports back to the ISA2004 external interface IP.
TCP: 5566 (Handset Connection)
UDP: 5567 (Handset Connection)
UDP: 6000-6999 (Voice Data)
TCP: 4000 (Not required for the phones to work - used to program the Intertel switch, and as such - source traffic restricted to a specific IP)
TCP: 8080 (Not required for the phones to work - used to program the Intertel switch, and as such - source traffic restricted to a specific IP)

On the ISA firewall:

Create the following publishing rule to publish the Intertel switch which is sitting behind ISA 2004.

Primary Connection:
TCP: 5565: Inbound
UDP: 5567: Receive / Send
UDP: 6000-6999: Receive / Send
TCP: 4000: Inbound (Once again - used for remote programming)
TCP: 8080: Inbound (And again - used for remote programming)

There was no need for any additional "allow all from the switch" outbound rule.As mention in a previous reply to this post, I to also have the option for "Traffic appears to come from the ISA2004" set.

One thing I will mention, is that for a long time we only had voice traffic one way (from the external number into the VoIP handset). This had nothing to do with the firewall rules. It turned out that the telecoms company who managed the switch, had not setup the handsets correctly. There is a setting on the InterTel switch that tells it whether a handset is locally attached to the LAN (Native), or remote (NAT-T).

Anyway, I hope this helps someone.

Cheers

Rob

(in reply to phippsinc)
Post #: 15
RE: IP Phones, Inter-tel, ISA 2004 - 5.Oct.2009 10:43:29 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Rob,

Thanks! Great info.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to RPDH)
Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Server Publishing >> IP Phones, Inter-tel, ISA 2004 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts