Issues calling over VPN

Hi,

I hope someone can help as this has had my head in knots.

We currently have a UC520 in our office with a number of phones. This site is all working correct until it comes to calling our remote office or vica-versa through DDI. I have been told we are able to do it but have been unable to find a solution.

What I have a is a sonicwall at each site and two different address ranges.

Office 192.168.10.x
remote 192.168.11.x

The sonicwall is being used to create the VPN as we had issues creating the VPN between the UC520 and Sonicwall. The phones in the remote office are able to get there DDI's and call there voicemail and ring out. The problem is when they try to call the office on there DDI or the office tries to call the remote site. The phones ring but when you answer at either end, the line is active but nothing can be heard. If you call for long enough you get put through to there voicemail with no issues.

I appreciate any help you can give.

Cheers

Rob

0
Your rating: None

Hi thanks for the tips

I've made a few changes to the system since I posted this I have made the office range of:

192.168.10.0 = Data
192.168.11.0 = Voice

I have then made our remote site use:

192.168.16.0 = Data
192.168.17.0 = voice

All the phones are working fine in the office and when I take one of the remote site phones down there (7921 great little phone) it connects to the voice wireless fine and works great.

Now I have got the VPN up (I have left the data network 192.168.10.0 and 192.168.16.0 running through the sonicwalls on each site.) I have connected the Cisco in the office (192.168.11.0) to the sonicwall (192.168.17.0)on our remote site. Now the cisco can ping everything located on the 192.168.17.0 including the phones. But anything that is on the remote site cannot ping anything in the office. All I also get on the phones aswell is that they are trying to connect to the CM. Is there a command I am missing to traffic from oneside of the VPN to the other?

Thanks

Rob

Issues calling over VPN

The other to responses are correct, I'm just being a little more explicit.

Rob your problems is that you don't have a VPN set up for the voice vlan. You Have a tunnel set up for 192.168.10.x to 192.168.11.x (the data vlan). Your signaling goes through just fine (this is why the call gets set up) but the RTP stream from the voice vlan (probably 10.1.1.1 if you used the defaults) has no way to find 192.168.11.X. If you set up a tunnel for that you will be a happy camper. To test this, go into the remote site and try to ping the voice vlan (10.1.1.X) and vice versa. When you get a response both directions your problem is solved.

P.S. Be aware if you have multiple remote sites using vpn’s (including IP Communicator) they must have routs to each other or you will experience the same issue. The Cisco ASA firewalls have special voice settings that will fix this issue.

I just setup almost this

I just setup almost this exact config yesterday.

First, I have SonicWall to Cisco UC520 IPSec VPN working fine. I just used the SonicWall VPN Wizard to create the IPSec on that side, then configured the Cisco to match it's settings. Try this link: http://www.vpn-technology.com/Interoperability/SonicWALL%20VPN%20with%20... I can post a sample config if you still have problems.

Secondly, what IP are you using to register your phones? I have mine connecting to the 10.1.1.1 address. To do this, of course, you have to setup the VPN to allow traffic between 192.168.10.0 AND 10.1.1.0 to pass to the remote network at 192.168.11.0.

Other than that, my install went without issue. As Hoover said, make sure there are no firewalls, access lists, or NAT that could be blocking or harming traffic between the sites.

Make sure that that phones

Make sure that that phones can route directly to each other. After the call is established a phone to phone RTP stream is established.

Cisco IP Communications Express Specialist
www.ketchumits.com

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.