|
Joined: Sep 2004
Posts: 395
Member
|
Member
Joined: Sep 2004
Posts: 395 |
I have a recently installed iDCS 100 R2 that we're having trouble getting to work through the customers Sonicwall soho 3 firewall. If you bring the phone into their office and plug it in, works fine. We have external IP's set for both the MCP and MGI cards and private w/public turned on. The Network guy says that he has 1:1 nat running but all we can get is the phone to connect and dial but no talk path either way. Samsung says that we need to make sure that 1024-4999 TCP ports are open on the system side but my customer is telling me that he is using some of those ports for something else, plus the samsung manual says that those ports are for H.323 gateway. Any ideas?
|
|
|
Visit Atcom to get started with your new business VoIP phone system ASAP
Turn up is quick, painless, and can often be done same day.
Let us show you how to do VoIP right, resulting in crystal clear call quality and easy-to-use features that make everyone happy!
Proudly serving Canada from coast to coast.
|
|
|
Joined: Oct 2004
Posts: 195
Member
|
Member
Joined: Oct 2004
Posts: 195 |
You need to add a less 2 custom services in the SonicWall .First redirect port 6000 TCP and UDP to the SMCP1 private address ,and second ports 30000 to 30031 UDP to SMGI3 private address.Both services must applied to trust and untrust zones (LAN and WAN zones). MMC xxx make sure IP Type is Public w/Firewall.
|
|
|
|
Joined: Jan 2006
Posts: 179
Member
|
Member
Joined: Jan 2006
Posts: 179 |
Um... something isnt what it seems here. If he truely has 1:1 NAT setup then all ports are open to the internal address.
Since you can get through to the MCP, as evidenced by the phone booting up, then I owuld look at your router programming for the MGI IP address.
Dont worry about ports 1024-4999. I would do that last. Besides, samsung is telling you to forward those ports to the MCP, no the MGI, so I would say they are completely unrelated. Most of the time, when everything seems to be correct, the problem is in MMC xxx as mathrap said.
Mitel, Samsung, CTP+ and A+ Certified.
|
|
|
|
Joined: Dec 2005
Posts: 170
Member
|
Member
Joined: Dec 2005
Posts: 170 |
just a question, are the ip addresses static and if so then i would ping the mgi ip address from the outside world to see if you can see it. if not the router programming is the way to go.
|
|
|
|
Joined: Sep 2004
Posts: 395
Member
|
Member
Joined: Sep 2004
Posts: 395 |
The network guy tells me that the sonicwall is set up to not allow pinging so I can't test it that way. I'm with you bacherjr, if he really has 1:1 nat set up the sonicwall shouldn't care what ports the samsung wants to use. One more question, since we are trying to use 1:1 nat, with the sonicwall forwarding a public address to a private address, should I set up mmc's 830 and 831 with the public address the same as the private address, and public w/private turned on or something else?
|
|
|
|
Joined: Oct 2004
Posts: 195
Member
|
Member
Joined: Oct 2004
Posts: 195 |
If you need local and external ITP’s,yes Private w Public must turned on for both 830 and 831.Also you need Public IP address for 830 and 831(the NAT 1:1 public ip addresses which is mapped to MCP and MGI static privates ip addresses ).
|
|
|
|
Joined: Sep 2004
Posts: 395
Member
|
Member
Joined: Sep 2004
Posts: 395 |
Thanks guys, I'll do some checking on the stuff you suggested to see if we can figure this out.
|
|
|
|
Joined: Oct 2004
Posts: 195
Member
|
Member
Joined: Oct 2004
Posts: 195 |
Good work.Just post the results fot all this guys which try to help.Keep going men.
|
|
|
|
Joined: Oct 2004
Posts: 195
Member
|
Member
Joined: Oct 2004
Posts: 195 |
Good work.Just post the results fot all this guys which try to help.Keep going men.
|
|
|
|
Joined: Sep 2004
Posts: 395
Member
|
Member
Joined: Sep 2004
Posts: 395 |
Well, after much trying we still couldn't get the ip phone to work through the firewall. The best we could get was one way audio from the system to the ip phone. Finally decided to move the system into the DMZ and it worked no problem. Guess I'm going to have to come up to speed on firewalls. Thanks for all the help anyways guys!
|
|
|
Forums84
Topics94,422
Posts639,464
Members49,818
|
Most Online5,661 May 23rd, 2018
|
|
|
|