atcomsystems.ca/forum Forums TDM Business Telephone Systems NEC Telephones & Systems Aspire Hell! - no remote connection

Ok, this has become my last resort for help...

Our provider has setup an Aspire system here at the main office for 30 phone inhouse, and we also have 5 IP phones and one softphone.

The IP phones and softphones all work ok internally over the LAN.

However, outside the main office, nothing connects.

I've checkd firewall settings on our PFsense firewalls (local and remote) and our VPN IPsec, PPTP, and OpenVPN. Everything works ok, we can access the network, access files and folders, ping any servers. EVEN ping the NTCPU of the aspire!

But for some reason neither the IP phones or the softphone can connect.

Via process of elimination, I'm pretty sure it's the aspire thats the issue. Is there ANY ports or settings on the aspire that need to be configured for this to work?

I've asked our provider but they are clueless, they keep hinting to buy their router to make it work. And I've yet to find a user manual on the NTCPU, does one even exist? I've also emailed NEC directly but they responded to contact my provider. Can anyone help!?!

I've read though thse posts on the forum:
https://www.sundance-communications.com/cgi-bin/ultimatebb.cgi?/ubb/get_topic/f/14/t/000845.html
https://www.sundance-communications.com/cgi-bin/ultimatebb.cgi?/ubb/get_topic/f/14/t/002189.html
https://www.sundance-communications.com/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=14;t=001439;p=0
But still no solution....

If I can't resolve these issues, we may have to return these phones.

Please, please, someone have answers...?

Thanks!

The VOIP/media gateway card(s) needs to be on the same network scheme as everything else(it should be). Otherwise it could be a port blocking issue either on your side or the remote side.

*DtermIP (Receive Port on Aspire PBX Side – System IP Phone)*
IP Phone DRS (Registration)/DRS Mate Port UDP 3456 84-03-02
IP Phone Signalling/PROTIMS Self Port UDP 3458 84-03-01
IP Phone Display Updates UDP 3459 Fixed
IP Phone H.245 TCP 10100-10131
(enter the first port – this is
the first port in a range of
32 ports used)
84-06-03
IP Phone Ready/Answer Port UDP 4000 84-06-11
RTP UDP 10020-10082
(even ports)
84-06-01
RTCP UDP 10021-10083
(odd ports)
84-06-02
-----------------------------------------------------------------------
*DtermIP (Receive Port at IP Phone Side)*
DRS Self Port UDP 3455 Defined in IP Phone Programming
IP Phone Signalling/PROTIMS Self Port UDP 3458 Defined in IP Phone Programming
IP Phone Display Updates UDP 3459 Fixed
RTP Self Port UDP 3462 Defined in IP Phone Programming
RTCP UDP 3463 Fixed
IP Phone Ready/Answer Port UDP 4000 84-06-11
H.245 Port “any port” Uses any available port from 1024+.
Set in IP phone program to 1024 for a
Constant port number

Hope this helps somewhat. From my many years of experience 99.9% of the time it's the network. Telling me it works internally and not externally is a HUGE red flag that something is screwy with your VPN either on remote or local. You should get wireshark (free) if these ports don't help you to see what is not being passed.

PS, ALSO check the setting on the NTCPU to see if you have the default gateway set to the router address.

WOW! ALL those ports have to be open!?! That's a lot...woa...

I'll check through all that to make sure it's all kosher.

Thanks!

Well, it didn't work.

Mind you the VPN works ok with EVERYTHING else, jut NOT with the Aspire, so I dunno why that would make you think it was an issue with the VPN...?

Also note, I can access all local websites via the IPsec tunnel, using the local IP (192), but can't access the Aspire admin website via the local IP. Isn't that even a little odd...? That's another reason why I think it's an issue with the Aspire...

Like I said, check the defualt gateway settings on the NTCPU.

I beleive this is the section you're speaking of:
10-12 : NTCPU Network Setup
correct?

The gateway should be my internal IP of the firewall, correct?

...just to confirm...

If yes, to both, then it's correct.

...is there anywhere to set DNS info? Perhaps it may be that too?

06 - NAPT Router
07 - NAPT Router IP Address
08 - ICMP REDIRECT

And do these need to be set to something...?
Not sure what they are...

No, you don't need all that. The gateway should be set to the same gateway everything else is on your network. Well, one thing you could do is DMZ the Aspire and see if it works or put it in front of your firewall.

"Mind you the VPN works ok with EVERYTHING else, jut NOT with the Aspire, so I dunno why that would make you think it was an issue with the VPN...?"

Because it works internally and not externally pointing directly to an IP/UDP connectivity issue. Troubleshooting 101.