BR500 and Panasoniv Voip

[jmcdpugall]

Hi, I wonder if anyone out there has seen similiar issues.

I have 2 VPN 500 routers with an Insight VPN tunnel between them. 

One side has the IP address of 10.0.0.254 and the other is 10.0.8.254. Most traffic routes across in both directions without issues.   I have SQL and MS servers being access for either end successfully. All ping traffic replys successfully.

I have a Panasonic KX-NT551 IP phones on one side with IP addresses of 10.0.8.98  This registers to a Panasonic KX-TDE PBX on the other side of the VPN whose IP address is 10.0.0.45 

The PBX however sees the phone with the IP address of 10.0.0.254 which is the local address of the router.

The registration process is automatic. Is there a reason why traffic passing across the vpn appears as if has come from the router, rather than the original device?

Any help or suggestions  whould be gratefully recieved.

[DaneA]

@jmcdpugall,

Welcome to the community! 🙂 

The registration process is automatic. Is there a reason why traffic passing across the vpn appears as if has come from the router, rather than the original device? 

It appears that both sites: 10.0.0.254 and 10.0.8.254, appears (or somewhat detects) to be a one whole subnet.  For me, site A and site B should have a different LAN IP addresses.  For example, Site A has a LAN IP address of 192.168.1.0 while Site B has a LAN IP address of 172.16.30.0.  

Regards,

DaneA

NETGEAR Community Team

[jmcdpugall]

Hi Dane,

Thanks for the response. 

The Networks subnets have a subnet mask of 255.255.255.0 should be identifed as seperate subnets.  All other traffic passes between sites with out issue.  I can access resources on both sides of the VPN tunnel without issue.  The only problem I have is that the PABX is seeing the source IP of the phone as the local router IP.

[c3po]

Could you please try to disable SIP ALG to see if it makes difference? Thanks.

Web GUI -> ADVANCED -> Firewall -> Basic Setup -> Check "Disable SIP ALG" on bottom -> Apply

[jmcdpugall]

Hi, sorry for the delay.  SIP ALG is disabled on both routers.

All other services seem fine, just the Panasonic phones playing up.

Help!!!

[c3po]

In that case, would you please try to enable SIP ALG on one or both sites, you have a few combination to try though: Remote 10.0.8.0 BR500; PBX 10.0.0.0 BR500; or Both.

https://docs.skyswitch.com/en/articles/578-what-is-sip-alg-and-should-it-be-on-or-off

Or if possible, manually register 10.0.8.98 with PBX 10.0.0.45 with local IPs.

VPN

SIP ALG

NAT

PBX

All can affect how SIP is being processed, sorry that you may need to try and error to see which setting works since we don't have same PBX/handset to try in our lab.