RE: IP Softphone Not Working For VPN Clients

  • From: "Ray Dzek" <Ray.Dzek@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 29 Jun 2005 11:47:41 -0700

I found something else.. It looks like the call processor hands the session off 
to another IP address on the PBX.  It hands off to 10.1.101.12.  If I grep 
those logs I come up with this:

Why is that traffic being denied for unrestricted access?

[510174]XEROX   2005-06-29      18:32:35        TCP     10.1.20.209:28428
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Establis
h       0x0     Unrestricted Internal Access    H.323 Protocol  0       0
0       0       16      16      -       -       rdzek   -       184642  8309739
[510194]XEROX   2005-06-29      18:32:35        UDP     10.1.20.209:7476
10.1.101.12:1719        10.1.20.209     VPN Clients     Internal        Establis
h       0x0     Unrestricted Internal Access    Unidentified IP Traffic 0
0       0       0       -       -       -       -       -       -       184642
8309750
[510267]XEROX   2005-06-29      18:32:39        TCP     10.1.20.209:28428
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Terminat
e       0x80074e24      Unrestricted Internal Access    H.323 Protocol  98
98      47      47      4328    4312    -       -       rdzek   -       184642
8309739
[510280]XEROX   2005-06-29      18:32:40        TCP     10.1.20.209:25213
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Establis
h       0x0     Unrestricted Internal Access    H.323 Protocol  0       0
0       0       16      16      -       -       rdzek   -       184642  8309782
[510287]XEROX   2005-06-29      18:32:41        TCP     10.1.20.209:28428
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Denied
0xc0040017      -       H.323 Protocol  0       0       0       0       -
-       -       -       -       -       0       0
[510288]XEROX   2005-06-29      18:32:41        TCP     10.1.20.209:28428
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Denied
0xc0040017      -       H.323 Protocol  0       0       0       0       -
-       -       -       -       -       0       0
[510355]XEROX   2005-06-29      18:32:43        TCP     10.1.20.209:25213
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Terminat
e       0x80074e24      Unrestricted Internal Access    H.323 Protocol  98
98      47      47      3125    3109    -       -       rdzek   -       184642
8309782
[510384]XEROX   2005-06-29      18:32:45        TCP     10.1.20.209:25213
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Denied
0xc0040017      -       H.323 Protocol  0       0       0       0       -
-       -       -       -       -       0       0
[511260]XEROX   2005-06-29      18:33:14        TCP     10.1.20.209:27769
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Establis
h       0x0     Unrestricted Internal Access    H.323 Protocol  0       0
0       0       -       -       -       -       rdzek   -       184642  8310241
[511263]XEROX   2005-06-29      18:33:14        TCP     10.1.20.209:27769
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Terminat
e       0x80074e24      Unrestricted Internal Access    H.323 Protocol  98
98      47      47      156     156     -       -       rdzek   -       184642
8310241
[511277]XEROX   2005-06-29      18:33:15        TCP     10.1.20.209:27769
10.1.101.12:1720        10.1.20.209     VPN Clients     Internal        Denied
0xc0040017      -       H.323 Protocol  0       0       0       0       -
-       -       -       -       -       0       0
[513706]XEROX   2005-06-29      18:35:23        UDP     10.1.20.209:7476
10.1.101.12:1719        10.1.20.209     VPN Clients     Internal        Terminat
e       0x80074e20      Unrestricted Internal Access    Unidentified IP Traffic
2078    2078    3658    3658    168000  168000  -       -       -       -
184642  8309750 

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Wednesday, June 29, 2005 10:53 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: IP Softphone Not Working For VPN Clients

http://www.ISAserver.org

Can you include a snip from the ISA logs?
If ISA is blocking it, it'll show there

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------

________________________________________
From: Ray Dzek [mailto:Ray.Dzek@xxxxxxxxxxxxxxx]
Sent: Wednesday, June 29, 2005 10:28
To: [ISAserver.org Discussion List]
Subject: [isalist] IP Softphone Not Working For VPN Clients

http://www.ISAserver.org
http://www.ISAserver.org
Hi all,
 
Avaya PBX
ISA 2004
 
We have an Avaya PBX that supports VOIP.  We have a softphone client that we 
can run on our laptops.  We can connect to the call server just fine from 
inside the company.  But if you log in from outside with VPN, the connection 
fails.  VPN has been changed to full access to the internal network to see if 
it made any difference.  It does not.  The same laptop is being used inside and 
outside the company for testing.  The ISA server is set as the default 
gateway.  The windows XP firewall is turned off.  Any clues as to why this 
would be happening?  This application worked fine on ISA 2000.
 
 
Ray Dzek
Network Operations Supervisor
Specialized Bicycles
408-782-5420
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=alist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?typeúQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network 
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security 
Resource Site: http://www.windowsecurity.com/ Network Security Library: 
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=alist
Report abuse to listadmin@xxxxxxxxxxxxx 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=alist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?typeúQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network 
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security 
Resource Site: http://www.windowsecurity.com/ Network Security Library: 
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=alist
Report abuse to listadmin@xxxxxxxxxxxxx 

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network 
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security 
Resource Site: http://www.windowsecurity.com/ Network Security Library: 
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
ray.dzek@xxxxxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: