Problems with phones Avaya IP & PIX 515

I have a setup where an Avaya MedPro/CLAN is connected to the DMZ with Avaya IP phones even inside with H323/225/323RAS s active correction and an access rule of DMZ within the LAN IP address, phones don't register. What IP is enabled MedPro/clan started to work inside the phones.

The PIX OS, I have is 6.3 (1), what is happening here? Any ideas would be much appreciated.

Thank you.

Disable any correction h.323, it does not work with the doorman avaya 'clan '.

no correction h225 1720 h323 Protocol

no correction protocol h323 ras 1718-1719

Then make sure

your static (inside the dmz) is configured correctly and the ACL have 1719/1720 tcp open

In addition, open range of udp ports that correspond to your avaya "area network server configuration.

Tags: Cisco Security

Similar Questions

  • problems with, phone, 6, Bluetooth kit, Nissan, after update, for, Rios, 1.0.2

    After the update to ios 10.0.2 - trying to use bluetooth to call my vehicle, it says: "this article is not in your phone book." How can I solve this problem?

    Greetings, joybelino1!

    Thank you for joining the communities Support from Apple! I can't wait to see that you are having problems with your Bluetooth in your car! The good news is that Apple has a great article that will help you with measures to try to resolve the problem. Read this article to gethelp to connect your iPhone, iPad, or iPod touch with your car radio. Even though he talks about problems with the connection, it also has the steps for other questions you may have once connected.

    If you use Bluetooth

    1. Consult the user manual of your car stereo to get the procedure to a Bluetooth device.
    2. On your iOS device, drag up to open Control Center, then press ontwice to turn on Bluetooth and turn it back on.
    3. Restart your iOS device.
    4. On your iOS device, Cancel the twinning of your car radio. On the screen of your car désapparier your iOS device and any other device. Restart your car and your iOS device, then pair and connect again.
    5. Update your iOS device.
    6. Install the updates to the firmware of your car radio.
    7. If you still not connect, contact Apple technical support.

    Have a great day!

  • problems with phone with my computer

    My Samsung phone will not be displayed on my computer as a drive of removablle!

    Contact Samsung and/or your wireless carrier to see what drivers and/or software you install on your PC for this to happen, or if it is even possible at all.  Not all phones are compatible with the USB/PC connections.

  • Problems with VPN between Cisco PIX 6.3.3 and VPN 3000 Concentrator

    Hi guys,.

    I hope this is the right place and that someone has encountered this before I don't have much hair left to offset - I'm trying to set up a tunnel between our Pix 6.3.3 performer and a customer using a VPN3000.

    The customer wants us to be able to do checkups on a device without allowing anything to of our range of addresses network side private, just one public IP address.  We currently run a VPN to our recovery site to allow off-site replication, but the ACL on the other end of this VPN * does * allow the configuration that we had for our private network side, so traffic was not useful at that.  Here is a screenshot of what I tried:

    ethernet0 nameif outside security0
    nameif ethernet1 inside the security100
    nameif ethernet2 dmz1 security50

    name 172.16.1.48 Cust_DVR1

    permit 192.168.1.0 ip access list inside_outbound_nat0_acl 255.255.255.0 255.255.255.255 Cust_DVR1

    permit 192.168.1.0 ip access list outside_cryptomap_30 255.255.255.0 255.255.255.255 Cust_DVR1

    IP outside X.Y.Z.227 255.255.255.224
    IP address inside 192.168.1.1 255.255.255.0

    location of PDM Cust_DVR1 255.255.255.255 outside

    Global 1 X.Y.Z.230 (outside)
    Global (dmz1) 1 interface
    NAT (inside) 0-list of access inside_outbound_nat0_acl
    NAT (inside) 1 192.168.1.0 255.255.255.0 0 0

    Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac

    outside_map 30 ipsec-isakmp crypto map

    outside_map 30 peer A.B.C.D crypto card game<--- (public="" ip="" of="" customer="">

    card crypto outside_map 30 match address centura_map_30

    card crypto outside_map 30 the transform-set ESP-3DES-MD5 value

    outside_map interface card crypto outside

    ISAKMP key * A.B.C.D netmask 255.255.255.255 No.-xauth No. config-mode

    part of pre authentication ISAKMP policy 30

    ISAKMP policy 30 3des encryption

    ISAKMP policy 30 md5 hash

    30 2 ISAKMP policy group

    ISAKMP duration strategy of life 30 86400

    My hope is that anything on the 192.168.1.0/24 would be able to get out of the external interface as our only our public IP addresses (i.e. X.Y.Z.230), but the traffic they see on the other end is coming from the 192.168.1.0 network.  I tried to remove the line inside_outbound_nat0_acl think she would use then the world but still do not have a bit of luck and the only difference I see on Kiwi Syslogd is that the src_proxy changes to 0.0.0.0 where is shows the IP address of my private side (for the purposes of the config above let's call it 192.168.1.135).

    THANKS MUCH FOR ANY HELP!

    -Mario

    Hello

    For example, you can NAT your internal via the tunnel network traffic when you go to this customer.

    In this way, they will see your unique internal network as an IP address.

    Let's say, rather than them seeing your internal 192.168.1.0/24, eelle will see your traffic like X.Y.Z.227

    Is this what you need?

    Federico.

  • Problems with phone Palm Treo 680

    I have a Palm Treo 680.

    I receive and make calls, it connects, but the audio does not work: I can't hear or speak.

    When I plug in the headphones, I am able to hear, but not speak.

    It seems that something related to Audio, since when I tried to play a piece with Pocket Tunes, I could listen for a minute, make a short call (and speak!) and then it worked again.

    Tried everything up to the hard reset.

    Thanks for help.

    Please read this thread in the map Audio, video and Photo:

    http://forums.Palm.com/Palm/board/message?board.ID=video_and_photo&thread.ID=6135&jump=true

    WyreNut

  • PIX-515E-R-BUN MEM upgrade with PIX-515-MEM-32

    Hi all

    is it maybe possible to upgrade the PIX 515E - r

    with this release of PIX-515-MEM-32, without having to pay

    for all PIX-525-SW-R-UR = update license.

    Concerning

    Richard

    The PIX will recognize this new memory but the configuration is not supported. The upgrade of UR's memory, but also an update of license for several interfaces, failover, etc... Unless you want to add these features to your PIX, it is not necessary to upgrade memory. 32 MB is more than enough for a PIX 515R.

    Does that help?

    Scott

  • Compatibility phone Avaya with Cisco Unified Communications Platform

    Hello

    We are currently a user all-Cisco on the side of routing, switching and network security, however, we are a user all Avaya on the phone, IP phone and voice communications.  I laugh with all the problems we had with Avaya and would migrate to Cisco.  My department head wants to know is it possible to have a Cisco platform manage all unified communications and voice mail on the back end, but continue to use the Avaya phones currently in place in each office, until we can replace in the coming years through attrition?  It is essentially a measure of cost that is the main factor in management are unwilling to make any changes whatsoever because of investment is already in the existing system.

    None of the Avaya endpoints are officially supported on Cisco CUCM, but if they SIP phones, they can be defined as 3rd-party SIP endpoints.  That being said you get far more features and satisfaction with phones Cisco CUCM, otherwise ask for another set of questions, and at that time there a seller will point to the other.

  • PDM with PIX 515 does not work

    I just upgraded our PIX 515 of 6.1 to 6.2. I also added support FOR and loaded the version 2.1 of the PDM. I am trying to browse the MDP, but I can't. What Miss me?

    Hello

    have you added the following lines to your config file and have you used HTTPS to access the pix (http is not taken in charge, only https)?

    Enable http server

    http A.B.C.D 255.255.255.255 inside

    A.B.C.D is the ip address of the host from which you are trying to reach the pix with the pdm.

    If you're still having problems after the addition of these two lines, you might have a look at this page:

    http://www.Cisco.com/warp/customer/110/pdm_http404.shtml

    Kind regards

    Tom

  • PIX 515 DMZ problem

    Hello

    We have some difficulty in moving traffic in and out of a Cisco PIx 515 firewall. We use it with two demilitarized. The first DMZ has a mail in her Server (before end mail server) that communicates with a different mail server (back end mail server) inside, it is called DMZ1. The second DMZ (DMZ2) has some users who are expected to pass through the firewall to the outside and use the internet and must have access to the e-mail DMZ1 server. Inside users must be able to use the Internet and can access DMZ1. Here's the important part of our Setup.

    What we were doing, we can correctly access from inside, inside users to access internet permit to join the DMZ1 e-mail server and the mail in DMZ1 server the inside. Our problem is that we are unable to browse the internet on the DMZ1 Messaging server if we put DMZ1 as gateway ip address on that server and the address ip of the DNS of the ISP is propely located on the same machine. Also, we could not do DMZ2 users browse the internet, although we allowed the www Protocol in the fromOut access list. One last question, can we do the DMZ2 a DHCP server on the interface on the PIX and do distribute ip addresses to users on that subnet only? Thanks for any help in advance.

    6.3 (3) version PIX

    interface ethernet0 car

    Auto interface ethernet1

    Auto interface ethernet2

    Auto ethernet3 interface

    !

    ethernet0 nameif outside security0

    nameif ethernet1 inside the security100

    nameif ethernet2 dmz1 security50

    nameif ethernet3 dmz2 security40

    !

    fixup protocol dns-length maximum 512

    fixup protocol ftp 21

    fixup protocol h323 h225 1720

    fixup protocol h323 ras 1718-1719

    fixup protocol http 80

    fixup protocol rsh 514

    fixup protocol rtsp 554

    fixup protocol sip 5060

    fixup protocol sip udp 5060

    fixup protocol 2000 skinny

    fixup protocol smtp 25

    fixup protocol sqlnet 1521

    fixup protocol tftp 69

    !

    names of

    !

    IP outside X.Y.Z.163 255.255.255.248

    IP address inside 192.168.0.9 255.255.255.0

    dmz1 192.168.10.1 IP address 255.255.255.0

    IP address dmz2 192.168.20.1 255.255.255.0

    !

    fromOut list of access permit icmp any host X.Y.Z.162 source-quench

    fromOut list of access permit icmp any host X.Y.Z.162 echo-reply

    fromOut list of access permit icmp any unreachable host X.Y.Z.162

    fromOut list of access permit icmp any host X.Y.Z.162 time limit

    fromOut list access permit tcp any host X.Y.Z.162 EQ field

    fromOut list access permit tcp any host X.Y.Z.162 eq telnet

    fromOut list access permit tcp any host X.Y.Z.162 eq smtp

    fromOut list access permit tcp any host X.Y.Z.162 eq www

    !

    fromDMZ1 list of access permit tcp host 192.168.10.2 192.168.0.0 255.255.255.0

    fromDMZ1 list of allowed access host ip 192.168.10.2 192.168.0.0 255.255.255.0

    !

    fromDMZ2 list of access allowed tcp 192.168.20.0 255.255.255.0 192.168.10.0 255.255.255.0

    !

    pager lines 24

    !

    Outside 1500 MTU

    Within 1500 MTU

    dmz1 MTU 1500

    dmz2 MTU 1500

    !

    Global (outside) 1 X.Y.Z.164 netmask 255.255.255.248

    Global (outside) 2 X.Y.Z.165 netmask 255.255.255.248

    NAT (inside) 1 192.168.0.0 255.255.255.0 0 0

    NAT (dmz1) 1 192.168.10.2 255.255.255.255 0 0

    NAT (dmz2) 2 192.168.20.0 255.255.255.0 0 0

    static (inside, dmz1) 192.168.0.0 192.168.0.0 netmask 255.255.255.0 0 0

    static (dmz2, dmz1) 192.168.0.0 192.168.0.0 netmask 255.255.255.0 0 0

    static (dmz1, external) X.Y.Z.162 192.168.10.2 netmask 255.255.255.255 0 0

    !

    Access-group fromOut in interface outside

    Access-group fromDMZ1 in interface dmz1

    Access-group fromDMZ2 in the dmz2 interface

    Route outside 0.0.0.0 0.0.0.0 X.Y.Z.161 1

    Hi jamil,.

    There is a sentence on the URL I sent you, you can now activate dhcp option within the interface. Just check this...

    REDA

  • Translation problem group on PIX 515

    Hi can someone help me with this?

    I'm trying to configure a PIX 515 to pass messages icmp from the interface vlan dmz configured on interface (Vlan 3) PIX inside interface.

    setting it up like this

    interface ethernet0 100full

    interface ethernet1 100full

    interface ethernet2 100full

    physical interface ethernet2 vlan2

    logical interface ethernet2 vlan3

    ethernet0 nameif outside security0

    nameif ethernet1 inside the security100

    nameif ethernet2 msx interieure4

    nameif dmz security7 vlan3

    SH nat

    NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

    NAT (dmz) 1 0.0.0.0 0.0.0.0 0 0

    NAT (msx) 1 0.0.0.0 0.0.0.0 0 0

    Global HS

    Global (inside) 1 interface

    Global interface (dmz) 1

    Global (msx) 1 interface

    At this stage I am not concerened with access lists that I get the error message is as follows

    155:-echo request ICMP dmz:192.168.3.1 to 10.240.2.2 ID = 512 seq = 11520 length = 40

    305005: no translation not found for icmp src dmz:192.168.3.1 dst domestic group: 10.240.2.2 (type 8, code 0)

    I'm not an expert when it comes to the PIX can someone help. Two other things can help shed light on the problem, there is no configuration of routing between Vlan interfaces, this could be a problem? I tried a static command and still have the same error that the order was... static (dmz, inside) 192.168.3.1 192.168.3.1

    Hi David:

    As you try to allow host from an interface for low security to a high security interface, you must have

    static (high, low) high high

    In this case, you must:

    static (inside, dmz) 10.240.2.2 10.240.2.2 netmask 255.255.255.255 0 0

    I assume that you already have an access list to allow the icmp message of echo applied to the DMZ interface. If it is not already there, just add an ACE to allow the icmp message to echo that you should be good to go.

    Sincerely,

    Binh

  • problem ios10 phone with lion 10,7,5

    Hello

    I have some problems with my phone updated with itunes 12.2, 2, 25 pn mion.

    iTunes does not recognize my phone...

    Thanks for the help

    Hello there alessio74!

    Thank you for joining the communities Support from Apple! It seems that you are having problems with your computer to recognize your iPhone with iTunes. I know how important it is that the iPhone is recognized. Read this article with steps If iTunes does not your iPad, iPhone or iPod. This will give you steps to try to update iTunes and your Mac to the latest versions in order to get the iPhone recognized as well as other steps that you can try.

    Have a great day!

  • I bought the new iphone 6 s more and I have not configured, I just opened the phone and charged, but after some time it stop by itself, is this normal or I have a problem with my phone?

    I bought the new iphone 6 s more and I have not configured, I just opened the phone and charged, but after some time it stop by itself, is this normal or I have a problem with my phone?

    You need to activate the phone. There is nothing that the phone can not be activated.

  • my iphone 6 is not the Japan but still having a problem with his camera shttuer. sound is not being muted when the phone is silent. Help!

    my iphone 6 is not the Japan but still having a problem with his camera shttuer. sound is not being muted when the phone is silent. Help!

    The Japan is by far the only country where the shutter is forced to be on

  • ITunes is not sync to my iphone 5 s. also had a problem with my previous phone a 4 s

    My iPhone 5s (just got today) is not synchronized to iTunes. had a problem with my previous phone recently and it was a 4 s. I have all my music on my old iTunes phone, but also downloads from CD. Only items purchased are showing on my new phone

    What happens when you try to synchronize the device? It appears in iTunes? Have you selected to synchronize content?

    TT2

  • Problem with audio BT and I phone

    Problem with incoming car bluetooth connection and calls on the iPhone 6.

    BT Audio is not available for incoming calls on I Phone 6.  The software is up-to-date with IOS 9.3.2 BT Audio works with music, book audio apps but not with the portion of the arrival of telephone calls. I thought it had something to do with iCloud because he was out of storage space and I started to lose the apps. (Waze) - updated iCloud, bought more than place - problem still there. To hear that I have to activate the speaker phone.  If I hit audio car on the phone, no sound and it cuts the music.

    Greetings, MPTP!

    Thank you for using communities of Apple Support. My understanding of your problem is that you do not hear callers on your iPhone when it's connected to the bluetooth feature in your car. I love using the bluetooth connection to my car for hands-free calls. If you do not hear through your car stereo, which defeated the purpose. I'll be happy to help you!

    Here are a few basic Bluetooth troubleshooting steps. - Get help to connect your iPhone, iPad or iPod touch with your car radio

    You can also confirm whether the bluetooth of your vehicle will work properly with your iPhone 6. - iOS: supported Bluetooth profiles

    Travel safe!

Maybe you are looking for

  • Qosmio F60 - HDD and BIOS issues

    I have a Qosmio F60. 1 months since purchase, and I'm having problems. I organize my questions for a better look. (1) if there is a new BIOS update, should I put to update mine? Mine is currently on 2.10, and the last is 2.50! And I know the change l

  • Is it possible to get the original 1989 (using a CD 1993) SimCity on Vista?

    Hi all I used to play SimCity on MS-DOS, when I was little and I recently saw at the used Bookstore for sale, so I thought it wouldn't hurt to see if I could get it to work on Vista. However, I have to be able to run on a 12-bit version of Windows ca

  • Troubleshooting external video and thread unique docking station

    Try to group all threads dock into one video.  This will help me to collect information on what is and is not working there, and get it to engineering to solve.    I will edit this first post to maintain the all updated in one place.  This should mak

  • Option buttons: ToggleGroup in JavaFX 8 (FXML)

    Hello!Since JDK8 b115 or b116, toggle groups of option buttons seems to not want to work more in the FXML files.Before, it worked: <fx:define>     <ToggleGroup fx:id="RB_Group" /> </fx:define> <RadioButton fx:id="rb1"  mnemonicParsing="false" toggleG

  • Errors and warnings during installation of CS6 summary

    Received 5 errors and 19 warnings during the installation of the CS6 - is there something I should do, even though it says the installation is complete? I already have some Creative Suite CS5 on my computer.