Cisco 8861 can't download template over VPN.

[cajones]

We have noticed that when we place 8861 phones behind a VPN router the phones can no longer download templates or changes.  They work just fine otherwise.   It does not appear to be a port blocking issue so we are wondering if it might be related to MTU size.  On call manager it says it can't access TFTP but we have 69 udp and tcp open.  Has anyone experienced this?  Any ideas on what we can try?

[Marcelo Morais]

Hi,

please, double check the following info: UDP Ports.

Hope this helps

[cajones]

Marcelo - Thank you for the information.  We did add the few that were missing, however the same problem exists.

Do you have any other ideas?

Thanks.

CJ

[Marcelo Morais]

Hi,

please, check in the following link: Port Description, for the TFTP and Endpoint info (for example: TCP 6970).

Hope this helps

[Kunal Narula]

Hi Cj,

Incase you are using ASA for vpn then refer to below post

https://techzone.cisco.com/t5/ASA-Virtual-Private-Network-VPN/AnyConnect-VPN-Phone-IP-Phones-ASA-and-CUCM-Troubleshooting/ta-p/142954

Thanks!

Kunal