06-24-2011 02:54 PM - edited 03-16-2019 05:37 AM
Hello,
I have some challenges with a VPN setup for voice traffic I recently configured for a client.
I have at the HO (Head Office) the following:
- 1800 router
- Avaya phones and Gateway
- 1MB radio internet access
At the BO (Branch Office), I have:
- 871 Router
- Avaya phones
- 256k internet bandwidth
The only reason we setup the VPN was setup was to enable the phones at the BO to connect to the gateway at the HO while also being able to make and recieve calls at the BO.
The phones at the BO successfully register to the HO, but are unable to recieve calls and dial out. Everytime I try to make a call, the phone displays a "connecting..." message.
Please see the attached config files.
Could it be the bandwidth of the VPN tunnel because when i checked sh int tunnel, i got the message below:
Tunnel0 is up, line protocol is up
Hardware is Tunnel
Description: Tunnel to HO
Internet address is 192.168.200.2/30
MTU 1514 bytes, BW 9 Kbit/sec, DLY 500000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source 2.2.2.2, destination 1.1.1.1
Tunnel protocol/transport IP/IP
Tunnel TTL 255
Fast tunneling enabled
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input 00:00:13, output 00:00:13, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 1419
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
2376 packets input, 293066 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
4453 packets output, 634702 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
Any suggestions please will be very welcomed. This matter is becoming rather embarassing now
Regards,
Femi
06-25-2011 08:22 PM
Try setting up a site-to-site VPN instead. You also did not add any deny statements to your NAT access list so all traffic is still getting NAT-ed.
06-26-2011 03:47 AM
Hi Brian,
What I have in the config is a site-to-site VPN. Kindly go through my configs again.
However, your comments on the NAT access list sounds like somewhere to look into again. I will make the necessary changes and revert.
Thanks.
Femi
06-27-2011 06:06 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide