SRP521 SIP IPSEC

[AlexBlyuma]

Hello, sorry my English, I am from Ukraine

Problem with SRP521W

1. VPN IPsec Site-To-Site SRP521w to Cisco 2801 IOS not work, only work with SRP521W to Linux Openswan(IPCOP)

2. Voice : SIP Line 1 and SIP Line2 not see the SIP server behind the IPSEC tunnel, SIP only work if the SIP in Public internet network and on interface WAN0, may be problem with route ?

[Andrew Hickman]

Hi ,

Please see my comment in your other for point 1.

Point 2 is a known limitation with this product.

Andy

[AlexBlyuma]

Why restrict what everyone needs, to raise the channel to the corporate network through IPSEС and connect to the server SIP?

It's a routing problem, how can solve it. IP telephones are located inside VLAN1 SRP521 he sees SIP server,why SRP521 does not see SIP?

If we solve this problem SRP521 will be the best router for small offices

Thank you for your reply.

[Andrew Hickman]

Thanks for the feedback Alex,

It wasn't a conscious design descision, really just something that came to light later.   It is something that we would like to address in the future with newer models.

Regards,

Andy

[AlexBlyuma]

I apologize in advance but I need to get to work this device

My routing table from SRP521W(debug)

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
x.5.5.x         0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
x.5.5.x         0.0.0.0         255.255.255.255 UH    0      0        0 ipsec0
192.168.100.0   0.0.0.0         255.255.255.0   U     0      0        0 br100
10.23.26.0      0.0.0.0         255.255.255.0   U     0      0        0 br1
10.23.100.0     x.5.5.x         255.255.255.0   UG    0      0        0 ipsec0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         x.5.5.x         0.0.0.0         UG    0      0        0 ppp0

Why does not sees IP 10.23.100.12, in the routing table entry is present

10.23.100.0     x.5.5.x         255.255.255.0   UG    0      0        0 ipsec0

How-to manualy config iproute an iptables on SRP521W, may be problem in iptables ?

[AlexBlyuma]

I apologize for raising the issue, but still would like to hear a response from the manufacturer

[Andrew Hickman]

Hi Alex,

I had responded initially with an explanation of the current functionality.

I am curious about some of the entries in your table above though - can you send me the device configuration please? (log in, then grab http://192.168.15.1/admin/config.xml)

Andy

[aptelcisco]

Hi Andrew,

Was this issue fixed yet with a newer firmware or a new product?

I am also keen to get working a SIP connection down the IPSEC tunnel.

[aptelcisco]

Andrew,

Do you have any information, dates etc on when a newer model will be available to fix the design issue so we can have the SIP register down the IP SEC tunnel?