SPA504 Behind Sonicwall to Sonicwall VPN at remote office

[econsystems]

A client have 2 existing sonicwall devices with site to site VPN.  Main site has UC540 with a dozen phones.  The client want to have 2 SPA504g phones on the remote site behind the remote Sonicwall VPN.  Unfortunatley SPA525s are not an option as per the customer.

Any information in this regard would be very much appreciated.

Thanks.           

[danplacek]

You can make the phones work over just about any VPN / MPLS / Etc.

These are the requirements:

1. Either hardcode a tftp server (10.1.1.1 for the UC500) or have the DHCP server serving the phones hand out 10.1.1.1 with option 150.

2. Make sure the network the phones are in have routing to 10.1.1.0/24

I believe by default the tftp server is bound to 10.1.10.2... so you should either make 10.1.10.0/24 routable as well or change that binding.

-Dan

Please rate useful posts.

[econsystems]

Would there be any seetings needed for the VLAN100, etc.

[danplacek]

I have done it both ways for the remote site:

1. Just put the phone in the data VLAN and make sure it has routing to 10.1.1.1

-or-

2. Create a VLAN 100 at the remote site and do something like 10.1.2.0/24

Option 2 is better if you have QOS / Security concerns... but it is harder to setup.

-Dan

Please rate useful posts.

[econsystems]

Thank you for your help.  I used the #1 solution.  I called Cisco support and they told me that 10.1.10.0 and 10.1.1.0 both networks need to be forwarded.  Instead of that, I did 10.1.0.0.  Even with the DHCP giving 150-TFTP for 10.1.1.1, the SPA504 still would not work.  In the SPA504 network configuration, there is no place you can manually configure the TFTP.  The SPA525 you can manually configure it.

I took the phone to the client's main office which had the PBX, configured the phone and then I brought it back to the remote office.  After plugin it worked right away.  I guess, as long as the phone does not get factory reset, it will keep working.

Not sure how I can manually configure the TFTP on the SPA504.  The settings have a padlock and not sure how to unlock them.

Thanks again for your help.

Chaudhry Manzoor

[danplacek]

Try "**#" to unlock the settings.

In any case, option 150 will definetely work if you have it configured correctly; you should check your DHCP server settings.

Otherwise a packet capture of the phone booting would be the easiest way to troubleshoot.

-Dan

Please rate usful posts.