Mitel 5000 IP Ports not open

[jloy@itworxonline.com]

OK,  We just changed the external IP that is forwarded to our 5000.  I have lost two way audio.  When I do a port scan externally I get the same port open as when i do a port scan on the local lan. the ports that answer on both sides are Ports:   
22,80,3999,4000,4444,5566,5570,6800

So the weird thing is Ports 5567, 6004-7039 are not open either locally or over the firewall.  I could understand if I got a different result behind the firewall.

Of course all worked well be fore the change.  I am just wondering if there are port open settings that I am overlooking that may still be associated with the original External IP.

Jeffrey

[acejavelin]

You need to go into the 5000 and set the system NAT IP address to your new public IP address, there are two locations you do this... one is in System->IP Settings, change System NAT IP address to your new public IP, and  in System->Devices and Feature Codes->IP Connections->P6000 (typically, the p6000 part might vary slightly) then set NAT IP Address to your new public IP address.

Should be good to go after that, assuming you kept all the same port forwarding in your router...

Also, don't mistake "open" ports for ports in use... the 5000 will not respond on the audio ports, they are just for UDP traffic, an unmanaged stream of information, they are setup and torn down as needed... you can't really "scan" for them.

[NTEDave]

What he said  , basically if you haven't changed the system NAT IP address the phone sends packets out saying hello i'm at this address when it really isn't so the packets get sent back to the wrong IP.

[jloy@itworxonline.com]

Understand. 

The local phone vendor says he did the nats and now we have one way audio.  The Phone vendor is now saying it is the sonicwall firewall not opening the voice ports up properly.  Now that I understand that they are not being listened for until used I am not sure how to determine this.

Any further ideas guys?

[acejavelin]

I would look at the Firewall again, that is the most likely cause of one-way audio (these phone are set for NAT in the 5000 and not Auto, correct?)

Since these phones worked remotely before, the most likely case here is that something changed in your router's port forwarding and the corresponding information was not changed in the phones and/or 5000 system.

The proper ports to open and port forward from the public world to the internal IP address of the 5000 for Inter-Tel IP phones (depending on your software release) are:

6004-6247/UDP
5566/TCP
5567/UDP

Inter-Tel's "offical" document on this is here: https://dl.dropbox.com/u/95033600/Intertel%205000%20NAT%20Port%20Forwarding.pdf

If you are using Mitel 53XX IP phones remotely, the port range is very different... If you give me your Software revision, type(s) of phones, and any other IP services that need to transverse this gateway, I can tell you exactly what ports need to be mapped to the 5000.

And that is all that is needed. In the 5000 you have to make sure the remote extensions are setup as NAT and the public IP address is populated correctly in the system.

If ALL the ports are not open and mapped to 5000's IP address, audio will fail...