SIP Soft phones unable to register with MBG

[ssaravanak]

Hi

We have a two MBG's one as a Upstream and the other as a downstream Server.The Upstream server is in DMZ , and the Downstream server is in the LAN .When we connect a sip softphone from the same LAN network of the Down stream MBG , the SIP phone resgister and able to make & receive calls.

When we try to connect a soft from the same LAN of the Upstream MBG , it doesn't work.When we run Mitel TNA , able to see port 5060 open and netstat on the server also shows the same.

We have enabled SIP on the MBG and able to see the same on the mbg -> Applications -> Show All connectors.

On the firewall , we have allowed 5060 inbound and outbound.So it is open all the way between MBG and ICP 3300.Firewall Log say age out , in the sense , no response back from MBG to sip phone on port 5060.

Any help / Suggestion is highly appreciated.

[martyn]

If you run the TNA tool against the public IP address of the upstream server does it show that it is listening on 5060?

[ssaravanak]

Hi Martin ,

It says TFTP , Alternate TFTP , Voice traffic start , SIP - OK and Voice traffic end & Legacy Sip trunk - Time out.We are not using any SIP trunk and the Voice traffic end is 22000 , may be those are the reason for time out.

On the upstream box , we donot even see any SIP registration request :-( 

[ssaravanak]

Hello Martin ,

thanks for your assistance , after disabling ALG on the juniper firewall , the problem is sorted now.

[martyn]

Ahhh yep the SIP ALG will do it every time!

Glad you got it sorted.