Remote IP failure on MiVoice250 6.2 system behind Sonicwall

[Crowtalks]

I migrated a system to reside behind a Sonicwall after customer bought IP phones to replace 8528s and gave the IT guy the ports for remote IP phones.

Customer has remote IP phones that had been working with system natted behind private network side of their Netgear 2200 router which I configured.

The IT guy says that the problem is the Mitel is not using 69 for TFTP because it doesn't respond to telnet requests for port 69 to it's IP on the network. I figure the Mitel won't respond because it is looking for Minet devices (or something like that). I set the local 5340s to ask for TFTP on port 69 and they register just fine. I'm thinking this guy has an issue somewhere with his rules, but he is adamant. I am now getting alarm 144 saying one of the remote IPs won't register.

Any suggestions?

Jim

[DND ON]

Teleworker phones don't use Port 69 for TFTP.  I don't have my notes available, maybe someone else will chime in.

[acejavelin]

Teleworker phones don't use Port 69 for TFTP.  I don't have my notes available, maybe someone else will chime in.

It is Port 20001/UDP

The proper port forwarding for remote phones is (from memory, so forgive if I'm wrong):

69, 20001/UDP - TFTP (69 is attemped first, 20001 is the fallback... most routers do not port forward 69/UDP well)
6800-6802/TCP - Applications
3998 and 3999/TCP - Keys (SAC)
50098-50508/UDP - RTP from set to 5000
6004-6261/UDP - RTP to set from 5000

The weird part here is the phones don't need TFTP, they will just timeout and continue to boot and generally work (unless you have one that was on a 3300 and trying to register to a 5000 or vis-versa)

[Crowtalks]

Thanks!

I had given him everything except 20001. We had issues attempting to get remote sets working with the system behind a firewall in a different area a couple of years ago...I don't recall what we did.

I believe I will run a couple of CAT 5s for the local phones and put the system back behind my network where I know everything will work.

Jim