[jimsuk]

As a VoIP PBX setup in the UK on ADSL broadband, I was looking for hardware based PBX with up to 4 internal extensions so was hoping SPA9000 would fit the bill. If Linksys SPA9000 is to be setup and reliable does it need to be paired up with specific firewall and or router to give reliable NAT as currently with my setup I'm getting the classic one way or no audio. The ADSL router is with NAT to LAN which feeds into Sonicwall firewall again with NAT. Before trying the SPA9000 I've had a basic setup of Siemens 450IP on the LAN behind the firewall with the appropiate ports forwarding of UDP5060 and UDP5004 and the SPI turned off on the ADSL router it worked, but I've tried the SPA9000 in the same config with the addition of 16384 to 16482 UDP ports forwarding but cannot get two way audio. I was thinking if it is to work as intended the phones and PBX need to be on the LAN behind both the router and firewall since the selling point of say POE switch and SPA942 would be the fact that a server on the LAN would provide DHCP and phones would plug into existing network without the need to change firewall and or router currently on the site. Any thoughts on SPA9000 setup? As another issue I noticed when I turned off SPI on my router I found some hack had found my email server and was trying to logon to it, so negative side effect of turning off router SPI. I want to get this working but would like to know best setup to maintain security as much as possible also.

[los]

jimsuk

this is the same issue i have beat my head on the table for countless hours. the way to get around all issues is to just put the spa9000 infront of everything. your will have one way audio no audio choppyness ect. one of the requirments that we have put inplace within our company is to always setup the spa9000 upfront or else you will spend hrs apon hrs trying to get it to work. just my 2 cents.

[Walford58]

I was having mixed problems behind a Sonicwall and with NAT on the modem as well.

Two things seemed to work:
First is to ensure the ports are mapped directly. I could only do this by enabling DMZ on the modem (which is not much of a problem as only the firewall sits behind it) and then to set the SPA9k to send/receive to the same port. When I ran a trace before this, I found that responses were being sent to a different port, so audio was not necessarily getting through. This was a function of NAT. Instead I turned on "Send resp to src port" in the SIP tab, and this cleared the problem.

The other option is to try SIP.

[jimsuk]

Pete

So your SPA9000 is on a LAN protected by NAT on Sonicwall and the modem(ADSL router) has the firewall turned off which is connected to Sonicwall WAN?

[jimsuk]

Originally Posted by los

jimsuk

this is the same issue i have beat my head on the table for countless hours. the way to get around all issues is to just put the spa9000 infront of everything. your will have one way audio no audio choppyness ect. one of the requirments that we have put inplace within our company is to always setup the spa9000 upfront or else you will spend hrs apon hrs trying to get it to work. just my 2 cents.

Would this mean the handsets being on a separate subnet to main LAN and not able to use existing DHCP server?

[Walford58]

Originally Posted by jimsuk

Pete

So your SPA9000 is on a LAN protected by NAT on Sonicwall and the modem(ADSL router) has the firewall turned off which is connected to Sonicwall WAN?

That's exactly right
Handsets can be connected at any point on the LAN and the SPA9k is connected to the LAN on its WAN side.

[jimsuk]

Originally Posted by Walford58

That's exactly right
Handsets can be connected at any point on the LAN and the SPA9k is connected to the LAN on its WAN side.

That's what I want and I've tried your suggestions thanks. I've set my Router to DMZ to my Sonicwall but audio still one way.

[Walford58]

Originally Posted by jimsuk

That's what I want and I've tried your suggestions thanks. I've set my Router to DMZ to my Sonicwall but audio still one way.

Have you confirmed that the SPA9k works when on the router LAN instead of behind the firewall? If it does, then your SPA config is OK and it is down to the firewall configuration.

Try opening your RTP firewall rule in both directions - UDP ports 8000 all the way to 16482 and also STUN allow UDP port 3478.

[jimsuk]

[quote=Walford58;111457]Have you confirmed that the SPA9k works when on the router LAN instead of behind the firewall?quote]

Hi, I've set SPA9000 now on the Router DMZ with no SPI and two way audio so far ok if directed straight to an extension but if on aa getting random result of not recognising extension and if it does recognise and transfer call then no audio, switch off aa and ok again?

[Walford58]

[quote=jimsuk;111470]

Originally Posted by Walford58

Have you confirmed that the SPA9k works when on the router LAN instead of behind the firewall?quote]

Hi, I've set SPA9000 now on the Router DMZ with no SPI and two way audio so far ok if directed straight to an extension but if on aa getting random result of not recognising extension and if it does recognise and transfer call then no audio, switch off aa and ok again?

Does the AA interpret the DTMF tones for extension selection (AA decode inband DTMF =yes on the SIP tab)?
Also try Force Media Proxy = yes on the SIP tab (PBX parameters) if that is not set on.
Once audio works in both directions without the firewall, any problems with the SPA9k are eliminated and you can then work on getting it to work across the firewall.