RTP300 behind ISA2004 Firewall having issues

Posts: 3 · New Forum Member Joined: Nov 20, 2005 Posts: 3

I have the RTP300 behind an ISA2004 Firewall. It was working until I unplugged the RTP300 and moved it to make room for other devices on my rack. The only way I could originally get it to work was to configure the WAN & LAN ports with static IP's and plug them both into my switch.
The ports on the firewall are open for this device and i have tested by using the built in ping and traceroute to the internet. For some reason the "blue" phone light is not lite, no matter what I do. When I go to the Admin>>Status>>Voice page it sates Provisioning Status: Provisioning succeeded
Any help would be appreciated on this matter.

-Rene Alamo

Posts: 132 · Vonage Forum Senior Joined: Aug 16, 2005 Posts: 132

So do you have a dialtone?

Have you tried doing a hard reset to the RTP300 (back to default values) and connecting it directly to your modem as a test?

Posts: 3 · New Forum Member Joined: Nov 20, 2005 Posts: 3

Thank you for your response. The phone plugged into the RTP300 does not have a dialtone since there is no blue lite. I have done a "hard" reset to factory defaults and reconfigured the RTP300 with the same configuration when it was working nprior to moving it.
At this point in time I am unable to plug this directly into the Zyxel cable modem to test it out. My concern is that I need to get this to work behind the firewall, since i can traceroute and ping with the RTP300 thru the ISA04 Firewall.

-Rene

Posts: 132 · Vonage Forum Senior Joined: Aug 16, 2005 Posts: 132

Any port forwards? DMZ? Odd that it's provisioned but no phone LED.

Posts: 3 · New Forum Member Joined: Nov 20, 2005 Posts: 3

You ask "Any Ports Forwarded" If you are refering to the RTP300 all Firewall functionality has been disabled.
There is no DMZ setup on the RTP300. Firewall is an edge Firewall, DMZ setup was removed for troubleshooting purposes.
I have enabled RIP on the Firewall as a just in case and the RTP300 routing table points to the ISA Firewall.
On the ISA04 firewall I have a policy which routes any IP traffic to this devices internal network IP addresses for outgoing and incoming traffic.

Posts: 62 · Posted: Sun Nov 20, 2005 8:38 pm Post subject:

I don't have an RTP300, but I'll try to give some ideas here....

I read this as the RTP300 worked "prior" to the ISA2004 Install. You now unplugged the RTP300 and setup an ISA2004 server in it's place. If this is the case, ISA2004, when initialy installed doesn't have any outbound, or Publish server, rules setup, so any traffic that hits it, outbound or inbound,won't "flow" through the ISAServer

You'll need to create a "Publish Server" rule on ISA to forward traffic from the external interface on the ISA Server to the internal IP address that you've manually assigned to the WAN interface of your RTP300. You should only have to plug the WAN interface into your internal swtich. The other LAN port should stay unplugged, and then you plug your phones into the jacks on the RTP300. You'll also need to create an outbound rule for traffic. Depending on how "locked" down you want this, but you need rule to either allow all traffic, or specific ports for any traffic coming from the statically assigned IP address on the WAN interface of the RTP300.

I've included the ports needed to make this happen below, here's a link to url: Port Forwarding, but here's the info below if you do want to get specific:

These are the ports that Vonage requires to be OPEN for successful use of the Vonage device (the ability to make and receive calls, download device profiles, firmware, etc). Under most circumstances these ports are already opened or allowed. You must be careful to not inadvertently close them.

The following ports are needed for OUTGOING Internet communications from the Vonage device to the Vonage servers.

DNS: Port 53 UDP (Domain Name Server - for resolving server IP addresses)

TFTP: Port 69 UDP (for profile upgrades/downgrades)

HTTP: Port 80 UDP (for firmware upgrades/downgrades)

NTP: Port 123 UDP (Network Time Protocol - so the device can sync to the proper time for Caller ID)

SIP: Port 5061 UDP is used for older Vonage devices (devices provisioned before 2005) Also, BSP Proxy Groups 1-8, and a.voncp.com communicate on port 5061.

The following ports are needed for INCOMING and OUTGOING Internet communications from and to Vonage devices and servers.

RTP (Voice) Traffic: Ports 10000-20000 UDP. When a call is made, a random port between 10000 and 20000 is used for RTP (Voice) traffic. If any of these ports are blocked, you may experience one way or no audio

Hope this helps!!!!!