[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 488
  • Last Modified:

Cisco VPN Remote Client Blocks Outbound Voice traffic

I have a Mitel Softphone on my laptop that connects through a Cisco VPN client.  Everything connects great other then my out bound voice traffic gets stopped by the Firewall that is built into the VPN client.  Is there anyway to change the settings on the Cisco VPN client Firewall to allow this traffic.
0
Firstair
Asked:
Firstair
  • 4
  • 3
  • 3
1 Solution
 
lrmooreCommented:
There is no configuration of the VPN client other than "split-tunneling" on the remote end. What are you connecting to? A PIX firewall or VPN concentrator?
Do you control the firewall, or are you just an end user? If end user then there is absolutely nothing that can be done on the client end to change the behavior of the VPN client.
0
 
FirstairAuthor Commented:
I am connecting to a Pix 515.  I do control the Firewall.  However I have it set up for my self to allow all all traffic through the VPN connection.  It seems to be the Cisco VPN client built in stateful firewall that is blocking this traffic.  I was hoping I could either cange the stateful firewall config on the client or disable it from coming on automatically when the VPN connection is made.
0
 
lrmooreCommented:
So, the softphone connects to a call manager/pbx at the corp office sitting behind your PIX 515?
Tunneling "IP" through the client should allow it. The firewall does not affect any traffic through the established tunnel.
If the softphone connects to an external service, like Skype or other Internet based service, then the fact that you tunnel all traffic through to the 515 will certainly block that function because it needs Internet access which you are tunneling, and the 515 can't turn that traffic back around out to the world and back to you through the tunnel.
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
lrmooreCommented:
By the way, I use a Cisco softphone on my laptop to a Cisco call manager that sits behind a PIX 515 and connect using the VPN. It works very well and I've never had an issue with it..
0
 
rsivanandanCommented:
Just to add, I have used softphones from both Cisco and Avaya through PIX vpn and it works just fine. Your case is probably the configuration. To where does it connect to, can you describe a little on that ? When you say 'block' what happens ? It doesn't connect to the server at all?

Cheers,
Rajesh
0
 
FirstairAuthor Commented:
I get connected to the server, I can answer the calls and make outgoing call. When the call is in progress I can  hear them talking but they can not hear me at all.  
0
 
rsivanandanCommented:
This is definitely not a problem with the VPN.

First thing I would try to do is to reduce the MTU size and see if that improves anything. Do this;

On the program menu, there will be a utility called 'SetMtu' in the Cisco VPN Client folder. Use that and set the MTU size to 1300 and see if that makes any difference.

Cheers,
Rajesh
0
 
FirstairAuthor Commented:
MTU is already set for 1300
0
 
rsivanandanCommented:
Okay, then I would try tuning the receiver and transmitter options in the softphone client again ?

May be some modes won't work like Telecommuter/Road warrior.

Cheers,
Rajesh
0
 
FirstairAuthor Commented:
I solved the problem myself at it ended up being a subnetting problem.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 4
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now