Link to home
Start Free TrialLog in
Avatar of wallacjc
wallacjc

asked on

Mobile users can't sync after router/IP change

Hi,
 Recently we switched over from a DSL Internet connection to a T1.  As a result we changed our router and public IP address.  
 Up until the change my 2 mobile users (WM6 on alltel) were getting their push email from exchange no problem.  After the change neither can sync any more; they get the '85010014' error code.

-I did change our domain registration to reflect the new IP and from the outside I've verified the name resolves to the new address

-We did open port 443 on the router and I can access our OWA via https

-I also captured network traffic from the SBS server and I can see the phone will start a conversation with the server but after only 5 secs the phone sends a RST,ACK packet.

-We also temporarily opened all ports on the router with no change.

-A quick review of the 3rd party signed security certificate only shows the domain name (no IP numbers)

  Does anyone have any ideas of what the problem might be or what specifics logs/settings I could check to find an answer?
Avatar of tenaj-207
tenaj-207
Flag of United States of America image

Have you tried to remove/delete the phone account and readd it?
Can you access OWA from outside the company as well as inside?
Avatar of wallacjc
wallacjc

ASKER

Hi,
- Have not tried deleting the phone account from SBS.
- I definitely can access OWA from the outside; have not tried inside.
My guess would be it is certificate related where you changed the public IP.
If you are using a "home grown"/SBS generated certificate re-run the Configure E-mail and Internet Connection Wizard, and you will likely have to re-install the certificate on the phone. If it is a purchased certificate you will likely have to buy a new one.
To confirm if it's an issue with the certificate you could go into IIS and turn off the SSL for the Default Web Site, Exchange-oma, microsoft-server-activesync, and OMA, then change the phone settings to use port 80 instead of 443.  Also make sure the firewall has port 80 forwarded to the exchange server.  This test would show you if it's an issue with the security certificate.
Be careful "tweaking" IIS with SBS
I am tempted to try bypassing SSL to isolate the 3rd party certificate as the cause but I viewed the certificate and I couldn't see anything that seemed to be related to the old IP (only mentions domain name).  

Is a certificate supposed to be unique to the IP address the domain name resolves to at the time the certificate is created?
ASKER CERTIFIED SOLUTION
Avatar of Rob Williams
Rob Williams
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for the help; I re-ran the CEICW and now it works.  Most of the options I saw during the wizard I left alone but I did notice it pulled up the old gateway number (I changed it manually in the NIC properties).  
Well  I re-ran the CEICW and now it works.  The mobile users are syncing again.

 Most of the options I saw running the wizard I left alone but I did notice it pulled up the old gateway number (although I changed that manually in the NIC properties).

 It would be nice to know what changes it made exactly.  

 Thanks everyone for their help.
Glad to hear you were able to resolve.
SBS requires you ALWAYS use the wizards as they affect so many services. Manual changes to not cover all your basis. Any changes to networking services requires re-running the CEICW, and if you ever wish to change the LAN IP not using the change IP server wizard and doing so manually can even result in the need to rebuild the server.
Thanks wallacjc.
Cheers !
--Rob