Registration between 2 Watchguards

[Chaz]

Trying to register new phones on the remote side of the VPN, and they are succeeding. We can ping the firewalls and all phones on either side. Nothing is black listed. Any clues to expedite this process? At this point, we just take the phones back to the LAN where the server is and register that way.

Thanks,

Chaz

 

[craigreilly]

You say they are succeeding - so what is the issue with the way they are being setup now?

 

[Chaz]

I am only able to initially register them on the LAN, but not on the other side of the VPN. Once registered on the LAN, then I take them over on the other side and they work fine.

 

[eddv123]

There is a little clarity required on what you exactly want here but I am going to assume anyway.

For VPN setup you can get a plug and play like experience if you do the following, without the need for even provisioning the phones prior to install:

1. Setup extensions on 3CX with phones MAC addresses allocated to users.
2. Setup DHCP option 66 provisioning on the Watchguard:

https://www.3cx.com/sip-phones/dhcp-option-66/
3) Set up a DNS resolver on the watchguard for the 3CX FQDN and resolve it to the local IP address of the system.

Then plug in the phones locally and as long as there are no network restrictions in place they will auto provision without issue. Do this all the time on our deployments.

 

[Chaz]

Thanks. I wil try that this weekend. Wasn't sure if the watchguards had the dhcp option 66.

 

[eddv123]

I think we have deployed with Watchguard before and they do (cannot recall for definite however) if they do then it is the best way (VPN).

We have found Watchguards to be a little over-security sensitive for running VoIP traffic through directly.

 

[Chaz]

Thanks. I do see that option our Watchguard T35

 

[BrenttG]

We have found Watchguards to be a little over-security sensitive for running VoIP traffic through directly.

And not in a good way.... We found them to block a lot of friendly stuff, miss some bad stuff completely, and were such a pain to navigate and deal with since they are choked full of their own made up terminology and ways of doing things.