topic Re: Site-toSite VPN VOIP issue in Spark Firewall (SMB)

Site-toSite VPN VOIP issue

Stelios — Tue, 19 May 2020 09:46:08 GMT

Hi everyone,

I have a site-to-site VPN connection between CP 750 and CP 3000 R80.20.

I have issues with the telephony system (VOIP). If I call from remote site (CP750) to HQ (CP3000) works fine, but if I call from HQ to remote site the phone line is dead.

Re: Site-toSite VPN VOIP issue

Maarten_Sjouw — Tue, 19 May 2020 13:48:41 GMT

What is allowed inbound on the 750?
Do you have UDP high ports allowed from the IP ranges of the phones in both directions?

Re: Site-toSite VPN VOIP issue

Stelios — Wed, 20 May 2020 07:41:13 GMT

Hi Maarten, thank for reply
I was trying to follow the below manual but since I don't have much experience with Telephony systems am not sure if my configuration is correct or even where is the problem.

https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/VoIP-Issue-and-SMB-Appliance-600-1000-1200-1400/td-p/40613

Re: Site-toSite VPN VOIP issue

Stelios — Wed, 20 May 2020 07:56:25 GMT

HQNet is 3000 appliance and LocalNet 750 appliance

Re: Site-toSite VPN VOIP issue

G_W_Albrecht — Wed, 20 May 2020 09:23:34 GMT

Basics can be found in the old How To Secure VoIP supportcontent.checkpoint.com/documentation_download?ID=11842

Maybe reasons for your issue can be found in sk102208: When remote access users connect to the local 600 / 1100 VPN server and establish VoIP Call, one of the sides is unable to...

Better still is to contact TAC and let them resolve the issue !

Re: Site-toSite VPN VOIP issue

Stelios — Wed, 20 May 2020 12:53:34 GMT

Hi Albrecht,
I have already nat rules using the local and remote network on both gateways. I have open also a ticket for this but any ideas will be appreciated 🙂