Do i need static routing rule? Cannot reach subnet from Branch Office

Hi Simon-Timothy Folaji 

Please add static routes and specify gateway in them.

A network diagram would be much appreciated for better assistance

Hi Keyur,

here it is:

So my question is:

How does the ipv4 unicast route have to look like?

Strange thing is that i can reach the different voip phones from the branch office b to my main network (main site where the XG resides) but not the voip-server itself....

Simon,

please post static routes, tcpdump and a traceroute output.

Thanks

Hi Simon-Timothy Folaji 

As per the diagram Branch sites are connected with the RED device.

Please make sure that LAN to VLAN and VLAN to LAN firewall should be required NAT (MASQ) can be toggled.

tcpdump on the VoIP server IP and Branch system IP would be helpful to analyze the traffic flow.

Please login to SSH console

execute the command tcpdump 'host <VoIP server IP> and host <Branch system IP>

Please share the output and also share the static route configuration details.

Hi Simon-Timothy Folaji 

As per the diagram Branch sites are connected with the RED device.

Please make sure that LAN to VLAN and VLAN to LAN firewall should be required NAT (MASQ) can be toggled.

tcpdump on the VoIP server IP and Branch system IP would be helpful to analyze the traffic flow.

Please login to SSH console

execute the command tcpdump 'host <VoIP server IP> and host <Branch system IP>

Please share the output and also share the static route configuration details.

Hi Keyur,

i´m having trouble understanding this:

Please make sure that LAN to VLAN and VLAN to LAN firewall should be required NAT (MASQ) can be toggled.

I have an LAN - LAN fw-policy, there is no NAT enabled. When i´m connected to the network via sslvpn i can access everything - even the voip-server because the fw-rule is different from the LAN-to-LAN rule. Can this be the cause? 

Target Network of LAN-to-LAN rule is: everything

Target Network of SSLVPN is every network manually added by me (VOIP-Network, local network, etc.)

my static routing list is empty

the output of tcpdump equals=0 because there is no traffic flowing to/from the two systems to each other.

tcpdump -n host 172.31.100.220 and host 10.1.4.102

tomorrow i will install an openstage 40 voip-phone which is capable of creating some network traffic via shell, then i will test again the output of

tcpdump -n host voip-server and host telephone

Hi Simon-Timothy Folaji 

Thank you for your response, please share the output when you have resource. We will be glad to assist you further.

Simon,

how are the branch offices connected to the main office?

MPLS, red or S2S VPN?

Thanks

Good morning,

the S2S are connected via RED-Devices. But that wasn´t the issue. I found out yesterday that the gateway of the VOIP-System is connected via a different gateway (DSL-Connection), now everything works just fine.

Sorry for the undocumented approach. Thanks to all!