Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

After replacing UTM vs. XGS VoIP calls from other sites have no audio

Hi all,

we recently replaced the SG115 with an XGS116. We have rebuild all the FW rules and NAT exactly the same as it was in the SG115. We have two other sites connected to the XGS which are accessible both ways. Below picture show the firewalls. I can reach the phone server from both remote sites. I also see the phones are registered via UDP 5060. Status of the remote IP phones in the phone system are up and reachable. I can send a ping to 192.168.168.250 from any remote IP phone. Traceroute from both remote sites are going through to the phone server. Also a trace and ping from the server to any IP phone works.

Calls from or to the remote sites are without any audio.

On the SG115 side I can see UDP connections from 192.168.169.107:29100 to 192.168.168.26:5004 and 5005. If I look on the XGS firewall log, I can´t find any matching connections but I see them in capture log. Why?

Logs...

UTM:

XGS:

XGS packet capture:

Any ideas?



This thread was automatically locked due to age.
Parents
  • Additional information...

    I tested around with tcpdump on the XGS and found that incoming and outgoing packets are going through two interfaces?!

    The LAG0 is a LAG interface with two physical ports, Port3 and Port4. Port5 is the site-to-site connection.

    This is the way from the remote site to the XGS...

    And this is the way back...

    Should this look this kind of? BTW the mv-pcimux0 is probably the TCPDUMP output, right?

Reply
  • Additional information...

    I tested around with tcpdump on the XGS and found that incoming and outgoing packets are going through two interfaces?!

    The LAG0 is a LAG interface with two physical ports, Port3 and Port4. Port5 is the site-to-site connection.

    This is the way from the remote site to the XGS...

    And this is the way back...

    Should this look this kind of? BTW the mv-pcimux0 is probably the TCPDUMP output, right?

Children
No Data