IP Phones and VPN

[iTeknique]

Have a major issue with my Shoretel setup. I have VPNs setup between the main office (with the shoretel switch) and remote users. The only items at the remote user site is a vpn router (Linksys), computer and a shoretel phone. Everything works okay, but when the bandwidth fails (ie. DSL goes down), the phone loses connection. When the DSL comes back up, the phone tries to get reconnected but its IP address is refused by the Shoretel server. The only way to reconnect the phone is to manually change its IP address. This is happening several times a week. Basically everytime that timeout for the VPN expires. The Shoretel server sits behind a ASA5505 firewall.
Need help desperately, we have found no way to fix this issue.

[Jlorenz]

Have a major issue with my Shoretel setup. I have VPNs setup between the main office (with the shoretel switch) and remote users. The only items at the remote user site is a vpn router (Linksys), computer and a shoretel phone. Everything works okay, but when the bandwidth fails (ie. DSL goes down), the phone loses connection. When the DSL comes back up, the phone tries to get reconnected but its IP address is refused by the Shoretel server. The only way to reconnect the phone is to manually change its IP address. This is happening several times a week. Basically everytime that timeout for the VPN expires. The Shoretel server sits behind a ASA5505 firewall.
Need help desperately, we have found no way to fix this issue.

Your issue is going to be in one of two areas

1: The firewall VPN IP is being used as the IP for the phone

2: You have not added the IP address of the IP phone to the IP map in Director.

3: Or both 1 & 2

Two issues you will have with any Public Net VPN is your connection is Asymetrical meaning that it is normally 128 up and 1.5 or 3.0mb down

This will always be the issue, no matter of your using VPN the VPN will be tied to this. The best solution is to try and get the ISP to split the band width, so lets say it is a 1.5/128 have them split it.

If not, then you only bet is to prioritize ports 5004, 5440-5446, set an IP map in shoretel and of course make the IP phone Static

[skone]

I had that issue before when I was using a dynamic VPN. I switched to a lan to lan tunnel with static IPs and the problem went away.

[Jlorenz]

I had that issue before when I was using a dynamic VPN. I switched to a lan to lan tunnel with static IPs and the problem went away.

Yup, I have seen corporations tie Remote site with 10 and more users on a cable modem set at 128/3.0 and I could not get it through the IT persons head the issue was the ISP Connection. Frustrating