New Remote site w/out DVM, Directory key and options button won't work

[dsirek]

Hi Guys,

We just set up a new remote site in our Shoretel system. It's a simple setup, 1 - 120/24 Shoretel Switch onsite to manage phones, no DVM. We set the switch to be managed by our HQ server. Voice quality sounds great, and everything else works, except whenever our Network engineer hits the Directory key or the options button on the IP530 phone, it says "The server required for this operation is not available". Switch connectivity in Shoreware Director looks good between all of our sites. We've got the Phone IP address range entered in Director, the phone onsite is being managed by the local 120 switch. The only difference between this site and our others is the lack of a DVM server.

We're on 6.1 (Build 11.15.5300).

Any ideas?

[cburgy]

What type of connectivity between the sites and what type of routers or firewalls are you using?

[dsirek]

We're using Checkpoint firewalls and Cisco routers between the sites.

[cburgy]

Are you leveraging a VPN tunnel between the two locations or is it a private link running through Cisco routers (1841s I presume)?

[dsirek]

VPN tunnels only between the routers.

[cburgy]

Then your Cisco routers are probably set into stateful mode (firewalling). There are a number of variables that can choke up the communication between sites when passing through stateful firewalls.

You'll need to check your policy design, ALGs, any screens you might have applied, etc.


We don't work with Cisco much at all (Juniper for routers/firewalls), so I can't provide any specific Cisco troubleshooting steps for this scenario.

If you have a SmartNet contract, you can call Cisco TAC and they should be able to setup flow monitoring on the routers to see why traffic is being dropped.

Is PCM working ok at the site?

[dsirek]

Sure enough, traffic was being blocked at the Firewall level. I provided the list of Shoretel ports that need to have unimpeeded traffic through the firewall between offices. Since the policies have been reloaded on the local firewall at the problematic office, the issue has been resolved and the directory/options key is working again.

[cburgy]

Glad to hear you were able to resolve the issue.