RE: [SonicWALL]- VPN and IP Telephony

[Arnold, Paul]

I was told by our Cisco partner that each voice session takes about an ~80kb pipe.

Our SW is behaving fine - I used to run the same load on a ProVX but upgraded to the Pro 300 because of the promotion. ("1 for 1" I think?)

 

Here are some of the issues we had to figure out:

For the IP phones, they get an extra DHCP value - Option #150 which is the location of the call manager. You can add this option to a standard DHCP server, but not in the SonicWall;s DHCP settings.

The phone translates this value to the "TFTPServer1" which lets the phone register to make calls. Once we figured that out, we input the phone settings manually, including ip address, gateway, mask TFTP server, etc. If you run a DHCP server on the remote network (or use DHCP over VPN) then you can address this, but my endpoints are users' home offices so we set them manually.

 

After that, all phones on the "VPN spokes" can call in, call out, etc - but you will find that you cannot call spoke to spoke. (In my case user home to user home.)

So on each user's SW, we had to add the range of every other person that they wanted to talk to.

Admittedly this is not the most glamorous solution, but it works. As you can imagine, it was impossible to get help on this from either Cisco or SonicWALL, so we had to engineer the solution ourselves when we had the time.

 

HTH

Paul

 

-----Original Message-----
From: Lance Loudan @ Benedict [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 25, 2002 12:31 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [SonicWALL]- VPN and IP Telephony

This company looking at the NEC system.  It is a hybrid system.  But you are saying no problems.  What kind of load do you put on the Pro300?

 

-----Original Message-----
From: Arnold, Paul [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 25, 2002 11:03 AM
To: [EMAIL PROTECTED]
Subject: RE: [SonicWALL]- VPN and IP Telephony

It works great!

I have several users. I am using a Pro300 at the NOC and Tele3s at the remote locations. The NOC and most of the clients are here in CT, but I also provide dialtone over VPN for clients in FL, MI, and France.

Obviously you need DSL or Cable modems at the remote sites.

Which VOIP solution are you using? I'm using Cisco, so I have some pointers on configuring 7910 and 7960 phones if you need them.

 

There is no QoS over the internet (obviously) but I find that only one of my DSL users has a problem. I think it's over-saturation at his TELCO CO.

I will tell you that lowering the encryption over the tunnel impacts the voice quality too.

I have a 7910 and a 7960 at my house. The Voicemail light works and everything.

 

The only issue I have is that if I answer the IP phone, my Quake3 game ping goes through the roof. ;)

 

Let me know if there is anything else you want to know here (or off of the list)

 

Paul

 

-----Original Message-----
From: Lance Loudan @ Benedict [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 25, 2002 11:37 AM
To: SonicWall User Forum (E-mail)
Subject: [SonicWALL]- VPN and IP Telephony

Heh, I was wondering if any one has worked with IP telephony and the sonicwall firewall.  My company wants to start setting up IP telephony and they want to use the VPN to transmit to other locations.  Does anyone know; 1. will this work? 2. what problems I may face.

 

Thanks in advance

 

Lance

 

LEGAL NOTICE:
Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this e-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately.

LEGAL NOTICE:
Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this e-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately.