Skip to main content
shane95129
New Member
August 4, 2017
Question

Site to Site VoIP Issues

  • August 4, 2017
  • 2 replies
  • 4037 views

Hi All,

 

I'm having issues with IPSec Site to Site and VoIP. 

 

Here is my setup.

I have a pbx server running on a network with a FortiWifi30D. The FW30D has a Site2Site connection with a FortiGate60E. I have an IP Phone in the FG60E network. The IP Phone is able to register with the pbx on the FW30D. I can call from my cellphone to the IP Phone on the FG60E, it will ring and can pickup. However, I cannot hear anything from the IP Phone on my cellphone but the IP Phone can hear everything I am saying.

 

SIP ALG is not enabled as I have the VoIP security profile disabled in the Features section. I assume that is how it works. I have tried disabling SIP Session helper, but after disabling it, i can no longer register any of my phones. 

 

The VoIP system works perfectly from the FW30D network and is able to take calls. It's only the IP Phone on the FG60E network that is giving me issues.

 

Both the FW and FG are running 5.4.5.

 

Help is greatly appreciated.

 

Thanks!

    2 replies

    shane95129
    New Member
    August 11, 2017

    Bump!

    oheigl
    New Member
    August 11, 2017

    Is the traffic in the VPN restricted by services in a policy? Can you explain the network flow a little bit more -  if you call via a cell phone, what connections are needed? For example is it like:

    Cell Phone -> PBX Server - > IP phone -> Cell Phone 

    Or

    Cell Phone -> PBX Server - > IP phone -> PBX Server -> Cell Phone 

    Could you start a packet trace on both firewalls and filter on the IP address of the phone? Maybe we can identify where packets are dropped/blocked.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!