Site to Site VoIP Issues

[shane95129]

Hi All,

I'm having issues with IPSec Site to Site and VoIP. 

Here is my setup.

I have a pbx server running on a network with a FortiWifi30D. The FW30D has a Site2Site connection with a FortiGate60E. I have an IP Phone in the FG60E network. The IP Phone is able to register with the pbx on the FW30D. I can call from my cellphone to the IP Phone on the FG60E, it will ring and can pickup. However, I cannot hear anything from the IP Phone on my cellphone but the IP Phone can hear everything I am saying.

SIP ALG is not enabled as I have the VoIP security profile disabled in the Features section. I assume that is how it works. I have tried disabling SIP Session helper, but after disabling it, i can no longer register any of my phones. 

The VoIP system works perfectly from the FW30D network and is able to take calls. It's only the IP Phone on the FG60E network that is giving me issues.

Both the FW and FG are running 5.4.5.

Help is greatly appreciated.

Thanks!

[shane95129]

Bump!

[oheigl]

Is the traffic in the VPN restricted by services in a policy? Can you explain the network flow a little bit more -  if you call via a cell phone, what connections are needed? For example is it like:

Cell Phone -> PBX Server - > IP phone -> Cell Phone 

Or

Cell Phone -> PBX Server - > IP phone -> PBX Server -> Cell Phone 

Could you start a packet trace on both firewalls and filter on the IP address of the phone? Maybe we can identify where packets are dropped/blocked.