TIPS SIP fail different LAN

[cantVOIP]

The PBX server is setup and it phones are able to register TLS SIP 5061 within the same LAN.
I have a VLAN with multiple phones, I would like these phones to use the PBX server.

I've added the VLAN IP address 192.168.xx.0/24 under Settings\Asterisk SIP Settings\General SIP Settings\NAT Settings. I ran core restart now, on top of that I restarted the entire PBX server. The phones on the VLAN 192.168.xx.0/24 are unable to register to the server. I've configured properly the firewall rules so I know that isn't the issue.

Is there a different place I need to edit the different LANS that need to communicate with PBX? Thank you in advance to the community

 

[ext-104]

I might not be understanding you lan setup, but sounds like the PBX is not in the VLAN?

From within your VLAN can you ping the PBX that is not in the VLAN?

How are you configuring the VLAN? Managed Router?
Is there a route between the lans to the PBX?

 

[cantVOIP]

I might not be understanding you lan setup, but sounds like the PBX is not in the VLAN?

From within your VLAN can you ping the PBX that is not in the VLAN?

How are you configuring the VLAN? Managed Router?
Is there a route between the lans to the PBX?

Let me just give you a clearer description. VLAN1 has a PBX with some phones connecting to it. VLAN 2 has some pones that need to connect to the PBX in VLAN1.

I have a pfSense router managing all the VLAN rules. There is a route between both VLANS, to allow the entire network of VLAN2 communicate with the specific IP address of the PBX server in VLAN1.

I can ping from VLAN1 to VLAN2, and I can also ping from VLAN2 to VLAN1. I've tested the network and the firewall rules work as they should.

I have also added both IP ranges in the PBX 192.168.xx.0/24 and 192.168.xx.0/24. However, the phones in VLAN2 are not registering on the PBX. The Asterisk logs don't show any type of communication.

The same thing had happened to me when I tried to connect a cloud SIP number to the PBX. I had too ./add-ip on the PBX's firewall for the firewall to not reject it. I ran the same command as well with the local IP range, and it still doesn't work

 

[cantVOIP]

I might not be understanding you lan setup, but sounds like the PBX is not in the VLAN?

From within your VLAN can you ping the PBX that is not in the VLAN?

How are you configuring the VLAN? Managed Router?
Is there a route between the lans to the PBX?

To add on the prior, I have an older PBX that is working with the same VLAN structure. It's not a network issue.
I am sure I'm missing a configuration from the PBX server side!

 

[Samot]

Why aren't the phones and the PBX on their own VLAN?

 

[dallas]

It's not a network issue.
I am sure I'm missing a configuration from the PBX server side!

Well actually it is. If the PBX is working ok for the phones on VLAN1 and not for the phones on VLAN2, what else can it be? You just have to find where the connection is failing. I'd start by doing some traces to find where that failure occurs. Can you ping from VLAN2 to VLAN1 and vice versa?

 

[dicko]

Just a reminder to those diagnosing networks, ping is icmp , sip nor sdp use that protocol so . . .

 

[ext-104]

What are the phones on the vlan reporting when trying to register?
Their log output should give you a idea.