This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Panasonic VOIP phones only work for ~30 seconds before saying 'Poor LAN connection'

I'm hoping someone here can help me because I feel like I'm banging my head against the wall trying to solve this issue.

So the setup: Main building with a Sophos UTM 9, firmware version 9.707-5 with the Panasonic PBX behind it. Secondary building across the street, also with a Sophos UTM 9, with firmware version 9.708-6 and 4 Panasonic KX-NT343 VoIP phones behind it. The two firewalls are connected via IP sec vpn tunnel. While at the secondary building, I can ping the PBX just fine, the Panasonic phones get an IP address and I can ping them. I can make outgoing calls from the phones, but only for about 30 seconds until the phones reboot themselves with an error message saying that there is poor lan connection. I was able to verify with Sophos support that there is traffic flowing from the phones to the PBX and vice versa whenever I make a call. There's nothing wrong with the phone system either, as I took one of the phones from the secondary building to the main building and plugged it in and it worked right away with no issue.

If it was just one phone, I would say it's a bad phone and replace it. But it's all 4 phones at the secondary building, all having the same issue. I've called Sophos support 4 times now, spending multiple hours on the phone with them, with no change. This started happening out of the blue several days ago and I haven't been able to figure out why as I had made no changes to either firewall for several days before this happened.

The only thing I can think of now is that the firmware versions aren't the same? But like I said, worked for who knows how long before this with two different firmware versions. Any advice would be appreciated, before I pull out what little hair I have left.



This thread was automatically locked due to age.
  • Do you configured something within IPS or Flood-protection? / Check IPS- and FW-Logs.

    Do you see blocked packets from/to the phone-IP?

    And "worked for who knows how long before this with two different firmware versions" you mean, the problem starts with the upgrade?


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • Yes I've checked IPS and flood protection, even turned them both off temporarily but the issue was still there. As far as I and the Sophos techs I've worked with can see, there are no dropped packets between the phones and the PBX. The phones work for like 30 seconds before rebooting, saying they can't find the PBX.

    I mentioned the firmware version because, again as far as I can see, that is the only difference between the two UTMs that I have. I'm not sure when the one was upgraded to the newer version, as I've only been at this job for 3 months, but they were working my entire time here up until a week ago.

  • you can check the date of the auto-backup created while system-upgrade.

    So you can compare if upgrade and phone-problems match.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • Looks like the dates might line up. Is there an easy to roll back firmware version? I'm still fairly new to Sophos devices. I click on the green restore arrow, then it logs me out after a minute but the firmware version stays the same. Thank you for taking the time to reply, I appreciate it.

  • Hi and welcome to the UTM Community!

    Does #1 in Rulz (last updated 2021-02-16) help?  Does the IPsec log indicate any problems with the tunnel?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Thanks for your reply. From what I and the 4 or 5 Sophos techs that I've been working with can see, there doesn't seem to be any issues with traffic going over the IPsec tunnel.The phones work fine for about 30 seconds, then they lose connection to the PBX. But I'm pretty sure the IPsec tunnel has to be the issue so I gave all the logs and packet captures to Sophos and waiting on a response from there level 2 techs.