Avaya 46xx phones not registering over ipsec vpn

[singh724]

dear all,

i have AVAYA IPO 500V2 in my HQ office which is kept behind a Fortinet firewall. I have a PPOE connection in my Fortinet Firewall and i have connected one port of AVAYA IPO directly with the firewall. i have around 10 IP phones working in my HQ office.
Now i have one branch office where i have also kept one Fortinet firewall and i have a public static IP there at my branch office and i have an always up IPSEC VPN established between the sites and i can ping my IPO kept in HQ from there as well. i have connected one POE switch directly with the fortinet unit and in that POE switch i have connected some 4602 IP phones but they are not getting registered with the IPO.
Okay now what i am giving input to the IP phone kept at branch site is:-
ip address:- 0.0.0.0(for DHCP)
call server IP:- ip of my IPO kept at HQ.
router IP:- ip of my IPO kept at HQ.
call srver port:- 1714

in my firewalls, i have done every possible IPV4 policies and have done network address translations on both sides so as to change the IP addresses on respective netwroks. also i have opened every possible TCP/UDP ports on the firewall units as well. i guess i am missing something on my HQ AVAYA IPO unit which is not letting the phones at branch sites to register..

please help if possible. every sort of help will be really appreciated.

thanks in advance.

Anshuman Singh
+971 555012936

[zakabog]

ip address:- 0.0.0.0(for DHCP)
call server IP:- ip of my IPO kept at HQ.
router IP:- ip of my IPO kept at HQ.
call srver port:- 1714

Your router is how the phone reaches any other network besides the local network, you can't set that to the IP address of the IP Office. Set it to 0.0.0.0 and let it use DHCP to get that.

[singh724]

thank you very much for your reply Zakabog.

can you please brief me or give me some bullet points as if what to do on the IPO to make the phones register. i want to match my configurations with your bullet points and see if i am not missing something.
i am attaching my current running config file of HQ IP office.

thanks in advance.
anshuman singh
+971 555012936
[email protected]

[zakabog]

Looks like you already have IP phones and licenses. Just plug the phone in, make sure it can get across the VPN to the IP Office, and log it in. As long as you have a spare license and an extension number for it to use you should be able to log it in.