Installed new router and having issues

We recently installed a new router at our network and changed a few things that we didn’t expect to cause issues with our phone systems. We moved our freepbx server and phones from 10.187.253.xxx to 10.0.3.xxx. So far everything has been working good for the most part however, now I’m getting a complaint from one of the users that their phone seems to be missing calls. When I look in the log, it shows this phone, and a lot of the other phones saying “ext xxx changed state to lagged/ unreachable.” Is there anything I need to change on freepbx or with our router? Before we were using a dd-wrt’ed Linksys wrt54G and we moved to a Ubiquiti er-5-poe. Willing to try anything at this point that doesn’t involve reinstalling freepbx from scratch. I’m not on site but will be there for most of the day later.

You need to explain much more about your network. If the FreePBX server (you didn’t mention version or how it was installed) and the er-5-poe are in the same network 10.0.3.0/24 then you are only using the switch ports on the er-5-poe as the server and phones are in the same network.

Please explain further.

Sorry. really sick today to so my mind isn’t exactly in the best mindset. Currently, our server is running version 2.10.1.10. I’m confused as to what you mean by how freePBX was installed. We installed it from the distro CD on this website and setup the phones from there using the bulk extension feature. Also most of our phones are a mix of Cisco 7910/7912’s and a Yealink SIP-t28P for our front desk receptionist.
For the network side of things. We moved all of our phones on to a VLAN to create separations between guests and staff.
The following VLANs exist

VLAN 100 - 10.187.253.0/24 (STAFF)
VLAN 300 - 10.0.3.0/24 (PHONE)
VLAN 400 - 10.0.4.0/24 (GUEST)
VLAN 500 - 10.0.5.0/24 (MEDIA)

We have the Ubiquiti EdgeRouter PoE in place and the vlans are created and assigned to eth2 on the port. We then have an unmanaged gigabit switch which then has lines running to 3 cisco managed switches (catalyst 2950 series)

All cisco switches know about all VLANs. The phones are mainly isolated onto one switch (with the exception of one phone, which will be moved soon). The phone server sits on the same switch as the rest of the phones.

We are using Static IP Mapping to assign the IP addresses to the phones.

And here is a screenshot of our locally allowed ports for the phones

Also, As far as I’ve been told, there are no issues with outgoing calls or incoming calls.

Sorry, When i mentioned incoming calls, I mean to FreePBX to the IVR or to voicemail.

First, let me explain “how it was installed”. Our distro is a relatively new creation. There are also or 5 other distro’s. FreePBX by itself is distributed as a compressed tar file with an installer. People run Asterisk and FreePBX on everything from FreePBX, Debian to Redhat variants. By no means was that a stupid question.

Now on to your still less than clear explanation. You say you come out to an unmanaged switch. An unmanaged switch will not respect 802.1q VLAN tags so to me that means you have all your LAN’s in a single collision domain and not in discrete VLAN’s?

One would think you would have a trunk port (.1Q tagged) from the gig port on the router to the gig port on the switch then stack the Cisco’s via the other Gig port (trunked of course).

The switchports should also be in trunked mode as the phone will untag the data VLAN and bridge it to the PC port.

Please explain (drawings are nice) your network topology.

Also please post the network section of asterisk command ‘sip show settings’ and the output of ‘sip show peers’

Please port the output of the Linux shell command ‘route’

Sorry for the lack of explanation.

You are correct that it is in a single collision domain coming out of the router. We eventually plan to depreciate the gig-e switch, we just ran into another issue with the router that we quickly implemented it to prevent issues.

The 3 cisco switch we have are directly connected to the gigabit switch, there are no interconnects between the switches. The two 24 port switches are limited because they have no gigabit ethernet shots.

If you need more info please do not hesitate to ask. I have also attached a visual representation of the network. Please work with us a little. We both have small amounts of experience in the networking field and are donating all of our time to this non-profit. Thanks for all of the help.

I will as have the other three things you asked for in the next post since I am not at the building right now.

“sip show peers” outputs the following

Network QoS Settings:

IP ToS SIP: CS3
IP ToS RTP audio: EF
IP ToS RTP video: AF41
IP ToS RTP text: CS0
802.1p CoS SIP: 4
802.1p CoS RTP audio: 5
802.1p CoS RTP video: 6
802.1p CoS RTP text: 5
Jitterbuffer enabled: No

Network Settings:

SIP address remapping: Disabled, no localnet list
Externhost: <none>
Externaddr: (null)
Externrefresh: 10

sip show peers outputs 

Name/username              Host                                    Dyn Forcerport ACL Port     Status
101/101 10.0.3.101 D A 5062 OK (25 ms)
102/102 10.0.3.25 D A 5060 OK (17 ms)
103/103 10.0.3.103 D A 5060 OK (17 ms)
104/104 10.0.3.104 D A 5060 OK (15 ms)
105/105 10.0.3.105 D A 5060 OK (16 ms)
106/106 10.0.3.106 D A 5060 OK (18 ms)
107/107 10.0.3.107 D A 5060 OK (16 ms)
108/108 10.0.3.108 D A 5062 OK (52 ms)
109/109 10.0.3.109 D A 5060 OK (19 ms)
110/110 10.0.3.110 D A 5060 OK (14 ms)
111 (Unspecified) D A 0 UNKNOWN
112/112 10.0.3.112 D A 5060 OK (15 ms)
113/113 10.0.3.113 D A 5060 OK (18 ms)
114/114 10.0.3.114 D A 5060 OK (12 ms)
115/115 (Unspecified) D A 0 UNKNOWN
116 (Unspecified) D A 0 UNKNOWN
117 (Unspecified) D A 0 UNKNOWN
118 (Unspecified) D A 0 UNKNOWN
119 (Unspecified) D A 0 UNKNOWN
120 (Unspecified) D A 0 UNKNOWN
trunk01/73413387 208.73.146.95 N 5060 Unmonitored
21 sip peers [Monitored: 13 online, 7 offline Unmonitored: 1 online, 0 offline]

The extensions that say unknown/unspecified are currently not in use.

Also, route outputs

[root@localhost ~]# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.3.0        *               255.255.255.0   U     0      0        0 eth0
link-local      *               255.255.0.0     U     1002   0        0 eth0
default         10.0.3.1        0.0.0.0         UG    0      0        0 eth0
[root@localhost ~]#