Mitel Phones via VPN Failing To Register ICMP udp port microsan unreachable

Hello,

Some of the hardware phones on our network are failing to register however other phones register properly and are on the same template and network range. The network range is a private IP range and has been added to local networks. It traverses back to the phone server via our VPN. We have a mix of mitel 5330 and 5360 at the site and some of them register but others will not.

I have performed TCP dump during the bootup of a working phone and a non-working phone and can attach the .pcap files for review. The error on the non-working phone seems to be:

tcpdump -r 5327.0833am.pcap |grep 10.110.1.2 reading from file 5327.0833am.pcap, link-type EN10MB (Ethernet)

08:34:22.453672 IP 10.110.1.2.49156 > phones.cooley.edu.microsan: UDP, length 46 08:34:22.453715 IP phones.cooley.edu > 10.110.1.2: ICMP phones.cooley.edu udp port microsan unreachable, length 82

From a working phone:

tcpdump -r 3701.0843am.pcap | grep 10.110.1.11 reading from file 3701.0843am.pcap, link-type EN10MB (Ethernet)

08:44:09.651907 IP phones.cooley.edu.5160 > 10.110.1.11.sip: SIP: OPTIONS sip:[email protected]:5060 SIP/2.0 08:44:10.151718 IP phones.cooley.edu.5160 > 10.110.1.11.sip: SIP: OPTIONS sip:[email protected]:5060 SIP/2.0

Wondered if anyone has any insight or tips what to try or logs to review.

Thanks!

Find attached the packet captures I took using TCP dump. I was able to login to the phone web interfaces via IP and get the registration status as well.

ext 5327
MAC 08000F75D347
IP 10.110.1.2

Registration Status:
Entry Method UserId URL Expires(Sec) SIPcode Status
1 REGISTER 5327 sip:10.9.1.226:5160 7200 0 Proceeding
2 SUBSCRIBE 5327 sip:10.9.1.226:5160 7200 0 Proceeding

ext 3701
MAC 08000F9397FC
IP 10.110.1.11

Registration Status:
Entry Method UserId URL Expires(Sec) SIPcode Status
1 REGISTER 3701 sip:10.9.1.226:5160 7199 200 Confirmed
2 SUBSCRIBE 3701 sip:10.9.1.226:5160 7200 200 Confirmed

pcaps.tgz (1.5 MB)

To update on the situation we replaced the phones (remove MAC address association via endpoint manager, replace with another phone, factory default the phone and set it to SIP) and this would bring the phone online. Now over the weekend it seems a number of phones have lost registration once more. I can shut/no shut the switch port to reboot them and I see them pull the config via tftpd but they don’t complete the registration process.

Anyone have any tips?

-Jordan

So I discovered if I turn off the phone for seems to be about 2 hours (shut down the switchport) and then bring it back up they register! The maximum expiration time for the extensions seems to default to 7200 seconds for us. I tried lowering the value and the minimum and rebooting the phone but it did not seem to take the new values. I still have my support case with Sangoma and I am hoping to determine a more elegant fix.