Configuring an NEC SV8100 VOIP Phone and a Sonicwall TZ170

Here are the steps necessary to allow connectivity to an NEC VOIP Phone through a Sonicwall TZ170:

1. NEC SV8100.
1. Verify that the Default Gateway is set to the correct IP address. This is typically the LAN Address of the TZ170.
2. Verify that the Outside IP address matches the Physical WAN Address of the TZ170.
2. Sonicwall TZ170
1. You must use the Enhanced version of the OS. The Standard Firmware will not work. This is due to the fact that the Outside IP address of the SV8100 must be forwarded to three different IP addresses based on the UDP Port number. This is only possible with the Enhanced OS.
2. Under the VOIP Tab, verify that all of the checkboxes are unchecked.
3. In this example the NEC SV8100 has the following internal addresses:
1. 192.168.1.200 Signal
2. 192.168.1.201 Voice1
3. 192.168.1.202 Voice2
4. The SV8100 has only one physical address (192.168.1.200) and the other IP address (192.168.1.201 and 192.168.1.202) are virtual addresses.
5. Create the following Services.
1. NECSignal UDP 5080-5081
2. NECVoice1 UDP 10020-10051
3. NECVoice2 UDP 10052-10083
6. Create the following NAT Rules. You must set the Outside Address of the Phone switch to the same address as the WAN Primary IP on the Sonicwall. Make sure to create reflexsive rules for both inbound and outbound traffic. Using a valid IP address other than the WAN Primary IP will not work!
1. From WAN Primary IP to 192.168.1.200 NAT Service Ports NECSignal
2. From WAN Primary IP to 192.168.1.201 NAT Service Ports NECVoice1
3. From WAN Primary IP to 192.168.1.202 NAT Service Ports NECVoice2
7. Create the following rules on the Firewall.-
1. From Any to WAN Primary IP Service NECSignal.
2. From Any to WAN Primary IP Service NECVoice1.
3. From Any to WAN Primary IP Service NECVoice2.
3. IP Phone Firewall Configuration
1. Configure port fowarding from the WAN interface of the firewall to the internal IP address of the phone on the following ports:
1. Signal UDP 5060-5061 to the Internal IP Address of the phone.
2. Voice UDP 3462-3463 to the Internal IP Address of the phone.

Troubleshooting

If the IP phone cannot connect to the SIP server:

1. Verify that all checkboxes are cleared on the VOIP configuration.
2. Verify you have the correct default gateway and external IP address on the SV8100. If you have to change these settings, you must bounce the SV8100.
3. Reset the Firewall where the SV8100 is located.
4. Reset the Firewall and IP phone.

If you can connect to the SIP server, but you cannot hear anything:

1. Verify you have are SV8100 has an external NAT of the WAN IP address of the TZ170.
2. Verify all of your Services, NATs and Rules are correct.
3. Check the TZ170 log for any dropped packets.