Site to site VPN - remote handset

[davidiwharper]

Hello all and happy new year

I'm trying to get a handset up and running over a site-to-site VPN.

The IP address of the SAIL box is 192.168.200.20, with the gateway/router on the main network being 192.168.200.1.

The IP address of the handset is 192.168.250.107 (DHCP) with the gateway/router on the remote client network being 192.168.250.1.

(phone) 192.168.250.107 <--> 192.168.250.1 <--[VPN tunnel]--> 192.168.200.1 <--> 192.168.200.20 (SAIL)

I've added matching rules into the SAIL firewall for the network 192.168.250.0/24 (copied from net$LAN), and as a result provisioning works fine, with the handset reaching out over the VPN and getting its config. However, when the SIP account goes to register, the handset (a Yealink) shows "Registration failed". No relevant events that I can see are showing up in the SAIL logs (although maybe I'm not looking in the right place?). I can confirm that I can ping the handset over the VPN from the main site.

Does anyone have any suggestions about what might be going wrong and how I can troubleshoot further?

Many thanks!
David

[sysadmin]

Have you added the vpn subnet as a "localnet" address in sark_sip_localnet.conf?

[davidiwharper]

Ahhh... no! Will try and report back.