Hi Stephanie,

I was never a fan of the BSR222 and have since abandoned it for the Juniper SRX Branch series where I have about 25 remote contact center agents working very reliably every day. If you are reporting that this happens to all your users I would probably start with the bandwidth at your main office. What are you terminating the tunnels on in the main office? I would look at that side of the equation. In general if the users have 10Mbps/2Mbps (down/up) then you should be go so long as they are not connected via wireless and don’t have too many kids at home sucking away the bandwidth.

What type of ICMP ping times do you get when pinging the Nortel i2004 from the main office? You should be getting around 20-40ms for a reliable call with good quality.

Good Luck!

My aim is to get this BSR222 to allow a biometric clock traffic to pass through a specific port.

I called Avaya/Nortel desk help for assistance and nothing as yet.

Hi Carlos,

If you replace the IP phone with your laptop or PC (don’t forget to change the IP address if you are using static IP addressing) can you ping main office CS1000?

I would start with that testing first.. make sure you have connectivity first, then worry about the IP telephony component.

Good Luck!

Hi Mike,

It’s possible to manage the BSR222 from the public interface if it’s been configured to allow that functionality ahead of time. You have two options available if you want to remotely connect an IP deskphone to your BCM50, 1) you can purchase the 1100 series IP phone along with a license for the built-in VPN client (requires a Nortel VPN router on the main office side) or 2) you can use equipment to create a branch to branch VPN tunnel such as what you are doing with the BSR222. You can use a dynamic IP address on the branch office site (this is called an Aggressive Mode tunnel) but the main office side needs a static IP address.

Good Luck!

Hi Philip,

The BSR252 has a built-in ADSL2+ interface for connecting to DSL networks. I would suggest you refer to the documentation. I haven’t personally touched these devices in years now but they were pretty straight forward with an easy to understand web GUI. I’m not sure which VPN client software they might use for end-users.

Good Luck!

I need to configure client dialup VPN connection on 3x BSR252, can you please give me some information how to configure? Which vpn client do i need for windows Vista?
I have some experience with Fortigate, i did the same steps but it doesn’t work.

Thnx in advanced for a quick answer.

Philip

Hi Richard,

I believe you can run 5 tunnels on the BSR222, you can probably look it up in the manuals on Nortel’s website if you want to be sure.

You mention the word “broadcast”, is it really a broadcast packet? You should be able to utilize NTP via Unicast packets without any issue. I maintain 2 centralized NTP servers for my entire organization (32,000+ ports). The devices that are at the branch office sync their time over the VPN/IPSec tunnel to the centralized NTP servers. It works great and keys the time sync’d across every system (Windows, MacOS, Linux, etc).

I will warn you that I’ve seen very odd behavior from BES50 switches. We purchased 2 of them for testing and decided against purchasing them because we had all sorts of interoperability issues with different devices. Even though you mention you’re physically connected to the BSR222 you could try removing the BES50 and see if that resolves your problem. The LAN ports of the BSR222 should act just like a switch, although you may want to disable IGMP since I believe it’s enabled by default.

Good Luck!

we have two offices.
HQ has BES50 with digital phones and a bsr222 to tunnel over to the branch.

the branch has pcs sharing the liones with the voip phones using 1 bsr 222 and 2 poe nortel switches.

VZ implmented the system, dealing with them was a nightmare, and they had no 911 solution for this setup, enter Mark Flecther whom assisted us to force VZ and NT engineers to create the solution which is now implemented.

questions:
how many vpn connections at once can the 222 accomadate? and two, I have a time clock program that broadcasts to update the server, but the braodcast does not seem to allow for the the server to reply back to the client properly through the 222’s even though I have attached both machines directly to the 222’s, what could be the issue here?

Hi Jamal,

The default username and password are included in the post above.

Good Luck!

i want to configure it please help me

i don’t know what is the default username and password

Jamal
dubai

Hi Janie,

You should leave the firewall enabled (it’s enabled by default). The firewall really only comes into play when public Internet devices try to access your BSR222. It shouldn’t have any affect on tunnel traffic in it’s out-of-the-box state. I would advise you to change the password at a minimum, it’s best practice. Just remember to document the username and passwords that you’ve configured the moment you change them. If I had a 1$ for everytime someone changed a password only to forget the password they used the following day. Assuming that your Branch Office Tunnels (BOTs) and setup properly along with the necessary IP routing you should be able to ping. You don’t have the Windows XP/Vista firewall enabled do you?

Good Luck!

1. Should I enable the firewall for the BSR222 at my remote sites?
2. Should I change the username and passwords that the installer kept (very similar to those listed above)
3. Why can’t I get ping returns from one of my remote sites (but I can ping the BSR222s at all sites)

Thanks,

Janine

The problem is that the Nortel i2004 will always say “Starting DHCP…” never giving you a real understanding of the problem.

Have you configured the phone for partial DHCP?
Have you configured the S1 values?

I’m going to assume that you have the phone configured for Full DHCP, in which case the phone will sit waiting (displaying “Starting DHCP…”) until it receives the all the proper DHCP options even if it has received a DHCP address.

Cheers!

I tried to connect i2004 phone with BSR 222 but the problem is that the phone i2004 can’t take any ip I don’t why although I connect BSR 222 whit laptop and it works..

What problems are you having connecting to the two? The biggest problem I’ve had with the Nortel VPN Router 221 and the Nortel Business Secure Router 222 is the lack of IKE keepalives. On occasion one side of the tunnel will go down but the other side will remain active. I never have had a problem using the “fully featured” Nortel VPN Router 17000, 1100, 1050 or 1010 since they all run the same software and support IKE keepalives. The “Control Ping” feature of the 221/222 generally keeps the tunnel stable by sending traffic across of it. I’ve had to use the “Control Ping” feature even when I set both sides for “Nailed Up”. I can post some screen shots if you’re completely lost. Let me know.

Thanks for the comment!

I’m trying to establish a branch office tunnel between a BSR 222 and a VPN Router 1010 and wonder if you have documentation that you used on the 1700 that could assist me with this issue.

Thanks so much.
-Leandro