Description

We have replaced a Cisco ASA Firewall with a new Juniper SRX300, we had pre-existing VoIP vendor working with two separate VLANs, one (VLAN X) for VoIP Management (PBX, Gateways, Accounting Server), another (VLAN Y) for IP Phones.

set interfaces ge-0/0/x unit X vlan-id X
set interfaces ge-0/0/x unit X family inet address 192.168.0.1/24

set interfaces ge-0/0/y unit Y vlan-id Y
set interfaces ge-0/0/y unit Y family inet address 192.168.21.1/27

There are security policies configured correctly permitting the traffic.

The IP Phone gets registered from VLAN X to PBX on VLAN Y, but when a call rings, there is no audio between the IP Phone on VLAN X and VoIP gateway on VLAN Y . We got another IP Phone registered on VLAN Y, this phone gets audio from VoIP Gateway on the same VLAN, but it doesn't with IP Phone on VLAN X.

 

Symptoms

*SRX300
*Junos OS 15.1X49-D150.2
*Security flow shows the sessions being created correctly for both H323 port 1720 and RSA port 1719 ALGs
Flow traceoptions dont show drops
 

Solution

Problem resolved upgrading to version 23.4R2-S2

Modification History

2024-09-13 : Article Created