Nothing changed, so I'd say it's not the FreePBX firewall. But to eliminate that, I temporarily shut that firewall off and rebooted the phone. It's possible that it could have been the firewall from FreePBX, but it doesn't make sense that the firewall rules would disable TFTP, since it's how it manages firmware and settings updates to the phones (at least the ones that don't use an https interface). If it were blocking TFTP requests, then the phone should not have been able to connect to the pfSense TFTP Server. The switch is a 48 port ubiquiti gen 2 switch (US-48-500). If it were the switch, then my pings from the FreePBX box should not be successful. I'm both a pfSense and freePBX newbie, so I'm probably missing a simple step but I'm braindead on what to try my initial thought was the same, but here's where I'm confused. My gut tells me this is a firewall issue, even though they are on the same LAN and network rules shouldn't be affecting them.
I've banged my head on this for a week and can't figure out what I might be doing wrong or how to possibly diagnose it. Also, a NetScan from FreePBX doesn't show the phones on the network, although they do successfully ping from that machine's terminal. Doing a packet capture doesn't appear to capture any attempt by the phones to make a connection - just the initial DHCP assignment. I'm able to ping the phones from the FreePBX terminal. If I enable verbose logging on the TFTP Server, I can see attempts I make from my vpn machine working perfectly, but it shows no attempt by the phones. However, the logs on the phone show a timeout connecting to the TFTP Server.ĭoing a manual connection attempt from my VPN machine (via pfSense) shows that the TFTP Server on the FreePBX is active. However, if I assign my freePBX server as the TFTP Server in option 66/150, my phones do not appear to connect and configure themselves.Ĭhecking the phone's web interface shows that it is getting correct DHCP information (good IP address, and proper TFTP Server address). If I assign pfSense as the TFTP Server and define it as option 66/150, my phones (example 10.10.3.11 in this case) will connect and download the current firmware (uploaded through the TFTP module).
0 kommentar(er)
