Hi Dave,
Just noticed this thread, and sorry it looks like you haven’t got a reply. Maybe you have been working with your reseller which is always the best way to get a fairly complex connectivity related issue like this resolved as they will hopefully know a bit about your network topology and me able to advise on more specifics.
Both of the keepalive/monitor options on the PBX appliance (global, or per phone) simply turn on monitor probes for the affected handsets. This causes us to send a SIP OPTIONS ping from the appliance to the device on an adaptive basis. We expect to get back either an OPTIONS response or even just a 404 (SIP devices that don’t understand OPTIONS should and generally do send a 404 response which is perfectly good enough to indicate that it is there).
Using monitor/keepalive is a great way to detect intermittent connectivity issues as you will then get log entries when a device doesn’t respond (UNAVAILABLE) or takes a long time to respond (LAGGED). As a side effect, it can also affect some kinds of network errors relating to one way firewall state timing out, as the periodic monitor probes in effect can keep some state alive even if your firewall is not configured to pass packets correctly and therefore cause things to work (for a while) that are otherwise broken. We wouldn’t recommend however that you use keepalives as a sticking-plaster for firewall configuration changes for a few reasons I can think of:
- We can only send OPTIONS pings to devices once they are registered with us and we therefore know their IP address. It won’t help phones whose registrations are failing.
- The rate at which options pings are sent is not a defined period of time, but is adaptive. They may be sent less frequently when the device has been stable in the “UP” or “DOWN” state for a while.
Even if they help the symptoms therefore, they are unlikely to be a complete solution as devices will still be able to “stick” in an unregistered state in some circumstances.
The best way to resolve this is to examine the packet filtering rules on any devices between the phones and appliance and/or trace the SIP packets on the network to determine where/how they are being dropped or mangled (e.g. SIP ALG enabled?) and then resolve that. Turning on phone monitor to keep track of any phone drop outs can then help work out if you still have a problem.
Let us know how you get on.