zero touch provisioning & firewall

[gareth20202]

Hi all,

How does the zero-touch provisioning redirect service work? Ports etc?

We recently installed some phones into a school and the phones would not download the config. Removed them from the site on a normal internet connection and they provisioned fine.

Thanks

[complex1]

(10-07-2021 10:40 PM)gareth20202 Wrote:  Hi all,

How does the zero-touch provisioning redirect service work? Ports etc?

We recently installed some phones into a school and the phones would not download the config. Removed them from the site on a normal internet connection and they provisioned fine.

Thanks

Hi,

As far as I know, is there no difference between a zero-touch provisioning and a "normal" provisioning, except the way you do it... provision the phone.
Because you can provision the phone at home and not at school, I guess your school router or firewall causes the issue.
Make sure the SIP ALG feature of the school router is disabled and try again.

[Phil2021]

(10-07-2021 10:40 PM)gareth20202 Wrote:  Hi all,

How does the zero-touch provisioning redirect service work? Ports etc?

We recently installed some phones into a school and the phones would not download the config. Removed them from the site on a normal internet connection and they provisioned fine.

Thanks

It is all done from the client (phone) so firewalls shouldn't be an issue as they typically allow all outgoing connections. As far as I know the provisioning usually takes place using http/https so normal web ports 80/443.

I suspect with a school they have outgoing connections restricted to stop in appropriate sites being viewed and they might even work from a whitelist, and only allow certain known domains or sites to be viewed, so you would need to check with whoever controls that aspect of the network.