

Therefore, I have never seen a switch ever block a layer-4 port at any time at any time in my career or anyone else mention it to me. Victron multiplus problemsĪlthough my understanding of switches as that of layer-2 and sometimes, layer-3 devices, TCP and UDP are typically layer-4 entities.

So now we seem to be down to the server, the ShoreTel implementation on the server, and the switch as our potential cause. This interface also has no history of bouncing. The cable seems to also be eliminated as we see other traffic traverse the interface toward the ShoreTel DVS with no errors, collisions, or drops. That leaves only the connected switch which is connected to both, the server and the Firewall inside interface and the cable as our guilty parties. I think we pretty much eliminated the firewall as our culprit, and pretty much everyone involved in this conundrum seems to agree. However, when I attempt to telnet to the server in question via portit fails so swiftly that I don't see anything as far as a failed connection. Similarly, I can telnet to it via various other ports, but not from ports or I can, however, telnet to the other servers via portand I can see the successful connections on the firewall. I can see connections on other ports between the ShoreTel servers on other ports. The only specific flag I see in a firewall log message is the "TCP Reset-I" flag, which research suggests means that the connection is reset from the inside host. We see bidirectional traffic between all subnets in question over these tunnels and packet captures have shown some nominal TCP resets. Our support company, Cisco, and myself have all confirmed we are not blocking anything on the firewalls, and even packet tracers suggest as such. We do not filter any ports over these tunnels. We can't get this server to communicate with any other of our offices, including the HQ site via ShoreTel proprietary ports and ShoreTel insists our network is preventing it. Our latest instance has occurred in our Milan office where we are attempting to install a new DVS server associated with our VoIP deployment. We currently have it deployed at several of our locations, but each time we want to add something new to the network, we often hit a snag. We've been having a lot of trouble with getting various ShoreTel equipment to work.
