|
Home > Archive > Voice over IP Cisco > April 2006 > IP-Phones NAT problem
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IP-Phones NAT problem
|
|
| Mounir Mohamed 2006-04-08, 6:59 pm |
| Dear All,
I have 2 IP-phones connected to C2621 with the below configuration the
problem that, the phones used 10.0.0.25 and 10.0.0.26 and both is NATED on
the 2600 router, also both registered in international SIP server but thay
can not make calls even between each other, But when i trying to using
static NAT (Private--> Real IP) everything working fine but i can not
deticate IP for each phone and now the problem due to NAT so anybody could
help in that, HOw can i use NAT but in the same time the phones working
because it's seems that the NAT port changes it the reason behind the
problem
Seef-HQ#sh run
Building configuration...
Current configuration : 1596 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Seef-HQ
!
logging buffered 4096 debugging
enable secret 5 $1
!
ip subnet-zero
ip cef
!
!
ip name-server 195.219.14.20
ip name-server 64.85.63.6
!
!
!
voice rtp send-recv
!
voice service voip
sip
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
!
!
!
interface FastEthernet0/0
ip address 217.X.X.X 255.255.255.240
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.0.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
ip nat inside source list 10 pool LAN overload
ip nat inside source static tcp 10.0.0.113 80 interface FastEthernet0/0 9999
ip nat inside source static 10.0.0.4 217.X.X.Y
ip nat inside source static 10.0.0.3 217.X.X.Z
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 217.X.X.X
!
!
access-list 10 permit 10.0.0.0 0.0.0.255
!
!
!
!
!
!
dial-peer voice 1 voip
session protocol sipv2
session target ipv4:67.X.X.X
session transport udp
!
sip-ua
nat symmetric role active
nat symmetric check-media-src
retry invite 2
retry response 2
retry bye 2
retry cancel 2
sip-server ipv4:67.X.X.X
--
Best Reagrds,
Mounir Mohamed
| |
| Wes Sisk 2006-04-08, 6:59 pm |
| all voip protocols embed the L3 address in the signaling protocol.
You will need a NAT device that supports a 'fixup' mechanism for
those protocols.
I know the PIX does.
/Wes
On Apr 6, 2006, at 8:21 AM, Mounir Mohamed wrote:
Dear All,
I have 2 IP-phones connected to C2621 with the below configuration
the problem that, the phones used 10.0.0.25 and 10.0.0.26 and both is
NATED on the 2600 router, also both registered in international SIP
server but thay can not make calls even between each other, But when
i trying to using static NAT (Private--> Real IP) everything working
fine but i can not deticate IP for each phone and now the problem due
to NAT so anybody could help in that, HOw can i use NAT but in the
same time the phones working because it's seems that the NAT port
changes it the reason behind the problem
Seef-HQ#sh run
Building configuration...
Current configuration : 1596 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Seef-HQ
!
logging buffered 4096 debugging
enable secret 5 $1
!
ip subnet-zero
ip cef
!
!
ip name-server 195.219.14.20
ip name-server 64.85.63.6
!
!
!
voice rtp send-recv
!
voice service voip
sip
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
!
!
!
interface FastEthernet0/0
ip address 217.X.X.X 255.255.255.240
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.0.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
ip nat inside source list 10 pool LAN overload
ip nat inside source static tcp 10.0.0.113 80 interface
FastEthernet0/0 9999
ip nat inside source static 10.0.0.4 217.X.X.Y
ip nat inside source static 10.0.0.3 217.X.X.Z
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 217.X.X.X
!
!
access-list 10 permit 10.0.0.0 0.0.0.255
!
!
!
!
!
!
dial-peer voice 1 voip
session protocol sipv2
session target ipv4:67.X.X.X
session transport udp
!
sip-ua
nat symmetric role active
nat symmetric check-media-src
retry invite 2
retry response 2
retry bye 2
retry cancel 2
sip-server ipv4:67.X.X.X
--
Best Reagrds,
Mounir Mohamed
________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
| |
| Mounir Mohamed 2006-04-08, 6:59 pm |
| Dear Wes,
Could you clarify more What is the FIXUP
Bet Reagrds,
Mounir Mohamed
On 4/6/06, Wes Sisk <wsisk@cisco.com> wrote:
>
> all voip protocols embed the L3 address in the signaling protocol. You
> will need a NAT device that supports a 'fixup' mechanism for those
> protocols.
>
> I know the PIX does.
>
>
> /Wes
>
> On Apr 6, 2006, at 8:21 AM, Mounir Mohamed wrote:
>
> Dear All,
>
>
> I have 2 IP-phones connected to C2621 with the below configuration the
> problem that, the phones used 10.0.0.25 and 10.0.0.26 and both is NATED on
> the 2600 router, also both registered in international SIP server but thay
> can not make calls even between each other, But when i trying to using
> static NAT (Private--> Real IP) everything working fine but i can not
> deticate IP for each phone and now the problem due to NAT so anybody could
> help in that, HOw can i use NAT but in the same time the phones working
> because it's seems that the NAT port changes it the reason behind the
> problem
>
> Seef-HQ#sh run
> Building configuration...
>
>
> Current configuration : 1596 bytes
> !
> version 12.3
> service timestamps debug datetime msec
> service timestamps log datetime msec
> service password-encryption
> !
> hostname Seef-HQ
> !
> logging buffered 4096 debugging
> enable secret 5 $1
> !
> ip subnet-zero
> ip cef
> !
> !
> ip name-server 195.219.14.20
> ip name-server 64.85.63.6
> !
> !
> !
> voice rtp send-recv
> !
> voice service voip
> sip
> !
> voice class codec 1
> codec preference 1 g711ulaw
> !
> !
> !
> !
> !
> !
> !
> no voice hpi capture buffer
> no voice hpi capture destination
> !
> !
> !
> !
> !
> !
> interface FastEthernet0/0
> ip address 217.X.X.X 255.255.255.240
> ip nat outside
> duplex auto
> speed auto
> !
> interface FastEthernet0/1
> ip address 10.0.0.1 255.255.255.0
> ip nat inside
> duplex auto
> speed auto
> !
> ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
> ip nat inside source list 10 pool LAN overload
> ip nat inside source static tcp 10.0.0.113 80 interface FastEthernet0/0
> 9999
> ip nat inside source static 10.0.0.4 217.X.X.Y
> ip nat inside source static 10.0.0.3 217.X.X.Z
> ip http server
> ip classless
> ip route 0.0.0.0 0.0.0.0 217.X.X.X
> !
> !
> access-list 10 permit 10.0.0.0 0.0.0.255
> !
> !
> !
> !
> !
> !
> dial-peer voice 1 voip
> session protocol sipv2
> session target ipv4:67.X.X.X
> session transport udp
> !
> sip-ua
> nat symmetric role active
> nat symmetric check-media-src
> retry invite 2
> retry response 2
> retry bye 2
> retry cancel 2
> sip-server ipv4:67.X.X.X
>
>
> --
> Best Reagrds,
> Mounir Mohamed
> ________________________________________
_______
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
>
--
Best Reagrds,
Mounir Mohamed
| |
| Voll, Scott 2006-04-08, 6:59 pm |
| fixup is a command on the pix firewall that works on a protocol to make it work correctly.
scott
________________________________
From: cisco-voip-bounces@puck.nether.net on behalf of Mounir Mohamed
Sent: Thu 4/6/2006 10:18 AM
To: Wes Sisk
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] IP-Phones NAT problem
?
Dear Wes,
Could you clarify more What is the FIXUP
Bet Reagrds,
Mounir Mohamed
On 4/6/06, Wes Sisk<wsisk@cisco.com> wrote:
all voip protocols embed the L3 address in the signaling protocol. You will need a NAT device that supports a 'fixup' mechanism for those protocols.
I know the PIX does.
/Wes
On Apr 6, 2006, at 8:21 AM, Mounir Mohamed wrote:
Dear All,
I have 2 IP-phones connected to C2621 with the below configuration the problem that, the phones used 10.0.0.25 <http://10.0.0.25/> and 10.0.0.26 <http://10.0.0.26/> and both is NATED on the 2600 router, also both registered in international SIP server but thay can not make calls even between each other, But when i trying to using static NAT (Private--> Real IP) everything working fine but i can not deticate IP for each phone and now the problem due to NAT so anybody could help in that, HOw can i use NAT but in the same time the phones working because it's seems that the NAT port changes it the reason behind the problem
Seef-HQ#sh run
Building configuration...
Current configuration : 1596 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Seef-HQ
!
logging buffered 4096 debugging
enable secret 5 $1
!
ip subnet-zero
ip cef
!
!
ip name-server 195.219.14.20 <http://195.219.14.20/>
ip name-server 64.85.63.6 <http://64.85.63.6/>
!
!
!
voice rtp send-recv
!
voice service voip
sip
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
!
!
!
interface FastEthernet0/0
ip address 217.X.X.X 255.255.255.240 <http://255.255.255.240/>
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.0.0.1 <http://10.0.0.1/> 255.255.255.0 <http://255.255.255.0/>
ip nat inside
duplex auto
speed auto
!
ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
ip nat inside source list 10 pool LAN overload
ip nat inside source static tcp 10.0.0.113 <http://10.0.0.113/> 80 interface FastEthernet0/0 9999
ip nat inside source static 10.0.0.4 <http://10.0.0.4/> 217.X.X.Y
ip nat inside source static 10.0.0.3 <http://10.0.0.3/> 217.X.X.Z
ip http server
ip classless
ip route 0.0.0.0 <http://0.0.0.0/> 0.0.0.0 <http://0.0.0.0/> 217.X.X.X
!
!
access-list 10 permit 10.0.0.0 <http://10.0.0.0/> 0.0.0.255 <http://0.0.0.255/>
!
!
!
!
!
!
dial-peer voice 1 voip
session protocol sipv2
session target ipv4:67.X.X.X
session transport udp
!
sip-ua
nat symmetric role active
nat symmetric check-media-src
retry invite 2
retry response 2
retry bye 2
retry cancel 2
sip-server ipv4:67.X.X.X
--
Best Reagrds,
Mounir Mohamed
________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
--
Best Reagrds,
Mounir Mohamed
| |
| Mounir Mohamed 2006-04-08, 6:59 pm |
| The NAT device not PIX it's C2621XM and i'm using POOL so is there is any
workaround to solve the prlblem.
On 4/6/06, Voll, Scott <Scott.Voll@wesd.org> wrote:
>
> fixup is a command on the pix firewall that works on a protocol to make
> it work correctly.
>
> scott
>
> ------------------------------
> *From:* cisco-voip-bounces@puck.nether.net on behalf of Mounir Mohamed
> *Sent:* Thu 4/6/2006 10:18 AM
> *To:* Wes Sisk
> *Cc:* cisco-voip@puck.nether.net
> *Subject:* Re: [cisco-voip] IP-Phones NAT problem
>
>
> ?
> Dear Wes,
>
> Could you clarify more What is the FIXUP
>
> Bet Reagrds,
> Mounir Mohamed
>
>
> On 4/6/06, Wes Sisk<wsisk@cisco.com> wrote:
>
>
>
> --
> Best Reagrds,
> Mounir Mohamed
>
--
Best Reagrds,
Mounir Mohamed
| |
| Hinson, Greg 2006-04-08, 6:59 pm |
| http://www.cisco.com/en/US/products...ducts_implement
ation_design_guide09186a00800fd670.html
Below is an excerpt from this link, and it appears to be related to what
you are trying to accomplish
-Greg
Inspecting Complex Services
Several Internet services use multiple channels to handle the service
control and data communications. For instance, FTP uses one channel to
open initial communications from the client to the server, and the
server opens a separate channel back to the client to send the actual
file transfer traffic. Similarly, H.323 uses one channel for initial
call setup, and other channels are negotiated from the initial
connection to carry the actual streaming media, such as audio traffic in
an IP telephony connection.
The Stateful Inspection engine only needs to see the initiating
connection for these complex services. Subsequent connections for the
session are dynamically opened for the session, based on SPI's scrutiny
of the connection setup. This is usually known as "fixup". If an
outbound ACL is configured on an interface to restrict network access
policy, it must only account for the initiating port. The task of
accommodating the media channels will be handled by Stateful
inspection's fixup. The following command lists the complex services and
their initiating ports that cisco IOS Stateful Inspection can handle:
FWRouter# sh ip port-map
Default mapping: vdolive port 7000 system defined
Default mapping: sunrpc port 111 system defined
Default mapping: netshow port 1755 system defined
Default mapping: cuseeme port 7648 system defined
Default mapping: rtsp port 8554 system defined
Default mapping: realmedia port 7070 system defined
Default mapping: streamworks port 1558 system defined
Default mapping: ftp port 21 system defined
Default mapping: rtsp port 554 system defined
Default mapping: h323 port 1720 system defined
Default mapping: sip port 5060 system defined
Default mapping: mgcp port 2427 system defined
Granular Inspection
Granular Protocol Inspection (GPI), introduced in cisco IOS Software
Release 12.3(14)T, offered complete integration with PAM. Prior to GPI,
a firewall policy was defined by configuring inspection for outbound
TCP, UDP, and ICMP traffic. Inspection was explicitly configured for
specific protocols, such as FTP, H.323, Skinny, Session Initiation
Protocol (SIP) and others that required fixup to watch for and allow
protocol-specific media channels. Common single-connection services such
as POP, Telnet, Microsoft RPC, and other simple protocols were inspected
by the generic capability of TCP, UDP, and ICMP inspection. Using these
generic inspection capabilities is simple to configure, but it limits
Stateful Packet Inspection's granularity-any traffic that was allowed to
leave through a firewall was allowed to return because inspection
created an ACL Bypass entry for that traffic.
GPI allows creation of specific ACL Bypass for only the desired traffic,
as defined by an inspection list consisting of only the protocols that
are explicitly permitted by an organization's Internet/security access
policy.
A complete list of the default services that GPI can inspect is
contained in the appendix at the enof the Stateful Inspection section.
------------------------------------------------------------------------
------------------------------------------------------------------------
-------------------------
From: cisco-voip-bounces@puck.nether.net
[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Mounir Mohamed
Sent: Thursday, April 06, 2006 10:35 AM
To: Voll, Scott
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] IP-Phones NAT problem
The NAT device not PIX it's C2621XM and i'm using POOL so is there is
any workaround to solve the prlblem.
On 4/6/06, Voll, Scott <Scott.Voll@wesd.org> wrote:
fixup is a command on the pix firewall that works on a protocol to make
it work correctly.
scott
________________________________
From: cisco-voip-bounces@puck.nether.net on behalf of Mounir Mohamed
Sent: Thu 4/6/2006 10:18 AM
To: Wes Sisk
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] IP-Phones NAT problem
?
Dear Wes,
Could you clarify more What is the FIXUP
Bet Reagrds,
Mounir Mohamed
On 4/6/06, Wes Sisk<wsisk@cisco.com> wrote:
all voip protocols embed the L3 address in the signaling protocol. You
will need a NAT device that supports a 'fixup' mechanism for those
protocols.
I know the PIX does.
/Wes
On Apr 6, 2006, at 8:21 AM, Mounir Mohamed wrote:
Dear All,
I have 2 IP-phones connected to C2621 with the below configuration the
problem that, the phones used 10.0.0.25 <http://10.0.0.25/> and
10.0.0.26 <http://10.0.0.26/> and both is NATED on the 2600 router,
also both registered in international SIP server but thay can not make
calls even between each other, But when i trying to using static NAT
(Private--> Real IP) everything working fine but i can not deticate IP
for each phone and now the problem due to NAT so anybody could help in
that, HOw can i use NAT but in the same time the phones working because
it's seems that the NAT port changes it the reason behind the problem
Seef-HQ#sh run
Building configuration...
Current configuration : 1596 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Seef-HQ
!
logging buffered 4096 debugging
enable secret 5 $1
!
ip subnet-zero
ip cef
!
!
ip name-server 195.219.14.20 <http://195.219.14.20/>
ip name-server 64.85.63.6 <http://64.85.63.6/>
!
!
!
voice rtp send-recv
!
voice service voip
sip
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
!
!
!
interface FastEthernet0/0
ip address 217.X.X.X 255.255.255.240 <http://255.255.255.240/>
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.0.0.1 <http://10.0.0.1/> 255.255.255.0
<http://255.255.255.0/>
ip nat inside
duplex auto
speed auto
!
ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
ip nat inside source list 10 pool LAN overload
ip nat inside source static tcp 10.0.0.113 <http://10.0.0.113/> 80
interface FastEthernet0/0 9999
ip nat inside source static 10.0.0.4 <http://10.0.0.4/> 217.X.X.Y
ip nat inside source static 10.0.0.3 <http://10.0.0.3/> 217.X.X.Z
ip http server
ip classless
ip route 0.0.0.0 <http://0.0.0.0/> 0.0.0.0 <http://0.0.0.0/> 217.X.X.X
!
!
access-list 10 permit 10.0.0.0 <http://10.0.0.0/> 0.0.0.255
<http://0.0.0.255/>
!
!
!
!
!
!
dial-peer voice 1 voip
session protocol sipv2
session target ipv4:67.X.X.X
session transport udp
!
sip-ua
nat symmetric role active
nat symmetric check-media-src
retry invite 2
retry response 2
retry bye 2
retry cancel 2
sip-server ipv4:67.X.X.X
--
Best Reagrds,
Mounir Mohamed
________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
--
Best Reagrds,
Mounir Mohamed
--
Best Reagrds,
Mounir Mohamed
This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.
| |
| Per Carlson 2006-04-08, 6:59 pm |
| On Thu, Apr 06, 2006 at 07:18:13PM +0200, Mounir Mohamed wrote:
> Could you clarify more What is the FIXUP
A SIP-aware NAT-implementation. When NAT-ing SIP-signalling you
can't just change the IP-addresses/ports because the signalling
have got IP-adresses in the payload as well.
On a router you will need an IOS/feature set that both supports
SIP-aware NAT *and* FW. You don't need to configure the FW, but
the code is needed to do deep packet modifications.
The SIP-aware NAT feature is in 12.2(something)T and newer.
--
Per Carlson, Sr. Network Developer
| |
| Justin Steinberg 2006-04-08, 6:59 pm |
| Is there a SCCP-aware NAT feature in any IOS/feature set?
Justin
On 4/6/06, Per Carlson <lists@ip4all.net> wrote:
> On Thu, Apr 06, 2006 at 07:18:13PM +0200, Mounir Mohamed wrote:
>
>
> A SIP-aware NAT-implementation. When NAT-ing SIP-signalling you
> can't just change the IP-addresses/ports because the signalling
> have got IP-adresses in the payload as well.
>
> On a router you will need an IOS/feature set that both supports
> SIP-aware NAT *and* FW. You don't need to configure the FW, but
> the code is needed to do deep packet modifications.
>
> The SIP-aware NAT feature is in 12.2(something)T and newer.
>
> --
> Per Carlson, Sr. Network Developer
> ________________________________________
_______
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
| |
| Per Carlson 2006-04-08, 6:59 pm |
| On Thu, Apr 06, 2006 at 03:50:53PM -0400, Justin Steinberg wrote:
> Is there a SCCP-aware NAT feature in any IOS/feature set?
Sure. Here is a description of the feature:
http://www.cisco.com/univercd/cc/td...1t5/dtnipcm.htm
--
Per Carlson, Sr. Network Developer
| |
| ash AD 2006-04-08, 6:59 pm |
| Have you tried to statically NAT your SIP ports to ensure call setup hitsthe right ports? Hopefully these NAT links will help. Good luck.
-Peter
http://www.cisco.com/univercd/cc/td...t8/ftnatsip.htm
http://www.cisco.com/en/US/customer....html#wp1079462
"Voll, Scott" <Scott.Voll@wesd.org> wrote:
fixup is a command on the pix firewall that works on a protocol to make it work correctly.
scott
---------------------------------
From: cisco-voip-bounces@puck.nether.net on behalf of Mounir Mohamed
Sent: Thu 4/6/2006 10:18 AM
To: Wes Sisk
Cc: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] IP-Phones NAT problem
? Dear Wes,
Could you clarify more What is the FIXUP
Bet Reagrds,
Mounir Mohamed
On 4/6/06, Wes Sisk<wsisk@cisco.com> wrote: all voip protocols embed the L3 address in the signaling protocol. You will need a NAT device that supports a 'fixup' mechanism for those protocols.
I know the PIX does.
/Wes
On Apr 6, 2006, at 8:21 AM, Mounir Mohamed wrote:
Dear All,
I have 2 IP-phones connected to C2621 with the below configuration the problem that, the phones used 10.0.0.25 and 10.0.0.26 and both is NATED on the 2600 router, also both registered in international SIP server but thay can not make calls even between each other, But when i trying to using static NAT (Private--> Real IP) everything working fine but i can not deticate IP for each phone and now the problem due to NAT so anybody couldhelp in that, HOw can i use NAT but in the same time the phones working because it's seems that the NAT port changes it the reason behind the problem
Seef-HQ#sh run
Building configuration...
Current configuration : 1596 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Seef-HQ
!
logging buffered 4096 debugging
enable secret 5 $1
!
ip subnet-zero
ip cef
!
!
ip name-server 195.219.14.20
ip name-server 64.85.63.6
!
!
!
voice rtp send-recv
!
voice service voip
sip
!
voice class codec 1
codec preference 1 g711ulaw
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
!
!
!
interface FastEthernet0/0
ip address 217.X.X.X 255.255.255.240
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.0.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
ip nat inside source list 10 pool LAN overload
ip nat inside source static tcp 10.0.0.113 80 interface FastEthernet0/09999
ip nat inside source static 10.0.0.4 217.X.X.Y
ip nat inside source static 10.0.0.3 217.X.X.Z
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 217.X.X.X
!
!
access-list 10 permit 10.0.0.0 0.0.0.255
!
!
!
!
!
!
dial-peer voice 1 voip
session protocol sipv2
session target ipv4:67.X.X.X
session transport udp
!
sip-ua
nat symmetric role active
nat symmetric check-media-src
retry invite 2
retry response 2
retry bye 2
retry cancel 2
sip-server ipv4:67.X.X.X
--
Best Reagrds,
Mounir Mohamed
________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
--
Best Reagrds,
Mounir Mohamed
________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
---------------------------------
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.
---------------------------------
New Yahoo! Messenger with Voice. Call regular phones from your PC and save big.
|
|
|
|
|