topic DMZ setup for SIP in Network Security https://community.cisco.com/t5/network-security/dmz-setup-for-sip/m-p/657857#M1028454 <P>I am setting up a PBX in the DMZ. The handsets are going to be on the inside network. The DMZ and the inside vlans have default settings (i.e. no explicit access-groups). </P><P></P><P></P><P>For some reason even though the inside and dmz vlans are default I can't seem to ping or get to DMZ servers form the inside. Both inside and DMZ nodes can get to the outside interface. </P><P></P><P>Any help would be appreciated.</P> Mon, 11 Mar 2019 09:22:14 GMT tburton 2019-03-11T09:22:14Z DMZ setup for SIP https://community.cisco.com/t5/network-security/dmz-setup-for-sip/m-p/657857#M1028454 <P>I am setting up a PBX in the DMZ. The handsets are going to be on the inside network. The DMZ and the inside vlans have default settings (i.e. no explicit access-groups). </P><P></P><P></P><P>For some reason even though the inside and dmz vlans are default I can't seem to ping or get to DMZ servers form the inside. Both inside and DMZ nodes can get to the outside interface. </P><P></P><P>Any help would be appreciated.</P> Mon, 11 Mar 2019 09:22:14 GMT https://community.cisco.com/t5/network-security/dmz-setup-for-sip/m-p/657857#M1028454 tburton 2019-03-11T09:22:14Z Re: DMZ setup for SIP https://community.cisco.com/t5/network-security/dmz-setup-for-sip/m-p/657858#M1028455 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>Ping uses ICMP which is not a stateful protocol. If you don't have an access-list on the DMZ interface allowing ICMP traffic back to the inside then it won't work. </P><P></P><P>If it is not just ping that is the problem have you accounted for NAT going from the inside to the DMZ ? </P><P></P><P>If you could send a copy of the config with any sensitive info removed. </P><P></P><P>HTH </P></BODY></HTML> Sun, 21 Jan 2007 12:43:54 GMT https://community.cisco.com/t5/network-security/dmz-setup-for-sip/m-p/657858#M1028455 Jon Marshall 2007-01-21T12:43:54Z