topic Thanks. I increased the in Network Security

Sip registration timing out

mmacdonald70 — Tue, 12 Mar 2019 07:03:18 GMT

I have a SPA112 behind a 5500 firewall that connects to a Voip provider on the Internet. I have issues where people can't call in and it takes a long time to call out.

While investigating, it looks like my SPA is registering every 60 minutes but the SIP connection times out after 2 minutes. I have a dynamic IP address and am using Pat.

As I am using inspect sip, I assume that I need to tweak my SIP timers but I'm not sure what I should be tweaking. The connection in question is:

UDP outside <ProviderIP>:5060 Phone <SPA_IP>:5060, idle 0:02:01, bytes 12698, flags Te

firewall# show run | in sip
timeout sip 0:00:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

It sounds like you are

Philip D'Ath — Sun, 20 Dec 2015 09:20:57 GMT

It sounds like you are running into the default ASA timeouts, which are something like:

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

Try changing it to something like:

timeout conn 1:00:00 half-closed 0:10:00 udp 4:00:00 icmp 0:00:02

My preferred solution, instead of the above, would be to enable NAT keepalive on the SPA112. If it times out after 2 minutes then make the keepalive 1 minute.

Thanks. I increased the

mmacdonald70 — Sat, 02 Jan 2016 22:30:17 GMT

Thanks. I increased the keepalive and it seems to work perfectly now.