topic Problem in ASA5520 with Asterisk Server , Softphone can't regist in Network Security

Problem in ASA5520 with Asterisk Server , Softphone can't register

samart_sri — Wed, 13 Mar 2019 00:50:11 GMT

Problem in ASA5520 with Asterisk Server , Softphone can't register

Static NAT

Real IP === Firewall === Asterisk Server

||======== Web Server

Now i create static nat from public ip to private ip both server,

I can't access to web server (i thing nat it work), But in softphone can't register to Asterisk Server

Config :

access-list inside_access_in extended permit ip any any

access-list outside_access_in extended permit ip any any

static (inside,outside) 212.129.61.3 192.168.0.30 netmask 255.255.255.255

static (inside,outside) 212.129.61.4 192.168.0.31 netmask 255.255.255.255

static (inside,outside) 212.129.61.5 192.168.0.10 netmask 255.255.255.255

policy-map global_policy

class inspection_default

inspect dns maximum-length 512

inspect tftp

inspect sip

Please advice to me i must reconfig on ASA ?

Thank you so much

Re: Problem in ASA5520 with Asterisk Server , Softphone can't re

cco-wallace — Thu, 13 Dec 2007 06:55:43 GMT

Try and disable inspect sip.

Re: Problem in ASA5520 with Asterisk Server , Softphone can't re

stevechege — Sat, 16 Nov 2013 00:20:27 GMT

ASA (Asterisk Fix)

===============

policy-map global_policy

class inspection_default

no inspect sip

PIX (Asterisk Fix)

=============

If you still have a PIX

do this

no fixup protocol sip 5060

no fixup protocol sip udp 5060

Re: Problem in ASA5520 with Asterisk Server , Softphone can't re

Julio Carvajal — Sat, 16 Nov 2013 07:24:13 GMT

As everyone said remove the inspection and afterwards clear the local-host table for the hosts in discussion,

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Problem in ASA5520 with Asterisk Server , Softphone can't regist

jumora — Tue, 19 Nov 2013 05:07:42 GMT

The problem with asterisk is that in a normal setup without a Cisco firewall it would be obligated to define the global address or NATTED IP for SIP payload but with the ASA inspection the ASA needs to see the real IP so it can modify this payload with NATTED IP.

Just disable asterisk function to map the global IP and let the ASA inspect.

More information about SIP inspection on the next link:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml#sip

Problem in ASA5520 with Asterisk Server , Softphone can't regist

jumora — Tue, 19 Nov 2013 19:41:57 GMT

Did you understand what I was mentioning?

Problem in ASA5520 with Asterisk Server , Softphone can't regist

jumora — Wed, 20 Nov 2013 19:43:24 GMT

Help is for free then we need you to rate the assistance.

Problem in ASA5520 with Asterisk Server , Softphone can't regist

jumora — Thu, 21 Nov 2013 15:35:08 GMT

Are your issues resolved???

Value our effort and rate the assistance!

Problem in ASA5520 with Asterisk Server , Softphone can't regist

stevechege — Thu, 21 Nov 2013 17:22:57 GMT

Jumora...i am not sure why you are upset...we are just contributing to the community...i had this issue a while back and i posted how i fixed it for others who might have the same issue.

Problem in ASA5520 with Asterisk Server , Softphone can't regist

jumora — Thu, 21 Nov 2013 17:51:51 GMT

The comment that is under what I am writing is just a comment that I post as part of a signature, it's a template, please don't take it personal, but I always comment that we need customer's to rate the assistance as we are taking time to answer their questions.

Value our effort and rate the assistance!