ASA5520 and Polycom Group 500 problem

[Roy Lee]

Hi,

We have a oly Polycom device working fine with our ASA5520.

Recently we purchased a Polycom Group 500 and configured it as similar as the old Polycom device as possible.

Now we can call out from Polycom Group 500 successfully.

But for incoming call, after we accept the call, it still keep ringing for 50 seconds before connect successfully.

Our ASA ISO is 8.0(4).

Configuration:

ASA Version 8.0(4)
!

object-group network VideoConferenceDevices
 network-object host 123.123.123.123

object-group service VideoConferenceProtocols
 service-object tcp eq h323
 service-object tcp range 3230 3235
 service-object udp range 3230 3235

access-list Conduit extended permit object-group VideoConferenceProtocols any object-group VideoConferenceDevices

static (inside,outside) 123.123.123.123 192.168.123.123 netmask 255.255.255.255 dns

class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 1500
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect sqlnet
  inspect skinny 
  inspect sunrpc
  inspect xdmcp
  inspect sip 
  inspect netbios
  inspect tftp
!
service-policy global_policy global

Any hints?

Thanks,
Notmen

[Maykol Rojas]

The configuration you have is fine. 

We need the captures to troubleshoot, if it finally connects after 50 seconds, I would assume the following:

The ports being negotiated within polycom for video conference are not the ones in the range so it keeps trying  (you can check the logs on the ASA for that).   

There is something on the negotiation that the polycoms are having trouble to connect (only with captures we will be able to determine that) 

Mike/.