cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2728
Views
0
Helpful
16
Replies

Problem with NAT with video call on ASA5510

kpoon
Level 1
Level 1

Hello all,

We have a video system at 10.4.86.199 trying to call another system at 172.30.1.102.


The System at 10.4.86.199 receive the video image and sound, but at 172.30.1.102 doesn't after the call is established.

10.4.86.199 actaully contacts 10.40.86.102 which NAT to 172.30.1.102, it cannot contact 172.30.1.102 directly. It is done by design.

I've tried to packettrace and it points to problem with NAT but I can't pinpoint it. Any help would be appreciated.

please see attached config.

Thank you in advance.

16 Replies 16

lusandi
Level 1
Level 1

Hello,

Can you enable the sip inspection and provide the following outputs:

debug sip

debug sip ha

show logg

Regards,

Luis Sandi

.:|:.:|:.

P.S Please mark this question as answered if it has been resolved. Do rate helpful posts.

Couple of things:

You may need a Nat entry  - Static preferably  for

10.4.86.199  otherwise the media connection address goes unNATed.

Traffic from the 172 address takes the source static NAT defined hence gets to your endpoint.  Having said that it seems either the symptoms described is reversed.

However as seen in your packet tracer you need Destination NAT for

10.4.86.102  when you try to use that address to translate to a 172 endpoint.  Otherwise

it is not translated.  ( as you see in your tracer, the packet isnt getting anywhere)

You do need global SIP inspect.

Unclear on the complete picture and symptoms but those may be some pointers to chase.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: