cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
469
Views
0
Helpful
0
Replies

How to configure cisco ipphone with nat?

Majed Zouhairy
Level 1
Level 1

Health be upon you,

here is the scenario, router H is connected to router I which in turn is connected to 2 other routers, L and M.

Router M is not under my control.

there are ip phones connected to router L and they communicate with the cucm on router M since router M has static routes for them and router H has static routes for the cucm.

now one phone has been moved to the network of router H. instead of configuring a static route on router M for a new network, I am stuck with natting the existing network in the new location.

here is the situation: the phone registers but voice is heard only one way. Specifically, If we call someone connected to router L, they can only hear us. If we call someone on router M, they can only hear us! I plugged a notebook to the iphone and wire sharked, and there were no rtp messages which makes me suspect that rtp messages are not being forwarded.

here is the configuration:

router H:

vpn tunnel 10

ip nat outside

int G0/0.5
description Voice
encapsulation dot1Q 5
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat inside
ip virtual-reassembly in

 

ip nat inside source static 192.168.1.1 192.168.101.1

 

the network 192.168.101.0/24 exists on a subinterface on router L.

On router H

sh ip route | i 192.168.101

      192.168.101.0/32 is subnetted, 1 subnets
S        192.168.101.1 [1/0] via 192.168.198.1

A default route is learned from other routers

  0.0.0.0/0 [***/54217] via 172.19.147.1, 1w0d, Tunnel1

Router I routes:

sh ip rout | i 192.168.201
      192.168.101.0/24 is variably subnetted, 2 subnets, 2 masks

        192.168.101.0/24 [***/2024] via 10.26.11.2, 7w0d, Port-channel10.27
        192.168.101.7/32 [***/53046] via 172.19.147.17, 1w0d, Tunnel1

knowing that the old location communicates just fine with router M!

i tried adding:

ip nat service sip tcp 5060

ip nat service allow-sip-even-rtp-ports

but they are enabled by default.

Anyone has a clue? is it port forwarding?

0 Replies 0