Hi Deren,
This is our H.323 Gateway sh run, The PABX system use G.711 codec.
Current configuration : 15353 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname IR_PSM
!
boot-start-marker
boot-end-marker
!
card type e1 0 0
logging buffered 51200
!
no aaa new-model
clock timezone PCTime 8
network-clock-participate wic 0
dot11 syslog
ip wccp 61
ip wccp 62
!
ip nbar pdlm flash:sap-app.pdlm
ip nbar pdlm flash:sap-msg.pdlm
ip nbar pdlm flash:sap-pgm.pdlm
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.4.0.1 10.4.0.100
ip dhcp excluded-address 10.4.8.1 10.4.8.10
!
ip dhcp pool BERAU-OFICE-DATA
network 10.4.0.0 255.255.252.0
default-router 10.4.0.1
dns-server 10.4.1.2 10.1.1.2
domain-name ir.net
!
ip dhcp pool BERAU-OFICE-Voice
network 10.4.8.0 255.255.252.0
default-router 10.4.8.1
dns-server 10.4.1.2 10.1.1.2
domain-name ir.net
option 150 ip 10.1.0.60 10.1.0.61
!
!
no ip domain lookup
ip domain name ir.net
multilink bundle-name authenticated
!
isdn switch-type primary-net5
!
voice-card 0
dspfarm
dsp services dspfarm
!
!
!
voice service voip
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
cause-code legacy
h323
sip
!
!
voice class codec 1
codec preference 1 g729r8
codec preference 2 g711ulaw
codec preference 3 g711alaw
codec preference 4 g729br8
!
voice class codec 2
codec preference 1 g711ulaw
codec preference 2 g711alaw
codec preference 3 g729r8
codec preference 4 g729br8
!
!
!
voice class h323 1
h225 timeout tcp establish 5
h225 timeout setup 5
call preserve
!
!
!
!
!
!
!
!
!
!
voice translation-rule 1
rule 1 /^9/ //
!
voice translation-rule 3
rule 1 /^31/ /1/
rule 2 /^32/ /2/
rule 3 /^33/ /3/
rule 4 /^34/ /4/
rule 5 /^35/ /5/
rule 6 /^36/ /6/
rule 7 /^37/ /7/
rule 8 /^38/ /8/
rule 9 /^39/ /9/
rule 10 /^30/ /0/
!
!
voice translation-profile 3
translate called 3
!
voice translation-profile OutgoingProfile_1
translate called 1
!
!
!
crypto pki trustpoint TP-self-signed-4055906923
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4055906923
revocation-check none
rsakeypair TP-self-signed-4055906923
!
!
crypto pki certificate chain TP-self-signed-4055906923
certificate self-signed 01
30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34303535 39303639 3233301E 170D3130 30383133 30353536
33375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30353539
30363932 3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D88E 79DEE247 F0BBF86B 24E101C7 E900D001 87D2AA94 AEA94587 289C9F4E
AE00C69A 7D50578C 789F0AC5 D2F3F02B 9B4D74B4 48A9BF06 8DC7F4A5 71A44898
D353CD10 E87386FB 556A6432 593FF5CE 8847EB31 C1052603 02538778 BA8A30D8
976804F3 3E24996D B13EB568 3700AD91 0607EF3C 7C91803B 237A73B0 3779A85B
59CF0203 010001A3 6D306B30 0F060355 1D130101 FF040530 030101FF 30180603
551D1104 11300F82 0D49525F 50534D2E 69722E6E 6574301F 0603551D 23041830
16801482 A4E94CA1 079B9AD3 0045E76D 4B1970D1 0D123B30 1D060355 1D0E0416
041482A4 E94CA107 9B9AD300 45E76D4B 1970D10D 123B300D 06092A86 4886F70D
01010405 00038181 00A692B7 DF410907 9515E503 B39A93F2 0373BA54 47E012FA
FF7C56CA F62D624F BDC8B8B6 2465D2CD 494DAC7F B336B723 8B63290D C1FC7751
89D6E2C3 E33659A1 3B27735E 9C881BF3 3CBCD0A1 15C8F43E A7266F1A 9F170B37
CF093700 F52E106A 8C46195D EA0D71A1 B44BDF96 DE470898 9A277F2D 10C29D2E
6002B0D7 EE700078 4A
quit
!
!
username compnet privilege 15 password 0 compnet
archive
log config
hidekeys
!
!
controller E1 0/0/0
clock source internal
pri-group timeslots 1-12,16
!
!
track 10 rtr 10 reachability
delay down 120 up 120
!
class-map match-all voice-signaling
match access-group 101
class-map match-any Management-1
match protocol dhcp
match protocol dns
match protocol imap
match protocol kerberos
match protocol ldap
match protocol secure-imap
match protocol secure-ldap
match protocol snmp
match protocol socks
match protocol syslog
class-map match-all voice-traffic
match access-group 102
class-map match-any Signaling-1
match protocol h323
match protocol rtcp
match protocol sip
class-map match-any SAP
match protocol sap-app
match protocol sap-msg
match protocol sap-pgm
class-map match-any Voice-1
match protocol rtp audio
class-map match-all Aplikasi-Sap
match access-group 103
class-map match-all traffic_antivirus
match access-group name traffic_antivirus
class-map match-any Email
match protocol exchange
match protocol pop3
match protocol smtp
class-map match-all QOS-Redhat
match access-group 104
class-map match-any Transactional-1
match protocol citrix
match protocol finger
match protocol notes
match protocol novadigm
match protocol pcanywhere
match protocol secure-telnet
match protocol sqlnet
match protocol sqlserver
match protocol ssh
match protocol telnet
match protocol xwindows
match protocol http
class-map match-any Scavenger
match protocol bittorrent
match protocol edonkey
match protocol gnutella
match protocol kazaa2
match protocol winmx
match protocol rtp video
!
!
policy-map qos-aplikasi-PSM
class Aplikasi-Sap
bandwidth 192
class voice-signaling
bandwidth 64
class voice-traffic
priority 256
class class-default
fair-queue
policy-map QoS-Policy-1
class Voice-1
set dscp ef
priority percent 22
class Signaling-1
set dscp cs3
bandwidth percent 5
class Management-1
set dscp cs2
bandwidth percent 5
class Transactional-1
set dscp af21
bandwidth percent 16
class SAP
bandwidth percent 20
class Email
bandwidth percent 20
class Scavenger
bandwidth percent 1
class traffic_antivirus
shape average 128000
class class-default
fair-queue
random-detect
policy-map QoS-Policy-2
class class-default
shape average 768000
service-policy QoS-Policy-1
!
!
!
!
!
interface Tunnel0
ip address 192.168.254.249 255.255.255.252
ip accounting output-packets
ip route-cache flow
tunnel source FastEthernet0/1
tunnel destination 172.22.165.2
!
interface FastEthernet0/0
description link to LAN
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
!
interface FastEthernet0/0.10
description " VLAN-SERVER "$ETH-LAN$
encapsulation dot1Q 10
ip address 10.4.0.1 255.255.252.0
no ip redirects
ip wccp 61 redirect in
ip flow ingress
ip flow egress
!
interface FastEthernet0/0.20
description " VLAN-DATA "
encapsulation dot1Q 20
ip address 10.4.4.1 255.255.252.0
ip flow ingress
ip flow egress
!
interface FastEthernet0/0.30
description " VLAN-VOICE "
encapsulation dot1Q 30
ip address 10.4.8.1 255.255.252.0
h323-gateway voip bind srcaddr 10.4.8.1
!
interface FastEthernet0/0.40
description " Device-Management "
encapsulation dot1Q 40
ip address 10.4.16.1 255.255.252.0
!
interface FastEthernet0/1
description link to MPLS
bandwidth 768
ip address 172.22.165.10 255.255.255.252
ip wccp 62 redirect in
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip route-cache flow
duplex auto
speed auto
service-policy output QoS-Policy-2
!
interface Serial0/0/0:15
no ip address
encapsulation ppp
isdn switch-type primary-net5
isdn protocol-emulate network
isdn incoming-voice voice
keepalive 10 3
!
interface Serial0/1/0
no ip address
shutdown
clock rate 2000000
!
interface Integrated-Service-Engine1/0
ip address 10.4.12.2 255.255.252.0
service-module ip address 10.4.12.3 255.255.252.0
service-module ip default-gateway 10.4.12.2
no keepalive
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.254.250
ip route 10.0.0.0 255.0.0.0 172.22.165.9
ip route 10.2.8.0 255.255.252.0 172.22.165.9
ip route 10.4.12.3 255.255.255.255 Integrated-Service-Engine1/0
ip route 10.10.10.20 255.255.255.252 172.22.165.9
ip route 118.97.69.202 255.255.255.255 172.22.165.9
ip route 172.22.165.0 255.255.255.252 172.22.165.9
ip route 172.22.165.20 255.255.255.252 172.22.165.9
!
ip flow-cache timeout active 1
ip flow-export version 9
ip flow-export destination 10.1.5.169 9996
ip flow-top-talkers
top 30
sort-by bytes
cache-timeout 300000
match source address 10.0.0.0 255.0.0.0
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip access-list extended traffic_antivirus
permit ip host 10.4.1.2 any
!
ip sla 10
http get http://203.190.242.69 name-server 8.8.8.8
tag HTTP
ip sla schedule 10 life forever start-time now
no logging trap
access-list 101 permit tcp any any range 2000 2002
access-list 101 permit tcp any any eq 1720
access-list 101 permit tcp any any range 11000 11999
access-list 101 permit udp any any eq 2427
access-list 102 permit udp any any range 16384 32767
access-list 103 permit tcp any any eq 3050
access-list 103 permit icmp any any
access-list 103 permit tcp any any eq 3299
access-list 104 permit tcp any any eq 1433
access-list 105 deny ip any any
access-list 120 remark "Test Proxy Derawan"
access-list 120 deny tcp any any neq www
access-list 120 deny tcp any host 10.1.1.7 eq www
access-list 120 deny tcp host 10.4.0.10 any
access-list 120 deny tcp any host 10.1.1.7
access-list 120 permit tcp any any
snmp-server community ir RW
snmp-server community public RO
route-map proxy-redirect permit 10
match ip address 120
set ip next-hop 10.4.0.10
!
!
!
!
control-plane
!
!
!
voice-port 0/0/0:15
bearer-cap Speech
!
voice-port 0/3/0
!
voice-port 0/3/1
!
voice-port 0/3/2
!
voice-port 0/3/3
!
!
!
sccp local FastEthernet0/0.30
sccp ccm 10.1.0.60 identifier 1 priority 1 version 5.0.1
sccp ccm 10.4.8.1 identifier 100 version 4.0
sccp
!
sccp ccm group 1
associate ccm 1 priority 1
associate ccm 100 priority 4
associate profile 3 register MTP_10481
associate profile 2 register XCODE-PSM
associate profile 1 register confprof1
!
dspfarm profile 2 transcode
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 6
associate application SCCP
!
dspfarm profile 1 conference
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
shutdown
!
dspfarm profile 3 mtp
codec g711ulaw
maximum sessions software 6
associate application SCCP
!
!
dial-peer voice 100 pots
description "Call to PBX-IT"
destination-pattern 714[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 101 pots
description "Call to PBX-Finance"
destination-pattern 725[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 102 pots
description "Call to PBX-Procuremet"
destination-pattern 913[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 103 pots
description "Call to PBX-Internal Audit"
destination-pattern 224[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 104 pots
description "Call to PBX-Asset Management"
destination-pattern 732[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 105 pots
description "Call to PBX-GS"
destination-pattern 522[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 106 pots
description "Call to PBX-HRD"
destination-pattern 213[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 107 pots
description "Call to PBX-PMO"
destination-pattern 234[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 108 pots
description "Call to Pantry/Visitor"
destination-pattern 512[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 109 pots
description "Call to Comdev"
destination-pattern 243[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 110 pots
description "Call to PBX-Marketing/Shipping"
destination-pattern 264[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 111 pots
description "Call to Operation/HSE/CPP/ERD"
destination-pattern 924[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
dial-peer voice 201 voip
description Internal Dial
destination-pattern [1245789]...
progress_ind setup enable 3
progress_ind progress enable 8
voice-class codec 1
voice-class h323 1
session target ipv4:10.1.0.60
dtmf-relay h245-signal
ip qos dscp cs5 media
!
dial-peer voice 202 voip
description Internal Dial
destination-pattern [1245789]...
progress_ind setup enable 3
progress_ind progress enable 8
voice-class codec 1
voice-class h323 1
session target ipv4:10.1.0.61
dtmf-relay h245-signal
ip qos dscp cs5 media
!
dial-peer voice 112 pots
description "Call to PBX-NewII"
destination-pattern 108[0-9]
no digit-strip
direct-inward-dial
port 0/0/0:15
!
!
!
call-manager-fallback
video
secondary-dialtone 3
max-conferences 8 gain -6
transfer-system full-consult
ip source-address 10.4.8.1 port 2000
max-ephones 42
max-dn 144
system message primary SRST-ITHACA-FALLBACK
system message secondary ITHACA-FALLBACK
transfer-pattern .T
moh music-on-hold.au
time-zone 41
time-format 24
!
Need your Advice,
Thanks
