05-10-2012 06:32 AM - edited 03-16-2019 11:05 AM
Hi Friends,
It is design related query. I have setup with Cisco Call Manager is in Datacenter which connects to the 10 IP Phones (located in the same office) thru MPLS VPN link.
For some reason, I am asked to configure PAT (Many to One NAT) the IP address of the IP Phones to One IP address.PATing will be configured in my Gateway Router
Is it recommened to PAT the Voice traffic using one IP Address. I believe only One-One NATing is recommended.
Can you please help me in confirming this setup and the best practice
Thanks in advance
SAIRAM
Solved! Go to Solution.
05-10-2012 07:01 AM
NAT in IP telephony, especially for phones, is not recommended.
You can try and open the door to much trouble and frustration, or do things properly, and keep IP connectivity unhindered for safe results.
05-10-2012 07:31 AM
IP Phones (either SCCP or SIP) won't work with NAT or PAT. If you need to hide the IP addresses of the phones, use a VPN solution for the phones. Most (all ?) VoIP solutions require the IP traffic to flow without being altered. VPNs handle this by encapsulating the IP traffic into another IP flow (e.g. IPSec), and de-encapsulating it at the other end.
You can't do a plain NAT or PAT for SCCP or SIP, as the IP address & port of the phones is burried inside the IP traffic, and just re-writing the IP header will NOT work. Plus, the SCCP or SIP traffic will also setup RTP UDP streams, so the PAT/NAT box will need to be aware of this too !
Oh, and your NAT/PAT solution will need to handle all the QoS parameters correctly...
Short answer: Don't do it !
GTG
05-10-2012 07:01 AM
NAT in IP telephony, especially for phones, is not recommended.
You can try and open the door to much trouble and frustration, or do things properly, and keep IP connectivity unhindered for safe results.
05-12-2012 03:29 AM
Thank you very much, Gordon , Paolo
regards
SAIRAM
05-12-2012 04:20 AM
Thanks for the nice rating and good luck!
05-10-2012 07:31 AM
IP Phones (either SCCP or SIP) won't work with NAT or PAT. If you need to hide the IP addresses of the phones, use a VPN solution for the phones. Most (all ?) VoIP solutions require the IP traffic to flow without being altered. VPNs handle this by encapsulating the IP traffic into another IP flow (e.g. IPSec), and de-encapsulating it at the other end.
You can't do a plain NAT or PAT for SCCP or SIP, as the IP address & port of the phones is burried inside the IP traffic, and just re-writing the IP header will NOT work. Plus, the SCCP or SIP traffic will also setup RTP UDP streams, so the PAT/NAT box will need to be aware of this too !
Oh, and your NAT/PAT solution will need to handle all the QoS parameters correctly...
Short answer: Don't do it !
GTG
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide