rtp port packet teardown UDP connection between 2 vpns

ubtsogoo_82 · ‎10-29-2012

rtp port packet teardown UDP connection between 2 vpns

VERSION 1

we using CM8.5. between extentions of head office and branch office is ok, but didn't hear voice (rtp port packet teardown udp connections) between branch office extentions through vpn tunnel. please see our topology and log, how to fix it?

log of asa 5520

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900698 for intranet:192.168.82.3/10048 to intranet:192.168.62.24/10042 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900700 for intranet:192.168.62.24/10042 to intranet:192.168.82.3/10048 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900701 for intranet:192.168.82.3/10048 to intranet:192.168.62.24/10042 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900704 for intranet:192.168.62.24/10042 to intranet:192.168.82.3/10048 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900705 for intranet:192.168.82.3/10048 to intranet:192.168.62.24/10042 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900707 for intranet:192.168.62.24/10042 to intranet:192.168.82.3/10048 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900708 for intranet:192.168.82.3/10048 to intranet:192.168.62.24/10042 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900710 for intranet:192.168.62.24/10042 to intranet:192.168.82.3/10048 duration 0:00:00 bytes 0

Oct 29 2012 17:09:20: %ASA-6-302016: Teardown UDP connection 187900711 for intranet:192.168.82.3/10048 to intranet:192.168.62.24/10042 duration 0:00:00 bytes 0

Robert Thomas · ‎11-02-2012

Hi,

Perhaps you need to enable inspection for voice protocols over the ASA. Also I think you might get more assistance moving this thread to the security community, we are not so familiarized with config on the ASA that could lead to UDP session teardown.