Allow network directly through without nating on pix...

[arnab77inkol]

Hi,

My setup is like this...

Internal Lan used for IP Phone (192.168.48.x)--> Router1 WAN --> GRE Tunnel created on Routers on WAN --> Router2 --> Internal IP (192.168.49.x)... Pix --- > Cisco Call Manager on the lan connected to 150 Cisco IP Phones...

Now my requirment is that the output from router2 (192.168.49.x) should cross pix firewall as same ip block and whould reach CCM and Voip phones... I cannot do natting ... as natting has problems on VOIP and thats why i directly use tunnel..

Is this possible ... if possible please get me a sample configuration line... Thanks in advance...

[mgaysek]

Have you tried a no nat? I am assuming you are not running 7.x

nat (inside) 0 access-list voip

access-list voip permit ip 192.168.49.0 255.255.255.0 192.168.48.0 255.255.255.0

that should stop all dot49 traffic from getting nat'd when it goes to dot48.