04-16-2007 07:12 AM - edited 03-11-2019 03:00 AM
Hi all
I got a weird problem with a PIX 515 (7.2(2).18.
I'm natting SIP behind the Firewall [CME 4.1(0) (c2801-ipvoicek9-mz.124-11.XJ1.bin)].
Incoming and outgoing SIP-calls are working perfectly.
Unfortunately, "forwarding-all" function (with a SIP-incoming call to an external number [through the same SIP-Proxy])
is sending the SIP-signal (ringing) but no RTP-flow.
On the PIX the "SIP inspect" is activated.
Is there a possibility to configure a symmetric / consistent NAT on the PIX to allow the RTP-stream to be built up?
Thanks and regards,
norbert
01-02-2013 12:17 AM
Hi Norbert,
have you found a solution for this? I have a similiar problem with CME and an IOS router in front of it.
Thanks
Frank
01-07-2013 08:19 AM
Hmmm.... long time ago ;-)
I had to change some settings on the cme:
....
voice service voip
no ip address trusted authenticate
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip <-
no supplementary-service sip moved-temporarily <-
no supplementary-service sip refer
redirect ip2ip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
h323
h245 caps mode restricted
sip
registrar server
asserted-id ppi <-
!
....
!
sip-ua
credentials username
keepalive target dns:
authentication username
retry invite 2
retry response 2
retry bye 2
retry register 2
retry options 1
registrar dns:
expires 60
Greets,
Norbert
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide