RTP RTCP Firewalling

[ciscoben2009]

Hi Everyone

i hope someone could help im trying confiure our zone based firewall to use application inspection for RTP and RTCP for our mitel phone system

but i cant seem to find any support for it , i get the feeling that this isnt a straight forward task due to the nature of the protocol

has anyone else been able to do this?

thanks

Ben

[julomban]

Hello Ben,

As you indicated RTP and RTCP are not listed on the match protocol ports of ZBFW. You need to use access list instead of match protocol and allow the traffic based on ACL's.

To be honest with you I am not sure if with "inspect" action its going to work for you, you can try it but if the issue persist you may want to use "pass" and allow the packet both directions (in-out and out-in).

Regards,

Juan Lombana

Please rate helpful posts.