12-19-2015 05:38 PM - edited 03-12-2019 12:03 AM
I have a SPA112 behind a 5500 firewall that connects to a Voip provider on the Internet. I have issues where people can't call in and it takes a long time to call out.
While investigating, it looks like my SPA is registering every 60 minutes but the SIP connection times out after 2 minutes. I have a dynamic IP address and am using Pat.
As I am using inspect sip, I assume that I need to tweak my SIP timers but I'm not sure what I should be tweaking. The connection in question is:
UDP outside <ProviderIP>:5060 Phone <SPA_IP>:5060, idle 0:02:01, bytes 12698, flags Te
firewall# show run | in sip
timeout sip 0:00:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
Solved! Go to Solution.
12-20-2015 01:20 AM
It sounds like you are running into the default ASA timeouts, which are something like:
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Try changing it to something like:
timeout conn 1:00:00 half-closed 0:10:00 udp 4:00:00 icmp 0:00:02
My preferred solution, instead of the above, would be to enable NAT keepalive on the SPA112. If it times out after 2 minutes then make the keepalive 1 minute.
12-20-2015 01:20 AM
It sounds like you are running into the default ASA timeouts, which are something like:
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Try changing it to something like:
timeout conn 1:00:00 half-closed 0:10:00 udp 4:00:00 icmp 0:00:02
My preferred solution, instead of the above, would be to enable NAT keepalive on the SPA112. If it times out after 2 minutes then make the keepalive 1 minute.
01-02-2016 02:30 PM
Thanks. I increased the keepalive and it seems to work perfectly now.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: