Voice Traffic behind ASA

[keven.jones]

Hello

Is there any known Issue for Voice Traffic on ASA 5520 running version 8.2, we are unable to pass voice traffic from inside to outside and vice-versa.

We tested connecting to SIP Gateway from insdie to outside but no luck and from outside to insdie its the same issue. We got Static NAT and ACL on inside and outside interface, is it something to do with default policy or Issue due to NAT.  Our Voice Gateway on inside network needs to communicate with Other Voice Gateway on Internet.

Please input

cheers

Keven

[Kureli Sankar]

Do you have sip inspection enabled?

Issue "sh run policy-map" should be able to show you.

-KS

[keven.jones]

Thank You KS for the reply, here is the output of show run policy-map.

Do you advice me to check anything else.

( I recollect I had issue with EMSTP and I removed from here, in Pix 525 SMTP issue was resolved with fixup command )

show run policy-map
!
policy-map type inspect dns preset_dns_map
parameters
  message-length maximum 512
policy-map global_policy
class inspection_default
  inspect dns preset_dns_map
  inspect rsh
  inspect rtsp
  inspect sqlnet
  inspect skinny 
  inspect sunrpc
  inspect xdmcp
  inspect netbios
  inspect tftp
  inspect pptp
  inspect ftp
class class_ftp
  inspect ftp

[Marcin Latosiewicz]

Keven,

Provided you're usuing standard port for skinny you can enabled this as first step ;-)

policy-map global_policy
class inspection_default
inspect sip

Which is what Kureli meant.

If you're using NAT, ASA needs to inspect payload of SIP messaging.

HTH,

Marcin

[Kureli Sankar · Accepted solution]

Yes. Exactly. Thanks Marcin

You need inspection to fixup the address from the inside interface to outside interface and vice versa and also open pin holes accordingly.

Also, make sure to issue "sh run service-policy" and make sure you see a line like this one below.

service-policy gobal_policy global

That should take care of it.

Dont' miss my ATE event Starts January 3, 2011: https://supportforums.cisco.com/community/netpro/ask-the-expert

-KS

[keven.jones]

Thanks KS

Its working like a champion.