RTP use different source interface at Voice-Gateway Router

[georgefares2016]

i have two site HQ & Branch, at HQ i have Firepower Connected with Voice-Gateway Router at Branch Through VPN IPSec and i connect Voice-Gateway Router with CUCM in HQ 

my problem with RTP when start it use another interface as a source and here is my question why rtp use another interface and does not use the specified interface which i configured it to be as a source interface for RTP 

[Anthony Holloway]

Maybe you configured it incorrectly? How can you prove that your configuration is correct?

[georgefares2016]

Hi Anthony, 

 i have two links first link connected to adsl modem  80MB for users and servers

second lint 2MB for VPN for Voice 

here is configuration

Branch configuration at Voice-Gateway Router

ip dhcp excluded-address 172.16.150.1 172.16.150.10
ip dhcp excluded-address 172.16.151.1 172.16.151.10
!
ip dhcp pool Data
network 172.16.150.0 255.255.255.0
dns-server 172.16.152.2 172.16.152.3 8.8.8.8 4.2.2.2
default-router 172.16.150.1
option 150 ip 172.16.151.1
!
ip dhcp pool Voice
network 172.16.151.0 255.255.255.0
default-router 172.16.151.1
option 150 ip 172.16.151.1
!
!
!
no ip domain lookup
ip domain name xxxxxxxxx
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
cts logging verbose
!
!
voice-card 0
dspfarm
dsp services dspfarm
!
!
!
voice service voip
no ip address trusted authenticate
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
bind control source-interface gig0/0.20
bind media source-interface gig0/0.20
registrar server
!
!
!
voice class dualtone-detect-params 1
freq-max-deviation 20
freq-max-power 0
freq-min-power 35
freq-power-twist 15
cadence-variation 20
!
voice class custom-cptone FXODisc
dualtone disconnect
frequency 450
cadence 493 487
!
!
voice register pool-type 8831
xml-config maxNumCalls 10
xml-config busyTrigger 5
num-lines 2
description Cisco IP Phone 8831
reference-pooltype 6921

!
voice register global
mode cme
source-address 172.16.151.1 port 5060
timeouts interdigit 5
max-dn 300
max-pool 58
timezone 31
date-format D/M/Y
tftp-path flash:
create profile sync 0000513842132459
ntp-server 172.16.151.1 mode unicast
conference hardware
camera
video
!
voice register dn 1
number 100
name xxxxxxx
!
voice register dn 2
number 110
name xxxxxxx
!
voice register dn 3
number 111
call-forward b2bua all 150
name xxxxxxx
!
voice register dn 4
number 112
name xxxxxxxxx
!
voice register dn 5
number 120
name xxxxxxxxx
!
voice register dn 6
number 121
name xxxxxxx
!
voice register dn 7
number 130
name xxxxxxxx
!
voice register dn 8
number 131
name xxxxxxx
!
voice register dn 9
number 132
name xxxxxxx
!
voice register dn 10

number 140
name xxxxxxxx
!
voice register dn 11
number 141
name xxxxxxxx
!
voice register dn 12
number 142
name xxxxxxx
!
voice register dn 13
number 143
name xxxxxxxx
!
voice register dn 14
number 150
name xxxxxx
!
voice register dn 15
number 160
name xxxxxxxx
!
voice register dn 16
number 161
name xxxxxxxx
!
voice register dn 17
number 162
name xxxxxxxx
!
voice register dn 18
number 163
name xxxxxxxxx
!
voice register dn 19
number 164
name xxxxxxxx
!
voice register dn 20
number 165
name xxxxxxxx
!
voice register dn 21
number 166
name xxxxxxx
!
voice register dn 22
number 167
name xxxxxx
!
voice register dn 23
number 168

name xxxxxxx
!
voice register dn 24
number 170
name xxxxxxxx
!
voice register dn 25
number 171
name xxxxxxxxx
!
voice register dn 26
number 172
name xxxxxxxxx
!
voice register dn 27
number 173
name xxxxxxxxx
!
voice register dn 28
number 180
name xxxxxxxxx
!
voice register dn 29
number 190
name xxxxxxxxx
!
voice register template 1
softkeys hold Newcall Resume
softkeys idle Newcall Redial Cfwdall DND
softkeys ringIn Answer DND
softkeys seized Endcall Redial Cfwdall
softkeys connected Endcall Hold Trnsfer Confrn
camera
video
!
voice register pool 1
busy-trigger-per-button 1
id mac xxxxxxxxx
type 8831
number 1 dn 1
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 2
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 2
template 1

dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 3
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 3
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 4
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 4
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 5
id mac xxxxxxxxx
type 8961
number 1 dn 5
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 6
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 6
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!

voice register pool 7
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 7
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 8
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 8
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 9
!
voice register pool 10
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 10
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 11
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 11
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 12
!
voice register pool 13

!
voice register pool 14
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 14
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 15
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 15
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 16
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 16
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 17
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 17
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 18
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821

number 1 dn 18
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 19
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 19
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 20
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 20
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 21
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 21
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 22
!
voice register pool 23
!
voice register pool 24
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 24

template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 25
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 25
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 26
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 26
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 27
!
voice register pool 28
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 28
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw
no vad
camera
video
!
voice register pool 29
busy-trigger-per-button 2
id mac xxxxxxxxx
type 7821
number 1 dn 29
template 1
dtmf-relay rtp-nte sip-kpml
codec g711ulaw

no vad
camera
video
!
!
!
!
!

crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco address *Firepower Public IP*

!
!
crypto ipsec transform-set HAC-VPN esp-3des esp-sha-hmac
mode tunnel
!
!
!
crypto map HAC-VPN 10 ipsec-isakmp
set peer *Firepower Public IP*
set transform-set HAC-VPN
match address 100
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!

interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0.10
description "Connected to Switch Data VLAN"
encapsulation dot1Q 10
ip address 172.16.150.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip policy route-map ADSL-users
!
interface GigabitEthernet0/0.20
description "Connected to Switch Voice VLAN"
encapsulation dot1Q 20
ip address 172.16.151.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
h323-gateway voip interface
h323-gateway voip bind srcaddr 172.16.151.1
!
interface GigabitEthernet0/0.30
description "Connected to Switch Server VLAN"
encapsulation dot1Q 30
ip address 172.16.152.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip policy route-map ADSL-users
!
interface GigabitEthernet0/1
description "Connected to Internet Modem"
ip address 192.168.1.254 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/2.3940
encapsulation dot1Q 3940
ip address *voice-gateway Public IP x.x.x.18* 255.255.255.252

crypto map ****-VPN
!
ip forward-protocol nd
!
ip http server
no ip http secure-server
!
ip nat inside source list Off-Int interface GigabitEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 *voice-gateway Service provider Public IP x.x.x.18* 
!
ip access-list extended Off-Int
permit ip 172.16.150.0 0.0.0.255 any
permit ip 172.16.152.0 0.0.0.255 any
!
!
route-map ADSL-users permit 10
match ip address Off-Int
set ip default next-hop 192.168.1.1
!
!
snmp-server group Customer v3 noauth
access-list 100 permit ip 172.16.151.0 0.0.0.255 172.16.2.0 0.0.0.255
access-list 100 permit ip 172.16.151.0 0.0.0.255 172.16.3.0 0.0.0.255
access-list 100 permit ip 172.16.151.0 0.0.0.255 172.16.4.0 0.0.0.255
access-list 100 permit ip 172.16.151.0 0.0.0.255 172.16.5.0 0.0.0.255
!
control-plane
!
!
voice-port 0/0/0
supervisory disconnect dualtone mid-call
supervisory custom-cptone FXODisc
supervisory dualtone-detect-params 1
echo-cancel coverage 64
timeouts interdigit 5
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 50
connection plar opx 120
caller-id enable
!
voice-port 0/0/1
supervisory disconnect dualtone mid-call
supervisory custom-cptone FXODisc
supervisory dualtone-detect-params 1
echo-cancel coverage 64
timeouts interdigit 5
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 50

connection plar opx 111
caller-id enable
!
!
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
sccp local GigabitEthernet0/0.20
sccp ccm 172.16.151.1 identifier 1 priority 1 version 7.0
sccp
!
sccp ccm group 1
bind interface GigabitEthernet0/0.20
associate ccm 1 priority 1
associate profile 1 register Xcodec
associate profile 2 register Xconference
!
!
!
dspfarm profile 1 transcode universal
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
codec g729r8
codec g722-64
codec pass-through
maximum sessions 2
associate application SCCP
!
dspfarm profile 2 conference
codec g729br8
codec g729r8
codec g729abr8
codec g729ar8
codec g711alaw
codec g711ulaw
codec g722-64
maximum sessions 2
associate application SCCP
!
dial-peer voice 10 pots
destination-pattern 890.
port 0/0/0
prefix 90
!
dial-peer voice 20 pots
destination-pattern 892.......
port 0/0/0

prefix 92
!
dial-peer voice 30 pots
destination-pattern 880........
port 0/0/0
prefix 80
!
dial-peer voice 40 pots
destination-pattern 8[2-7]......
port 0/0/0
!
dial-peer voice 50 pots
destination-pattern 89[3-8].....
port 0/0/0
prefix 9
!
dial-peer voice 60 pots
destination-pattern 88[1-9].....
port 0/0/0
prefix 8
!
dial-peer voice 70 pots
destination-pattern 801[2-9].......
port 0/0/0
prefix 01
!
dial-peer voice 80 pots
destination-pattern 805........
port 0/0/0
prefix 05
!
dial-peer voice 90 pots
destination-pattern 0800.T
port 0/0/0
prefix 00
!
dial-peer voice 110 pots
destination-pattern 990.
port 0/0/1
prefix 90
!
dial-peer voice 120 pots
destination-pattern 992.......
port 0/0/1
prefix 92
!
dial-peer voice 130 pots
destination-pattern 980........
port 0/0/1
prefix 80
!
dial-peer voice 140 pots
destination-pattern 9[2-7]......

port 0/0/1
!
dial-peer voice 150 pots
destination-pattern 99[3-8].....
port 0/0/1
prefix 9
!
dial-peer voice 160 pots
destination-pattern 98[1-9].....
port 0/0/1
prefix 8
!
dial-peer voice 170 pots
destination-pattern 901[2-9].......
port 0/0/1
prefix 01
!
dial-peer voice 180 pots
destination-pattern 905........
port 0/0/1
prefix 05
!
dial-peer voice 7 voip
destination-pattern 7....
session protocol sipv2
session target ipv4:172.16.2.10 
dtmf-relay h245-alphanumeric
codec g711ulaw
fax protocol t38 nse version 0 ls-redundancy 0 hs-redundancy 0 fallback none
no vad
!
!
sip-ua
retry invite 2
timers trying 200
!
!
!
gatekeeper
shutdown
!
!
telephony-service
sdspfarm units 2
sdspfarm transcode sessions 12
sdspfarm tag 1 Xcodec
sdspfarm tag 2 Xconference
conference hardware
max-ephones 58
max-dn 300
ip source-address 172.16.151.1 port 2000
timeouts interdigit 5
time-zone 31

date-format dd-mm-yy
max-conferences 8 gain -6
call-forward pattern .T
transfer-system full-consult
transfer-pattern .T
secondary-dialtone 9
create cnf-files version-stamp 7960 Oct 18 2018 18:52:31

----------------------------------------------------------------------------------------------

[Anthony Holloway]

What is your call flow? When you look at an active call, which dial-peers are in use and which IP addresses are in use for signaling and media? You can get all of that from show call active voice

Why do you have an H323 DTMF Relay on this SIP Dial Peer?

dial-peer voice 7 voip
destination-pattern 7....
session protocol sipv2
session target ipv4:172.16.2.10
dtmf-relay h245-alphanumeric
codec g711ulaw
fax protocol t38 nse version 0 ls-redundancy 0 hs-redundancy 0 fallback none
no vad
!