Cisco 881 for video conference

[J_Jacky01]

Hi 

i have configure cisco 881 as below, clients can access internet work well, but video conference cannot call in/out could you please help to reivew and as advise.

------------------------------------------------

!

ip name-server 203.144.128.194
ip cef
no ipv6 cef
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
description WAN IP
ip address XXX.XXX.29.94 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
!
interface Vlan1
description LAN
ip address 192.168.1.1 255.255.255.0
ip access-group 101 in
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http secure-server
!
!
ip nat inside source list 101 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 XXX.XXX.29.93
!
!
access-list 101 remark Verizon
access-list 101 permit ip 65.210.41.0 0.0.0.255 any
access-list 101 permit ip host 63.97.112.115 any
access-list 101 permit ip host 63.97.112.116 any
access-list 101 remark Level3
access-list 101 permit ip 207.218.87.0 0.0.0.255 any
access-list 101 permit ip 209.130.193.0 0.0.0.255 any
access-list 101 remark DNS
access-list 101 permit ip host 203.144.128.194 any
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

[Philip D'Ath]

Does access-list 101 include the IP addresses of the video conference kit you need to talk to?

Does your video conference kit require inbound ports to be NATed?

[J_Jacky01]

Yes, included. and required port to be NAT

[Georg Pauwen]

Hello,

with your current configuration, I don't see how your clients (on Vlan 1) can access the Internet, including video conferencing.

I have made a few changes to your configuration (marked in bold), try those and check if that makes a difference:

ip name-server 203.144.128.194
ip cef
no ipv6 cef
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
description WAN IP
ip address XXX.XXX.29.94 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
!
interface Vlan1
description LAN
ip address 192.168.1.1 255.255.255.0
no ip access-group 101 in
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http secure-server
!
ip nat inside source list 1 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 XXX.XXX.29.93
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 101 remark Verizon
access-list 101 permit ip 65.210.41.0 0.0.0.255 any
access-list 101 permit ip host 63.97.112.115 any
access-list 101 permit ip host 63.97.112.116 any
access-list 101 remark Level3
access-list 101 permit ip 207.218.87.0 0.0.0.255 any
access-list 101 permit ip 209.130.193.0 0.0.0.255 any
access-list 101 remark DNS
access-list 101 permit ip host 203.144.128.194 any
!
control-plane
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

[J_Jacky01]

Yes, clients can access internet, but how for video conference ?
i was setup video conference IP 192.168.1.10 but need to use public IP for inbound call
how to set routing as below ?
Video operator call public IP XXX.XXX.29.94 ----> translate to ---->192.168.1.10

[Georg Pauwen · Accepted solution]

Hello,

add the line below to your configuration:

ip nat outside source static xxx.xxx.29.94 192.168.1.10

[J_Jacky01]

Thank you for your help, I add this command already and will test it in next week then update.