04-29-2013 05:02 AM - edited 03-04-2019 07:45 PM
hi.
im in the progress of Configuring a Cisco 881 Router, for a branch office.
Behind this Router they have an PBX, is it prossible to inspect SIP packet using CBAC, and thereby open for RSTP pinholes.
i only have 1 Public ip adresser, and im not fond of configuring thousands of PAT to the PBX.
i have with success, Accomplished this with Global Inspection on ASA Firewalls, but i dont know if this can be done with IOS as well.
Solved! Go to Solution.
04-29-2013 01:06 PM
You can search for "SIP ALG" or similar terms.
Thank you for the nice rating and good luck!
04-29-2013 07:32 AM
You don't need to do anything for that to happen.
Cisco NAT automatically opens needed ports based on content the SIP messages.
04-29-2013 12:20 PM
ok, so i only need to forward UDP/5060 to the PBX, and then it would work ?
i thought i needed to inspect SIP and RTP so the required dynamic ports would be opened as needed
04-29-2013 12:29 PM
Correct. You don't need to anything else.
Please remember to rate useful posts clicking on the stars below.
04-29-2013 12:35 PM
ok thx
do u have a link that tells more about the Cisco NAT Feature regaring SIP content
04-29-2013 01:06 PM
You can search for "SIP ALG" or similar terms.
Thank you for the nice rating and good luck!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: