cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
226
Views
0
Helpful
2
Replies

Cisco ISR 4321 router won't allow SIP Traffic Over Static NAT

Scott16
Level 1
Level 1

I upgraded from a 2901 router to a 4321 but I am running into problems getting the SIP RTP streams through the NAT that I setup.

The NAT is configured the same as it was on the 2901 router, but the only difference I noticed was that the order of the NAT's was reversed.  The version of IOS that the 4321 is running is 17.09.04a.

Here is a copy of the config

no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060
ip nat inside source static udp 192.168.0.7 5060 "Outside IP" 5060 extendable
ip nat inside source list 1 interface GigabitEthernet0/0/0 overload

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

have done the the debug and see the translation or packets coming to router ? i will also try using interface ?

if the GigabitEthernet0/0/0  have DHCP IP address

where is 192.168.0.7 - is directly connected, or do you have the device routes in place ?

try using interface.

no ip nat inside source static udp 192.168.0.7 5060 "Outside IP" 5060 extendable

ip nat inside source static udp 192.168.0.7 5060 GigabitEthernet0/0/0 5060 extendable 

 

also advise to post complete config by removing passwords.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Timothy Patrick
Level 1
Level 1

you could try the following:


no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060
ip nat inside source static udp 192.168.0.7 5060 <Outside_IP> 5060 extendable
ip nat inside source static udp 192.168.0.7 10000 <Outside_IP> 10000 extendable
ip nat inside source static udp 192.168.0.7 10001 <Outside_IP> 10001 extendable

In this configuration, SIP signaling (port 5060) and RTP media streams (ports 10000-10001) are statically mapped to your external IP address. 

Review Cisco Networking for a $25 gift card