cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
22044
Views
0
Helpful
29
Replies

How to enable the RTP & Voice ports(SIP) 5060 on CISCO 2911 router

raj
Level 1
Level 1

Hello Experts,

I am facing the issue is RTP and voice ports 5060, 5061 & 5070 etc. these voice ports are my ISP already enabled on their end but they said I need to enable the voice ports on my end. Even they didn't support for enable the voice ports on my router, that's why I am asking you.

Please guide me how can I enable the above ports on my cisco 2911 route

Regards,

Raj

1 Accepted Solution

Accepted Solutions

SIP 503- Transport failure: no transports left to try

Have you tried Google to search for this error message?   Alternatively, try 3CX Softphone.

View solution in original post

29 Replies 29

Hello Raj,

do you have a voice card installed in your 2911 ? Not sure what you mean by enabling SIP and RTP ports - no ports are blocked  unless you configured access lists or some sort of firewalling. Can you post the config of your 2911, as well as the output of 'sh version' (so we can see what you have on the router) ?

Hello Georg Pauwen,

I don't know exactly about voice card installed or not. Here no one is there to support me, I am only person in this Company.

You Asked me to 2 Questions 

1. sh version

Router#
Router#sh ver
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M3, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Fri 05-Jun-15 13:24 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)

Router uptime is 14 hours, 15 minutes
System returned to ROM by power-on
System image file is "flash0:c2900-universalk9-mz.SPA.154-3.M3.bin"
Last reload type: Normal Reload
Last reload reason: power-on

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
Processor board ID FGL20051099
2 FastEthernet interfaces
3 Gigabit Ethernet interfaces
1 terminal line
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
255488K bytes of ATA System CompactFlash 0 (Read/Write)


License Info:

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 CISCO2911/K9 FGL20051099

Technology Package License Information for Module:'c2900'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security None None None
uc None None None
data None None None
NtwkEss None None None
CollabPro None None None

Configuration register is 0x2102

-------------------------------------------------------------------------

2. Router Configuration

Router#sh run
Building configuration...

Current configuration : 3883 bytes
!
! Last configuration change at 23:50:07 UTC Wed May 10 2017 by cisco
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip domain name yourdomain.com
ip name-server 202.xx.xx.xx
ip name-server 202.xx.xx.xx
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
cts logging verbose
!
!
license udi pid CISCO2911/K9 sn FGL20051099
!
!
archive
log config
hidekeys
username cisco privilege 15 secret 5 $1$C1ou$Z3.IK7HGs762bA8qFPcbH1
!
redundancy
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
ip address 125.xx.xx.xx 255.xx.xx.xx
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0 secondary
ip address 125.xx.xx.xx 255.xx.xx.xx
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
ip address 10.1.95.134 255.255.255.252
duplex full
speed 100
!
interface FastEthernet0/0/1
ip address 172.17.122.1 255.255.255.0
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat pool webcomet 125.xx.xx.xx 125.xx.xx.xx netmask 255.xx.xx.xx
ip nat inside source list 20 pool webcomet overload
ip route 0.0.0.0 0.0.0.0 125.xx.xx.xx
ip route 121.244.43.0 255.255.255.0 10.1.95.133
ip route 172.17.122.0 255.255.255.0 10.1.95.133
ip route 203.200.231.0 255.255.255.0 FastEthernet0/0/0
!
!
!
access-list 20 permit 192.168.1.0 0.0.0.255
!
control-plane
!
!
banner exec ^CCCC
% Password expiration warning.
-----------------------------------------------------------------------

Cisco Router and Security Device Manager (SDM) is installed on this device and
it provides the default username "cisco" for one-time use. If you have already
used the username "cisco" to login to the router and your IOS image supports the
"one-time" user option, then this username has already expired. You will not be
able to login to the router with this username after you exit this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace <myuser> and <mypassword> with the username and password you want to
use.

-----------------------------------------------------------------------
^C
banner login ^CCCC
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege level of 15.

Please change these publicly d> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
logging synchronous
login local
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
privilege level 15
password xxxxxxxx
login
transport input telnet
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet
!
scheduler allocate 20000 1000
!
end

uc None None None

Post the complete output to the command "sh inventory".  If there is a dialer card it ain't going to work because the UC license feature set is not enabled.  

Router#sh inventory
NAME: "CISCO2911/K9", DESCR: "CISCO2911/K9 chassis, Hw Serial#: FGL20051099, Hw Revision: 1.0"
PID: CISCO2911/K9 , VID: V07 , SN: FGL20051099

NAME: "Two-Port Fast Ethernet High Speed WAN Interface Card on Slot 0 SubSlot 0", DESCR: "Two-Port Fast Ethernet High Speed WAN Interface Card"
PID: HWIC-2FE , VID: V01 , SN: FOC142519SJ

NAME: "C2911 AC Power Supply", DESCR: "C2911 AC Power Supply"
PID: PWR-2911-AC , VID: V05 , SN: DCA1952R2QD


Router#

Hi raj@nextweb.com.au,

Check the ISP modem you connect to Cisco2911 is there any firewall feature enabled? If yes then disable that firewall feature.

Spooster IT Services Team

Hello Spooster IT service,

How can I check the ISP modem? is there any command ?

where I will check firewall feature enabled or not?

We don't have any firewalls but in my configuration I had one accesslist:

access-list 20 permit 192.168.1.0 0.0.0.255(if I am removing this accesslist internet is not working)

exactly what happened is with out cisco router I tried directly ISP connection to my laptop it is working fine but whenever through cisco 2911 router to my laptop it is not working(soft phone is not registered to SIP provider)

They said something is blocked on your router, and also they said create the rules and please allow the ports LAN to WAN & WAN to LAN.(I don't know how to allow)

They said no need of ip route then how to resolve this problem?I have only basic static configuration on my router.

I know this is because of my router configuration only but I didn't find out exact cause.

this problem effected on my job purely.

Regards,

Raj

Hi Raj, 

There are multiple subnets running on your network. There are four interfaces that you had ip addresses assigned. Can you let me know which interface is used for what? And also in which subnet your soft phones are?

Spooster IT Services Team

I am waiting for your reply please.,.

I think in my router configuration, access lists is configured

access-list 20 permit 192.168.1.0 0.0.0.255

Please tell me what to do now, I waiting for your response 

Georg please reply me.,,.

I am facing the issue with By using Cisco 2911 router soft phone(zoiper) is not registered to SIP provider.

soft phone(zoiper) is working fine for with out cisco router I tried directly ISP connection to my laptop it is working fine but whenever through cisco 2911 router to my laptop it is not working(soft phone is not registered to SIP provider)

I am getting these 2 errors

SIP 503- Transport failure: no transports left to try

SIP 408 - Request timeout

but by using normal broad band it is working fine.

We don't have any firewalls but in my configuration I had one accesslist:

access-list 20 permit 192.168.1.0 0.0.0.255(if I am removing this accesslist internet is not working)

exactly what happened is with out cisco router I tried directly ISP connection to my laptop it is working fine but whenever through cisco 2911 router to my laptop it is not working(soft phone is not registered to SIP provider)

They said something is blocked on your router, and also they said create the rules and please allow the ports LAN to WAN & WAN to LAN.(I don't know how to allow)

They said no need of ip route then how to resolve this problem?I have only basic static configuration on my router.

I know this is because of my router configuration only but I didn't find out exact cause.

this problem effected on my job purely

Regards,

Raj

Hello,

I haven't followed the entire thread, but do you have:

ip forward-protocol udp 5060
ip forward-protocol udp 5061
ip forward-protocol udp 5070

enabled globally on your router ?

Router#conf t
Router(config)#ip forward-protocol udp 5060
Router(config)#ip forward-protocol udp 5061
Router(config)#ip forward-protocol udp 5070

Leo Laohoo
Hall of Fame
Hall of Fame
no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060

Are you talking about ALG?  By default, ALG is enabled on all Cisco routers.  Above commands are to disable ALG. 

Hello Leo Laohoo,

Thank you Sir for your reply.

Exactly what happened is last week we purchased one dialer and voip minutes from local service provider. For that they are installed zoiper soft phone on my laptop, at that time they are trying to register our account on 5060 port but that is not register.

for that one they said SIP and RTP ports are not opened, so at that time I contacted  my Internet service provided(ISP). They said for my end we are enabled but you need to enable your end for allow the traffic like that they said.

One more point is by using Different network(broad band) zoiper is able to register and we are able to make a calls. Whenever I am switching the leased line which is configured on cisco 2911 router the zoiper soft phone is not registered.

By ISP end they are sent screen shots by using PING.EU website, port check--for them that is showing the port is opened but at the same way I tried for me it is showing port is closed.

Please find the attached screen shot, for them that is showing opened but for me it is showing closed. So that's why I am asking how to enable the SIP ports on my end and how to resolve the issue?

Regards,

Raj

ip nat service sip tcp port 5060
ip nat service sip udp port 5060

Try these two commands and see if they improve things. 

Review Cisco Networking for a $25 gift card