Hello,
I am studying for CCNA and simlutaneously setting up a VOIP server at work and have done the following:
Voice server and phone hang off a cisco 3500XL switch > which hang off G0/1 (10.10.100.x network)
my G0/0 connects directly to a cable modem (12.34.56.78 public network)
my current config is as follows:
interface GigabitEthernet0/0
ip address 12.34.56.78 255.255.255.192
no ip redirects
ip nat outside
ip virtual-reassembly in
duplex full
speed 1000
media-type rj45
!
interface GigabitEthernet0/1
ip address 10.10.100.1 255.255.255.0
no ip redirects
ip nat inside
ip virtual-reassembly in
duplex full
speed 100
media-type rj45
vlan-id dot1q 10
exit-vlan-config
!!!!
!!!!
ip nat translation tcp-timeout 600
ip nat translation udp-timeout 60
ip nat translation dns-timeout 45
ip nat inside source list 92 interface GigabitEthernet0/0 overload
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip nat inside source static udp 10.10.100.90 5060 12.34.56.78 5060 extendable
ip nat inside source static udp 10.10.100.90 5062 12.34.56.78 5062 extendable
ip nat inside source static tcp 10.10.100.90 443 12.34.56.78 8080 extendable
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
ip route 98.76.54.32(SIP Proivider) 255.255.255.0 12.34.56.78
!
access-list 92 permit 10.10.100.0 0.0.0.255
access-list 92 permit 12.34.56.78 0.0.0.64
access-list 101 permit udp 10.10.100.0 0.0.0.255 range 10000 20000 12.34.56.78 0.0.0.64 range 10000 20000
So my issue is this:
I can currently make calls out from phones on my local network. I can can even provision remote phones not on the local notwork by setting the phone's provisioning server as the public IP of the VOIP box. I can even dial numbers and hear it ring. But when the other end picks up I get zero voice. Now I know its because I am probably not passing the RTP traffic udp ports 10000 through 20000, but I cant figure out how to statically NAT traffic destined for my VOIP box for that port range. I successfully mapped:
ip nat inside source static udp 10.10.100.90 5060 12.34.56.78 5060 extendable
ip nat inside source static udp 10.10.100.90 5062 12.34.56.78 5062 extendable
ip nat inside source static tcp 10.10.100.90 443 12.34.56.78 8080 extendable
but this command does not allow for ranges. This is dovetailing with my CCNA studies as I still am hung up on ACL's. I need a visual. Can anyone provide some insight? Much appreciated.
BTW I know MUUUUCH more can be done to optimize voice traffic on my router. Right now I am simply trying to allow for remote user provisioning and use.
