03-20-2023 02:03 AM
We have replaced our old cisco 2921 router with cisco 4331 recently. We are running Asterisk SIP server behind NAT.
The configuration is pretty simple and was working with Cisco 2921 for years without issue. However, with same configuration on Cisco 4331, SIP peers are not reachable. Other Non-SIP services are working ok.
We tried to enable/disable SIP ALG but no luck.
Below is the conf with diagram-1 attached herewith.
=============================================================
interface GigabitEthernet0/0/0
ip address 2xx.xxx.xx.4 255.255.255.224
ip nat outside
negotiation auto
ip virtual-reassembly
!
interface GigabitEthernet0/0/1
ip address 10.10.8.1 255.255.255.0
ip nat inside
negotiation auto
ip virtual-reassembly
ip nat inside source static 192.168.99.5 2xx.xxx.xxx.22
ip route 0.0.0.0 0.0.0.0 2xx.xxx.xxx.1
ip route 192.168.99.0 255.255.255.0 10.10.8.254
====================================================
rtr-2r#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 2xx.xx.x.22 192.168.99.5 --- ---
udp 2xx.xxx.xx.22:5060 192.168.99.5:5060 34.xx.xx.xx:5060 34.xxx.xx.xx:5060
Total number of translations: 2
Appreciate if any leads about solving this can be provided.
Thanks,
Sam
03-20-2023 04:23 AM
Looks like some issue around ISR 4K
check the bug :
https://bst.cisco.com/bugsearch/bug/CSCuy82008
check below thread :
https://community.cisco.com/t5/voice-over-ip/sip-nat-over-isr-4300-series-broken/td-p/2992280
Other suggestions check MTU and depends on version you running check any Limitation :
03-20-2023 07:52 AM
I have seen some compatibility issues because the ISR 4K uses different port ranges for RTP traffic than the ISR G1 used. Here is what I did to resolve that problem for a customer.
voice service voip
rtp-port range 16384 32766
03-22-2023 01:06 AM
I have checked above but it looks that the router seems to affect the SIP option message response from the remote peer and as a result the asterisk mark the remote peer unreachable. We tried with different IOS including latest and older but the same behaviour.
What is different in terms of SIP message handling in ISR 4k routers compare to 2800/2900 and
How can we prevent router to modify SiP messages?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide