cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Ask the Expert- SD-WAN

How to disable SIP inspection on single interface of PIX/ASA

15696
Views
0
Helpful
0
Comments

Resolution

To disable SIP inspection on particular interface following steps are required :-

  1. Remove SIP inspection from  global policy
  2. Create a new policy for inspecting SIP
  3. Apply it to all the other interfaces.

Refer to following configuration example:-


   hostname(config)# policy-map global_policy
   hostname(config-pmap)# class-map inspection_default
   hostname(config-pmap)# no inspect sip
   hostname(config-pmap)#exit
   hostname(config)# policy-map sip_policy
   hostname(config-pmap)# class-map inspection_default
   hostname(config-pmap)# inspect sip
   hostname(config-pmap)#exit
   hostname(config)#service-policy sip_policy interface [interface]


Note:-  [interface] is the interface name on which you need to have SIP enabled.

For additional help with traffic inspection on PIX/ASA refer to Modular Policy Framework