multiple duplicate udp NAT entries

slemberg · ‎01-29-2009

Dear all,

using a Cisco 878 with PAT I got following issue:

This is the situation: There is a location with a few IP-phones, which register to the Central Office via SIP 5060. After that they establish RTP sessions to the Central office. The C878 got one official IP adress, the LAN got a private range (192.168.200.x).

After a few minutes there exist multiple duplicate UDP Nat translations, so communication of the involved phones fail:

#sh ip nat trans

udp 92.60.223.30:5004 192.168.200.46:5004 92.60.208.97:10000 92.60.208.97:10000

udp 92.60.223.30:5004 192.168.200.46:5004 92.60.208.97:10056 92.60.208.97:10056

udp 92.60.223.30:5005 192.168.200.46:5005 92.60.208.97:10001 92.60.208.97:10001

udp 92.60.223.30:5005 192.168.200.46:5005 92.60.208.97:10057 92.60.208.97:10057

ip nat inside source list NatToExternal interface Dialer1 overload

ip access-list extended NatToExternal

permit ip 192.168.200.0 0.0.0.255 any

IOS is: c870-advipservicesk9-mz.124-15.T8.bin

How can I get around these duplicate NAT ?

Thanks in Advance,

Sascha

drolemc · ‎02-04-2009

This is bug CSCse97264. Two or more UDP NAT translations that relate to different requests may be assigned port numbers with the same inside global IP address.