cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
410
Views
0
Helpful
2
Replies

H.323 RAS with NAT

andyirving
Level 1
Level 1

ATA 186 version 2.16

Cisco 3662 12.2(15)T7

Open Source H.323 Gatekeeper

NAT translation with ALG

I am running an ATA186 connected into the inside interface of a 3662 running NAT. The outside interface has an open source H.323 Gatekeeper connected on the LAN.

Testing

Using Netmeeting I can connect through the NAT router and get a RAS RCF message back. Working OK.

Using the ATA 186 I get a failure.

Sends GRQ and gets GCF back.

Then sends a RRQ.

This is where it fails as the RRQ message has the non translated ("un-natted") source address of the ATA. The GK then sends a RRJ stating "invalid Call Signal Address".

It seems as though the layer 3 header IP src/dst is being translated but the higher layer information is unchanged. This is supposed to be taken care of by IOS Application Level Gateway (ALG) feature.

Anybody got any ideas??

2 Replies 2

adesalu
Cisco Employee
Cisco Employee

Andy,

This sounds like it could be a bug. I would suggest capturing the following information, and then opening a case with Cisco TAC.

debug h225 asn1

debug cch323 ras

debug cch323 h225

debug ip nat h323

Ademola

syscons
Level 1
Level 1

this is bug H.323. It don't work with NAT. Just sip.