I have dot1x implemented on my cisco 4500e using a windows 2008 NPS server. I'm noticing that when a endpoint fails to authenticate it doesn't reattempt unless I do a shut no shut. Is there a dot1x command that you can set the default re-authentication attempt time to? Below are my dot1x global and interface configs.     Global dot1x system-auth-control dot1x guest-vlan supplicant Interface switchport mode access  switchport voice vlan XXX  authentication event fail action authorize vlan XXX  authentication event server dead action authorize vlan XXX  authentication event no-response action authorize vlan XXX  authentication host-mode multi-domain  authentication port-control auto  authentication periodic  authentication timer inactivity 60  mab  dot1x pae authenticator  dot1x timeout server-timeout 50  dot1x timeout tx-period 2  dot1x timeout supp-timeout 5  qos trust device cisco-phone  spanning-tree portfast  spanning-tree bpduguard enable ... View more

I have a cisco 2621XM with IOS 12.3. Is there a command for the cisco router to NAT the connection address within the SDP packet? Is there a command for setting a static NAT with a large port range for RTP? Right now I have to dedicate a whole public IP addy for RTP since I don't know how to do specify a range. If I have the following scenario. WAN Port fa0/0 10.10.10.1 LAN Port Fa0/1 192.168.1.1 VOIP Server(Interactive Intelligence, Handles all SIP messages) IP 192.168.1.50 VOIP Media Server(Handles all RTP Traffic) IP 192.168.1.100 Current NAT setup ip nat inside source list NAT_Addys interface fa0/0 overload ---------NAT Overload for all my LAN devices ip nat inside source udp 192.168.1.50 5060 fa0/0 5060 ---------Static NAT for SIP messaging to my VOIP Server ip nat inside source 192.168.1.100 10.10.10.2 ---------Static NAT for RTP to my Media Server ip access-list standard NAT_Addys permint 192.168.1.0 0.0.0.255 ... View more

We currently support a third party VOIP software. Recently we have had issues with our T38 faxing to our SIP Trunk provider because our FW (sonicwall) doesn't support Nating the connection address within the SDP packet of the T.38 reinvite. This has caused us to look at alternate solutions. I have been in discussion with CISCO sales engineers and can't get a straight answer on which one of their products support this (RFC 3362, T.38 protocol used by our VOIP server) . We were looking at replacing our sonicwall with an ASA but it seems it doesn't support RFC 3362 either . However, the sales engineer thinks that their regular routers will. So If I purchase a cisco router, i.e 8xx or 2621XM the question is where do I put it in my current topograpy. Currently we our at a Datacenter and our drop into our cabinet comes right into the Sonicwall and we have all NAT handled there, routing to different LAN ports on the Sonicwall. On LAN side all we have are standard switches supporting all of our Servers. So with the whole back story here are my questions. If I buy a Cisco router to handle my NAT issue for faxing.... Do I put it on the WAN or LAN side of my FW? Do I setup the router to handle all of my NATing or just the NATing of my VOIP server that is having issues with the T.38? Would I need a Sonicwall FW if I purchased a CISCO 891? ... View more

Does Cisco asa's, specifically 5500 series support RFC 6466 for Sip NAT translations? I currenlty have a IP/PBX that uses RFC 6466 for faxing via T38. I also have a sonicwall firewall that supports NAT translation within my SIP message but doesn't support translating the SIP Re-invite to T38. Sonicwall states the reason the connection address within the SDP isn't being NATed on the t38 reinvite is because they don't support RFC 6466. I believe my only option to get my fax working is to purchase another FW that supports it, but am having difficulty confirming whether the 5500 series will support this or not. ANy help is greatly appreciated. ... View more