Identifying oice traffic using ACL's

[s.nasheet]

Hi ,

Can you please advise how to identify Voice traffic using ACL's.

I need to identify voice traffic and then use route map to route traffic over preferred path.

Any sample config will help.

thanks

[virverma]

You can try this,

you can use this ACL to pick up voice and H323 signalling packets.

access-list 102 permit udp any any range 16384 37276

access-list 103 permit tcp any eq 1720 any

access-list 103 permit tcp any any eq 1720

Where,

access-list 102 matches VoIP traffic based on the UDP port range.

access-list 103 matches VoIP signaling protocol. In this case, H.323 V2 is uesd with the

fast start feature.

Then we just need to apply this to a route-map and the interface:

a) Define a route-map for traffic to go to next-hop 6.6.6.6

route-map equal-access permit 10

match ip address 102

set ip default next-hop 6.6.6.6

route-map equal-access permit 20

match ip address 103

set ip default next-hop 6.6.6.6

b) apply it to the inside (where the voice is connected to) interface:

int Ethernet0/0

ip policy route-map equal-access

[s.nasheet]

Many thanks for the response.

Just want to confirm that using these acl line , if I mark all above UDP and TCP port , then all voice traffic will be catch by these ACL.

I am asking becasue in VOICE there are many other protocols. like SIP, TRP .

Thanks

[virverma]

all I can say, voice traffic works on ports,

so you can try mentioning different ports

[s.nasheet]

thanks

[virverma]

Let me know as well if the other way works,

:)

[s.nasheet]

Yes mate, will do.