No voice when call forward to external number

[andrewsymms]

Hello

With the firewall turned on on sr520 calls ring to forwarded number but no voice in either direction.

Is there some ports to be opened to allow voice through.

Works fine with firewall off ?

Andrew

[Steven DiStefano]

What release are you running, how are you interconnecting to the PSTN (FXO, PRI, SIP Trunk)?

Are you able to make outgoing calls from internal extensions?

Are you able to receive calls from external numbers?

This will help us figure out how to help you.

Thanks

Steve

[andrewsymms]

Yes can make and recieve calls from external numbers with firewall on sr520 off. Turn it on and makes connection but no voice

.

uc520 15.0(1)XA  SR520 12.4(20)T3

Connections from and to external lines are sip with a fall back ISDN if sip doesnt work.

Andrew

[Steven DiStefano]

OK, so we need to understand the topology.   Is the SR520 in front of the UC520 with the WAN interconnect and acting as the FW, NAT & SIP ALG? 

In this case, the UC520 FW should be off as well as NAT disabled.

Or is the tolology different?

[andrewsymms]

Hello

Yes Correct and the nat and firewall are off on the uc500

[Steven DiStefano]

I love the CCA topology view :-)   Nice!

So I dont think you have a problem.  The SIP INVITE will include the SDP message, and in it will be the negotiated of RTP ports, which the SIP ALG (on the SR520) needs to open.   The UC500 is not in play here, and shouldnt, as double NATs will do exactly what you say usually (no voice path).

SO you initial post is correct.  UC500 FW is off when you use a router/FW in front of it.

So sounds like you are working OK.  Correct?

But, if you are saying that the Call forwarding to a remote number (a mobile for example) is not working for SIP, then there may be something we can do there.

Who is the SIP Trunk Service Provider?

[andrewsymms]

I dont think so

Shouldnt the firewall be switched on on the sr520 as that is directly connected to the internet.

When I turn it on thats when there is no voice ?

The firewall and nat are off on the uc 500

[Steven DiStefano]

OK.   I understand better.

Check this out, this one shows ports to let throught the SR520

https://www.myciscocommunity.com/servlet/JiveServlet/previewBody/1519-102-1-1770/UC500_Firewall_v4.pdf

And this one describes your exact topology, but perhaps misses the ALG and ports

http://www.cisco.com/en/US/docs/net_mgmt/cisco_configuration_assistant/version1_8/quick/guide/English/UC500SR500.html

[andrewsymms]

Ive tried opening the ports as detailed in your previous link but still get no voice

Attached couple of screen shots that may shed some light on whats wrong

Andrew