VOIP through ipsec

[hansspark]

HI all,

I  configured a site to site IPSEC tunnel between ASA5510 (site1) and sonicwall (site 2) . The ipsec tunnel is established and I can ping two subnets

each other. I am using ASA5510 as the gateway for voip. ie I gave the ip of voip provider in sonicwall to route the traffic to that ip to IPsec tunnel.

The routing is happening and packets to that publc ip is reaching at cisco and it's going out as well. The SIP client in site 2 is able to register to the

voip provider. But whenever he makes calls to other client in site 2 his phone is ringing , but he can't hear anything after he answer the call. Caller is

hearing abrupt voices. Secondly when a SIP client calls from site 1 to site 2 he is not even able to reach him.  Site 2 phone is not even ringing when

calls from site 1. We have soft phones as well as hardphones. I think it might be due to the IPsec tunnel problem.  One thing is the voip asterisk server

is not under site 1 or siet 2 it is in ouside network of ASA5510 .Will taht be the issue ? Plese give some leads on this..Thanks

Thanks & Regards

Hans Emmanuel

[Federico Coto Fajardo · Accepted solution]

Hi,

I would think that the problem is routing if voice is not passing thru or filtering the ports for voice traffic.

There were some SIP bugs on some ASA versions as well with the SIP inspection.

Try disabling SIP inspection on the ASA just to see if the problem persists and try to make sure the routing on both sides is correct for the voice traffic.

If the problem continues, perhaps you can include a drawing to try to help you out.

Federico.

[hansspark]

yes federico I will check this

[hansspark]

Hi Federicko,

Thanks for your reply. I think disabling SIP inspection did the job.Sound quallity is good now.

Will there be any adverse effects due to disabling SIP inspection.

[Federico Coto Fajardo]

Yes.

SIP inspection enables call handling.

As for all inspection it allows session tracking and opening secondary channels when needed.

Depending on the current OS, I know a lot of SIP bugs are fixed on 8.2x

Federico.