I have some cisco 7940's having calls initiated to them from a public address with 1:1 nat and also are set to my asterisk machine over a IPsec tunnel.
Below are the applicable lines for my outside initiates call to phone inside: You may need to take the no off depending on how your phones are setup in reguards to external NAT IP. My phones have their real external IP set into them. no fixup protocol sip 5060 no fixup protocol sip udp 5060 You will need the access-list line for the accees-group outside - but shouldn't need the inside one unless you are limiting outgoing traffic also. You could break this into multiple lines for different ports/port ranges, but I am just allowing all traffic from the host to reach the phone. You could probably also just get away with allowing all/only udp from outside to the phone. access-list from-outside permit ip host sip_endpoint_ip_here any access-group from-outside in interface outside access-list from-inside permit ip 192.168.3.0 255.255.255.0 host 216.136.148.193 access-group from-inside in interface inside static (inside,outside) external_ip internal_ip netmask 255.255.255.255 0 0 Hope this helps -Jon Quoting Christopher <[EMAIL PROTECTED]>: > Can anyone point me in a good direction for configuring SIP through a > PIX using 1:1 NAT. I have read anything I could get my hands on and > tried them all with very little success. I can get it to work through > the cheap little cable modem routers, but not this PIX. > > I -can- make a direct SIP call using the IP address of the * server > ([EMAIL PROTECTED]), but when I do that * still doesn't show it > registering. Even when I call through this method the phone comes up as > "UNREACHABLE" and the port is listed as 0 instead of 5060 like all the > internal phones. > > -- > B2 Technologies, LLC > - www.VoIPSupply.com > - www.ValueResale.com > 454 Sonwil Drive > Buffalo, NY 14225 > > (716) 630-1555 x.27 > (716) 250-3411 (Direct) > (716) 630-1548 fax > > We sell all things VoIP related at: http://www.VoipSupply.com > Buy online, same day shipping on most items, volume discounts are available. > > _______________________________________________ > Asterisk-Users mailing list > [email protected] > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users > ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. _______________________________________________ Asterisk-Users mailing list [email protected] http://lists.digium.com/mailman/listinfo/asterisk-users To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
