You can't curse Cisco unless you know what you're doing ;-)

! 
access-list VoIP-Traffic extended permit tcp any any eq sip
access-list VoIP-Traffic extended permit udp any any eq sip
access-list VoIP-Traffic extended permit udp any any eq 5080
!
class-map VoIP-ACL
 match access-list VoIP-Traffic
class-map VoIP-DSCP
 match dscp cs3  ef
!
policy-map VoIP-QoS
 class VoIP-ACL
  priority
 class VoIP-DSCP
  priority
!
service-policy VoIP-QoS interface OUTSIDE
!
! Disable SIP inspection on all interfaces:
!
class-map inspection_default
 match default-inspection-traffic
!
policy-map global_policy
 class inspection_default
   no inspect sip
!

Nathan Nieblas
 
SACA Technologies, Inc.
1260 N. Hancock Street, Suite 102
Anaheim Hills, CA 92807
 
p: 714-777-3222 x113
f:  888-603-9033
e: [email protected]

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Robert B
Sent: Friday, January 08, 2010 7:33 AM
To: Sen Heng
Cc: [email protected]
Subject: Re: [sipx-users] Is my Cisco ASA configurations correct?

I curse Cisco... :)

I'm not sure what you mean by making RTP bypass the NAT. You mean how to

get RTP through the firewall successfully? I've done that on many other 
firewalls... I'm not immediately sure how multi-site/teleworker would be

impacted by this. It's just a basic port range forward...

Could you clarify?

-- Robert



On 1/8/2010 9:17 AM, Sen Heng wrote:
> prioritization 5060/5080 is ok.
> I think how to make RTP bypass NAT is more important. I havn't got 
> time to test but maybe use SBC or NAT 0 (bypass NAT on ASA) to get RTP

> pass through.
> prioritization RTP is same with you did before.
> Please let me know which way you get multi-site/teleworker working. 
> Because all customer here use Cisco ASA.
>
>

_______________________________________________
sipx-users mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
sipXecs IP PBX -- http://www.sipfoundry.org/
_______________________________________________
sipx-users mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to