[cisco-voip] CME, VPN, PIX IOS

[Wes Sisk]

if you are only using the router and pix for VPN, then do not use the fixup.
Fixup is primarily needed when you need to dynamically open/close tcp/udp
sessions or when you are NAT'ing the connection.

/Wes

-----Original Message-----
From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net]On Behalf Of Voll, Scott
Sent: Tuesday, May 10, 2005 11:09 AM
To: Jim McBurnett; cisco-voip at puck.nether.net
Subject: RE: [cisco-voip] CME, VPN, PIX IOS


Jim--

This sounds like either an ACL problem, routing problem, or a Fixup
problem.

Check all your fixup protocols.

Then check all your routing tables (make sure all subnets that need to
go across the VPN are there).

And make sure that the VPN ACL includes everything.  Sounds like the
setup is going to the CME but when the RTP stream starts you are not
getting the phone to phone or phone to VGW RTP back (check IP addresses
for being blocked).

Hope it helps

Scott

-----Original Message-----
From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Jim McBurnett
Sent: Monday, May 09, 2005 5:57 PM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] CME, VPN, PIX IOS

Hello!
I have been testing a little something and I was wondering if anyone
else has seen this..

CME ver 3.2
PIX 6.3.3(132) on a 501

IP phone
   |
PIX 501
   |
Internet
   |
2811 with CME/VPN
   |
POTS lines

I have one way audio on the IP phone at the PIX location.
It does not matter how I try to call- To POTS or to other IP phones at
the 2811 site, the other end can hear me, but not the other may around.

I have good ping times (sub 50ms)
Packet size has been adjusted up and down from 1400 to 1492

The VPN works fine for other DATA.. The Circuit was monitored on both
ends, neither was even approaching 30% capacity

I have check the VPN access-list and it all seems fine Traffic is
flowing for all the correct IP addresses.

Thanks,
Jim



_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip