[cisco-voip] IP-Phones NAT problem

Mounir Mohamed mounir.mohamed at gmail.com
Thu Apr 6 13:35:27 EDT 2006


The NAT device not PIX it's C2621XM and i'm using POOL so is there is any
workaround to solve the prlblem.

On 4/6/06, Voll, Scott <Scott.Voll at wesd.org> wrote:
>
>  fixup is a command on the pix firewall that works on a protocol to make
> it work correctly.
>
> scott
>
> ------------------------------
> *From:* cisco-voip-bounces at puck.nether.net on behalf of Mounir Mohamed
> *Sent:* Thu 4/6/2006 10:18 AM
> *To:* Wes Sisk
> *Cc:* cisco-voip at puck.nether.net
> *Subject:* Re: [cisco-voip] IP-Phones NAT problem
>
>
> ?
>  Dear Wes,
>
> Could you clarify more What is the FIXUP
>
> Bet Reagrds,
> Mounir Mohamed
>
>
> On 4/6/06, Wes Sisk<wsisk at cisco.com> wrote:
> >
> > all voip protocols embed the L3 address in the signaling protocol.  You
> > will need a NAT device that supports a 'fixup' mechanism for those
> > protocols.
> >
> > I know the PIX does.
> >
> >
> > /Wes
> >
> >  On Apr 6, 2006, at 8:21 AM, Mounir Mohamed wrote:
> >
> > Dear All,
> >
> >
> > I have 2 IP-phones connected to C2621 with the below configuration the
> > problem that, the phones used 10.0.0.25 and 10.0.0.26 and both is NATED
> > on the 2600 router, also both registered in international SIP server but
> > thay can not make calls even between each other, But when i trying to using
> > static NAT (Private--> Real IP) everything working fine but i can not
> > deticate IP for each phone and now the problem due to NAT so anybody could
> > help in that, HOw can i use NAT but in the same time the phones working
> > because it's seems that the NAT port changes it the reason behind the
> > problem
> >
> >  Seef-HQ#sh run
> > Building configuration...
> >
> >
> > Current configuration : 1596 bytes
> > !
> > version 12.3
> > service timestamps debug datetime msec
> > service timestamps log datetime msec
> > service password-encryption
> > !
> > hostname Seef-HQ
> > !
> > logging buffered 4096 debugging
> > enable secret 5 $1
> > !
> > ip subnet-zero
> > ip cef
> > !
> > !
> > ip name-server 195.219.14.20
> > ip name-server 64.85.63.6
> > !
> > !
> > !
> > voice rtp send-recv
> > !
> > voice service voip
> >  sip
> > !
> > voice class codec 1
> >  codec preference 1 g711ulaw
> > !
> > !
> > !
> > !
> > !
> > !
> > !
> > no voice hpi capture buffer
> > no voice hpi capture destination
> > !
> > !
> > !
> > !
> > !
> > !
> > interface FastEthernet0/0
> >  ip address 217.X.X.X 255.255.255.240
> >  ip nat outside
> >  duplex auto
> >  speed auto
> > !
> > interface FastEthernet0/1
> >  ip address 10.0.0.1 255.255.255.0
> >  ip nat inside
> >  duplex auto
> >  speed auto
> > !
> > ip nat pool LAN 217.X.X.X 217.X.X.X prefix-length 28
> > ip nat inside source list 10 pool LAN overload
> > ip nat inside source static tcp 10.0.0.113 80 interface FastEthernet0/0
> > 9999
> > ip nat inside source static 10.0.0.4 217.X.X.Y
> > ip nat inside source static 10.0.0.3 217.X.X.Z
> > ip http server
> > ip classless
> > ip route 0.0.0.0 0.0.0.0 217.X.X.X
> > !
> > !
> > access-list 10 permit 10.0.0.0 0.0.0.255
> > !
> > !
> > !
> > !
> > !
> > !
> > dial-peer voice 1 voip
> >  session protocol sipv2
> >  session target ipv4:67.X.X.X
> >  session transport udp
> > !
> > sip-ua
> >  nat symmetric role active
> >  nat symmetric check-media-src
> >  retry invite 2
> >  retry response 2
> >  retry bye 2
> >  retry cancel 2
> >  sip-server ipv4:67.X.X.X
> >
> >
> > --
> > Best Reagrds,
> > Mounir Mohamed
> >  _______________________________________________
> > cisco-voip mailing list
> > cisco-voip at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-voip
> >
> >
> >
>
>
>
> --
> Best Reagrds,
> Mounir Mohamed
>



--
Best Reagrds,
Mounir Mohamed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20060406/d8e43228/attachment-0001.html 


More information about the cisco-voip mailing list