<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I'm curious what makes you feel the phones are horrible at nat traversal. Is there a particular behavior they do or are not doing that could improve behavior with NAT?<div><br></div><div>The built-in VPN for the phones is very much tied into the provisioning they get from CUCM. I don't believe you are going to get very far trying to do it without one, but I'm sure the community would be interested in seeing how you do.<br><div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div>-Ryan</div></span>
</div>
<br><div><div>On Mar 7, 2011, at 10:16 AM, Jared Mauch wrote:</div><br class="Apple-interchange-newline"><div>I'm looking to use a 3rd party SIP solution and VPN system and wanted to try to make it work while we wait for our CM to ship.<br><br>The java/cnu based phones are horrible at nat traversal and I want to run a PPTP or other vpn solution actually on the IP PBX so the phones can work around the broken nat. If someone from Cisco wants to contact me off-list (we have TAC support, so I can open a case as well) I'd be happy to work with you to help solve these defects.<br><br>I'm working with the 7965 and 7975 phones. To have VPN support one needs to run the 9.X firmware.<br><br>(Still waiting on my CM to ship -- send me ~30 phones and no CM and i'll make it work with our existing IP PBX :).<br><br>- Jared<br><br>On Mar 7, 2011, at 10:12 AM, Scott Voll wrote:<br><br><blockquote type="cite">What version of ASA / CM are you using?<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">I think this is only supported if you have at least ASA FOS 8.2 or 8.3 (I can't remember) AND CM 8.X<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">In the past, I have used a ASA 5505 with a Site to Site VPN and used the PoE ports to power the Phone. Worked very well and with the cost of a ASA 5505 as low as it is..... It might be a good option.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">YMMV<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Scott<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">On Fri, Mar 4, 2011 at 4:18 PM, Jared Mauch <<a href="mailto:jared@puck.nether.net">jared@puck.nether.net</a>> wrote:<br></blockquote><blockquote type="cite">Can someone please send me a copy of your config file that is using the VPN for a home user? I'd like to compare these settings to what I am trying to do here.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">I would really appreciate it. You can obfuscate any IP/Name/password configs you want.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Bonus if you are using something like PPTP with a 7965 or 7975 and SIP.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Much appreciated!<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">- Jared Mauch<br></blockquote><blockquote type="cite">_______________________________________________<br></blockquote><blockquote type="cite">cisco-voip mailing list<br></blockquote><blockquote type="cite"><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br></blockquote><blockquote type="cite"><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></blockquote><blockquote type="cite"><br></blockquote><br><br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>https://puck.nether.net/mailman/listinfo/cisco-voip<br></div></div><br></div></div></body></html>