[Asterisk-Users] SIP and VPN

Mark Johnson asterisk at astroshapes.com
Thu Nov 10 10:09:01 MST 2005


Lists Pleasants wrote:

>ScreenOS 5.0x and 5.1x  has some issues wit SIP. Try the policies I have
>listed below.
>
>set policcy id 1001 from "Trust" to "Trust"  "Local" "Remote" "SIP"
>permit log count
>set policy id 1001 application "IGNORE"
>set policy id 1002 from "Trust" to "Trust"  "Remote" "Local" "SIP"
>permit log count
>set policy id 1002 application "IGNORE"
>
>I am running 5.2r1 without any issues but I have turned off any
>application deep scanning.
>
>unset alg sql
>unset alg q931
>unset alg h245
>unset alg ras
>unset alg sip
>
>-Chip
>
>
>  
>
Why do you go from Trust to Trust in your policies?  I tried that and 
the phone won't work at all.  The only way to get it to register is for 
me to put Remote as an Untrust zone.  Thanks!

Mark



More information about the asterisk-users mailing list