<div>Matt,</div>
<div> </div>
<div>If your phone is using SIP, then you should enable sip inspection (7.x code or above) or fixup sip (6.x code) and have a rule that allows source (wherever you need) inbound on the outside interface to TCP 5060 (SIP port). The sip inspection or fixup should enable the proper ports for the require RTP streams. I had this working through an ASA at some point, but I don't remember if both ends were doing NAT or only one end. I don't know the phone you are talking about, but you also might want to look into STUN or ICE to get beyond the NAT Traversal issue, if that is what's causing the problem.
</div>
<div> </div>
<div>In the Firewall log, are you seeing Denys? or drops? Have you tried debug sip on the firewall console? I've been dealing with several ASA SIP issues lately. SIP trunking with NAT will certainly not work and there is a Cisco Bug that my company discovered when setting up our PBX.
</div>
<div> </div>
<div> Shlomo in Israel<br><br> </div>
<div><span class="gmail_quote">On 11/27/07, <b class="gmail_sendername">Matt</b> <<a href="mailto:mhoppes@gmail.com">mhoppes@gmail.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Is there anything special that anyone here has had to do to get an Aastra phone (on the Internet) to talk to
<span class="st" id="st" name="st">Asterisk</span> behind a <span class="st" id="st" name="st">PIX</span> firewall?<br><br>Ports 10000-20000 UDP are open on the <span class="st" id="st" name="st">PIX</span> and forwarding to the
<span class="st" id="st" name="st">Asterisk</span> server. The <span class="st" id="st" name="st">Asterisk</span> server's RTP.CONF is set to use 10000-20000. The phone registers, and will place AND receive calls, however, no audio is passed. The phone is an Aastra 9133i.
<br><br>_______________________________________________<br>--Bandwidth and Colocation Provided by <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.api-digital.com--/" target="_blank">http://www.api-digital.com--
</a><br><br><span class="st" id="st" name="st">asterisk</span>-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">
http://lists.digium.com/mailman/listinfo/<span class="st" id="st" name="st">asterisk</span>-users</a><br></blockquote></div><br>