[Asterisk-Users] PIX!!!!!

[Vulture]

I have some cisco 7940's having calls initiated to them from a public address
with 1:1 nat and also are set to my asterisk machine over a IPsec tunnel.

Below are the applicable lines for my outside initiates call to phone inside:

You may need to take the no off depending on how your phones are setup in
reguards to external NAT IP. My phones have their real external IP set into
them.

no fixup protocol sip 5060
no fixup protocol sip udp 5060


You will need the access-list line for the accees-group outside - but shouldn't
need the inside one unless you are limiting outgoing traffic also. You could
break this into multiple lines for different ports/port ranges, but I am just
allowing all traffic from the host to reach the phone. You could probably also
just get away with allowing all/only udp from outside to the phone.


access-list from-outside permit ip host sip_endpoint_ip_here any
access-group from-outside in interface outside

access-list from-inside permit ip 192.168.3.0 255.255.255.0 host
216.136.148.193
access-group from-inside in interface inside


static (inside,outside) external_ip internal_ip netmask 255.255.255.255 0 0

Hope this helps

-Jon


Quoting Christopher <chris.robinson at voipsupply.com>:

> Can anyone point me in a good direction for configuring SIP through a 
> PIX using 1:1 NAT.  I have read anything I could get my hands on and 
> tried them all with very little success.  I can get it to work through 
> the cheap little cable modem routers, but not this PIX. 
> 
> I -can- make a direct SIP call using the IP address of the * server 
> (ie.exten at ipaddr), but when I do that * still doesn't show it 
> registering.  Even when I call through this method the phone comes up as 
> "UNREACHABLE" and the port is listed as 0 instead of 5060 like all the 
> internal phones.
> 
> -- 
> B2 Technologies, LLC
>     - www.VoIPSupply.com
>     - www.ValueResale.com
> 454 Sonwil Drive
> Buffalo, NY 14225
>  
> (716) 630-1555 x.27
> (716) 250-3411 (Direct)
> (716) 630-1548 fax
>  
> We sell all things VoIP related at: http://www.VoipSupply.com
> Buy online, same day shipping on most items, volume discounts are available.
> 
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
> 




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.