SIP NAT with ip-address-privacy

Unanswered Question
Jun 12th, 2007
User Badges:

The setup is: Internal SIP proxy (private IP address) trunks to Internet SIP proxy. The private IP address shall be translated into a public address in the IP and SIP headers. My ASA (7.2.2) configuration using static NAT and a SIP Inspect map doesn't work.

The Command Reference merely states: "To enable IP address privacy, use the ip-address-privacy command in parameters configuration mode. Parameters configuration mode is accessible from policy map configuration mode. To disable this feature, use the no form of this command." Not very elaborate.

What does "ip-address-privacy" actually do? Does it replace _any_ internal IP-address in the SIP message by some external? If so, how do I tell the ASA what exactly to replace here and what the replacement shall be?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dvb Tue, 06/19/2007 - 05:00
User Badges:

Unfortunately, this configuration example document does not explain how ip-address-privacy is supposed to work.


This Discussion