SIP NAT with ip-address-privacy

dvb · ‎06-12-2007

The setup is: Internal SIP proxy (private IP address) trunks to Internet SIP proxy. The private IP address shall be translated into a public address in the IP and SIP headers. My ASA (7.2.2) configuration using static NAT and a SIP Inspect map doesn't work.

The Command Reference merely states: "To enable IP address privacy, use the ip-address-privacy command in parameters configuration mode. Parameters configuration mode is accessible from policy map configuration mode. To disable this feature, use the no form of this command." Not very elaborate.

What does "ip-address-privacy" actually do? Does it replace _any_ internal IP-address in the SIP message by some external? If so, how do I tell the ASA what exactly to replace here and what the replacement shall be?

a-vazquez · ‎06-19-2007

Refer the following document for your requirement.

PIX/ASA 7.x: Enable VoIP (SIP,MGCP,H323,SCCP) Services Configuration Example

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml

dvb · ‎06-19-2007

Unfortunately, this configuration example document does not explain how ip-address-privacy is supposed to work.