Remote telephony

Unanswered Question
Jul 26th, 2007
User Badges:


Hi,

i have this problem:

i have a VPN L2L created by pix and an ASA..in a Side 'A' there ia a CME, the network of Telephony is 172.16.0.x and the data network is 192.168.0.x....in the other side (B)i have network 192.168.1.x..

i try to install a remote telephon on side b, from this telephon i can call external number, but i have problem with internal (are mute)...i haven't problem from datanetwork side A to side B...but i can't ping telephony network from remote side...i try to add this network on vpn connection but nothing to do...


tnx and sorry for my english


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Paolo Bevilacqua Thu, 07/26/2007 - 04:51
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

Hello,


with IPSec you need to define all the networks that are going over the VPN, this can become complicated, so if you configure the minimum on the ASA/PIX to build a GRE tunnel between the routers, the all the address will pass undisturbed and everything will work.


Hope this helps, plase rate post if it does!

fabriziopettinau Thu, 07/26/2007 - 05:10
User Badges:

On ASA where there is a ip phone network:


access-list inside_nat0_outbound extended permit ip IP_PHONE_NETWORK

255.255.255.0 LAN_REMOTE 255.255.255.0


access-list outside_20_cryptomap extended permit ip IP_PHONE_NETWORK

255.255.255.0 LAN_REMOTE 255.255.255.0


nat (inside) 1 IP_PHONE_NETWORK 255.255.255.0


On remote office (PIX)


access-list inside_nat0_outbound extended permit ip LAN_REMOTE

255.255.255.0 IP_PHONE_NETWORK 255.255.255.0


access-list outside_20_cryptomap extended permit ip LAN_REMOTE

255.255.255.0 IP_PHONE_NETWORK 255.255.255.0

Actions

This Discussion