ASA 5505 and CME

Unanswered Question
Apr 2nd, 2008
User Badges:

Hi all recently i have configured an ASA 5505 and a cisco CallManager express, i have defined in the ASA dhcp the OPTION 150 for the ip phone to get their configuration file and i have enabled skinny inspection as the following:

LabASA_CME(config)# policy-map type inspect skinny skinny-map

LabASA_CME(config-pmap)# parameters

LabASA_CME(config-pmap-p)# enforce-registration

LabASA_CME(config-pmap-p)# match message-id range 0x0 0xFFFF

LabASA_CME(config-pmap-p)# drop log

LabASA_CME(config)# class-map inspection_default

LabASA_CME(config-cmap)# match default-inspection-traffic

LabASA_CME(config)# policy-map skinny_policy

LabASA_CME(config-pmap)# class inspection_default

LabASA_CME(config-pmap-c)# inspect skinny skinny-map

LabASA_CME(config)# service-policy Skinny_policy global

But the IP Phone still stuck in the registration part and when i sniff packet over my inside network where the IP Phone are installed i don't get any reponse from the CME

thanks for helping me out

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
htarra Tue, 04/08/2008 - 07:59
User Badges:
  • Bronze, 100 points or more

If you can have the cme and the router talk directly without going thru the asa, it would be simpler. CME being a router does not need firewall and would see only SIP to the eternal world.

In that case you setup a static inside nat tranalstion for port 5060 to the cme:

ip nat inside source static udp 5060 interface 5060


This Discussion