ASA 5505 and CME

Unanswered Question
Apr 2nd, 2008
User Badges:

Hi all recently i have configured an ASA 5505 and a cisco CallManager express, i have defined in the ASA dhcp the OPTION 150 for the ip phone to get their configuration file and i have enabled skinny inspection as the following:


LabASA_CME(config)# policy-map type inspect skinny skinny-map


LabASA_CME(config-pmap)# parameters


LabASA_CME(config-pmap-p)# enforce-registration


LabASA_CME(config-pmap-p)# match message-id range 0x0 0xFFFF


LabASA_CME(config-pmap-p)# drop log


LabASA_CME(config)# class-map inspection_default


LabASA_CME(config-cmap)# match default-inspection-traffic


LabASA_CME(config)# policy-map skinny_policy


LabASA_CME(config-pmap)# class inspection_default


LabASA_CME(config-pmap-c)# inspect skinny skinny-map


LabASA_CME(config)# service-policy Skinny_policy global

But the IP Phone still stuck in the registration part and when i sniff packet over my inside network where the IP Phone are installed i don't get any reponse from the CME


thanks for helping me out

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
htarra Tue, 04/08/2008 - 07:59
User Badges:
  • Bronze, 100 points or more

If you can have the cme and the router talk directly without going thru the asa, it would be simpler. CME being a router does not need firewall and would see only SIP to the eternal world.

In that case you setup a static inside nat tranalstion for port 5060 to the cme:

ip nat inside source static udp 5060 interface 5060


Actions

This Discussion