cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
535
Views
0
Helpful
1
Replies

ASA 5505 and CME

Hi all recently i have configured an ASA 5505 and a cisco CallManager express, i have defined in the ASA dhcp the OPTION 150 for the ip phone to get their configuration file and i have enabled skinny inspection as the following:

LabASA_CME(config)# policy-map type inspect skinny skinny-map

LabASA_CME(config-pmap)# parameters

LabASA_CME(config-pmap-p)# enforce-registration

LabASA_CME(config-pmap-p)# match message-id range 0x0 0xFFFF

LabASA_CME(config-pmap-p)# drop log

LabASA_CME(config)# class-map inspection_default

LabASA_CME(config-cmap)# match default-inspection-traffic

LabASA_CME(config)# policy-map skinny_policy

LabASA_CME(config-pmap)# class inspection_default

LabASA_CME(config-pmap-c)# inspect skinny skinny-map

LabASA_CME(config)# service-policy Skinny_policy global

But the IP Phone still stuck in the registration part and when i sniff packet over my inside network where the IP Phone are installed i don't get any reponse from the CME

thanks for helping me out

1 Reply 1

htarra
Level 4
Level 4

If you can have the cme and the router talk directly without going thru the asa, it would be simpler. CME being a router does not need firewall and would see only SIP to the eternal world.

In that case you setup a static inside nat tranalstion for port 5060 to the cme:

ip nat inside source static udp 5060 interface 5060