Firewall Placement For SIP Services and Internal CCME Routers

Unanswered Question
Apr 14th, 2008

Greetings, im looking at putting together the following setup within our own office as per the diagram, i have an 1841 ISR terminating our leased line, an ASA 5510 For Security and a 2121 ISR running CCME for VOIP.

SIP will be the VOIP mechanism for inbound and outbound calls.

Ive labelled the diagram with a similar address block that is available for the deployment.

The reasoning behind this configuration is that i want the ISR running CCME on the inside of the firewall but still want it to have an outside IP address so that i do not have too NAT SIP traffic.

Im realy looking for clarification if this would work or could someone suggest a better method using the available equipment.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Paolo Bevilacqua Mon, 04/14/2008 - 02:51

Hi, I recommend you place on ccme interface on the internet and protect it with an access-list. All the cases that I saw where a firewall is used, give problems (no voice).

exonetinf1nity Mon, 04/14/2008 - 03:36

Cheers for the reply, would you say that it's ok placing it behind the firewall but simply using it as an intermediary?


This Discussion