Video streaming failing through the ASA.

Unanswered Question
Sep 4th, 2008

I got a customer who has a video client inside the network trying to access a GE DVR on internet. The client connects to port 1024 (Stream command listen server port) and then successfully connects to port 5858 (default video port). However, for some reason it will never receive the video and terminate the connections.

I set the RTSP inspection for port 5858 as follows, but it did not work:

tcp-map mss-map

exceed-mss allow

class-map RTSP-HTTP

match port tcp eq 5858

policy-map global_policy

class inspection_default

class RTSP-5858

inspect rtsp

set connection advanced-options mss-map

Opened all from the server in the acl outside, but no luck. I disabled the RTSP inspection, same thing.

From the captures, I see the connections established but some reason the server stop responding and the client terminates the connections.

From the service-policy counters I see that RTSP inspection increasing, no dropped packets. The only thing I noticed is that the Selective ACK cleared: counters increasing, even though the default tcp-map action is allow, I am not sure it could be an issue.

I checked the asp dropped packets, but there is no dropped packet for these connections.

The customer replaced the ASA for an out of the box Lynksys router and it start working fine.

Any help on this would be highly appreciated.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
Loading.
suschoud Tue, 09/09/2008 - 13:42

I am not sure but I think the flow is not compliant with rfc.

A look at the captures can shed some more light on the issue.

Regards,

Sushil

Actions

This Discussion