Solved: SIP trough ASA..no outbound calls

columoconnor · ‎11-24-2008

I have a SIP trunk between CUCM 6.1 and the provider. Inbound calls work but outbound calls fail. The provider says I need to send UDP 5060 and i'm sending TCP 5060 but i dont see where i can choose udp or tcp

appreciate any help

Colum

Jon Nelson · ‎11-25-2008

Set your outbound SIP connection to send UDP. By default it is TCP. This setting is applied on the SIP Trunk Security Profile which is applied to the SIP Trunk. This can be accessed at: System --> Security Profile --> SIP Trunk Security Profile

Thanks,

Jon

View solution in original post

Jeffrey Knuckle · ‎11-24-2008

Why do you think that the problem is with the ASA? Are you able to make calls through the gateway to other destinations whose path is not thru the ASA? What error do you get when you try to make a outbound call?

Assuming that all outbound calls are making it to gateway, couple of thing I would check;

* Check the ASA logs, it will show you if the ASA is denying your attempts to may outbouund SIP calls.

* Ensure that SIP signaling and media are 'bind' to the correct interface on the gateway.

*Verify dial peers, ensure outbound dialpeer to ISP is being match.

If you are still not able to find the cause of the problem, turn on debug (debug ccsip) and post the output

columoconnor · ‎11-24-2008

I am not getting errors from ASA ...the isp is telling me I need to send UDP not TCP

from log of outbound call

Teardown dynamic TCP translation from inside:10.100.100.100/54407 to outside:x.25.99.2/29687 duration 0:01:15

Teardown TCP connection 2637 for outside:x.25.126.14/5060 to inside:10.100.100.100/54407 duration 0:00:30 bytes 0 SYN Timeout

Teardown TCP connection 2601 for outside:x.25.126.14/5060 to inside:10.100.100.100/54427 duration 0:00:30 bytes 0 SYN Timeout

Built outbound TCP connection 2637 for outside:x.25.126.14/5060 (159.250.126.14/5060) to inside:10.100.100.100/54407 (x.25.99.2/29687)

Teardown TCP connection 2582 for outside:x.25.126.14/5060 to inside:10.100.100.100/54407 duration 0:00:30 bytes 0 SYN Timeout

x.25.126.14 is ISP public SIP end point

10.100.100.100 is CUCM private address

m.samouka · ‎11-25-2008

you have to disable the SIP Inspection on your ASA.

columoconnor · ‎11-25-2008

I disabled sip inspection and get the same result

Built outbound TCP connection 66 for outside:x.25.126.14/5060

(x.25.126.14/5060) to inside:10.100.100.100/37958 (159.250.99.2/65373)

where is it configured to use udp instead of tcp....CM or ASA

Jeffrey Knuckle · ‎11-25-2008

The firewall does not appear to be the problem.

How about the output of the debug ccsip?

Jon Nelson · ‎11-25-2008

Set your outbound SIP connection to send UDP. By default it is TCP. This setting is applied on the SIP Trunk Security Profile which is applied to the SIP Trunk. This can be accessed at: System --> Security Profile --> SIP Trunk Security Profile

Thanks,

Jon

columoconnor · ‎11-25-2008

I just found that and it works

thanks guys for the help