multiple duplicate udp NAT entries

Unanswered Question
Jan 29th, 2009
User Badges:

Dear all,

using a Cisco 878 with PAT I got following issue:


This is the situation: There is a location with a few IP-phones, which register to the Central Office via SIP 5060. After that they establish RTP sessions to the Central office. The C878 got one official IP adress, the LAN got a private range (192.168.200.x).


After a few minutes there exist multiple duplicate UDP Nat translations, so communication of the involved phones fail:


#sh ip nat trans

udp 92.60.223.30:5004 192.168.200.46:5004 92.60.208.97:10000 92.60.208.97:10000

udp 92.60.223.30:5004 192.168.200.46:5004 92.60.208.97:10056 92.60.208.97:10056

udp 92.60.223.30:5005 192.168.200.46:5005 92.60.208.97:10001 92.60.208.97:10001

udp 92.60.223.30:5005 192.168.200.46:5005 92.60.208.97:10057 92.60.208.97:10057


<config>

ip nat inside source list NatToExternal interface Dialer1 overload

ip access-list extended NatToExternal

permit ip 192.168.200.0 0.0.0.255 any


IOS is: c870-advipservicesk9-mz.124-15.T8.bin


How can I get around these duplicate NAT ?


Thanks in Advance,

Sascha

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
drolemc Wed, 02/04/2009 - 11:51
User Badges:
  • Silver, 250 points or more

This is bug CSCse97264. Two or more UDP NAT translations that relate to different requests may be assigned port numbers with the same inside global IP address.


Actions

This Discussion