IP port-map and sip

Unanswered Question
Feb 16th, 2009
User Badges:

Hi,


i am trying to configure the 2811 router to listen for SIP messages on non-standard sip port 5070 with "ip port-map sip port 5070" command. The port mapping is visible in "show ip port-map" and packets are recieved on 5070 port. The problem is, that the packets are not recognized as SIP, and "debug ccsip messages" shows nothing. Has anyone succeeded in configuring such a thing?


Best regards,


Marko

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (3 ratings)
Loading.
Nicholas Matthews Mon, 02/16/2009 - 05:55
User Badges:
  • Red, 2250 points or more

Hi Marko,


On 12.4(20)T and later:


voice service voip

sip

listen-port unsecure 5070




This should fix your problem.


-nick

markotisler Mon, 02/16/2009 - 06:36
User Badges:

Hi,


thanks for quick response.

Wouldnt this command change SIP port from 5060 to 5070? So this way port 5060 wont be functional as SIP port anymore. What i am trying to do is to get the router to listen for SIP on both ports.


Best regards,


Marko

Nicholas Matthews Tue, 02/17/2009 - 19:03
User Badges:
  • Red, 2250 points or more

Hi Marko,


I'm pretty far from a firewall expert, but if you were to correctly configure a SIP-aware firewall (including contact fields AND UDP ports), then CME would never know the difference.


My guess - I don't know if you can use IOS firewall and this type of configuration on the same router. If you were to detach it and use an ASA I'm sure this would work, but we run into some architectural headaches when this is attempted (especially for only some messages/ports).



-nick

markotisler Tue, 02/17/2009 - 23:50
User Badges:

This was our plan, until we saw the firewall. The firewall is where the story gets really fun. It's not possible to get an ASA in there, there is only a third party firewall, which is supposed to be SIP aware, however it seems it is far from that.

paolo bevilacqua Tue, 02/17/2009 - 15:16
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

Why a rating of "3" to a 100% correct and definitive answer? My rating, a "5".

Actions

This Discussion