Voice Gateway outside firewall, CUCM inside

steven.wilson · ‎05-08-2009

If I have the voice-gateway for a CUCM outside the firewall, what NAT statement and port are needed for the configuration of the firewall?

sachinraja · ‎05-08-2009

Hello Steven

Following URL lists the ports used by CUCM with various components:

www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/6_0/60plrev1.pdf

Is there any access-restriction applied on the inside interface of a firewall ? If so, you will have to open up appropriate ports as listed on the pdf.. make sure you open UDP 16384-32767 for communication between voice gateway to CUCM on the outside interface, for return voice traffic..

you can just give a normal static statement, which does not nat the traffic.. eg, if the CUCM has 10.1.1.1 as ip, u can give

static (inside,outside) 10.1.1.1 10.1.1.1 netmask 255.255.255.255

or the other way around by natting the gateway IP address..

Hope this helps.. all the best.. rate replies if found useful.

Raj

steven.wilson · ‎05-13-2009

thanks for the pointer to the ports and the potential solution.