09-20-2010 05:33 PM - edited 03-11-2019 11:42 AM
Hello,
I have to configure the ASA phone proxy in my network but I need to put the ASA 5510 in the DMZ network the ip of fttp and MTA would be needed perform nat in the firewwall because de Dmz network have not ips routeables at the internet
my cuestion is how it work, I need perform NAT in the ASA for real ip of TFTP
THIS CAN WORK???
regards
09-20-2010 06:28 PM
Angel,
I wish I had good new for you, but a NAT router/firewall in front of a Phone Proxy enabled ASA is not supported. Phone Proxy requires publicly routable addresses for both signaling and media termination. THe implementation you are trying to setup will not work.
- Magnus
09-20-2010 08:12 PM
1. The PP ASA HAS to have a public routable address as an MTA address.
2. The PP ASA also HAS to translate the call manager/tftp server IP address.
3. NAT router or firewall on the outside can just do identity translation for the
above two addresses and send the traffic that it receives for these two
addresses towards the PP ASA
If the above 3 can be done, then this may work.
-KS
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: