We have deployed an ASR with zbf and are having issue with softphones registering. We have created a class map that matches (any) both protocols tftp and skinny, but we get upd SIS_PREGEN on some of the phones that attempt to register. We have tested with 2 remote phones which are both on the same layer 3 address space. One phone will register without issue, the other won't register and never gets the tftp data.
ASR#show policy-map type inspect zone-pair bank0267_outside sessions | include Not Working IP Session 27B6878 (Not Working IP:64303)=>(10.43.139.1:69) tftp SIS_OPENING Session 27B6878 (10.43.139.1:0)=>(Not Working IP:64303) udp SIS_PREGEN
Again the 2 softphones are on the same layer 3 network and routing appears to be good, the not working can ssh to the cme without issues.
class-map type inspect match-any permit_csi_tftp_to_bank match protocol tftp match protocol skinny
policy-map type inspect bank0267_outside <output omitted>
class type inspect permit_csi_tftp_to_bank inspect
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...