08-03-2008 04:43 AM - edited 03-11-2019 06:25 AM
I would like configure my firewall to allow IP Telephony services over the VPN. Kindly advice on what i need to do.
Solved! Go to Solution.
08-03-2008 06:08 AM
u didnt say if remote access vpn or site site?
any way the moste important thing is to know that the firewall in general not very good in QoS like a router
but u can put the voice traffic based on its prevously marked dscp or ip precedance
put them in priority queue
and also u have to enable h323 inspection
sccp inspection
alsp mgcp and
for all those call signaling u need to enable the option rtp-conformance under the h323,sccp parameters in the global_policy inspection
and dont forget to match the interesting traffic with the voice protocols like sccp and h323 for priority and vpn tunnel estblishmnet
i have given u a background now just follow the folowing link as it is simple and detaild regarding ur case
QoS for VoIP Traffic on VPN Tunnels :
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml
PIX/ASA 7.x: Enable VoIP :
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml
good luck
Please, Rate if helpful
08-03-2008 06:08 AM
u didnt say if remote access vpn or site site?
any way the moste important thing is to know that the firewall in general not very good in QoS like a router
but u can put the voice traffic based on its prevously marked dscp or ip precedance
put them in priority queue
and also u have to enable h323 inspection
sccp inspection
alsp mgcp and
for all those call signaling u need to enable the option rtp-conformance under the h323,sccp parameters in the global_policy inspection
and dont forget to match the interesting traffic with the voice protocols like sccp and h323 for priority and vpn tunnel estblishmnet
i have given u a background now just follow the folowing link as it is simple and detaild regarding ur case
QoS for VoIP Traffic on VPN Tunnels :
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml
PIX/ASA 7.x: Enable VoIP :
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml
good luck
Please, Rate if helpful
08-05-2008 01:08 AM
It is a site to site VPN, thanks will try it out.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide