Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Configure ASA firewall to allow Voice over the VPN

I would like configure my firewall to allow IP Telephony services over the VPN. Kindly advice on what i need to do.

  • Firewalling
1 ACCEPTED SOLUTION

Accepted Solutions

Re: Configure ASA firewall to allow Voice over the VPN

u didnt say if remote access vpn or site site?

any way the moste important thing is to know that the firewall in general not very good in QoS like a router

but u can put the voice traffic based on its prevously marked dscp or ip precedance

put them in priority queue

and also u have to enable h323 inspection

sccp inspection

alsp mgcp and

for all those call signaling u need to enable the option rtp-conformance under the h323,sccp parameters in the global_policy inspection

and dont forget to match the interesting traffic with the voice protocols like sccp and h323 for priority and vpn tunnel estblishmnet

i have given u a background now just follow the folowing link as it is simple and detaild regarding ur case

QoS for VoIP Traffic on VPN Tunnels :

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml

PIX/ASA 7.x: Enable VoIP :

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml

good luck

Please, Rate if helpful

2 REPLIES

Re: Configure ASA firewall to allow Voice over the VPN

u didnt say if remote access vpn or site site?

any way the moste important thing is to know that the firewall in general not very good in QoS like a router

but u can put the voice traffic based on its prevously marked dscp or ip precedance

put them in priority queue

and also u have to enable h323 inspection

sccp inspection

alsp mgcp and

for all those call signaling u need to enable the option rtp-conformance under the h323,sccp parameters in the global_policy inspection

and dont forget to match the interesting traffic with the voice protocols like sccp and h323 for priority and vpn tunnel estblishmnet

i have given u a background now just follow the folowing link as it is simple and detaild regarding ur case

QoS for VoIP Traffic on VPN Tunnels :

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml

PIX/ASA 7.x: Enable VoIP :

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml

good luck

Please, Rate if helpful

New Member

Re: Configure ASA firewall to allow Voice over the VPN

It is a site to site VPN, thanks will try it out.

1154
Views
0
Helpful
2
Replies
This widget could not be displayed.