Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CONFIGURE ASA PHONE PROXY IN DMZ NETWORK

Hello,

I have to configure the ASA phone proxy in my network but I need to put the ASA 5510 in the DMZ network the ip of fttp and MTA would be needed perform nat in the firewwall because de Dmz network have not ips routeables at the internet

my cuestion is how it work,   I need perform NAT in the ASA for real ip of TFTP

THIS CAN WORK???

Captura.PNG

regards

2 REPLIES
Cisco Employee

Re: CONFIGURE ASA PHONE PROXY IN DMZ NETWORK

Angel,

     I wish I had good new for you, but a NAT router/firewall in front of a Phone Proxy enabled ASA is not supported.  Phone Proxy requires publicly routable addresses for both signaling and media termination. THe implementation you are trying to setup will not work.

- Magnus

Cisco Employee

Re: CONFIGURE ASA PHONE PROXY IN DMZ NETWORK

1. The PP ASA HAS to have a public routable address as an MTA address.

2. The PP ASA also HAS to translate the call manager/tftp server IP address.

3. NAT router or firewall on the outside can just do identity translation for the

above two addresses and send the traffic that it receives for these two

addresses towards the PP ASA

If the above 3 can be done, then this may work.

-KS
424
Views
0
Helpful
2
Replies