Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Need help with turning off Inspect h323 on my ASA

I've been told that this will fix my issue with having our Avaya VPN phones drop connections and call quality but no one can tell me how to make the change on my ASA.

Cisco ASA:

policy-map global_policy

class inspection_default

no inspect h323 h225

no inspect h323 ras

I've tried doing it from the command line but I must have the syntax wrong so any help would be appreciated. Should I do it from the ASDM or command line? Step by step help would be great. Thanks.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Need help with turning off Inspect h323 on my ASA

That is correct it is no longer displayed if it is removed. Save the config and you are all set!

Mark

7 REPLIES

Re: Need help with turning off Inspect h323 on my ASA

Aaron,

did you type configure terminal first?

configure terminal

policy-map global_policy

class inspection_default

no inspect h323 h225

no inspect h323 ras

HTH,

mark

New Member

Re: Need help with turning off Inspect h323 on my ASA

Yes and it kept giving me an error when I would enter the no inspect lines. This is the error I get: ERROR: Inspection not installed or parameters do not match. Thanks.

Re: Need help with turning off Inspect h323 on my ASA

Are you sure they haven't already been removed? I just checked with my ASA and removed it and pasted it a second time and gave me the same error. Can you please post the following output.

show run | inc inspect

Mark

New Member

Re: Need help with turning off Inspect h323 on my ASA

policy-map type inspect dns migrated_dns_map_1

inspect dns migrated_dns_map_1

inspect ftp

inspect rsh

inspect rtsp

inspect sqlnet

inspect skinny

inspect sunrpc

inspect xdmcp

inspect sip

inspect netbios

inspect tftp

inspect icmp

inspect icmp error

inspect ipsec-pass-thru

inspect pptp

So it no longer displays it once its removed? So now I just need to write it to memory wr mem and its all set?

Re: Need help with turning off Inspect h323 on my ASA

That is correct it is no longer displayed if it is removed. Save the config and you are all set!

Mark

New Member

Re: Need help with turning off Inspect h323 on my ASA

Great, thanks for the help.

Re: Need help with turning off Inspect h323 on my ASA

You are most welcome.

Best of luck!

Mark

975
Views
0
Helpful
7
Replies
CreatePlease login to create content