cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
983
Views
0
Helpful
2
Replies

Polycom and Tandberg video session disconnected after 2 hours and after reconnection it works fine during next 2 hours

icenterhq
Level 1
Level 1

Gteetings!

Polycom and Tandberg video session disconnected after 2 hours and after reconnection it works fine during next 2 hours. please help me to fix this problem

I read a lot of posts about timeouts but it doesnt help.

I have ASA 5510 sec. plus license, Cisco Adaptive Security Appliance Software Version 8.2(3)

Polycom and Tadbberg via VLAN going through asa to the internet, because they located in different rooms and has a non-routable in internet IP.

here is some configuration:

Polycom and tandberg has IP from this subnet:

VSX7000_LOCAL_IP - local ip of polycom

TANDBERG_LOCAL_IP - local ip of tandberg

interface Ethernet0/2.993
vlan 993
nameif pubsvc
security-level 20
ip address 172.16.6.193 255.255.255.224

timeout's config:

timeout xlate 3:00:00
timeout conn 5:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 6:00:00 h225 6:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:00:00 absolute uauth 0:10:00 inactivity
timeout tcp-proxy-reassembly 0:01:00

traffic forwarding:

static (pubsvc,isp2) VSX7000_EXTERNAL_IP VSX7000_LOCAL_IP netmask 255.255.255.255
static (pubsvc,isp2) TANDBERG_EXTERNAL_IP TANDBERG_LOCAL_IP netmask 255.255.255.255

nat config:

nat (pubsvc) 5 VSX7000_LOCAL_IP 255.255.255.255

nat (pubsvc) 4 172.16.6.192 255.255.255.224

global (isp2) 4 TANDBERG_EXTERNAL_IP
global (isp2) 5 VSX7000_EXTERNAL_IP

h323 inspection in global policy:

policy-map global_policy
class inspection_default
//skip //

  inspect rtsp
  inspect skinny
  inspect sqlnet
  inspect sunrpc
// skip

  inspect h323 h225
  inspect h323 ras
  inspect ip-options
  inspect sip

ACL on isp2 interface. Object group ESH_VCS contain IP addresses of hosts that can call us:

access-list acl_in_isp2 extended permit ip object-group ESH_VCS host VSX7000_EXTERNAL_IP

access-list acl_in_isp2 extended permit ip object-group ESH_VCS host TANDBERG_EXTERNAL_IP

On tandberg and polycom i setup session time to 999 minutes. please help me to fix this problem

2 Replies 2

Maykol Rojas
Cisco Employee
Cisco Employee

Hello

Beautiful, its been months since I dont see something like this. Would you please tell me what is the reason for the teardown of the connection? You can see that on the logs, also, what is the protocol being used? Is it h323? And another thing, these kind of Video conference devices send a hello packet to the mate every (configured) hour, what is the treshold for this hello packets?

Let me know.

Mike

Mike

Problem solved. it was incorrect timeout on pix at other site. solved useing well known timeouts

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: