Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Question on h.323 and PIX 525 with NAT

I'm having some trouble with h.323 (video) calls through a PIX 525 using NAT. We can get incoming calls fine, but not outgoing calls for some reason. My question has to do with 'inspect h323' vs 'fixup protocol h323'. What's the difference between them? The video conferencing unit in question has a NAT transversal option where I can supply an address and mask.I'm wondering if I'm having a NAT transversal problem anyway. Which one would handle the NAT transversal, inspect or fixup? Currently, the PIX config has:

inspect h323 h225

inspect h323 ras

do I need:

fixup protocol h323 h225 1718-1720

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

instead of the inspect commands? In addition to them?


  • Firewalling

Re: Question on h.323 and PIX 525 with NAT

depending on your version of code entering the fixup command will automatically be translated to inspect commands.

There are a lot of things at play here including the type of NAT and the version of h323/h225 are you running.

New Member

Re: Question on h.323 and PIX 525 with NAT

The NAT is a dynamic mapping. How do I find out what version of h323/h225 is in effect?

I tried it without the inspect statement (there's a NAT transversal option which has the current external address, so it shouldn't be needed) and had the same results...