Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

SIP inbound access on port 5060

Hi Guys

I have a pbx on my internal network on ip 192.168.1.4 and need to open udp port 5060 on the PIX 501 to point to the IP:

Here is my access-list and static route is it correct, because my SIP account doesn't want to registerd?

fixup protocol sip 5060
fixup protocol sip udp 5060

static (inside,outside) udp interface 5060 192.168.1.4 5060 netmask 255.255.255.255 0 0

access-list incoming permit udp host 192.168.1.4 any eq 5060

Thank you

Etienne

1 REPLY

Re: SIP inbound access on port 5060

Etienne,

Your config script looks fine to me exept your inbound acl rule.

since your  nat rule  is pointing to outside interface , one would expect  incoming traffic towards 192.168.1.4  be hiting your outside interface IP rather than the private IP.

so instead of   access-list incoming permit udp host 192.168.1.4 any eq 5060

be more like   access-list incoming  permit udp  any interface outside eq 5060

Regards

1092
Views
0
Helpful
1
Replies