SIP inbound access on port 5060

[etienne99]

Hi Guys

I have a pbx on my internal network on ip 192.168.1.4 and need to open udp port 5060 on the PIX 501 to point to the IP:

Here is my access-list and static route is it correct, because my SIP account doesn't want to registerd?

fixup protocol sip 5060
fixup protocol sip udp 5060

static (inside,outside) udp interface 5060 192.168.1.4 5060 netmask 255.255.255.255 0 0

access-list incoming permit udp host 192.168.1.4 any eq 5060

Thank you

Etienne

[JORGE RODRIGUEZ]

Etienne,

Your config script looks fine to me exept your inbound acl rule.

since your  nat rule  is pointing to outside interface , one would expect  incoming traffic towards 192.168.1.4  be hiting your outside interface IP rather than the private IP.

so instead of   access-list incoming permit udp host 192.168.1.4 any eq 5060

be more like   access-list incoming  permit udp  any interface outside eq 5060

Regards