Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 5505 and CME

Hi all recently i have configured an ASA 5505 and a cisco CallManager express, i have defined in the ASA dhcp the OPTION 150 for the ip phone to get their configuration file and i have enabled skinny inspection as the following:

LabASA_CME(config)# policy-map type inspect skinny skinny-map

LabASA_CME(config-pmap)# parameters

LabASA_CME(config-pmap-p)# enforce-registration

LabASA_CME(config-pmap-p)# match message-id range 0x0 0xFFFF

LabASA_CME(config-pmap-p)# drop log

LabASA_CME(config)# class-map inspection_default

LabASA_CME(config-cmap)# match default-inspection-traffic

LabASA_CME(config)# policy-map skinny_policy

LabASA_CME(config-pmap)# class inspection_default

LabASA_CME(config-pmap-c)# inspect skinny skinny-map

LabASA_CME(config)# service-policy Skinny_policy global

But the IP Phone still stuck in the registration part and when i sniff packet over my inside network where the IP Phone are installed i don't get any reponse from the CME

thanks for helping me out

1 REPLY
Bronze

Re: ASA 5505 and CME

If you can have the cme and the router talk directly without going thru the asa, it would be simpler. CME being a router does not need firewall and would see only SIP to the eternal world.

In that case you setup a static inside nat tranalstion for port 5060 to the cme:

ip nat inside source static udp 5060 interface 5060

307
Views
0
Helpful
1
Replies