config firewall for SIP

[alex goshtaei]

Hi All;

how can I configure firewall (SDM in ISR) to allow the SIP connection between CME? which port should I assign permission to bypass the firewall?

thanks

Alex

[mparekh]

Alex there are the port you will need to allow passage through the firewall..

SIP uses TCP and UDP port 5060 and 5061. Also you will need to allow RTP traffic which can vary but is usally UDP 16384 to 32000. Also your phones will need to download config file from the CME so allow TFTP traffic on port 69/UDP.

Here is a link of SDM user guide:

http://www.cisco.com/en/US/products/sw/secursw/ps5318/products_user_guide_chapter09186a0080655f85.html