Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

SIP to SIP proble through ASA VPN

Hi All,

I have a problem with my cisco mobile 8.0  for iphone via vpn when i call to avaya. the avaya phone is ringing but i can't hear voice from, likewise Avaya phone. I use 5502 ASA with Version 7.2(3) and call manager version is 8.0.3.20000-2.

the topology is :

internet - ASA VPN & firewall - Switch Edge - Server Farm - Call Manager and Avaya.

when my cisco mobile for iphone connect wireless (not throgh ASA), i can call avaya and hear voice from it. when my cisco mobile connect vpn, call to cisco phone (SCCP) is no problem. vpn client use IPSEC protocol. the traffic from outside - inside an inside - outside already any any. i think it's sip to sip problem through VPN.

what i need to check more ?

Need your Advice from you all.

Many Thanks

6 REPLIES

SIP to SIP proble through ASA VPN

I'd take a punt at SIP Inspection on the ASA. It's not perfect, so try disabling it temporarilly.

GTG

Please rate all helpful posts.
Community Member

SIP to SIP proble through ASA VPN

Hi Gordon Ross,

Thank you for your reply. i've tried to disable sip inspection on ASA, but no change . suddenly CIPC via VPN not hear any voice from Avaya when called it.

SIP to SIP proble through ASA VPN

OK. It looks like you've got a routing or access-list issue in the ASA for the media/RTP between your phone and the Avaya. If it was a routing issue on the Avaya, you'd at least get one-way audio.

One possible way to prove this, is to enable MTP for either the phone or Avaya SIP trunk. This should force media to flow through CUCM (which you can already talk to)

I had similar problems on an ASA myself. You can sometimes tie yourself in knots tracking these problems down. I trust you're not NATing this VPN connect too...

GTG

Please rate all helpful posts.
Community Member

SIP to SIP proble through ASA VPN

Hi Gordon Ross,

That's a very kind of you to reply my post.

i've checked routing and access list on ASA, i think no problem. also I have tried to add some MTP resouce on phone an Avaya trunk, but no change too.

do i have to NATing Avaya and Call Manager, gordon?

may i ask you about this log? i got it when i traced on ASA.

6|May 31 2012|14:30:35|607001|10.12.3.205||Pre-allocate SIP NOTIFY TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from 200 message

6|May 31 2012|14:30:34|607001|10.12.3.205||Pre-allocate SIP Via TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from ACK message

6|May 31 2012|14:30:24|607001|10.12.3.205||Pre-allocate SIP Via TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from ACK message

6|May 31 2012|14:30:20|607001|10.12.3.205||Pre-allocate SIP NOTIFY TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from NOTIFY message

6|May 31 2012|14:30:20|607001|10.12.60.33||Pre-allocate SIP NOTIFY TCP secondary channel for inside:10.12.3.205/5060 to outside:10.12.60.33 from NOTIFY message

6|May 31 2012|14:30:16|607001|10.12.3.205||Pre-allocate SIP NOTIFY TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from NOTIFY message

6|May 31 2012|14:30:16|607001|10.12.60.33||Pre-allocate SIP NOTIFY TCP secondary channel for inside:10.12.3.205/5060 to outside:10.12.60.33 from NOTIFY message

6|May 31 2012|14:30:01|607001|10.12.3.205||Pre-allocate SIP NOTIFY TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from NOTIFY message

6|May 31 2012|14:30:01|607001|10.12.60.33||Pre-allocate SIP NOTIFY TCP secondary channel for inside:10.12.3.205/5060 to outside:10.12.60.33 from NOTIFY message

6|May 31 2012|14:29:52|607001|10.12.3.205||Pre-allocate SIP NOTIFY TCP secondary channel for outside:10.12.60.33/50340 to inside:10.12.3.205 from NOTIFY message

6|May 31 2012|14:29:52|607001|10.12.60.33||Pre-allocate SIP NOTIFY TCP secondary channel for inside:10.12.3.205/5060 to outside:10.12.60.33 from NOTIFY message

6|May 31 2012|14:29:51|607001|10.12.60.33||Pre-allocate SIP SUBSCRIBE TCP secondary channel for inside:10.12.3.205/5060 to outside:10.12.60.33 from 200 message

6|May 31 2012|14:29:17|302016|10.12.60.33|10.12.3.205|Teardown UDP connection 258775487 for outside:10.12.60.33/53604 to inside:10.12.3.205/69 duration 0:00:00 bytes 61 (rizqi.anwar)

6|May 31 2012|14:29:17|302016|10.12.60.33|10.12.3.205|Teardown UDP connection 258775488 for outside:10.12.60.33/53604 to inside:10.12.3.205/46547 duration 0:00:00 bytes 19

Thanks for your help

Community Member

SIP to SIP proble through ASA VPN

Hi Gordon,

I want to update my problem, i tried register x-lite SIP softphone on call manager via VPN on my laptop. after that i tested call to avaya, finally no problem found.

Thanks

Community Member

Hello friends,Please, allow

Hello friends,

Please, allow me to resurect this old post. I am getting similar logs in the ASA, would you help me to figure out what it means?

Regards and Merry Christmas!

6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.97 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.84 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.11/5060 to INSIDE:172.17.5.86 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.85 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.109 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.84 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.108 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.119 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.85 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.109 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.108 from 200 message
6|Dec 24 2014 06:35:25|607001: Pre-allocate SIP REFER TCP secondary channel for OUTSIDE:172.17.100.12/5060 to INSIDE:172.17.5.119 from 200 message

3541
Views
9
Helpful
6
Replies
CreatePlease to create content