03-17-2008 05:51 PM - edited 03-15-2019 09:30 AM
CCM5.1.3--CUBE--ASA(NAT)--Carrier
Follows ASA configuraiton and debugging which get fast busy when dial out to Carrier. Please guide me what's wrong in the ASA configuration.
Thanks in advance,
10.0.12.10=CUBE IP@
x.x.x.1=public@ mapped to CUBE
y.y.y.1=Carrier IP@
!
access-list out_in extended permit tcp any host x.x.x.1 eq sip
access-list out_in extended permit udp any host x.x.x.1
!
static (inside,outside) x.x.x.1 10.0.12.10 netmask 255.255.255.255
access-group out_in in interface outside
!
class-map inspection_default
match default-inspection-traffic
!
policy-map global_policy
class inspection_default
inspect pptp
inspect icmp
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect xdmcp
inspect dns
inspect sip
!
service-policy global_policy global
!
=========
debug sip
=========
coreasa# SIP::INVITE received from inside:10.0.12.10/53334 to outside:y.y.y.1/5060
SIP::Found From addr "sip:1208@10.0.12.10" (19)
SIP::Found To addr "sip:905xxxyyyy@y.y.y.1" (27)
SIP::Found Call-ID AC3CA871-F3BC11DC-83398F7A-D2C69F8A@10.0.12.10 (46)
SIP::Found CSeq 101 INVITE
SIP::Found expires, 180 seconds
Found port 5060
Found port 5060
Via Port 5060
Found port 5060
SIP::Not updating database for Contact 10.0.12.10/5060, registry database total
0
Created SIP session for inside:10.0.12.10/53334 to outside:y.y.y.1/5060, 4
total
From: sip:1208@10.0.12.10 (19)
To: sip:905xxxyyyy@y.y.y.1 (27)
Call-ID: AC3CA871-F3BC11DC-83398F7A-D2C69F8A@10.0.12.10 (46)
CSeq: 101 INVITE
SIP::INVITE received from inside:10.0.12.10/53334 to outside:y.y.y.1/5060
SIP::Found From addr "sip:1208@10.0.12.10" (19)
SIP::Found To addr "sip:905xxxyyyy@y.y.y.1" (27)
SIP::Found Call-ID AC3CA871-F3BC11DC-83398F7A-D2C69F8A@10.0.12.10 (46)
SIP::Found CSeq 101 INVITE
SIP::Found expires, 180 seconds
Found port 5060
Found port 5060
Via Port 5060
Found port 5060
SIP::Not updating database for Contact 10.0.12.10/5060, registry database total
0
03-18-2008 08:58 AM
It was carrier issue. works okay with 'inspect sip' in ASA.
06-05-2013 02:50 PM
Were you opening all UDP ports towards through the ASA to your CUBE?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide