IP INSPECT causes phones to not register

[Jason Aarons]

Site is complaining they come in every morning and find 5 out of 20 7940 phones showing Not Registered, reboot resolves the problem.

show log in the 2811 router;

006084: *Nov 15 15:36:47.576 UTC: %FW-4-HOST_TCP_ALERT_ON: Max tcp half-open connections (50) exceeded for host 10.68.68.10.

10.68.68.10 is the Callmanager

How do I increase the half-open values under "IP INSPECT", they are using this security feature -jason

[mchin345]

Error messages such as the following may indicate that a denial-of-service attack has occurred on aspecific TCP host:

%FW-4-HOST_TCP_ALERT_ON: Max tcp half-open connections (50) exceeded for host

172.21.127.242.

%FW-4-BLOCK_HOST: Blocking new TCP connections to host 172.21.127.242 for 2

minutes (half-open count 50 exceeded)

%FW-4-UNBLOCK_HOST: New TCP connections to host 172.21.127.242 no longer blocked

you could config the router to increase the max half-open sessions.

hope this helps.