Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

match rtp protocol

I ned exclude to the encription list rtp traffic. Is there any way to identify this traffic in an access-list?

Thank's

Marcelo

4 REPLIES
Silver

Re: match rtp protocol

Although there are no standards assigned, RTP is generally configured to use ports 16384-32767

Cisco Employee

Re: match rtp protocol

you can simply match the udp traafic in an acl with the above mentioned port range.

New Member

Re: match rtp protocol

The problem is that in this case I am excluding This traffic udp for the encription,and maybe there is not rtp .

Thank's

Super Bronze

Re: match rtp protocol

Many forms of encryption completely conceal the original packet, which makes it impossible to determine an encrypted packet is something like a RTP packet.

Encrypted packets can replicate an original packet's ToS, if they do, and if the ToS is unique enough to only be RTP, you can identify the traffic using it.

If the traffic is encrypted within SSL, there are now applicances that sometimes effectively provide a "man-in-the-middle", where you can decrypt the traffic and then see what it is. Such an appliance could then exclude such traffic.

226
Views
0
Helpful
4
Replies