NAT CCME PORT 2000

[Mikhail Chernyakov]

Hello!!!

I use 2821 with CCME. One of users need to connect external server on port 2000.

I use this config:

ip nat inside source list 1 interface GigabitEthernet0/1 overload

ip nat inside source static tcp 192.168.1.253 25 interface GigabitEthernet0/1 25

access-list 1 permit 192.168.1.0 0.0.0.255

Conection established but no data flow exist...

If I use IOS without CCME all work fine...

I suspect what problem is in port 2000, which CCME and Skinny default port.

How can I grant internal user (only one machine) access to external port 2000

and can still work with CCME?

Thank you much!

[paolo bevilacqua]

Try:

ip source-address x.x.x.x strict-match

and make sure the cme registration address is not in nat inside or outside interface.

If that doesn't work, try

ip source-address x.x.x.x port <2000 - 9999>

That will change sccp port, will require all phone to restar and register again.

[Mikhail Chernyakov]

Thank you very much...

But it does not work...

ip source in voice VLAN not int data vlan...

I heve solved problem

no ip nat service skinny tcp port 2000

Thak you very much...