Jump to content

Phones behind CISCO PIX no incoming calls


Sota Solutions
 Share

Recommended Posts

Has anyone had any experience of setting up phones behind a CISCO PIX.

 

We have 2 x SNOM phones at a customer location, behind a CISCO PIX firewall, registering to a hosted PBX.

 

The SNOM phones are registering successfully, however in the phone log the phones register every 1800 seconds instead of the usual 15 secs on working phones.

 

[2]9/4/2008 09:56:46: Registered at registrar as 3551@pbx.domain.co.uk (Expires: 1800 secs)

 

This is typical where the phone is behind a device with a SIP ALG, and usually disabling the SIP ALG solves this.

 

We have tried the following command on the PIX

 

no ip nat service sip

 

but continue to have problems with incoming calls.

 

So if anyone has any experience/suggestions they would be gratefully recieved!

 

Thanks

Tim

Link to comment
Share on other sites

That is probably because the firewall is SIP-aware. Sometimes the firewall wants to help, but just makes things worse. You can bypass the firewall using TLS (well, if that's okay with your security guidelines). Or just turn that part of the firewall off (actually, in this case the help is not needed).

Link to comment
Share on other sites

Yes the CISCO does seem to be altering the SIP REGISTER packets, there seems to be SIP fixup enabled in the CISCO config

 

fixup protocol sip 5060

fixup protocol sip udp 5060

 

Disabling these has not made a difference though, however we have been able to get incoming calls working by reducing the "Maximum Registration Time" to 1 minute.

 

Whether this is advisable or not as a long term solution though I'm not sure!

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...