IPO R8 LAN2/Wan port with public adress

[gberger]

I recently installed an IPO R8 with SIP trunks using a Public static IP adress on LAN2.
Could not make it to work thru the customer firewall.
Is the embedded firewall using Internet01 firewall profile suffisant and secure enough? Any settings i could add to that profile to be more secured?
Thanks.

 

[Bas1234]

That firewall is not stable enough, better buy a good firewall or use the one from the customer.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[YorkshireMatt]

Are you wanting to scrap the using the customers existing firewall as it did not work, then use the IPO own?

What is the firewall?
Also why are you using lan2? is it a separate DSL service for the SIP trunks?

 

[jamie77]

Don't do this. Get a firewall that works.

You are opening too many doors for network snd SIP hacking.

Jamie Green

Football is not a matter of life and death-It is far more important!!!!

 

[gberger]

Customer firewall is a Cisco 5510.IT guy said that it is configured properly but as soon as i connect the IPO to it, the SIP trunks do not come up.They do work when connected directly to the Cisco router.

Anyone has guideline for 5510 config when using SIP trunks on IPO?
I might try the Cisco forum.

 

[Bas1234]

The Cisco forum won't help.

Not sure if they can or have added the in de ASA?!

no fixup protocol sip 5060
no fixup protocol sip udp 5060

Also what provider do you have?

Post some traces from the Monitor tool.

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[Bas1234]

Sorry the no fixup are for PIX.

no inspect sip is for ASA

___________________________________________
It works! Now if only I could remember what I did...

Dain Bramaged (Avaya Search tool

http://tinyurl.com/bas1234

)
______________________________________

 

[gberger]

Thanks for your quick reply Bas1234,

I plan to go onsite next week and will grab traces.

Other then the "no inspect SIP" what ports should be open in the firewall?