iSight und PIX515 with

[lsicforum]

Hello,

I am trying to connect two firewire cameras iSight at Apple G4s. One Apple computer is in Germany behind the Firewall second is in Amerika. The connection works if I use the germany's computer outside the firewall. So the problem is in the pix. I red on the Apple site, that follow ports have to be open:

UDP 5060
UDP range 16384-16403

I opened these ports on inside and outside interfaces, but connection fails. The computer in Amerika can see that my computer in Germany online is, but i can't see the Amerika's computer online.

The PIX (ver. 6.1(3)) conf (fragment):

access-list fromoutside permit udp any host 2xx.xxx.xxx.196 eq 5060
access-list fromoutside permit udp any host 2xx.xxx.xxx.196 range 16384 16403

access-list frominside permit udp any any eq 5060
acess-list fromside permit udp any any range 16384 16403

global (outside) 1 2xx.xxx.xxx.196

access-group fromoutside in interface outside
access-group frominside in interface inside

Why doesn't it work?

Can help me anyone?

Thank you in Advance!

 

[yizhar]

HI.

You will probably also need a "static" command to map an unused registered public ip address to the internal machine.

You can consider upgrading your pix device to latest version, because some of the fixes relate to SIP and other multimedia protocols support.
Contact your Cisco dealer for that.



Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[lsicforum]

Hi yizhar,

"You will probably also need a "static" command to map an unused registered public ip address to the internal machine"

Why? As you have understood we use NAT. I think it is enough for the connection. Of cause i can try what you meane. But what is if we could have just one registered public ip address?

I think it has to work with NAT. Or?

 

[yizhar]

HI.

It depends.
Anyway, your version 6.1(3) has some bugs related to SIP over PAT, so you should better upgrade the pix to latest version.

The following link can help:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/fixup.htm#1104084

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar