Real Player

[RayWilson]

Hi Guys,

We can not get access to "real player" streaming media on our network. We have a Cisco 2600 series router and version 12.0 of the Cisco IOS. Streaming media content from sites like "

http://www.sky.com/news"

work without any problems.

I'm assuming I need to allow it in someway. I have just passed my CCNA and would love to impress my boss

Any ideas ?

Cheers

Ray

 

[wybnormal]

You have not given enough detail. Are you running NAT? what kind of access list? did it ever work before?

MikeS
Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[rcasta]

Could you post your config?
Are there acl's applied towards your Internet connection?
Is NAT running?

(I guess real player uses ports tcp 7070, udp 6970-7170)

At the client host, check status for "netstat -n" while it's attempting to reach the stream and check for the port it's trying to connect to.

c:\win>netstat -n
Proto Local Address Foreign Address State
TCP your_ip streaming_sourceORT sync

Or try with a sniffer analyzer.

cheers,

 

[RayWilson]

Thank you for replying. I'll attach the config with the IP addresses asterisked out:

Current configuration:
!
version 12.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname GH1
!
enable password * ******************
!
!
!
!
!
ip subnet-zero
no ip finger
no ip domain-lookup
!
ip inspect audit-trail
ip inspect max-incomplete high 1100
ip inspect one-minute high 1100
ip inspect name Internet tcp
ip inspect name Internet udp
ip inspect name Internet ftp
ip inspect name Internet http java-list 99 timeout 300
ip inspect name Internet smtp
ip audit notify log
ip audit po max-events 100
!
!
process-max-time 200
!
interface FastEthernet0/0
ip address **.*.*.*** 255.255.255.0
ip access-group 106 out
no ip directed-broadcast
ip accounting output-packets
ip accounting access-violations
ip nat inside
ip inspect Internet in
no cdp enable
!
interface FastEthernet0/1
ip address ***.**.**.*** 255.255.255.0
ip access-group 104 in
no ip directed-broadcast
ip accounting output-packets
ip accounting access-violations
ip nat outside
no ip split-horizon
no cdp enable
!
router ospf 100
network **.*.*.* 0.0.255.255 area 0
!
ip default-gateway **.*.*.***
ip nat pool Internet ***.**.**.*** ***.**.**.*** netmask 255.255.255.0
ip nat inside source list 100 pool Internet
ip nat inside source static **.*.**.** ***.**.**.***
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
no ip http server
!
access-list 100 permit tcp host **.*.*.* host ***.**.***.**
access-list 100 permit tcp **.*.*.* 0.255.255.255 any eq www
access-list 100 permit tcp **.*.*.* 0.255.255.255 any range ftp-data ftp
access-list 100 permit udp **.*.*.* 0.255.255.255 host ***.**.**.**
access-list 100 permit udp **.*.*.* 0.255.255.255 host ***.**.**.**
access-list 100 permit tcp host **.*.*.* host ***.**.**.*
access-list 104 deny ip **.*.*.* 0.255.255.255 any
access-list 104 permit icmp any any echo-reply
access-list 104 deny tcp any any eq telnet
access-list 104 permit ip any any
access-list 106 permit tcp any any eq smtp
access-list 106 permit icmp any any echo-reply
access-list 106 permit tcp any host **.*.**.*** eq www
no cdp run
!
line con 0
exec-timeout 0 0
password * ****************
login
transport input none
line aux 0
exec-timeout 2 0
password * ****************
login
line vty 0 4
exec-timeout 2 0
password * ****************
login
transport input telnet
!
scheduler interval 500
end

I really appreciate any help you can give. I have to admit that some of it is a little above me at the moment

Thanks

Ray