Need help for ACL and NAT for VoIP

Dear experts
I configure my PBX server to work with one VoIP provider. When I put the server in blank network, mean that without VLANs.
The IP PBX server can register to the VoIP provider system normally and I can make call out and receive calls normally.
However, when I put the PBX behind the Cisco router with some configuration. The PBX cannot register with the VoIP provider system.
Eventhough I can receive calls from outside but can not make a call from inside to outside, because of the PBX cannot register.
Could you please help me to point out what is wrong with my Cisco router configuration.
Thanks a lot
Building configuration...
Current configuration : 1982 bytes
! Last configuration change at 17:18:27 UTC Mon Feb 24 2014
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Router
boot-start-marker
boot-end-marker
enable secret 5 $1$ZJEF$8np0QvQTD1nTaOosa9yGW1
no aaa new-model
memory-size iomem 20
no ipv6 cef
ip source-route
ip cef
multilink bundle-name authenticated
crypto pki token default removal timeout 0
license udi pid CISCO2911/K9 sn FTX1603AH9C
interface Embedded-Service-Engine0/0
no ip address
interface GigabitEthernet0/0
description internal-LAN
ip address x.x.x.4 255.255.0.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
interface GigabitEthernet0/1.1
encapsulation dot1Q 11
ip address 172.x.x.1 255.255.240.0
interface GigabitEthernet0/2
description internet
ip address 50.x.x.93 255.255.x.x
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list 100 interface GigabitEthernet0/2 overload
ip nat inside source static udp x.x.x.8 5060 50.x.x.93 5060 extendable
ip route profile
ip route 0.0.0.0 0.0.0.0 50.x.x.94
ip route 172.16.240.0 255.255.x.0 x.x.x.5
ip route 172.16.242.0 255.255.x.0 x.x.x.5
access-list 100 permit ip x.x.0.0 0.0.255.255 any
access-list 100 permit ip 172.16.240.0 0.0.0.255 any
access-list 100 permit ip 172.16.242.0 0.0.0.255 any
access-list 100 permit udp any any range 5004 5090
access-list 100 permit udp any any range 10000 20000
control-plane
line con 0

You really don't want to use NAT with SIP. Odds are it won't work. This is because SIP embeds hostnames/IP Addresses inside the packets, and standard NAT does not look inside packets.
If you want a NAT-type functionality for SIP, you need something called a session border controller. Look up Cisco CUBE
http://www.cisco.com/c/en/us/products/unified-communications/unified-border-element/index.html
https://supportforums.cisco.com/docs/DOC-17964
http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-border-element/99863-cube-config.html
GTG
Please rate all helpful posts.

Similar Messages

Need help to open and look for file by name

Hi,
Im needing help to open a folder and look for a file (.txt) on this directory by his name ... The user ll type the partial name of file , and i need look for this file on the folder , and delete it ....
How can i look for the file by his name ?
Thx =)

Hi ,
Sry ,, let me explain again ... I ll set the name of the files in the follow order ... Name_Serial_date_chanel.sxc ..
The user ll type the serial that he wants delete ...
I already figured out what i need guys .. thx for the help ^^
I used List Directory on advanced IO , to list all .. the Name is the same for all ... then i used Name_ concateneted with Serial(typed)* .. this command serial* ll list all serials equal the typed , in my case , ll exist only one , cuz its a count this serial .Then i pass the path to the delete , and its done !
Thx ^^

Need help with Photoshop and "Licensing for this product has stopped working" message. Adobe fix isn't working.

I am still using CS3. A while back I received an error: "Licensing for this product has stopped working" for my CS3 programs. I used the recovery program suggested by Adobe and was able to get Illustrator, Flash and Dreamweaver to work, but I still can't open Photoshop or In Design. I went back to the Adobe site and did every other trick they suggested to fix the error, but nothing has worked.
I then tried to uninstall photoshop from my CS3 suite (so I could reinstall) but got a JavaScript Alert: "Critical errors were found in set up. Please see set up log for file details." Seeing as I am not the best with the behind the scenes technical stuff, I have no idea what this means or where the set up log even is. Any help anyone can provide?
I have had CS3 installed on my computer for over a year. I started having problems about 4 months ago.

I am having similar problem. Can't open any of CS3 programs after trying to download Dreamweaver Trial, which wouldn't work because "couldn't remove DLM extention" error message. So now I can not run Illustrator, Photoshop, or even Adobe Reader. These are properly licensed for about a year. I get "License for product has stopped working". Have 2 pending cases open with Adobe support (one for Dreamweaver trial, one for license problem) since 8/3 with NO ANSWERS - It says answers within 1-3 business days. Was on phone support hold today for over 3 hours before line went dead with no help. What is up with adobe support? Can anyone help?

Need help for ACL and NAT

Hi all
I setup a router 2911 with the configuration below for the phone system inside handle all calls in and out from and to the outside provider VoIP.
I can receive the calls from outside all time but I cannot make the call from the inside to outside.
I think that I miss some configuration in router.
The 172.a.b.c is the IP phone system.
Please give me any advice
Thanks a lot.
The router configuration:
interface Embedded-Service-Engine0/0
no ip address
interface GigabitEthernet0/0
description internal-LAN
ip address 172.x.x.4 255.255.x.x
ip accounting output-packets
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
interface GigabitEthernet0/1.1
encapsulation dot1Q 11
ip address 172.16.208.1 255.255.240.0
interface GigabitEthernet0/2
description internet
ip address 50.x.x.93 255.255.x.240
ip accounting output-packets
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list 100 interface GigabitEthernet0/2 overload
ip nat inside source static udp 172.a.b.c 5060 50.x.x.93 5060 extendable
ip route profile
ip route 0.0.0.0 0.0.0.0 50.240.226.94
ip route 172.16.240.0 255.255.254.0 172.10.0.5
ip route 172.16.242.0 255.255.254.0 172.10.0.5
ip access-list extended VLAN-voice
access-list 100 permit ip 172.x.0.0 0.0.255.255 any
access-list 100 permit ip 172.16.240.0 0.0.0.255 any
access-list 100 permit ip 172.16.242.0 0.0.0.255 any
control-plane
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input all
scheduler allocate 20000 1000
end

You really don't want to use NAT with SIP. Odds are it won't work. This is because SIP embeds hostnames/IP Addresses inside the packets, and standard NAT does not look inside packets.
If you want a NAT-type functionality for SIP, you need something called a session border controller. Look up Cisco CUBE
http://www.cisco.com/c/en/us/products/unified-communications/unified-border-element/index.html
https://supportforums.cisco.com/docs/DOC-17964
http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-border-element/99863-cube-config.html
GTG
Please rate all helpful posts.

Need help choosing processor and display for X240 please

I'm about to purchase an X240 today or tomorrow and, after doing multiple forum searches and reading a 67-page X240 thread elsewhere, I would really appreciate some help choosing a processor and a display. If it makes a difference, I've decided on:
*Windows 7 Pro 64 bit
*8GB of RAM
*256GB SSD
I intend to use the laptop for viewing/editing Word documents and Powerpoint presentations, streaming movies, and streaming recorded lectures. I'm not sure what lecture viewer/player my school uses yet, but I do know that it has options to play the lectures at accelerated speeds (1.5x, 2x, etc.) and that I will definitely need to use this feature. I'm not computer literate enough to discern whether the processor type has any effect on this. I will use an external drive if I need to download and save any lectures. I also plan to do some infrequent and basic photo editing with Windows Photo Gallery and MS Paint. I'm willing to pay extra for a smoother/faster experience, but I don't want to go with the i7 processor if it's overkill for my purposes or if there are other significant trade-offs besides price.
As for display, I'm torn between the regular HD (1366x768) IPS Non-touch, regular HD IPS Touch, and FHD IPS Touch. Re: HD vs FHD, I've been using a 1280x800 13.3" non-IPS display for the last 6 or 7 years, and I'm pretty happy with it except for the limited viewing angles. Wouldn't regular HD on a 12.5" screen be a step up in resolution? A lot of the reviews of the regular HD on the X240 express disappointment with the "low" resolution, but I don't know if it's really that bad, or if people just have much higher expectations/standards than I do. I'm leaning towards regular HD because my glasses are so strong that increasing the sharpness of what I see also has the side effect of making things appear smaller (minimization error), so I'd probably have to mess with text/DPI scaling if I went with FHD, which isn't a perfect solution from what I've read. I'd only consider getting a touch version if I need FHD (since it doesn't come in non-touch), or if it somehow makes the HD display sharper or more vibrant--I have no intention of actually using touch features.
Apologies for the length, and thanks in advance for any advice! :-)

Actually I have been doing further research and I personally would either go with the 2.6GHz NON RETINA MBP or cough up the cash and go all out on a 2.6GHz RETINA MBP and upgrade the RAM to 16GB and upgrade to 768GB Flash storage, I am a student as well so will get a discount which will help.
My fears are that if I get the Retina model I will not be able to upgrade it even further, I want to keep the computer for at least a good 5 years, during those 5 to 8 years will the current upgrades be enough to keep up with the top games and programs etc? Also I have read that repairing the Retina display model is very diffcult and it can malfunction commonly, so I am guessing I should get apple care on top of it just to be sure with this particular model?
I am assuming that they they will bring out the new models out next year and all the chinks and bugs of the current Retina model will be fixed so to speak, of which I have read there is a few... Would it be worth buying the NON RETINA MBP and then selling and upgrading to an improved RETINA MBP model next year?
Finally if i back up my files on a hardrive would I have to use the USP SUPER DRIVE to install files onto the RETINA MBP or can i directly do this without the USP SUPERDRIVE?
Thanks

Need help with ACLs and propagating permissions

I'm currently setting up our new server, for which we're moving away from Windows entirely (both on the server and user workstation ends), and I'm currently having some questions about permissions. I've been scouring the OS X Server Advanced Admin pdf, but there are numerous holes in the exposition of permissions from the ACLs down to the proper way to propagate permissions when a manual touch is required. What I'm trying to do is allow one group to have read access only until they get to a certain subdirectory, at which point they can then write to that level; then for the second group, they only need read access for a specific folder down the line from the starting directory. I'll include some example images with a test folder I've created so that it may be a little easier to understand what my goals are with the Server app's permissions. Thank you in advance for all your help.

You need the advanced permissions editor. You are trying to convert inherited permissions to explicit. If I understand what you want, you would go about it like this.
You have two groups; GroupA and GroupB. GroupA is the limited group. You want them to be able to read everything and write to limited locations. GroupB can read and write everywhere. So based on your example, you would do this to start:
At the parent folder level, you are defining GroupA to be able to read and GroupB to read and write.
Now to drill down. In Server.app select your server. This is the first item in the side bar. On the right, choose Storage. Drill down to where your shared folder is located and select it. From the Gear menu, chose Edit Permissions as shown here:
You will note that GroupA and GroupB are both gray. This denotes that they are inherited entries at this level. You must break the inheritance and start over. To do this, press the small gear icon on the edit permissions sheet and choose "Make Inherited Entries Explicit." GroupA and GroupB will turn black, allowing you to edit them. Change GroupA from Read to Read Write. Press OK to close the sheet.
Now, if you already have data inside the folder, you can use the large gear menu and choose Propagate Permissions. This will ensure that your data will reset with the new ACL.
Reid
Apple Consultants Network
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store
Author "Mavericks Server – Control and Collaboration" :: Exclusively available in Apple's iBooks Store

How do I reorder songs in a playlist in the new itunes??? I can no longer just click and drag. When I click, it doesn't move!!!! Need help ASAP- trying to prepare for an aerobics class and need songs in a specific order!

How do I reorder songs in a playlist in the new itunes??? I can no longer just click and drag. When I click, it doesn't move!!!! Need help ASAP- trying to prepare for an aerobics class and need songs in a specific order!

Vera,
Use View > View Options, and set 'Sort By" to "Manual Order."
Then you will be able to drag-n-drop songs up and down the list.

How can I add a new Template to My Templates in Pages? I've read most of the discussions on the subject but it doesn't work for me. By the time I reach the Templates folder, I only see templates for Numbers and not for Pages. Need help, please. Thanks

How can I add a new Template to My Templates in Pages? I've read most of the discussions on the subject but it doesn't work for me. By the time I reach the Templates folder, I only see templates for Numbers and not for Pages. Need help, please. Thanks

Si vous avez utilisé la commande Save As Template depuis Pages, il y a forcément un dossier
iWork > Pages
contenant Templates > My Templates
comme il y a un dossier
iWork > Numbers
contenant Templates > My Templates
Depuis le Finder, tapez cmd + f
puis configurez la recherche comme sur cette recopie d'écran.
puis lancez la recherche.
Ainsi, vous allez trouver vos modèles personnalisés dans leur dossier.
Chez moi, il y en a une kyrielle en dehors des dossiers standards parce que je renomme wxcvb.template quasiment tous mes documents Pages et wxcvb.nmbtemplate à peu près tous mes documents Numbers.
Ainsi, quand je travaille sur un document, je ne suis pas ralenti par Autosave.
Désolé mais je ne répondrai plus avant demain.
Pour moi il est temps de dormir.
Yvan KOENIG (VALLAURIS, France) mercredi 23 janvier 2011 22:39:28
iMac 21”5, i7, 2.8 GHz, 4 Gbytes, 1 Tbytes, mac OS X 10.6.8 and 10.7.2
My iDisk is : <http://public.me.com/koenigyvan>
Please : Search for questions similar to your own before submitting them to the community

Please help me!--rendering makes the images or video blurry (very pixelated) deteriorates the image Adobe Premier Elements 13 need help! .jpg and mpeg images, but I have never "rendered" before since I got APE 13 about 6 weeks ago. I am desperate for

Please help me!--rendering makes the images or video blurry (very pixelated) deteriorates the image Adobe Premier Elements 13 need help! .jpg and mpeg images, but I have never "rendered" before since I got APE 13 about 6 weeks ago. I am desperate for assistance!

That's going to be a ridiculous waste of money and energy.
First of all, the current ATI drivers don't support multiple GPUs, so at the moment even a single 4870X2 would be only a 'normal' 4870 (which is quite a speed beast already). GFX drivers evolve rapidly, so things might look different next month, but when it comes to Linux and hardware there's one Golden Rule: stay away from the newest stuff and wait for proper support to get coded.
I also wonder what power supply could possibly cope with the differences between idle and full load; that's way beyond 400W. But then, I'm one of those "quiet&green" types where >100W idle is already a bit much.
I kind of understand that you want to get it done and not worry about hardware for the next 10 years or so, but that's simply not how the hardware world works and never did. At least not for the average consumer.

Need Help to create new screen for RF Sapconsole

Hi Guru's
I'm new on RF (but some years in ABAP) since last week.
I need help to create new screens for RF (SAPLLMOB).
Can someone explain me the procedure to create screen (with ABAP code after) or perhaps someone have an exemple (simple or not) ?
I have to develop 2 new screens with really few time.
And, another subsidiary question :
how SAP can transfert information between the flash gun and the screen i have developped.
Is there some code to add to enable this functionality or it is include in SAPLLMOB on standard fields ????
It's a new strange world for me today...
Many thanks to everyone who can explain me
Alain

hi,
I am facing this problem as well. Is there any reference to create the new screen?
Hope someone can help! Thanks!
Regards,
Darren

I need help in Downloading Adobe Elements for my Mac & Adobe Acrobat for my laptop...I have been battling for the last day.

I need help in Downloading Adobe Elements for my Mac & Adobe Acrobat for my laptop...I have been battling for the last day.

~graffiti wrote:
PjonesCET wrote:
I know if you attempt to download and exe file to Mac from a Mac Partition you'll get something like. Cannot not understand file format octet-stream. This means it does not recognize MS execute files.
Not necesarily. I've done it a few times.
PjonesCET wrote:
I'm not sure you can download a PC copy of Acrobat 9 unless you operating from bootcamp or other such application and running the PC partition.
Yes. You can.
I've learned something. New. This must be recently changed. That last time I clicked on a Link I though was a dmg file and turned out it was and exe file my Macs wouldn't allow me to do so. But haven't tried recently everytime and exe file comes up I cancel. I gues I am used to the time everytime a Virus or some other nasty was downloaded it was packaged in and exe file and Macs owuldn't allow it. I suppose with the INtel guts now they can no longer refuse to download.

I think I need help with driver (software) settings for D110a

I think I need help with driver (software) settings for D110a all-in-one
Product: D110a all-in-one
OS: Windows XP Professional
Error messages: None
Changes before problem appeared: None--new installation
The quality of photo images (mostly JPG files) in printouts is awful even though the files display beautifully on the PC screen. I am using
IrfanView software for displaying/printing. As far as I can tell, IrfanView is not the problem.
When I print the same images on a Deskjet 5150 attached to a different PC also running XP Pro and IrfanView, the quality of the printouts is at
least acceptable, Some would probably say good or very good.
It's dificult to explain in words the problem with the printouts. A picture of really pretty vegetables (squashes, tomatoes, watermelon, etc) comes
out much too red. Moreover, the red, which appears shaded on the screen, seems to be all one shade in the D110a printouts.
Something similar happens to a view of a huge tree in full leaf. On screen, there are subtle variations in the "greenness" of the leaves. In the
printout, all green is the same shade. In the same printout, the trunk of the tree is all a single shade of grey. It isn;t even obvious that the
trunk is a round, solid object.
I liken the effect to audio that disappears entirely when you lower the volume and gets clipped into square waves in even moderately loud passages.
I don't know whether the D110a driver software permits adjusting the parameters that appear to be set incorrectly, and if adjustments are possible,
how I would identify which parameters to adjust, how I would access them, or how I would adjust them. I'm hoping that someone can help. Thanks.
I forgot to mention that I have used the diagnostic application and it tells me that there are no problems.
e-mail me at [email protected]

brazzmonkey wrote:
Hi everyone,
I noticed the following message when network starts on my gateway
Warning: This functionality is deprecated.
Please refer to /etc/rc.conf on how to define a single wired
connection, or use a utility such as netcfg.
Then I realized the way network settings should be written in rc.conf has changed. But I can't figure out how this should be done.
Currently, my set up is the following (old way):
INTERFACES=(eth0 eth1)
eth0="dhcp"
eth1="eth1 192.168.0.10 netmask 255.255.255.0 broadcast 192.168.0.255"
ROUTES=(!gateway)
eth0 is on DHCP because the IP is dynamically assigned my ISP.
eth1 has a fix IP because it's on the LAN side.
No problem to use DHCP on eth0 with the new settings.
But for eth1, I don't know what I am supposed to write for gateway.
Wiki isn't clear on that one either, and it looks like many articles still refer to the old way.
Any guidance appreciated, thanks.
brazzmonkey,
you can't define 2 interfaces the old way (even though I saw some tricky workaround somewhere in the forums).
Use, f.e., netcfg:
Comment your old lines.
In /etc/rc.conf insert:
NETWORKS=(Eth0-dhcp Eth1-static)
DAEMONS=(..... !network @net-profiles ....)
In /etc/network.d create 2 files:
First one is named Eth0-dhcp.
Contents:
CONNECTION="ethernet"
DESCRIPTION="Whatever text"
INTERFACE=eth0
HOSTNAME="your hostname"
IP="dhcp"
DHCP_TIMEOUT=15
Second one is named Eth1-static.
Contents:
CONNECTION='ethernet'
DESCRIPTION='whatver'
INTERFACE='eth1'
HOSTNAME='hname'
IP='static'
ADDR='192.168.0.10'
GATEWAY='192.168.0.1' # your gateway IP
DNS=('192.168.0.1') # your DNS server
The names Eth0-dhcp and Eth1-static are not magic. They just must be the same in rc.conf and in /etc/network.d.
Hope it helps.
mektub
PS: netcfg must be installed.
Last edited by Mektub (2011-07-20 14:07:05)

Need help to redeem contact code for OS X 7

Need help to redeem contact code for OS X 7

Hello NOREDEEM,
Thanks for using Apple Support Communities.
If you have the purchase code for OS X 10.7 Lion, then you can follow the directions below to redeem it on your Mac.
Mac App Store: Redeem gift cards and download codes
Take care,
Alex H.

Need help reinstalling Acrobat X pro for MAC. Got one site but I-tunes didn't recognize so couldn't go further. I have serial

Need help reinstalling Acrobat X pro for MAC. Got one site but I-tunes didn't recognize so couldn't go further. I have serial

Actually, you can and have downloaded from there, because that message only happens when the download is finished.
The message is entirely normal, and is Apple's way of encouraging the world to use the Mac App Store. That doesn't help you because Acrobat isn't in the Mac App Store - it isn't allowed there.
So, what to do? Change your system settings
Please follow the steps given below to resolve this issue -
System Preferences > Security & Privacy > General > Allow applications downloaded from > Anywhere

I bought 4 apps 1. the sims 3 for £4.99 2. fifa 14 premium pack for £2.99 3. plauge inc for 99p and monopoly for 69p i bought a £15 app store voucher and i only have £1.66 left but i should have £5.34 left please help me

i bought 4 apps 1. the sims 3 for £4.99 2. fifa 14 premium pack for £2.99 3. plauge inc for 99p and monopoly for 69p i bought a £15 app store voucher and i only have £1.66 left but i should have £5.34 left please help me

Three possible causes:
- You got charged twice. On a computer go to iTunes Store>View Account>Purchase History and see what you got charged for
- Maybe the difference is due to tax. Again the Purchase History will list the total price including tax for each purchase.
- You had a negative balance (you owed money) before you redeemed the card.
If problems contact iTunes:
Contact iTunes

Need help for ACL and NAT for VoIP

Similar Messages

Maybe you are looking for