similar to: PIX Firewall Ports and Access-Lists

Hi, I have about 10 Cisco 7960s behind a PIX 506E (IOS v6.3) firewall. After some period of time, asterisk says that some of them are unreachable, and the phones lose their registration. The only way to make the phones recover is to clear the NAT translation tables for the phones on the PIX (clear xlate...) Does anyone know how to fix this? As you can imagine, it is quite annoying. And it does not

hey friends, I am looking for a free open source software (web based or application) through which I can monitor the Pix Firewall. What it should show Interface status or traffic , VPN Connectivity status, CPU Status, Memory Status etc. I am also running DHCP server on Pix Firewall (due to some reasons) If it can monitor that also means showing how many IPAddresses has been assigned, to whom,

Is there anything special that anyone here has had to do to get an Aastra phone (on the Internet) to talk to Asterisk behind a PIX firewall? Ports 10000-20000 UDP are open on the PIX and forwarding to the Asterisk server. The Asterisk server's RTP.CONF is set to use 10000-20000. The phone registers, and will place AND receive calls, however, no audio is passed. The phone is an Aastra

Hi, I asked this last week but i didn't get any answer So i will elaborate on my question. I need to setup a pix 515 firewall (running 7.2.2 OS) to allow sip traffic thru it from a sip phone wherever i may be. The pix is where all my servers are colocated and i will need to connect thru it from softphones / hardphones wherever i happen to be traveling. I need help setting up the pix for

I cannot get incoming calls to sip phones behind a PIX to work, outgoing is fine. Asterisk (Public IP) --> Internet --> PIX (NAT) --> Sip Phones I have tried no fixup protocol sip, I have punched a hole in the Pix allowing anything from the Asterisk box into the network, still no incoming. I have done all the Wiki suggests in regarding to NAT. Is their a trick getting the

Hi, I have the Cisco PIX 506 firewall right in front of the asterisk and I am getting a one-way audio. I need your help/guidance to resolve this problem. I have the "fixups" disabled for SIP in the Cisco PIX 506. Any help rendered by you in this subject is greatly appreciated. I have been breaking my head trying to resolve this problem for more than one month. I have included the

Can anyone point me in a good direction for configuring SIP through a PIX using 1:1 NAT. I have read anything I could get my hands on and tried them all with very little success. I can get it to work through the cheap little cable modem routers, but not this PIX. I -can- make a direct SIP call using the IP address of the * server (ie.exten@ipaddr), but when I do that * still doesn't

does anyone have a sip working through a cisco pix firewall? i can get the phone to register and the call to be negotiated, but as soon as the call is answered there is no sound and the call ends immediately. im sure this is due to the RTP negotiation being rejected by the pix. any helpful ways around this? right now my only solution is to put a small box outside the firewall and IAX the

Hi List Just a little bit OT, but then again perhaps an information that could be of great value for a lot of administrators !! Does anyone have experience with how to setup VoIP QoS for outgoing data through a Cisco PIX (515) ? I believe that it should be possible to give higher priority to outgoing VoIP packets. This is due to the problem of ADSL as the UpStream data rate is 1/4 of the

Hi everyone, I'm very new to all this, so please forgive me if I have the terminology mixed-up. We are preparing to install an Asterisk IP PBX over the weekend and I have an issue with the Polycom SP 500 phones we are trying to use. My problem is regarding DHCP. Our DHCP server is our Cisco PIX 501 firewall. I've specified option 66 and the phones connect to the FTP server

Does Kid Pix Studio Deluxe run under Wine? An elementary school I visited recently was running that program on all their Windows machines, and wouldn't consider switching to Linux unless it was supported. winehq.com doesn't resolve in DNS for me tonight :-( so I can't check the database. I don't have a copy myself, so I can't test it personally. (Hmm, maybe I should get

Anyone got a resource on setting up a CentOS box to connect to a Cisco PIX 5xx VPN using IPSec? I don't know if it matters but an important part of functionality would be split tunneling, I need to maintain that from the windows side of functionality. Thanks! jlc

Hi All, I want to build a dedicated firewall/router as I am launching a NPO and I can host this in my garage. (Comcast offered me a 100 x 20 circuit for $99/mo with 5 statics) I used to run Untangle, but as of version 9, you are forced to use their build in protocol policies versus the firewalling I am used to (Deny All and then opening holes for specific IP's, etc). There are so many

We are experiencing intermittent DTMF problems here, with the following setup: ITSP -> PIX -> Asterisk (g729, RFC2833 for DTMF). I am running Ubuntu server 10.04, but Asterisk is compiled by us and not installed from the software repository. Essentially, DTMF works for some time, but at some point it simply stops and the point at which it stops appears to be random. Using RTP debug, I

Hi All, I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and have Comcast statically route my traffic to this IP. Then when traffic comes have it decide if it

Hello, , I have some of asterisk to CCM4 SIP trunk oneway audio problems. I have setup a asterisk server. It's work great and have no any problems connect to local ITSP (using SIP protocol) . But we need to build a sip trunk to another CCM4 server. The network typology like this. SIP Phone (192.168.1.100) <-----------> 192.168.1.254 (Asterisk Server) 59.124. xx.xx

Hi, We have a shorewall firewall running on SUSE 10. We have three nic''s, Lan, DMZ and Internet. We also have a Cisco Pix 506e. We moved from sending all our traffic through the pix to using the Suse box yesterday. The PIX is in the DMZ, with a connection to the LAN switch, the idea being that VPN users can connect to the pix to the lan. The Pix is on the 10.0.1.x subnet, the lan is

https://bugzilla.mindrot.org/show_bug.cgi?id=1404 Summary: Make keepalive work properly with Cisco PIX/ASA boxes Classification: Unclassified Product: Portable OpenSSH Version: 4.7p1 Platform: Other OS/Version: Linux Status: NEW Severity: enhancement Priority: P2 Component: sshd AssignedTo:

This is kind of an odd request so I''ve got the asbestos undies on. I have a client who currently has a layer 3 switch plugged into a cisco pix. Routing is handled via RIP and now the client wants to insert a linux box running shorewall behind the PIX and in front of the switch to act as a content filter+backup firewall. The immediate problem I forsee happening is that RIP broadcasts to

Hello, long time lurker, first time writer.... We have the following set up ITSP | | Internet | | Cisco 2600 | | Switch----Asterisk Server running 1.0.9(has public ip) | | Cisco 515e Pix Firewall running Pix OS 5.3(run's a class c 1-to-1 nat and pat) | | Grandstream GXP-2000(run latest fw from grandstream site 1.0.1.9) The grandstream registers with the public asterisk server fine. I even