VOIP through ipsec

IPsec, L2TP, Split tunneling, PPTP and all other VPN related posts.
Post Reply
Guest

VOIP through ipsec

Post by Guest » Sun Jan 06, 2008 1:00 pm

HI all,  I  configured a site to site IPSEC tunnel between ASA5510 site1 and sonicwall (site 2) . The ipsec tunnel is established and I can ping two subnets each other. I am using ASA5510 as the gateway for voip. ie I gave the ip of voip provider in sonicwall to route the traffic to that ip to IPsec tunnel. The routing is happening and packets to that publc ip is reaching at cisco and its going out as well. The SIP client in site 2 is able to register to the voip provider. But whenever he makes calls to other client in site 2 his phone is ringing , but he can hear anything after he answer the call. Caller is hearing abrupt voices. Secondly when a SIP client calls from site 1 to site 2 he is not even able to reach him.  Site 2 phone is not even ringing when calls from site 1. We have soft phones as well as hardphones. I think it might be due to the IPsec tunnel problem.  One thing is the voip asterisk server is not under site 1 or siet 2 it is in ouside network of ASA5510 .Will taht be the issue ? Plese give some leads on this..Thanks   Thanks & Regards Hans Emmanuel

Guest

Re:VOIP through ipsec

Post by Guest » Sun Jan 06, 2008 1:54 pm

Hi, I would think that the problem is routing if voice is not passing thru or filtering the ports for voice traffic.There were some SIP bugs on some ASA versions as well with the SIP inspection. Try disabling SIP inspection on the ASA just to see if the problem persists and try to make sure the routing on both sides is correct for the voice traffic.If the problem continues, perhaps you can include a drawing to try to help you out. Federico.

Guest

Re:VOIP through ipsec

Post by Guest » Sun Jan 06, 2008 2:27 pm

yes federico I will check this

Guest

Re:VOIP through ipsec

Post by Guest » Sun Jan 06, 2008 2:54 pm

Hi Federicko, Thanks for your reply. I think disabling SIP inspection did the job.Sound quallity is good now. Will there be any adverse effects due to disabling SIP inspection.

Guest

Re:VOIP through ipsec

Post by Guest » Sun Jan 06, 2008 4:04 pm

Yes.SIP inspection enables call handling.As for all inspection it allows session tracking and opening secondary channels when needed. Depending on the current OS, I know a lot of SIP bugs are fixed on 8.2x Federico.

Post Reply