CISCO836 und kein VoIP über NAT!

[gogosch 10]

Hallo!

Hab nun endlich meinen CISCO836 für mein geroutetes Subnetz zum Laufen gebracht aber UDP-Pakete meines Grandstream ATA286ers werden nicht über NAT geroutet.

Habe die Adresse des Ethernet0-Interfaces als Gateway (wie bei allen anderen) angegeben aber der ATA kann sich nicht mehr registrieren. Fehlermeldung am AT286: "Firewall is UDP blocked". Hab übrigens beim CISCO keine FW und keine Access-Beschränkungen konfiguriert!!

Alle anderen Internetverbindugen, via NAT in und out, (Webserver, DNS-Server, P2P, SMTP, usw) funktionieren einwandfrei!

Warum wird UDP (H.323, SIP) nicht "genatted"?

Ohne CISCO, mit KerioWInrouteFirewall, funktioniert es einwandfrei. :mad:

H.

[xymos 10]

hi,

 

 

sollte eigentlich funzen ;-) Denn bei mir geht es auch !

 

poste mal nen sh run

 

-xymos.

[gogosch 10]

Hallo!

Hier die config

!

version 12.3

no service pad

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname R30219

!

no logging buffered

enable secret 5 +++++++++++++.

!

username R30219 password 7 ************

no aaa new-model

ip subnet-zero

!

interface Ethernet0

ip address 192.168.0.254 255.255.255.0

ip nat inside

ip tcp adjust-mss 1452

no ip mroute-cache

!

interface Dialer1

ip address negotiated

ip access-group 111 in

ip mtu 1492

ip nat outside

encapsulation ppp

ip tcp adjust-mss 1452

dialer pool 1

dialer remote-name redback

dialer-group 1

ppp authentication chap pap callin

ppp chap hostname ***************

ppp chap password 7 **************

ppp pap sent-username ************* password 7 ***************

hold-queue 224 in

!

ip nat translation tcp-timeout 7200

ip nat pool net29 62.116.36.57 62.116.36.62 prefix-length 29

ip nat inside source list 102 pool net29 overload

ip nat inside source static tcp 192.168.0.11 25 62.116.36.57 25 extendable

ip nat inside source static tcp 192.168.0.11 110 62.116.36.57 110 extendable

ip nat inside source static tcp 192.168.0.11 80 62.116.36.57 80 extendable

ip nat inside source static tcp 192.168.0.11 80 62.116.36.60 80 extendable

ip nat inside source static tcp 192.168.0.11 80 62.116.36.61 80 extendable

ip nat inside source static tcp 192.168.0.1 6697 62.116.36.57 6697 extendable

ip nat inside source static tcp 192.168.0.52 62918 62.116.36.57 62918 extendable

ip nat inside source static udp 192.168.0.11 53 62.116.36.58 53 extendable

ip nat inside source static udp 192.168.0.11 53 62.116.36.59 53 extendable

ip nat inside source static udp 192.168.0.11 53 62.116.36.57 53 extendable

ip nat inside source static tcp 192.168.0.52 4662 62.116.36.57 4662 extendable

ip nat inside source static tcp 192.168.0.52 4662 62.116.36.58 4662 extendable

ip nat inside source static tcp 192.168.0.52 4662 62.116.36.59 4662 extendable

ip nat inside source static tcp 192.168.0.52 4662 62.116.36.60 4662 extendable

ip nat inside source static tcp 192.168.0.52 4662 62.116.36.61 4662 extendable

ip nat inside source static tcp 192.168.0.52 4662 62.116.36.62 4662 extendable

ip nat inside source static udp 192.168.0.49 5060 62.116.36.58 5060 extendable

ip nat inside source static udp 192.168.0.49 5060 62.116.36.59 5060 extendable

ip nat inside source static udp 192.168.0.49 5060 62.116.36.60 5060 extendable

ip nat inside source static udp 192.168.0.49 5060 62.116.36.61 5060 extendable

ip nat inside source static udp 192.168.0.49 5060 62.116.36.62 5060 extendable

ip nat inside source static udp 192.168.0.49 5060 62.116.36.57 5060 extendable

ip nat inside source static udp 192.168.0.49 5004 62.116.36.57 5004 extendable

ip nat inside source static udp 192.168.0.49 5004 62.116.36.58 5004 extendable

ip nat inside source static udp 192.168.0.49 5004 62.116.36.59 5004 extendable

ip nat inside source static udp 192.168.0.49 5004 62.116.36.60 5004 extendable

ip nat inside source static udp 192.168.0.49 5004 62.116.36.61 5004 extendable

ip nat inside source static udp 192.168.0.49 5004 62.116.36.62 5004 extendable

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer1

no ip http server

no ip http secure-server

!

access-list 23 permit 192.168.0.0 0.0.0.255

access-list 102 permit ip 192.168.0.0 0.0.0.255 any

access-list 111 permit ip any any

dialer-list 1 protocol ip permit

!

!

end

LG

H.