[9.065][FEATURE] Cisco IP Communicator not able to hear anything over S2S

I connected to office with Site to Site tunnel. Everything seemed to be working fine (web, file share) until I tried using Cisco IP Communicator. The other side can hear me speak and pushing on the numbers, but I cannot cannot hear anything.

Anyone seen this type of issue?

I am not seeing any entries within the firewall log. Any suggestion on how I can troubleshoot this? I basically duplicated the config I had on an old Cisco PIX for the tunnel. I am presenting a /29 network in the tunnel and SNATing everything to a single IP within the /29. Only one instance of the Cisco IP Commincator is running.

Thank you

0 d12fk over 12 years ago

Please check if you have enabled the "Rule applies to IPsec packets" option in the "Advanced" section of the SNAT rule you are using for the flow. Activating it might help.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 rchow96 over 12 years ago in reply to d12fk

Please check if you have enabled the "Rule applies to IPsec packets" option in the "Advanced" section of the SNAT rule you are using for the flow. Activating it might help.

Thanks. I have verified "Rule applies to IPsec packets" has been selected.

FYI, from the daily report, the following entry was under IPS Top 10 Attacks Rules.
PROTOCOL-VOIP Digium Asterisk SCCP overly large mem copy attempt

I tried disabling IPS for a while, but it did not make any difference.

Any additional suggestions will be greatly appreciated.

Thank you
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 d12fk over 12 years ago

No further IPsec related ideas. Must be routing or NAT. Anyone else?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kofi over 12 years ago

what do you have configured in the voip settings? Do you use the strict mode?

Best,

Kofi
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 rchow96 over 12 years ago in reply to kofi

what do you have configured in the voip settings? Do you use the strict mode?

VoIP section was not enabled. I have enabled it and added networks to both client and server sections. I have also enabled strict mode as well. Still the same.

Is there anyway to add skinny protocol in there as well? Cisco uses that too.

Thanks,
Richard
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kofi over 12 years ago

Sorry, but we don't have support for the skinny protocol atm. You could vote for this feature under feature.astaro.com.

Best,

Kofi
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[9.065][FEATURE] Cisco IP Communicator not able to hear anything over S2S

Submitted a Tech Support Case lately from the Support Portal?