|
[x]
Posted via EE Mobile
|
|
| Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again. |
|
|
|
|
Asked by strangepl in Network Routers, Asterisk Open Source Telephony, Voice Over IP
Hi Folks,
wonder if you can help please I have seen various fragmented answers but nothing definitive. I am not keen on using SDM as I want to understand what is going on via CLI first. I have set up my cisco 877 to work on Gradwell (tiscali) business adsl 2 line with nat and a private IP scheme.
I need to set up two Linksys spa942 voip phones to work through the nat and to connect to our Babelisk hosted asterisk SIP PBX service. We have 13 usable public IP addresses and Ideally we would like to create static public to private IP address routes and properly translate RTP and sip ports. Our details are below:
RTP 10000 to 20000
SIP Ports: 5060 and 5061
SIP codec : g711 U law
Codec Bandwidth 87.2 kpbs per call
Available bandwidth 600kbps up 4500kbps down
I think with overhead we need to reserve 220Kbps both ways for 2 calls but I would really like to learn how to set this up as I need to set this up as a template for other small office installs.
Any help would be greatly appreciated.
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
|
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname XXXX
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging
enable secret 5 $1$2.Sn$orId7g7.HFsZb2Ny0dAbY1
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
!
ip dhcp pool LAN
network 192.168.0.0 255.255.255.0
dns-server 193.111.200.91 193.111.200.191
default-router 192.168.0.254
!
!
ip ftp username XXXX
ip ftp password XXXX
no ip domain lookup
ip name-server 193.111.200.91
ip name-server 193.111.200.191
!
!
crypto pki trustpoint TP-self-signed-2522825437
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2522825437
revocation-check none
rsakeypair TP-self-signed-2522825437
!
!
crypto pki certificate chain TP-self-signed-2522825437
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32353232 38323534 3337301E 170D3039 30363235 30363334
33335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35323238
32353433 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100ACB8 AE7F8ED1 DA8F4200 AB08169E 118BE3F4 4F9DA38D EA98ECBF 82A11755
3C6D0174 7264449C 77784723 57EB6DCD F20ED43B FE7ABF69 CB00CC16 C837A0BE
82A11CF1 677EA6BA 1B20375D B7782AC1 9A215144 7A9EF696 9093DE42 7D2C3DCF
D789A578 4A148597 92942961 F544BE81 97CD995A 0282251F 84434AD9 7375342A
68030203 010001A3 6C306A30 0F060355 1D130101 FF040530 030101FF 30170603
551D1104 10300E82 0C626162 656C6973 6B5F3837 37301F06 03551D23 04183016
80143068 78956949 FF9C6491 3A58441B 0517B17A EA35301D 0603551D 0E041604
14306878 956949FF 9C64913A 58441B05 17B17AEA 35300D06 092A8648 86F70D01
01040500 03818100 78DEB85C 975BC2E4 BEF6AA98 5AAA1429 59CA9590 F65CDEF2
F0556B4E DA3A9BAA 22265948 898084A2 40230FB1 036B8590 FBA3E053 C1B63268
7BBD235A 724CF0CC F5FD498E 680BB702 C93ED91F B60EA244 FAD84D9F 7D732AAF
B303FD4F ADCF8826 95FF5F00 4B8D3731 DCDB0C98 4E92A90F 41E51266 CA47E2C2
ABE435FC 1DB13512
quit
username admin privilege 15 password 0 password
!
!
!
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode itu-dmt
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description LAN
ip address 192.168.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer1
description Outside Interface
ip address 79.135.X.X 255.255.255.240
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname XXX
ppp chap password 0 XXX
ppp ipcp dns request
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip dns server
!
ip http server
ip http secure-server
ip nat inside source list 100 interface Dialer1 overload
!
access-list 100 permit ip 192.168.0.0 0.0.255.255 any
dialer-list 1 protocol ip permit
!
!
!
!
control-plane
!
banner motd ^C DO NOT ATTEMPT TO LOG INTO THIS SYSTEM. UNAUTHORISED ATTEMPTS WILL RESULT IN PROSECUTION ^C
!
line con 0
exec-timeout 0 0
password XXXX
logging synchronous
login
no modem enable
transport output all
line aux 0
transport output all
line vty 0 4
exec-timeout 0 0
privilege level 15
password XXXX
login
transport input telnet
transport output all
!
scheduler max-task-time 5000
scheduler allocate 20000 1000
ntp clock-period 17175083
ntp source Dialer1
ntp server 130.88.200.98
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end
|
20091111-EE-VQP-89 - Hierarchy / EE_QW_3_20080625