Avatar of xtremereality
xtremereality
Flag for United Kingdom of Great Britain and Northern Ireland asked on

Cisco ASA 5520 Unable to reserve port 5060 UDP

Hello everyone,
I need to open the port 5060 UDP for a sip service on my ASA 5520 and I keep getting an error saying: NAT unable to reserve ports.

Can anyone please help on this?

Thanks
Cisco* sip

Avatar of undefined
Last Comment
xtremereality

8/22/2022 - Mon
ArchiTech89

Port forwarding and filtering are done with Access Control Lists (ACLs). Your NAT configuration simply provides a 'public' IP address for an internal device so that it can get out to the public Internet.

I'm making assumptions, here. I'm assuming UDP 5060 is inbound to your network. If so, your ACL should look something like this:
access-list outside-in extended permit udp any 192.168.x.x 255.255.255.0 eq 5060

This assumes that the name of the ACL is "outside-in" and it's applied to the outside interface. It assumes that the source traffic can come from any source, while the destination address is a standard non-routable subnet (192.168.x.x) with a 24-bit subnet mask.

Hope this helps...
Pete Long

Mmm that error is usually seen when you try and forward a range of ports and you have particular versions of the OS?
ASKER CERTIFIED SOLUTION
xtremereality

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
xtremereality

ASKER
At the end I solved by myself
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck