Re: Cisco NAT Problemi
""Ö.Tuğrul Boztoprak"[email protected] [cisco-ttl]" <[email protected]> Thu, 21 Aug 2014 11:06:33 +0300
| Newsgroups | gmane.comp.hardware.cisco.turkish |
|---|---|
| Message-ID | <[email protected]> |
--------------070802090606040200090201 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Merhaba, doğru anladıysam içerideki IP adresine (sipserver) izin açmışsınız, nat'lama yapmış olduğunuz dış (outside) IP adresinin ilgili portlarına izin açtınız mı acaba? Burada sorun yoksa trafiğin nerede kesildiğini log'lardan görebilirsiniz: Grafik arayüzden monitoring tab'ında logging level'ı debugging'e getirerek view tuşu ile logları görüntüleyerek, burada dışarıdan IP telefonlarının size ulaştıkları IP adreslerini filtreleyebilirsiniz. Kolay gelsin. 20.08.2014 21:11 tarihinde, Ozgur Karatas [email protected] [cisco-ttl] yazdı: > Merhaba, > > Cisco ASA üzerinde bir sorunla karşı karşıyayım. Aşağıdaki linkten > göründüğü üzere bazı portları SIP Server'a NAT'lamam gerekiyor. Ancak > aşağıdaki gibi bir konfigurasyon yapmama rağmen dışarıdan IP > telefonlar register olamıyorlar. > > Sizce sorun ne olabilir? > > Yardımcı olan arkadaşlara çok teşekkür ederim. > > Saygılarımla > > Ozgur > > > object network sipserver > host 10.0.1.5 > > object service 3CX_Management > service tcp destination eq 5000 > > object service 3CX_Management_HTTPS > service tcp destination eq 5001 > > object service 3CX_SIP_TCP > service tcp destination eq 5060 > > object service 3CX_SIP_UDP > service udp destination eq 5060 > > object service 3CX_Secure_SIP > service tcp destination eq 5061 > > object service 3CX_Tunnel_Protocol_TCP > service tcp destination eq 5090 > > object service 3CX_Tunnel_Protocol_UDP > service udp destination eq 5090 > > object service 3CX_Media_Server > service udp destination range 9000 9049 > object service 3CX_Data_Communication > service tcp destination eq 4156 > > nat (inside,outside) source static sipserver interface service > 3CX_Management 3CX_Management > nat (inside,outside) source static sipserver interface service > 3CX_Management_HTTPS 3CX_Management_HTTPS > nat (inside,outside) source static sipserver interface service > 3CX_SIP_TCP 3CX_SIP_TCP > nat (inside,outside) source static sipserver interface service > 3CX_SIP_UDP 3CX_SIP_UDP > nat (inside,outside) source static sipserver interface service > 3CX_Secure_SIP 3CX_Secure_SIP > nat (inside,outside) source static sipserver interface service > 3CX_Tunnel_Protocol_TCP 3CX_Tunnel_Protocol_TCP > nat (inside,outside) source static sipserver interface service > 3CX_Tunnel_Protocol_UDP 3CX_Tunnel_Protocol_UDP > nat (inside,outside) source static sipserver interface service > 3CX_Media_Server 3CX_Media_Server > nat (inside,outside) source static sipserver interface service > 3CX_Data_Communication 3CX_Data_Communication > > object-group service 3CX > service-object tcp destination eq 5000 > service-object tcp destination eq 5001 > service-object tcp destination eq 5060 > service-object udp destination eq 5060 > service-object tcp destination eq 5061 > service-object tcp destination eq 5090 > service-object udp destination eq 5090 > service-object udp destination range 9000 9049 > service-object tcp destination eq 4156 > > access-list outside-in permit object-group 3CX any object sipserver > access-group outside-in in interface outside > > -- Tuğrul Marmara Üniversitesi Bilgi İşlem Daire Başkanlığı --------------070802090606040200090201 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <head> <style type="text/css"> <!-- /* start of attachment style */ .ygrp-photo-title{ clear: both; font-size: smaller; height: 15px; overflow: hidden; text-align: center; width: 75px; } div.ygrp-photo{ background-position: center; background-repeat: no-repeat; background-color: white; border: 1px solid black; height: 62px; width: 62px; } div.photo-title a, div.photo-title a:active, div.photo-title a:hover, div.photo-title a:visited { text-decoration: none; } div.attach-table div.attach-row { clear: both; } div.attach-table div.attach-row div { float: left; /* margin: 2px;*/ } p { clear: both; padding: 15px 0 3px 0; overflow: hidden; } div.ygrp-file { width: 30px; valign: middle; } div.attach-table div.attach-row div div a { text-decoration: none; } div.attach-table div.attach-row div div span { font-weight: normal; } div.ygrp-file-title { font-weight: bold; } /* end of attachment style */ --> </style> </head> <html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body text="#000066" bgcolor="#FFFFFF"> <!-- |**|begin egp html banner|**| --> <br><br> <!-- |**|end egp html banner|**| --> <div class="moz-cite-prefix">Merhaba,<br> doğru anladıysam içerideki IP adresine (sipserver) izin açmışsınız,<br> nat'lama yapmış olduğunuz dış (outside) IP adresinin ilgili portlarına izin açtınız mı acaba?<br> <br> Burada sorun yoksa trafiğin nerede kesildiğini log'lardan görebilirsiniz:<br> Grafik arayüzden monitoring tab'ında<br> logging level'ı debugging'e getirerek view tuşu ile logları görüntüleyerek, burada dışarıdan IP telefonlarının size ulaştıkları IP adreslerini filtreleyebilirsiniz.<br> <br> Kolay gelsin.<br> <br> 20.08.2014 21:11 tarihinde, Ozgur Karatas <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> [cisco-ttl] yazdı:<br> </div> <blockquote cite="mid:[email protected]" type="cite"> <span style="display:none"> </span> <div id="ygrp-text"> <div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt;"> <div class="">Merhaba,</div> <div class=""><br class=""> </div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class="">Cisco ASA üzerinde bir sorunla karşı karşıyayım. Aşağıdaki linkten göründüğü üzere bazı portları SIP Server'a NAT'lamam gerekiyor. Ancak aşağıdaki gibi bir konfigurasyon yapmama rağmen dışarıdan IP telefonlar register olamıyorlar.</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br class=""> </div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class="">Sizce sorun ne olabilir?</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br> </div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class="">Yardımcı olan arkadaşlara çok teşekkür ederim.</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br> </div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class="">Saygılarımla</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br> </div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class="">Ozgur</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br> </div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object network sipserver</div> <div style="background-color: transparent;" class="">host 10.0.1.5</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Management </div> <div style="background-color: transparent;" class="">service tcp destination eq 5000</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Management_HTTPS</div> <div style="background-color: transparent;" class="">service tcp destination eq 5001</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_SIP_TCP</div> <div style="background-color: transparent;" class="">service tcp destination eq 5060</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_SIP_UDP</div> <div style="background-color: transparent;" class="">service udp destination eq 5060</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Secure_SIP</div> <div style="background-color: transparent;" class="">service tcp destination eq 5061</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Tunnel_Protocol_TCP</div> <div style="background-color: transparent;" class="">service tcp destination eq 5090</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Tunnel_Protocol_UDP</div> <div style="background-color: transparent;" class="">service udp destination eq 5090</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Media_Server</div> <div style="background-color: transparent;" class="">service udp destination range 9000 9049</div> <div style="background-color: transparent;" class=""> </div> <div style="background-color: transparent;" class="">object service 3CX_Data_Communication</div> <div style="background-color: transparent;" class="">service tcp destination eq 4156</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Management 3CX_Management</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Management_HTTPS 3CX_Management_HTTPS</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_SIP_TCP 3CX_SIP_TCP</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_SIP_UDP 3CX_SIP_UDP</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Secure_SIP 3CX_Secure_SIP</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Tunnel_Protocol_TCP 3CX_Tunnel_Protocol_TCP</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Tunnel_Protocol_UDP 3CX_Tunnel_Protocol_UDP</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Media_Server 3CX_Media_Server</div> <div style="background-color: transparent;" class="">nat (inside,outside) source static sipserver interface service 3CX_Data_Communication 3CX_Data_Communication</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br> </div> <div style="background-color: transparent;" class=""> object-group service 3CX</div> <div style="background-color: transparent;" class=""> service-object tcp destination eq 5000</div> <div style="background-color: transparent;" class=""> service-object tcp destination eq 5001</div> <div style="background-color: transparent;" class=""> service-object tcp destination eq 5060</div> <div style="background-color: transparent;" class=""> service-object udp destination eq 5060</div> <div style="background-color: transparent;" class=""> service-object tcp destination eq 5061</div> <div style="background-color: transparent;" class=""> service-object tcp destination eq 5090</div> <div style="background-color: transparent;" class=""> service-object udp destination eq 5090</div> <div style="background-color: transparent;" class=""> service-object udp destination range 9000 9049</div> <div style="background-color: transparent;" class=""> service-object tcp destination eq 4156</div> <div style="background-color: transparent;" class=""><br class=""> </div> <div style="background-color: transparent;" class="">access-list outside-in permit object-group 3CX any object sipserver</div> <div style="background-color: transparent;" class="">access-group outside-in in interface outside</div> <div style="color: rgb(0, 0, 0);font-size: 16px;font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-style: normal;background-color: transparent;" class=""><br class=""> </div> </div> </div> <!-- end group email --> </blockquote> <br> <br> <pre class="moz-signature" cols="72">-- Tuğrul Marmara Üniversitesi Bilgi İşlem Daire Başkanlığı</pre> <!-- |**|begin egp html banner|**| --> <br> <br> <!-- |**|end egp html banner|**| --> <div width="1" style="color: white; clear: both;"/>__._,_.___</div> <div id="fromDMARC" style="clear:both; margin-top: 10px;"> <hr style="height:2px ; border-width:0; color:#E3E3E3; background-color:#E3E3E3;"> Posted by: =?UTF-8?B?IsOWLlR1xJ9ydWwgQm96dG9wcmFrIg==?=<[email protected]> <hr style="height:2px ; border-width:0; color:#E3E3E3; background-color:#E3E3E3;"> </div> <!-- Start Recommendations --> <!-- End Recommendations --> <!-- |**|begin egp html banner|**| --> <br><br> <tt> --<BR> Cisco Teknik Tartisma Listesi (Cisco-ttl)<BR> <BR> Disclaimer: Some of the individuals posting to this site, including <BR> the moderators, work for Cisco Systems, Inc. Opinions expressed here and in any corresponding comments are the personal opinions of the original authors, not those of Cisco.<BR> </tt> <br><br> <!-- |**|end egp html banner|**| --> <!-- |**|begin egp html banner|**| --> <img src="http://geo.yahoo.com/serv?s=97476590/grpId=8459951/grpspId=1705004726/msgId=5913/stime=1408608407" width="1" height="1"> <br> <!-- |**|end egp html banner|**| --> <!-- |**|begin egp html banner|**| --> <br> <!-- |**|begin egp html banner|**| --> <div id="ygrp-vital" style="background-color: #f2f2f2; font-family: Verdana; font-size: 10px; margin-bottom: 10px; padding: 10px;"> <span id="vithd" style="font-weight: bold; color: #333; text-transform: uppercase; "><a href="https://groups.yahoo.com/neo/groups/cisco-ttl/info;_ylc=X3oDMTJlanIxb202BF9TAzk3MzU5NzE0BGdycElkAzg0NTk5NTEEZ3Jwc3BJZAMxNzA1MDA0NzI2BHNlYwN2dGwEc2xrA3ZnaHAEc3RpbWUDMTQwODYwODQwNw--" style="text-decoration: none;">Visit Your Group</a></span> <ul style="list-style-type: none; margin: 0; padding: 0; display: inline;"> </ul> </div> <div id="ft" style="font-family: Arial; font-size: 11px; margin-top: 5px; padding: 0 2px 0 0; clear: both;"> <a href="https://groups.yahoo.com/neo;_ylc=X3oDMTJkZnFtY2NlBF9TAzk3NDc2NTkwBGdycElkAzg0NTk5NTEEZ3Jwc3BJZAMxNzA1MDA0NzI2BHNlYwNmdHIEc2xrA2dmcARzdGltZQMxNDA4NjA4NDA3" style="float: left;"><img src="http://l.yimg.com/ru/static/images/yg/img/email/new_logo/logo-groups-137x15.png" height="15" width="137" alt="Yahoo! Groups" style="border: 0;"/></a> <div style="color: #747575; float: right;"> • <a href="https://info.yahoo.com/privacy/us/yahoo/groups/details.html" style="text-decoration: none;">Privacy</a> • <a href="mailto:[email protected]?subject=Unsubscribe" style="text-decoration: none;">Unsubscribe</a> • <a href="https://info.yahoo.com/legal/us/yahoo/utos/terms/" style="text-decoration: none;">Terms of Use</a> </div> </div> <!-- |**|end egp html banner|**| --> </div> <!-- ygrp-msg --> <br> <!-- |**|end egp html banner|**| --> <div style="color: white; clear: both;"/>__,_._,___</div> </body> </html> --------------070802090606040200090201--