SailingNut
Programmer
- Nov 10, 2007
- 10
I'm trying to get my Cisco 851W configured to allow my Verizon Voicewing service working.
I know that I need to have ports 69, 5060, and 16384-16392 forwarded to my voice adapter that has an IP address of 192.168.0.51. (It happens to be connected to fa2)
Here is the access-list section of my config:
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 100 remark auto generated by Cisco SDM Express firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by Cisco SDM Express firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 deny ip 192.168.0.0 0.0.0.255 any
access-list 101 remark Voicewing UDP1
access-list 101 permit udp any host 192.168.0.51 eq tftp
access-list 101 remark Voicewing UDP2
access-list 101 permit udp any host 192.168.0.51 eq 5060
access-list 101 remark Voicewing UDP3
access-list 101 permit udp any host 192.168.0.51 range 16384 16392
access-list 101 remark Voicewing TCP1
access-list 101 permit tcp any host 192.168.0.51 eq 69
access-list 101 remark Voicewing TCP2
access-list 101 permit tcp any host 192.168.0.51 eq 5060
access-list 101 remark Voicewing TCP3
access-list 101 permit tcp any host 192.168.0.51 range 16384 16392
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip any any
access-list 102 remark auto generated by SDM firewall configuration
access-list 102 remark SDM_ACL Category=1
access-list 102 deny ip 192.168.0.0 0.0.0.255 any
access-list 102 permit udp any any eq bootps
access-list 102 permit icmp any any echo-reply
access-list 102 permit icmp any any time-exceeded
access-list 102 permit icmp any any unreachable
access-list 102 deny ip 10.0.0.0 0.255.255.255 any
access-list 102 deny ip 172.16.0.0 0.15.255.255 any
access-list 102 deny ip 192.168.0.0 0.0.255.255 any
access-list 102 deny ip 127.0.0.0 0.255.255.255 any
access-list 102 deny ip host 255.255.255.255 any
access-list 102 deny ip any any log
access-list 103 remark VTY Access-class list
access-list 103 remark SDM_ACL Category=1
access-list 103 permit ip 192.168.0.0 0.0.0.255 any
access-list 103 deny ip any any
no cdp run
And for completeness, my configuration for fa4:
interface FastEthernet4
description $ES_WAN$$FW_OUTSIDE$$ETH-WAN$
mac-address 0018.012f.0a95
ip address dhcp client-id FastEthernet4
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip inspect SDM_MEDIUM in
ip inspect SDM_MEDIUM out
ip nat outside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no cdp enable
I know that I need to have ports 69, 5060, and 16384-16392 forwarded to my voice adapter that has an IP address of 192.168.0.51. (It happens to be connected to fa2)
Here is the access-list section of my config:
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 100 remark auto generated by Cisco SDM Express firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by Cisco SDM Express firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 deny ip 192.168.0.0 0.0.0.255 any
access-list 101 remark Voicewing UDP1
access-list 101 permit udp any host 192.168.0.51 eq tftp
access-list 101 remark Voicewing UDP2
access-list 101 permit udp any host 192.168.0.51 eq 5060
access-list 101 remark Voicewing UDP3
access-list 101 permit udp any host 192.168.0.51 range 16384 16392
access-list 101 remark Voicewing TCP1
access-list 101 permit tcp any host 192.168.0.51 eq 69
access-list 101 remark Voicewing TCP2
access-list 101 permit tcp any host 192.168.0.51 eq 5060
access-list 101 remark Voicewing TCP3
access-list 101 permit tcp any host 192.168.0.51 range 16384 16392
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip any any
access-list 102 remark auto generated by SDM firewall configuration
access-list 102 remark SDM_ACL Category=1
access-list 102 deny ip 192.168.0.0 0.0.0.255 any
access-list 102 permit udp any any eq bootps
access-list 102 permit icmp any any echo-reply
access-list 102 permit icmp any any time-exceeded
access-list 102 permit icmp any any unreachable
access-list 102 deny ip 10.0.0.0 0.255.255.255 any
access-list 102 deny ip 172.16.0.0 0.15.255.255 any
access-list 102 deny ip 192.168.0.0 0.0.255.255 any
access-list 102 deny ip 127.0.0.0 0.255.255.255 any
access-list 102 deny ip host 255.255.255.255 any
access-list 102 deny ip any any log
access-list 103 remark VTY Access-class list
access-list 103 remark SDM_ACL Category=1
access-list 103 permit ip 192.168.0.0 0.0.0.255 any
access-list 103 deny ip any any
no cdp run
And for completeness, my configuration for fa4:
interface FastEthernet4
description $ES_WAN$$FW_OUTSIDE$$ETH-WAN$
mac-address 0018.012f.0a95
ip address dhcp client-id FastEthernet4
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip inspect SDM_MEDIUM in
ip inspect SDM_MEDIUM out
ip nat outside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no cdp enable