Cisco PIX 525 Specifikace stáhnout pdf (Strana 190)

5-14

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 5 Configuring Application Inspection (Fixup)

Voice Over IP

If the mail server has to talk to many mail servers on the outside which connect back with the now

obsolete and highly criticized IDENT protocol, use this access-list command statement to speed up mail

transmission. The access-group command statement binds the access-list command statements to the

outside interface.

Example 5-1 shows a command listing for configuring access to services for the network.

Example 5-1 Configuring Mail Server Access

static (inside, outside) 209.165.201.12 10.1.1.3 netmask 255.255.255.255 0 0

access-list acl_out permit tcp any host 209.165.201.12 eq smtp

access-list acl_out permit tcp any host 209.165.201.12 eq 113

access-group acl_out in interface outside

static (inside, outside) 209.165.201.12 10.1.1.3 netmask 255.255.255.255 0 0

Voice Over IP

This section describes how the PIX Firewall supports Voice over IP (VoIP) applications and protocols

and how you can use fixup and other commands to solve specific problems. It includes the following

topics:

• CTIQBE, page 5-14

• CU-SeeMe, page 5-15

• H.323, page 5-16

• MGCP, page 5-18

• SCCP, page 5-20

• SIP, page 5-23

CTIQBE

The Telephony Application Programming Interface (TAPI) and Java Telephony Application

Programming Interface (JTAPI) are used by many Cisco VoIP applications. PIX

Firewall Version 6.3

introduces support for a specific protocol, Computer Telephony Interface Quick Buffer Encoding

(CTIQBE), which is used by Cisco TAPI Service Provider (TSP) to communicate with

Cisco

CallManager.

Support for this protocol is disabled by default. To enable support for this protocol, enter the following

command:

fixup protocol ctiqbe 2748

To view the status of CTIQBE connections, enter the following command:

show conn state ctiqbe

This command displays info about the media connections allocated by CTIQBE Fixup module.

In the output, the media connections allocated by CTIQBE Fixup module are denoted by a ‘C’ flag.

The following summarizes limitations that apply when using CTIQBE application inspection:

1 2 ... 185 186 187 188 189 190 191 192 193 194 195 ... 465 466

Žádné komentáře

Cisco PIX 525 Specifikace Strana 190