IOS firewall question

Cloud G

New Member
Any one up on cisco ios 12.4 and the firewall bits and pieces to it? I've got a problem even cisco can't figure out.
 
ok.......

Problem is video conferencing. h323 specifically. I can't make connections through the router. The ACLs and the inspect statements are set right (supposedly). Other traffic (http, smtp, rdp....)flows without a problem.

Test lab:

Spare router ruining the same configuration file. With a laptop on either side running VC software. Same issue. No connection. What's odd and has to point to something is that: upon boot up of the router, once the interfaces come up, I can make VC connections between the two laptops. After about 15 - 20 min, it stops and I can't get through. Tells me the router doesn't like something or thinks it's malicious and stopping it.......just can't figure out what it is.

The conference units have public IPs that are NATed to private ones.
 
It's a 2851 router.


Below is the outpu of the "show version" command:

Code:
Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(3g),
 RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Mon 06-Nov-06 02:36 by alnguyen

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

Columbia2851 uptime is 10 weeks, 1 day, 1 hour, 1 minute
System returned to ROM by power-on
System restarted at 10:02:25 NewYork Wed Feb 7 2007
System image file is "flash:c2800nm-advipservicesk9-mz.124-3g.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 2851 (revision 53.51) with 247808K/14336K bytes of memory.
Processor board ID FTX105
4 FastEthernet interfaces
2 Gigabit Ethernet interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
250880K bytes of ATA CompactFlash (Read/Write)

Configuration register is 0x2102
 
Back
Top