PDA

View Full Version : ACL for SIP traffic


voiceCCIE
07-06-2009, 10:10 PM
I want to build an access-list to only allow SIP traffic to an interface. What do I need to add in order to allow this?
ipsec
07-06-2009, 10:18 PM
You need to allow RTP (16384 32767) and SIP, for example.

ip access-list extended SIP-InBound
permit udp any host 1.1.1.1 eq 5060
permit udp any host 1.1.1.1 range 16384 32767
deny ip any any log
voiceCCIE
07-06-2009, 10:21 PM
Wouldn't allowing SIP from any source exposed my SIP gateway to someone using it to make calls?
ipsec
07-06-2009, 10:23 PM
No, it depends on how your gateway is configured. You need to control who can make calls from the voice side vs the ACL. I've seen SIP providers jump between ip address which makes it impossible to configure the ACL to allow only specific sources.
maestroabn
04-26-2010, 03:44 PM
như v*y, access-list trong trường hợp n*y được dùng không ho mục đ*ch traffic filter nữa m* được dùng như "pattern matching".

Em muốn hỏi cách apply các extended access-list n*y v*o BGP như thế n*o? Những protocol n*o khác hỗ trợ các dùng n*y?

xin cám ơn,