NATTCPSIPALGSupportTheNATTCPSIPALGSupportfeatureallowsembeddedmessagesoftheSessionInitiationProtocol(SIP)passingthroughadevicethatisconfiguredwithNetworkAddressTranslation(NAT)tobetranslatedandencodedbacktothepacket.
Anapplication-layergateway(ALG)isusedwithNATtotranslatetheSIPorSessionDescriptionProtocol(SDP)messages.
ThismoduledescribestheNATTCPSIPALGSupportfeatureandexplainshowtoconfigureit.
FindingFeatureInformation,onpage1PrerequisitesforNATTCPSIPALGSupport,onpage1RestrictionsforNATTCPSIPALGSupport,onpage1InformationAboutNATTCPSIPALGSupport,onpage2HowtoConfigureNATTCPSIPALGSupport,onpage6ConfigurationExamplesforNATTCPSIPALGSupport,onpage7AdditionalReferenceforNATTCPSIPALGSupport,onpage7FeatureInformationforNATTCPSIPALGSupport,onpage8FindingFeatureInformationYoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.
Forthelatestcaveatsandfeatureinformation,seeBugSearchToolandthereleasenotesforyourplatformandsoftwarerelease.
Tofindinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheachfeatureissupported,seethefeatureinformationtable.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
PrerequisitesforNATTCPSIPALGSupportLayer4Forwarding(L4F)mustbeenabledforthefeaturetofunction.
RestrictionsforNATTCPSIPALGSupportNetworkAddressTranslation(NAT)translatesonlyembeddedIPv4addresses.
NATTCPSIPALGSupport1NATapplication-layergateway(ALG)fixupforSessionInitiationProtocol(SIP)messagesoverTCPisnotdonewhenLayer4Forwarding(L4F)functionalityisdisabled.
Inthiscase,SIPmessagesareconsideredasTCPmessagesandonlyLayer3andLayer4fixupsaredone.
AsperRFC5128,NATTCPSIPALGfeatureusesEndpoint-Independentmappingtoperformaddresstranslations.
ThiscombinationallowsincomingSIPtrafficfromanyexternalendpointonthepublicnetworktoamappedpublicport.
IfyoudonotneedEndpoint-Independentmapping,useACLorZone-basedPolicyFirewalltolimitthescopeofincomingtraffic.
InformationAboutNATTCPSIPALGSupportNATTCPSIPALGSupportOverviewTheNATTCPSIPALGSupportfeatureallowsembeddedmessagesoftheSessionInitiationProtocol(SIP)passingthroughadevicethatisconfiguredwithNetworkAddressTranslation(NAT)tobetranslatedandencodedbacktothepacket.
Anapplication-layergateway(ALG)isusedwithNATtotranslatetheSIPorSessionDescriptionProtocol(SDP)messages.
TheNATTCPSIPALGSupportfeatureaddsNATALGsupportforfixingupTCP-basedSIPmessages.
SessionInitiationProtocol(SIP)isanASCII-based,application-layercontrolprotocolthatcanbeusedtoestablish,maintain,andterminatecallsbetweentwoormoreendpoints.
SIPisaprotocoldevelopedbyIETFformultimediaconferencingoverIP.
SIPcanbeconfiguredtooperateoverTCP-basedtransports.
CiscoSIPimplementationenablessupportedCiscoplatformstosignalthesetupofvoiceandmultimediacallsoverIPnetworks.
SIPprovidesanalternativetoH.
323withintheVoIPinternetworkingsoftware.
LikeotherVoIPprotocols,SIPisdesignedtoaddressfunctionsofsignalingandsessionmanagementwithinapackettelephonynetwork.
Signalingallowscallinformationtobecarriedacrossnetworkboundaries.
Sessionmanagementprovidestheabilitytocontrolattributesofanend-to-endcall.
SessionDescriptionProtocol(SDP)isaprotocolthatdescribesmultimediasessions.
SDPcanbeusedinSIPmessagebodiestodescribemultimediasessionsusedforcreatingandcontrollingmultimediasessionswithtwoormoreparticipants.
SIPMessagesEntitiesthatarepresentinaSessionInitiationProtocol(SIP)deploymentcommunicatewitheachotherbyusingwell-definedSIPmessagesthattaketheformofrequestsandresponses.
TheseSIPmessagescancontainembeddedIPaddressorportinformationthatmightbelongtoaprivatedomain,andsuchmessagesmustbefixedupwhentheypassthroughaNetworkAddressTranslation(NAT)device.
FixupdenotesthewritingofthetranslatedIPaddressbackintothepacket.
Thisfixupisnormallyperformedbyanapplication-layergateway(alsocalledanapplication-levelgateway)(ALG)modulethatresidesontheNATdevice.
Bydefault,supportforSIPisenabledonthestandardTCPport5060toexchangeSIPmessages.
YoucanalsoconfigurenonstandardportsforSIPtooperate.
NATALGacceptsandattemptsfixupoperationsonallTCPsegmentsthatoriginatefromoraredestinedtotheconfiguredSIPport.
SIPmessageprocessinginvolvesperformingthefixupoperationonacompleteSIPmessage.
ATCPsegmentmaycarrymultipleSIPmessages.
ItisalsopossiblethataSIPmessageissegmentedandcarriedintwodifferentTCPsegments.
SIPmessagesaretextbased.
AnyadjustmentthatismadetothemessageaspartoftheALGfixupcanresultinthemessagetoincreaseordecreaseinsize.
AchangeinthemessagesizemeansthattheALGmustmakeNATTCPSIPALGSupport2NATTCPSIPALGSupportInformationAboutNATTCPSIPALGSupportadjustmentstotheTCPsequenceoracknowledgmentnumbersandkeeptrackofthesame.
TherearecaseswheretheALGmustperformspoofacknowledgmentsandcompleteTCPretransmission.
TCPproxyisanessentialcomponentthatterminatesaTCPconnectionpassingthroughNATALGandregeneratestheTCPconnection.
ThisconnectionallowsNATALGtomodifytheTCPpayloadwithoutanyTCPsessionhandlingissues.
ThetablebelowidentifiesthesixavailableSIPrequestmessages.
Table1:SIPRequestMessagesPurposeSIPMessageSentbycallingpartytoconfirmthereceiptofafinalresponsetoINVITE.
ACKSentbycallingpartyorcalledpartytoendacall.
BYESenttoendacallthathasnotyetbeenconnected.
CANCELRequestsentfromaUserAgentClient(UAC)toinitiateasession.
INVITESenttoquerycapabilitiesofUACsandnetworkservers.
OPTIONSSentbytheclienttoregistertheaddresswithaSIPproxy.
REGISTERThetablebelowidentifiestheavailableSIPresponsemethods.
Table2:SIPResponseMessagesPurposeSIPMessage100=Trying180=Ringing181=CallIsBeingForwarded182=Queued183=SessionProgress1xx(Informational)200=OK2xx(Successful)300=MultipleChoices301=MovedPermanently302=MovedTemporarily303=SeeOther305=UseProxy380=AlternativeService3xx(Redirection)NATTCPSIPALGSupport3NATTCPSIPALGSupportSIPMessagesPurposeSIPMessage400=BadRequest401=Unauthorized402=PaymentRequired403=Forbidden404=NotFound405=MethodNotAllowed406=NotAcceptable407=ProxyAuthenticationRequired408=RequestTimeout409=Conflict410=Gone411=LengthRequired413=RequestEntityTooLarge414=RequestURITooLarge415=UnsupportedMediaType420=BadExtension480=TemporarilyNotAvailable481=CallLeg/TransactionDoesNotExist482=LoopDetected483=TooManyHops484=AddressIncomplete485=Ambiguous486-BusyHere4xx(RequestFailure)500=InternalServerError501=NotImplemented502=BadGateway503=ServiceUnavailable504=GatewayTimeout505=SIPVersionNotSupported5xx(ServerFailure)NATTCPSIPALGSupport4NATTCPSIPALGSupportSIPMessagesPurposeSIPMessage600=BusyAnywhere603=Decline604=DoesNotExistAnywhere606=NotAcceptable6xx(GlobalFailure)SIPFunctionalityUsersinaSIPnetworkareidentifiedbyuniqueSIPaddresses.
ASIPaddressissimilartoane-mailaddressandisintheformatsip:userID@gateway.
com.
TheuserIDcanbeeitherausernameoranE.
164address.
Thegatewaycanbeeitheradomain(withorwithoutahostname)oraspecificinternetIPaddress.
AnE.
164addressisatelephonenumberwithastringofdecimaldigits,whichuniquelyindicatesthepublicnetworkterminationpoint.
Thisaddresscontainsallinformationthatisnecessarytorouteacalltoaterminationpoint.
NoteUsersregisterwitharegistrarserverusingtheirassignedSIPaddresses.
TheregistrarserverprovidesSIPaddressestothelocationserveronrequest.
Theregistrarserverprocessesrequestsfromuser-agentclients(UACs)forregistrationoftheircurrentlocations.
Whenauserinitiatesacall,aSIPrequestissenttoaSIPserver(eitheraproxyoraredirectserver).
Therequestincludestheaddressofthecaller(intheFromheaderfield)andtheaddressoftheintendedcalledparty(intheToheaderfield).
ASIPendusermightmovebetweenendsystems.
ThelocationoftheendusercanbedynamicallyregisteredwiththeSIPserver.
Thelocationservercanuseoneormoreprotocols(includingFinger,RWhois,andLightweightDirectoryAccessProtocol[LDAP])tolocatetheenduser.
Becausetheendusercanbeloggedinatmorethanonestationandthelocationservercansometimeshaveinaccurateinformation,thelocationservermightreturnmorethanoneaddressfortheenduser.
IftherequestiscomingthroughaSIPproxyserver,theproxyservertrieseachofthereturnedaddressesuntilitlocatestheenduser.
IftherequestiscomingthroughaSIPredirectserver,theredirectserverforwardsalltheaddressestothecalleravailableintheContactheaderfieldoftheinvitationresponse.
SIPFunctionalitywithaProxyServerAproxyserverreceivesSessionInitiationProtocol(SIP)requestsfromaclientandforwardsthemontheclient'sbehalf.
ProxyserversreceiveSIPmessagesandforwardthemtothenextSIPserverinthenetwork.
Proxyserverscanprovidefunctionssuchasauthentication,authorization,networkaccesscontrol,routing,reliablerequestretransmission,andsecurity.
SIPisapeer-to-peerprotocol.
Thepeersinasessionarecalleduseragents(UAs).
Whencommunicatingthroughaproxyserver,thecallerUAsendsanINVITErequesttotheproxyserverandthentheproxyserverdeterminesthepathandforwardstherequesttothecalledparty.
ThecalledUArespondstotheproxyserver,whichthenforwardstheresponsetothecaller.
Whenbothpartiesrespondwithanacknowledgment(SIPACKmessage),theproxyserverforwardstheacknowledgmentstotheirintendedpartyNATTCPSIPALGSupport5NATTCPSIPALGSupportSIPFunctionalityandasession,orconference,isestablishedbetweenthem.
TheReal-timeTransferProtocol(RTP)isthenusedforcommunicationacrosstheconnectionnowestablishedbetweenthecallerandcalledUA.
HowtoConfigureNATTCPSIPALGSupportSpecifyingaPortforNATTCPSIPALGSupportNetworkAddressTranslation(NAT)supportforSessionInitiationProtocol(SIP)isenabledbydefault.
SIPusesthedefaultTCPport5060toexchangemessages.
Ifrequired,youcanconfigureadifferentporttohandleSIPmessages.
SUMMARYSTEPS1.
enable2.
configureterminal3.
ipnatservicesiptcpportport-number4.
end5.
debugipnatsipDETAILEDSTEPSPurposeCommandorActionEnablesprivilegedEXECmode.
enableStep1Example:Enteryourpasswordifprompted.
Device>enableEntersglobalconfigurationmode.
configureterminalExample:Step2Device#configureterminalSpecifiesaportnumberotherthanthedefaultport.
ipnatservicesiptcpportport-numberExample:Step3Device(config)#ipnatservicesiptcpport8000ExitsglobalconfigurationmodeandreturnstoprivilegedEXECmode.
endExample:Step4Device(config)#endDisplaysSIPmessagesthatNATrecognizesandtheembeddedIPaddressescontainedinthosemessages.
debugipnatsipExample:Step5Device#debugipnatsipNATTCPSIPALGSupport6NATTCPSIPALGSupportHowtoConfigureNATTCPSIPALGSupportConfigurationExamplesforNATTCPSIPALGSupportExample:SpecifyingaPortforNATTCPSIPALGSupportThefollowingexampleshowshowtoconfigurethenonstandardport8000:Device(config)#ipnatservicesiptcpport8000Thefollowingissampleoutputfromthedebugipnatsipcommand:Device#debugipnatsipMay2314:11:17.
243IST:NAT-L4F:settingALG_NEEDEDflaginsubblockforSIPmessageMay2314:11:17.
243IST:NAT-ALG:lookup=0l7_bytes_recd=509appl_type=7May2314:11:17.
243IST:NAT-ALG:CompleteSIPMessageheaderofsize:376May2314:11:17.
243IST:NAT-ALG:Messagebodylength:133May2314:11:17.
243IST:NAT-ALG:TotalSIPmessagelength:509May2314:11:17.
243IST:NAT-ALG:afterstatemachine:May2314:11:17.
243IST:NAT-ALG:l7_bytes_recd=509May2314:11:17.
243IST:NAT-ALG:remaining_hdr_sz=0May2314:11:17.
243IST:NAT-ALG:remaining_payl_sz=0May2314:11:17.
243IST:NAT-ALG:tcp_alg_state=0May2314:11:17.
243IST:NAT-ALG:complete_msg_len=509May2314:11:17.
243IST:NAT-SIP-TCP:NumberofSIPmessagesreceived:1May2314:11:17.
243IST:NAT:SIP:[0]processingINVITEmessageMay2314:11:17.
243IST:NAT:SIP:[0]register:0door_created:0May2314:11:17.
243IST:NAT:SIP:[0]translatedembeddedaddress192.
168.
122.
3->10.
1.
1.
1May2314:11:17.
243IST:NAT:SIP:[0]register:0door_created:0May2314:11:17.
243IST:NAT:SIP:[0]translatedembeddedaddress192.
168.
122.
3->10.
1.
1.
1May2314:11:17.
243IST:NAT:SIP:[0]register:0door_created:0May2314:11:17.
243IST:NAT:SIP:[0]register:0door_created:0May2314:11:17.
243IST:NAT:SIP:ContactheaderfoundMay2314:11:17.
243IST:NAT:SIP:TryingtofindexpiresparameterMay2314:11:17.
243IST:NAT:SIP:[0]translatedembeddedaddress192.
168.
122.
3->10.
1.
1.
1May2314:11:17.
243IST:NAT:SIP:[0]register:0door_created:0May2314:11:17.
243IST:NAT:SIP:[0]messagebodyfoundMay2314:11:17.
243IST:NAT:SIP:MediaLinespresent:1May2314:11:17.
243IST:NAT:SIP:Translatedglobalm=(192.
168.
122.
3,6000)->(10.
1.
1.
1,6000)May2314:11:17.
243IST:NAT:SIP:old_sdp_len:133new_sdp_len:130May2314:11:17.
243IST:l4f_sendreturns497bytesMay2314:11:17.
243IST:CompletebufferwrittentoproxyAdditionalReferenceforNATTCPSIPALGSupportRelatedDocumentsDocumentTitleRelatedTopicCiscoIOSMasterCommandList,AllReleasesCiscoIOScommandsCiscoIOSIPAddressingServicesCommandReferenceNATcommandsNATTCPSIPALGSupport7NATTCPSIPALGSupportConfigurationExamplesforNATTCPSIPALGSupportStandardsandRFCsTitleStandard/RFCSIP:SessionInitiationProtocolRFC2543TechnicalAssistanceLinkDescriptionhttp://www.
cisco.
com/cisco/web/support/index.
htmlTheCiscoSupportandDocumentationwebsiteprovidesonlineresourcestodownloaddocumentation,software,andtools.
UsetheseresourcestoinstallandconfigurethesoftwareandtotroubleshootandresolvetechnicalissueswithCiscoproductsandtechnologies.
AccesstomosttoolsontheCiscoSupportandDocumentationwebsiterequiresaCisco.
comuserIDandpassword.
FeatureInformationforNATTCPSIPALGSupportThefollowingtableprovidesreleaseinformationaboutthefeatureorfeaturesdescribedinthismodule.
Thistablelistsonlythesoftwarereleasethatintroducedsupportforagivenfeatureinagivensoftwarereleasetrain.
Unlessnotedotherwise,subsequentreleasesofthatsoftwarereleasetrainalsosupportthatfeature.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.
cisco.
com/go/cfn.
AnaccountonCisco.
comisnotrequired.
Table3:FeatureInformationforNATTCPSIPALGSupportFeatureInformationReleasesFeatureNameTheNATTCPSIPALGSupportfeatureallowsembeddedmessagesoftheSessionInitiationProtocol(SIP)passingthroughadevicethatisconfiguredwithNetworkAddressTranslation(NAT)tobetranslatedandencodedbacktothepacket.
Anapplication-layergateway(ALG)isusedwithNATtotranslatetheSIPorSessionDescriptionProtocol(SDP)messages.
15.
3(1)TNATTCPSIPALGSupportNATTCPSIPALGSupport8NATTCPSIPALGSupportFeatureInformationforNATTCPSIPALGSupport
ThomasHost域名注册自2012年,部落最早分享始于2016年,还算成立了有几年了,商家提供基于KVM架构的VPS,数据中心包括美国、法国、英国、加拿大和爱尔兰等6个地区机房,VPS主机套餐最低2GB内存起步,支持Windows或者Linux操作系统,1Gbps端口不限制流量。最近商家提供了一个5折优惠码,优惠后最低套餐月付5美元起。下面列出部分套餐配置信息。CPU:1core内存:2GB硬...
已经有一段时间没有听到Gigsgigscloud服务商的信息,这不今天看到商家有新增一款国际版线路的美国VPS主机,年付也是比较便宜的只需要26美元。线路上是接入Cogentco、NTT、AN2YIX以及其他亚洲Peering。这款方案的VPS主机默认的配置是1Gbps带宽,比较神奇的需要等待手工人工开通激活,不是立即开通的。我们看看这款服务器在哪里选择看到套餐。内存CPUSSD流量价格购买地址1...
v5.net一直做独立服务器这块儿的,自从推出云服务器(VPS)以来站长一直还没有关注过,在网友的提醒下弄了个6G内存、2核、100G SSD的美国云服务器来写测评,主机测评给大家趟雷,让你知道v5.net的美国云服务器效果怎么样。本次测评数据仅供参考,有兴趣的还是亲自测试吧! 官方网站:https://v5.net/cloud.html 从显示来看CPU是e5-2660(2.2GHz主频),...
internalservererror为你推荐
操作http操作httphttp500http://bb500.com 这个电影网站安全不?为什么?有人能告诉我吗?不懂的人表乱说浪费你我的时间谢谢phpcms模板phpcms模板下载后如何安装企业推广推广专员一般每天要做哪些工作cisco2960配置思科的交换机怎么配置企业信息查询系统官网我公司注册不久,如何在网上查询到163yeah请问网易的163,126,yeah,VIP,188邮箱各有什么特点?重庆400年老树穿楼生长重庆适宜驴生长什么是支付宝支付宝是什么概念?
日本vps 申请免费域名 l5639 sugarsync 云鼎网络 qingyun 七夕促销 最好的免费空间 美国网站服务器 上海服务器 环聊 可外链的相册 成都主机托管 国外网页代理 江苏徐州移动 杭州电信 沈阳idc 免费的加速器 月付空间 phpwind论坛 更多