Cisco 2800 ISR configuration for SIP voice with NAT and Firewall
Posted in Network Security, Unified Communications on March 30th, 2009 by Rolf – Be the first to comment
I had the enjoyable opportunity over the last few weeks to jump in and do a basic Cisco voice install. It was about 110 phones, with the Cisco Unified Communications Manager Business Edition. This is a single box that includes Call Manager 6.1.3, and Unity Connection 2.1. It had to be done fast, and it had to be done right, so I stuck to mostly tried and true configurations.
Since this was a price sensitive design, we used the 2800 router to its maximum potential. The 2800 is an amazingly flexible piece of equipment; it can be configured to do large variety of things. Sometimes known as the Integrated Services Router, or ISR, it can be set up as a router, firewall, VPN, Voice Gateway, SIP session border controller, transoder, conference bridge, and survivable remote gateway, all at the same time, on the same box! read more »
Money is tight these days, and only the most essential projects are getting funded. In the data networking realm that means all projects have to show tangible immediate benefits, and save money to boot.
Last year we learned a lesson about POE switches the hard way. Cisco had some nice new gigabit phones start shipping, and had been shipping gigabit POE switches to power them. One of our customers wanted gigabit ethernet to their desktop, so we specified the gig phones with the gig switches. Since all the switches were going to be in one closet, we recommended four 48 port POE switches, along with 120 POE phones. Everything was going great, until we started putting the phones out on the desktop.
The Asterisk open source phone system has always been a favorite of mine. I used it to help me out of a SIP jam a few years back, and for many years I have wanted to be able to put together a good system for customers using Asterisk, but have not been able to create something sufficiently compelling.