«

Does the PIX 525 have H.323 aware NAT? I've got a videoconferencing
app behind the PIX that I'd like to provide outside access to a
vendor.

The last thing that was changed to get it to work was to fix the NAT
transversal setting in the videoconferencing software. It was set to
the local IP address of the machine, rather than the global address.
Shouldn't the PIX have translated this anyway? I would have expected
that the PIX would be H.323 aware and do this by default. I'm not sure
I can tell by the documentation online.

Which version are you running?

On Mar 4, 2:34*pm, pfisterfarm <pfisterf...@gmail.com> wrote:
> Does the PIX 525 have H.323 aware NAT? I've got a videoconferencing
> app behind the PIX that I'd like to provide outside access to a
> vendor.
>
> The last thing that was changed to get it to work was to fix the NAT
> transversal setting in the videoconferencing software. It was set to
> the local IP address of the machine, rather than the global address.
> Shouldn't the PIX have translated this anyway? I would have expected
> that the PIX would be H.323 aware and do this by default. I'm not sure
> I can tell by the documentation online.

On Mar 4, 10:29 am, "pmach...@gmail.com" <pmach...@gmail.com> wrote:
> Which version are you running?

It's 7.2(2).

--Steve

On Mar 4, 6:33*pm, pfisterfarm <pfisterf...@gmail.com> wrote:
> On Mar 4, 10:29 am, "pmach...@gmail.com" <pmach...@gmail.com> wrote:
>
> > Which version are you running?
>
> It's 7.2(2).
>
> --Steve

Try to disable fixup:

policy-map global_policy
class inspection_default
no inspect h323 h225
no inspect h323 ras

Depends on the videoconf device but some of them support the nat
traversal by setting the inside and outside address.
Therefore, the pix/asa fixup should be disabled.

Just a guess ...

Regards,
Pedro

On Mar 5, 11:31 am, "pmach...@gmail.com" <pmach...@gmail.com> wrote:
> policy-map global_policy
> class inspection_default
> no inspect h323 h225
> no inspect h323 ras

So this will allow me to leave the NAT transversal option off on the
videoconferencing software?