Figure 19
SIP ALG trunk-side
To configure the firewall for the preceding configuration, perform the
following steps.
Step
1
2
Copyright © 2007, Nortel Networks
.
Action
To enter the configuration mode, enter:
configure terminal
To configure the firewall, enter:
firewall global
proxy-nat 10.1.1.1
firewall internet
interface ethernet1/1
firewall corp
interface ethernet0/1
policy 10 out nat-ip 47.1.1.100
(nat-ip different from ip address of public interface)
policy 20 in address 20.1.1.1 32 47.1.1.100 32 protocol
udp port 5060 any nat-ip 10.1.1.1
arp 47.1.1.100 00:50:52:8e:4a:01 published
(add arp for the nat-ip address)
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
Configuring SIP ALG trunk-side 237
—End—