Cisco ASA Series Cli Configuration Manual page 1157

Chapter 1 Configuring Inspection for Voice and Video Protocols
RTSP Inspection
This section describes RTSP application inspection. This section includes the following topics:
•
•
•
•
RTSP Inspection Overview
The RTSP inspection engine lets the ASA pass RTSP packets. RTSP is used by RealAudio,
RealNetworks, Apple QuickTime 4, RealPlayer, and Cisco IP/TV connections.
Note
For Cisco IP/TV, use RTSP TCP port 554 and TCP 8554.
RTSP applications use the well-known port 554 with TCP (rarely UDP) as a control channel. The ASA
only supports TCP, in conformity with RFC 2326. This TCP control channel is used to negotiate the data
channels that is used to transmit audio/video traffic, depending on the transport mode that is configured
on the client.
The supported RDT transports are: rtp/avp, rtp/avp/udp, x-real-rdt, x-real-rdt/udp, and x-pn-tng/udp.
The ASA parses Setup response messages with a status code of 200. If the response message is travelling
inbound, the server is outside relative to the ASA and dynamic channels need to be opened for
connections coming inbound from the server. If the response message is outbound, then the ASA does
not need to open dynamic channels.
Because RFC 2326 does not require that the client and server ports must be in the SETUP response
message, the ASA keeps state and remembers the client ports in the SETUP message. QuickTime places
the client ports in the SETUP message and then the server responds with only the server ports.
RTSP inspection supports PAT or dual-NAT. The ASA provides TCP fragment reassembly support, a
scalable parsing routine on RTSP, and security enhancements that protect RTSP traffic.
Using RealPlayer
When using RealPlayer, it is important to properly configure transport mode. For the ASA, add an
access-list command from the server to the client or vice versa. For RealPlayer, change transport mode
by clicking Options>Preferences>Transport>RTSP Settings.
If using TCP mode on the RealPlayer, select the Use TCP to Connect to Server and Attempt to use
TCP for all content check boxes. On the ASA, there is no need to configure the inspection engine.
Media lcl port 6166
Media rmt IP 192.168.5.7
Media rmt port 6058
RTSP Inspection Overview, page 1-15
Using RealPlayer, page 1-15
Restrictions and Limitations, page 1-16
Configuring an RTSP Inspection Policy Map for Additional Inspection Control, page 1-16
Cisco ASA Series CLI Configuration Guide
RTSP Inspection
1-15