Cisco ASA 5506-X Configuration Manual page 208

MGCP Inspection
hostname(config-pmap)# class inspection_default
To edit the default policy, or to use the special inspection_default class map in a new policy, specify
inspection_default for the name. Otherwise, you are specifying the class you created earlier in this
procedure.
Step 4 Configure MGCP inspection.
inspect mgcp [mgcp_policy_map]
Where mgcp_policy_map is the optional MGCP inspection policy map. For information on creating the
MGCP inspection policy map, see
Inspection Control, page
Example:
hostname(config-class)# no inspect mgcp
hostname(config-class)# inspect mgcp mgcp-map
Note
Step 5 If you are editing an existing service policy (such as the default global policy called global_policy), you
are done. Otherwise, activate the policy map on one or more interfaces.
service-policy policymap_name {global | interface interface_name}
Example:
hostname(config)# service-policy global_policy global
The global keyword applies the policy map to all interfaces, and interface applies the policy to one
interface. Only one global policy is allowed. You can override the global policy on an interface by
applying a service policy to that interface. You can only apply one policy map to each interface.
Configuring MGCP Timeout Values
You can configure several MGCP global timeout values on the Configuration > Firewall > Advanced
> Global Timeouts page. You can set the interval for inactivity after which an MGCP media connection
is closed (default is 5 minutes). You can also set the timeout for PAT xlates (30 seconds).
The timeout mgcp command lets you set the interval for inactivity after which an MGCP media
connection is closed. The default is 5 minutes.
The timeout mgcp-pat command lets you set the timeout for PAT xlates. Because MGCP does not have
a keepalive mechanism, if you use non-Cisco MGCP gateways (call agents), the PAT xlates are torn
down after the default timeout interval, which is 30 seconds.
Cisco ASA Series Firewall CLI Configuration Guide
8-16
8-14.
If you are editing the default global policy (or any in-use policy) to use a different MGCP
inspection policy map, you must remove the MGCP inspection with the no inspect mgcp
command, and then re-add it with the new MGCP inspection policy map name.
Chapter 8
Configuring an MGCP Inspection Policy Map for Additional
Inspection for Voice and Video Protocols