Table of Contents
Advertisement
Command Reference Guide
ip rtp firewall-traversal
Use the ip rtp firewall-traversal command to enable dynamic firewall traversal capability for RTP-based
traffic, allowing deep packet inspection of Session Description Protocol (SDP) packets to occur so RTP
will correctly traverse network address translation (NAT) in the firewall. This will open the proper ports
dynamically for the RTP traffic. Use the no form of this command to return to the default setting.
Variations of this command include:
ip rtp firewall-traversal
ip rtp firewall-traversal <start udp port>
ip rtp firewall-traversal <start udp port> <end udp port>
ip rtp firewall-traversal enforce-symmetric-ip
ip rtp firewall-traversal policy-timeout <value>
ip rtp firewall-traversal reuse-nat-ports
Syntax Description
<end udp port>
<start udp port>
enforce-symmetric-ip
policy-timeout <value>
reuse-nat-ports
Default Values
By default, the RTP dynamic firewall traversal is disabled and the policy timeout period is 45 seconds.
By default, when the RTP dynamic firewall traversal is enabled for AOS voice products, the UDP starting
port is 50000, and the ending UDP port is 52999. If no range is specified, the default range is 3000, unless
the starting port is equal to or greater than 62538, in which case the range will be reduced such that the
ending port is 65535.
Command History
Release 10.1
Release 14.1
Release A2
Release 18.2
Release A5.01
60000CRG0-35E
Specifies the ending User Datagram Protocol (UDP) port to reserve for
NAT. Range is 2001 to 65535.
Specifies the starting UDP port to reserve for NAT. Range is 2000 to 65534.
Optional. Specifies that the same IP address must be used for both transmit
and receive for the RTP stream.
Optional. Specifies timeout period in seconds allowed for inactive RTP
sessions to remain in the firewall. Range is 1 to 4294967295 seconds.
Optional. Specifies that NAT ports be reused during calls.
Command was introduced.
Command was updated to include the reuse-nat-ports option.
Command was updated to include the enforce-symmetric-ip option.
Command was updated to include the <start udp port> and <end udp port>
variables.
Command was updated to include the <start udp port> and <end udp port>
variables for SIP RTP packets on AOS voice products, and the associated
voice product defaults.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
1077
Advertisement
Table of Contents
