11-13
Cisco ASA Series Firewall CLI Configuration Guide
Chapter11 Configuring Inspection for Voice and Video Protocols
MGCP Inspection
ciscoasa(config-pmap)# parameters
ciscoasa(config-pmap-p)#
b. To configure the call agents, enter the following command for each call agent:
ciscoasa(config-pmap-p)# call-agent ip_address group_id
Use the call-agent command to specify a group of call agents that can manage one or more gateways.
The call agent group information is used to open connections for the call agents in the group (other
than the one a gateway sends a command to) so that any of the call agents can send the response.
call agents with the same group_id belong to the same group. A call agent may belong to more than
one group. The group_id option is a number from 0 to 4294967295. The ip_address option specifies
the IP address of the call agent.
Note MGCP call agents send AUEP messages to determine if MGCP end points are present. This
establishes a flow through the ASA and allows MGCP end points to register with the call agent.
c. To configure the gateways, enter the following command for each gateway:
ciscoasa(config-pmap-p)# gateway ip_address group_id
Use the gateway command to specify which group of call agents are managing a particular gateway.
The IP address of the gateway is specified with the ip_address option. The group_id option is a
number from 0 to 4294967295 that must correspond with the group_id of the call agents that are
managing the gateway. A gateway may only belong to one group.
d. If you want to change the maximum number of commands allowed in the MGCP command queue,
enter the following command:
ciscoasa(config-pmap-p)# command-queue command_limit
The following example shows how to define an MGCP map:
ciscoasa(config)# policy-map type inspect mgcp sample_map
ciscoasa(config-pmap)# parameters
ciscoasa(config-pmap-p)# call-agent 10.10.11.5 101
ciscoasa(config-pmap-p)# call-agent 10.10.11.6 101
ciscoasa(config-pmap-p)# call-agent 10.10.11.7 102
ciscoasa(config-pmap-p)# call-agent 10.10.11.8 102
ciscoasa(config-pmap-p)# gateway 10.10.10.115 101
ciscoasa(config-pmap-p)# gateway 10.10.10.116 102
ciscoasa(config-pmap-p)# gateway 10.10.10.117 102
ciscoasa(config-pmap-p)# command-queue 150
Configuring MGCP Timeout Values
The timeout mgcp command lets you set the interval for inactivity after which an MGCP media
connection is closed. The default is 5 minutes.
The timeout mgcp-pat command lets you set the timeout for PAT xlates. Because MGCP does not have
a keepalive mechanism, if you use non-Cisco MGCP gateways (call agents), the PAT xlates are torn
down after the default timeout interval, which is 30 seconds.