Topology Hiding No Napt Pinholes | Cisco Systems ASR 1000 instruction

Chapter 9 Topology Hiding

No NAPT Pinholes

•A hairpin of two pinholes in which both external terminations are provisioned with the NAT latching instruction cannot latch and cannot forward media. No NAPT pinholes are not allowed to (re)latch to the remote addresses on both sides.

•IPv6 hairpinning are supported on UDP and TCP.

•Coupling of Single NAPT pinholes is not supported.

			Cisco IOS XE Integrated Session Border Controller Configuration Guide for the Cisco ASR 1000 Series Aggregation Services Routers

	9-10		OL-15421-01
	9-10		OL-15421-01

Image 96

Cisco Systems ASR 1000 manual Topology Hiding No Napt Pinholes

Contents

Americas Headquarters Page N T E N T S Iii QoS Bandwidth Allocation Traffic Management Package Support Local Source Properties Address and Port IPv6 Support Vii Events Storage Until Event Acknowledgment Preface Document Revision HistoryObjectives OL-15421-01 May 5 This document was first published Intended Audience Organization Related Documentation Document ConventionsCisco ASR 1000 Series Router Documentation Cisco IOS Release 12.2SR Software Publications Xii Obtaining Documentation and Submitting a Service Request Xiii Xiv Contents Cisco ASR 1000 Series Routers OverviewGeneral Overview Distributed and Unified Models Example of SBC High Level Architecture On page 1-3illustrates the unified model Supported Integrated Session Border Controller Features Release Feature Name Related SBC Commands Documented Package segment Cisco IOS Logging Level in Configuring Cisco IOSNone XE Release Media-address ipv4 Transaction-pending command Deployment of the Integrated Session Border Controller Integrated SBC Used for VoIP Interworking Integrated Session Border Controller DBE Deployment Scenario Configuring Integrated Session Border Controller Prerequisites for Integrated Session Border ControllerRestrictions for Integrated Session Border Controller Prerequisites Summary Steps Enables privileged Exec mode Enter your password if promptedEnters global configuration mode Enters into interface configuration mode Configures the DBE to use a specific IPv4 H.248 control Own address when connecting to the SBEConfigures the H.248 controller for the DBE and enters into Controller H.248 configuration mode Troubleshooting Tips What To Do NextExamples Configuring H.248 Logging Level Creates the DBE service on the SBC and enters into SBC-DBE configuration modeSets a specified logging level to generate detailed logs Messages sent and received. Turns on console Enabling H.248 Logging Requests and Responses Configuration Examples This section provides the following configuration examplesExample H.248 Log Output SBC DBE Configuration Steps Example Making Global Changes to Controllers Example Following example shows the initial SBC configuration == Make change to local port Making Changes to Individual Controller Settings Example Control-address h248 ipv4 172.25.2.26 controller h248 Topology Priority Indicator Yes Emergency Indicator Ieps Indicator YesCisco H.248 Profile Overview of Profile Profile Packages Package ID Version Package ID Version Support Dependent On Dtmf Interworking Information About Dtmf Interworking Configuring Default Duration of a Dtmf Event RTP to SIP InterworkingSIP to RTP Interworking Enters the mode of a DBE service and enters into SBC-DBE Configuration mode. Use the sbc-name argument to specifyName of the DBE service Configures the default duration of a Dtmf eventPage Restrictions for Configuring Media Address Pools Media Address PoolsPrerequisites for Implementing Media Address Pools Configuring Media Address Pools Information About Media Address Pools Is configured Enters into SBC-DBE configuration modeConfiguration mode Creates a port range for the configured media Configuring Media Address Pools Example Quality of Service and Bandwidth Management Traffic Management Package SupportPage Dscp Marking and IP Precedence Marking Dscp Re-MarkingsParameters on AC and per SDP on Rtcp Policing Using Tman Package Rtcp Policing Not Using Tman PackageQoS Bandwidth Allocation Rtcp Policing Two-Rate Three-Color Policing and Marking Enabling Two-Rate Three-Color Policing and MarkingImplementing Two-Rate Three-Color Policing and Marking DBE Restrictions Related Commands Page Packages-Signaling and Control Enabling Optional H.248 Packages Address Reporting Package Segmentation Package Support Session Failure Reaction Package Tsc-quiesce Feature Termination State Control Package Tsc-suspend Feature 248.1v3 Support Vlan Package Syntax-Level Support MGC-Controlled Gateway-Wide Properties Page Services-Signaling and Control DBE Signaling Pinhole Support Extension to H.248 Audit Support Extension to H.248 Termination Wildcarding Support Flexible Address Prefix Provisioning Local Source Properties Address and Port Locally Hairpinned SessionsTwice Napt Pinhole Hairpinning No Napt Pinhole Hairpinning MGC-Specified Local Addresses or Ports Multi-Stream Terminations Nine-Tier Termination Name HierarchyRestrictions for Nine-Tier Termination Name Hierarchy Information About Nine-Tier Termination Name Hierarchy Displaying the Nine-Tier Termination Name Hierarchy Displaying the Nine-Tier Termination Name Hierarchy Example Abc/voice/gn/0/1/0/1/ac/3 Optional Local and Remote Descriptors ServiceChange Notification for Interface Status Change Remote Source Address Mask FilteringRTP Specific Behavior Support Sbc interface-id value End Configuration Example Output MAX Timer Tsc-Delay TimerTmax-timercommand configures the value of the T-MAX timer Video on Demand VOD Support Services-Signaling and Control Video on Demand VOD Support Services-Signaling and Control Video on Demand VOD Support Integrated Session Border Controller Security Firewall Media Pinhole Control Interim Authentication Header Support Latch and Relatch Support Local Source Properties Address and Port Napt and NAT Traversal Etsi TS 102 333 version 1.1.2 Gate Management Package Topology Hiding Traffic Management Policing Topology Hiding IPv4 Twice Napt IPv6 Inter-Subscriber Blocking QoS Policy-Map-Based Inter-Subscriber Blocking Method Router# show run interface gigabitEthernet 0/1.1101 Router# show class-map IPv6intersubscriber IPv6 Support ACL-Based Inter-Subscriber Blocking Method IPv6 Pinholes IPv6 No Napt Support for Media Flows IPv6 Single Napt for Signaling Send Recv Single Napt Signaling Flow No Napt Pinholes Topology Hiding No Napt Pinholes High Availability Support Integrated Session Border Controller High Availability10-1 Hardware Redundancy Software RedundancyRoute Processor Redundancy RPR 10-2 SSO Support Issu Support10-3 10-4 High Availability Support Issu Support Quality Monitoring and Statistics Gathering 11-1 Congestion-threshold Command Billing and Call Detail RecordsDBE Status Notification Enhanced Event Notification and Auditing Retention and Returning of H.248 Event Information 11-3 Association Reset Resetting the Media Timeout TimersSilent Gate Deletion 11-4 Middlebox Pinhole Timer Expired Event Network Package Quality Alert Event11-5 Provisioned Inactivity Timer Related Command11-6 IN-1 IN-2 IN-3 Pinhole Pinhole timeout Policing Asymmetric policing Ipv6 packetsRTP specific behavior support SBE IN-4 IN-5 IN-6