VOIP monitoring through an ASA

Question

We have a few new setups that now use an ASA in between our gateways, and their Callmanagers, I can monitor the routers behind the ASA with NPM, but the VOIP monitoring does not work. What do I need to do on the ASA to get this to work besides SNMP? I take the interface IP of the ASA and reserve a block of high end ports and map them to the devices behind the ASA and use those ports to monitor with, which seems to be working OK for everything except the VOIP SLA stuff.

FormerMember · Answer

Just a thought, depending on the protocols you are using, it could be the layer 7 inspections that are causing the problem.  If not, use a syslog server like the one built into Orion NPM and set your ASA to debug mode.  Try forcing IP SLA monitor to initiate and watch the syslogs.  Syslog is your best friend on the ASA, and soon to be Netflow using the 8.2.x code.  :)

ACDII · Answer

I am not familiar with the those operations, what port/protocol should be allowed through the ASA?

mcbridea · Answer

Sounds like the ASA is blocking the IP SLA operations between the routers.