Cisco 7604 Configuration Manual page 487

Chapter 22 Applying Application Layer Protocol Inspection
Figure 22-12 MGCP Inspection Setup
FXS
IP
Voice port
port 3/0/0
Cisco 3745
IOS MGCP
See the following configuration for this example:
hostname(config)# interface Vlan100
hostname(config-if)# nameif outside
hostname(config-if)# security-level 0
hostname(config-if)# ip address 209.165.201.2 255.0.0.0
hostname(config-if)# !
hostname(config-if)# interface Vlan50
hostname(config-if)# nameif inside
hostname(config-if)# security-level 100
hostname(config-if)# ip address 10.100.100.2 255.0.0.0
hostname(config-if)# !
hostname(config-if)# interface Vlan90
hostname(config-if)# nameif callmgr
hostname(config-if)# security-level 75
hostname(config-if)# ip address 10.0.0.254 255.0.0.0
TFTP port is enabled so that IOS MGCP gateway can download configuration files from the Cisco
CallManager. MGCP control protocol over UDP port 2427 is enabled for pass through. MGCP backup
port TCP 2428 is enabled.
hostname(config-if)# access-list mgcp extended permit udp any host 10.0.0.210 eq 2428
hostname(config)# access-list mgcp extended permit udp any any eq 2427
hostname(config)# access-list mgcp extended permit udp any any eq tftp
Apply the above access lists on the inside and outside interfaces for incoming traffic:
hostname(config)# access-group mgcp in interface outside
hostname(config)# access-group mgcp in interface inside
Configure call agent (IP address of the Cisco CallManager) and the IP address of the IOS MGCP gateway
in an MGCP map:
hostname(config)# mgcp-map mgcp-inspect
hostname(config-mgcp-map)# call-agent 15.0.0.210 101
hostname(config-mgcp-map)# gateway 10.100.100.1 101
hostname(config-mgcp-map)# gateway 209.165.201.1 101
hostname(config-mgcp-map)# command-queue 150
hostname(config-mgcp-map)# exit
Apply MGCP inspection with MGCP map:
hostname(config)# policy-map global_policy
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
R1
vlan 50
inside
f0/1
10.100.100.2
Firewall Service Module
Gateway
CallManager
M
10.0.0.210
vlan 90
10.0.0.254
CallManager
vlan 100
outside
209.165.201.2
(FWSM)
MGCP Inspection
R2
f0/1
Voice port
port 1/0/0
Cisco 3745
IOS MGCP
Gateway
22-71