Skinny (Sccp) Inspection; Sccp Inspection Overview - Cisco 7604 Configuration Manual

Chapter 22 Applying Application Layer Protocol Inspection
UDP out 209.165.201.100:5060 in 209.165.201.118:5060 idle 0:00:21 Bytes 67358 FLAGS - T
UDP out 10.3.100.115:16384 in 209.165.201.118:16384 idle 0:00:00 Bytes 6042324 FLAGS - m
UDP out 209.165.201.100:0 in 209.165.201.118:5060 idle 0:00:21 Bytes 18 FLAGS - t
Network Processor 2 connections
UDP out 209.165.201.100:5060 in 209.165.201.115:5060 idle 0:00:25 Bytes 80181 FLAGS - T
UDP out 10.3.100.118:16384 in 209.165.201.115:16384 idle 0:00:00 Bytes 6047556 FLAGS - m
UDP out 209.165.201.100:0 in 209.165.201.115:5060 idle 0:00:25 Bytes 33 FLAGS - t
Multicast sessions:
Network Processor 1 connections
Network Processor 2 connections
IPv6 connections:
hostname(config)# show xlate
2 in use, 2 most used
Global 30.100.100.115 Local 209.165.201.115
Global 30.100.100.118 Local 209.165.201.118

Skinny (SCCP) Inspection

This section describes how to enable SCCP application inspection and change the default port
configuration. This section includes the following topics:
•
•
•
•
•
•

SCCP Inspection Overview

Skinny (SCCP) is a simplified protocol used in VoIP networks. Cisco IP Phones using SCCP can coexist
in an H.323 environment. When used with Cisco CallManager, the SCCP client can interoperate with
H.323 compliant terminals. The FWSM supports all versions through Version 17 including:
•
•
The following actions are not supported:
•
•
The FWSM supports PAT and NAT for SCCP. PAT is necessary if you have more IP phones than global
IP addresses for the IP phones to use. By supporting NAT and PAT of SCCP Signaling packets, Skinny
application inspection ensures that all SCCP signalling and media packets can traverse the FWSM.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Network Processor 1 connections
SCCP Inspection Overview, page 22-89
Supporting Cisco IP Phones, page 22-90
Restrictions and Limitations, page 22-90
Configuring and Enabling SCCP Inspection, page 22-90
Verifying and Monitoring SCCP Inspection, page 22-92
SCCP (Skinny) Sample Configuration, page 22-93
Registrations of SCCP version 17 phones.
SCCP version 17 media related messages for opening up pinholes for video/audio streams.
Registrations of endpoints that have IPv6 addresses. The Register messages are dropped and a debug
message is generated.
If IPv6 messages are embedded in the SCCP messages, they are not NATed or PATed; they are left
untranslated.
Skinny (SCCP) Inspection
22-89