Cisco 7604 Configuration Guide - Page 430

CTIQBE Inspection Chapter 22 Applying Application Layer Protocol Inspection Figure 22-2 Single Transparent Firewall for Cisco IP SoftPhone (Virtual Conference) Single transparent with CTIQBE inspection (with collaboration settings set to Virtual Conference Room) Inside vlan50 Firewall Service Module (FWSM) Outside vlan100 191376 PC 10.0.0.21/8 PC 10.0.0.23/8 M 10.0.0.101/8 CallManager 3.3 See the following configuration for this example: firewall transparent ! interface Vlan50 nameif inside bridge-group 1 security-level 100 ! interface Vlan100 nameif outside bridge-group 1 security-level 0 ! interface BVI1 ip address 10.0.0.30 255.0.0.0 ! access-list voice extended permit tcp any any eq ctiqbe access-list voice extended permit tcp any any eq 1503 ! access-group voice in interface inside access-group voice in interface outside ! policy-map global_policy class inspection_default inspect ctiqbe ! Note TCP port 1503 must be allowed to pass through the security appliance for virtual conference room collaboration to work with Cisco IP SoftPhone through the security appliance. The following figure shows a sample configuration for a single transparent firewall for Cisco IP SoftPhone with NetMeeting enabled (Figure 22-3). Cisco IP SoftPhone is configured with the collaboration setting of NetMeeting. 22-14 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM OL-20748-01