VOIP over VPN IPSEC

[#1]

Hello, I' ve configured VPN properly between fortigate & Cisco ASA & I want to allow our Nortel i2002 phone to connect to VOIP gateway through VOIP . Any special configuration needed to allow VOIP ? thanks

[emnoc]

Nothing special, you might want to look at priority-queuing for the VoIP traffic. Btw, my office uses that same phone and I used it in the past over a FGT-cisco firewall also. IIRC it' s not standard SIP traffic.

[#3]

Sorry , what do u mean by ( look at priority-queuing for the VoIP traffic) ? I looked in Protection Profile to enable VOIP log but there is no VOIP log available , SO how can I log the VOIP traffic ? I' m using FW V.4.0,build0192,091222 (MR1 Patch 2)

[#4]

Any suggestion please

[FortiRack_Eric]

It' s a good idea to create a traffic shaper for the SIP traffic to guarantee bandwidth and priority

[#6]

thank you Eric , but is there anyway to log the SIP traffic to check what is wrong excatly?

[#7]

Hossam, would you please let me know how did you configure the VPN tunnel between FG and ASA ?! this is v.imp to me Thanks man..

[#8]

Dear Dodzmano, I followed this article http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=13574&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=12111504&st

[emnoc]

You can log match to your fwpolicy, but that' s not going to tell you what' s wrong. What are you trying to achieve? Systems logs or applications logging ? And yes, I would enable a traffic-shaper, but be advise it' s probably not SIP traffic. It' s unified stimulus or unistim for short. I would advise you to pcap some phone traffic to see the port(s)/protocol range and then prioritize that fwpolicy 1st and apply a shaper to it. I think when I last computed bandwidth guesses, it was about 87kbps or so per call.

[#10]

emnoc , sorry can you explain please how to investigate what is wrong exactly ?