topic Re: Urgent: Enable to connect voip data in Virtual mode in General Topics

Urgent: Enable to connect voip data in Virtual mode

Lahcen — Wed, 02 Apr 2014 12:56:57 GMT

Hi all,

I am on site now with client and i had some problem in deploying the PA-500, please i need your help:

I have configured PA-500 in Virtual-wire mode in a lan2lan liason between the two client sites and set the rule to allow any any. but when we try to test with phones to enregister from the callmanager server it's failed so i searched and i taught it's a vlan issue so instead of configuring default in Vwire tag allowed i set 0-4094. and still have the same problem. please note that also we tried to ping some IP addresses from the client distant site and they failed.

please any ideas about this issue.

thanks in advance.

Re: Urgent: Enable to connect voip data in Virtual mode

Retired Member — Wed, 02 Apr 2014 13:02:21 GMT

Could you please write an application override rule with a custom application to related traffic and test it again

Re: Urgent: Enable to connect voip data in Virtual mode

Lahcen — Wed, 02 Apr 2014 13:29:24 GMT

Please can you send me the procedure to how can i do it. also note that the client refuse to do tests now we need to wait until the end of the day when all employee have finished their work.

Re: Urgent: Enable to connect voip data in Virtual mode

Retired Member — Wed, 02 Apr 2014 13:33:59 GMT

Find the related traffic(most of them will be udp)

use the document

https://live.paloaltonetworks.com/docs/DOC-1071

Re: Urgent: Enable to connect voip data in Virtual mode

Lahcen — Wed, 02 Apr 2014 13:43:21 GMT

Hi panos

I have just read something about reject non-tcp-sync how can i disable this and allow even the non tcp-sync sessions.

thanks

Re: Urgent: Enable to connect voip data in Virtual mode

prb — Wed, 02 Apr 2014 15:40:53 GMT

You can do this using cli commands:

>set session tcp-reject-non-syn no

This command is non-persistent, does not survive reboot.

You can also use the below configuration mode command, which requires a commit and is persistent across reboot.

#set deviceconfig setting session tcp-reject-non-syn no

Thanks