OT: VRF Aware NAT with ALG for Skinny

I am trying to do some VRF Aware NAT with ALG support for CME to IP phones.
I have my CME on the outside and the phones on the inside.

I have found several problems with this. First one was the following but

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fet
chBugDetails&bugId=CSCsw79971&from=summary

Next I found that after getting past the bug I still am unable to get the
phones to complete registration. It gets to the following point in
registration

Dec 14 15:45:55: ephone-40[1]:ButtonTemplate lines=6 speed=0 buttons=6
offset=0

Dec 14 15:45:55: ephone-40[1]:StationSoftKeyTemplateReqMessage

Dec 14 15:45:55: ephone-40[1]:StationSoftKeyTemplateResMessage

Then at that point it stops and the ephone will eventually unregister.

If I change to regular NAT I see the following for it to complete
registration:

Dec 14 15:49:22: ephone-40[1]:StationSoftKeyTemplateReqMessage

Dec 14 15:49:22: ephone-40[1]:StationSoftKeyTemplateResMessage

Dec 14 15:49:23: ephone-40[1]:StationSoftKeySetReqMessage

Dec 14 15:49:23: ephone-40[1]:StationSoftKeySetResMessage

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 6

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 6 Invalid DN -1

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatResMessage
sent to ephone (1 of 6)

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 5

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 5 Invalid DN -1

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatResMessage
sent to ephone (2 of 6)

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 4

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 4 Invalid DN -1

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatResMessage
sent to ephone (3 of 6)

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 3

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 3 Invalid DN -1

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatResMessage
sent to ephone (4 of 6)

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 2

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 2 Invalid DN -1

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatResMessage
sent to ephone (5 of 6)

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatReqMessage
from ephone line 1

Dec 14 15:49:23: ephone-40[1]:StationLineStatReqMessage ephone line 1 DN 40
= 1001 desc = 1001 label = TESTING

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:StationLineStatResMessage
sent to ephone (6 of 6)

Dec 14 15:49:23: ephone-40[1]:SkinnyCompleteRegistration

Dec 14 15:49:23: ephone-40[1][SEP0018B9788DA8]:Skinny Available Lines 6 set
for socket [1]

Dec 14 15:49:23: ephone-40[1]:Already done SkinnyCompleteRegistration

Based on the fact I don't get the StationSoftKeySetReqMessage when running
VRF Aware NAT I am assuming the phone is not getting the
SoftKeyTemplateResMessage from the CME router. Does anyone know what is
contained in this data that would cause it to not work when running VRF
Aware NAT.

I know NAT NVI does not support ALG (Application Level Gateway) NAT fixes
with TCP but I am not using NAT NVI. I am NAT'ing between global and VRF
using domain based NAT so that shouldn't come into play.

Has anyone ever run into this issue and if so what was your fix?

Regards,

Tyson Scott - CCIE #13513 R&S, Security, and SP

Managing Partner / Sr. Instructor - IPexpert, Inc.

Mailto: tscott_at_ipexpert.com

Blogs and organic groups at http://www.ccie.net
Received on Tue Dec 14 2010 - 14:40:27 ART