Cisco ASA 5506-X Configuration Guide

14-14
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 14 Inspection for Voice and Video Protocols
MGCP Inspection
Configuring an MGCP Inspection Policy Map for Additional Inspection Control
If the network has multiple call agents and gateways for which the ASA has to open pinholes, create an
MGCP map. You can then apply the MGCP map when you enable MGCP inspection.
Procedure
Step 1 To create an MGCP inspection policy map, enter the following command:
hostname(config)# policy-map type inspect mgcp map_name
hostname(config-pmap)#
Where the policy_map_name is the name of the policy map. The CLI enters policy-map configuration
mode.
Step 2 (Optional) To add a description to the policy map, enter the following command:
hostname(config-pmap)# description string
Step 3 Enter parameters configuration mode.
hostname(config-pmap)# parameters
hostname(config-pmap-p)#
Step 4 Set one or more parameters. You can set the following options; use the no form of the command to
disable the option.
• call-agent ip_address group_id—Configures the call agent groups that can manage one or more
gateways. The call agent group information is used to open connections for the call agents in the
group (other than the one a gateway sends a command to) so that any of the call agents can send the
response. Call agents with the same group_id belong to the same group. A call agent may belong to
more than one group. The group_id option is a number from 0 to 4294967295. The ip_address
option specifies the IP address of the call agent.
Note MGCP call agents send AUEP messages to determine if MGCP end points are present. This
establishes a flow through the ASA and allows MGCP end points to register with the call
agent.
• gateway ip_address group_id—Identifies which group of call agents is managing a particular
gateway. The IP address of the gateway is specified with the ip_address option. The group_id option
is a number from 0 to 4294967295 that must correspond with the group_id of the call agents that are
managing the gateway. A gateway may only belong to one group.
• command-queue command_limit—Sets the maximum number of commands allowed in the MGCP
command queue, from 1 to 2147483647. The default is 200.
Example
The following example shows how to define an MGCP map:
hostname(config)# policy-map type inspect mgcp sample_map
hostname(config-pmap)# parameters
hostname(config-pmap-p)# call-agent 10.10.11.5 101
hostname(config-pmap-p)# call-agent 10.10.11.6 101
hostname(config-pmap-p)# call-agent 10.10.11.7 102
hostname(config-pmap-p)# call-agent 10.10.11.8 102
hostname(config-pmap-p)# gateway 10.10.10.115 101

Cisco ASA 5506-X Specifications

General

Model	ASA 5506-X
Firewall Throughput	750 Mbps
Maximum Firewall Connections	50, 000
Maximum VPN Peers	50
Integrated Ports	8 x 1 GE
Stateful Inspection Throughput	750 Mbps
Weight	4.4 lb (2 kg)
Firewall Throughput (Multiprotocol)	750 Mbps
Firewall Throughput (Application Visibility and Control AVC)	250 Mbps
Concurrent Sessions	50, 000
New Connections per Second	10, 000
IPsec VPN Throughput	100 Mbps
Interfaces	8 x 1 GE
Memory	4 GB
Flash Memory	8 GB
Form Factor	Desktop
VPN Throughput	100 Mbps
Maximum Concurrent Sessions	50, 000
New Sessions per Second	10, 000
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Power Supply	External
Humidity	10% to 90% non-condensing