Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

About SIP port

Michaelyang
Cirrostratus
Cirrostratus

Hello,

Is there any way to set F5

SIP port 10000-20000 corresponds to the real server port 10000-20000 ? 

 

Any help is appreciate.

1 ACCEPTED SOLUTION

xuwen
MVP
MVP

in GUI Main >> Shared Objects >> Port Lists, you can create a defined SIP port range 10000-20000,

then create a sip pool monitor use gateway_icmp

finally, create a VS its "Service Port" use port list SIP  and binding a sip pool

if above steps can not work, you can create a vs service port use *All ports and bind this iRules to limit udp sip port range:

when CLIENT_ACCEPTED {
    if { [UDP::local_port] >= 10000 && [UDP::local_port] <= 20000 } {
        node 192.168.10.1
    } else {
        drop
    }
}

 

View solution in original post

4 REPLIES 4

xuwen
MVP
MVP

in GUI Main >> Shared Objects >> Port Lists, you can create a defined SIP port range 10000-20000,

then create a sip pool monitor use gateway_icmp

finally, create a VS its "Service Port" use port list SIP  and binding a sip pool

if above steps can not work, you can create a vs service port use *All ports and bind this iRules to limit udp sip port range:

when CLIENT_ACCEPTED {
    if { [UDP::local_port] >= 10000 && [UDP::local_port] <= 20000 } {
        node 192.168.10.1
    } else {
        drop
    }
}

 

I've done this in the past with no need for the iRule your share objects approach should work nicely.

Just be careful about how you monitor the pool.
Monitoring all 10000 ports will really get in the f5's way.

Amending the health monitor to only look at one of the ports worked for us, as long as thats how its fails.
IE if the system fails you lose all 10000 ports not just one.

if you loose 1 at a time with a failure, health monitoring will need some consideration.

Hi Cirrocumulus,

Thanks for your reply

How do I add multiple ports to the pool member at once?

Hey @Michaelyang, you replied to the user rank rather than their username, so I'll just tag both @xuwen and @PSFletchTheTek to make sure they see your follow-up question. 

To tag a user and make sure they see your follow-up in the future, just type @ and their username. You'll see a dropdown, and can then just click on the username you want. 🙂