cmp any host 10.0.0.2 echo-reply permit icmp any host 10.0.0.2 time-exceeded permit icmp any host 10.0.0.2 unreachable deny ip any any access-list 70 permit 192.168.16.0 0.0.0.255 access-list 101 permit ip 10.1.0.0 0.0.0.255 any voice-port 1/0:15 dial-peer voice 1 pots (9) destination-pattern 510555 incoming called-number 732555 no digit-strip direct-inward-dial port 1/0:15 dial-peer voice 2 voip (10) max-conn 12 destination-pattern 732999 session protocol sipv2 session target ipv4:10.x.x.x incoming called-number 510111 dtmf-relay rtp-nte codec g711ulaw fax rate 14400 ip qos dscp CS5 media ip qos dscp cs3 signaling no vad Chapter 10: Deployment Scenarios 223 Note the following: This block of commands defines the Cisco IOS Firewall rules. 2. This command defines the SIP parameters for the SIP trunk. 3. These commands define the connection to the PBX. 4. This command defines the data interface to the SP network. 5. This command enables NAT on the inside interface. This defines the data connection to the SP network. NAT and firewall services are enabled, and the mypm quality of service (QoS) policy is assigned to the serial uplink. These commands define the NAT translation. 8. These commands define the firewall inspection. 9. A single Plain Old Telephony Service (POTS) dial peer points all incoming calls to the trunk to the PBX. The destination pattern configuration should be adjusted to allow all calls to be routed to the PBX. The no-digit-strip command enables all dialed digits to pass to the PBX for call routing to the phone extensions. 10. A single VoIP dial peer points all outgoing calls to the SP's SIP call agent over the SIP trunk. A maximum of 12 simultaneous calls are enabled in this configuration. This is just an example and should be configured based on the number of concurrent calls the SLA allows. Additional Deployment Variations So far this chapter has provided near-complete configurations of CUBE or a Cisco TDM gateway (in the case of the IAD connected to a TDM PBX) to connect on the outside to variou