H.323 With A Private Address Using Ip Rules - D-Link NetDefendOS User Manual

• Source Interface: any
• Source Network: all-nets
• Destination Interface: lan
• Destination Network: lannet
• Service: my_h323_policy_service
• Comment: Allow incoming H.323 calls.
3. Select the VoIP tab, enable VoIP and select my_h323_profile
4. Click OK
Note: Further IP Policy examples will not be given
For brevity, the other setup examples in this section will use only IP Rule objects. The
pattern shown in the last example should be followed to implement the examples using
IP Policy objects instead.
Example 6.11. H.323 with a Private Address Using IP Rules
In this example, an internal H.323 phone is on a network with private IPv4 addresses. To make
make a call from this phone to another H.323 phone on the Internet and to allow H.323 phones
on the Internet to call this phone, we need to configure IP rules. The following rules need to be
added to the rule set.
Note: Make sure there are no rules/policies disallowing or allowing the same kind of traffic before
these IP rules.
When using private IPs on the phone, incoming traffic needs to be SATed, as in the example
below. The object ip-phone should be the internal IP of the H.323 phone.
Web Interface
Create a new H.323 ALG object:
1. Go to: Objects > ALG > Add > H.323 ALG
2. Specify a name for the ALG, in this case my_h323_alg
3. Click OK
Create a custom Service object for H.323:
1. Go to: Objects > Services > Add > TCP/UDP
2. Now enter:
• Name: my_h323_service
485
Chapter 6: Security Mechanisms