D-Link NetDefend DFL-210 User Manual page 156

6.2.8. H.323
Gateways
Gatekeepers
Multipoint Control Units
H.323 Protocols
The different protocols used in implementing H.323 are:
H.225 RAS signaling and Call
Control (Setup) signaling
H.245 Media Control and
Transport
T.120
H.323 ALG features
The H.323 ALG is a flexible application layer gateway that allows H.323 devices such as H.323
phones and applications to make and receive calls between each other when connected via private
networks secured by D-Link Firewalls.
The H.323 specification was not designed to handle NAT, as IP addresses and ports are sent in the
payload of H.323 messages. The H.323 ALG modifies and translates H.323 messages to make sure
that H.323 messages will be routed to the correct destination and allowed through the D-Link
Firewall.
The H.323 ALG has the following features:
An H.323 gateway connects two dissimilar networks and
translates traffic between them. It provides connectivity
between H.323 networks and non-H.323 networks such as
public switched telephone networks (PSTN), translating
protocols and converting media them. A gateway is not
required for communication between two H.323 terminals.
The Gatekeeper is a component in the H.323 system which is
used for addressing, authorization and authentication of
terminals and gateways. It can also take care of bandwidth
management, accounting,
gatekeeper may allow calls to be placed directly between
endpoints, or it may route the call signaling through itself to
perform functions such as follow-me/find-me, forward on
busy, etc. It is needed when there is more then one H.323
terminal behind a NATing device with only one public IP.
MCUs provide support for conferences of three or more
H.323 terminals. All H.323 terminals participating in the
conference call have to establish a connection with the MCU.
The MCU then manages the calls, resources, video and audio
codecs used in the call.
Used for call signaling. It used to establish a connection
between two H.323 endpoints. This call signal channel is
opened between two H.323 endpoints or between a H.323
endpoint and a gatekeeper. For communication between two
H.323 endpoints, TCP 1720 is used. When connecting to a
gatekeeper, UDP port 1719 (H.225 RAS messages) are used.
Provides control of multimedia sessions established between
two H.323 endpoints. Its most important task is to negotiate
opening and closing of logical channels. A logical channel is,
for instance, an audio channel used for voice communication.
Video and T.120 channels are also called logical channels
during negotiation.
A suite of communication and application protocols.
Depending on the type of H.323 product, T.120 protocol can
be used for application sharing, file transfer as well as for
conferencing features such as whiteboards.
156
Chapter 6. Security Mechanisms
billing and charging. The