Firewall Integration - NEC SL1100 Networking Manual

Issue 6.0
4.2
6 - 8
Some solutions, such as the hub replacement and integration of QoS, are
done behind the scenes and should have no effect on the voice application.
Other solutions such as NAT and Firewall cause major disturbance to VoIP.

Firewall Integration

Network security is always a concern when connecting the Local Area
Network (LAN) to the Wide Area Network (WAN). There are many ways to
integrate security in the network – the most popular are Firewalls and Proxy
servers.
Firewalls

Firewalls can be implemented in both hardware and software, or a
combination of both. Firewalls are frequently used to prevent
unauthorized Internet users from accessing private networks connected
to the Internet, especially Intranets. All messages entering or leaving the
Intranet pass through the firewall, which examines each message and
blocks those that do not meet the specified security criteria.
Proxy Server

Proxy server intercepts all messages entering and leaving the network.
The proxy server effectively hides the true network address.
What should be noted is that no matter which security measure is
implemented, the VoIP must have TCP/UDP ports open in the security wall
(e.g., firewall/proxy) for the media and control streams to flow. If any point in
the network prevents the ports from flowing from end-to-end, the VoIP
application does not work.
The ports that need to be open on the firewall/proxy vary depending on the
particular application being used. A list of these ports is shown below, however
it should be noted that the preferred solution would be to allow all ports on the
NEC SL1100 device to be open, or to place the NEC SL1100 outside of the
firewall.
Applications
PC Programming
Web Programming
DHCP Server
SIP MLT Listening Port
SIP Trunk Listening Port
SIP Single Line Stations
Realtime Transport Protocol
Rx Port
8000
80
67
5080
5081
5060
5070
10020~10082
Network Design Considerations
NEC SL1100
NEC SL1100
Programming
90-54-02
90-54-01
10-46-06
10-46-13
10-29-04
84-20-01
84-26-01