H.460 Nat Firewall Traversal - Polycom VSX Series Administrator's Manual

Administrator's Guide for the VSX Series
3 - 18

H.460 NAT Firewall Traversal

You can configure VSX systems to use standards-based H.460.18 and H.460.19
firewall traversal, which allows video systems to more easily establish IP
connections across firewalls.
The following illustration shows how a service provider might provide H.460
firewall traversal between two enterprise locations. In this example the V
traversal server gateway is on the edge of the service provider network and
facilitates IP calls between VSX systems behind different firewalls.
V 2 IU Server Gateway
that Supports H.460.18
and H.460.19
Enterprise Location A
System with
Traversal Enabled
To use this traversal, VSX systems and firewalls must be configured as follows:
• Enable firewall traversal on the VSX system.
• Register the VSX system to an external V
that supports the H.460.18 and H.460.19 standards.
• Make sure that firewalls being traversed allow VSX systems behind them
to open outbound TCP and UDP connections.
— Firewalls with a stricter rule set should allow VSX systems to open at
least the following outbound TCP and UDP ports: 1720 (TCP),
14085-15084 (TCP) and 1719(UDP), 16386-25386 (UDP).
— Firewalls should permit inbound traffic to TCP and UDP ports that
have been opened earlier in the outbound direction.
• For best interoperability, make sure that H.323 protocol-aware features are
disabled on firewalls being traversed.
To enable firewall traversal on a VSX system:
1. Go to System > Admin Settings > Network > IP > Firewall > Next.
2. Select Enable NAT/Firewall Traversal.
Service Provider
IP Network
2 IU Traversal Server Gateway
2
IU™
Gatekeeper
Enterprise Location B
System with
Traversal Enabled