Basic Firewall/Nat Traversal Connectivity - Polycom HDX 4000 Series Administrator's Manual

Polycom, Inc.
Artisan Technology Group - Quality Instrumentation ... Guaranteed | (888) 88-SOURCE | www.artisantg.com
The following illustration shows how a service provider might provide H.460
firewall traversal between two enterprise locations. In this example the
Polycom Video Border Proxy™ (VBP
of the service provider network and facilitates IP calls between Polycom HDX
systems behind different firewalls.
Polycom VBP device
that Supports H.460.18
and H.460.19
Enterprise Location A
System with
Traversal Enabled
To use this traversal, Polycom HDX systems and firewalls must be configured
as follows:
Enable firewall traversal on the Polycom HDX system.
1
Go to System > Admin Settings > Network > IP > Firewall.
a
Select Enable H.460 Firewall Traversal.
b
Register the Polycom HDX system to an external Polycom VBP device
2
that supports the H.460.18 and H.460.19 standards.
Make sure that firewalls being traversed allow Polycom HDX systems
3
behind them to open outbound TCP and UDP connections.
— Firewalls with a stricter rule set should allow Polycom HDX systems
to open at least the following outbound TCP and UDP ports: 1720
(TCP), 14085-15084 (TCP) and 1719 (UDP), 16386-25386 (UDP).
— Firewalls should permit inbound traffic to TCP and UDP ports that
have been opened earlier in the outbound direction.

Basic Firewall/NAT Traversal Connectivity

Basic Firewall/NAT Traversal Connectivity allows HDX systems to connect to
the SIP-based RealPresence solutions using the Acme Packet Net-Net family of
Session Border Controllers (SBC). An HDX system connects to the Acme
Packet Net-Net SBC as a remote enterprise endpoint. The remote enterprise
endpoint is registered to the enterprise's SIP infrastructure and connects to an
internal enterprise endpoint through the enterprise firewall.
® ) firewall traversal device is on the edge
Service Provider
Gatekeeper
Enterprise Location B
IP Network
Networks
System with
Traversal Enabled
2–25