Basic Firewall/Nat Traversal; Configure The H.460 Firewall/Nat Traversal - Polycom RealPresence Group Series Administrator's Manual

Ref. Number
3
4
5
6
7

Basic Firewall/NAT Traversal

Your RealPresence Group Series system can connect to SIP-based Polycom solutions using the Acme
Packet Net-Net family of session border controllers (SBCs).
A system connects to the Acme Packet Net-Net SBC as a remote enterprise endpoint, which is registered
to the enterprise's SIP infrastructure and connects to an internal enterprise endpoint through the
enterprise firewall.
For details about the use and configuration of the Acme Packet Net-Net SBC used in conjunction with this
feature, refer to Deploying Polycom Unified Communications in an Acme Packet Net-Net Enterprise
Session Director Environment.
Polycom systems also provide full mutual TLS support for SIP and XMPP Presence connections. Full
mutual TLS support gives administrators the ability to identify and authenticate devices attempting to join
conferences from outside the network.

Configure the H.460 Firewall/NAT Traversal

You can enable and configure H.460 firewall or NAT traversal on your RealPresence Group Series
system.
Make sure you register your system with a network device that supports H.460.18 and H.460.19
standards (for example, a RealPresence Access Director system or a Polycom VBP device).
Procedure
1. Enable firewall traversal on the system.
a. In the system web interface, go to Admin Settings > Network > IP Network > Firewall.
b. Select Enable H.460 Firewall Traversal.
2. Verify the firewalls that you traverse allow your system to use outbound TCP and UDP
connections.
• Firewalls with a stricter rule set must allow the system to use at least the following outbound
TCP and UDP ports: 1720 (TCP), 14085-15084 (TCP), 1719 (UDP), and 16386-25386
(UDP).
• Firewalls must allow inbound traffic to the TCP and UDP ports used for outbound traffic.
3. Configure the following settings and select Save.
Polycom, Inc.
Description
IP network
Firewall
system
Firewall
system
Securing the System
102