Configuring Firewall And Nat Properties - Polycom V500 Administrator's Manual

Configuring Firewall and NAT Properties

After you set up your router, you must configure the V500 system so that it
works with the firewall and NAT.
Before making changes on the Firewall screen, you should know whether or
not your firewall device is H.323 compatible. Firewall devices that are H.323
compatible have been programmed with logic that can detect H.323 video
conferencing traffic as it passes between the LAN and WAN. Because of this,
they are able to open the necessary ports dynamically as needed, on a
call-by-call basis.
Some firewall devices can even insert the NAT Public WAN Address
automatically during the H.323 call. For these devices, it is not necessary to
configure the V500 system with fixed ports or even, in some cases, with NAT.
Check with the manufacturer of your device to see if it supports H.323
compatibility.
To set up the V500 system to work with a firewall and NAT:
1. Go to System > Admin Settings > Network > IP > Firewall.
2. Configure these settings:
Setting
Fixed Ports
TCP Ports
UDP Ports
Enable
NAT/Firewall
Traversal
Description
Lets you specify whether to define the TCP and UDP ports.
• If the firewall is not H.323 compatible, enable this
setting. The V500 system assigns a range of ports
starting with the TCP and UDP ports you specify. The
system defaults to a range beginning with port 3230 for
both TCP and UDP.
Note: You must open the corresponding ports in the
firewall. You must also open the firewall's TCP port
1720 to allow H.323 traffic.
• If the firewall is H.323 compatible or if the system is not
behind a firewall, you may not need to enable this
option.
Lets you specify the beginning value for the range of TCP
and UDP ports used by the system. The system
automatically sets the range of ports based on the
beginning value you set.
Note: The TCP and UDP port ranges you open here must
match those that you opened for your router. You must also
open the firewall's TCP port 1720 to allow H.323 traffic. See
the previous section, Configuring Router Port Forwarding
on page 3-7, for information about opening ports for your
router.
Allows the system to use H.460-based firewall traversal. For
more information, refer to
page 3-13.
Configuring Network Use
H.460 NAT Firewall Traversal on
3 - 11