H.460 Nat Firewall Traversal - Polycom V500 Administrator's Manual

H.460 NAT Firewall Traversal

You can configure V500 systems to use standards-based H.460.18 and
H.460.19 firewall traversal, which allows video systems to more easily
establish IP connections across firewalls.
The following illustration shows how a service provider might provide H.460
firewall traversal between two enterprise locations. In this example the V
traversal server gateway is on the edge of the service provider network and
facilitates IP calls between systems behind different firewalls.
V 2 IU Server Gateway
that Supports H.460.18
and H.460.19
Enterprise Location A
System with
Traversal Enabled
To use this traversal, V500 systems and firewalls must be configured as
follows:
• Enable firewall traversal on the V500 system.
• Register the V500 system to an external V
that supports the H.460.18 and H.460.19 standards.
• Make sure that firewalls being traversed allow V500 systems behind them
to open outbound TCP and UDP connections.
— Firewalls with a stricter rule set should allow V500 systems to open at
least the following outbound TCP and UDP ports: 1720 (TCP),
14085-15084 (TCP) and 1719(UDP), 16386-25386 (UDP).
— Firewalls should permit inbound traffic to TCP and UDP ports that
have been opened earlier in the outbound direction.
• For best interoperability, make sure that H.323 protocol-aware features are
disabled on firewalls being traversed.
Service Provider
IP Network
2 IU Traversal Server Gateway
Configuring Network Use
2
IU™
Gatekeeper
Enterprise Location B
System with
Traversal Enabled
3 - 13