Configuring The System For Use With A Firewall Or Nat - Polycom VSX 7000 Administrator's Manual

Configuring the System for Use with a Firewall or NAT

If your system is:
Behind a firewall that is
H.323 compatible
Behind a firewall that is not
H.323 compatible
Connected to the IP network
through a Virtual Private
Network (VPN)
Behind a NAT that is H.323
compatible
Behind a NAT that cannot
automatically determine the
system's outside IP address
a. You will also need to open the firewall's port 1720 to allow H.323 traffic.
© Polycom, Inc.
A firewall protects an organization's network by controlling data traffic from
outside the network. Unless the firewall is designed to work with H.323
videoconferencing equipment, it will prevent successful videoconferencing
because it prevents unsolicited data from entering the network.
Network Address Translation (NAT) network environments use private internal IP
addresses for devices within the network, while using one external IP address to
allow devices on the LAN to communicate with other devices outside the LAN. If
your system uses a NAT, it must be assigned a public IP address to communicate
outside the LAN.
To set up the system to work with a firewall or NAT:
1. Go to System > Admin Settings > Video Network > IP Network > Firewall.
2. Configure these settings:
Configure the system this way:
Do not select Fixed Ports.
1. Select Fixed Ports.
2. Specify the TCP and UDP ports to use. The VSX system assigns a range of ports
starting with the TCP and UDP ports you specify. In most cases, the range begins
with port 3230 for both TCP and UDP.
In the NAT Configuration, select Off.
1. In the NAT Configuration, select Auto to allow the system to determine the NAT
Outside (WAN) Address automatically.
2. Select NAT is H.323 Compatible.
3. To display the system's NAT Outside (WAN) Address, go to Address Displayed
in Global Directory and select Public.
If the NAT is H.323 compatible, you do not need to use fixed ports, and you do not
need to specify the system's outside IP address.
1. In the NAT Configuration, select Manual.
2. Enter the appropriate NAT Public (WAN) Address that callers from outside the
LAN will use to call your system.
Chapter 3 - Configuring Network Use
a
37