D-Link NetDefendOS, User Manual

Page: 487 / 912

1. Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2. Now enter:
• Name: H323In
• Action: Allow
• Source Interface: any
• Source Network: all-nets
• Destination Interface: core
• Destination Network: wan_ip (external IP of the firewall)
• Service: my_h323_service
• Comment: Allow incoming calls to H.323 phones via ip-phone.
3. Click OK
To place a call to the phone behind the NetDefend Firewall, place a call to the external IP address
on the firewall. If multiple H.323 phones are placed behind the firewall, one
SAT rule has to be
configured for each phone. This means that multiple external addresses have to be used.
However, it is preferred to use a H.323 gatekeeper as in the "H.323 with Gatekeeper" scenario, as
this only requires one external address.
Example 6.12. 2 Phones Behind Different NetDefend Firewalls Using IP Rules
This scenario consists of two H.323 phones, each one connected behind the NetDefend Firewall
on a network with public IPv4 addresses. In order to place calls on these phones over the
Internet, the following rules need to be added to the rule listings in both firewalls. Make sure
there are no rules disallowing or allowing the same kind of ports/traffic before these rules.
Web Interface
Create a new H.323 ALG object:
Chapter 6: Security Mechanisms
487