Avaya QE - Configuration Guide
pg. 22
3)
Enter the Default Gateway for the Ingate SIParator. The Default Gateway for
the SIParator will be the existing Firewalls IP Address on the DMZ network.
4)
Enter the existing Firewall’s external WAN/Internet IP Address. This is used to
ensure correct SIP Signaling and Media traversal functionality. This is required
when the existing Firewall is providing NAT.
5)
Enter a Port Range of media ports you need to configure the firewall to forward
to the LAN SIParator
6)
Enter the DNS Servers for the Ingate Firewall. These DNS Servers will be used
to resolve FQDNs of SIP Requests and other features within the Ingate. They
can be internal LAN addresses or outside WAN addresses.
7)
On the Existing Firewall, the SIP Signaling Port and RTP Media Ports need to be
forwarded to the Ingate SIParator. The Ingate SIParator is an ICSA Certified
network edge security device, so there are no security concerns forwarding
network traffic to the SIParator.
On the existing Firewall:
a.
Port Forward the WAN/Internet interface SIP Signaling port of 5060
with a UDP/TCP Forward to the Ingate SIParator
b.
Port Forward the a range of RTP Media ports of 58024 to 60999 with a
UDP Forward to the Ingate SIParator
