ClearOne NetPoint Firewall Traversal, Инструкция по установке и настройке, Страница: 16 / 35

16 NetPoint Firewall Traversal Server: Installation and Setup Manual
S
ETTING
U
P THE
F
IREWALL TO
S
UPPORT
N
ET
P
OINT
D
EPLOYMENT
To add NetPoint support to your firewall, set up Collaborate Central in your organization’s
private network and NetPoint in your organization’s DMZ (DeMilitarized Zone).
To enable communication between the Collaborate Central in the private network and the
NetPoint in the DMZ, open pinholes outward for three specific ports that interface with the
private network.
To enable incoming H.323 conferencing calls to connect to the NetPoint in the DMZ, open
all ports designated for H.323 communication that interface with the public network (H.323
selects ports dynamically while the calls are connected).
The NetPoint’s deployment does not affect other ports or rules of the firewall. As a result, it
is not required to open ports inward or to open random or dynamic ports. External users
cannot connect directly to the private LAN and the LAN’s users cannot connect directly to
the public network.
To add NetPoint support to a firewall
1.
In the firewall’s configuration, open any range of three ports outward as the pinholes.
We recommend that you use the suggested default port selections although you may
change them if your networking specifications require it.
NOTE: The Outbound TCP Signaling Port (lowest of the range of three
ports) must be set identically in the Collaborate Central and NetPoint
servers.
Open a range of ports configured for H.323 connection, which will be used for routing calls
between the DMZ and the public network.