•
Destination Interface: lan
•
Destination Network: lannet
•
Service: my_h323_service
•
Comment: Allow incoming H.323 calls.
3.
Click OK
Example 6.13. Using Private IPv4 Addresses
This scenario consists of two H.323 phones, each one connected behind the NetDefend Firewall
on a network with private IPv4 addresses. In order to place calls on these phones over the
Internet, the following rules need to be added to the rule set in the firewall. Make sure there are
no rules disallowing or allowing the same kind of ports/traffic before these rules.
As we are using private IPs on the phones, incoming traffic need to be SATed as in the example
below. The object
ip-phone
should be the internal IP of the H.323 phone behind each firewall.
Web Interface
Create a new
H.323 ALG
object:
1.
Go to: Objects > ALG > Add > H.323 ALG
2.
Specify a name for the ALG, in this case
my_h323_alg
3.
Click OK
Create a custom
Service
object for H.323:
1.
Go to: Objects > Services > Add > TCP/UDP
2.
Now enter:
•
Name: my_h323_service
•
Type: TCP
•
ALG: my_h323_alg
•
Destination port: 1720
3.
Click OK
Create the outgoing traffic NAT IP rule:
1.
Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2.
Now enter:
•
Name: H323Out
Chapter 6: Security Mechanisms
489
Содержание NetDefendOS
Страница 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Страница 32: ...Chapter 1 NetDefendOS Overview 32 ...
Страница 144: ...Chapter 2 Management and Maintenance 144 ...
Страница 220: ... Enable DHCP passthrough Enable L2 passthrough for non IP protocols 4 Click OK Chapter 3 Fundamentals 220 ...
Страница 267: ... SourceNetwork lannet DestinationInterface any DestinationNetwork all nets 4 Click OK Chapter 3 Fundamentals 267 ...
Страница 284: ...Chapter 3 Fundamentals 284 ...
Страница 360: ...The ospf command options are fully described in the separate NetDefendOS CLI Reference Guide Chapter 4 Routing 360 ...
Страница 392: ...Chapter 4 Routing 392 ...
Страница 396: ...Web Interface 1 Go to Network Ethernet If1 2 Select Enable DHCP 3 Click OK Chapter 5 DHCP Services 396 ...
Страница 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Страница 420: ...Chapter 5 DHCP Services 420 ...
Страница 424: ...2 Now enter Name lan_Access Action Expect Interface lan Network lannet 3 Click OK Chapter 6 Security Mechanisms 424 ...
Страница 573: ...Chapter 6 Security Mechanisms 573 ...
Страница 575: ...This section describes and provides examples of configuring NAT and SAT rules Chapter 7 Address Translation 575 ...
Страница 607: ...Chapter 7 Address Translation 607 ...
Страница 666: ...Chapter 8 User Authentication 666 ...
Страница 775: ...Chapter 9 VPN 775 ...
Страница 819: ...Chapter 10 Traffic Management 819 ...
Страница 842: ...Chapter 11 High Availability 842 ...
Страница 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Страница 879: ...Chapter 13 Advanced Settings 879 ...