D-Link Forums
The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: Arcus2005 on April 21, 2010, 10:39:26 AM
-
Trying to make our Tandberg Video Conferencing Product work through the new DFL-210 we got.
Did set up the DFL-210 and have internet connection. Did upgrade from a old linksys.
Ports the the Tandberg depends on :
1719 UDP
1720 TCP
5555 - 5574 TCP
2326 - 2485 UDP
Anyone manage to see what i have done wrong in my setup ?
When i do a call on the Tandberg , the partner on other side can see me and hear me.
On my side its no picture and no sound.
If i put the linksys router back , then i get picture and sound on my side too.
Interface Addresses :
Videokonf - 192.168.1.99
wan_ip = IP from ISP
Services :
H245 TCP/UDP 53523,5555-5574
h323 TCP 1720 H323 H.323 via H323 ALG - Enables H.323 communication
h323-gatekeeper UDP 1719 H323 H.323 RAS via H323 ALG - Enables communication with H.323 Gatekeepers
Vid_Aud_DATA_videokof TCP/UDP 2326-2485 Porter for audio , video og data/FECC for videokonferansesystemet
IP Rules
# Name Action Source interface Source network Destination interface Destination network Service
1 Gatekeeper_Discovery SAT any all-nets core wan_ip h323-gatekeeper
2 Gatekeeper_Discovery_2 Allow any all-nets core wan_ip h323-gatekeeper
3 Q931_Call_Setup SAT any all-nets core wan_ip h323
4 Q931_Call_Setup_2 Allow any all-nets core wan_ip h323
5 Vid_Aud_Data SAT any all-nets core wan_ip Vid_Aud_DATA_videokof
6 Vid_Aud_Data_2 Allow any all-nets core wan_ip Vid_Aud_DATA_videokof
7 H245 SAT any all-nets core wan_ip H245
8 H245_2 Allow any all-nets core wan_ip H245
Regel 1 : Gatekeeper_Discovery
General
Name : Gatekeeper_Discovery
Action : SAT
Service : h323-gatekeeper
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
SAT
Translate the destination ip to new ip adress = Videokonf
All-to_one mapping : rewrite all destination IPs to single IP = marked.
-------------------------------------------------------------------------------------------
----------------------------
Regel 2 : Gatekeeper_Discovery_2
General
Name : Gatekeeper_Discovery_2
Action : Allow
Service : h323-gatekeeper
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
-------------------------------------------------------------------------------------------
----------------------------
Regel 3 : Q931_Call_Setup
General
Name : Q931_Call_Setup
Action : SAT
Service : h323
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
SAT
Translate the destination ip to new ip adress = Videokonf
All-to_one mapping : rewrite all destination IPs to single IP = marked.
-------------------------------------------------------------------------------------------
----------------------------
Regel 4 : Q931_Call_Setup_2
General
Name : Q931_Call_Setup_2
Action : Allow
Service : h323
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
-------------------------------------------------------------------------------------------
----------------------------
Regel 5 : Vid_Aud_Data
General
Name : Vid_Aud_Data
Action : SAT
Service : Vid_Aud_DATA_videokof
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
SAT
Translate the destination ip to new ip adress = Videokonf
All-to_one mapping : rewrite all destination IPs to single IP = marked.
-------------------------------------------------------------------------------------------
----------------------------
Regel 6 : Vid_Aud_Data_2
General
Name : Vid_Aud_Data_2
Action : Allow
Service : Vid_Aud_DATA_videokof
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
-------------------------------------------------------------------------------------------
----------------------------
Regel 7 : H245
General
Name : H245
Action : SAT
Service : H245
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
SAT
Translate the destination ip to new ip adress = Videokonf
All-to_one mapping : rewrite all destination IPs to single IP = marked.
-------------------------------------------------------------------------------------------
----------------------------
Regel 8: H245_2
General
Name : H245_2
Action : Allow
Service : H245
Schedule : none
Address Filter
Source Destination
Interface : any core
Network : all-nets wan_ip
-------------------------------------------------------------------------------------------
--------------------------
-
Do you have any log entries showing denied traffic?
Make yourself a service group so you only need one set of IP rules for the port forward.
-
Arcus2005!
Did you find a solution?
I have exactly the same trouble. A Tandberg 880 behind a DFL-210.
Struggling to have the trafic (audio/video) to work both ways. My conference partner sees and hears me but at my side it´s black and mute.
I´m very intrested in finding a solution...
regards
/jesper
-
Sorry , did forget about this post.
No, did'nt find any soultion yet.
Will try again tomorrow, and post my log here then.