[cisco-voip] ATA behind a firewall

[Wes Sisk]

Andrew,

Because h323 embeds the L3 addr (ip addr) in the L4 message (h225),
your "simple home router" will have to be h323 aware, maintain translation
tables, and do packet re-writes.

/Wes

> -----Original Message-----
> From: cisco-voip-bounces at puck.nether.net
> [mailto:cisco-voip-bounces at puck.nether.net]On Behalf Of Andrew Croch
> Sent: Friday, January 02, 2004 10:51 AM
> To: cisco-voip at puck.nether.net
> Subject: Re: [cisco-voip] ATA behind a firewall
>
>
>
> I have been trying to use ATA behind firewall without success. Please
> consider the following scenario:
> ATA using H323 and with private IP, behind NAT firewall (a simple home
> router such as linksys or netgear)
> Gatekeeper (gnugk) with public IP
>
> 1. Can I terminate calls in two different ATAs behind the firewall ? (I
> imagine I need to do port forwarding in the router to a single
> ATA so only
> one ATA can terminate the call inside the LAN)
>
> 2. Can I call from one ATA behind firewall to another ATA behind another
> firewall using the gnugk ? Do I need a proxy for that ?
>
> 3. Is SIP better than H323 for NATed ATAs ?
>
> Thanks,
> Andrew
>
> >From: "neil quiogue" <neil at quiogue.com>
> >To: "Diego Costa" <diego at ifxnw.com.uy>,        "Cisco-Voip"
> ><cisco-voip at puck.nether.net>
> >Subject: Re: [cisco-voip] ATA behind a firewall
> >Date: Wed, 31 Dec 2003 07:01:33 +0800
> >
> >Actually, with Cisco ATA system version 3.0 (released December
> 15), there's
> >support for STUN.  You just need to download the SIP software since H.323
> >and SIP are now separate.
> >
> >Please check with your Cisco partner.
> >
> >Regards, Neil
> >
> >----- Original Message -----
> >From: "Diego Costa" <diego at ifxnw.com.uy>
> >To: "Cisco-Voip" <cisco-voip at puck.nether.net>
> >Sent: mardi 30 décembre 2003 04:17
> >Subject: [cisco-voip] ATA behind a firewall
> >
> >
> > > Hello guys,
> > >
> > >     I want to try cisco ATA behind a NAT, I can use SIP and H323 also,
> >I've
> > > read some about STUN but in the documentation of the STUN
> servers that I
> > > review, said that they don't work with Cisco ATA's.
> > >
> > >
> > > The scenario would be:
> > >
> > >  ------------                     --------------
>
> >--
> >--
> > > ---
> > > | Gatekeeper |----Public IP's----| NAT FIREWALL |----Private
> IP's----> |
> > > ATA-1 |
> > >  ------------                     --------------
>
> >--
> >--
> > > ---
> > >
> > > I would appreciate any help or suggestion.
> > >
> > > Thanks
> > > Diego.
> > >
> > > _______________________________________________
> > > cisco-voip mailing list
> > > cisco-voip at puck.nether.net
> > > https://puck.nether.net/mailman/listinfo/cisco-voip
> >
> >_______________________________________________
> >cisco-voip mailing list
> >cisco-voip at puck.nether.net
> >https://puck.nether.net/mailman/listinfo/cisco-voip
>
> _________________________________________________________________
> Expand your wine savvy — and get some great new recipes — at MSN Wine.
> http://wine.msn.com
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip