Configuring Polycom Video Conference via Application Switch

[habibalby]

Hi All,

I'm trying to configure Polycom Video devices to work via Alteo Application Switch, but that seems failed. I have tried all the ports required but still failed.

Any help?

Thanks,

[Flintstone]

Hi habibalby,

Have you tried using a Sniffer to determine what happening?

CheerZ

[habibalby]

Hello,
No actually, I can't install sniffer on the Polycom Device to see where does the connection goes.. But in the checkpoint firewall the SmartView, I can see everything is green which indicates that the connection is established...

Any help?
Thanks,

[Flintstone]

Hi habibalby,

I seem to remember that video conferencing doesn't like Network Address Translation and by using an Alteon for load-balancing etc you are effectively using NAT?

CheerZ

[habibalby]

Yes, so who can I solve this issue? Do you want me to tell you the configuration I have done in the Alteon Part?

[Flintstone]

Hi habibalby,

I don't believe you can solve this issue as the Video Conference units need to setup the conference session using the actual IP addresses of the Video Conference units not virtual IP addresses like through an Alteon?

CheerZ

[habibalby]

There is not workaround to achieve that? because the current configuration, they can see me an hear me, but i cannot see nor I hear anything.

[habibalby]

Check this out, it's behind NAT and don't successful using SonicWall Firewall.
http://www.vtctalk.com/showthread.php?p=89610#post89610

[habibalby]

Here's another H.323 with NAT but I'm pulling my hair out to make it works... http://searchnetworking.techtarget.com/answer/Using-H323-with-NAT

[Flintstone]

Hi habibalby,

The only way to determine your issue is to use a Sniffer.  I believe you can port mirror on the Alteon to another PC running Sniffer software. 

I believe when we raised this issue with our supplier the only way to make it work was to use H323 gateways which change the IP address in the session to work with NAT?

CheerZ

[Michael McNamara]

Why are you placing your video conference bridge behind a Layer 7 switch?

As you've discovered, H323 (and SIP to an extent) will break if the packet gets NAT'd by some network router/switch. The latest software has some ability to work with/around H323 aware firewalls, but it sounds like you might need to go back to your design folks.

[habibalby]

Hi, so where I can place it then? The application switches control everything. Is there any way I can bypass them? I can send you simple diagram and suggest something.. I'm really pulling my hair to make it works.

Highly appreciate your feedback.

Thanks

[Michael McNamara]

I think you need to provide a much clearer picture for us to help.... remember we don't have any context to what you are doing.

You mention Polycom Video Conference Bridge (model? software release?)

You mention Alteon Application Switch? (model? software release?)

You mention firewall and NAT? (vendor? software release?)

Now for the $1,000 question, are you running Check Point Firewall-1 on the Alteon Application Switch? Is that your Internet firewall? Are you trying to get your Video Conference Bridge to make an Internet call from your internal network across the Internet?

You need to realize that we don't have a clue to what you are actually trying to-do. You provide a single line of text which is only good enough to confuse people and get you a bunch of single line replies. Start from the beginning, tell us what you are trying to accomplish, what equipment you have (software releases and models please) and what you've already tried.

Then we can advise you (assuming we can help) where to look next or how to solve your problem.

I don't mean to sound harsh but all these little bits of information make it difficult to give you a decent response.

Cheers!

[habibalby]

I think you need to provide a much clearer picture for us to help.... remember we don't have any context to what you are doing.

You mention Polycom Video Conference Bridge (model? software release?)

Software Version: Release 9.0.1 - 18Jul2008 11:01 
Model: VSX 7000A (128)

You mention Alteon Application Switch? (model? software release?)
Software Version:   25.3.2 AlteonOS   
AAS 3408 E

You mention firewall and NAT? (vendor? software release?)
CheckPoint
NGX (R60) HFA_05, Hotfix 605
Linux Version: 2.4


Now for the $1,000 question, are you running Check Point Firewall-1 on the Alteon Application Switch? Is that your Internet firewall? Are you trying to get your Video Conference Bridge to make an Internet call from your internal network across the Internet?

Yes, it's my Internet Firewall and I'm trying to get the Video Conference through this firewall / application switch.

Attached simple diagram of the current network.

You need to realize that we don't have a clue to what you are actually trying to-do. You provide a single line of text which is only good enough to confuse people and get you a bunch of single line replies. Start from the beginning, tell us what you are trying to accomplish, what equipment you have (software releases and models please) and what you've already tried.

Then we can advise you (assuming we can help) where to look next or how to solve your problem.

I don't mean to sound harsh but all these little bits of information make it difficult to give you a decent response.

Cheers!

[Michael McNamara]

You'll need a firewall rule that allows the outbound traffic from the Polycom, you'll also need a static NAT rule (1-to-1) for this device.

In your Polycom configure the NAT IP address under the IP Network configuration settings (see attached).

Good Luck!