INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Jobs

H323 netscreen Payload IP address translation

H323 netscreen Payload IP address translation

(OP)
Hiya,


I'm trying to set up H323 to work. However outband calls don't work because the IP inside the payload it's hidden by the security device.


my public interface 1.1.1.1 is configured in route mode. A MIP is defined on this interface to map 2.2.2.2 with my video conference unit 10.0.0.1 (private IP)

my DMZ interface, where my VC is, is configured in route mode.

ALG is turned on for H323.

In the security policy I've allowed

source 10.0.0.1 dest any port H323.
I'm not sure what I should do with NAT and protocol, but basically regardless what I use, packets are still nated behind the MIP (which is good) but the payload isn't modified to hide my private IP 10.0.0.1


I found this article but it isn't helping that much
http://kb.juniper.net/index?page=content&id=KB7407&actp=search&searchid=1275832406015

Thanks

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Resources

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close