Amer Networks E5Web GUI User Manual
Page 428
1.
Go to: Policies > Add > IPRule
2.
Now enter:
•
Name: H323In
•
Action: SAT
•
Service: H323
•
Source Interface: any
•
Destination Interface: core
•
Source Network: 0.0.0.0/0 (all-nets)
•
Destination Network: wan_ip (external IP of the security gateway)
•
Comment: Allow incoming calls to H.323 phone at ip-phone
3.
For SAT enter Translate Destination IP Address: To New IP Address: ip-phone (IP address
of phone)
4.
Click OK
1.
Go to: Policies > Add > IPRule
2.
Now enter:
•
Name: H323In
•
Action: Allow
•
Service: H323
•
Source Interface: any
•
Destination Interface: core
•
Source Network: 0.0.0.0/0 (all-nets)
•
Destination Network: wan_ip (external IP of the security gateway)
•
Comment: Allow incoming calls to H.323 phone at ip-phone
3.
Click OK
To place a call to the phone behind the Clavister Security Gateway, place a call to the external IP
address on the security gateway. If multiple H.323 phones are placed behind the security
gateway, one SAT rule has to be configured for each phone. This means that multiple external
addresses have to be used. However, it is preferred to use a H.323 gatekeeper as in the "H.323
with Gatekeeper" scenario, as this only requires one external address.
Example 6.7. Two Phones Behind Different Clavister Security Gateways
This scenario consists of two H.323 phones, each one connected behind the Clavister Security
Gateway on a network with public IPv4 addresses. In order to place calls on these phones over
Chapter 6: Security Mechanisms
428