Amer Networks E5Web GUI - Manual (Page 432)

H.323 phones are connected on the internal network and to the Gatekeeper on the DMZ. The
Gatekeeper on the DMZ is configured with a private address. The following rules need to be
added to the rule listings in both security gateways, make sure there are no rules disallowing or
allowing the same kind of ports/traffic before these rules.
InControl
Follow the same steps used for the Web Interface below.
Web Interface
Incoming Gatekeeper Rules:
1. Go to: Policies > Add > IPRule
2. Now enter:
• Name: H323In
• Action: SAT
• Service: H323-Gatekeeper
• Source Interface: any
• Destination Interface: core
• Source Network: 0.0.0.0/0 (all-nets)
• Destination Network: wan_ip (external IP of the security gateway)
• Comment: SAT rule for incoming communication with the Gatekeeper located at
ip-gatekeeper
3. For SAT enter Translate Destination IP Address: To New IP Address: ip-gatekeeper (IP
address of gatekeeper).
4. Click OK
1. Go to: Policies > Add > IPRule
Chapter 6: Security Mechanisms
432