Gatekeeper problem

[Skylark]

Hi Have been running a MGC25 as demo unit now for about a year.

Every thing has been working fine but now the sales department whants to set it up for dialing outside of the network.

I had som training with the old built in Radvision gatekeeper so Im not completly cluless but still.....

I have set up PathnNavigatur gatkeeper for the local net and I got it working fine but In order to dial out I have had to change the Call Policy to "Direct"

I have taken a look at the net packages both with "Direct" and "Routing" modes and what I can see is that the gatekeeper isn't changing the IP address witn in the packages so the picture and audio doesnt know where to go.

The question is what am I doing wrong? have I forgot to define somthing within the Pathnav?

Please sombody point me in the right direction

[tom9933]

Skylark,
I have PathNavigator running at the university so I’d be happy to help but I’m a bit confused about what you are trying to do. Are you expecting PathNavigator to re-route the traffic through the firewall? Ideally you will want to use the gatekeeper in routed mode as direct mode really limits some of the features you can use.
One thing to start with, have you defined any zones? Also related to this have you told PathNavigator about the wan link? PathNavigator uses the Network Topology information for least cost routing and for bandwidth management.
Let me know how I can help,
BTW IP video calls are encouraged, just too many IPs to list :)

[dfreeman]

are you using e.164 addressing? You can set up the routing so that an inbound call goes to your endpoint with the use of your extension (I usually set the e.164 to the same # as the room telephone extension)

[James]

Have you configured the MGC gateway session (H.323 to H.320)?

[Skylark]

I intend to use the gatekeeper as the router inn for incoming calls and use alaises (extension numbers) but right now Im dealing wit out side dialing (LAN2WAN) not returning to the caller.
I know of the Direct limist and thats why Im trying to get the Routed mode to work.

In my Network Topology:
1. Summary has:
internet/VPN
nyherji (my lan)






H323 to H320 is not configured since Im not using the ISDN at the moment, but I have used it and simplified dialing before with out any problems.

[Skylark]

Sorry som how I managed to send before I finished.

I have nothing set up under Least cost routing (no ISDN right now) and Im only using one network


In my Network Topology:
1. Summary
internet/VPN
nyherji (my lan) Yes everyone

2. Networks
nyherji Yes everyone

3. Wan Links
internet nyherji All other... 768

4. Network Adresses (for nyherji)
10.0.0.0 255.0.0.0
172.0.0.0 255.0.0.0

Is there anything else I should define?

When I go through the Leas cost Routing info it all seems to be about ISDN configurations.

Sorry about makeing a mess on this forum 8)

[tom9933]

Skylark,
It looks like you have the settings in correctly but I’m concerned about the address ranges in your network. Are you trying to use PathNavigator to traverse a firewall, or did you just use the private addresses for the posting? I could be wrong but I don’t think it has this capability. It sounds like you’re looking for a firewall traversal solution

[Skylark]

So IP dialing straigt to PathNavigator using extension number to get to the VC unit isn't possible?

My plan was to have the PathNav both on the inside and the outeside network and use it to rout IP calls and If I was outside the network (WAN) I planed to dial the PathNavigator+extension to get in.

[tom9933]

Skylark,
I don’t think PathNavigator will allow you to do this, although I’m checking with another source on this. Another way to do this might be to route all the calls through your MGC. I’m not sure if you can do this on the 25 since I’m assuming you only have one IP module but I know the Accord folks used to talk about using the MGC to perform firewall traversal. Their pitch always included using two blades where one was on the LAN and the other was on the WAN but it might be possible to do this with only one blade. My thought is to create a meeting room (for the incoming calls) on the MGC and then setup the IP port of the MGC as the default route (on the WAN side) for all of your H.323 traffic. In theory this should allow one incoming or outgoing call.
Let me know if this works

[Skylark]

So is it possible for me to buy som sort of IP to IP gateway to do this? And is so can I set it up in Pathnavigator as do with other L2W (IP to ISDN) gateways?

Do you know if there are other Gatekeepers that support extension dialing for IP calls?

[Entropy3XD]

Originally posted by Skylark@May 12 2004, 12:29 PM
Do you know if there are other Gatekeepers that support extension dialing for IP calls?
Cisco MCM and Radvision's ECS are excellent gatekeepers which support extension dialing. I don't know how they would work for your scenario however.

[tom9933]

I think an IP to IP gateway is the way things are supposed to work with the multi-bladed (i.e. two ip modules on different networks) MGC, but I’m not sure if that is available on the 25. You might give your reseller a call to verify this and also to ask about an upgrade. I know a lot of the educational institutions use Ridgeway for firewall traversal and I’ve also heard that VCON has a pretty good product.

[Entropy3XD]

Originally posted by tom9933@May 14 2004, 05:07 PM
I think an IP to IP gateway is the way things are supposed to work with the multi-bladed (i.e. two ip modules on different networks) MGC, but I’m not sure if that is available on the 25. You might give your reseller a call to verify this and also to ask about an upgrade. I know a lot of the educational institutions use Ridgeway for firewall traversal and I’ve also heard that VCON has a pretty good product.
Is ridgeway still around? I had heard rumors. I know their product worked pretty well.

[Skylark]

You might give your reseller a call to verify this and also to ask about an upgrade. I

*Blush*

I am the reseller :rolleyes:

[tom9933]

Actually, just heard today that Tandberg bought Ridgeway, seems like a very smart move. Check out the following link: http://www.tandbergusa.com/press_room/view...2F61EC088?id=68 (http://www.tandbergusa.com/press_room/viewPressRelease.do;jsessionid=E8657D01C6F1B0AAE56 DA6B2F61EC088?id=68)

[Entropy3XD]

Originally posted by tom9933@May 19 2004, 07:20 PM
Actually, just heard today that Tandberg bought Ridgeway, seems like a very smart move. Check out the following link: http://www.tandbergusa.com/press_room/view...2F61EC088?id=68 (http://www.tandbergusa.com/press_room/viewPressRelease.do;jsessionid=E8657D01C6F1B0AAE56 DA6B2F61EC088?id=68)
Great link!!! Thanks for the up to the minute news. Nice. :D

[Entropy3XD]

This is why this site ROCKS!!!

[tom9933]

Just people helping people :)

[owit]

are the network addresses you mentioned routable????? :ph34r:

[sdevoy]

Hi guys,
the MGC25, doesn´t do IP bridging. How about other devices that have multiple LAN ports?
e.g. The old Radvision L2W range, Codian MCU...

Steve

[robertk]

I was under the impression that you CAN do IP-bridging using the MGC 25/50/100. I know that the MGC 25 has two H323 ethernet ports. + one management port. The MGC 50 and 100 has the same, and can do IP-bridging.

//Robert

[Kevin]

the MGC25, doesn´t do IP bridging. How about other devices that have multiple LAN ports?
e.g. The old Radvision L2W range, Codian MCU...

Codian are about to release a software upgrade for the Codian MCU4210 that will enable the second ethernet port and allow firewall transversal for conferencing. This will be part of the standard product at no cost.

[harleyryder]

The Radvision ECS GK that Entropy referred to has a firewall traversal solution built in. You can have a private IP address for EPs inside the network and a public IP for EP outside the network and with the traversal all EPs registered (private or public IP) can "talk" to each other. Maybe something to look into.

[Sean Lessman]

Codian are about to release a software upgrade for the Codian MCU4210 that will enable the second ethernet port and allow firewall transversal for conferencing. This will be part of the standard product at no cost.

Not really firewall traversal, more like firewall bypass isn't it? :)

I think you will find this approach in all of the major MCUs on the market. Its a useful feature.

Sean

[Glen Sykes]

The Radvision ECS GK that Entropy referred to has a firewall traversal solution built in. You can have a private IP address for EPs inside the network and a public IP for EP outside the network and with the traversal all EPs registered (private or public IP) can "talk" to each other. Maybe something to look into.


Additionally, (and I can't confirm this) it also depends on the device at the network boundary being a firewall as Rad's solution requires the hardware to be placed in a DMZ. If the device at the boundary is a router running NAT for example, I'm not so sure that the Rad solution can be employed (feel free to correct me if this is incorrect).