topic Re: Codian MCU videoconference through PIX 7.0(1)5 in Network Security

Codian MCU videoconference through PIX 7.0(1)5

dopenfield — Fri, 21 Feb 2020 08:20:21 GMT

We are experiencing call drops when using this particular vendor (Codian).

The calls seem to drop after about 1 minute 53 seconds.

Other videoconferenceing works fine through the PIX. Codian will work fine if the traffic isn't going through the firewall.

Any Thoughts??

Re: Codian MCU videoconference through PIX 7.0(1)5

sachinraja — Wed, 17 Aug 2005 15:11:27 GMT

Hello dopenfield,

Make sure you open the correct ports.

PORT TYPE PROTOCOL DESCRIPTION

1719 Static UDP Gatekeeper RAS

1720 Static TCP Q.931 (Call Setup)

1024-65535 Dynamic TCP H.245(Call Parameters)

1024-65535 Dynamic UDP (RTP) Video Data Streams

1024-65535 Dynamic UDP (RTP) Audio Data Streams

1024-65535 Dynamic UDP (RTCP) Control Information

There are some optional ports too. Have a look at this URL:

http://www.vcon.com/support/support_notes/All_Notes/02042401.shtml

Try running a sniffer and see if there aer any other ports used by Codian...... Try by putting a "permit ip any any" on the PIX and see if it works !!!!

Raj

Re: Codian MCU videoconference through PIX 7.0(1)5

dopenfield — Wed, 17 Aug 2005 20:37:18 GMT

We are using the 'built-in' Inspect functionality in the PIX IOS. That should be taking care of those ports being available. And we did try the permit any any earlier in out troubleshooting, problem still occured.

Further update...Packet capture has shown that there are two ACKs coming back from our end of the conversation just 5ms apart. We are now trying to determine what is sending the second ACK. Is that something the PIX could/would do?

Re: Codian MCU videoconference through PIX 7.0(1)5

dopenfield — Thu, 10 Nov 2005 20:01:34 GMT

Just a follow-up for anyone else who may run into this.

It appears PIX 7.0.4 has corrected our H.323 problems.