Dual NIC question

[Hossam Al-kurdi]

Dear Experts,

i have one VCS-E which has dual NIC and its placed in DMZ and i have VCS control , my deploment goes as follow :

1-  VCS control in an enternal network lets say  Ex : 192.168.2.222

2-over 20 C60 units and all of them are registerd to VCS control via SIP and H323

3- the VCS E has 2 ports . one is in the same network as the VCS-C lets say 192.168.2.223 and the other port is 148.151.63.5  which is in defrent network and its nated

i have put all the zones and i can see that the traversal zone is activated but ..it depends on the gateway for example for network 1 the gate way is 192.168.2.1 . if i put that the vcs and vce will communicat but i wont get an external calls ,, and when i put the other external gate way for example 148.151.63.1 i can get an external call but i will lose the communication with the vcs-c pleaase help

[Brent Daniel]

I have set this up before using 3-port firewall DMZ using single VCS-E LAN interface.

.

i placed the VCS Expressway in the DMZ, Nat'd the Outside IP to the DMZ IP.

I only used the single NIC on the Dual Nic option.

On LAN 2 setup the DMZ IPv4 address as DMZ IP. Set the IPv4 static NAT mode to ON and then giving it the Nat'd outside ip in the IPv4 static NAT address field.

You will need to also NAT the Outside IP of expressway to the inside so that VCS control can hit the VCS Expressway by the Public Nat'd Address. You may also have to put a route in to point to the firewall in order to get to the Nat'd outisde ip of expressway from the inside.

There are several ways to do this but this has worked for me on several installs.

Cisco TelePresence Video Communication Server Basic Configuration (Control with Expressway)

Deployment Guide Cisco VCS X7.2

http://www.cisco.com/en/US/products/ps11337/products_installation_and_configuration_guides_list.html

I have set this up on 3-port firewall DMZ using single VCS-E LAN interface appendix 4 page 64.

Appendix 4 covers the various firewall scenarios.

Hope this helps.