How To Port Forward To Stream Audio - SA540

[WTIJ]

Hello,

If anyone could provide a detailed, step-by-step process on how to set-up port forwarding so I can stream audio outside of the local network I would greatly appreciate it.

I took over a small radio ministry and am trying to get streaming started.

I am able to access our radio computer on the local network by inputting the computer's IP address and port into iTunes.

Currently, I am unable to access the same stream outside the network.

I know I need to change settings and enable port forwarding, but I need help.

I thought I had updated/changed the proper settings, but it will not work.

If anyone can help, please provide details as to what I need to do from start to finish.

Thanks in advance.

[Georg Pauwen]

Hello,

great. We are getting there. Your users will eventually access the stream by typing http://64.85.184.7:8011.

For that to happen, we need to map the internal IP address 192.168.10.168 to the external address. 

I am looking at the SA540 configuration guide on how to accomplish this, will get back with you.

[Georg Pauwen]

OK. Since you can already access the Internet, the Network Address Translation needed is already in place. Go to pages 107 and 110 of the attached guide and configure an outbound and an inbound rule in the firewall for the audio stream. The inbound traffic should specify 'any' as the source, and the IP address of your streaming server as the destination. The service should be itunes, not sure if that service is already available, otherwise you have to add the service. The outbound rule has to specify the streaming server as the source and 'any' as the destination. Service, again, should be iTunes.

http://www.cisco.com/c/dam/en/us/td/docs/security/multi_function_security/multi_function_security_appliance/sa_500/administration/guide/SA500_AG_OL1911404.pdf

[WTIJ]

I think I did it correctly.  There wasn't an option to choose for iTunes, but there was one that read "RadioStream."

I have attached screenshots, can you make sure everything was right and if not, what I need to change?

[Georg Pauwen]

The good thing is: I can access your IP address from the outside. I actually get the SA540 login screen. I cannot access your stream, I think it has to do with the fact that RadioStream is not on port 8011.

I am trying to find out which port it is...

[WTIJ]

Thanks for all the help.

Would any other service besides "RadioStream" cause it to work?

Did you have a look at the screenshots?  Was everything OK?

[Georg Pauwen]

Hello,

the thing left to do is to create a custom service, which specifies port 8011 (iTunes).

Go to the end of page 104 in the guide, it gives you the procedure. Once you have created the service, select it in the firewall rules that you have created.

http://www.cisco.com/c/dam/en/us/td/docs/security/multi_function_security/multi_function_security_appliance/sa_500/administration/guide/SA500_AG_OL1911404.pdf

[Georg Pauwen]

Hello,

this is what I am getting now when I type http://64.85.184.7:8011/ into my browser:

Please use an mp3-player, not a web-browser

---

LiveEncoder streaming server, powered by SoundPlay

[WTIJ]

Hello,

Is this progress?

Does it work if you try to open this stream in iTunes or a similar program?

[Georg Pauwen]

Hello,

I am installing iTunes on my Windows machine...hang on, I will test it.

[Georg Pauwen]

I have added the stream to iTunes, but cannot hear anything. That said, if I do a traceroute from my machine (I am in The Netherlands) to your server, the connection is really slow. In addition, when I try to access the streams from within my browser, I get a 'Connection limit reached' warning. Can you somehow reset the connections on the server ?

[WTIJ]

I reset the streaming program.  It was showing the connection limit reached error.

Please try again.

[Georg Pauwen]

I can hear the stream, everything seems to work fine.

[Georg Pauwen]

By the way, my IP adddress is 84.29.167.235. You should be able to see that in the firewall.

[WTIJ]

Good Morning,

Thanks for your help with the previous issue.

Now, I am needing to do two more things and everything should be perfect set-up.

The first thing is to set up FTP access between my person computer and the radio computer; and the second is to allow me to control the radio computer remotely.

What "service" do I use in the Cisco firewall to allow access?

Thanks!

[Georg Pauwen]

Hello,

good to hear that everything streaming is working.

Here is a link to how to set up FTP access.

http://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=8d1f951c67e44739a5d1d68403a0072c_Troubleshoot_Port_Forwarding_for_FTP_Service_on_the_SA520.xml&pid=2&converted=0

Is the radio computer a MAC, or Windows ?