VIDEO CONFRENCING THROUGH THE ASA

[harvinder-s]

HI can anyone tell me what ports need to be allowed to allow video confrencing through the ASA

can i use nat instead of access lists to do the same

[ajay chauhan]

Incase of H323.

PORT	TYPE	PROTOCOL	DESCRIPTION
1719	Static	UDP	Gatekeeper RAS
1720	Static	TCP	Q.931 (Call Setup)
1024-65535	Dynamic	TCP	H.245(Call Parameters)
1024-65535	Dynamic	UDP (RTP)	Video Data Streams
1024-65535	Dynamic	UDP (RTP)	Audio Data Streams
1024-65535	Dynamic	UDP (RTCP)	Control Information

You can use NAT but better not to use.

Thanks

ajay

[harvinder-s]

Thanks for the reply ajay but opening so many ports would make the firewall vulnerable.

so how can i do it using nat

[ajay chauhan]

H323 section of this link might help.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008081042c.shtml

[mvsheik123]

Hi,

I recently setup a VC (polycom) behind ASA 5510. port requirement may depent on vendor - below are tehe ports I used..

tcp h323 & 1731

tcp  3230 3235

udp 3230 3253

udp 1718 & 1719

Also, once you set up you can do a free test using IPs listed at vtctest.com. As part of security, i disabled 'icmp echo' from outside to this static Nat'd ip.

hth

MS