Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Video Conference problem

I purchased a tandberg 1000 and having problems with people from the outside connecting to the video port through a Pix Firewall.

Tandberg support did a trace and looks like the firewall is changing the

IP address 0.0.0.0 and Ip header which causes no video connect.

We have the correct ports open accourding to Tandberg.

I can also connect going out of the firewall. I'm wondering if you have to somehow make the port assigned where the header and address stay's the same.

Tandberg does not know where the issue could be.

Has anyone out there had the same problem.

2 REPLIES
New Member

Re: Video Conference problem

What PIX version are you using? I think you need to be on 6.x for h.323 support.

New Member

Re: Video Conference problem

I have a host in my dmz for which I configured video conferencing and is working fine. I have done following:

fixup protocol h323 1720

fixup protocol rtsp 554

fixup protocol sip 5060

fixup protocol skinny 2000

access-list acl_out permit tcp any host eq 1503

access-list acl_out permit tcp any host eq h323

access-list acl_out permit tcp any host eq 1731

static (dmz,outside) netmask 255.255.255.255 0 0

Earlier I had PIX6.0 and I was facing lot of problems with video conferencing now with PIX6.1(1) and this configuration it is working.

Althogh I very frequently get following messages in my logs as PIX doesn't like IP options in the IP packet as it considers it a security risk so it discards the packet.

Jan 15 12:48:15 xxxx-1 %PIX-2-106012: Deny IP from to , IP options: "0x14"

Jan 15 12:48:37 xxxx-1 %PIX-2-106012: Deny IP from to , IP options: "0x14"

175
Views
0
Helpful
2
Replies
CreatePlease to create content