H.323 Video

1
H.323 Video

• Basic Pix Firewall Configuration

2
H.323 Video

• Turn on H323 Fixup
• Command Line
• GUI (Configuration-System Properties-Advanced-Fi
  xup)

fixup protocol h323 h225 1718-1720 fixup protocol
h323 h225 1720 fixup protocol h323 ras 1718-1719
3
(No Transcript)
4
H.323 Video

• Permit Inbound AccessExample 1 Basic PIX access
  list

name 192.168.1.20 Video1 name 192.168.3.65
Video2 access-list outside_access_in permit tcp
any host 192.168.1.20 eq h323 access-list
outside_access_in permit tcp any host
192.168.3.65 eq h323
5
H.323 Video

• Permit Inbound AccessExample 2 PIX object
  groups (6.X up)

name 192.168.1.20 Video1 name 192.168.3.65
Video2 object-group network VideoConfDev
network-object 192.168.1.20 255.255.255.255
network-object 192.168.3.65 255.255.255.255 object
-group network VideoConfDev_ref network-object
192.168.1.20 255.255.255.255 network-object
192.168.3.65 255.255.255.255 object-group
service Video-Services tcp port-object eq
h323 access-list outside_access_in remark Video
Conference Rules access-list outside_access_in
permit tcp any object-group VideoConfDev_ref
object-group Video-Services