d-link

Video Conferencing Equipment and Services
[ Home ] [ Contents ] [ Catalog ] [ Customer Service ] [ Search ]

How is a firewall configured for d-Link H.323 video?

d-Link DVC-1000 Ports:

Most D-Link routers now support a Virtual Server feature that allows easy one-click configuration for the d-link videoconferencing system (the DVC-1000) and that works well for other video end-points also. You will not need to manually configure the ports. Upgrading your router to the latest firmware might be necessary to support this feature. If you have other routers or you are having difficulty with the DVC-1000, please read the user manual information to learn how to open ports on routers (port forwarding).

The port 1720 (TCP) and ports 15328-15333 (TCP and UDP) need to be forwarded to your video endpoint.

For the d-link routers, here are the configuration steps:

Step 1 Open a web browser such as Internet Explorer and enter the IP address of your router (e.g. 192.168.0.1). Enter username (e.g. a default is admin) and your password (e.g. a default is blank).

Step 2 One Click Virtual Server setup. Click on the Advanced tab and then the Virtual Server button on the left. This brings up the Virtual Server window.

Look in the Virtual Servers List for an entry called DVC-1000 or i2eye. Click on the edit icon (a page and pencil) to highlight it in yellow. At the top of the page then enter the private IP address for the video conferencing endpoint (e.g. 192.168.0.116). Under Protocol, select TCP. In the private port box, enter 1720. In the public port box, enter 1720. Click Always or set a schedule. Click Apply and then Continue.

This step assigns port 1720 to the video endpoint.

Click on the Advanced tab and then the Firewall button on the left. Now you should see the correct d-link ports assigned to the video endpoint (i.e. 1720 (TCP) and ports 15328-15333 (TCP and UDP) assigned to the endpoint 192.168.0.116).

With just this setting, you should be able to make an outbound call and receive an inbound call with the d-link i2eye.

Notes:

If the local private IP address for the video endpoint changes (because of a network change or because DHCP assigns a new IP address), then you need to modify the port forwarding by repeating step 1 and 2 again.
if the DMZ is enabled and assigned to another port different than the video end-point, then black/blue screen results on the local endpoint. Solution: disable the DMZ feature or assign it to the DVC-1000 video end-point. Restart the DVC-1000.
NetMeeting users: According to d-link, NetMeeting and the H.323 cannot co-exist behind the same router simultaneously? If you want to use NetMeeting AND the H.323 behind the same router at different times, skip to step 3. You will need to disable the NetMeeting entry while you are using the H.323 and disable the H.323 entries (created in steps 5 and 6) while using NetMeeting. Look in the Virtual Servers List for an entry called NetMeeting. Click on the trash can to the right and delete this entry. If you do not have this entry, continue to the next step.

You can manually create the firewall rules for the ViaVideo, ViewStations, etc. Click on the Advanced tab and then the Firewall button on the left. For Step 3.1 and 3.2 below, you only need to create the port forwarding rules manually if the one-button Virtual Server step described in Step 2 is not available.

3.1 Port forwarding for all endpoints for H.323 call setup - port 1720. Click the Enabled radio button. Enter a name (H.323 Call Setup or i2eye) Click Allow. Next to Source, select WAN under interface. In the IP range start box, enter an *. Leave the IP range end box empty. Next to Destination, select LAN under interface. Enter the IP address of the DVC-1000 in the IP range start box. Leave the IP range end box empty. Under Protocol, select TCP. In the port range boxes, enter 1720 in the first box and leave the second box blank. Click Always or set a schedule. Click Apply and then Continue. Port forwarding for all endpoints for H.323 call setup - port 1720.

3.2 Create a firewall rule for the d-link DVC-1000 audio, call, video and data. Click Enabled. Enter a name (i2eye_video). Click Allow. Next to Source, select WAN under interface. In the IP range start box, enter an *. Leave the IP range end box empty. Next to Destination, select LAN under interface. Enter the IP address of the DVC-1000 in the IP range start box. Leave the IP range end box empty. Under Protocol, select *. In the port range boxes, enter 15328 in the first box and then 15333 in the second box. (The boxes are not big enough to display the whole number but as long as you typed carefully they will be in there). Click Always or set a schedule. Click Apply and then Continue.

04/01/2005