Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 2 subscribers
  • Views 3175 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

video conference behind astaro

mourik_jan
Hi all,

We have bought lifesize team video conference equipment, and this will be delivered next week.

I have started thinking about how to connect it in the network here, and all of a sudden I realise that in order to receive calls, the lifesize needs to be reachable from outside, right?

I was actually planning to connect the lifesize to a dmz zone, which is NAT-ed to outside. But am now thinking that this will never work?

How do you guys here solve this problem? Suggestions are very welcome... :-)

Regards,
mj


This thread was automatically locked due to age.
Parents
  • 0
    well...

    because i was thinking that, since my DMZ is a private range, NAT-ed, these ip addresses will never be directly reachable from the outside...?

    So I can only call out, but calls in might be problematic?

    Or am I wrong?
Reply
  • 0
    well...

    because i was thinking that, since my DMZ is a private range, NAT-ed, these ip addresses will never be directly reachable from the outside...?

    So I can only call out, but calls in might be problematic?

    Or am I wrong?
Children
  • 0 in reply to mourik_jan
    Can't you just use an additional address on the External interface and DNAT it to the device?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Sorry for the slow reply.

    You mean: purchase an extra seperate public ip address? Or can I treat one particular ip address from my public range (/24) this way?
  • 0 in reply to mourik_jan
    I have now created a DNAT rule, like this:

    Traffic selector: Any source → Any service → video_conference_ip_public
    Destination translation: video_conference_ip_private
    Automatic packet filter rule: not checked (don't know what it means)

    This is what you mean, and this should work?
Cookie Information Banner