Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Gateway to Gateway H.323 with VPN
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login | |
|
Gateway to Gateway H.323 with VPN - 22.Mar.2002 7:29:00 PM
|
|
|
barbetman
Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
|
Our company has setup a VPN to a remote office. Both sides use ISA Server for the VPN connection. We also installed the H.323 Gatekeeper on both machines to create a gateway to gateway connection between the two offices. The VPN works fine, but whenever we try to call the remote office they can hear us but we can't hear them. The only way to get this to work to re-route traffic from the ISA Server to our other firewall, and connect directly to the remote ISA Server as our Gateway server from NetMeeting. How do I get this to work using the Phone Number rules for a Gateway to Gateway setup? BTY clients on both ends are SecureNAT. Thanks!
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 23.Mar.2002 5:33:00 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi B,
Interesting problem! You should be able to leverage the VPN by creating routing rules for gatekeepers that are on the *internal* network. Since the gateway to gateway setup creates a *single logical network* (albeit segmented), you should treat both the gatekeepers are internal.
So, people that register at one gatekeeper should use one prefix (eg. 111) and people that register with another gatekeeper should use another prefix (eg. 222). Create a Destination and use a Phone Number Routing Rule to forward packets to the correct gatekeeper depending on the phone number.
HTH< Tom
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 4.Apr.2002 8:37:00 PM
|
|
|
barbetman
Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
|
I found that the H.323 Gateway to Gateway connection would only work if I disabled the VPN connection. I am still trying to figure this one out.
For some odd reason while the VPN is up, we can call them and they can hear us but we can't hear them. Also while the VPN is up they can't call us at all.
Please help...
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 8:26:00 AM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi B,
OK, I think I missed an important point. I figured you had your H.323 gatekeepers on the internal network, and not on the edge. That is to say, I didn't realize that the H.323 Gatekeepers were also your VPN Servers.
This could cause some problems, since the VPN creates a single logical network. In that case, since all the machines are located on a single logical network, I would have all of them register with the same gatekeeper, if you want them to communicate with other internal network clients.
HTH, Tom
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 4:21:00 PM
|
|
|
barbetman
Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
|
Thanks Tom for the reply. This makes perfect sense. However, do you think a Gateway to Gateway H.323 connection would be better than having one office use the other offices gatekeeper which is an ocean away? I just thought that the Gateway to Gateway H.323 solution would have better sound quality than havingboth offices use the same gatekeeper. The only reason why I ask is because we are experiencing some horrible sound quality issues with NetMeeting and H.323. What do you think? I don't think it is our machines because we have exhaustive troubleshooting on the desktop side. Thank you for all of your help Tom, I think this message board really helps a lot of people including myself!
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 7:17:00 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi B,
I agree! If your sites are not that good, the gateway to gateway solution would be best. But I have not worked out the issues regarding when the VPN link it up.
Thanks!
Tom
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 9:52:00 PM
|
|
|
barbetman
Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
|
OK Tom, let me know if you find anything out. Otherwise, we would need a seperate ISA box for VPN/Firewall, and another one for an H.323 gateway on each end. This would be an expensive proposal, and a little wasteful I think. Thanks Tom!
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 9.Apr.2002 6:08:00 AM
|
|
|
rajkan_19
Posts: 34
Joined: 31.Jan.2002
From: madurai,tamilnadu,india
Status: offline
|
Hii BArbetman
Can u plz help me out in H323 gatekeeper in a back to back ISA environment.
We had set up gatekkepr and configured all the options. It works fine from external to a machine behind ISA.But when we connect both machines behind ISa it wont work.The call is never accepted.
Plz tell what should be done????.Our VPN and gatekeepr are on one.plz help
regds rajiv
|
|
|
|
RE: Gateway to Gateway H.323 with VPN - 11.Apr.2002 9:41:00 PM
|
|
|
barbetman
Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
|
Well, good luck if your VPN and Gateway are on one machine. I still can't get this config to work. The only way I can get a Gateway to Gateway H.323 connection to work right is if I disable the VPN. I am about ready to call it quits and phone MS PSS.
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|