Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Gateway to Gateway H.323 with VPN

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> H.323 Gatekeeper >> Gateway to Gateway H.323 with VPN Page: [1]
Login
Message << Older Topic   Newer Topic >>
Gateway to Gateway H.323 with VPN - 22.Mar.2002 7:29:00 PM   
barbetman

 

Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
Our company has setup a VPN to a remote office. Both sides use ISA Server for the VPN connection. We also installed the H.323 Gatekeeper on both machines to create a gateway to gateway connection between the two offices. The VPN works fine, but whenever we try to call the remote office they can hear us but we can't hear them. The only way to get this to work to re-route traffic from the ISA Server to our other firewall, and connect directly to the remote ISA Server as our Gateway server from NetMeeting. How do I get this to work using the Phone Number rules for a Gateway to Gateway setup? BTY clients on both ends are SecureNAT. Thanks!
Post #: 1
RE: Gateway to Gateway H.323 with VPN - 23.Mar.2002 5:33:00 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

Interesting problem! You should be able to leverage the VPN by creating routing rules for gatekeepers that are on the *internal* network. Since the gateway to gateway setup creates a *single logical network* (albeit segmented), you should treat both the gatekeepers are internal.

So, people that register at one gatekeeper should use one prefix (eg. 111) and people that register with another gatekeeper should use another prefix (eg. 222). Create a Destination and use a Phone Number Routing Rule to forward packets to the correct gatekeeper depending on the phone number.

HTH<
Tom

(in reply to barbetman)
Post #: 2
RE: Gateway to Gateway H.323 with VPN - 4.Apr.2002 8:37:00 PM   
barbetman

 

Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
I found that the H.323 Gateway to Gateway connection would only work if I disabled the VPN connection. I am still trying to figure this one out.

For some odd reason while the VPN is up, we can call them and they can hear us but we can't hear them. Also while the VPN is up they can't call us at all.

Please help...

(in reply to barbetman)
Post #: 3
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 8:26:00 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

OK, I think I missed an important point. I figured you had your H.323 gatekeepers on the internal network, and not on the edge. That is to say, I didn't realize that the H.323 Gatekeepers were also your VPN Servers.

This could cause some problems, since the VPN creates a single logical network. In that case, since all the machines are located on a single logical network, I would have all of them register with the same gatekeeper, if you want them to communicate with other internal network clients.

HTH,
Tom

(in reply to barbetman)
Post #: 4
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 4:21:00 PM   
barbetman

 

Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
Thanks Tom for the reply. This makes perfect sense. However, do you think a Gateway to Gateway H.323 connection would be better than having one office use the other offices gatekeeper which is an ocean away? I just thought that the Gateway to Gateway H.323 solution would have better sound quality than havingboth offices use the same gatekeeper. The only reason why I ask is because we are experiencing some horrible sound quality issues with NetMeeting and H.323. What do you think? I don't think it is our machines because we have exhaustive troubleshooting on the desktop side. Thank you for all of your help Tom, I think this message board really helps a lot of people including myself!

(in reply to barbetman)
Post #: 5
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 7:17:00 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

I agree! If your sites are not that good, the gateway to gateway solution would be best. But I have not worked out the issues regarding when the VPN link it up.

Thanks!

Tom

(in reply to barbetman)
Post #: 6
RE: Gateway to Gateway H.323 with VPN - 5.Apr.2002 9:52:00 PM   
barbetman

 

Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
OK Tom, let me know if you find anything out. Otherwise, we would need a seperate ISA box for VPN/Firewall, and another one for an H.323 gateway on each end. This would be an expensive proposal, and a little wasteful I think. Thanks Tom!

(in reply to barbetman)
Post #: 7
RE: Gateway to Gateway H.323 with VPN - 9.Apr.2002 6:08:00 AM   
rajkan_19

 

Posts: 34
Joined: 31.Jan.2002
From: madurai,tamilnadu,india
Status: offline
Hii BArbetman

Can u plz help me out in H323 gatekeeper in a back to back ISA environment.

We had set up gatekkepr and configured all the options. It works fine from external to a machine behind ISA.But when we connect both machines behind ISa it wont work.The call is never accepted.

Plz tell what should be done????.Our VPN and gatekeepr are on one.plz help

regds
rajiv

(in reply to barbetman)
Post #: 8
RE: Gateway to Gateway H.323 with VPN - 11.Apr.2002 9:41:00 PM   
barbetman

 

Posts: 9
Joined: 15.Feb.2002
From: Aurora, IL
Status: offline
Well, good luck if your VPN and Gateway are on one machine. I still can't get this config to work. The only way I can get a Gateway to Gateway H.323 connection to work right is if I disable the VPN. I am about ready to call it quits and phone MS PSS.

(in reply to barbetman)
Post #: 9

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> H.323 Gatekeeper >> Gateway to Gateway H.323 with VPN Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts