• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Help -- Gatekeeper not working

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> H.323 Gatekeeper >> Help -- Gatekeeper not working Page: [1]
Login
Message << Older Topic   Newer Topic >>
Help -- Gatekeeper not working - 22.Mar.2002 1:23:00 AM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
Ok. I've read the articles here on isaserver.org. I've been through probably the entire msdn library. I have configured our ISA server's H.323 Gatekeeper following the instructions given, step by step. I'm still missing something. The H.323 protocol rules are set, the application rules are set, the Gatekeeper is installed, the internal clients can register with the gatekeeper and make outgoing connections, but external clients cannot connect. Can someone help me? Is there some trick that I don't know about?
Post #: 1
RE: Help -- Gatekeeper not working - 22.Mar.2002 4:18:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi K,

Could be a permission problem. Did you see my article on "adventures with the H.323 gatekeeper"? I had a big problem until I turned off authentication and just recreated an "Allow all" rule. However, I believe if you create an H.323 Protocol Rule that allows anonymous access, that will work too.

HTH,
Tom

(in reply to kvaden)
Post #: 2
RE: Help -- Gatekeeper not working - 22.Mar.2002 5:53:00 PM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
Yes, actually, I have read your article. It was helpful, but it didn't solve my problem. I have the H.323 Protocol permissions set to allow everything. What's happening is when an external client attempts a connection to an internal client, the internal client gets the accept/reject ringing dialog, and when the user clicks "Accept," NetMeeting flashes with the two users, then drops the call, notifying the external client who placed the call the the user "has not accepted" the call.

Are there other protocols that need to be allowed? It seems like the call is being set up, then the media streams can't get through, and the call is torn down, all in a matter of seconds.

Or do the internal clients need to be SecureNAT? Currently, they are running the Firewall client, but we also had problems configuring the NAT.

Any help would be GREATLY apprecieated.

Thanks.

(in reply to kvaden)
Post #: 3
RE: Help -- Gatekeeper not working - 23.Mar.2002 5:42:00 PM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
Ok. Here's what's happening.
External client with our ISA server's external IP as its gateway tries to connect to an internal client with our ISA server's internal IP as its gatekeeper.
Netmeeting rings, ISA server shows connection in the active connections.
Internal client selects "Accept" and for an instant, both clients show in conference on both machines. Then the call is dropped.
Alerts show "IP Packet Dropped" at exactly the time the call was dropped.
Help files say this error is because a packet had been blocked by the configuration.

IP Packet filtering is configured to allow everything through.

H.323 Protocol filter is configured to allow any client all access.

H.323 Application filter is configured to allow everything.

So, in short, The call seems to get through, but once the call is set up, something is blocking the stream from getting through.

If anyone has any suggestions...

Thanks in advance.

(in reply to kvaden)
Post #: 4
RE: Help -- Gatekeeper not working - 23.Mar.2002 8:22:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi kvaden,

Those are the exact same symptoms I had! What I did was create an "allow all" protocol rule for the NetMeeting client behind the ISA Server, and that seemed to get it to work. I don't recall if I had to create an "allow all" Site and Content Rule as well, though.

The client was both a Firewall and SecureNAT client. I wonder if the Firewall client only configuration is causing the problem for you?

HTH,
Tom

(in reply to kvaden)
Post #: 5
RE: Help -- Gatekeeper not working - 25.Mar.2002 6:16:00 PM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
I created a "Test" Protocol rule to allow all requests of any protocol from any client through. Same result.

(in reply to kvaden)
Post #: 6
RE: Help -- Gatekeeper not working - 25.Mar.2002 7:52:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi K,

How about Site and Content Rules?

Thanks!

Tom

(in reply to kvaden)
Post #: 7
RE: Help -- Gatekeeper not working - 25.Mar.2002 8:38:00 PM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
Nope, that didn't work, either.

By the way, I really appreciate all the help.

Thanks,

kvaden

(in reply to kvaden)
Post #: 8
RE: Help -- Gatekeeper not working - 26.Mar.2002 12:03:00 AM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
Ok. Further exploits with NetMeeting and ISA:

I went back and reconfigured everything, step by step, the way the articles here at isaserver.org describe, and tried to connect from an external client to the internal client. The internal client flashed the connection, the dropped it. The external client showed success. I tried an experiment: with the external client showing success, I clicked the 'dial' button again. It connected! Obviously there's still something wrong here, and I need to figure out what it is. But it is connecting with this little slight-of-hand.

Any ideas?

(in reply to kvaden)
Post #: 9
RE: Help -- Gatekeeper not working - 26.Mar.2002 6:38:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi K,

Great! Now why would it take a second attempt?

What type of connection are you using on the external interface?

What type of ISA Server client type are you using?

Are the clients registering OK with the Gatekeeper?

Are you using phone numbers to call the clients?

Thanks!

Tom

(in reply to kvaden)
Post #: 10
RE: Help -- Gatekeeper not working - 26.Mar.2002 4:37:00 PM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
>What type of connection are you using on the >external interface?

Cable modem.

>What type of ISA Server client type are you >using?

Firewall clients only.

>Are the clients registering OK with the >Gatekeeper?

Yes.

>Are you using phone numbers to call the clients?

Yes.

It actually takes 3 attempts... the first returns a message that the "Person you are trying to call is not able to use netmeeting," the second shows a connection on the external client and drops the connection on the internal client, and the third connects, showing 3 users in the meeting on the external client and 2 in the internal client. Both machines are running XP Pro, does that make a difference?

(in reply to kvaden)
Post #: 11
RE: Help -- Gatekeeper not working - 26.Mar.2002 8:27:00 PM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
Ok. An update. Data-only (requiring security) calls get through. This will server the purposes my company NEEDS, though not what the powers that be WANT. So, here we go. I think that there must be another protocol that needs to be enabled/allowed for the audio/video conferencing abilities. How do I go about this?

(in reply to kvaden)
Post #: 12
RE: Help -- Gatekeeper not working - 27.Mar.2002 4:29:00 AM   
kvaden

 

Posts: 9
Joined: 22.Mar.2002
Status: offline
IT WORKS! Not a clue how, but there you go. It seems that for some reason, the filters for the HTTP were blocking the media streams. I just started messing with EVERYTHING that was configured, and changing things one by one to allow for everything, and I came across one of the Site filters that was set to all authenticated users, and when I set it to Any request, it worked. I must need to study the H.323 protocol more, I don't remember anything about HTTP being needed for setup.

Anyway, Thanks for all your help. I greatly appreciate it.

k.

(in reply to kvaden)
Post #: 13
RE: Help -- Gatekeeper not working - 27.Mar.2002 6:45:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi K,

I knew it must have been an authentication issue! It had to be either a Protocol Rule or a Site and Content Rule that required authentication that was causing the problem.

Remember that Site rules apply to ALL Protocols, not just HTTP sites. The Content Rules apply only to HTTP requests. Its sort of tricky that they combine Site and Content Rules into one interface, because Content is only for HTTP and tunneled FTP, but sites are for ALL protocols.

Good to hear you got it working!

Tom

(in reply to kvaden)
Post #: 14

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> H.323 Gatekeeper >> Help -- Gatekeeper not working Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts