Welcome to ISAserver.org

Polycom Packet Loss

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Polycom Packet Loss

Page: [1]

Message

<< Older Topic Newer Topic >>

Polycom Packet Loss - 15.Aug.2008 5:55:57 PM

tldees

Posts: 8
Joined: 3.Jun.2008
Status: offline

We've just recently put our ISA in production. We have a number of polycoms internally and in a dmz network. All polycoms work as far as receiving and sending audo/video, but we get a number of packets loss. Over ten minutes time span we lose about 200-300 video packets and around 50-60 audio packets. I've watched the logs and found nothing being blocked coming to and from the polycom systems. I've disabled the flooding, and DNS protection hoping that it might give me some clue as to why we are losing so many packets.

Prior to setting up ISA, we had a Cisco PIX setup and the polycoms rarely if ever lost packets.

Any suggestions as to how I can resolve this issue?

Post #: 1

Featured Links*

RE: Polycom Packet Loss - 18.Aug.2008 11:24:15 AM

tldees

Posts: 8
Joined: 3.Jun.2008
Status: offline

I was doing some more troubleshooting and ran Wireshark. Wireshark is finding ICMP errors relating to Port unreachable and Protocol unreachable errors. I�ve added a rule to make it completely open in both directions, but still getting these ICMP errors. Anyone have any ideas what could be causing this problem and how to resolve it?

(in reply to tldees)

Post #: 2

RE: Polycom Packet Loss - 18.Aug.2008 12:06:14 PM

pwindell

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Polycom devices are duel homed and are their own firewall with their own firewall abilities. Put them on the network edge with their own public IP# and do not run them through the ISA.

If you can't do that, take the old PIX and place it side-by-side with the ISA so it operated independelty and run the Ploycom boxes through it.

Port unreachable and Protocol unreachable errors. I�ve added a rule to make it completely open in both directions, but still getting these ICMP errors. Anyone have any ideas what could be causing this problem and how to resolve it?

Get rid of that. Particularly with it "both ways",....you can not go backwards against the NAT Process.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to tldees)

Post #: 3

RE: Polycom Packet Loss - 18.Aug.2008 1:40:48 PM

tldees

Posts: 8
Joined: 3.Jun.2008
Status: offline

Thanks for the reply.

The network in which I added an access rule to allow traffic to go in both direction isn't NATed.

I would actually preferred to move the Polycom infront of the ISA server, but it isn't an option for all the polycoms since some are in other buildings. Reading up on the error is showing that the ICMP errors is relating to the fact that the process isn't being associated with the port. All ICMP errors are coming from the outside polycom.

(in reply to pwindell)

Post #: 4

RE: Polycom Packet Loss - 18.Aug.2008 2:53:15 PM

pwindell

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Ok,..well that wasn't the only thing I suggested.

If you still have the old PIX set it up with that like I said.

Another option is to have a separate Internet Connection just for these devices. Put a cheap Linksys box or something on the line and run them through it. You need a simple NAT Box that does not do much except pass packets quickly.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to tldees)

Post #: 5