Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


sema4

5 posts

Wannabe Geek


#23483 30-Jun-2008 18:52
Send private message


Hi All

We have the following setup

Internet <--> AM300 <--> SPA2102 <--> Linux firewall

I'm having difficulty getting all of the ports I need forwarded through to the Linux firewall

The AM300 is using the SPA2102 as the default inbound target using the DMZ settings for most ports and specific forwarding for openVPN and the pptp port

I can't get all of the ports forwarded through the SPA2102.

If I use port forwarding on the SPA2102, I'm not getting everything - eg I can't get inbound 80 and 443 forwarding to the firewall

If I turn on the DMZ on the SPA2102, the phone cuts off :-) - which is I presume due to the VFX ports not being protected.

So - the question - if I am to use DMZ, what ports need protecting for the VFX service

Thanks

Create new topic
phindmarsh
117 posts

Master Geek
+1 received by user: 1


  #141737 30-Jun-2008 23:31
Send private message

you may be able to solve at least one of your problems by turning your am300 in to half-bridge mode. This will effectively make the am300 transparent on your network, giving the spa2101 your wan ip address etc.

I have a win2k3 server that I use for a few things, and my am300 is in half-bridge mode and i dont have to forward any ports, and my VFX is connected after my server box ie internet <-> am300 <-> win2k3 server <-> pap2t etc etc

maybe??



sema4

5 posts

Wannabe Geek


  #141749 1-Jul-2008 00:08
Send private message

Thanks

May need to do that although I need to minimise the angst - WAF is a bit low after the first SPA2102 decided to refuse admin connections after a full reset :-(

I'm keen to ensure that the QOS kicks in on the SPA2102 - we have a ... fairly active network here - 5 teens / youn adults plus I do a fair amount of remote work :-(

Because everything is the wrong side of the server, I can't see what the traffic is doing - but I assume that VFX is using the standard SIP ports - 5060 +/-  ???


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.