Subject: RE: (NAT) H.323

From: "Puthenkulam, Jose P" <[email-masked]>
Date: Thu, 17 Jun 1999 15:45:30 -0700

Srikanth,

I would suggest a application level proxy as it would be easier to
implement in a scalable fashion. Most network layer implementations
today do not scale well when the number of simultaneous calls increase.
Also in addition to H.323 call setup procedures you will have deal
with the RTP packets which also need address translation.

regards,
jose

-----Original Message-----
From: Srinivasa Rao Addepalli [mailto:[email-masked]]
Sent: Thursday, June 17, 1999 3:32 PM
To: Srikanth Nayani
Cc: Puthenkulam, Jose P; [email-masked]
Subject: Re: (NAT) H.323

Srikanth,
   You can do it eitherways, implement it in network layer(stateful
inspection)
   or write
   an application proxy.

   Application proxy is easier to develop though as this requires
   intrepretation of audio call control and H.323 Call setup protocols
   to identify the port. Disadvantage with this approach is that performance
   may be less than the implementing in network layer.

   Hybrid approach may be the best. That is, application proxy
   is active until extracting the port number and then this can be
   suspended and move the control to network layer.

Regards
Srini

Srikanth Nayani wrote:

> Mr.Jose,
>     Instead of implimenting a full blown H.323 proxy on the firewall can I
> do this:
>
>  Have a statefull inspection of the call setup connections, inspect their
> payloads and trasnslate the addresses(IP + port) inside .
>         To what extent would netmeeting work with such an arrangement for
the
> internal users.
>
> Regards,
> Srikanth.
>
> At 01:54 PM 6/17/99 -0700, you wrote:
> >You will need a H.323 proxy running on the NAT/Firewall to allow
Netmeeting
> >to work
> >for the internal users.
> >
> >jose
> >
> >++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> >Jose Puthenkulam
> >Sr. Software Engineer, Broadband & IP Telephony, Intel Architecture Labs
> >[email-masked]
> >++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> >
> >
> >
> >
> >-----Original Message-----
> >From: Srikanth Nayani [mailto:[email-masked]]
> >Sent: Thursday, June 17, 1999 1:32 PM
> >To: [email-masked]
> >Subject: (NAT) H.323
> >
> >
> >
> > Hi,
> >   How far can Netmeeting be supported for internal users in an
environment
> >where a Firewall(With NAT : Ports also) protects them.
> >
> >
> >Regards,
> >Srikanth.
> >
> >-
> >To unsubscribe, email [email-masked]' with
> >'unsubscribe nat' in the body of the message.
> >-
> >To unsubscribe, email [email-masked]' with
> >'unsubscribe nat' in the body of the message.
> >
>
> -
> To unsubscribe, email [email-masked]' with
> 'unsubscribe nat' in the body of the message.

-
To unsubscribe, email [email-masked]' with
'unsubscribe nat' in the body of the message.