Dlink VTA Works Intermittantly Unless Setup With DMZ

Posts: 5 · New Forum Member Joined: Jun 24, 2006 Posts: 5

shamoo wrote:

aoverify wrote:

Nothing is invulnerable. If and item can be built it can be reverse-engineered, hacked, etc.

This is true. If you're worried.....

Vonage uses SIP ports 5060 and 5061.
TFTP ports (for downloading configuration files) 69, with failovers of 23 and 2400.
Port 80 (standard HTTP) for firmware updates
Port 53 for DNS
And RTP ports 10000-20000 for voice traffic.

I'll give it a shot when I get a chance and let everyone know how it works. Commonly used ports like 80 and 23 worry me the most, so I might not forward those and see what happens. All in all, I suppose it's better to have 10K ports forwarded to the VTA rather than 65535. Smile

Posts: 30 · Vonage Forum Junior Joined: Jul 03, 2006 Posts: 30

aoverify wrote:

I'll give it a shot when I get a chance and let everyone know how it works. Commonly used ports like 80 and 23 worry me the most, so I might not forward those and see what happens. All in all, I suppose it's better to have 10K ports forwarded to the VTA rather than 65535. Smile

You don't ABSOLUTELY need to forward those ports. However, you would need to do it once just to get the device registered with the Vonage proxy servers. Once that's complete, you can block those ports.

HOWEVER, if you ever call Vonage with a problem and they need to make a change. They will have to reboot the device so it can take the change the agent made. If port 69 fails and it tries to go to 23, which will also be blocked, that change will never hit your device. Thus, it won't take the change on the agent's side. That may cause problems in the future. Just keep it in mind on the side. Cool

Posts: 5 · New Forum Member Joined: Jul 04, 2006 Posts: 5

Steve48 wrote:

aoverify wrote:

Does anyone have an idea what ports need to be forwarded to the VTA?

I've tried 2 different VTAs behind several different routers, and the VTA never works for more than 12 hours or so unless it's setup to DMZ.

Vonage support can only tell me to leave the VTA in DMZ, which is not acceptable to me.

I don't blame you for not finding that acceptable, because it shouldn't be necessary and you shouldn't have to forward ports as long as they're left open. Could it be a firewall issue?

BTW Hi im new...

You can only really leave ports open on a computer itself most routers need to forward ports. If an incoming packet comes in and sees router with "open ports" it will not know which device/computer to send it to.

Therefore useless packets sent to say... 10000-20000 (10050-10150 now) range wont be sent to every device connected to the router.

Posts: 1715 · Posted: Wed Jul 05, 2006 3:39 pm Post subject:

I think a more important question is... What brand/model router are you currently using which has problems with the Vonage adapter, and do you have the latest firmware for it? I've seen quite a few consumer-grade routers be absolute lemons for the first 2-3 firmware versions. Case in point: the SRX Linksys router was terrible for Voip until they came out with a firmware update which fixed the packet routing issues on it.