3COM Firewall Port for Vonage Linksys Adapter

Posts: 3 · New Forum Member Joined: Nov 13, 2006 Posts: 3

I have a small 3COM Firewall (3CR870-95-US) that comes in handy to occasionally block my kids from accessing the Internet when they should be doing their homework.

However, I need to insert a policy allowing my Vonage-supplied Linksys router to keep working when the rest of the network is locked down. As it stands now, when I block Internet traffic - everything is blocked except for the few PCs for which I have hard-coded 'exception rules'.

Is there a standard port or port range that the Linksys routers operate on that I can enter into my firewall settings so the phones will continue to connect regardless of the locked/unlocked state of the network?

Posts: 533

Rolandws wrote:

I have a small 3COM Firewall (3CR870-95-US) that comes in handy to occasionally block my kids from accessing the Internet when they should be doing their homework.

However, I need to insert a policy allowing my Vonage-supplied Linksys router to keep working when the rest of the network is locked down. As it stands now, when I block Internet traffic - everything is blocked except for the few PCs for which I have hard-coded 'exception rules'.

Is there a standard port or port range that the Linksys routers operate on that I can enter into my firewall settings so the phones will continue to connect regardless of the locked/unlocked state of the network?

From Vonage's website, outbound only:

DNS: Port 53 UDP

TFTP: Port 21, 69, 2400 UDP

HTTP: Port 80 UDP

NTP: Port 123 UDP

SIP: Port 5061 UDP (used for older Vonage devices provisioned before 2005)

RTP (Voice) Traffic: Ports 10000-20000 UDP.

Posts: 3 · New Forum Member Joined: Nov 13, 2006 Posts: 3

The exceptions GUI that I can use to enter ports that are to be kept open is very limited, so I don't have places to enter all of the data you specified. Here are my choices:

Trigger Port: (I can enter a single port or a range)

Specify Protocol: (must choose either TCP or UDP)

Multiple Hosts Allowed: (default is an unchecked checkbox)

Session Chaining: (dropdown with these options...)
- disabled
- on TCP Sessions Only
- on both TCP and UDP Sessions

Any advice you can provide to work within those settings would be appreciated.

Posts: 533 · Posted: Mon Nov 13, 2006 4:10 pm Post subject: Re: Need to narrow it down a bit

Can you just add your Vonage router's IP address to your existing policy's exceptions and allow everything outbound from that device?

Posts: 3 · New Forum Member Joined: Nov 13, 2006 Posts: 3

I'm not certain how to ascertain the router's IP address - it is issued by DHCP from the 3COM firewall and unlike some DHCP-issuing routers, it doesn't maintain a list of active/issued DHCP licenses. The one time I connected my laptop directly to the Vonage/Linksys router was when the settings mysteriously vanished and I had to reconfig the unit while working with Vonage support in India. I don't recall the router's login at this point.

Posts: 533

Rolandws wrote:

I'm not certain how to ascertain the router's IP address - it is issued by DHCP from the 3COM firewall and unlike some DHCP-issuing routers, it doesn't maintain a list of active/issued DHCP licenses. The one time I connected my laptop directly to the Vonage/Linksys router was when the settings mysteriously vanished and I had to reconfig the unit while working with Vonage support in India. I don't recall the router's login at this point.

Hmm, well, if you can get back on the Vonage router's via it's web interface, set it up to use a static address instead of using DHCP.