Configure ATA 186 behind an ISA 2000 server

Guest

Hi All,

thanks a lot for the information on this thread. I am still looking for ways to open up the UDP ports from 10-20K on the ISA. From what I believe, these ports should be opened up as primary, so having one entry for each in the protocol rules and server publishing rules will leave lead to 10K + 20K entires.

Does anybody know if these ports can be opened up with a single entry in the ISA cofiguration.

thanks
sm
Rolling Eyes

Guest

Could the Vonage guys be more specific on the 10-20K port range:

What is the actual UDP port range used for 10-20K

What is primary and what is secondary. It is possible with ISA to open one primary and a range of UDP for secondary ports for forwarding to the vt1000v.

However, it is almost impossible to open up 10-20k UDP ports numbers as primary and this does not make sense. Here is a url from the isaserver.org site that they want the Vonage technical folks to look at:

If Vonage is serious about this business, they should make their product work with some of the top routers (Cisco, Microsoft and the like).

http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=8;t=000334

Guest

Subject: Re: Server Publishing
From: "Nir Alony [MSFT]" <nira@online.microsoft.com> Sent: 11/27/2003 1:18:11 AM

UDP Port Forwarding:
Secondary connections are secondary within the IP "session": When a primary
connection is established, any secondary connections (within same protocol
definition of that primary) are enabled - yet only between the peers of that
primary connection.

Posts: 83 · Vonage Forum Senior Joined: Nov 16, 2003 Posts: 83

smarisetty wrote:

**snip**

If Vonage is serious about this business, they should make their product work with some of the top routers (Cisco, Microsoft and the like).

http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=8;t=000334

I'm a little confused by your statement. Every router in which I am familiar (Cisco, Zyxel, Sonicwall, D-Link, Linksys, 3Com, Cayman, etc., etc.) allow you to specify port ranges when you want to forward.

Guest

Hi Maniac8888,

Are you familiar with Microsoft Internet Security Acceleration Server (ISA). This firewall and router does allow for port forwarding, but as primary port (single) with a secondary range (many).

However, there is no provision today to forward a port range indiscriminately. Each port would needed to be configured individually, so will take about 10K entries to open up the range 10000-20000.

Hope this helps.

sm

Posts: 83 · Vonage Forum Senior Joined: Nov 16, 2003 Posts: 83

smarisetty wrote:

Hi Maniac8888,

Are you familiar with Microsoft Internet Security Acceleration Server (ISA). This firewall and router does allow for port forwarding, but as primary port (single) with a secondary range (many).

However, there is no provision today to forward a port range indiscriminately. Each port would needed to be configured individually, so will take about 10K entries to open up the range 10000-20000.

Hope this helps.

sm

Yikes! Who would want to do that (no one and that is the point of your post)? No, I am not particularly familiar with MS ISA. I'm not particularly a big fan of software based routers and firewalls but everyone has their own needs and requirements.

I would have to go back and look at my sniffer logs to see exactly which of the UDP ports are really being used. I can only assume (perhaps incorrectly) that Vongage wouldn't specify them if they weren't used. If I find anything out, I'll post.

Guest

Hi All/Anybody,

I spent lot of time and finally got an ISA setting to work. I am not sure how long this will work, but let me share the working configuration.

I have forwarded the ports as suggested above, except for the 10-20K. I am currently only forwarding 10K to 1.1K (about 1000 UDP ports). Assuming that this range will work.

I have put together a couple of VBScripts, which will automatically set up the ISA configuration for you. Make sure you disable the following in the ISA configuration. I am also posting a VBScript, which will restore the ISA settings back to original (undo the changes). Good luck and fun time:

Disable the following:
Access Policy/Protocol Rules/H.323
Access Policy/Protocol Rules/Messanger

Change the Internal/External IP address as per your system needs.
In the DHCP Configuration, reserve a fixed IP address of for vt1000v mac address as ex: 192.168.16.54

DISCLAIMER: Use at your own risk and is provided as a helper guide only. Feel free to modify/change/distribute it at will.

VBScript to forward ports:
*************** Begin Add***********
Sub vt1000vadd

'Enabling UDP ports for Vonage vt1000v ATA

Dim objFPC, objArray, objSPR, ObjPD, ojbPR, MyProtDef, MyProt, UdpCnt, UdpCntStart, UdpCntEnd, IntIp, ExtIp
Dim UdpCntStart1, UdpCntEnd1, UdpCntStart2, UdpCntEnd2, UdpCntStart3, UdpCntEnd3, UdpCnt1, UdpCnt2, UdpCnt3, myCnt
Const prxInbound = 0
Const prxOutbound = 1
Const prxSpecifiedProtocol = 1
Const prxFwSrvSvc = 0
Const prxAllServices = 2
Const prxTCP = 0
Const prxUDP = 1

'Initialize the Internal/External IP and UDP port begin and end range
IntIp="192.168.16.54"
ExtIp="xxx.xxx.xxx.xxx"

'Ports for RTP media streams-audio
UdpCntStart=10000
UdpCntEnd=11000

' Ports for ring control-Listner
UdpCntStart1=5060
UdpCntEnd1=5063

' Ports time
UdpCntStart2=123
UdpCntEnd2=123

' Ports for tftp
UdpCntStart3=69
UdpCntEnd3=69

'Create the root object
Set objFPC = CreateObject ("FPC.Root")

'Make sure it's current data
objFPC.Refresh

'init UDP counter
UdpCnt=UdpCntStart
UdpCnt1=UdpCntStart1
UdpCnt2=UdpCntStart2
UdpCnt3=UdpCntStart3

'Find where we live
Set objArray = objFPC.Arrays.GetContainingArray

'Create a new protocol rule now to cover all UDP outbound protocol defs
Set objPR=objArray.ArrayPolicy.ProtocolRules.Add("zVoipUdpEnable")
objPR.Description = "Enable UDP for vt1000v Voip"
objPR.Enabled=True
objPR.Action=fpcActionAllow
objPR.ProtocolSelectionMethod = prxSpecifiedProtocol
objPR.SetAppliesAlways

Do While Not (UdpCnt>UdpCntEnd)

'Create a protocol definition object

if not UdpCnt1>UdpCntEnd1 then
Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zUdpIn"&UdpCnt1, prxInbound, UdpCnt1)
objPD.Description = "UDP"&UdpCnt1&" forwarding to vt1000v"
'Save the changes
objPD.Save
'objPD.Refresh

Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zzUdpOut"&UdpCnt1, prxOutbound, UdpCnt1)
objPD.Description = "Outbound UDP "&UdpCnt1&" enabling for vt1000v"
'Save the changes
ObjPD.Save

end if

if not UdpCnt2>UdpCntEnd2 then
Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zUdpIn"&UdpCnt2, prxInbound, UdpCnt2)
objPD.Description = "UDP"&UdpCnt2&" forwarding to vt1000v"
'Save the changes
objPD.Save

Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zzUdpOut"&UdpCnt2, prxOutbound, UdpCnt2)
objPD.Description = "Outbound UDP "&UdpCnt2&" enabling for vt1000v"
'Save the changes
ObjPD.Save
end if

if not UdpCnt3>UdpCntEnd3 then
Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zUdpIn"&UdpCnt3, prxInbound, UdpCnt3)
objPD.Description = "UDP"&UdpCnt3&" forwarding to vt1000v"
'Save the changes
objPD.Save

Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zzUdpOut"&UdpCnt3, prxOutbound, UdpCnt3)
objPD.Description = "Outbound UDP "&UdpCnt3&" enabling for vt1000v"
'Save the changes
ObjPD.Save
end if

' protocol definition for RTP media range
Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zUdpIn"&UdpCnt, prxInbound, UdpCnt)
objPD.Description = "UDP"&UdpCnt&" forwarding to vt1000v"
'Save the changes
objPD.Save

Set objPD = objArray.PolicyElements.ProtocolDefinitions.AddUdp("zzUdpOut"&UdpCnt, prxOutbound, UdpCnt)
objPD.Description = "Outbound UDP "&UdpCnt&" enabling for vt1000v"
'Save the changes
ObjPD.Save

'MsgBox("Create & Config Server Publishing Rule " &"zUdpIn"&UdpCnt)
'Create Server Publishing Rule to forward the port
Set objSPR = objArray.Publishing.ServerPublishingRules.Add("zUdpFwd"&UdpCnt)

'Configure Server Publishing rule for RTP range
objSPR.Description = "UDP"&UdpCnt &" forwarding to vt1000v"
objSPR.InternalIp = IntIp
objSPR.ExternalIp = ExtIp
objSPR.SetProtocol("zUdpIn"&UdpCnt)
objSPR.Save

if not UdpCnt1>UdpCntEnd1 then
Set objSPR = objArray.Publishing.ServerPublishingRules.Add("zUdpFwd"&UdpCnt1)
objSPR.Description = "UDP"&UdpCnt1 &" forwarding to vt1000v"
objSPR.InternalIp = IntIp
objSPR.ExternalIp = ExtIp
objSPR.SetProtocol("zUdpIn"&UdpCnt1)
objSPR.Save
end if

if not UdpCnt2>UdpCntEnd2 then
Set objSPR = objArray.Publishing.ServerPublishingRules.Add("zUdpFwd"&UdpCnt2)
objSPR.Description = "UDP"&UdpCnt2 &" forwarding to vt1000v"
objSPR.InternalIp = IntIp
objSPR.ExternalIp = ExtIp
objSPR.SetProtocol("zUdpIn"&UdpCnt2)
objSPR.Save
end if

if not UdpCnt3>UdpCntEnd3 then
Set objSPR = objArray.Publishing.ServerPublishingRules.Add("zUdpFwd"&UdpCnt3)
objSPR.Description = "UDP"&UdpCnt3 &" forwarding to vt1000v"
objSPR.InternalIp = IntIp
objSPR.ExternalIp = ExtIp
objSPR.SetProtocol("zUdpIn"&UdpCnt3)
objSPR.Save
end if

' Add each of the protocol definitions to the Rule created above
if not UdpCnt1>UdpCntEnd1 then
objPR.SpecifiedProtocols.Add("zzUdpOut"&UdpCnt1)
objPR.Save
end if

if not UdpCnt2>UdpCntEnd2 then
objPR.SpecifiedProtocols.Add("zzUdpOut"&UdpCnt2)
objPR.Save
end if

if not UdpCnt3>UdpCntEnd3 then
objPR.SpecifiedProtocols.Add("zzUdpOut"&UdpCnt3)
objPR.Save
end if

' for RTP range
objPR.SpecifiedProtocols.Add("zzUdpOut"&UdpCnt)
objPR.Save

' Increment UDP counter
UdpCnt=UdpCnt+1
UdpCnt1=UdpCnt1+1
UdpCnt2=UdpCnt2+1
UdpCnt3=UdpCnt3+1
Loop
objSPR.Refresh
objPD.Refresh
objPR.Refresh
objFPC.Refresh
objArray.SendRestartNotification(prxFwSrvSvc)

' Finally done doing it all
MsgBox ("done add - restarting server")

' release the objects
Set objFPC = Nothing
Set objPD=Nothing
Set objSPR=Nothing
Set objArray=Nothing
Set objPR=Nothing

End Sub
vt1000vadd
************** End Add ************

*********** Begin Undo Script *******
Sub vt1000vdel

'Delete the Enabled UDP ports for Vonage vt1000v ATA

Dim objFPC, objArray, objSPR, ObjPD, ojbPR, MyProtDef, MyProt, UdpCnt, UdpCntStart, UdpCntEnd, IntIp, ExtIp
Dim UdpCntStart1, UdpCntEnd1, UdpCntStart2, UdpCntEnd2, UdpCntStart3, UdpCntEnd3, UdpCnt1, UdpCnt2, UdpCnt3
Const prxInbound = 0
Const prxOutbound = 1
Const prxSpecifiedProtocol = 1
Const prxFwSrvSvc=0
Const prxAllServices = 2
Const prxTCP = 0
Const prxUDP = 1

'Initialize the Internal/External IP and UDP port begin and end range
IntIp="192.168.16.54"
ExtIp="xxx.xxx.xxx.xxx"

'Ports for RTP media streams-audio
UdpCntStart=10000
UdpCntEnd=11000

' Ports for ring control-Listner
UdpCntStart1=5060
UdpCntEnd1=5063

' Ports time
UdpCntStart2=123
UdpCntEnd2=123

' Ports for tftp
UdpCntStart3=69
UdpCntEnd3=69

'Create the root object
Set objFPC = CreateObject ("FPC.Root")

'Make sure it's current data
objFPC.Refresh

'init UDP counter
UdpCnt=UdpCntStart
UdpCnt1=UdpCntStart1
UdpCnt2=UdpCntStart2
UdpCnt3=UdpCntStart3

'Find where we live
Set objArray = objFPC.Arrays.GetContainingArray
Set objPD = objArray.PolicyElements.ProtocolDefinitions
Set objSPR = objArray.Publishing.ServerPublishingRules
Set objPR=objArray.ArrayPolicy.ProtocolRules

'Delete Access Policy for Voip
objArray.ArrayPolicy.ProtocolRules.Remove("zVoipUdpEnable")
objPR.Save
' **** done delete of only one protocol rule

Do While Not (UdpCnt>UdpCntEnd)

'Delete Server Publishing Rule to forward the port
objArray.Publishing.ServerPublishingRules.Remove("zUdpFwd"&UdpCnt)
objSPR.Save

if not UdpCnt1>UdpCntEnd1 then
objArray.Publishing.ServerPublishingRules.Remove("zUdpFwd"&UdpCnt1)
objSPR.Save
end if

if not UdpCnt2>UdpCntEnd2 then
objArray.Publishing.ServerPublishingRules.Remove("zUdpFwd"&UdpCnt2)
objSPR.Save
end if

if not UdpCnt3>UdpCntEnd3 then
objArray.Publishing.ServerPublishingRules.Remove("zUdpFwd"&UdpCnt3)
objSPR.Save
end if
'**** done delete publishing rules

'Delete a protocol definition object for Inbound
objArray.PolicyElements.ProtocolDefinitions.Remove("zUdpIn"&UdpCnt)
objPD.Save

if not UdpCnt1>UdpCntEnd1 then
objArray.PolicyElements.ProtocolDefinitions.Remove("zUdpIn"&UdpCnt1)
objPD.Save
end if

if not UdpCnt2>UdpCntEnd2 then
objArray.PolicyElements.ProtocolDefinitions.Remove("zUdpIn"&UdpCnt2)
objPD.Save
end if

if not UdpCnt3>UdpCntEnd3 then
objArray.PolicyElements.ProtocolDefinitions.Remove("zUdpIn"&UdpCnt3)
objPD.Save
end if
' **** done delete inbound protocol definitions

'Delete a protocol definition object for Outbound
objArray.PolicyElements.ProtocolDefinitions.Remove("zzUdpOut"&UdpCnt)
ObjPD.Save

if not UdpCnt1>UdpCntEnd1 then
objArray.PolicyElements.ProtocolDefinitions.Remove("zzUdpOut"&UdpCnt1)
ObjPD.Save
end if

if not UdpCnt2>UdpCntEnd2 then
objArray.PolicyElements.ProtocolDefinitions.Remove("zzUdpOut"&UdpCnt2)
ObjPD.Save
end if

if not UdpCnt3>UdpCntEnd3 then
objArray.PolicyElements.ProtocolDefinitions.Remove("zzUdpOut"&UdpCnt3)
ObjPD.Save
end if
' **** done delete outbound protocol definitions

' Increment UDP counter
UdpCnt=UdpCnt+1
UdpCnt1=UdpCnt1+1
UdpCnt2=UdpCnt2+1
UdpCnt3=UdpCnt3+1
Loop

MsgBox ("done delete - restarting firewall service")
objFPC.Refresh
objArray.SendRestartNotification(prxFwSrvSvc)
Set objFPC = Nothing
Set objPD=Nothing
Set objSPR=Nothing
Set objArray=Nothing
Set objPR=Nothing

End Sub
vt1000vdel
************ End Undo Script ********
Lol

Guest

Hi All,

Sorry for dampening u r spirits. I have audio working on incoming calls into vt1000v. I have no audio (both ways) for outgoing calls.

Let me work in it further and post back my findings/results/resolution.

sm

Guest

Hi,

I have checked other threads on the forum and appears like it is a generic issue as being discussed in:

http://www.vonage-forum.com/ftopic461-0-asc-15.html

which says:
B. Outbound calls
- would hear dial tone but after dialing only silence (phone on other end rings)

I am having exactly the same problem. Incoming calls appear to be fine, while only some outgoing calls are working right. So, there appears to be a problem hand-shaking for outbound calls.

sm

Posts: 243 · Vonage Forum Master Joined: Jan 18, 2004 Posts: 243

smarisetty wrote:

Hi All,

Sorry for dampening u r spirits. I have audio working on incoming calls into vt1000v. I have no audio (both ways) for outgoing calls.

Let me work in it further and post back my findings/results/resolution.

sm

Any solution to this yet? I'm trying to configure my ISA server and can't get outbound calls to work where the far end can hear me. Inbound calls work fine.

Thanks,
Greg