Configure ATA 186 behind an ISA 2000 server

Posts: 2 · New Forum Member Joined: Jul 16, 2003 Posts: 2

I just received by ATA 186 and it works fine if I connect it to the cable modem. I have a network at house that uses ISA 2000 server as a firewall. DHCP is in use. ISA is installed on a DOmain Controller with 2 BIC cards and it acts my Router. Can anyone tell me what ports to open on the ISA 2000 and how to deal with dynamic public IP address that I get from the cable company? Thanks alot

Posts: 83 · Posted: Thu Jul 17, 2003 8:46 am Post subject:

1> Set your ATA to use Reserved DHCP so it has the same IP address every time it powers up

2>Forward the following ports to your ATA:
EXT PORT
5060 to 5061 UDP (local IP of ATA) enabled
69 to 69 UDP (local IP of ATA) enabled
123 to 123 UDP (local IP of ATA) enabled
10000 to 20000 UDP (local IP of ATA) enabled

3> Dynamic public IP does not affect your Vonage service. The ATA connects to Vonage every 30 seconds or so - so Vonage always knows what your public IP address is.

Posts: 2 · New Forum Member Joined: Jul 16, 2003 Posts: 2

Thank you very much Papu Papu.
This what I did:
I created separate protocol definition for port 123, 69, 5060 and 1000.
Then I used packet filtering on teh external NIC card to allow traffic destined for the above ports. Then I used server publishing to forward traffice destined for port 5060 on the External Interface to port 5061 on the ATA 186 (internal ip address). I did teh same for port 69 to 69, and 123 to 123, and 1000 to 2000.
However, I am still having problem. Can you please tell me if what i did is right or not.

Thank you in dvance
Jim

Guest

It's 10000 to 20000, not 1000 to 2000.

Hope that helps.

RockNRev
"Are You Listening?"
www.rocknrev.com

Posted: Tue Sep 16, 2003 10:46 pm Post subject:

The problem is configuring ISA server with a port range of 10,000-20,000 (in/outbound). The RTP audio streams are initialized dynamically, so its hard to specify a smaller range of ports to create rules. The phone will ring on both ends but without audio.

Regards,
Ganuu

Posted: Tue Sep 16, 2003 10:49 pm Post subject:

Vonage ports:

Port 5060-5061 UDP - For SIP signaling. This is needed for incoming
and outgoing. Requests on port 5060-5061 are made into the network and
made out of the network. The ATA listens on port 5060-5061 and
receives requests on port 5060-5061 UDP for incoming calls. The ATA
sends requests to our servers on port 5060-5061 UDP to make phone
calls.

Port 69 UDP - For tftp so the ATA can retrieve new configuration
settings as updates occur. The ATA makes requests to our tftp servers
on port 69 and the replies should be allowed back into the network from
our tftp servers, this is automatic in a regular state based
Firewall/NAT environment.

Ports (10,000 - 20,000) UDP - For RTP media streams. These are the
ports used to send and receive audio on the ATA. The ATA initiates the
audio streams so the same rules as port 69 apply.

Port 123 UDP - For time. The ATA gets its time from the Internet.
This is the port that it sends request on to retrieve its local time
from the Internet. The ATA will be making/initiating the requests so
the same rules as port 69 apply.

Posted: Tue Sep 23, 2003 2:30 pm Post subject:

For the life of me, I can't figure out how to set up my to use reserved DHCP. The only commands that are accepted by the thing are 80, 21, and 24, everything else responds with the letters P-A-S-S-W-D. Can anyone shed light on this??? Am I doing something wrong?

Thanks for any help!

Posts: 83 · Posted: Tue Sep 23, 2003 4:02 pm Post subject:

You can't change any setting on the ATA itself. It is locked by Vonage and even if you hacked it, it would revert to the Vonage settings as soon as it next connects to the Vonage TFTP server (every couple of minutes or so).

If you want to use Reserved DHCP use either a Windows 2000 server or a Linux server running DHCP services or use a commercial router - like a Cisco router. Most home routers do NOT allow you to set Reserved DHCP.

Just add the MAC address of the ATA to your DHCP server and that address will be reserved thereafter to the IP address you assigned to it's MAC address.

Your ATA will always have the same IP address forever - same as a static address.

Posted: Tue Sep 23, 2003 4:31 pm Post subject:

Ok, I did missunderstand then, I have already set up my router to assign my ATAs their respective IP. I thought that I also needed to perform a step on my ATA to do the same thing.

Thanks for the quick help!

Posted: Tue Sep 23, 2003 6:25 pm Post subject:

I got a new question for anyone that can answer.

I've got 3 ATAs. How do I handle that in terms of port forwarding? My router doesn't let me forward a port to more than 1 ATA device. Is this just a limitation with my router or am I just not getting it still? Thanks for the help!