In general, you don't need to do anything. Put both gatekeepers in routed mode (and proxy mode, if your endpoints are not smart enough to handle media through NAT). Register the NATed one as a child of the one with public IP. It should work find with any type of NAT. Problems may arise when you setup too strict firewall rules (it is enough to configure the firewall/NAT to allow outgoing udp/tcp connections). You may need to change some parameters like NATKeepAliveInterval to make sure NAT keeps port mappings for the signalling connection. Regards, Michal Thomas <thomasj@xxxxxxxxx> wrote: >Hello, > >could anybody explain how does Citron\'s NAT technology work? What >should be set up in GK behind NAT firewall, in GK with public IP and >also what requirements are stated for firewall. > >As I underestood the topology has to look like: >gw - GK1 ~~~ NAT FW ~~~~ GK2 ---- gw >where GK1 is registered under GK2 (if I\'m right). > >Thanks in advance, > Thomas ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/