what we do if we are doing in production environment, we cant say our customer to run gk on his machine. ----- Original Message ----- From: "Stewart Nelson" <sn@xxxxxxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Wednesday, September 15, 2004 06:50 AM Subject: Re: gnugk behind NAT questions > Hi Ganbold, > > > One more question, How situation will change if there are multiple > > endpoints for each NAT? > > I mean how does it reflect to NAT port redirect rules? Did you make similar > > setup before? > > How NAT will distinguish each call and port redirection will work just as > > supposed to? > > Since you are doing software NAT, it is probably easiest to run a GK > on each NAT machine. Then you don't need any redirects and can > have as many endpoints as you like. > > However, if you only have two or three EPs behind a NAT, you can set > them up so that they use unique call signal addresses and RTP port > ranges. For example: > > Device at 192.168.0.18 listens for Setup on TCP port 1720, > uses UDP ports 10000-10001 for RTP. > > Device at 192.168.0.19 listens for Setup on TCP port 1721, > uses UDP ports 10002-10003 for RTP. > > rdr on $ext_if proto tcp from any to $external_addr/32 port 1720 -> > 192.168.0.18 port 1720 > rdr on $ext_if proto tcp from any to $external_addr/32 port 1721 -> > 192.168.0.19 port 1721 > rdr on $ext_if proto udp from any to $external_addr/32 port 10000 -> > 192.168.0.18 port 10000 > rdr on $ext_if proto udp from any to $external_addr/32 port 10001 -> > 192.168.0.18 port 10001 > rdr on $ext_if proto udp from any to $external_addr/32 port 10002 -> > 192.168.0.19 port 10002 > rdr on $ext_if proto udp from any to $external_addr/32 port 10003 -> > 192.168.0.19 port 10003 > > If your device won't let you change from port 1720, you can try > to forward external 1720 -> .18 port 1720 and > external 1721 -> .19 port 1720. However, that does not work > in some configurations. Sorry, I don't know the details. > > --Stewart > > > ------------------------------------------------------- > This SF.Net email is sponsored by: thawte's Crypto Challenge Vl > Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam > Camcorder. More prizes in the weekly Lunch Hour Challenge. > Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m > > _______________________________________________________ > > List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ ------------------------------------------------------- This SF.Net email is sponsored by: thawte's Crypto Challenge Vl Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam Camcorder. More prizes in the weekly Lunch Hour Challenge. Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
