H323 protocol configuration method under VoIP in checkpoint firewall

Description of the phenomenon:

using the checkpoint firewall as a security gateway, the network is fine, but the Voip(H323) service is not working.

Here's how to fix it:

the Voip Each endpoint IP Summary Group, as the source address and destination address, see Figure a

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/89/C0/wKioL1gb6rShbNPZAACyFYyb1CQ768.png-wh_500x0-wm_3 -wmp_4-s_4293603484.png "style=" Float:none; "title=" 1.png "alt=" Wkiol1gb6rshbnpzaacyfyyb1cq768.png-wh_50 "/>

Protocol Selection H323_ras, H323_any, and UDP high-end ports,tcp61440-61444, see figure II

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/89/C0/wKioL1gb6x-D_LeHAAAWMMT8UwE172.png-wh_500x0-wm_3 -wmp_4-s_1773320902.png "title=" 2.png "alt=" Wkiol1gb6x-d_lehaaawmmt8uwe172.png-wh_50 "/>

the H323_ras and h323_any protocols are configured as follows ( must be noted )

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/89/C3/wKiom1gb6zew065AAAC6KlTQrrM675.png-wh_500x0-wm_3 -wmp_4-s_1260208915.png "style=" Float:none; "title=" 3.png "alt=" Wkiom1gb6zew065aaac6kltqrrm675.png-wh_50 "/>

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/89/C0/wKioL1gb6zjxV5ajAAC6RrMkobg703.png-wh_500x0-wm_3 -wmp_4-s_636057886.png "style=" Float:none; "title=" 4.png "alt=" Wkiol1gb6zjxv5ajaac6rrmkobg703.png-wh_50 "/>

H323_ras to bind H323_ras protocol When 1720 port is turned on

H323_any indicates that only the 1720 port is open and does not contain protocol information

Note: In some specific programs, you need to bind protocol information when you define a port, such as H323,Sip protocol, etc.

This article is from the "Heigeer" blog, make sure to keep this source http://heigeer.blog.51cto.com/2785854/1869218

H323 protocol configuration method under VoIP in checkpoint firewall