Polycom视频会议的端口映射
关键字:Polycom 端口映射 视频会议
中国作为一个IPv4地址奇缺的国家,NAT几乎是工作中中的必备了。我们经常会碰到只有一个公网IP,里面却有不少的服务器需要NAT映射,这也罢了,多几行命令就好了。
但是碰到如Polycom的视频会议系统,就有一点点麻烦了, 因为这个系统有多达70多个端口需要映射。通过咨询Polycom的工程师,这套系统需要映射TCP/UDP 1718~1720,TCP3230~3243,UDP 3230~3285,此外,据说还需要TCP1503(此次没有加也测试成功)。最不给力的,他说不保证能每次都能成功。不过不管如何,这次是成功了。
以下是在CISCO ASA5500防火墙上做的映射和ACL: static (inside,outside) tcp interface 1720 192.168.0.8 1720 static (inside,outside) tcp interface 1503 192.168.0.8 1503 static (inside,outside) tcp interface 3230 192.168.0.8 3230 static (inside,outside) tcp interface 3231 192.168.0.8 3231 static (inside,outside) tcp interface 3232 192.168.0.8 3232 static (inside,outside) tcp interface 3233 192.168.0.8 3233 static (inside,outside) tcp interface 3234 192.168.0.8 3234
static (inside,outside) tcp interface 3235 192.168.0.8 3235 static (inside,outside) tcp interface 3236 192.168.0.8 3236 static (inside,outside) tcp interface 3237 192.168.0.8 3237 static (inside,outside) tcp interface 3238 192.168.0.8 3238 static (inside,outside) tcp interface 3239 192.168.0.8 3239 static (inside,outside) tcp interface 3240 192.168.0.8 3240 static (inside,outside) tcp interface 3241 192.168.0.8 3241 static (inside,outside) tcp interface 3242 192.168.0.8 3242 static (inside,outside) tcp interface 3243 192.168.0.8 3243 static (inside,outside) udp interface 3230 192.168.0.8 3230 static (inside,outside) udp interface 3231 192.168.0.8 3231 static (inside,outside) udp interface 3232 192.168.0.8 3232 static (inside,outside) udp interface 3233 192.168.0.8 3233 static (inside,outside) udp interface 3234 192.168.0.8 3234 static (inside,outside) udp interface 3235 192.168.0.8 3235 static (inside,outside) udp interface 3236 192.168.0.8 3236 static (inside,outside) udp interface 3237 192.168.0.8 3237 static (inside,outside) udp interface 3238 192.168.0.8 3238 static (inside,outside) udp interface 3239 192.168.0.8 3239 static (inside,outside) udp interface 3240 192.168.0.8 3240 static (inside,outside) udp interface 3241 192.168.0.8 3241 static (inside,outside) udp interface 3242 192.168.0.8 3242
…… …… 余下全文