pierce2
join:1999-09-22
Santa Cruz, CA | you *don't* need to open all the ports for H.323, your NAT software just needs to monitor the control session, and dynamically setup and tear down UDP ports on demand. This is done in several products such as SonicWall SOHO routers. Its not more commonly done because the h.323 control session is rather complex.
to accept *INCOMING* H323 connections, you do need to port forward the control session as this is a peer to peer protocol. This is where life gets kind of complex for *ANY* NAT system, if you have several users onsite behind the NAT, how does the server decide where to forward inbound connections ? |
