LifeSize video conferencing system

[Perrysh]

How do I correctly set up the ports for inbound and outbound traffic on my Nighthawk for a LifeSize video conferencing system?

My set-up:

Fiber connection, set public IP. Conference system has NAT to that. The system is on a LAN with several other clients (pc/tablet/etc) with set local IP-address. 

From LifeSize FAQ:

FIREWALL SETTINGS:

Ensure that all TCP/UDP ports in the range 1024 – 65535 is open for outbound traffic. FORWARD TCP and UDP ports specified for your system in the table below to the public IP of your system.

System                       TCP                                                         UDP

Lifesize

80 & 443 (Remote management - Optional) 1720 (H.323 call setup)

1719 (Gatekeeper registration)

LifeSize

60000-64999 (audio/video/data)

60000-64999 (audio/video/data)

[TheEther · Accepted solution]

I looked at some of the setup documents for Lifesize and I now believe that you have to open some ports.  You should set up a port forwarding rule for TCP port 1720 to allow H.323 to work.  You may also have to open UDP port 1719.  If you use SIP, then UDP port 5060, TCP port 5060 and TCP port 5061 also need to be opened.  Finally, you may need to open ports specified in Preferences > Network > Reserved Ports on your Lifesize system.

[TheEther]

You don't need to do anything for outbound traffic.  All ports are open by default unless they are blocked under Block Services on the C7000.

Unless I'm misreading the FAQ, it looks like you don't need any inbound port forwarding rules.

[Perrysh]

Thanks for answer. I sorta agree with you, but the thing is that the LifeSize can't connect to the H.323-server, and that makes it highly inconvenient to use. The system is connected OK, as the in-built network tools allows it to ping and tracert ip-adresses outside of the LAN. but it will not connect to the H.323.

/Per

[TheEther · Accepted solution]

I looked at some of the setup documents for Lifesize and I now believe that you have to open some ports.  You should set up a port forwarding rule for TCP port 1720 to allow H.323 to work.  You may also have to open UDP port 1719.  If you use SIP, then UDP port 5060, TCP port 5060 and TCP port 5061 also need to be opened.  Finally, you may need to open ports specified in Preferences > Network > Reserved Ports on your Lifesize system.

[Perrysh]

Thanks for your help. To really solve this, the H.323-server provider also had to tweak a minor setting in their acceptance of my system's log-in. That was, however, due to us changing ISP, rather than the 7000, it works flawlessly now.