• SonicOS 7.1 VoIP
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• VoIP
  • VoIP Security
    • Security Appliance Requirements for VoIP
  • VoIP Protocols
    • H.323
    • SIP
  • SonicWall’s VoIP Capabilities
    • VoIP Security
    • VoIP Network
    • VoIP Network Interoperability
    • Supported Interfaces
    • Supported VoIP Protocols
      • H.323
      • SIP
      • SonicWall VoIP Vendor Interoperability
      • CODECs
      • VoIP Protocols on which SonicOS Does Not Perform Deep Packet Inspection
    • BWM and QoS
      • Quality of Service
    • How SonicOS Handles VoIP Calls
      • Incoming Calls
      • Local Calls
  • Settings
    • Configuring VoIP Settings
      • General Settings
      • SIP Settings
        • Enabling SIP
      • H.323 Settings
        • Configuring Bandwidth on the WAN Interface
        • Configuring VoIP Access Rules
    • Configuring VoIP Logging
• Call Status
• SonicWall Support
  • About This Document

H.323 Settings

Configuring H.323 Settings

To configure H.323 settings

1. Navigate to NETWORK | VoIP > Settings | H.323 Settings.

2. Choose whether to enable H.323 transformation globally or by firewall rule:

   • Use global control to enable H.323 Transformations. This option is selected by default.
   • Use firewall Rule-based control to enable H.323 Transformations. Be sure to configure a firewall rule to control H.323 transformations.
3. If you are not configuring H.323 transformations, go to Step 5.

4. Select Enable H.323 Transformation to allow stateful H.323 protocol-aware packet content inspection and modification by the firewall. This option is disabled by default. When the option is selected, the other H.323 options become active.

   The firewall performs any dynamic IP address and transport port mapping within the H.323 packets, which is necessary for communication between H.323 parties in trusted and untrusted networks/zones.

   Disable the Enable H.323 Transformation to bypass the H.323 specific processing performed by the firewall.

5. Select Only accept incoming calls from Gatekeeper to ensure all incoming calls go through the Gatekeeper for authentication. The Gatekeeper refuses calls that fail authentication.
6. In the H.323 Signaling/Media inactivity time out (seconds) field, specify the amount of time a call can be idle before the firewall blocks further traffic. A call goes idle when placed on hold. The default time is 300 seconds (5 minutes), the minimum time is 60 seconds (1 minute), and the maximum time is 122400 seconds (34 hours).
7. The Default WAN/DMZ Gatekeeper IP Address field has a default value of 0.0.0.0. Enter the default H.323 Gatekeeper IP address in this field to allow LAN-based H.323 devices to discover the Gatekeeper using the multicast address 225.0.1.41. If you do not enter an IP address, multicast discovery messages from LAN-based H.323 devices go through the configured multicast handling.
8. Click Accept.

• Configuring Bandwidth on the WAN Interface
• Configuring VoIP Access Rules