D-Link DFL-1600 User Manual page 188

168
using private IPs on the phones, incoming traffic need to be SATed as in
the example below. The object ip-phone below should be the internal IP of
the H.323 phone behind each firewall.
WebUI
:
1. Outgoing Rule
Rules IP Rules
Enter the following:
Name: H323Out
Action: NAT
Service: H323
Source Interface: LAN
Destination Interface: any
Source Network: lan-net
Destination Network: 0.0.0.0/0 (all-nets)
Comment: Allow outgoing calls.
Then click OK
2. Incoming Rules
Rules IP Rules
Enter the following:
Name: H323In
Action: SAT
Service: H323
Source Interface: any
Destination Interface: core
Source Network: 0.0.0.0/0 (all-nets)
Destination Network: ip-wan (external IP of the firewall)
Comment: Allow incoming calls to H.323 phone at ip-phone.
SAT
Translate Destination IP Address: To New IP Address: ip-phone (IP
address of phone)
Then click OK
Chapter 18. Application Layer Gateway (ALG)
Add IP Rule:
Add IP Rule:
D-Link Firewalls User's Guide