VoIP Domain - H.323 Gatekeeper

What can I do here?

Use this window to create or edit a H.323 Gatekeeper.

Getting Here - Object Explorer > New > Network Object > More > VoIP Domain > H.323 Gatekeeper > General

Introduction to H.323

H.323 is an ITU (International Telecommunication Union) standard that specifies the components, protocols, and procedures that provide multimedia communication services over packet networks (including IP based networks).

The Security Gateway supports these H.323 architectural elements:

IP phones
Devices that:
- Handle signaling (H.323 commands)
- Connect to an H.323 Gatekeeper
IP phones are defined in SmartConsole, usually as a network of IP phones. Usually it is not necessary to define Network Objects for individual IP Phones.
Standard telephones that connect to an H.323 gateway
These are not IP devices. It is not necessary to define them in SmartConsole.
A Gatekeeper that manages a collection of H.323 devices, such as phones
Gatekeepers convert phone numbers to IP addresses. A Gatekeeper usually provides gateway services as well.
A Gateway that provides interoperability between different networks
The gateway translates between the telephony protocol and IP.

Supported H.323 Deployments and NAT

Supported H.323 deployments are listed the Table. NAT (Hide or Static) can be configured for the phones in the internal network, and (where applicable) for the Gatekeeper.

NAT is not supported on IP addresses behind an external Check Point gateway interface
Manual NAT rules are only supported in environments where the gatekeeper is in the DMZ

	No NAT	NAT for Internal Phones — Hide/Static NAT	NAT for Gatekeeper — Static NAT
Endpoint to Endpoint	Yes	Static NAT only	Not applicable
Gatekeeper/Gateway in External	Yes	Yes	Not applicable
Gatekeeper/Gateway to Gatekeeper/Gateway	Yes	Yes	Yes
Gatekeeper/Gateway in DMZ	Yes	Yes	Yes


Endpoint-to-Endpoint Communication	The IP Phones communicate directly, without a Gatekeeper or an H.323 Gateway. Static NAT can be configured for the phones on the internal side of the gateway.
Gatekeeper or H.323 Gateway in External Network	The IP Phones use the services of a Gatekeeper or H.323 Gateway on the external side of the gateway. This topology enables using the services of a Gatekeeper or an H.323 Gateway that is maintained by another organization. It is possible to configure Hide NAT (or Static NAT or no NAT) for the phones on the internal side of the gateway.
H.323 Gatekeeper/Gateway to Gatekeeper/Gateway	Each Gatekeeper or H.323 Gateway controls a separate endpoint domain. Static NAT can be configured for the internal Gatekeeper. For the internal phones, Hide NAT (or Static NAT) can be configured.
Gatekeeper or H.323 Gateway in the DMZ	The same Gatekeeper or H.323 Gateway controls both endpoint domains. This topology makes it possible to provide Gatekeeper or H.323 Gateway services to other organizations. Static NAT (or no NAT) can be configured for the Gatekeeper or H.323 Gateway. Hide NAT (or Static or no NAT) can be configured for the phones on the internal side of the gateway.