How to disable H323 alg function

Forum zu aktuellen Geräten der LANCOM Router/Gateway Serie

Moderator: Lancom-Systems Moderatoren

Antworten
alxlgtl
Beiträge: 9
Registriert: 26 Mär 2019, 16:17

How to disable H323 alg function

Beitrag von alxlgtl »

From what I understand the lancom routers have some sort of H323 alg.
How can I disable this function on a 1783VA and a 1721+ unit?
My devices can handle the nat procedure and I need this function disabled and just allow port forward of 1720 plus any needed media ports.
backslash
Moderator
Moderator
Beiträge: 7010
Registriert: 08 Nov 2004, 21:26
Wohnort: Aachen

Re: How to disable H323 alg function

Beitrag von backslash »

Hi alxlgtl,

you can disable it on the CLI at /Setup/IP-Router/Firewall/Applications/H.323. just set "H.323-support" to "no":

Code: Alles auswählen

root@:/Setup/IP-Router/Firewall/Applications/H.323
> set H.323-Support no
set ok: H.323-Support  VALUE:   No

root@:/Setup/IP-Router/Firewall/Applications/H.323
>
regards
Backslash
alxlgtl
Beiträge: 9
Registriert: 26 Mär 2019, 16:17

Re: How to disable H323 alg function

Beitrag von alxlgtl »

In the Applications folder I can see only irc and ftp. I think that my devices are on older firmware that doesn't allow this feature.
The 1783VA units is on 9.10.0405RU2 and the 1721+ on a 9.0.0.x version.
Can I add this folder and value to disable it or I need a newer firmware?
backslash
Moderator
Moderator
Beiträge: 7010
Registriert: 08 Nov 2004, 21:26
Wohnort: Aachen

Re: How to disable H323 alg function

Beitrag von backslash »

Hi alxlgtl ,

you need at least 9.10.530RU5...

Why do you not use the actual firmwares (1783VA - 10.20) resp. actual devices (the last firmware for the 1721+ was the 9.00)?

regards
Backslash
alxlgtl
Beiträge: 9
Registriert: 26 Mär 2019, 16:17

Re: How to disable H323 alg function

Beitrag von alxlgtl »

Well I have opened a different thread for that.
I want to upgrade but I want to know first if I need to upgrade first to an in between version before going to the latest just a precaution not to brick the device.

Do you think I can upgrade to the latest version without a problem?
backslash
Moderator
Moderator
Beiträge: 7010
Registriert: 08 Nov 2004, 21:26
Wohnort: Aachen

Re: How to disable H323 alg function

Beitrag von backslash »

Hi alxlgtl,

normally this should work without any problems...

if you want to makle sure that there will be no problem, you can upload the new firmware in the testing mode (just activate the check box in the file select dialogue on firmware upload). if you don't activate the firmware permanently during the test time, the device will rebool and start the old firmware again.

regards
Backslash
alxlgtl
Beiträge: 9
Registriert: 26 Mär 2019, 16:17

Re: How to disable H323 alg function

Beitrag von alxlgtl »

Thank you, I have upgraded the unit and disabled the H323 alg.
alxlgtl
Beiträge: 9
Registriert: 26 Mär 2019, 16:17

Re: How to disable H323 alg function

Beitrag von alxlgtl »

Is there a way to disable the H323 alg on the 1721+ model even if it means disabling packet inspection completely?
backslash
Moderator
Moderator
Beiträge: 7010
Registriert: 08 Nov 2004, 21:26
Wohnort: Aachen

Re: How to disable H323 alg function

Beitrag von backslash »

Hi alxlgtl

no, as already told to you, you need at least firmware version 9.10.530RU5...

regards
Backslash
Antworten