Establishing security
178 Avaya VPNmanager Configuration Guide Release 3.7
Figure 56: Voice over IP tab
Using the Gatekeeper Routed Call Model
The Gatekeeper Routed call model should be used when there is an SG in the network path
between IP endpoints (e.g. IP hard phones and IP soft phones) and the Gatekeeper with which
those IP endpoints register and 1) either the IP endpoints or the Gatekeeper is being NATed by
the SG or 2) the SG’s Firewall function is enabled.
When using Gatekeeper Routed Call Model, configure the following:
●Service Port. The port to which the IP endpoints will send Registration/Access/Status
(RAS) messages.
●Source Endpoints Zone. The zone where the IP endpoints are located with respect to the
SG (e.g. “private” when the IP endpoints are on private side of the SG).
●Source Endpoints Network Objects. The IP networks that define the IP address space of
the IP endpoints.
●Gatekeeper Zone. The zone where the gatekeeper is located with respect to the SG (e.g.
“public” when the gatekeeper is on the public side of the SG).
●Gatekeeper IP address. The gatekeeper configured IP address.
The Proxy IP and Proxy Port in the “Add Gatekeeper” dialog are used typically when the
Gatekeeper is on the private side of the SG and is getting NATed by the SG. In that case, the
Proxy IP and Proxy Port would be configured to be the IP address and port by which the
Gatekeeper is known to IP endpoints wanting to register with that Gatekeeper. If the
Gatekeeper IP address is not being NATed by the SG, the Proxy IP and Proxy Port do not need
to be configured.