[26881] in resnet
Re: Firewall drops video conferencing packets
daemon@ATHENA.MIT.EDU (Kathleen Brown)
Wed Oct 19 11:10:59 2011
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CC8E70.F4D6C86B"
Message-ID: <1971DADBD6BB534298F22483F7D960F605AEAA4B@exchange01.anselm.edu>
Date: Wed, 19 Oct 2011 11:08:27 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Kathleen Brown <kbrown@anselm.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: A<CAF03826CDC19848A698E99DC608B54702D0634E@vEXMB1.clarion.local>
This is a multi-part message in MIME format.
------_=_NextPart_001_01CC8E70.F4D6C86B
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hello Christopher
=20
You've probably figured your issue out by this point (I was just in here
cleaning up this folder, and saw your posting) but if you haven't feel
free to answer this or email me offline. We have a videoconferencing
issue going on too. A Lifesize system is telling us it has a lot of
dropped packets, but we don't see verification anyplace else, and we've
spent lots of time with our firewall vendor (Juniper) to no avail.
Image quality continues to be poor on the videoconferencing. =20
=20
=20
Kathleen Brown, Network Support Specialist
CompTIA Network+ Certified
Network Services - Office of Information Technology
Saint Anselm College=20
100 St. Anselm Drive
Manchester, NH 03102
(603) 641-7128
kbrown@anselm.edu <mailto:kbrown@anselm.edu> =20
=20
P Please consider the environment before printing this email.
________________________________
=20
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of
Christopher Hickernell
Sent: Tuesday, September 06, 2011 10:04 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Firewall drops video conferencing packets
=20
Has anyone else experienced a problem with video conferencing traffic
crossing the firewall? We have various models of Polycom units (HDX
8000 HD, HDX 9004, VS4000) that have trouble when they have to cross our
Cisco ASA to connect to another unit. A connection is always
established, but sometimes video and audio do not work, sometimes
content cannot be sent, etc.
=20
Monitoring the firewall logs I observed this error:
=20
Deny IP from Montgomery-416.itv.clarion.edu to Still-111, IP options:
"Router Alert"
=20
=20
Christopher Hickernell, CCNA, MCSE
Network Support Specialist, ResNet Manager
Clarion University of Pennsylvania
Center for Computing Services
G-13 Still Hall, Clarion, PA 16214
chickernell@clarion.edu | 814.393.2218
=20
=20
___________________________________________________ You are subscribed
to the ResNet-L mailing list.=20
To subscribe, unsubscribe or search the archives, go to
http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________=20
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
------_=_NextPart_001_01CC8E70.F4D6C86B
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" =
xmlns:p=3D"urn:schemas-microsoft-com:office:powerpoint" =
xmlns:a=3D"urn:schemas-microsoft-com:office:access" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns:s=3D"uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" =
xmlns:rs=3D"urn:schemas-microsoft-com:rowset" xmlns:z=3D"#RowsetSchema" =
xmlns:b=3D"urn:schemas-microsoft-com:office:publisher" =
xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadsheet" =
xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" =
xmlns:odc=3D"urn:schemas-microsoft-com:office:odc" =
xmlns:oa=3D"urn:schemas-microsoft-com:office:activation" =
xmlns:html=3D"http://www.w3.org/TR/REC-html40" =
xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope/" =
xmlns:rtc=3D"http://microsoft.com/officenet/conferencing" =
xmlns:D=3D"DAV:" xmlns:Repl=3D"http://schemas.microsoft.com/repl/" =
xmlns:mt=3D"http://schemas.microsoft.com/sharepoint/soap/meetings/" =
xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2003/xml" =
xmlns:ppda=3D"http://www.passport.com/NameSpace.xsd" =
xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" =
xmlns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" =
xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#" =
xmlns:dsp=3D"http://schemas.microsoft.com/sharepoint/dsp" =
xmlns:udc=3D"http://schemas.microsoft.com/data/udc" =
xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" =
xmlns:sub=3D"http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/"=
xmlns:ec=3D"http://www.w3.org/2001/04/xmlenc#" =
xmlns:sp=3D"http://schemas.microsoft.com/sharepoint/" =
xmlns:sps=3D"http://schemas.microsoft.com/sharepoint/soap/" =
xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance" =
xmlns:udcs=3D"http://schemas.microsoft.com/data/udc/soap" =
xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile" =
xmlns:udcp2p=3D"http://schemas.microsoft.com/data/udc/parttopart" =
xmlns:wf=3D"http://schemas.microsoft.com/sharepoint/soap/workflow/" =
xmlns:dsss=3D"http://schemas.microsoft.com/office/2006/digsig-setup" =
xmlns:dssi=3D"http://schemas.microsoft.com/office/2006/digsig" =
xmlns:mdssi=3D"http://schemas.openxmlformats.org/package/2006/digital-sig=
nature" =
xmlns:mver=3D"http://schemas.openxmlformats.org/markup-compatibility/2006=
" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns:mrels=3D"http://schemas.openxmlformats.org/package/2006/relationshi=
ps" xmlns:spwp=3D"http://microsoft.com/sharepoint/webpartpages" =
xmlns:ex12t=3D"http://schemas.microsoft.com/exchange/services/2006/types"=
=
xmlns:ex12m=3D"http://schemas.microsoft.com/exchange/services/2006/messag=
es" =
xmlns:pptsl=3D"http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/=
" =
xmlns:spsl=3D"http://microsoft.com/webservices/SharePointPortalServer/Pub=
lishedLinksService" xmlns:Z=3D"urn:schemas-microsoft-com:" =
xmlns:st=3D"" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 =
(filtered medium)"><!--[if !mso]><style>v\:* =
{behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Webdings;
panose-1:5 3 1 2 1 5 9 6 7 3;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
{font-family:"Bookman Old Style";
panose-1:2 5 6 4 5 5 5 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span =
style=3D'font-family:"Arial","sans-serif";color:#1F497D'>Hello =
Christopher<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-family:"Arial","sans-serif";color:#1F497D'><o:p> </o:p=
></span></p><p class=3DMsoNormal><span =
style=3D'font-family:"Arial","sans-serif";color:#1F497D'>You've probably =
figured your issue out by this point (I was just in here cleaning up =
this folder, and saw your posting) but if you haven't feel free to =
answer this or email me offline. We have a videoconferencing issue =
going on too. A Lifesize system is telling us it has a lot of =
dropped packets, but we don't see verification anyplace else, and we've =
spent lots of time with our firewall vendor (Juniper) to no avail. =
Image quality continues to be poor on the videoconferencing. =
<o:p></o:p></span></p><div><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'><o:p> </o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'><o:p> </o:p></span></p><p =
class=3DMsoNormal><span style=3D'font-size:10.0pt;color:navy'>Kathleen =
Brown, Network Support Specialist</span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'>CompTIA Network+ =
Certified</span><span style=3D'color:#1F497D'><o:p></o:p></span></p><p =
class=3DMsoNormal><span style=3D'font-size:10.0pt;color:navy'>Network =
Services - Office of Information Technology</span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'>Saint Anselm College </span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'>100 St. Anselm Drive</span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'>Manchester, NH 03102</span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'>(603) 641-7128</span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;color:navy'><a =
href=3D"mailto:kbrown@anselm.edu"><span =
style=3D'color:navy'>kbrown@anselm.edu</span></a></span><span =
style=3D'color:navy'> </span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'> <o:p></o:p></span></p><p =
class=3DMsoNormal><b><span =
style=3D'font-size:14.0pt;font-family:Webdings;color:#99CC00'>P</span></b=
><span style=3D'font-size:8.0pt;font-family:"Trebuchet =
MS","sans-serif";color:#99CC00'> </span><span =
style=3D'font-size:8.0pt;font-family:"Bookman Old =
Style","serif";color:gray'>Please consider the environment before =
printing this email.</span><span =
style=3D'color:#1F497D'><o:p></o:p></span></p><div class=3DMsoNormal =
align=3Dcenter style=3D'text-align:center'><span =
style=3D'font-family:"Times New Roman","serif";color:#1F497D'><hr =
size=3D2 width=3D"100%" align=3Dcenter></span></div></div><p =
class=3DMsoNormal><span =
style=3D'font-family:"Arial","sans-serif";color:#1F497D'><o:p> </o:p=
></span></p><div><div style=3D'border:none;border-top:solid #B5C4DF =
1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span>=
</b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> =
Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of =
</b>Christopher Hickernell<br><b>Sent:</b> Tuesday, September 06, 2011 =
10:04 AM<br><b>To:</b> RESNET-L@LISTSERV.ND.EDU<br><b>Subject:</b> =
Firewall drops video conferencing =
packets<o:p></o:p></span></p></div></div><p =
class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>Has anyone =
else experienced a problem with video conferencing traffic crossing the =
firewall? We have various models of Polycom units (HDX 8000 HD, =
HDX 9004, VS4000) that have trouble when they have to cross our Cisco =
ASA to connect to another unit. A connection is always =
established, but sometimes video and audio do not work, sometimes =
content cannot be sent, etc.<o:p></o:p></p><p =
class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>Monitoring =
the firewall logs I observed this error:<o:p></o:p></p><p =
class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>Deny IP from =
Montgomery-416.itv.clarion.edu to Still-111, IP options: "Router =
Alert"<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p =
class=3DMsoNormal><b><o:p> </o:p></b></p><p =
class=3DMsoNormal><b>Christopher</b> Hickernell, CCNA, =
MCSE<o:p></o:p></p><p class=3DMsoNormal><i>Network Support Specialist, =
ResNet Manager<o:p></o:p></i></p><p class=3DMsoNormal>Clarion University =
of Pennsylvania<i><o:p></o:p></i></p><p class=3DMsoNormal>Center for =
Computing Services<i><o:p></o:p></i></p><p class=3DMsoNormal>G-13 Still =
Hall, Clarion, PA 16214<o:p></o:p></p><p =
class=3DMsoNormal>chickernell@clarion.edu | =
814.393.2218<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p =
class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><span =
style=3D'font-size:12.0pt;font-family:"Times New =
Roman","serif"'>___________________________________________________ You =
are subscribed to the ResNet-L mailing list. <o:p></o:p></span></p><p>To =
subscribe, unsubscribe or search the archives, go to =
http://LISTSERV.ND.EDU/archives/resnet-l.html =
___________________________________________________ =
<o:p></o:p></p></div></body></html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
------_=_NextPart_001_01CC8E70.F4D6C86B--
