poses a problem for endpoints located outside the network to find the correct IP address to dial.
There are several ways to resolve this:
• (Recommended) Contact a STUN public server to return your IP address as it looks from
outside the network, and then send this public IP address to all endpoints you invite to the
meeting. This is known as STUN auto-discovery. This also works for HTTP public servers.
• Use a dedicated firewall traversal solution like the Avaya Meetings H.323 Edge and set it as
your gatekeeper (see
Configuring Advanced Gatekeeper Settings on page 161).
• You can manually set a static public IP address of the unit, and configure your firewall and
NAT to ensure this is reflected externally outside the network.
For more information on each of these topologies, see
Planning NAT and Firewall Traversal with
Avaya Room System XT Series on page 34. When traversing firewalls, remember to set the
firewall ports as detailed in Configuring the TCP or UDP Port Range on the Avaya Room System
XT Series on page 50.
Before you begin
If configuring from the endpoint, you must first enable advanced configuration, as described in
Enabling Advanced Maintenance on the XT Series on page 151.
Procedure
1. Access the firewall and NAT traversal settings. From the XT Series web interface, select
Administrator Settings > Networks > Preferences > NAT. From the endpoint's main
menu, select Configure > Advanced > Networks > Preferences > NAT.
2. Set the fields as described in
Table 34: Configuring NAT-related settings on page 159.
Table 34: Configuring NAT-related settings
Field Name Description
NAT Traversal Select to allow the system to be located behind a firewall/NAT.Set to No if
the system has a public IP address.
NAT Discovery Enter the method used for the XT Series to discover its public IP address:
• Manual lets you set the public IP address manually in the Public IP
Address field.
• (Recommended) STUN autodiscovery uses a public STUN server to
return the unit's public IP address. If you choose this, enter the Server
and Port of the STUN server. If the server for STUN is left empty, the
XT Series uses "stun.ekiga.net”, by default.
Refresh Time (sec) Enter the number of seconds to open a pinhole through the firewall. Also
used by H.460 as TTL (Time To Live) of registration requests.
Keepalive Ensures the connection is kept open by sending periodic pings to the
remote units.
3. From the web interface only, select Save.
Configuring Advanced Network Settings
August 2020 Deployment Guide for Avaya XT Series 159
Comments on this document? infodev@avaya.com