Video calls behind Firewall not happening when registered to CMA 4000

[Anonymous]

Hello,

             VC calls between a HDX 7000(BF=behind firewall) & RMX 4000/HDX /CMAD is not  hapening when registered to CMA 4000.

HDX (BF) LAN IP= 10.205.x.x NAT IP= 10.140.253.1 

Network Toplogy

HDX- Router(NAT done here)- Firewall- Router- {CMA, RMX, HDXs, CMAD.}

1. HDX BF 7000 Release - 3.1.0.1-31003.

2. CMA 6.2.1 , Routed mode

3. RMX 4000: 7.8.0.246

when EPs registerd with CMA trying to make calls to HDX BF it fails. I am able to see there is a incoming call but not able to answer.  Non registered Eps can successfully make calls to HDX BF . There is no dial rule issues since the registered/non registered VCs in same subnet can make successfull calls. I opened the following ports in the network 1720,1719, 3220-5220, TCP/UDP all bidirectional.

My question  is it necessary to open all ports for CMA 1024-65535. searched many posts but able to see 1720, 3220-3250 will be fine. In admin guide I am able to see CMA will use 1024-65535.  Please suggest.

[simons3]

I had a similar issue with another customer, they had to open all the ports for the CMA. When you register to the CMA in routed mode, the CMA will send all the call setup messages (H225/H245) and the media is between the 2 endpoints. In your case, the call is getting through (1719/1720) but unable to answer because H225 is being blocked.

S.