Differentiation of multiple media endpoints behind an address translation device

摘要

In one embodiment, two way communication between an IP phone behind a firewall and an IP phone behind a translation device is established. A network security device receives a remote packet from the translation device. The header of the remote packet includes the address of the translation device, and a payload of the remote packet includes an embedded remote address and the media port of the IP phone behind the translation device. A memory stores the media port matched with the address of the translation device. When the network security device receives a local packet from the IP phone behind the firewall destined for the IP phone behind the translation device, a controller rewrites the destination port of the local packet with the media port.

主权项

1. An apparatus comprising:
an external interface configured to receive a remote packet from a translation device, wherein a header of the remote packet includes a source address corresponding to the translation device, wherein a payload of the remote packet includes an embedded remote address corresponding to a remote device and a media port of the remote device, and wherein the embedded remote address included in the payload of the remote packet is different than the source address included in the header of the remote packet; an internal interface configured to receive a local packet including a destination address that corresponds to the address of the translation device; and a controller configured to rewrite a destination control port of the local packet with the media port of the remote device when the embedded remote address included in the payload of the remote packet is different than the source address included in the header of the remote packet.