1. © 2006 Intertex Data AB 1 Connect your LAN to the SIP world, while keeping your existing firewall*! The IX67 LAN SIParator (Part of the SIP Switch option package.) *The existing firewall is assumed to be unaware of SIP. If it has some sort of SIP support, that should be disabled to allow the LAN SIParator to function correctly.

2. © 2006 Intertex Data AB 2 The LAN SIParator All the SIP functionality while keeping your existing firewall Internet ben@smartco.com sue@smartco.comann@smartc.com carl@partco.com LAN SIParator (keep the old Firewall) Existing Firewall (not SIP aware) Internet ben@smartco.com sue@smartco.comann@smartc.com carl@partco.com SIP Capable Firewall (normal configuration)

3. © 2006 Intertex Data AB 3 The LAN SIParator Functionality ben@smartco.com sue@smartco.com ann@smartc.com Existing Firewall (not SIP aware) Internet Private IP addresses LAN Public IP addresses RTP media streams (UDP port interval, e.g. 35000 - 36999) SIP signalling (port 5060 UDP/TCP) MAIN FUNCTIONS:  SIP signalling proxy (including address translation)  User location – SIP registrar (pass through or main)  Media stream NATing AND THE OTHER SIP FUNCTIONS:  SIP server  Outbound/inbound proxy  SIP Switch (PBX functions and advanced routing)

4. © 2006 Intertex Data AB 4 Existing Firewall (not SIP aware) LAN SIParator Configuration LAN SIPARATOR CONFIGURATION The UDP port range 35000 – 36999 is recommended for the SIP media streams. The outside IP address of the existing firewall (i.e. the public IP address from the ISP) is automatically filled in. Even dynamic IP addresses are supported (automatically updated) EXISTING FIREWALL CONFIGURATION The SIP UDP and TCP ports 5060 must be redirected to the LAN SIParator. The UDP port range must be opened and redirected to the LAN SIParator. SIP CLIENT CONFIGURATION All SIP clients on the LAN must be setup to use the IP address of LAN SIParator as their outbound SIP proxy.