Streaming Media Supplement sa2150 and sa2250

75
Chapter 7 Configuring Media-IXT for RealNetworks
Media-IXT supports LDAP authentication of RTSP streams using TCP as the underlying transport protocol for
the data channel, but not for streams using UDP. The RTSP data channel is much more likely to use TCP than
UDP as its underlying transport protocol.
Configuring firewalls for RealNetworks
Firewalls and how they work with Media-IXT are explained in “Understanding firewalls” on page 16.
This section provides configuration procedures.
For background information about deploying Media-IXT for RealNetworks streaming through a firewall, see
“Understanding firewalls and RealNetworks” on page 30.
Configuring application-level firewalls (proxy firewalls) for RealNetworks
To enable RTSP and PNA on an application-level firewall you need to install extra software components on
your firewall, and configure Media-IXT to use the firewall as its parent proxy.
To enable RTSP and PNA on an application-level firewall:
1. obtain from HP Technical Support, and install, three software components on your firewall:
o RTSP Proxy Kit, running on port 554
o PNA Proxy Kit, and running on port 7070
o the RealNetworks firewall daemon, running on port 7802
The port numbers given for the Proxy Kits from RealNetworks are defaults; it is possible to configure the Proxy
Kits to run on different ports.
To configure Media-IXT to use the firewall as its parent proxy:
1. Enable parenting by setting the following in records.config:
CONFIG proxy.config.http.parent_proxy_routing_enable INT 1
2. Add the appropriate parent proxy routing rules to parent.config.
For example:
dest_domain=. scheme=http parent="parent.company.com:8080" go_direct=false
dest_domain=. scheme=rtsp parent="parent.company.com:1091" go_direct=false
dest_domain=. scheme=mms parent="parent.company.com:1755" go_direct=false
Configuring network-level firewalls for RealNetworks
The main point to bear in mind when configuring a network-level firewall for use with Media-IXT is that the
ports used by your deployment’s streaming protocols are open.
The procedures given for network-level firewall deployment are not necessary for application-level firewall
deployment.
NOTE RealPlayer only works with LDAP authentication when configured to use TCP as an
underlying transport protocol for the data channel.