EchoLink requires that your router or firewall allow inbound and outbound UDP to destination ports 5198 and 5199, and outbound TCP to port 5200.  Source ports are dynamically assigned.  If you are using a home-network router, you will also need to configure the router to "forward" UDP ports 5198 and 5199 to the PC on which EchoLink is running.

This can be summarized as:

Allow UDP (source port any, destination ports 5198-5199) from Internet to PC
Allow UDP (source port any, destination ports 5198-5199) from PC to Internet
Allow TCP (source port any, destination port 5200) from PC to Internet

The information above applies to every situation, regardless of the type of equipment and software you are using.  If the information below does not help you solve the problem, please consult your equipment's documentation, or contact the manufacturer for support, and provide them with the information above.

Microsoft Windows XP

Windows XP comes with a built-in "firewall" feature that helps protect your computer from undesired connections from the Internet.  In order to use EchoLink, you will need to adjust some settings.  The software must be configured to allow TCP port 5200 to pass outbound, and UDP ports 5198 and 5199 to pass inbound and outbound.

For more information, see Windows XP Firewall Setup.

Windows Internet Connection Sharing

Several versions of Microsoft Windows support a utility called Internet Connection Sharing (ICS).  This utility allows several different computers on a local network to access the Internet over a single connection.  The software must be configured to "forward" UDP ports 5198 and 5199 to the computer on which EchoLink is installed, which might not be the same computer on which ICS is running.

A useful utility for setting up Internet Connection Sharing is ICS Configuration.

Home-Network Routers

A "router", as used in a home network, is a device which allows several different computers to share a single connection to the Internet.  A router is frequently used in conjunction with a cable modem or DSL connection.  Popular models are manufactured by Linksys, D-Link, and SMC.  We do not have configuration information for any routers other than those listed below.  If your model is not listed below, please consult the manufacturer's documentation for details.

Linksys

1.     Using a Web browser, bring up your router's configuration page.  By default, the URL is 192.168.1.1, the user name is blank, and the password is "admin".

2.     Click the Advanced tab.

3.     Click the Forwarding tab.

4.     In the first pair of Service Port Range boxes along the top, enter 5198 and 5199.

5.     On the same line, under Protocol, choose UDP.

6.     On the same line, enter the IP address of the computer running EchoLink.

7.     Click Apply to save changes.

D-Link DI-604

1.     Using a Web browser, bring up your router's configuration page.  By default, the URL is 192.168.0.1, the user name is "admin", and the password is blank.

2.     Click the Advanced tab.

3.     Click the Enable button.

4.     After Name, enter "EchoLink 5198"

5.     After Private IP, enter the IP address of the computer running EchoLink.

6.     After Protocol Type, choose UDP.

7.     After Private Port, enter 5198.

8.     After Public Port, enter 5198.

9.     Choose "Always".

10. Click "Apply".

11. Repeat steps 4 through 10, but use the name "EchoLink 5199", and use 5199 as the Private Port and Public Port.

3Com Office Connect 612

(courtesy of IW0GLC)
Enter the following three commands, substituting your computer's local IP address for <ip>:

set vc EchoLink nat_options enable

add nat udp vc EchoLink public_port 5198 private_address <ip> private_port 5198

add nat udp vc EchoLink public_port 5199 private_address <ip> private_port 5199

SMC Routers

(courtesy of N1AHH)

click NAT
click SPECIAL APPLICATIONS
on line one under TRIGGER PORT type:

5198, TRIGGER TYPE UDP PUBLIC PORT 5198 PUBLIC TYPE UDP ENABLED

on line two under TRIGGER PORT type:

5199, TRIGGER TYPE UDP PUBLIC PORT 5199 PUBLIC TYPE UDP ENABLED

Drop down to the bottom of the page and select apply. Exit the router set-up and start EchoLink.  It should function normally.

If you have any firmware version before v1.05, contact SMC technical support at www.smc.com and ask for the latest firmware update.  The latest on the web page as of 3 nov 02 is ver 1.03, however if asked, they will e-mail you version 1.05 which appears to solve a problem with intermittent disconnects.

When you receive the firmware update, install it according to the manual's directions. Basically, this means to go to the ADVANCED section and then TOOLS, then FIRMWARE UPGRADE.  Follow the directions.  The router will perform a hard reset when done and you will have to re-configure using the SET-UP WIZARD.

Other Routers

In general, the router must be configured to "forward" UDP ports 5198 and 5199 to the computer on which EchoLink is installed.  Forwarding is sometimes found as an advanced configuration option on your router's setup screens.  If forwarding is not available, you may need to configure your EchoLink computer as a DMZ, which effectively opens all ports to the Internet.  If this becomes necessary, some sort of network security software such as Windows XP, BlackIce, or ZoneAlarm is recommended.

Linux IPTables

For complete details, see the sample configuration file generously provided by Jason, KB1IMD.

AVM KEN Proxy Software

AVM KEN is a German product, available in ISDN and DSL versions.  For complete details, see the configuration information generously provided by Jochen, DG2IAQ.

Satellite Internet Service Providers

Many users are successfully running EchoLink using an Internet connection provided through a satellite dish.  Although the latency (time delay) is usually higher with this type of system, it rarely affects EchoLink since EchoLink does not use end-to-end acknowledgements of voice packets.  However, some service providers use a router which does network-address translation (NAT), which often cannot be configured by the customer.  Check with your satellite ISP to see if this is the case, and whether a different tier of service is available which will avoid it.