1

I'm not sure how the SIP alg on juniper works, but I guess its reading traffic on port 5060 to read sip signaling.

We have just changed to an other operator who dont use the standard sip port (5060) on their proxy. The problem is we get only one way audio (audio from outside cant reach us) I guess this is because the juniper box doesn't recognize the sip signaling messages and therefor it doesn't open the port needed for audio to go through the firewall.

So is there someway I can change the port or add one extra port for the sip alg service to monitor?

1
  • How do you have SIP ALG configured?
    – Ron Maupin
    Commented Sep 11, 2017 at 21:15

1 Answer 1

4

First, ALGs are technically independent entities. If we are looking at JUST the ALG, it cares only about the SIP signaling packets, not which ports are used.

You define the ports by application and bind the ALG to that application. Below is an example:

jhead@SRX# show applications application sip | display set
set applications application sip term t1 alg sip
set applications application sip term t1 protocol udp
set applications application sip term t1 destination-port 5061
set applications application sip term t2 alg sip
set applications application sip term t2 protocol udp
set applications application sip term t2 destination-port 5060
set applications application sip term t3 alg sip
set applications application sip term t3 protocol tcp
set applications application sip term t3 destination-port 5060

You can build as many terms as you need for each port you need to service.

Be sure to also adjust your security policies with the new application and anything else that might be required.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.