NAT and SIP ALG

NAT and SIP ALG

NAT

NAT Traversal

NAT can interfere with SIP and RTP by changing the ports on the way through. To counter we enable NAT traversal by default therefore communicating directly to the port that sent us the original RTP traffic (instead of sending back to the RTP port in the SIP message). For SIP registrations therefore you should normally disregard any IP address and ports shown in the SIP message as in reality they are rarely the ones used.

Firewall Behind NAT

You can generally disable firewall rules if behind NAT as they they shouldn’t be required. However, if port forwarding [SIP and RTP] selecting an appropriate RTP range can be complicated. In this scenario you may need to disable NAT.

SIP ALG

For incoming calls, if you’re users are reporting ringing with no voice on answer you’ve probably encountered a SIP ALG issue on your router.  See our guide on Disabling SIP ALG on various brands of router.

If you are unable to access the router and therefore disable SIP ALG, consider switching your phone or PBX to TLS encryption (preventing SIP ALG) by changing the following two settings on your handset or IP-PBX.

  • proxy: phone.techconnections.co.nz
  • port: 5061
  • Transport: TLS

 


    • Related Articles

    • DIsabling SIP Application Layer Gateway (ALG) functionality

      If you are experiencing one way voice particularly on incoming calls the most probable cause is SIP ALG. While originally designed to resolve a NAT related problems, with no standard implementation many routers and software based firewalls corrupt ...

    • Tech Connections generic SIP settings for connecting a SIP compliant device to our service

      Customers with their own SIP enabled phone, gateway or PBX are free to use this to connect to Tech Connections's service. The device must be SIP v2 compatible. Refer to the settings below for a guide to how you should configure your device to connect ...

    • SIP Registration, Peering and IAX2 explained

      SIP Registration, Peering and IAX2 explained Tech Connections supports SIP registration, SIP peering and IAX2 registration to connect your VoIP service. SIP Registration The simplest of the three connection types “Registration” is used to connect IP ...

    • Why can’t I register my VoIP device?

      Why can’t I register my VoIP device? Firewalls and Interfering routers are the most common cause of SIP registration failure with your VoIP device where the firewall/router blocks incoming traffic required by our SIP registration process. Remember ...

    • TCP, TLS and Secure RTP Options

      TCP, TLS and Secure RTP Options We support both TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) communication protocols. While UDP is by far the most common of the two protocols TCP is stated to have advantages. TCP advantages ...