Ip Firewall Alg Command - ADTRAN 5000 Series Command Reference Manual

Command Reference Guide
ip firewall alg [ftp | h323 | pptp]
Use the ip firewall alg command to enable the application-level gateway (ALG) for a particular
application. Use the no form of this command to disable ALG for the application.
Syntax Description
ftp
h323
pptp
Default Values
By default, the ALG for FTP, H323, and PPTP are enabled.
Applicable Platforms
This command applies to the NetVanta 300, 1000R, 3000, 4000, and 5000 and Total Access 900 Series
units.
Command History
Release 8.1
Release 10.1
Functional Notes
Enabling the Application Layer Gateway (ALG) for a specific protocol gives the firewall additional
information about that complex protocol and causes the firewall to perform additional processing for
packets of that protocol. When the ALG is disabled, the firewall treats the complex protocol as any other
simple protocol. The firewall needs no special knowledge to work well with simple protocols.
Disabling the IP firewall ALG may cause the firewall to block some of the traffic for
the specified protocol.
Usage Examples
The following example disables ALG for FTP:
(config)#no ip firewall alg ftp
61200990L1-35E
Enables the FTP ALG.
Enables the H323 ALG.
Enables the PPTP ALG.
Command was introduced.
H323 was added.
Copyright © 2005 ADTRAN
Global Configuration Mode Command Set
371