Sip Signaling Session Timeout; Peer-To-Peer Calls And The Zywall; Voip Calls From The Wan With Multiple Outgoing Calls; Figure 265 Sip Alg Example - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide

Figure 265 SIP ALG Example

26.1.5.2 SIP Signaling Session Timeout

Most SIP clients have an "expire" mechanism indicating the lifetime of signaling sessions.
The SIP user agent sends registration packets to the SIP server periodically and keeps the
session alive in the ZyWALL.
If the SIP client does not have this mechanism and makes no calls during the ZyWALL SIP
timeout, the ZyWALL SIP ALG deletes the signaling session after the timeout period.

26.2 Peer-to-Peer Calls and the ZyWALL

The ZyWALL ALG can allow peer-to-peer VoIP calls for both H.323 and SIP. You must
configure the firewall and virtual server (port forwarding) to allow incoming (peer-to-peer)
calls from the WAN to a private IP address on the LAN (or DMZ).

26.2.1 VoIP Calls from the WAN with Multiple Outgoing Calls

When you configure the firewall and virtual server (port forwarding) to allow calls from the
WAN to a specific IP address on the LAN, you can also use policy routing to have H.323 (or
SIP) calls from other LAN or DMZ IP addresses go out through a different WAN IP address.
The policy routing lets the ZyWALL correctly forward the return traffic for the calls initiated
from the LAN IP addresses.
For example, you configure the firewall and virtual server to allow LAN IP address A to
receive calls from the Internet through WAN IP address 1. You also use a policy route to have
LAN IP address A make calls out through WAN IP address 1. Configure another policy route
to have H.323 (or SIP) calls from LAN IP addresses B and C go out through WAN IP address
2. Even though only LAN IP address A can receive incoming calls from the Internet, LAN IP
addresses B and C can still make calls out to the Internet.
416 Chapter 26 VoIP Pass Through