ZyXEL Communications ZyWall USG20-VPN User Manual page 271

The following table describes the labels in this screen.
Table 108 Configuration > Network > ALG
LABEL
Enable SIP ALG
Enable SIP
Transformations
Enable Configure SIP
Inactivity Timeout
SIP Media Inactivity
Timeout
SIP Signaling Inactivity
Timeout
Restrict Peer to Peer
Signaling Connection
Restrict Peer to Peer
Media Connection
SIP Signaling Port
Additional SIP Signaling
Port (UDP) for
Transformations
Enable H.323 ALG
Enable H.323
Transformations
H.323 Signaling Port
Additional H.323
Signaling Port for
Transformations
Enable FTP ALG
Chapter 14 ALG
DESCRIPTION
Turn on the SIP ALG to detect SIP traffic and help build SIP sessions through the
USG's NAT.
Select this to have the USG modify IP addresses and port numbers embedded in
the SIP data payload.
You do not need to use this if you have a SIP device or server that will modify IP
addresses and port numbers embedded in the SIP data payload.
Select this option to have the USG apply SIP media and signaling inactivity time out
limits.
Use this field to set how many seconds (1~86400) the USG will allow a SIP session
to remain idle (without voice traffic) before dropping it.
If no voice packets go through the SIP ALG before the timeout period expires, the
USG deletes the audio session. You cannot hear anything and you will need to make
a new call to continue your conversation.
Most SIP clients have an "expire" mechanism indicating the lifetime of signaling
sessions. The SIP user agent sends registration packets to the SIP server
periodically and keeps the session alive in the USG.
If the SIP client does not have this mechanism and makes no calls during the USG
SIP timeout, the USG deletes the signaling session after the timeout period. Enter
the SIP signaling session timeout value (1~86400).
A signaling connection is used to set up the SIP connection.
Enable this if you want signaling connections to only arrive from the IP address(es)
you registered with. Signaling connections from other IP addresses will be dropped.
A media connection is the audio transfer in a SIP connection.
Enable this if you want media connections to only arrive from the IP address(es)
you registered with. Media connections from other IP addresses will be dropped.
If you are using a custom UDP port number (not 5060) for SIP traffic, enter it here.
Use the Add icon to add fields if you are also using SIP on additional UDP port
numbers.
If you are also using SIP on an additional UDP port number, enter it here.
Turn on the H.323 ALG to detect H.323 traffic (used for audio communications) and
help build H.323 sessions through the USG's NAT.
Select this to have the USG modify IP addresses and port numbers embedded in
the H.323 data payload.
You do not need to use this if you have a H.323 device or server that will modify IP
addresses and port numbers embedded in the H.323 data payload.
If you are using a custom TCP port number (not 1720) for H.323 traffic, enter it
here.
If you are also using H.323 on an additional TCP port number, enter it here.
Turn on the FTP ALG to detect FTP (File Transfer Program) traffic and help build FTP
sessions through the USG's NAT.
USG20(W)-VPN Series User's Guide
271