ZyXEL Communications ZyWALL 1100 User Manual page 284

Table 120 Configuration > Network > ALG (continued)
LABEL
SIP Signaling Inactivity
Timeout
Restrict Peer to Peer
Signaling Connection
Restrict Peer to Peer
Media Connection
SIP Signaling Port
Additional SIP Signaling
Port (UDP) for
Transformations
Enable H.323 ALG
Enable H.323
Transformations
H.323 Signaling Port
Additional H.323
Signaling Port for
Transformations
Enable FTP ALG
Enable FTP
Transformations
FTP Signaling Port
Additional FTP Signaling
Port for
Transformations
Apply
Reset
Chapter 14 ALG
DESCRIPTION
Most SIP clients have an "expire" mechanism indicating the lifetime of signaling
sessions. The SIP user agent sends registration packets to the SIP server
periodically and keeps the session alive in the ZyWALL/USG.
If the SIP client does not have this mechanism and makes no calls during the
ZyWALL/USG SIP timeout, the ZyWALL/USG deletes the signaling session after the
timeout period. Enter the SIP signaling session timeout value (1~86400).
A signaling connection is used to set up the SIP connection.
Enable this if you want signaling connections to only arrive from the IP address(es)
you registered with. Signaling connections from other IP addresses will be dropped.
A media connection is the audio transfer in a SIP connection.
Enable this if you want media connections to only arrive from the IP address(es)
you registered with. Media connections from other IP addresses will be dropped.
If you are using a custom UDP port number (not 5060) for SIP traffic, enter it here.
Use the Add icon to add fields if you are also using SIP on additional UDP port
numbers.
If you are also using SIP on an additional UDP port number, enter it here.
Turn on the H.323 ALG to detect H.323 traffic (used for audio communications) and
help build H.323 sessions through the ZyWALL/USG's NAT. Enabling the H.323 ALG
also allows you to use the application patrol to detect H.323 traffic and manage the
H.323 traffic's bandwidth (see
Select this to have the ZyWALL/USG modify IP addresses and port numbers
embedded in the H.323 data payload.
You do not need to use this if you have a H.323 device or server that will modify IP
addresses and port numbers embedded in the H.323 data payload.
If you are using a custom TCP port number (not 1720) for H.323 traffic, enter it
here.
If you are also using H.323 on an additional TCP port number, enter it here.
Turn on the FTP ALG to detect FTP (File Transfer Program) traffic and help build FTP
sessions through the ZyWALL/USG's NAT. Enabling the FTP ALG also allows you to
use the application patrol to detect FTP traffic and manage the FTP traffic's
bandwidth (see Chapter 26 on page
Select this option to have the ZyWALL/USG modify IP addresses and port numbers
embedded in the FTP data payload to match the ZyWALL/USG's NAT environment.
Clear this option if you have an FTP device or server that will modify IP addresses
and port numbers embedded in the FTP data payload to match the ZyWALL/USG's
NAT environment.
If you are using a custom TCP port number (not 21) for FTP traffic, enter it here.
If you are also using FTP on an additional TCP port number, enter it here.
Click Apply to save your changes back to the ZyWALL/USG.
Click Reset to return the screen to its last-saved settings.
ZyWALL/USG Series User's Guide
284
Chapter 26 on page 427).
427).