If your router does not have a web interface you will most likely need a Telnet client tologin.
If you don't have a telnet client installed we recommendSmartty (smartty.sysprogs.com)
Connect intelnet to the IPv4 address of your gateway and hit enter again.
Asus Routers
Disable the option SIP Passthrough under Advanced Settings / WAN -> NAT Passthrough.
If your router doesn't have this option SIP ALG may be disabled via Telnet.
nvram get nf_sip
(It should return a "1")
nvram set nf_sip=0
nvram commit
Reboot
AVM Fritz!Box
Barracuda Firewalls
Click the "Disabled" check box next to any rules named LAN-2-INTERNET-SIP and INTERNET-2-LAN-SIP
This disables SIP ALG.
Billion
-> Select Configuration
-> SelectNAT
-> SelectALG
-> Disable SIP ALG
BT (Homehubs)
Cisco RV Range
(RV082, RV016, RV042, RV042G, RV325)
-> f needed, update firmware by going to System Management > Firmware Upgrade.
-> Go to Firewall > General.
-> Ensure that Firewall and Remote Management are enabled (checked).
-> Ensure that the following are disabled (unchecked):
-> SPI (Stateful Packet Inspection)
-> DoS (Denial of Service)
-> Block WAN Request
-> SIP ALG
-> Click Save.
-> Browse to IPADDRESS/f_general_hidden.htm.
-> Set UDP Timeout to 300 seconds.
-> Go to Firewall > Access Rules.
-> Whitelist VoiceHost IP ranges
Save all changes.
D-Link
DD-WRT
DrayTek
DrayTek Vigor 2760 devices, the option can be found in the regular interface at Network -> NAT -> ALG.
If your device does not have a web interface then you'll need a telnet client.
You will be prompted to provide a username and/or password. These are the same credentials used to access the router's web interface.
Afterwards, type in these commands:
sys sip_alg 0
sys commit
On Draytek Vigor2750 and Vigor2130 please use these commands instead:
kmodule_ctl nf_nat_sip disable
kmodule_ctl nf_conntrack_sip disable
EE
Huawei E5330
Navigate to the web interface
Click Settings.
Enter the required username and password, then click Log In.
Note: The default username and password is admin.
Click the Security dropdown.
Click SIP ALG Settings.
Untick the Enable SIP ALG box.
Click Apply.
Fortinet
Fortigate:
Disabling the SIP ALG in a VoIP profile
SIP is enabled by default in a VoIP profile. If you are just using the VoIP profile for SCCP you can use the following command to disable SIP in the VoIP profile.
config voip profile
edit VoIP_Pro_2
config sip
set status disable
end
Huawei
The SIP ALG setting is usually found in the Security menu.
- Vodafone / Huawei (HHG2500)
- TalkTalk / Huawei (HG633)
- EE /Huawei (E5330)
Juniper
Type the following into the CLI
To check if currently enabled or disabled runshow securityalgstatus | match sip
To disable run:
configure
set security alg sip disable
commit
Linksys:
You should alsodisable the SPI Firewall option.
Mikrotik
Netgear
Look for a 'SIP ALG' checkbox in 'WAN' settings.
Under 'NAT Filtering' uncheck the option 'SIP ALG'
Port Scan and DoS Protection should also be disabled.
Disable STUN in VoIP phone's settings.
openwrt
PfSense
SonicWALL Firewall
Detailed instructions can be found here:https://www.voicehost.co.uk/help/sonicwall-configuration
Speedtouch
To disable SIP ALG you need to telnet into your Speedtouch router and type the following:
-> connection unbind application=SIP port=5060
-> saveall
TalkTalk
2017/18 See Huawei(HG633)
- Navigate to the web interface
- Select 'Port Forwarding' from the menu
- Uncheck SIP-ALG from the ALG section at the bottom of the page.
Technicolor / Thompson
TG588 TG589 TG582 DWA0120
In Command Prompt, type “telnet 192.168.1.254” and press enter. 192.168.1.254 is the default IP address of the router. If you are running on Windows 7/8/8.1/10, you might need to install the telnet client from “Control Panel” → “Programs and Features” → “Turn Windows features on and off”.
The default username is “Administrator”, and there is no default password, leave blank.
Type “connection unbind application=SIP port=5060” and press “Enter”.
Type “ saveall ” and press “Enter”.
Type “exit” and press “Enter” to exit the telnet session.
Tomato
TP-Link
The default username is admin and the default password isadmin.
On the left, click on Advanced Setup and then click on NAT and then click on ALG.
Uncheck the box by SIP Enabled. (Some TP firmware shows this as SIP Transformations which is the same thing).
Click Save/Apply.
UBEE Gateways
Disable (uncheck) SIP.
Disable (uncheck) RTSP.
Click Apply.
Ubiquiti
Use the configuration tree if supported: system -> conntrack -> modules -> sip -> disable
Alternatively, you can SSH into the device and run the following commands:
configure
set system conntrack modules sip disable
commit
save
exit
Virgin SuperHub
Please see our workarounds at the top of the page.
Vodafone
Vyatta / Brocade:
Type the following into the CLI
configure
set systemconntrackmodules sip disable
commit
save
exit
Watchguard Firewall
ZyXEL
Under Network or Advanced -> ALG un-tick the options Enable SIP ALG and Enable SIP Transformations.
Telnet commands must be used to disable SIP ALG with some other Zyxel routers.
- Telnet into the router.
- Select menu items 24 then 8.
- To display the current SIP ALG status run the following command:
- ip nat service sip active
- To turn off SIP ALG:
- ip nat service sip active 0
ZyXEL (ZyWALL USG Routers)
Disable SIP ALG.
Turn ON Enable SIP Transformations.
Turn OFF Enable Configure SIP Inactivity Timeout.
