Helpful Information.

So what is the problem with SIP ALG?

SIP ALG was built as a tool when Hosted PBX's didn't have a great NAT solution. To this day some still do not understand NAT. Our system fully understand NAT and prefers the use of private IP addresses in SIP Messaging opposed to the Public IP Address. The message is delivered back to the Public IP Address and Port from which it was received.

Secondly, many commercial Firewalls and Modems do not fully understand SIP and SIP Routing. The replacement of the private IP is done via Scripting, which can also eliminate critical parts of the SIP message. They also commonly have problems with their own internal NAT Routing Table for the messages they transformed, causing some SIP messages to be delivered to the wrong endpoint or not be delivered at all.

What are some symptoms of SIP ALG?

There are many Symptoms of SIP ALG, here are some of the most common symptoms we see.

  • One-way or No-way audio, intermittently or consistently.

  • Outbound or Inbound Call Fails to Connect.

  • Audio cuts out completely while on a call and doesn't return.

  • Phones continue ringing and can't be answered.

  • Unable to call another extension on own Network.

What are NOT symptoms of SIP ALG?

There are some misconceptions, as SIP ALG is only a NAT tool it does NOT effect the following:

  • Audio Quality after a call has started. This would most commonly be caused by Jitter or Packet Loss on the customer's Network.

  • Echo or Static, there are both elements typically associated with an issue at the Endpoint or on the Local Network such as Electronic Interference or Voice Activity Detection (VAD).

 


Routers With Known Issues.

Comcast home version with wireless have them change to Comcast business version. The home version with wireless gets used by Comcast to also support their open Wi-Fi network (Hotspot) and this can lead to over utilization and voice quality issues. It is reported that it can be disabled, instructions are here  http://bgr.com/2014/06/11/how-to-disable-comcast-xfinity-wi-fi-hotspot/.    If this does not work then a call to ComCast customer service is needed. 

Motorola SBG-650 usually leads to audio problems (used by Time Warner). The problem with this one is that under high it starts buffering (or even freezing) packet output and it doesn't seem to be a way to set QOS to still allow RTP so it will end up with voice quality issues. 

Dlink  DIR-655 SIP ALG is enabled by default as well as the router will stop passing the audio packets after 10 seconds of connection reporting that the port is not available. 

Ubee modem/router, frequently used by Time Warner. This modem has been reported as causing loss of audio. As reported to us by a Time Warner engineer, there is a cache that crashes and then stops RTP from passing. 

Arris modem/gateway - This device running DOCSIS 2.0 has limit bandwidth support. If more than 4 simultaneous calls are connected it will discard packets causing audio issues. DOCSIS version 3.0 has greater bandwidth support and looks to be able to support up to 16 calls. 

Amped Titan HighPower AC1900 - ALG is enabled by default and cannot be disabled. 

Hitron E31N2V1 the reason of issue is unknown but latency and jitters are observed when VoIP phones are connected.

Motorola - SBG6580 (SurfBoard Extreme Wireless Cable Modem Gateway)No Registeration possible behind NAT as the device changes Call-ID and causes the responses to be discarded by SIP clients/ATAsNo Solution at this time (SIP ALG, called SIP Pass Through, can not be disabled) .Must disable NAT and put the device in bridge mode (check Mororola website for guide). 

SpeedTouch - ST560 v6  (firmware >= 5.4.0.13 comes with SIP ALG enabled by default.) NAT type: symmetricalIssues: No incoming calls. It replaces the private IP appearing in SIP headers with the public IP using a dumb text replacement. If for example the private IP appears in the "Call-ID" it replaces it too (that it's completely unnecessary).To disable SIP ALG:~# telnet router-> connection unbind application=SIP port=5060-> saveall 

Zyxel - 660  family comes with SIP ALG enabed by default. NAT type: symmetricalIssues:No incoming calls.SIP protocol broken making 50% of outgoing calls impossible because the wrong values are inserted into SIP headers.To disable SIP ALG:~# telnet routerMenu option "24. System Maintenance".Menu option "8. Command Interpreter Mode".ip nat service sip active 0 

Netgear - WGR614v9 Wireless-G Router, DGN2000 Wireless-N ADSL2+ Modem Router Firmware V1.0.18_8.0.9NATo disable SIP ALG: From Wan Setup Menu, NAT Filtering, uncheck the box next to "Disable SIP ALG" 

SMC - ToDo  NAT type: No symmetricalIssues:The ALG doesn't replace the private address in "Call-ID" header (that is correct) but it does replace the "call-id" value in "Refer-To" header so SIP transfer is broken.To disable SIP ALG: ToDo no ALG related options found via web and telnet. No idea of how to dissable it. 

Linksys - WRV200, WRT610N. NAT type: SymmetricalIssues:The ALG replaces the private address in "Call-ID" header (not needed at all). Some phones (as Linksys with latest firmware) encode the "Call-ID" value in the "Refer-To" header (by escaping the dots) so the private IP appearing there is not replaced with the public IP. This causes that the call transfer fails since the proxy/PBX/endpoint will not recognize the dialog info.To disable SIP ALG on WRV200; no ALG related options found via web and telnet. No idea of how to disable it.To disable SIP ALG on WRT610N: Web Interface: Administration, Management, under side heading 'Advanced Features' SIP ALG, can be disabled. 

Fortinet  All models come with SIP Helper enabled by default. Step to disable can be found here: Click Here. Full documentation at http://docs.fortinet.com then pick FortiOS for the version on your device, then VoIP solutions: SIP. 

Cisco - 800 series  To disable the NAT services for SIP in IOS, just run these commands:no ip nat service sip tcp port 5060no ip nat service sip udp port 5060 

Juniper/Netscreen - SSG Series  To disable SIP ALG:In the Web interface: Security -> ALG 

Asus RT-AC66U -  with their most current firmware enables their SIP ALG by default. THERE IS NO GUI OPTION TO DISABLE IT. To disable the SIP ALG manually, you enable telnet to the device via the WWW interfaceTelnet to the device (from a command line enter "telent 192.168.1.1" or the appropriate IP address for the device.)Issue the following commands: nvram get nf_sip (It should return a "1") nvram set nf_sip=0 nvram commitReboot  Then reboot the router for the changes to take effect. Under firmware 3.0.0.4.374_257 SIP ALG is located in (via the web interface):1. Log into the router's web interface.2. Go to Advanced Settings / WAN on left side.3. From the tabs across the top, choose NAT Pass through.4. Change SIP pass through to "Disable." Hit apply. For phones to pick up the change immediately, reboot each of them, otherwise they will pick up the new NAT table with changes during their next registration. 

Comcast DPC3939B has ALG pre-installed and cannot be turned off. 

Comcast Netgear Gateway Model CG3000 DCR  will not allow customer to disable SIP ALG. The only true way to work around this is to place the CG3000 into bridge mode and then place a router/firewall behind it. *(note, we have seen sites that made this change and still encountered issues, suspicion is that it does not function in a true bridge mode. Some sites had to replace with a regular modem.) 

Arris TG862G and TG862G-CT  SIP ALG is enabled and no way to disable. These are often used by Comcast as a Gateway. Arris 1682 Intercepts and drops SIP Packets, even in Bridge Mode. 

AT&T Uverse Arris NVG589  SIP ALG is enabled by default and cannot be disabled. By default it will not support hosted phones, AT&T may be able to open port 5060 for SIP traffic but it is reported to us it is not possible for user level admin to do so.

 ACTIONTEC model GT784WNV Frequently used by Verizon. The manual states that ALG is assigned automatically and there is no mention of a way to disable. 

Verizon FiOS G1100  This modem has SIP ALG enabled by default and Verizon has not provided a method to disable this feature. Verizon has also not released if it can be disabled by Verizon itself. Best recommendation at this time is not to use this modem. White page link  https://hosting.intermedia.net...


So what is the problem with SIP ALG?

SIP ALG was built as a tool when Hosted PBX's didn't have a great NAT solution. To this day some still do not understand NAT. Our system fully understand NAT and prefers the use of private IP addresses in SIP Messaging opposed to the Public IP Address. The message is delivered back to the Public IP Address and Port from which it was received.Secondly, many commercial Firewalls and Modems do not fully understand SIP and SIP Routing. The replacement of the private IP is done via Scripting, which can also eliminate critical parts of the SIP message. They also commonly have problems with their own internal NAT Routing Table for the messages they transformed, causing some SIP messages to be delivered to the wrong endpoint or not be delivered at all.

What are some symptoms of SIP ALG?

There are many Symptoms of SIP ALG, here are some of the most common symptoms we see.One-way or No-way audio, intermittently or consistently.Outbound or Inbound Call Fails to Connect.Audio cuts out completely while on a call and doesn't return.Phones continue ringing and can't be answered.Unable to call another extension on own Network.

What are NOT symptoms of SIP ALG?

There are some misconceptions, as SIP ALG is only a NAT tool it does NOT effect the following:Audio Quality after a call has started. This would most commonly be caused by Jitter or Packet Loss on the customer's Network.Echo or Static, there are both elements typically associated with an issue at the Endpoint or on the Local Network such as Electronic Interference or Voice Activity Detection (VAD).