How the SIP ALG translates IP addresses in SIP headers
How the SIP ALG translates IP addresses in SIP headers The SIP ALG applies NAT to SIP sessions by translating the IP addresses contained in SIP headers. For example, the following SIP message contains...
View ArticleHow the SIP ALG translates IP addresses in the SIP body
How the SIP ALG translates IP addresses in the SIP body The SDP session profile attributes in the SIP body include IP addresses and port numbers that the SIP ALG uses to create pinholes for the media...
View ArticleSIP NAT scenario: source address translation (source NAT)
SIP NAT scenario: source address translation (source NAT) The following figures show a source address translation scenario involving two SIP phones on different networks, separated by a FortiGate. In...
View ArticleSIP NAT scenario: destination address translation (destination NAT)
SIP NAT scenario: destination address translation (destination NAT) The following figures show how the SIP ALG translates addresses in a SIP INVITE message sent from SIP Phone B on the Internet to SIP...
View ArticleSIP NAT configuration example: source address translation (source NAT)
SIP NAT configuration example: source address translation (source NAT) This configuration example shows how to configure the FortiGate to support the source address translation scenario shown below....
View ArticleSIP NAT configuration example: destination address translation (destination NAT)
SIP NAT configuration example: destination address translation (destination NAT) This configuration example shows how to configure the FortiGate to support the destination address translation scenario...
View ArticleSIP and RTP source NAT
SIP and RTP source NAT In the source NAT scenario shown below, a SIP phone connects to the Internet through a FortiGate with and IP address configured using PPPoE. The SIP ALG translates all private...
View ArticleSource NAT with an IP pool
Source NAT with an IP pool You can choose NAT with the Dynamic IP Pool option when configuring a security policy if the source IP of the SIP packets is different from the interface IP. The FortiGate...
View ArticleWhat is the difference between the 0 models and the 1 Models.
FortiGate marketing isn’t always on point. Let’s face it, a lot of people got confused with the naming convention on the E models back in 2016. This covers some basics that will hopefully provide...
View ArticleDifferent source and destination NAT for SIP and RTP
Different source and destination NAT for SIP and RTP This is a more complex scenario that a SIP service provider may use. It can also be deployed in large-scale SIP environments where RTP has to be...
View ArticleNAT with IP address conservation
NAT with IP address conservation In a source or destination NAT security policy that accepts SIP sessions, you can configure the SIP ALG or the SIP session helper to preserve the original source IP...
View ArticleConfiguring SIP IP address conservation for the SIP ALG
Configuring SIP IP address conservation for the SIP ALG You can use the following command to enable or disable SIP IP address conservation in a VoIP profile for the SIP ALG. SIP IP address conservation...
View ArticleConfiguring SIP IP address conservation for the SIP session helper
Configuring SIP IP address conservation for the SIP session helper You can use the following command to enable or disable SIP IP address conservation for the SIP session helper. IP address conservation...
View ArticleControlling how the SIP ALG NATs SIP contact header line addresses
Controlling how the SIP ALG NATs SIP contact header line addresses You can enable contact-fixup so that the SIP ALG performs normal SIP NAT translation to SIP contact headers as SIP messages pass...
View ArticleControlling NAT for addresses in SDP lines
Controlling NAT for addresses in SDP lines You can use the no-sdp-fixup option to control whether the FortiGate performs NAT on addresses in SDP lines in the SIP message body. The no-sdp-fixup option...
View ArticleTranslating SIP session destination ports
Translating SIP session destination ports Using port forwarding virtual IPs you can change the destination port of SIP sessions as they pass through the FortiGate.
View ArticleTranslating SIP sessions to a different destination port
Translating SIP sessions to a different destination port To configure translating SIP sessions to a different destination port you must add a static NAT virtual IP that translates tie SIP destination...
View ArticleTranslating SIP sessions to multiple destination ports
Translating SIP sessions to multiple destination ports You can use a load balance virtual IP to translate SIP session destination ports to a range of destination ports. In this example the destination...
View ArticleAdding the original IP address and port to the SIP message header after NAT
Adding the original IP address and port to the SIP message header after NAT In some cases your SIP configuration may require that the original IP address and port from the SIP contact request is kept...
View ArticleEnhancing SIP pinhole security
Enhancing SIP pinhole security You can use the strict-register option in a SIP VoIP profile to open smaller pinholes. This option is enabled by default on the default VoIP profiles and in all new VoIP...
View Article