Example: Setting SIP ALG Call Duration and Timeouts

This example shows how to set the call duration and the media inactivity timeout.

Requirements

Before you begin, review the call duration and timeout features used to control SIP call activity. See Understanding SIP ALG Call Duration and Timeouts.

Overview

The call duration and inactivity media timeout features help you to conserve network resources and maximize throughput.

The maximum-call-duration parameter sets the maximum allowable length of time a call can be active. When the duration is exceeded, the SIP ALG tears down the call and releases the media sessions. This setting also frees up bandwidth in cases where calls fail to properly terminate.

The inactive-media-timeout parameter indicates the maximum length of time (in seconds) a call can remain active without any media (RTP or RTPC) traffic within a group. Each time an RTP or RTCP packet occurs within a call, this timeout resets. When the period of inactivity exceeds this setting, the SIP ALG temporary openings (pinholes) for media in the firewall are closed. The default setting is 120 seconds, and the range is 10 through 2550 seconds. Upon timeout, while resources for media (sessions and pinholes) are removed, the call is not terminated.

In this example, the call duration is set to 180000 seconds and the media inactivity timeout is set to 90 seconds.

Configuration

J-Web Quick Configuration

Step-by-Step Procedure

To set the SIP ALG call duration and the media inactivity timeout:

1. Select Configure>Security>ALG.
2. Select the SIP tab.
3. In the Maximum call duration field, type 3000.
4. In the Inactive media timeout field, enter 90.
5. Click OK to check your configuration and save it as a candidate configuration.
6. If you are done configuring the device, click Commit Options>Commit.

Step-by-Step Procedure

To set the SIP ALG call duration and the media inactivity timeout:

1. Configure the SIP ALG call duration.
   [edit]user@host# set security alg sip maximum-call-duration 3000
2. Configure the SIP ALG inactivity media timeout.
   [edit]user@host# set security alg sip inactive-media-timeout 90
3. If you are done configuring the device, commit the configuration.
   [edit]user@host# commit

Verification

To verify the configuration is working properly, enter the show security alg sip command.

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• SIP ALG Configuration Overview
• Verifying SIP ALG Configurations