Example: Allowing Unknown SIP ALG Message Types

This example shows how to allow unknown message types.

Requirements

Before you begin, review how unidentified SIP messages are handled by the device. See Understanding SIP ALG Unknown Message Types.

Overview

In this example, you configure the device to allow unknown message types in SIP traffic in both NAT mode and route mode. The default is to drop unknown (unsupported) messages.

Configuration

J-Web Quick Configuration

Step-by-Step Procedure

To allow unknown SIP ALG message types:

1. Select Configure>Security>ALG.
2. Select the SIP tab.
3. Select the Enable Permit NAT applied check box.
4. Select the Enable Permit routed check box.
5. Click OK to check your configuration and save it as a candidate configuration.
6. If you are done configuring the device, click Commit Options>Commit.

Step-by-Step Procedure

To allow unknown SIP ALG message types:

1. Configure the device to allow unknown message types in SIP traffic.
   [edit]user@host# set security alg sip application-screen unknown-message permit-nat-applied permit-routed
2. If you are done configuring the device, commit the configuration.
   [edit]user@host# commit

Verification

To verify the configuration is working properly, enter the show security alg sip command.

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• SIP ALG Configuration Overview
• Verifying SIP ALG Configurations