H.323 ALG Configuration Overview

The H.323 Application Layer Gateway (ALG) is enabled by default on the device—no action is required to enable it. However, you might choose to fine-tune H.323 ALG operations by using the following instructions:

1. Specify how long an endpoint registration entry remains in the Network Address Translation (NAT) table. For instructions, see Example: Setting H.323 ALG Endpoint Registration Timeouts .

2. Enable media traffic on a narrow or wide range of ports. For instructions, see Example: Setting H.323 ALG Media Source Port Ranges .

3. Protect the H.323 gatekeeper from denial-of-service (DoS) flood attacks. For instructions, see Example: Configuring H.323 ALG DoS Attack Protection.

4. Enable unknown messages to pass when the session is in NAT mode and route mode. For instructions, see Example: Allowing Unknown H.323 ALG Message Types.

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Understanding H.323 ALGs
• Example: Passing H.323 ALG Traffic to a Gatekeeper in the Private Zone
• Example: Passing H.323 ALG Traffic to a Gatekeeper in the External Zone
• Example: Using NAT and the H.323 ALG to Enable Incoming Calls (CLI)
• Example: Using NAT and the H.323 ALG to Enable Outgoing Calls (CLI)