sip (Security)
Syntax
sip {
application-screen {
protect {
deny (all | varname);
timeout varseconds;
}
unknown-message {
permit-nat-applied;
permit-routed;
}
}
bulk-call-mode;
c-timeout varminutes;
disable;
dscp-rewrite {
code-point string;
}
varname distribute-tofpc {
pic varname;
varname;
}
dscp-rewrite {
code-point varcode-point;
}
enable-call-distribution;
hide-via-headers disable;
inactive-media-timeout varseconds;
maximum-call-duration varminutes;
retain-hold-resource;
t1-interval varmilliseconds;
t4-interval varseconds;
traceoptions {
flag {
all {
<detail | extensive | terse>
}
}
}
}Hierarchy Level
[edit logical-systems name security alg], [edit logical-systems name tenants name security alg], [edit security alg], [edit tenants name security alg]
Description
Configure sip to specify the Session
Initiation Protocol (SIP) ALG on the device. Session Initiation Protocol
(SIP) is a signaling protocol for initiating, modifying, and terminating
multimedia sessions over the internet. By default, the SIP ALG is
disabled for SRX5600 and SRX5800 devices. Use the CLI command delete security alg alg-name disable to
enable the SIP ALG. IPv6 is supported on the SIP ALG along with Network
Address Translation Protocol Translation (NAT-PT) mode and NAT64 address
translation. The type of the destination-ip-address is changed from
IPv4 address to IP prefix to support all kinds of IP addresses, and
correspondingly a prefix is supported to allow multiple IP addresses.
Options
disable—Disable the
SIP ALG. Use the set security alg alg-name disable CLI command to disable the SIP ALG.
distribution-ip—Configure IPv4 or IPv6 distribution IP addresses. You can
configure upto 20 IP addresses.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.2.
The distribution-ip option introduced in Junos OS Release 18.1R1 for SRX5400, SRX5600,
and SRX5800 devices.
The tenant option is introduced in Junos
OS Release 18.3R1.