Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


sip (Security)


Hierarchy Level


Configure sip to specify the Session Initiation Protocol (SIP) ALG on the device. Session Initiation Protocol (SIP) is a signaling protocol for initiating, modifying, and terminating multimedia sessions over the internet. By default, the SIP ALG is disabled for SRX5600 and SRX5800 devices. Use the CLI command delete security alg alg-name disable to enable the SIP ALG. IPv6 is supported on the SIP ALG along with Network Address Translation Protocol Translation (NAT-PT) mode and NAT64 address translation. The type of the destination-ip-address is changed from IPv4 address to IP prefix to support all kinds of IP addresses, and correspondingly a prefix is supported to allow multiple IP addresses.


disable—Disable the SIP ALG. Use the set security alg alg-name disable CLI command to disable the SIP ALG.

distribution-ip—Configure IPv4 or IPv6 distribution IP addresses. You can configure upto 20 IP addresses.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement modified in Junos OS Release 9.2.

The distribution-ip option introduced in Junos OS Release 18.1R1 for SRX5400, SRX5600, and SRX5800 devices.

The tenant option is introduced in Junos OS Release 18.3R1.