R3721-F3210-F3171-HP High-End Firewalls NAT and ALG Configuration Guide-6PW101

Figure 40 Configuring an internal FTP server

SIP/H.323 ALG configuration example

The H.323 ALG configuration is similar to the SIP ALG configuration. This example describes the SIP ALG

configuration.

Network requirements

As shown in Figure 41, a company uses the private network segment 192.168.1.0/24, and has four public

network addresses: 5.5.5.1, 5.5.5.9, 5.5.5.10, and 5.5.5.11. SIP UA 1 is on the internal network and SIP

UA 2 is on the external network.

Configure NAT and ALG on the FIrewall so that SIP UA 1 and SIP UA 2 can communicate by using their

aliases, and SIP UA 1 selects an IP address from the range 5.5.5.9 to 5.5.5.11 when registering with the

SIP server on the external network.

Figure 41 Network diagram

Configuration procedure

1. Enable SIP ALG: