HP VPN Firewall Appliances NAT and ALG Configuration Guide

Figure 43 Adding an internal FTP server

SIP/H.323 ALG configuration example

H.323 ALG configuration is similar to SIP ALG configuration. This example discusses SIP ALG

configuration.

Network requirements

As shown in Figure 44, a company uses the private network segment 192.168.1.0/24, and has four

public network addresses: 5.5.5.1, 5.5.5.9, 5.5.5.10, and 5.5.5.11. SIP UA 1 is on the internal network

and SIP UA 2 is on the outside network.

Configure NAT and ALG on the firewall so that SIP UA 1 and SIP UA 2 can communicate by using their

aliases, and SIP UA 1 selects an IP address from the range 5.5.5.9 to 5.5.5.11 when registering with the

SIP server on the external network.

Figure 44 Network diagram

Configuration procedure

This section describes ALG configuration only, assuming that other required configurations on the server

and client have been done.

1. Enable ALG for SIP: