3cx firewall check checking sip alg ... failed. using AT&T Business all in one Router.

[Song]

Hi,

I know my router is working before we have spectrum internet and it was working fine. After we implemented the AT&T business all in one router. We are getting checking sip alg...failed. On the att router there is 8 port. port 2 goes into our firewall for data. and port 8 goes directly into the 3cx with a second nic card. I called many times to ATT and they says on port 2 data internet SIP ALG is disabled by default. Ok. and port 8 voice line have SIP ALG enabled.

My question is do i need to tell them to disable the SIP ALG on port 8 on the voice?
I just need SIP ALG on port 2 to be disabled (internet side) correct?

Correct me if i'm wrong.

thank you.

 

[AWS2P]

You don't need SIP ALG, this is a false friend giving you unpredictible behavior (often, loss or no audio at all)

 

[JohnS_3CX]

Hi @Song

Our recommendation is to disable SIP-ALG if you can.

 

[Song]

You don't need SIP ALG, this is a false friend giving you unpredictible behavior (often, loss or no audio at all)

on the voice side or the internet side?

 

[Song]

Hi @Song

Our recommendation is to disable SIP-ALG if you can.

on the voice side or the internet side?

 

[JohnS_3CX]

Both.

Especially on the voice side - but also on the internet side in case you use internet based trunks or have remote extensions reaching the PBX over the internet (ie. STUN phones)

 

[Song]

ok. they say if we disable SIP ALG. your voice will no longer work? what?? does that mean we cannot disable SIP ALG on AT&T Business in a Box router? This doesn't make any sense..

Serious AT&T is the worst voice provider!!

 

[jcostlow]

If you are talking the AT&T U-Verse gateways have you gone through the IP Passthrough and disabled all firewalls so your router handles it?

We have AT&T 75/20 coming in at our office and set the Arris BGW210-700 to passthrough to our SonicWall.

 

[jcostlow]

I forgot to mention if it is AT&T IP Flex using the Business in a Box router that it can be a pain to get AT&T to properly open port 5060. I have one customer on IP Flex with B Voip and they opened prot 5060 but not the RTP ports needed for IP phones on that PBX.

 

[Song]

I forgot to mention if it is AT&T IP Flex using the Business in a Box router that it can be a pain to get AT&T to properly open port 5060. I have one customer on IP Flex with B Voip and they opened prot 5060 but not the RTP ports needed for IP phones on that PBX.

This is AT&T BIB router or Business in a Box router IP FLEX that is what they call it..

 

[Song]

I don't believe AT&T. they says disable SIP ALG on the voip line will cause voice to be down. is this true? This IP PLEX is a pain!! They are bundle together with the internet.

This device have 8 port.
port 2 use for internet and connect directly to our firewall. port 8 uses for voice and connected dirctly to our 3cx system with an internal IP.

 

[jcostlow]

The customer I have using IP Flex with BIB is using the B-VOIP as a PRI hand off to an NEC system. We had to fill out the form to open 5060 and disable the ALG rule but the PRI hand off still works.

I don't think having them disable ALG will cause issues as I see it mentioned here: https://www.3cx.com/community/threads/at-t-ip-flex-reach-and-3cx.41678/

 

[kmanickam]

I am using Sonicwall TZ600, with latest release firmware, i am getting error message failed ALG please help me how to fix it. Error message attached

Thanks
Manickam