Router Firewall Basic Configuration List with Specific Models

« Go Back
Information

This is a list of commonly available routers and their recommended settings for use with Digium Cloud Services.  Because routers are constantly being updated by their manufacturers, this list should not be considered exhaustive. Consult with Digium support for issues with any manufacturers or models not included in this list.               

In general, router firewalls need the following ports opened:  UDP ports 5060-5062 and 10000-20000 and SIP ALG disabled.

Routers

  

Adtran

Netvanta series

Disable SIP ALG.

Cisco

RV042

Disable load balancing.  Disable SIP ALG.

Cisco

RV082

Disable load balancing.  Disable SIP ALG.

Cisco

RV016

Disable load balancing.  Disable SIP ALG.

Cisco

Meraki - any model

Disable SIP helper. Disable SIP ALG (sometimes defaults to disable).

Cisco-Linksys

E4200 v1

Turn off SPI (Stateful Packet Inspection) firewall.  Turn off SIP ALG.

D-Link

DIR-615 Rev B

Disable SIP ALG

D-Link

DIR-625

Disable SIP ALG. Not suitable for more than 4 phones.

D-Link

DIR-655 Rev A

Disable SIP ALG

FortiGate

FortiNet - any model

Disable SIP Helper

Juniper

NetScreen

Disable SIP ALG and UDP Flood Protection

Linksys

E900

Disable SIP ALG and SPI (Stateful Packet Inspection) firewall

Linksys

E1200

Disable SIP ALG and SPI (Stateful Packet Inspection) firewall

Linksys

E2500

Disable SIP ALG and SPI (Stateful Packet Inspection) firewall

Linksys

E3200 v1

Disable SIP ALG and SPI (Stateful Packet Inspection) firewall

Linksys

EA4500 v1

Disable SIP ALG and SPI (Stateful Packet Inspection) firewall

Linksys

EA6900

Disable SIP ALG and SPI (Stateful Packet Inspection) firewall

MicroTik

Any model

Disable SIP ALG

Netgear

WNDR3300

Disable SIP ALG, Port Scan, and DoS Protection

Netgear

WNDR3400

Disable SIP ALG, Port Scan, and DoS Protection

Netgear

WNDR3700 v1 v3 v4

Disable SIP ALG, Port Scan, and DoS Protection

SonicWall

Any model

Disable SIP ALG. Enable Consistent NAT. Create access rules-PbxIP

WatchGuard

XTM - any model

Adjust UDP timeout. Create rules.

Western Digital

MyNet N600

Disable SIP ALG

Modems

  

Comcast

  
Cisco
3939BNot compatible
Netgear
3000DCRNot compatible
SMC
 Compatible
   

AT&T U-Verse

 
AT&T modem config requires AT&T to do this
2Wire
 Modem needs to be configured to bridge mode. Separate router should be used with modem.
Netgear
 Modem needs to be configured to bridge mode. Separate router should be used with modem.
Pace
 Modem needs to be configured to bridge mode. Separate router should be used with modem.
   

Charter

  
Any modem
 Modem needs to be configured to bridge mode. Separate router should be used with modem.
   

Verizon

  
Actiontec
 Modem needs to be configured to bridge mode. Separate router should be used with modem.
   

Time Warner Cable (TWC)

 
Motorola
 Compatible
UBEE
 Registration issues associated with this modem. Recommended to use their Motorola modem.
   
Article Details
Cloud Services

 
Knowledgebase Home | Product