FortiOS 6

Translating SIP sessions to a different destination port To configure translating SIP sessions to a different destination port you must add a static NAT virtual IP that translates tie SIP destination port to another port destination. In the example the destination port is translated from 5060 to 50601. This configuration can be used if SIP […]

Translating SIP session destination ports Using port forwarding virtual IPs you can change the destination port of SIP sessions as they pass through the FortiGate.

Controlling NAT for addresses in SDP lines You can use the no-sdp-fixup option to control whether the FortiGate performs NAT on addresses in SDP lines in the SIP message body. The no-sdp-fixup option is disabled by default and the FortiGate performs NAT on addresses in SDP lines. Enable this option if you don’t want the […]

Controlling how the SIP ALG NATs SIP contact header line addresses You can enable contact-fixup so that the SIP ALG performs normal SIP NAT translation to SIP contact headers as SIP messages pass through the FortiGate. Disable contact-fixup if you do not want the SIP ALG to perform normal NAT translation of the SIP contact […]

Configuring SIP IP address conservation for the SIP session helper You can use the following command to enable or disable SIP IP address conservation for the SIP session helper. IP address conservation is enabled by default for the SIP session helper. config system settings set sip-nat-trace disable end If the SIP message does not include […]

Configuring SIP IP address conservation for the SIP ALG You can use the following command to enable or disable SIP IP address conservation in a VoIP profile for the SIP ALG. SIP IP address conservation is enabled by default in a VoIP profile. config voip profile edit VoIP_Pro_1 config sip set nat-trace disable end end […]

NAT with IP address conservation In a source or destination NAT security policy that accepts SIP sessions, you can configure the SIP ALG or the SIP session helper to preserve the original source IP address of the SIP message in the i= line of the SDP profile. NAT with IP address conservation (also called SIP […]

Different source and destination NAT for SIP and RTP This is a more complex scenario that a SIP service provider may use. It can also be deployed in large-scale SIP environments where RTP has to be processed by the FortiGate and the RTP server IP has to be translated differently than the SIP serverIP. NAT […]