Install guide
Software Version 2.7.4 9
Software Version 2.7.4
C613-10444-00 REV A
# Allowing VoIP phone calls through the firewall
# IP and firewall configuration
# Configure IP on eth1 public interface
# Note: Replace 10.10.10.10 in this example with your globally-unique IP address
enable ip
add ip interface=eth1 ip=10.10.10.10
add ip route=0.0.0.0 mask=0.0.0.0 interface=eth1 next=ip-address-of-your-isp
# Configure IP on vlan1 private interface
add ip interface=vlan1 ip=192.168.1.100 mask=255.255.255.0
# Enable the firewall and the SIP ALG
enable firewall
enable firewall sipalg
# Create a firewall policy and add the interfaces to it
create firewall policy=voip
add firewall policy=voip interface=eth1 type=public
add firewall policy=voip interface=vlan1 type=private
# Configure NAPT by using firewall rules on public interface
# Note: Enter each command into the router on a single line
add firewall policy=voip rule=11 interface=eth1 protocol=udp action=nat nattype=napt
ip=192.168.1.1 gblip=10.10.10.10 port=5060 gblport=61001
add firewall policy=voip rule=12 interface=eth1 protocol=udp action=nat nattype=napt
ip=192.168.1.2 gblip=10.10.10.10 port=5060 gblport=61002
add firewall policy=voip rule=13 interface=eth1 protocol=udp action=nat nattype=napt
ip=192.168.1.3 gblip=10.10.10.10 port=5060 gblport=61003
# Configure NAPT by using firewall rules on private interface
# Note: Enter each command into the router on a single line
add firewall policy=voip rule=1 interface=vlan1 protocol=udp action=nat nattype=napt
ip=192.168.1.1 gblip=10.10.10.10 port=5060 gblport=61001
add firewall policy=voip rule=2 interface=vlan1 protocol=udp action=nat nattype=napt
ip=192.168.1.2 gblip=10.10.10.10 port=5060 gblport=61002
add firewall policy=voip rule=3 interface=vlan1 protocol=udp action=nat nattype=napt
ip=192.168.1.3 gblip=10.10.10.10 port=5060 gblport=61003