1. Log in to the CLI using Telnet or SSH. You can also access the CLI from admin > Console in the upper right corner of the Admin Console screen.
2. Choose option 4. Device Console.
3. Execute the following command(s):

The administrator can disable the SIP module by following the steps mentioned below.

1. Sign in to the CLI console and select option 4. Cyberoam Console from the Main Menu list.
2. Execute the following command:
   
   console> cyberoam system_modules sip unload

Note: To load the SIP module again, execute the following command at the console prompt:

How to use a custom port

If you are using a custom port for SIP communication and you would like to load the same ports under the Cyberoam SIP helper module, issue the commands below:

console> cyberoam system_modules sip load ports 5061

12.Disable SIP ALG on Ubiquiti USG Router

1. Download and install WinSCP from https://sourceforge.net/projects/winscp/

2. Connect to your CloudKey with WinSCP via SSH and browse to the directory srv/unifi/data/sites/default (my site was called default, your site might be named something different).

3.  Create a file on your computer named config.properties.

4. Edit the config.properties file and add "config.ugw.voip.sip_alg_disable=true" (without quotes) and save.

5.  Copy the file to the CloudKey to the folder you browsed to in step 2.

6.  Force your USG to do provisioning by creating a port forwarding rule and then deleting it.

 You can verify that the settings are working by connecting to your USG via SSH.  If you are on Windows, use Putty.  Once connected via SSH, type the command "lsmod | grep sip" (without quotes).  If SIP ALG is disabled, you will not get anything back and just be returned to the command prompt.

13.How to Disable SIP ALG on a Thomson Router

SIP ALG is used to try and avoid configuring Static NAT on a router. Its implementation, however, varies from one router to another, often making it difficult to inter-operate a router with SIP ALG enabled with a PBX. In general, you would want to disable SIP ALG and configure one to one port mapping on the router.

In this article, we will show you how to disable SIP ALG on a Thomson router. SIP ALG on this router is known to cause problems with VoIP calls. Proceed as follows:

Open Command Prompt – “Start” → “Run” → type “cmd” and press “Enter”.

In Command Prompt, type “telnet 192.168.1.254” and press enter. 192.168.1.254 is the default IP address of the router. If you are running on Windows 7/8/8.1/10, you might need to install the telnet client from “Control Panel” → “Programs and Features” → “Turn Windows features on and off”.

The default username is “Administrator”, and there is no default password, leave blank.

Type “connection unbind application=SIP port=5060” and press “Enter”.

Type “save all” and press “Enter”.

Type “exit” and press “Enter” to exit the telnet session.

SIP ALG is now disabled on your Thomson router.

Note:

The SIP phones behind this router should be configured not to use STUN

The SIP phones must NOT be configured with a local port of 5060 or 5061. The local port of the phone must be changed to something else.

Configuring a SIP Phone behind a Thomson router might require port forwarding to be implemented on the router. So you will need to port forward the SIP and AUDIO (RTP) ports on the Thomson router and point them to the SIP Phone’s IP Address.

14.Disabling SIP-ALG on the FortiGate 80C Firewall

Step 1: Disable SIP ALG

The SIP ALG functionality seems to be harder to disable (even if it is disabled via WEB Interface) and varies greatly between models. In addition, the type of NAT may break correct functionality or re-enable SIP ALG.  On devices running FortiOs, you will need to disable this in multiple places as shown below:

Open the FortiGate CLI from the dashboard.

Enter the following commands in FortiGate’s CLI:

config system settings

set sip-helper disable

set sip-nat-trace disable

reboot the device

Reopen the FortiGate CLI and enter the following commands (do not enter text after //)

config system session-helper

show            //you need to find the entry for SIP, usually 12, but it may vary

delete 12            //or the number that you identified from the previous command

Create a rule and set the “Protection Profile” to “Unfiltered”

Reboot the device and you should be ready to use your FortiGate 80C with the 3CX Phone System without any issues.

Step 2: Removing the Session Helper

Run the following commands:

config system session-helper

Show

Amongst the displayed settings will be one similar to the following example:

edit 13

set name sip

set protocol 17

set port 5060

In this example, the next commands would be:

delete 13

end

Step 3: Change the default –VoIP –alg-mode

Run the following commands:

config system settings

set default-VoIP-alg-mode kernel-helper based

end

If Version 5.2 and above continue

config VoIP profile

edit default

config sip

set status enable/disable

end

end

Step 4: Clear Sessions or Reboot

To clear sessions:

Ideally, you would only delete sessions related to VoIP traffic. However, in the case of SIP, this means not only deleting the SIP control sessions but also all sessions opened to handle the audio (RTP) traffic. If you know the port-range used for the audio traffic, you can be selective with your session clear by first applying a filter.

diagnose the system session filter ...

See the related article "Troubleshooting Tip: FortiGate Firewall session list information".

The command to clear sessions applies to ALL sessions unless a filter is applied, and therefore will interrupt traffic.

diagnose system session clear

Alternatively, reboot the FortiGate using either GUI or CLI. The CLI command is:

execute reboot

Step 5: Validating Your Setup.

Log into your 3CX Management Console → Dashboard → Firewall and run the 3CX Firewall Checker. This will validate if your firewall is correctly configured for use with 3CX. More information about the Firewall Checker can be found here.

15.How to Disable SIP ALG on Netgear Routers

Option 1

Open the Netgear router configuration by browsing to its LAN Address (http://192.168.0.1 by default).

Log in to the router’s configuration. The default username is “admin” and the default password is “password”.

In the main menu, select “Advanced” → “WAN Setup”.

Enable the option “Disable SIP ALG”.

Click “Apply”.

Option 2

Open the Netgear router configuration by browsing to its LAN Address (http://192.168.0.1 by default).

Log in to the router’s configuration. The default username is “admin” and the default password is “password”.

In the main menu, select “Security” → “Firewall” → “Advanced”.

Uncheck the option “Enable SIP ALG”.

Click “Apply”.