Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

sip (Security)

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
sip {
    application-screen {
        protect {
            deny (all | varname);
            timeout varseconds;
        }
        unknown-message {
            permit-nat-applied;
            permit-routed;
        }
    }
    bulk-call-mode;
    c-timeout varminutes;
    disable;
    dscp-rewrite {
        code-point string;
    }
    varname distribute-tofpc {
        pic varname;
        varname;
    }
    dscp-rewrite {
        code-point varcode-point;
    }
    enable-call-distribution;
    hide-via-headers disable;
    inactive-media-timeout varseconds;
    maximum-call-duration varminutes;
    retain-hold-resource;
    t1-interval varmilliseconds;
    t4-interval varseconds;
    traceoptions {
        flag {
            all {
                <detail | extensive | terse>
            }
        }
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit logical-systems name security alg],
[edit logical-systems name tenants name security alg],
[edit security alg],
[edit tenants name security alg]

Description

Configure sip to specify the Session Initiation Protocol (SIP) ALG on the device. Session Initiation Protocol (SIP) is a signaling protocol for initiating, modifying, and terminating multimedia sessions over the internet. By default, the SIP ALG is disabled for SRX5600 and SRX5800 devices. Use the CLI command delete security alg alg-name disable to enable the SIP ALG. IPv6 is supported on the SIP ALG along with Network Address Translation Protocol Translation (NAT-PT) mode and NAT64 address translation. The type of the destination-ip-address is changed from IPv4 address to IP prefix to support all kinds of IP addresses, and correspondingly a prefix is supported to allow multiple IP addresses.

Options

disable—Disable the SIP ALG. Use the set security alg alg-name disable CLI command to disable the SIP ALG.

distribution-ip—Configure IPv4 or IPv6 distribution IP addresses. You can configure upto 20 IP addresses.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement modified in Junos OS Release 9.2.

The distribution-ip option introduced in Junos OS Release 18.1R1 for SRX5400, SRX5600, and SRX5800 devices.

The tenant option is introduced in Junos OS Release 18.3R1.

footer-navigation