Sonicwall – Support

Current Status

Possibly compatible after changes

Suggestions

Firmware v5.8.1.12 or lower, Disable SIP ALG

Comments

Firmware v5.8.1.13 and higher contain a bug that causes issues with incoming calls on Sonicwall routers and firewalls. We recommend customers set enable ‘Consistent NAT’ (check the box) and disable ‘SIP Transformations’ (uncheck the box). Ensure that the MTU is set correctly for your ISP.

Go to Firewall Settings → BWM

BWM type change this to Global

Realtime checked set to 30% or whatever is needed 100k per call x number of calls

Go to Firewall Settings → Flood Protection → UDP Settings

Change the default Timeout Value from 30 to 300 seconds and make sure that UDP Flood Protection is not Enabled (Default Value)

Set the bandwidth up for the WAN Interface

Edit the WAN interface Advanced Tab—Upload is on top
Enable Egress and Ingress to your ISP settings, verify with a speed test.

VoIP → Settings:

Enable consistent NAT: check.

Enable SIP Transformations: Uncheck

Click Apply

Select the Firewall Settings → Edit LAN → WAN Rule → AdvancedTCP Connection Inactivity Timeout (minutes) to 60

UDP Connection Inactivity Timeout (seconds) to 1800

Whitelisting

Select the Firewall → Access Rules and add a new rule with the following:

Action: Allow

Service: Any
Source: WAN, Address Range 74.3.187.26 to 74.3.187.255
Destination: LAN, Address Range * to *
Comment: VOIPservice1
If there is an option for ‘Allow Fragmented Packets’ then please enable this option.
TCP Connection Inactivity Timeout (minutes) to 60
UDP Connection Inactivity Timeout (seconds) to 1800

Select the Firewall → Access Rules and add another new rule with the following:

Action: Allow

Service: Any
Source: WAN, Address Range 97.107.185.96 to 97.107.185.126
Destination: LAN, Address Range * to *
Comment: VOIPservice2
If there is an option for ‘Allow Fragmented Packets’ then please enable this option.
TCP Connection Inactivity Timeout (minutes) to 60
UDP Connection Inactivity Timeout (seconds) to 1800

Select the Firewall → Access Rules and add another new rule with the following:

Action: Allow

Service: Any
Source: WAN, Address Range 64.26.135.96 to 64.26.135.126
Destination: LAN, Address Range * to *
Comment: VOIPservice3
If there is an option for ‘Allow Fragmented Packets’ then please enable this option.
TCP Connection Inactivity Timeout (minutes) to 60
UDP Connection Inactivity Timeout (seconds) to 1800

NOTE: If you are uncomfortable with opening your firewall to our subnets, please at minimum forward to our Core IP's:

74.3.187.228
97.107.185.100
64.26.135.100

SonicWall out of the box setup | SonicWall