Support / Voice / Firewall / Netgear

Disable SIP ALG on Netgear routers.

Netgear ships SIP ALG enabled on most Nighthawk and Orbi consumer firmware. The toggle is buried under WAN Setup; disable it before placing production traffic.

Steps (Nighthawk / Orbi)

  1. Sign in to the router admin UI: http://www.routerlogin.net or http://192.168.1.1.
  2. Click Advanced in the top tab bar.
  3. Open Setup → WAN Setup.
  4. Tick Disable SIP ALG.
  5. Click Apply. The router reboots automatically on some firmware revisions; otherwise reboot manually under Advanced → Administration → Reboot.

Steps (ProSAFE / business)

  1. Sign in to the firewall management UI.
  2. Open Security → Application Level Gateway.
  3. Untick SIP.
  4. Click Apply.

UDP NAT timeout

Netgear consumer firmware doesn't expose a UDP conntrack timeout. If you see registration drops between calls, set each device's SIP REGISTER interval to 360 seconds with NAT keepalive at 30 seconds. ProSAFE business firmware exposes session timeouts under Security → Schedule Profile; raise UDP idle timeout to 600 s for SIP traffic if your model supports it.

Verify

Place a test call. If audio is bidirectional for the full call duration including past 30 minutes, ALG is no longer in the path. Wait 5–10 minutes idle, then place an inbound test call to confirm registration is still alive.