Configure a ZyXELL ZyWALL USG-50 or USG-20 for 8x8 Services

Objective

Configure a ZyXELL ZyWALL USG-50 or USG-20 for 8x8 services.

Applies To

  • ZyXELL ZyWALL USG-50
  • ZyXELL ZyWALL USG-20

Procedure

The purpose of this article is to provide a sample configuration. At the time of article creation, this device was in a known working state on the firmware used. 

Keep in mind different firmware versions will interact with hosted VoIP services in different ways. While this device may be fully functional on the tested and/or current firmware version, it is possible newer revisions will cause disruptions in service or make a device fully compliant with the required settings for hosted VoIP services where it was previously not.
The goal of configuring any router or firewall for use on 8x8 service is to prioritize VoIP traffic on your network and achieve optimum call quality. In the case of the ZyXELL ZyWALL USG-50, we want to
  • Enable FTP ALG
  • Enable H.323 ALG
  • Enable SIP ALG (see note)
  • Add port 5199 as a SIP Signaling Port
If you are using Poly phones with your ZyXELL ZyWALL, you need to enable SIP ALG. If you are using Cisco phones, you need to disable SIP ALG.
Since the ZyWALL USG-20 has a very similar interface, the instructions below apply to the ZyWALL USG-20 as well.
Detailed instructions are available from ZyXELL here (see page 56, ZLD Configuration).

Configure a ZyWALL USG-50

  1. On a computer, access the ZyWALL USG-50's web interface (GUI).
  2. Go to Configuration > Network > ALG.
  3. Enable SIP ALG.
  4. Go to Settings > Configuration > App Patrol > General.
  5. Enable Application Patrol, BWM, and enable Highest Bandwidth Priority for SIP Traffic.
Note: You need to register IDP/App Patrol license to use App Patrol.

Add Port 5199 to the ZyWALL USG-50

  1. On a computer, access the ZyWALL USG-50's web interface (GUI).
  2. Go to Settings > Configuration > Network > ALG.
  3. Enable SIP ALG.
  4. In the SIP Signaling Port section, click +Add and enter 5199.

Change the UDP Session Time Out value

  1. On a computer, access the ZyWALL USG-50's web interface (GUI).
  2. Go to Settings > Configuration > Firewall > Session Control.
  3. Under General Settings: UDP Session Time Out, set the value to 300.