Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

RV016 How to enable Port Forwarding + Firewall Access Rules


I've got a SIP or VOIP server hosted in my network and I want to allow extensions who are outside of the network to register as 'local extensions'


I've forwarded ports:

5060   [Source WAN2]    [From ANY]     [TO]

10001 ~ 20000 [Source WAN2]    [From ANY]     [TO]


Permitted firewall services:

AllowVOIP UDP [5060]WAN2Any192.168.76.150 ~
AllowVOIP UDP 2 [10000]WAN2Any192.168.76.150 ~



Port checks says that port 5060 is still closed.


Similar settings for port 80 work fine.


ISP does not block the port 5060


Hi Mike,  First the

Hi Mike, 


First the configuration look ok and you tested already with port 80 , in that case please install wireshark on and capture the traffic, if you cannot do it from this server by any reason please put another PC connected to RV and forward the SIP to the PC and run Wireshark 


If we can see on packet capture SIP message so there is no problem with the router

but if you cannot see them please capture the WAN interface if you have the possiblity like hub or switch with port mirroring and you can verify first if the SIP packet are coming to the WAN interface of the RV


Those test can confirm because the Port checks is very hard to verify port in UDP protocol 


Please share with us wireshark file we can help you with it 


Please rate this post or mark as answered to help other Cisco Customers




Community Member

Wireshark file attached. I've

Wireshark file attached.


I've used SIP filters and identified that the packets are coming through i think.

See 401 authorization failure.

Hi Mike,yes the SIP packet

Hi Mike,

yes the SIP packet are coming to the LAN to your Voice Server but the voice server responding with 401 Unauthorized.

the Router is not blocking the SIP port


I saw you are using AsteriskNow 11.13.0 and you have some softphone are registred locallyw with port 5062 and from External phone are sending to 5060 , this just what i'm seeing because i don't know the configuration on Asterisk, may this cause the problem


or we can check the SIP ALG option on RV042 on the browser https://IPaddress_of_rv016/f_general_hidden.htm

and please enable SIP ALG and test again, otherwhise please check the asterisk setting

Please rate this post or mark as answered to help other Cisco Customers



Community Member

I enabled SIP ALG as you

I enabled SIP ALG as you suggested but is it possible there is an error blocking outgoing request?

Hi Mike, I don't think so

Hi Mike,


I don't think so because by default from LAN to WAN is allow all traffic of course if you don't have any rule created manually to block from LAN to WAN 




CreatePlease to create content