Jump to content

Comcast Business modem disable sip ALG?


Recommended Posts

I have a new client that has Comcast Business Internet with static IP on their router,  and they're having major quality issues,  I called Comcast to request to disable sip ALG and turn off the firewall on the modem, but they say its not possible for them to do this, bla bla the modem doesn't support that feature, 

Anyone has experience with best practice on Comcast business modems?

Link to comment
Share on other sites

I have never had an issue around the Comcast SIP ALG, I did not even know they had one.  We have a lot of phones using Comcast without issues.  I will say that the first thing we do anytime we install phones or firewall is bridge the Comcast modem to our firewall device.  I think all the newer modems will allow you to bridge right from the web interface without calling Comcast.  If they are on an older modem you can call Comcast and have them bridge the modem for you.  When you bridge the modem the device gives your firewall a public IP via DHCP.  I suspect this would bypass any SIP ALG the device would have.

If you have a static IP then you already have a public IP address so this would not be helpful.  Are you sure the SIP ALG is even affecting your traffic on the public IP?  What issues are you even having?  If a SIP ALG is causing issues I would think that it would be generating one way audio since the function of the ALG is to rewrite packets with with different source or destination addresses and solve NAT issues.

I would first confirm that they are not maxing out the connection and I would also see if there is packet loss to the RTP media servers.  You may want to try using a different proxy.

Link to comment
Share on other sites

Umm no not one way audio, but different interesting issues everyday,  calls are failing to connect a lot of times,  incoming calls are not ringing to the phone at different times,

 in the middle of a phone call there's dead air for about 5 Seconds multiple times during the day,  but when making a continuous ping there's no packet loss, 

Link to comment
Share on other sites

I suspect there is packet loss.  What kinds of handsets do you have installed?  If you are using Yealink you can logon to the web interface and click on Status, RTP Status and see if there was packet loss on the previous or current in progress call.  It will also give you the IP address of the RTP media server used in the last call so you can run tests against it for packet loss.

What are you even pinging?  I bet you are not pinging the media servers.  What proxy are you using?

Link to comment
Share on other sites

My reason for asking the model number is I'm noticing some Comcast clients being asked to swap out their prior business class Netgear modem for an Xfinity labeled Cisco DPC3941B. While I haven't had any reported issues from the swap out, the Netgear over the years has been the least troublesome. There is a blacklist floating around the Internet of Comcast modems that have SIP related issues.  i.e. a poorly implemented ALG that can't be turned off etc.  

Link to comment
Share on other sites

1 hour ago, Tuly said:

Umm no not one way audio, but different interesting issues everyday,  calls are failing to connect a lot of times,  incoming calls are not ringing to the phone at different times,

 in the middle of a phone call there's dead air for about 5 Seconds multiple times during the day,  but when making a continuous ping there's no packet loss, 

Incoming calls not ringing to certain phones at different times almost 100% sounds like SIP ALG.

Does the customer need a static IP? If not, I would 100% remove the Comcast modem/router combo unit and buy your own Arris cable modem and a separate router. We do this for all of our Comcast customers as we've had nightmares with the Comcast modem/router units. No matter the brand/model, they all cause issues for our customers even from just a web browsing perspective and not even VoIP related. When we remove the Comcast unit, everything gets better across the board. For customers that require static IPs, we will make them get a second Comcast account and have one for their computers and static IPs using the Comcast modem, and another for VoIP with an Arris modem. Works much better! Unfortunately Comcast is one of the few cable providers that requires you to use their modem if you have static IPs which is a huge pain. None of the other local cable providers require this. 

The new Verizon FiOS routers are notoriously bad with the "random phones not ringing" issue. Also major problems with BLF. Same thing...SIP ALG cannot be disabled in the newer models. The older models let you disable it though and the older models had zero issues. We always remove the newer models and replace them with something else. Luckily Verizon's ONT (equivalent of the cable modem) doesn't seem to have any issues, so we just run ethernet from the ONT to our own router that we put in, and all problems go away once we do this.

Crazy that FastDevice says his Comcast customers complain the least - Comcast is by far the worst provider for us here 😂

Link to comment
Share on other sites

  • 3 years later...

I was having same issue from my provider when using routers that does not allow disabling SIP-ALG. I am testing with raising up a VPS and set up VPN on it, then, after setting up VPN through  the my Wifi router (IPSec or L2TP, etc), the issue was gone. Of course this is when not using TLS

Link to comment
Share on other sites

5 minutes ago, fmateo05 said:

I was having same issue from my provider when using routers that does not allow disabling SIP-ALG. I am testing with raising up a VPS and set up VPN on it, then, after setting up VPN through  the my Wifi router (IPSec or L2TP, etc), the issue was gone. Of course this is when not using TLS

Are you able to just use a different router?

Link to comment
Share on other sites

We have seen cases in the past where specific model cable modems from Comcast had issues.  I think they eventually fixed those issues through firmware upgrades.  At the time it was their technicolor models.  If you are not using a static IP address, consider buying your own modem and activating that.  I would always either use a static IP, bridge the modem, or purchase your own modem.

Link to comment
Share on other sites

  • 1 month later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...