FYI TP-Link Omada Requires SIP ALG

[kenn10]

I deal with a TP-Link Omada network which utilizes all TP-Link Omada based equipment. IP phones all worked correctly but cell phones refused to use wifi-calling on this network. Repeated calls to the cellular vender verified that wifi calling was activated on the accounts. It was discovered that wifi calling would work for the phones when on other networks just not on this one. The ultimate solution was to enable SIP-ALG and IPSEC-ALG on the router. This goes against what we are all told about turning off SIP ALG but in this case, it actually works. Turning it on had no effect on the existing IP Phones or wireless SIP clients.

 

[Jake]

Very weird. I think, I was told some carriers do use IPSEC for wifi calling.

Side note, I have been removing anything TP-Link due to the reported security concerns.

 

[kenn10]

Very weird. I think, I was told some carriers do use IPSEC for wifi calling.

Side note, I have been removing anything TP-Link due to the reported security concerns.

China would be horribly bored with anything gleaned from this network.

 

[hecatae]

Most Omada equipment is based on very old Openwrt SDKs.
For example the ER605 v1 is based on Openwrt 12.09 and the v2 on Openwrt 14.07.

There were cases in the last couple of years of Omada not supporting IPv6 and not firewalling IPv6 so SIP ALG is not surprising.

 

[hecatae]

China would be horribly bored with anything gleaned from this network.

it's not anything to be gleaned, it's someone using a backdoor to bot your router against something else in the country via mass DDOS