What is RTSP ALG?
ALG means Application Layer Gateway. It is a feature in routers and firewalls that inspects specific protocols like SIP, FTP, and RTSP, then rewrites packets so they can cross NAT (Network Address Translation).
RTSP ALG specifically intercepts RTSP SETUP messages and rewrites the IP addresses and ports that define where RTP media should flow. This was intended to help when both the client and camera were behind NAT and needed the router to assist.
That behavior made more sense in older enterprise networks. On modern home networks with a single NAT and local LAN cameras, RTSP ALG usually creates more problems than it solves.
Why RTSP ALG Breaks Modern Streams
RTSP ALG modifies RTSP packets in transit, but it often does so incorrectly. Modern cameras, encrypted links, TCP transport, and vendor-specific RTSP dialects make those packet rewrites fragile.
The router drops or mangles the SDP response, so the viewer never learns the real RTP ports.
RTSP ALG garbles RTP port negotiation, so media starts briefly and then stalls.
Different RTSP clients negotiate streams differently, which can confuse the router helper.
RTSP ALG behavior depends on the exact RTSP dialect, SDP format, and transport mode used by the camera.
Many consumer router vendors — ASUS, TP-Link, Netgear, and MikroTik among them — still ship with RTSP ALG or related conntrack helpers enabled by default.
How to Disable RTSP ALG on Popular Routers
ASUS Routers
Advanced Settings → WAN → NAT Passthrough → RTSP Passthrough → Off
TP-Link / Archer
Advanced → NAT Forwarding → ALG → RTSP → disable
Netgear
Advanced → WAN Setup → Disable SIP ALG. On many Netgear models RTSP ALG is bundled into the same helper setting.
MikroTik
IP → Firewall → Service Ports → find rtsp → disable
Ubiquiti EdgeRouter / UniFi
Configure → Firewall/NAT → NAT → disable RTSP ALG
pfSense / OPNsense
Firewall → Settings → Advanced → disable RTSP in conntrack helpers.
Generic Router
Look for settings named ALG, SIP/RTSP passthrough, NAT helpers, or conntrack modules, then disable specifically the RTSP or SIP/RTSP helper entry.
RTSP ALG vs RTSP Passthrough — What's the Difference?
- Actively modifies RTSP packets
- Rewrites ports and IP addresses
- Often destructive on modern networks
- Allows RTSP traffic through the firewall
- Does not rewrite the protocol payload
- Usually the better option if you must expose RTSP internally
Best practice: disable RTSP ALG, leave simple passthrough behavior enabled if needed, and use a VPN for remote access instead of public port forwarding.
Still Not Working? Try These Fixes
Switch to TCP mode: use rtspt:// instead of rtsp:// in SmartRTSP to force TCP transport and bypass many UDP negotiation issues.
Check port 554: confirm your firewall is not blocking TCP/UDP port 554 between the viewer and the camera.
Verify subnet placement: make sure your camera and viewer are on the same subnet unless you intentionally routed traffic between VLANs.
Use a VPN for remote access: if you're outside the home, use Tailscale or another VPN instead of exposing RTSP directly to the internet.
Frequently Asked Questions
What does RTSP ALG stand for?
Should I enable or disable RTSP ALG?
My RTSP stream connects but no video — is it ALG?
Does SmartRTSP work with RTSP ALG enabled?
rtspt:// in SmartRTSP to force TCP transport.