Professional Documents
Culture Documents
Support Training
Presentation
Aykut SAGLAM
aykut.saglam@empatiq.com
Sangoma Turkey Distributor
Contents Part 1
• Why Session Border Controllers?
• Product Portfolio of the Session Border Controller
• Business Applications and Use Cases (Vega ESBC)
• Carrier/Service Provider Applications and Use Cases
(NetBorder SBC)
• Sangoma SBC Load Balancing and Failover Techniques
• SBC Walkthrough
• SIP
SIP Normalization SIP
• Security
Eth pipe port • Transcoding port Eth pipe
SIP • CDRs SIP
• RTCP QoS
report
• Call Access
Control
Media • Management Media
RTP • GUI / config RTP
• DSP resources
ports • Etc. ports
• SIP
SIP Normalization SIP
• Security
Eth pipe port • Transcoding port Eth pipe
SIP • CDRs SIP
• RTCP QoS
They are back to back!
report
• Call Access
Control
Media • Management Media
RTP • GUI / config RTP
• DSP resources
ports • Etc. ports
Business Applications
and Use Cases
Enterprise SIP Trunking
DMZ Deployment
IP-PBX
Vega eSBC
SIP SIP SIP
ITSP IP
IP-PBX
Vega eSBC
SIP SIP SIP
ITSP IP
Ext 101
SIP
Vega eSBC:
• Pass-through SIP registration on IP-
Home Office, PBX
Mobile Users, • Remote FW/NAT traversal
Telecommuters • Call Admission Control
• Topology Hiding
• TLS and SRTP encryption
Ext 102 • No VPN required
SBC: IP-PBX
• Remove Multi-Sites PRIs
SIP
• Performs SIP Security Functions WAN
• SIP Harmonization
• Media Harmonization
• Intelligent Call Routing IP-PBX
LAN VoIP
IP Network
Multi-Tenant
IP Phones
IP PBX
SIP
Vega eSBC
ITSP SIP
Mediation Lync
Server Server
SIP
Active
Directory
Lync
User
SBC: • Media Harmonization
• Performs SIP Security Functions • Intelligent Call Routing
• UDP/TCP Translation • Active Directory Routing
• SIP Harmonization • Unified Dial Plan
Active
Directory
Carrier/Service Provider
Applications and Use Cases
Carrier SBC for SIP Carrier NAT/FW
Residential
Softswitch SIP
SIP
Residential
ITSP SBC NAT/FW ATA
SIP Broadband SIP SIP
SBC:
• Performs SIP Security Functions SOHO
SIP
• Peering with Other SIP Providers
• SIP Harmonization NAT/FW
• Media Harmonization
• Far End NAT Traversal SIP
• Call Admission Control
Internet Service
Provider
Softswitch
Internet Service
Provider
sbc2
Softswitch
DNS Server 10.10.0.20
Same priority and weight
entries: 1
DNS SRV Record Query for ‘carrier.com’
• sbc1 and sbc2 would each
get 50% of the traffic load _sip._udp.carrier.com 60 IN SRV 10 50 5060 sbc1.carrier.com
• If one SBC becomes _sip._udp.carrier.com 60 IN SRV 10 50 5060 sbc2.carrier.com
unavailable, remaining
machine takes the load
2
DNS A Record Query
sbc1.carrier.com = 10.10.0.10
© 2014 Sangoma Technologies sbc2.carrier.com = 10.10.0.20 38
Failover SBCs with DNS SRVsbc1
Domain: carrier.com
Router 10.10.0.10
NAT
FW
Internet Service
Provider
sbc2
Softswitch
DNS Server 10.10.0.20
• Different Priorities 1
• Lower Priority tried first: DNS SRV Record Query for ‘carrier.com’
sbc1.carrier.com
• If sbc1.carrier.com _sip._udp.carrier.com 60 IN SRV 10 50 5060 sbc1.carrier.com
_sip._udp.carrier.com 60 IN SRV 20 50 5060 sbc2.carrier.com
unavailable:
sbc2.carrier.com
2
DNS A Record Query
sbc1.carrier.com = 10.10.0.10
© 2014 Sangoma Technologies sbc2.carrier.com = 10.10.0.20 39
DNS SRV: Countless Other Scenarios
• DNS SRV records not limited to 2 lines
• Could implement several scenarios:
– M-ways load balancing
– M-ways load balancing; N-way failover
• Example:
• _sip._udp.carrier.com 60 IN SRV 10 60 5060 sbc1.carrier.com
• _sip._udp.carrier.com 60 IN SRV 10 20 5060 sbc2.carrier.com
• _sip._udp.carrier.com 60 IN SRV 10 10 5060 sbc3.carrier.com
• _sip._udp.carrier.com 60 IN SRV 10 10 5060 sbc4.carrier.com
• _sip._udp.carrier.com 60 IN SRV 20 0 5060 sbc5.carrier.com
• The first 4 SBC would share the load at 60%, 20%, 10% and 10% respectively
• If the first 4 SBCs should become unavailable, sbc5 would take the load
• Each interface used for signaling is displayed, with the ability to edit that interface
• User can create multiple virtual interfaces
• Multiple virtual interfaces can be created and applied to a single physical interface
• User can create VLAN interfaces if the SBC is sitting in a specific VLAN
• Multiple VLAN interfaces can be applied to a single physical interface
• Outlines the way the media interfaces are configured and details information on each Media DSP
adapter
• Media Server configuration is the method in which the DSPs are configured
• Hidden mode hides the DSPs from the environment
• Exposed mode exposes the DSPs to the environment. If in exposed mode, each DSP must have a
routable IP address configured.
• Software mode identifies that no SngDsp interface is installed. Transcoding and TLS/SRTP are
disabled. This is found only in the software only version of the SBC.
• Each SngDsp interface will come with preinstalled adapters. This will depend on which hardware version
of the SBC is purchased.
• The DSP version, MAC address, and assigned IP and RTP ports will be displayed. You can edit
each individually if required.
Internet Service
Provider
sbc2
Softswitch
DNS Server 10.10.0.20
• Different Priorities 1
• Lower Priority tried first: DNS SRV Record Query for ‘carrier.com’
sbc1.carrier.com
• If sbc1.carrier.com _sip._udp.carrier.com 60 IN SRV 10 50 5060 sbc1.carrier.com
_sip._udp.carrier.com 60 IN SRV 20 50 5060 sbc2.carrier.com
unavailable:
sbc2.carrier.com
2
DNS A Record Query
sbc1.carrier.com = 10.10.0.10
© 2014 Sangoma Technologies sbc2.carrier.com = 10.10.0.20 55
Signaling Interfaces – Highlights
• Each interface used for signaling is displayed, with the ability to edit that interface
• User can create multiple virtual interfaces
• Multiple virtual interfaces can be created and applied to a single physical interface
• User can create VLAN interfaces if the SBC is sitting in a specific VLAN
• Multiple VLAN interfaces can be applied to a single physical interface
• Outlines the way the media interfaces are configured and details information on each Media DSP
adapter
• Media Server configuration is the method in which the DSPs are configured
• Hidden mode hides the DSPs from the environment
• Exposed mode exposes the DSPs to the environment. If in exposed mode, each DSP must have a
routable IP address configured.
• Software mode identifies that no SngDsp interface is installed. Transcoding and TLS/SRTP are
disabled. This is found only in the software only version of the SBC.
• Each SngDsp interface will come with preinstalled adapters. This will depend on which hardware version
of the SBC is purchased.
• The DSP version, MAC address, and assigned IP and RTP ports will be displayed. You can edit
each individually if required.
Inbound Call
Routing
Outbound
Call Routing
SIP Profiles
SIP Profile Overview Domain
Profile
1
Carrier External External
SIP Trunk SIP Profile Media Profile
Inbound Call
Routing
Outbound
Call Routing
• SIP Profiles can be managed from the SIP Profile menu option which is contained
under Configuration
• A list of all the configured SIP Profiles is listed, with the ability of modifying a profile or
removing it entirely
• The ability to sort and search is also available to users who have multiple SIP Profiles
• This would happen if the SBC is being used in a multi-tenant or carrier situation
Domain Profiles
Domain Profile Overview Domain
2 Profile
1
Carrier External External
SIP Trunk SIP Profile Media Profile
Inbound Call
Routing
Outbound
Call Routing
• Domain profiles can be managed from the Domain Profile menu option within the
Configuration menu
• Domain profiles can be either a domain name
(ex. Sangoma.com) or an IP address (ex. 10.82.1.254)
• The name of the domain profile must correspond to the way users register to
either the SBC
– If the users will register to a domain name, the name of the domain profile MUST be that
domain name (i.e. 132@sangoma.com)
– If the users will register with an IP address, the name of the domain profile MUST be the IP
address (i.e. 132@10.82.1.254)
Media Profiles
Media Profile Overview Domain
Profile
1
Carrier External 2 External
SIP Trunk SIP Profile Media Profile
Inbound Call
Routing
Outbound
Call Routing
• Media profiles are used to determine which audio codecs will be used with SIP profiles
– Multiple codecs are only available on the Carrier, Enterprise, or Hybrid SBCs
– The software version of the SBC will only allow G.711
• You can also choose the codec negotiation mode, DTMF (Dual-Tone Multi Frequency) mode, and
whether to enable/disable silence suppression
• By default, only 1 profile is created
– Multiple profiles can be created
– No limit to the amount of profiles
– You can create an inbound profile and outbound profile, then use that in your SIP profiles
– Possibilities are endless…
SIP Trunks
SIP Trunk Overview Domain
Profile
1
Carrier External External
SIP Trunk SIP Profile Media Profile
Inbound Call
Routing
Outbound
Call Routing
4
Internal Internal Internal
SIP Trunk SIP Profile Media Profile
Call Routing
What is Call Routing
• Call routing is the process used to route telephone calls
across a telephony network
• The process is the same whether calls are made
between two phones in the same locality, or across two
different continents
4
Internal Internal Internal
SIP Trunk SIP Profile Media Profile
• First section deals with default parameters for that particular dialplan
• Second section deals with the specific rules which will be processed
within the dialplan
– Each rule is described based on the selections chosen within the rule configuration