Professional Documents
Culture Documents
Mediant™ 500
Gateway and E-SBC
Version 7.2
User's Manual Contents
Table of Contents
1 Introduction ....................................................................................................... 29
1.1 Product Overview ................................................................................................... 29
1.2 Typographical Conventions.................................................................................... 29
1.3 Getting Familiar with Configuration Concepts and Terminology ............................ 30
1.3.1 SBC Application .......................................................................................................30
1.3.2 Gateway Application ................................................................................................34
Maintenance ...........................................................................................................741
Diagnostics ............................................................................................................921
62 Syslog and Debug Recording ........................................................................ 923
62.1 Configuring Log Filter Rules................................................................................. 923
62.1.1 Filtering IP Network Traces ...................................................................................928
62.2 Configuring Syslog ............................................................................................... 928
62.2.1 Syslog Message Format ........................................................................................929
62.2.1.1 Event Representation in Syslog Messages .......................................... 931
62.2.1.2 Identifying AudioCodes Syslog Messages using Facility Levels .......... 932
62.2.1.3 Syslog Fields for Answering Machine Detection (AMD) ....................... 933
62.2.1.4 SNMP Alarms in Syslog Messages....................................................... 933
62.2.2 Enabling Syslog .....................................................................................................934
62.2.3 Configuring the Syslog Server Address.................................................................934
62.2.4 Configuring Syslog Debug Level ...........................................................................935
62.2.5 Configuring Reporting of Management User Activities..........................................935
62.2.6 Viewing Syslog Messages .....................................................................................937
62.3 Configuring Debug Recording .............................................................................. 938
62.3.1 Configuring the Debug Recording Server Address ...............................................939
62.3.2 Collecting Debug Recording Messages ................................................................939
62.3.3 Debug Capturing on Physical VoIP Interfaces ......................................................940
63 Self-Testing ...................................................................................................... 943
64 Debugging Web Services ............................................................................... 945
65 Enabling SIP Call Flow Diagrams in OVOC ................................................... 947
66 Creating Core Dump and Debug Files upon Device Crash ......................... 949
67 Testing SIP Signaling Calls ............................................................................ 951
67.1 Configuring Test Call Endpoints........................................................................... 951
67.2 Starting and Stopping Test Calls.......................................................................... 956
67.3 Viewing Test Call Status ...................................................................................... 956
67.4 Viewing Test Call Statistics .................................................................................. 956
67.5 Configuring DTMF Tones for Test Calls............................................................... 958
67.6 Configuring Basic Test Calls ................................................................................ 959
67.7 Test Call Configuration Examples ........................................................................ 960
68 Pinging a Remote Host or IP Address ........................................................... 963
Appendix ................................................................................................................965
69 Dialing Plan Notation for Routing and Manipulation.................................... 967
70 Configuration Parameters Reference ............................................................ 971
70.1 Management Parameters..................................................................................... 971
70.1.1 General Parameters ..............................................................................................971
70.1.2 Web Parameters ....................................................................................................972
70.1.3 Telnet Parameters .................................................................................................976
Notice
Information contained in this document is believed to be accurate and reliable at the time of
printing. However, due to ongoing product improvements and revisions, AudioCodes cannot
guarantee accuracy of printed material after the Date Published nor can it accept responsibility
for errors or omissions. Before consulting this document, check the corresponding Release
Notes regarding feature preconditions and/or specific support in this release. In cases where
there are discrepancies between this document and the Release Notes, the information in the
Release Notes supersedes that in this document. Updates to this document and other
documents as well as software files can be downloaded by registered customers at
http://www.audiocodes.com/downloads.
This document is subject to change without notice.
Date Published: Noovember-13-2017
WEEE EU Directive
Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed
of with unsorted waste. Please contact your local recycling authority for disposal of this
product.
Customer Support
Customer technical support and services are provided by AudioCodes or by an authorized
AudioCodes Service Partner. For more information on how to buy technical support for
AudioCodes products and for contact information, please visit our Web site at
www.audiocodes.com/support.
Related Documentation
Manual Name
Manual Name
Note: The device is an indoor unit and therefore, must be installed only INDOORS. In
addition, Ethernet port interface cabling must be routed only indoors and must not exit
the building.
Note: The scope of this document does not fully cover security aspects for deploying
the device in your environment. Security measures should be done in accordance
with your organization’s security policies. For basic security guidelines, refer to
AudioCodes Recommended Security Guidelines document.
Note: Throughout this manual, unless otherwise specified, the term device refers to
your AudioCodes product.
Note: Before configuring the device, ensure that it is installed correctly as instructed
in the Hardware Installation Manual.
Note:
• This device includes software developed by the OpenSSL Project for use in the
OpenSSL Toolkit (http://www.openssl.org/).
• This device includes cryptographic software written by Eric Young
(eay@cryptsoft.com).
Note: Some of the features listed in this document are available only if the relevant
License Key has been purchased from AudioCodes and installed on the device. For a
list of License Keys that can be purchased, please consult your AudioCodes sales
representative.
Note: OPEN SOURCE SOFTWARE. Portions of the software may be open source
software and may be governed by and distributed under open source licenses, such
as the terms of the GNU General Public License (GPL), the terms of the Lesser
General Public License (LGPL), BSD and LDAP, which terms are located at:
http://www.audiocodes.com/support and all are incorporated herein by reference. If
any open source software is provided in object code, and its accompanying license
requires that it be provided in source code as well, Buyer may receive such source
code by contacting AudioCodes, by following the instructions available on
AudioCodes website.
LTRT Description
LTRT Description
based Certificates to TLS Contexts; Generating Private Keys for TLS Contexts; Building
and Viewing your Network Topology; SIP-based Media Recording (multiple SRSs);
Enabling SIP-based Media Recording; Configuring SIP Recording Rules; Configuring
Proxy Sets (keep-alive); Pre-Configured IP Groups; Normal Mode (CRP); Emergency
Mode (CRP); Auto Answer to Registrations (CRP); Network Topology Types and Rx/Tx
Ethernet Port Group Settings; License Key; Viewing the License Key; Obtaining License
Key for Feature Upgrade (removed); Installing the a New License Key; Installing License
Key through Web Interface; Upgrading SBC Capacity Licenses by License Pool Manager
Server; Viewing Device Information; Configuring PacketSmart Agent for Network
Monitoring; Viewing Call Routing Status (removed); Configuring RTCP XR (IP Group);
Configuring RADIUS Accounting (typo for Accounting-Request).
New sections: Customizing the Web Interface; Replacing the Corporate Logo; Replacing
the Corporate Logo with an Image; Replacing the Corporate Logo with Text; Customizing
the Product Name; Customizing the Favicon; SRTP using DTLS Protocol; SBC Wizard;
Viewing the Device's Product Key; Saving Configuration to a File; Loading a Configuration
File; Viewing Proxy Set Status.
Updated parameters: TLSContexts_ServerCipherString; TLSContexts_ClientCipherString;
NATTranslation_SourceStartPort; NATTranslation_SourceEndPort;
NATTranslation_TargetStartPort; NATTranslation_TargetEndPort; SNMPSysOid;
SNMPTrapEnterpriseOid; EnableCoreDump (typo); HTTPSCipherString (removed);
SSHAdminKey; SessionExpiresDisconnectTime; ISDNJapanNTTTimerT3JA;
BrokenConnectionEventTimeout; RADIUSRetransmission (default); RadiusTO (default).
New parameters: WebUsers_SSHPublicKey; TLSContexts_DTLSVersion;
TLSContexts_DHKeySize; SIPRecRouting_SRSRedundantIPGroupName;
ProxySet_SuccessDetectionRetries; ProxySet_SuccessDetectionInterval;
ProxySet_FailureDetectionRetransmissions; ProxySet_MinActiveServersLB; WebUsers;
WebFaviconFileUrl.
10645 Updated sections: Configuring VoIP LAN Interface for OAMP (CLI); Configuring
Management User Accounts (typo); Enabling SNMP; Configuring IP Network Interfaces;
SIP-based Media Recording (multiple SRS); Configuring LDAP Servers (max. and cache);
Configuring Call Setup Rules; Alternative Routing Based on IP Connectivity (Busy Out);
Alternative Routing Based on SIP Responses (Busy Out); Fixed Mapping of SIP
Response to ISDN Release Reason; Fixed Mapping of ISDN Release Reason to SIP
Response; Configuring Charge Codes; Configuring SBC IP-to-IP Routing (note);
Configuring SIP Response Codes for Alternative Routing Reasons; SBC Wizard
(screens); Auxiliary Files (SBC Wizard); Viewing IP Connectivity (typo); Creating Core
Dump and Debug Files upon Device Crash (reset)
New sections: Debugging Remote HTTP Services
Updated parameters: SIPRecRouting_SRSIPGroupName; SIPInterface_InterfaceName
(max. char); ProxySet_ProxyName (max. char);
MessageManipulations_ManipulationName (max. char); MessagePolicy_Name (max.
char); AllowedAudioCodersGroups_Name (max. char);
AllowedVideoCodersGroups_Name (max. char); TelProfile_ProfileName (max. char);
PREFIX_RouteName (max. char); GWRoutingPolicy_Name; PstnPrefix_RouteName
(max. char); _ManipulationName (max. char);
SBCAdmissionControl_AdmissionControlName (max. char);
Classification_ClassificationName (max. char); IP2IPRouting_RouteName (max. char);
SBCRoutingPolicy_Name (max. char); IPGroupSet_Name (max. char);
IPInboundManipulation_ManipulationName (max. char);
IPOutboundManipulation_ManipulationName (max. char); IpProfile_SBCUseSilenceSupp;
TelProfile_ECNlpMode (2 removed); SBCAdmissionControl_Rate;
EnableWebAccessFromAllInterfaces; ResetWebPassword; DisableSNMP;
EnableCoreDump; SSHMaxLoginAttempts; IgnoreAlertAfterEarlyMedia; EnableBusyOut;
ECNLPMode; ISDNInCallsBehavior (defaults); SecureCallsFromIP (note);
AltRoutingTel2IPEnable (note);
LTRT Description
New parameters: ChargeCode_ChargeCodeName; HTTPProxySyslogDebugLevel
10646 Updated with patch version 7.20A.150.
Updated sections: Areas of the GUI (Configuration Wizard button); Enabling Disabling
SNMP; Viewing Certificate Information (screen); Assigning Externally Created Private
Keys to TLS Contexts (pass-phrase); Generating Private Keys for TLS Contexts (pass-
phrase); Importing Certificates into Trusted Certificate Store (bulk import); Configuring
Underlying Ethernet Devices (MTU); Configuring Firewall Settings (note); SIP-based
Media Recording (max.); Configuring Remote Web Services (QoS routing); Centralized
Third-Party Routing Server (QoS); Configuring Proxy Sets; Configuring CAS State
Machines (note); Alternative Routing Based on IP Connectivity; Configuring SBC IP-to-IP
Routing; Configuring IP Group Sets (dial plan tags); Configuring Dial Plans; Software
Upgrade; Installing License Key through Web Interface; Upgrading SBC Capacity
Licenses by License Pool Manager Server; Configuring RADIUS Accounting (typo);
Configuring DTMF Tones for Test Calls; Configuring Basic Test Calls; Configuring SBC
Test Call with External Proxy (removed).
New sections: Microsoft Skype for Business Presence of Third-Party Endpoints; Registrar
Stickiness; Configuring Pre-Parsing Manipulation Rules; Configuring Private Wire
Interworking; Configuring Rerouting of Calls to Fax Destinations; Using Dial Plan Tags for
Routing Destinations; Disconnecting and Reconnecting HA; Viewing the License Key;
Viewing the Device's Product Key; Debugging Web Services.
Updated parameters: AccessList_Source_IP; AccessList_Source_Port;
AccessList_Start_Port; AccessList_End_Port; HTTPRemoteServices_HTTPType (option
5); IPGroup_SBCDialPlanName (note); ProxySet_IsProxyHotSwap; ProxyIp_IpAddress;
IpProfile_SBCRemoteReferBehavior (4); IP2IPRouting_Trigger (6);
IP2IPRouting_DestType (12); DialPlanRule_Tag; SBCCDRFormat_FieldType (818);
Test_Call_RouteBy; Test_Call_Play (tone); KeepAliveTrapPort (default); SBCtestID
(removed); ProxyIPListRefreshTime; RegistrationRetryTime (note);
EnablePChargingVector (note); EnableTDMoverIP (2); EnableSBCApplication (default).
New parameters: DeviceTable_MTU; SRD_SBCDialPlanName;
SIPInterface_PreParsingManSetName; IPGroup_Tags; Account_RegistrarStickiness;
Account_RegistrarSearchMode; Account_RegEventPackageSubscription;
IpProfile_SBCPlayHeldTone; IpProfile_SBCFaxReroutingMode;
IP2IPRouting_RoutingTagName; IP2IPRouting_InternalAction; IPGroupSet_Tags;
CustomerSN; MaxRegistrationBackoffTime; MaxSDPSessionVersionId;
UseRandomUser; UnregisterOnStartup; EnableReansweringINFO;
PresencePublishIPGroupId; EnableMSPresence; PreParsingManipulationSets;
PreParsingManipulationRules; HookFlashFromMediaIP; EnableTDMOverIPforTrunk;
CASOrientedBoard; RoutingServerQualityStatus; RoutingServerQualityStatusRate.
10648 Updated with patch version 7.20A.152.
Updated sections: Configuring the LDAP Search Filter Attribute (Web path); Enabling
LDAP Searches for Numbers with Characters; Microsoft Skype for Business Presence of
Third-Party Endpoints; Configuring the Device for Skype for Business Presence
(example); Configuring Media Realm Extensions; Configuring SBC IP-to-IP Routing (back
to the sender); Prerecorded Tones File; Installing on HA Devices (note); Channel
Capacity; Session Capacity per Configuration
Updated parameters: SNMPReadOnlyCommunityString (max. chars);
SNMPReadWriteCommunityString (max. chars); SNMPTrapCommunityString (max.
chars); MediaRealmExtension_IPv4IF; MediaRealmExtension_IPv6IF;
ProxySet_EnableProxyKeepAlive; PstnPrefix_SourceAddress; SIPSDPSessionOwner
New parameters: IPGroup_SBCUserStickiness; IPProfile_LocalRingbackTone;
IPProfile_LocalHeldTone
10649 Updated with patch Version 7.20A.154.007
Updated sections: Silence Suppression (removed); Fax / Modem Transparent Mode
LTRT Description
(silnce suppression removed); Configuring SIP Recording Rules (view sessions in CLI);
Centralized Third-Party Routing Server (call preemption added); Pre-empting Existing
Calls for E911 IP-to-Tel Calls; Configuring Firewall Allowed Rules; Locking and Unlocking
the Device (typos); Viewing Active Alarms (max display)
New sections: Configuring Additional Management Interfaces; Configuring Specific UDP
Ports using Tag-based Routing
Updated parameters: WebUsers_Password (note); InterfaceTable_ApplicationTypes;
ProxySet_SuccessDetectionRetries (max); ProxySet_SuccessDetectionInterval (max);
Account_RegistrarSearchMode (phys link); AudioCoders_Sce (global parameter
removed); IpProfile_SCE (removed); IpProfile_SBCRemoteReferBehavior (new option 5);
IPProfile_SBCRemoteHoldFormat (new option 6); SBCCDRFormat_Title (max. char.);
WebUsers (CLI name); FaxBypassPayloadType; ModemBypassPayloadType;
EnableSilenceCompression (removed)
New parameters: SIPInterface_AdditionalUDPPorts;
IPProfile_SBCSupportMultipleDTMFMethods; AdditionalManagementInterfaces;
EnableWebAccessFromAllInterfaces; DefaultTerminalWindowHeight;
ActiveAlarmTableMaxSize; SBCRemoveSIPSFromNonSecuredTransport
10650 Updated with patch Version 7.20A.156.009
Updated sections: Configuring Management User Accounts; Device Located behind NAT;
Configuring a Static NAT IP Address for All Interfaces (removed); Comfort Noise
Generation; Configuring RTP Base UDP Port (note removed); SIP-based Media
Recording (URL of France reg.; note on SRS redundancy); Configuring SIP Recording
Rules (note re timestamp); Configuring the OVOC Server (note re report mode);
Configuring Call Setup Rules (ENUM); Call Setup Rule Examples (e.g., 5); Interworking
SIP Early Media (figure); Prerecorded Tones File; Automatic Configuration Methods;
DHCP-based Provisioning (note re resets)
New sections: Using Conditions for Starting a SIPRec Session; Using the Proprietary SIP
X-AC-Action Header; Handling Registered AORs with Same Contact URIs; Configuring
Dual Registration; Provisioning the Device using DHCP Option 160; Enabling SIP Call
Flow Diagrams in OVOC
Updated parameters: WebUsers_SessionLimit; WebUsers_SessionTimeout;
CpMediaRealm_PortRangeStart (note removed); SRD_SBCOperationMode (option 2
removed); SRD_BlockUnRegUsers (option 2 updated); SIPInterface_UDPPort (note
removed); SIPInterface_AdditionalUDPPorts; SIPInterface_BlockUnRegUsers;
IPGroup_SBCOperationMode (2 removed); IPGroup_SIPConnect;
CallSetupRules_QueryType (OPTION 3); CallSetupRules_QueryTarget;
CallSetupRules_AttributesToQuery; CallSetupRules_Condition;
IpProfile_SBCSDPPtimeAnswer; IpProfile_SBCPreferredPTime;
IpProfile_SBCRemoteRepresentationMode (0 updated); DialPlanRule_Tag;
LoggingFilters_LogDestination (new option 3); LoggingFilters_CaptureType (new option
6); WebSessionTimeout (range); StaticNatIP (removed);
EnableSilenceDisconnect/FarEndDisconnectSilencePeriod/FarEndDisconnectSilenceMet
hod/FarEndDisconnectSilenceThreshold/BrokenConnectionDuringSilence;
UseDisplayNameAsSourceNumber; SBCDBRoutingSearchMode;
SBCKeepContactUserinRegister
New parameters: WebUsers_CliSessionLimit; SIPRecRouting_ConditionName;
IPGroup_UserUDPPortAssignment; NoAlarmForDisabledPort; CallFlowReportMode;
DhcpOption160Support; SIPRecTimeStamp
Miscellaneous: EMS/SEM replaced with One Voice Operations Center (OVOC) – text and
screenshots
Documentation Feedback
AudioCodes continually strives to produce high quality documentation. If you have any
comments (suggestions or errors) regarding this document, please fill out the
Documentation Feedback form on our Web site at http://online.audiocodes.com/doc-
feedback.
1 Introduction
This User's Manual describes how to configure and manage your AudioCodes product
(hereafter, referred to as device). This document is intended for the professional person
responsible for installing, configuring and managing the device.
Note: For maximum call capacity figures, see 'Channel Capacity' on page 1209.
Boldface font Used for the following Web Click the Add button.
interface elements:
Buttons
Selectable parameter values
Text enclosed by double Parameter value that you need In the 'IP Address' field, enter
apostrophe "..." to type. "10.10.1.1".
Courier font CLI commands. At the prompt, type the
following:
# configure system
Text enclosed by square Ini file parameters and values. Configure the [GWDebugLevel]
brackets [...] parameter to [1].
Text enclosed by single Web interface parameters. From the 'Debug Level' drop-
apostrophe '...' down list, select Basic.
Notes highlight important or -
useful information.
IP Group The IP Group is a logical representation of the SIP entity (UA) with which
the device receives and sends calls. The SIP entity can be a server (e.g.,
IP PBX or SIP Trunk) or it can be a group of users (e.g., LAN IP phones).
For servers, the IP Group is typically used to define the address of the
entity (by its associated Proxy Set). IP Groups are used in IP-to-IP routing
rules to denote the source and destination of the call.
Proxy Set The Proxy Set defines the actual address (IP address or FQDN) of SIP
entities that are servers (e.g., IP PBX). As the IP Group represents the
SIP entity, to associate an address with the SIP entity, the Proxy Set is
assigned to the IP Group. You can assign the same Proxy Set to multiple
The associations between the configuration entities are summarized in the following figure:
Figure 1-1: Association of Configuration Entities
The main configuration entities and their involvement in the call processing is summarized
in following figure. The figure is used only as an example to provide basic understanding of
the configuration terminology. Depending on configuration and network topology, the call
process may include additional stages or a different order of stages.
Figure 1-2: SBC Configuration Terminology for Call Processing
1. The device determines the SIP Interface on which the incoming SIP dialog is received
and thus, determines its associated SRD.
2. The device classifies the dialog to an IP Group (origin of dialog), using a specific
Classification rule that is associated with the dialog's SRD and that matches the
incoming characteristics of the incoming dialog defined for the rule.
3. IP Profile and inbound manipulation can be applied to incoming dialog.
4. The device routes the dialog to an IP Group (destination), using the IP-to-IP Routing
table. The destination SRD (and thus, SIP Interface and Media Realm) is the one
assigned to the IP Group. Outbound manipulation can be applied to the outgoing
dialog.
IP Groups The IP Group is a logical representation of the SIP entity (UA) with which
the device receives and sends calls. The SIP entity can be a server (e.g.,
IP PBX or SIP Trunk) or it can be a group of users (e.g., LAN IP phones).
For servers, the IP Group is typically used to define the address of the
entity (by its associated Proxy Set). IP Groups are used in IP-to-Tel and
Tel-to-IP routing rules to denote the source and destination of the call
respectively.
Proxy Sets The Proxy Set defines the actual address (IP address or FQDN) of SIP
entities that are servers (e.g., IP PBX). As the IP Group represents the
SIP entity, to associate an address with the SIP entity, the Proxy Set is
assigned to the IP Group.
SIP Interfaces The SIP Interface represents a Layer-3 network for the IP-based SIP
entity. It defines a local listening port for SIP signaling traffic on a local,
logical IP network interface. The term local implies that it's a logical port
and network interface on the device. The SIP Interface is used to receive
and send SIP messages with a specific SIP entity (IP Group). Therefore,
you can create a SIP Interface for each SIP entity in the VoIP network
with which your device needs to communicate.
The SIP Interface is associated with the SIP entity, by assigning the SIP
Interface to an SRD that is in turn, assigned to the IP Group of the SIP
entity.
Media Realms The Media Realm defines a local UDP port range for RTP (media) traffic
on any one of the device's logical IP network interfaces. The Media
Realm is used to receive and send media traffic with a specific SIP entity
(IP Group).
The Media Realm can be associated with the SIP entity, by assigning the
Media Realm to the IP Group of the SIP entity, or by assigning it to the
SIP Interface associated with the SIP entity.
SRDs The SRD is a logical representation of your entire VoIP network. The
SRD is in effect, the foundation of your configuration to which all other
previously mentioned configuration entities are associated.
Typically, only a single SRD is required and this is the recommended
configuration topology. As the device provides a default SRD, in a single
SRD topology, the device automatically assigns the SRD to newly created
configuration entities. Thus, in such scenarios, there is no need to get
involved with SRD configuration.
Multiple SRDs are required only for multi-tenant deployments.
IP Profiles The IP Profile is an optional configuration entity that defines a wide range
of call settings for a specific SIP entity (IP Group). The IP Profile includes
signaling and media related settings, for example, jitter buffer, voice
coders, fax signaling method, SIP header support (local termination if not
supported), and media security method. The IP Profile is in effect, the
interoperability "machine" of the device, enabling communication with SIP
endpoints supporting different call "languages".
The IP Profile is associated with the SIP entity, by assigning the IP Profile
to the IP Group of the SIP entity.
Tel Profiles The Tel Profile is an optional configuration entity that defines a wide
range of call settings for a specific PSTN-based endpoint. The IP Profile
includes settings such as message waiting indication (MWI), input gain,
voice volume and fax signaling method.
The Tel Profile is associated with the PSTN-based endpoint, by assigning
it to the Trunk Group belonging to the endpoint.
Tel-to-IP Routing Rules Tel-to-IP routing rules are used to route calls from PSTN-based endpoints
to an IP destination (SIP entity). The PSTN side can be denoted by a
specific Trunk Group, or calling or called telephone number prefix and
suffix. The SIP entity can be denoted by an IP Group or other IP
destinations such as IP address, FQDN, E.164 Telephone Number
Mapping (ENUM service), and Lightweight Directory Access Protocol
(LDAP).
IP-to-Tel (Trunk Group) IP-to-Tel routing rules are used to route incoming IP calls to Trunk
Routing Rules Groups. The specific channel pertaining to the Trunk Group to which the
call is routed can also be configured.
Accounts Accounts are used to register or authenticate PSTN-based endpoints with
a SIP entity (e.g., a registrar or proxy server). The device does this on
behalf of the PSTN-based endpoint. Authentication (SIP 401) is typically
relevant for INVITE messages forwarded by the device to a SIP entity.
Registration is for REGISTER messages, which are initiated by the
device on behalf of the PSTN-based endpoint.
The following figure shows the main configuration entities and their involvement in call
processing. The figure is used only as an example to provide basic understanding of the
configuration terminology. Depending on configuration and network topology, the call
process may include additional stages or a different order of stages.
Figure 1-3: Gateway Configuration Terminology for Call Processing
2 Introduction
This part describes how to initially access the device's management interface and change
its default IP address to correspond with your networking scheme.
IP Address Value
Note: If you are implementing the High Availability feature, see also HA Overview on
page 725 for initial setup.
2. Change the IP address and subnet mask of your computer to correspond with the
default OAMP IP address and subnet mask of the device.
b. In the 'Username' and 'Password' fields, enter the case-sensitive, default login
username ("Admin") and password ("Admin").
c. Click Login.
4. Configure the Ethernet port(s) that you want to use for the OAMP interface:
a. In the Ethernet Groups table, configure an Ethernet Group by assigning it up to
two ports (two ports provide optional, port-pair redundancy). For more
information, see Configuring Physical Ethernet Ports on page 134.
b. In the Physical Ports table, configure port settings such as speed and duplex
mode (see Configuring Physical Ethernet Ports on page 134).
c. In the Ethernet Devices table, configure an Ethernet Device by assigning it the
Ethernet Group and a VLAN ID (see 'Configuring Underlying Ethernet Devices' on
page 138).
5. Modify the OAMP interface address to suite your network environment:
a. Open the IP Interfaces table (see 'Configuring IP Network Interfaces' on page
141).
4.2 CLI
This procedure describes how to configure the VoIP-LAN IP address for OAMP through the
device's CLI. The procedure uses the regular CLI commands. Alternatively, you can use
the CLI Wizard utility to set up your device with the initial OAMP settings. The utility
provides a fast-and-easy method for initial configuration of the device through CLI. For
more information, refer to the CLI Wizard User's Guide.
2. Establish serial communication with the device using a terminal emulator program
such as HyperTerminal, with the following communication port settings:
• Baud Rate: 115,200 bps
• Data Bits: 8
• Parity: None
• Stop Bits: 1
• Flow Control: None
3. At the CLI prompt, type the username (default is "Admin" - case sensitive):
Username: Admin
4. At the prompt, type the password (default is "Admin" - case sensitive):
Password: Admin
5. At the prompt, type the following:
enable
6. At the prompt, type the password again:
Password: Admin
7. Access the Network configuration mode:
# configure network
8. Access the IP Interfaces table:
(config-network)# interface network-if 0
5 Introduction
This part describes the various management tools that you can use to configure the device:
Embedded HTTP/S-based Web server - see 'Web-based Management' on page 51
Command Line Interface (CLI) - see 'CLI-Based Management' on page 87
Simple Network Management Protocol (SNMP) - see 'SNMP-Based Management' on
page 93
Configuration ini file - see 'INI File-Based Management' on page 101
Note:
• Some configuration settings can only be done using a specific management tool.
• For a list and description of all the configuration parameters, see 'Configuration
Parameters Reference' on page 971.
6 Web-Based Management
The device provides an embedded Web server (hereafter referred to as Web interface),
supporting fault management, configuration, accounting, performance, and security
(FCAPS), including the following:
Full configuration
Software and configuration upgrades
Loading Auxiliary files, for example, the Call Progress Tones file
Real-time, online monitoring of the device, including display of alarms and their
severity
Performance monitoring of voice calls and various traffic parameters
The Web interface provides a user-friendly, graphical user interface (GUI), which can be
accessed using any standard Web browser (e.g., Microsoft™ Internet Explorer).
Access to the Web interface is controlled by various security mechanisms such as login
user name and password, read-write privileges, and limiting access to specific IP
addresses.
Note:
• The Web interface allows you to configure most of the device's settings. However,
additional configuration parameters may exist that are not available in the Web
interface and which can only be configured using other management tools.
• Some Web interface pages and/or parameters are available only for certain
hardware configurations or software features. The software features are
determined by the installed License Key (see 'License Key' on page 781).
Note: Your Web browser must be JavaScript-enabled to access the Web interface.
3. In the 'Username' and 'Password' fields, enter the username and password,
respectively. The credentials are case-sensitive.
4. If you want the Web browser to remember your username and password, select the
'Remember Me' check box and then agree to the browser's prompt (depending on
your browser). On your next login attempt, the 'Username' field is automatically
populated with your username. Simply press the Tab or Enter key to auto-fill the
'Password' field, and then click Login.
5. Click Login.
Note:
• The default login username and password is "Admin" (case-sensitive). To change
the login credentials, see 'Configuring Management User Accounts' on page 75.
• By default, Web access is only through the IP address of the OAMP interface.
However, you can allow access from all of the device's IP network interfaces, by
setting the EnableWebAccessFromAllInterfaces parameter to 1.
• By default, autocompletion of the login username is enabled whereby the
'Username' field offers previously entered usernames. To disable autocompletion,
use the WebLoginBlockAutoComplete ini file parameter.
• Depending on your Web browser's settings, a security warning box may be
displayed. The reason for this is that the device's certificate is not trusted by your
PC. The browser may allow you to install the certificate, thus skipping the warning
box the next time you connect to the device. If you are using Windows Internet
Explorer, click View Certificate, and then Install Certificate. The browser also
warns you if the host name used in the URL is not identical to the one listed in the
certificate. To resolve this, add the IP address and host name (ACL_nnnnnn,
where nnnnnn is the serial number of the device) to your hosts file, located at
/etc/hosts on UNIX or C:\Windows\System32\Drivers\ETC\hosts on Windows; then
use the host name in the URL (e.g., https://ACL_280152). Below is an example of
a host file:
127.0.0.1 localhost
10.31.4.47 ACL_280152
Item # Description
1 Company logo.
2 Menu bar containing the menus.
3 Toolbar providing frequently required command buttons.
Save: Saves configuration changes to the device's flash memory (without resetting
the device). If you make a configuration change, the button is surrounded by a red-
colored border as a reminder to save your settings to flash memory, by clicking the
button.
Reset: Opens the Maintenance Actions page, which is used for performing various
maintenance procedures such as resetting the device (see 'Basic Maintenance' on
page 743). If you make a configuration change that takes effect only after a device
reset, the button is surrounded by a red-colored border as a reminder to save your
settings to flash memory with a device reset; otherwise, your changes revert to
previous settings if the device subsequently resets or powers off.
Actions:
Configuration File: Opens the Configuration File page, which is used for saving
the ini file to a folder on your PC, or for loading an ini file to the device (see
'Configuration File' on page 793).
Auxiliary Files: Opens the Auxiliary Files page, which is used for loading
Auxiliary files to the device (see 'Loading Auxiliary Files through Web Interface'
on page 758).
License Key: Opens the License Key page, which is used for installing a new
License Key file (see 'Installing License Key through Web Interface' on page
789).
Software Upgrade: Starts the Software Upgrade Wizard for upgrading the
device's software (see 'Software Upgrade' on page 751).
Switchover: Opens the High Availability Maintenance page, which is used for
switching between Active and Redundant (see High Availability Maintenance on
page 747).
Configuration Wizard: Opens the SBC Configuration Wizard, which is used for
quick-and-easy configuration of the device (see SBC Configuration Wizard on
page 819).
4 Alarm bell icon, which displays the number of active alarms generated by the device.
The color of the number of alarms display indicates the highest severity of an active
alarm. If you click the icon, the Active Alarms table is displayed. For more information on
the table, see Viewing Active Alarms.
5 Button displaying the username of the currently logged in user. If you click the button,
information of the logged-in user is displayed (see 'Viewing Logged-In User Information'
on page 81) and the Log Out button is provided to log out the Web session (see
'Logging Off the Web Interface' on page 68).
6 Tab bar containing tabs pertaining to the selected menu:
Setup menu:
IP Network
Signaling & Media
Administration
Monitor menu: Monitor
Troubleshoot menu: Troubleshoot
7 Back and Forward buttons that enable quick-and-easy navigation through previously
opened pages. This is especially useful when you find that you need to return to a
previously accessed page, and then need to go back to the page you just left.
Item # Description
The items of the Navigation tree depend on the menu-tab combination, selected from the
menu bar and tab bar, respectively. The menus and their respective tabs are listed below:
Setup menu:
• IP Network tab
• Signaling & Media tab
• Administration tab
Monitor menu: Monitor tab
Troubleshoot menu: Troubleshoot tab
When you open the Navigation tree, folders containing commonly required items are
opened by default, allowing quick access to their pages.
Items that open pages containing tables provide the following indications in the Navigation
tree:
Number of configured rows. For example, the item below indicates that two rows have
been configured:
If you have filtered the Web interface display by SRD, the number reflects only the
rows that are associated with the filtered SRD.
Invalid row configuration. If you have configured a row with at least one invalid value,
a red-colored icon is displayed next to the item, as shown in the following example:
If you hover your cursor over the icon, it displays the number of invalid rows (lines).
Association with an invalid row: If you have associated a parameter of a row with a
row of a different table that has an invalid configuration, the item appears with an
arrow and a red-colored icon, as shown in the following example:
If you hover your cursor over the icon, it displays the number of rows in the table that
are associated with invalid rows.
Folder containing an item with an invalid row: If a folder contains an item with an
invalid row (or associated with an invalid row), the closed folder displays a red-colored
icon, as shown in the following example:
If you hover your cursor over the icon, it displays the names of the items that are
configured with invalid values. If you have filtered the Web interface display by SRD,
only items with invalid rows that are associated with the filtered SRD are displayed.
These buttons are especially useful when you find that you need to return to a previously
accessed page, and then need to go back to the page you just left.
Note: Depending on the access level (e.g., Monitor level) of your Web user account,
certain pages may not be accessible or may be read-only (see 'Configuring
Management User Accounts' on page 75). For read-only privileges:
• Read-only pages with stand-alone parameters: "Read Only Mode" is displayed at
the bottom of the page.
• Read-only pages with tables: Configuration buttons (e.g., New and Edit) are
missing.
If you change the value of a parameter from its default value and then click Apply, a
dot appears next to the parameter's field, as shown in the example below:
If you change the value of a parameter that is displayed with a lightning-bolt icon
(as shown in the example below), you must save your settings to flash memory with a
device reset for your changes to take effect. When you change such a parameter and
then click Apply, the Reset button on the toolbar is encircled by a red border. If you
click the button, the Maintenance Actions page opens, which provides commands for
doing this (see 'Basic Maintenance' on page 743).
To get help on a parameter, simply hover your mouse over the parameter's field and a
pop-up help appears, displaying a brief description of the parameter.
The following procedure describes how to configure stand-alone parameters.
Warning: When you click Apply, your changes are saved only to the device's volatile
memory and thus, revert to their previous settings if the device later undergoes a
hardware reset, a software reset (without saving to flash) or powers down. Therefore,
make sure that you save your configuration to the device's flash memory.
Item # Button
Item # Button
1 - Page title (i.e., name of table). The page title also displays the number
of configured rows as well as the number of invalid rows. For more
information on invalid rows, see 'Invalid Value Indications' on page 62.
2 Adds a new row to the table (see 'Adding Table Rows' on page 59).
Modifies the selected row (see 'Modifying Table Rows' on page 61).
Adds a new row with similar settings as the selected row (i.e., clones
the row). For more information, see 'Cloning SRDs' on page 349.
Note: The button appears only in the SRDs table.
Deletes the selected row (see 'Deleting Table Rows' on page 61).
Changes the index position of a selected row (see 'Changing Index
Position of Table Rows' on page 65).
Action Drop-down menu providing commands (e.g., Register and Un-
Register).
Note: The button appears only in certain tables (e.g., Accounts table).
3 - Added table rows displaying only some of the table parameters
(columns).
4 - Detailed view of a selected row, displaying all parameters.
5 - Link to open the "child" table of the "parent" table. A link appears only
if the table has a "child" table. The "child" table is opened for the
selected row.
6 - Navigation bar for scrolling through the table's pages (see 'Viewing
Table Rows' on page 64).
7 - Search tool for searching parameters and values (see 'Searching
Table Entries' on page 66).
8 Modifies the selected row (see 'Modifying Table Rows' on page 61).
For indications of invalid values, see 'Invalid Value Indications' on page 62.
To add a row:
1. Click the New button, located on the table's toolbar; a dialog box appears.
2. Configure the parameters of the row as desired. For information on configuring
parameters that are assigned a value which is a row referenced from another table,
see 'Assigning Rows from Other Tables' on page 60.
3. Click Apply to add the row to the table or click Cancel to ignore your configuration.
4. If the Save button is surrounded by a red border, you must save your
settings to flash memory, otherwise they are discarded if the device resets (without a
save to flash) or powers off.
a. From the drop-down list, select the Add new option; as shown in the example
below:
Figure 6-9: Selecting Add new Option
The table (e.g., IP Groups table) and dialog box in which the Add new option was
selected is minimized to the bottom-left corner of the Web interface and a dialog
box appears for adding a new row in the referenced-table (e.g., Proxy Sets table).
b. Configure the referenced-row and click Apply; the referenced-table (e.g., Proxy
Sets table) closes and you are returned to the dialog box in which you selected
the Add new option (e.g., IP Groups table), where the newly added row now
appears selected.
You may want to access the referenced-table (e.g., Proxy Sets table) to simply view all its
configured rows and their settings, without selecting one. To do this, click the View button.
To return to the dialog box of the table (e.g., IP Groups table) in which you are making your
configuration, click the arrow icon on the minimized dialog box to restore it to its
previous size.
4. If the Save button is surrounded by a red border, you must save your
settings to flash memory, otherwise they are discarded if the device resets (without a
save to flash) or powers off.
2. Click the delete icon, located on the table's toolbar; a confirmation message box
appears requesting you to confirm deletion, as shown in the example below:
3. Click Yes, Delete; the row is removed from the table and the total number of
configured rows that is displayed next to the page title and page item in the Navigation
tree is updated to reflect the deletion.
Note: If the deleted row (e.g., a Proxy Set) was referenced in another table (e.g., IP
Group), the reference is removed and replaced with an empty field. In addition, if the
reference in the other table is for a mandatory parameter, the invalid icon is
displayed where relevant. For example, if you delete a SIP Interface that you have
assigned to a Proxy Set, the invalid icon appears alongside the Proxy Sets item in
the Navigation tree as well as on the Proxy Sets page.
If you hover your mouse over the field, a pop-up message appears providing the valid
values. If you enter a valid value, the colored border is removed from the field. If you
leave the parameter at the invalid value and click Apply, the parameter reverts to its
previous value.
Mandatory parameters that reference rows of other configuration tables:
• Adding a row: If you do not configure the parameter and you click Apply, an
error message is displayed at the bottom of the dialog box. If you click Cancel,
the dialog box closes and the row is not added to the table. For example, if you
do not configure the 'SIP Interface' field (mandatory) for a Proxy Set (in the Proxy
Sets table), the below message appears::
• Editing a row: If you modify the parameter so that it's no longer referencing a
row of another table (i.e., blank value), when you close the dialog box, the Invalid
Line icon appears in the following locations:
♦ 'Index' column of the row.
♦ Page title of the table. The total number of invalid rows in the table is also
displayed with the icon.
Parameters that reference rows of other configuration tables that are configured
with invalid values: If a row has a parameter that references a row of another table
that has a parameter with an invalid value, the Invalid Reference Line icon is
displayed in the following locations:
• 'Index' column of the row.
• Page title of the table. The total number of invalid rows in the table is also
displayed with the icon.
• Item in the Navigation tree that opens the table.
For example, if you configure IP Group #0 (in the IP Groups table) with a parameter
that references Proxy Set #0, which is configured with an invalid value, Invalid
Reference Line icons are displayed for the IP Groups table, as shown below:
Figure 6-12: Invalid Reference Line Icons
Invalid icon display in drop-down list items of parameters that can reference
rows of other tables:
• If the row has an invalid line (see description above), the Invalid Line icon
appears along side the item.
• If the row has an invalid reference line (see description above), the Invalid
Reference Line icon appears along side it.
For example, when configuring an IP Group, the 'Proxy Set' parameter's drop-down
list displays items: Proxy Set #0 with indicating that it has an invalid parameter
value, and Proxy Set #1 with indicating that it has a parameter that is referenced to
a row of another table that has an invalid value:
Figure 6-13: Invalid Icon Display in Drop-Down List of Parameter Referencing Other Rows
Note: If you assign a non-mandatory parameter with a referenced row and then later
delete the referenced row (in the table in which the row is configured), the
parameter's value automatically changes to an empty field (i.e., no row assigned).
Therefore, make sure that you are aware of this and if necessary, assign a different
referenced row to the parameter. Only if the parameter is mandatory is the Invalid
Line icon displayed for the table in which the parameter is configured.
Item # Description
2. To sort the column in descending order, click the column name again; only the down
arrow is displayed in a darker shade of color, indicating that the column is sorted in
descending order:
Figure 6-15: Table Sorted by Index in Descending Order
Note:
• Changing row position can only done when the table is sorted by the 'Index'
column and in ascending order; otherwise, the buttons are grayed out. For sorting
table columns, see 'Sorting Tables by Column' on page 65.
• Changing row position is supported only by certain tables (e.g., IP-to-IP Routing
table).
Item # Description
1 'Specify Columns' drop-down list for selecting the table column (parameter) in which to
do the search. By default, the search is done in all columns.
2 Search box to enter your search key (parameter value).
3 Magnifying-glass icon which when clicked performs the search.
substring in their names are listed in the search result. For example, to search for the
parameter 'Telnet Server TCP Port', you can use any of the following search keys:
"Telnet Server TCP Port" (Web name)
"TelnetServerPort" (ini file name)
"Telnet"
"Port"
When the device completes the search, it displays a list of found results based on the
search key. Each possible result, when clicked, opens the page on which the parameter or
value is located. You need to click the most appropriate result.
3. Click the link of the navigation path corresponding to the required found parameter to
open the page on which the parameter appears.
2. Click Yes; you are logged off the Web session and the Web Login window appears
enabling you to re-login, if required.
Note:
• The product name also affects other management interfaces.
• In addition to Web-interface customization, you can customize the following to
reference your company instead of AudioCodes:
√ SNMP Interface: Product system OID (see the SNMPSysOid parameter) and
trap Enterprise OID (see the SNMPTrapEnterpriseOid parameter).
√ SIP Messages: User-Agent header (see the UserAgentDisplayInfo parameter),
SDP "o" line (see the SIPSDPSessionOwner parameter), and Subject header
(see the SIPSubject parameter).
Menu bar:
Figure 6-21: Corporate Logo on Menu Bar
4. On the left pane, click Image Load to Device; the right pane displays the following:
Figure 6-23: Customizing Web Logo
5. Use the Browse button to select your logo file, and then click Send File; the device
loads the file.
6. If you want to modify the width of the image, in the 'Logo Width' field, enter the new
width (in pixels) and then click the Set Logo Width button.
7. On the left pane, click Back to Main to exit the Admin page.
8. Reset the device with a save-to-flash for your settings to take effect.
Note:
• The logo image file type can be GIF, PNG, JPG, or JPEG.
• The logo image must have a fixed height of 24 pixels. The width can be up to 199
pixels (default is 145).
• The maximum size of the image file can be 64 Kbytes.
• Ignore the ini Parameters option, which is located on the left pane of the Admin
page.
5. Use the Browse button to select your favicon file, and then click Send File; the device
loads the image file.
6. On the left pane, click Back to Main to exit the Admin page.
7. Reset the device with a save-to-flash for your settings to take effect.
Note:
• The logo image file type can be ICO, GIF, or PNG.
• The maximum size of the image file can be 16 Kbytes.
• Ignore the ini Parameters option, which is located on the left pane of the Admin
page.
Note:
• To allow access to the device's management interfaces through all network
interfaces in the IP Interfaces table, see the EnableWebAccessFromAllInterfaces
parameter. This parameter does not specify a TLS Context nor a connectivity
protocol (HTTP or HTTPS).
• Currently, additional management interfaces are not supported for REST API
(ARM).
Parameter Description
General
Index Defines an index number for the new table row.
[AdditionalManagementInt Note: Each row must be configured with a unique index.
Parameter Description
erfaces_Index]
Interface Name Assigns an IP network interface (from the IP Interfaces table) to the
interface-name management interface.
[AdditionalManagementInt For more information on IP network interfaces, see Configuring IP
erfaces_InterfaceName] Network Interfaces on page 141.
Note:
Only Control- and/or Media-type IP network interfaces can be
associated with additional management interfaces.
An IP network interface can be associated with only one additional
management interface.
TLS Context Name Assigns a TLS Context (from the TLS Contexts table) to the
tls-context-name management interface. A TLS Context provides secure TLS-based
management access.
[AdditionalManagementInt
erfaces_TLSContextName] For more information on TLS Contexts, see Configuring TLS
Certificate Contexts on page 109.
HTTPS Only Defines the protocol required for accessing the management
https-only-val interface.
[AdditionalManagementInt [0] HTTP and HTTPS = The management interface can be
erfaces_HTTPSOnly] accessed over a secured (HTTPS) and an unsecured (HTTP)
connection.
[1] HTTPS Only = The management interface can be accessed
only over a secured (HTTPS) connection.
[2] Use global definition = The type of management connection
(HTTP and HTTPS, or HTTPS Only) depends on the configuration
of the global parameter, HTTPSOnly (see Configuring Secured
(HTTPS) Web on page 84).
Numeric
User Level Representation in Privileges
RADIUS
Security 200 Read/write privileges for all Web pages. This user level
Administrator can create all other user levels and is the only one that
can create the first Master user.
Note: At least one Security Administrator user must exist.
Master 220 Read/write privileges for all Web pages. This user level
can create all user levels, including additional Master
users and Security Administrators. It can delete all users
except the last Security Administrator.
Numeric
User Level Representation in Privileges
RADIUS
Note: Only Master users can delete Master users. If only
one Master user exists, it can be deleted only by itself.
Administrator 100 Read/write privileges for all Web pages, except security-
related pages and the Local Users table where this user
has read-only privileges.
Monitor 50 Read-only privileges and access to security-related pages
is blocked.
Note: Only Security Administrator and Master users can configure users in the Local
Users table. Administrator users have read-only privileges and Monitor users are
denied access to the table. However, Administrator and Monitor users can change
their login credentials in the Web Settings page (see 'Configuring Web Session and
Access Settings' on page 81).
By default, the device is pre-configured with the following two user accounts:
Table 6-6: Default User Accounts
Note:
• For security, it's recommended that you change the default username and
password of the default users.
• To restore the device to the default users (and with their default usernames and
passwords), configure the ini file ResetWebPassword parameter to 1. If you have
configured any other accounts, they are deleted.
• If you delete a user who is currently in an active Web session, the user is
immediately logged off the device.
• Up to five users can be concurrently logged in to the Web interface; they can all be
the same user.
• You can set the entire Web interface to read-only (regardless of Web user access
levels), using the ini file parameter DisableWebConfig (see 'Web and Telnet
Parameters' on page 971).
• You can define additional Web user accounts using a RADIUS server (see
'RADIUS Authentication' on page 242).
The following procedure describes how to configure user accounts through the Web
interface. You can also configure it through ini file (WebUsers) or CLI (configure system >
user).
3. Configure a user account according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 6-7: Local Users Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[WebUsers_Index] Note: Each row must be configured with a unique index.
Username Defines the Web user's username.
user The valid value is a string of up to 40 alphanumeric characters,
[WebUsers_Username] including the period ".", underscore "_", and hyphen "-" signs.
Parameter Description
above, configure the EnforcePasswordComplexity to 1.
For security, password characters are not shown in the Web
interface and ini file. In the Web interface, they are displayed as
dots when you enter the password and then once applied, the
password is displayed as an asterisk (*) in the table. In the ini file,
they are displayed as an encrypted string.
User Level Defines the user's access level.
privilege Monitor = (Default) Read-only user. This user can only view Web
[WebUsers_UserLevel] pages and access to security-related pages is denied.
Administrator = Read/write privileges for all pages except security-
related pages including the Local Users table where this user has
read-only privileges.
Security Administrator = Full read/write privileges for all pages.
Master = Read/write privileges for all pages. This user also
functions as a security administrator.
Note:
At least one Security Administrator must exist. You cannot delete
the last remaining Security Administrator.
The first Master user can be added only by a Security
Administrator user.
Additional Master users can be added, edited and deleted only by
Master users.
If only one Master user exists, it can be deleted only by itself.
Master users can add, edit, and delete Security Administrators
(except the last Security Administrator).
Only Security Administrator and Master users can add, edit, and
delete Administrator and Monitor users.
SSH Public Key Defines a Secure Socket Shell (SSH) public key for RSA public-key
public-key authentication (PKI) of the remote user when logging into the device's
CLI through SSH. Connection to the CLI is established only when a
[WebUsers_SSHPublicKey]
successful handshake with the user’s private key occurs.
The valid value is a string of up to 512 characters. By default, no value
is defined.
Note:
For more information on SSH and for enabling SSH, see Enabling
SSH with RSA Public Key for CLI on page 88.
To configure whether SSH public keys are optional or mandatory,
use the SSHRequirePublicKey parameter.
If not configured, the settings of the global parameter,
SSHAdminKey is used.
Status Defines the status of the user.
status New = (Default) User is required to change its password on the
[WebUsers_Status] next login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.
Valid = User can log in to the Web interface as normal.
Failed Login = The state is automatically set for users that exceed
a user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see 'Configuring Web Session
and Access Settings' on page 81). These users can log in only
after a user-defined timeout configured by the 'Block Duration'
parameter (see below) or if their status is changed (to New or
Parameter Description
Valid) by a Security Administrator or Master.
Inactivity = The state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see 'Configuring Web Session and
Access Settings' on page 81). These users can only log in to the
Web interface if their status is changed (to New or Valid) by a
System Administrator or Master.
Note:
The Inactivity status is applicable only to Administrator and Monitor
users; Security Administrator and Master users can be inactive
indefinitely.
For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Security
Password Age Defines the duration (in days) of the validity of the password. When
password-age the duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
[WebUsers_PwAgeInterval]
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Web Session Limit Defines the maximum number of concurrent Web interface and REST
session-limit sessions allowed for the specific user account. For example, if
configured to 2, the user account can be logged into the device’s Web
[WebUsers_SessionLimit]
interface (i.e., same username-password combination) from two
different management stations (i.e., IP addresses) or Web browsers at
the same time.
Once the user logs in, the session is active until the user logs off or
until the session expires if the user is inactive for a user-defined
duration (see the 'Web Session Timeout' parameter below).
The valid value is 0 to 5. The default is 2.
Note: If the number of concurrently logged-in users is at the
configured maximum, the device allows an additional user to log in
through REST.
CLI Session Limit Defines the maximum number of concurrent CLI sessions allowed for
cli-session-limit the specific user. For example, if configured to 2, the same user
account can be logged into the device’s CLI (i.e., same username-
[WebUsers_CliSessionLimit]
password combination) from two different management stations (i.e.,
IP addresses) at any one time. Once the user logs in, the session is
active until the user logs off or until the session expires if the user is
inactive for a user-defined duration (see the 'Web Session Timeout'
parameter below).
The valid value is -1, or 0 to 100. The default is -1, which means that
the limit is according to the global parameters, 'Maximum Telnet
Sessions' (TelnetMaxSessions) or 'Maximum SSH Sessions'
(SSHMaxSessions).
Web Session Timeout Defines the duration (in minutes) of inactivity of a logged-in user in the
session-timeout Web interface, after which the user is automatically logged off the
Web session. In other words, the session expires when the user has
[WebUsers_SessionTimeout]
not performed any operations (activities) in the Web interface for the
configured timeout duration.
The valid value is 0, or 2 to 100000. A value of 0 means no timeout.
Parameter Description
The default value is according to the settings of the
WebSessionTimeout global parameter (see 'Configuring Web Session
and Access Settings' on page 81).
Block Duration Defines the duration (in seconds) for which the user is blocked when
block-duration the user exceeds a user-defined number of failed login attempts.
[WebUsers_BlockTime] The valid value is 0 to 100000, where 0 means that the user can do as
many login failures without getting blocked. The default is according to
the settings of the 'Deny Authentication Timer' parameter (see
'Configuring Web Session and Access Settings' on page 81).
Note:
To enable this feature, see the 'Deny Access On Fail Count'
parameter in 'Configuring Web Session and Access Settings' on
page 81.
The 'Deny Authentication Timer' parameter relates to failed Web
logins from specific IP addresses.
Note: You can only perform the configuration described in this section if you are a
management user with Security Administrator level or Master level. For more
information, see 'Configuring Management User Accounts' on page 75.
• 'Password Change Interval': Duration (in minutes) of the validity of the Web login
passwords. When the duration expires, the user must change the password in
order to log in again.
• 'User Inactivity Timeout': If the user has not logged into the Web interface within
this duration, the status of the user becomes inactive and the user can no longer
access the Web interface. The user can only log in to the Web interface if its
status is changed (to New or Valid) by a Security Administrator or Master user
(see 'Configuring Management User Accounts' on page 75).
• 'Session Timeout': Duration (in minutes) of inactivity (i.e., no actions are
performed in the Web interface) of a logged-in user, after which the Web session
expires and the user is automatically logged off the Web interface and needs to
log in again to continue the session. You can also configure the functionality per
user in the Local Users table (see 'Configuring Management User Accounts' on
page 75), which overrides this global setting.
3. Under the Security group, configure the following parameters:
Figure 6-34: Configuring Web User Security
• 'Deny Authentication Timer': Interval (in seconds) that the user needs to wait
before logging in from the same IP address after reaching the maximum number
of failed login attempts (see next step).
• 'Deny Access On Fail Count': Number of failed login attempts (e.g., incorrect
username or password) after which the device blocks access to the user for a
user-defined duration (previous step).
4. Click Apply.
For a detailed description of the above parameters, see 'Web Parameters' on page 972.
Note:
• Users with Security Administrator level or Master level can change passwords for
themselves and for other users in the Local Users table (see 'Configuring
Management User Accounts' on page 75).
• You can only change the password if the duration configured in the 'Password
Change Interval' has elapsed (see 'Configuring Web Session and Access Settings'
on page 81).
3. From the 'Secured Web Connection (HTTPS)' drop-down list, select HTTPS Only.
4. To enable two-way authentication whereby both management client and server are
authenticated using X.509 certificates, from the 'Require Client Certificates for HTTPS
connection' drop-down list, select Enable.
5. In the 'HTTPS Cipher String' field, enter the cipher string for HTTPS (in OpenSSL
cipher list format).
6. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
For more information on secure Web-based management including TLS certificates, see
'TLS for Remote Device Management' on page 121.
Note: For specific integration requirements for implementing a third-party smart card
for Web login authentication, contact your AudioCodes representative.
Note:
• Configure the IP address of the computer from which you are currently logged into
the device as the first authorized IP address in the Access List. If you configure
any other IP address, access from your computer will be immediately denied.
• If you configure network firewall rules in the Firewall table (see 'Configuring
Firewall Rules' on page 167), you must configure a firewall rule that permits traffic
from IP addresses configured in the Access List table.
2. In the 'Add an authorized IP address' field, configure an IP address, and then click
Add New Entry; the IP address is added to the table.
Figure 6-37: Web & Telnet Access List Table
If you have configured IP addresses in the Access List and you no longer want to restrict
access to the management interface based on the Access List, delete all the IP addresses
in the table, as described in the following procedure.
Note: When deleting all the IP addresses, make sure that you delete the IP address
of the computer from which you are currently logged into the device, last; otherwise,
access from your computer will be immediately denied.
7 CLI-Based Management
This chapter provides an overview of the CLI-based management and provides
configuration relating to CLI management.
Note:
• By default, CLI is disabled (for security purposes).
• The CLI can only be accessed by management users with the following user
levels:
√ Administrator
√ Security Administrator
√ Master
• For a description of the CLI commands, refer to the CLI Reference Guide.
To enable Telnet:
1. Open the CLI Settings page (Setup menu > Administration tab > Web & CLI folder >
CLI Settings).
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
For a detailed description of the Telnet parameters, see 'Telnet Parameters' on page 976.
To enable SSH and configure RSA public keys for Windows (using PuTTY SSH
software):
1. Start the PuTTY Key Generator program, and then do the following:
a. Under the 'Parameters' group, do the following:
♦ Select the SSH-2 RSA option.
♦ In the 'Number of bits in a generated key' field, enter "1024" bits.
b. Under the 'Actions' group, click Generate and then follow the on-screen
instructions.
c. Under the 'Actions' group, click Save private key to save the new private key to a
file (*.ppk) on your PC.
d. Under the 'Key' group, select the displayed encoded text (pubic key) between
"ssh-rsa" and "rsa-key-….", as shown in the example below:
Figure 7-1: Selecting Public RSA Key in PuTTY
2. You can use the public key per management user or for all management users:
• Per user: Open the Local Users table (see Configuring Management User
Accounts on page 75), and then for the required user, paste the public key that
you copied in Step 1.d into the 'SSH Public Key' field, as shown below:
Figure 7-2: Pasting Public RSA Key per User in Local Users Table
• For all users: Open the CLI Settings page (Setup menu > Administration tab >
Web & CLI folder > CLI Settings), and then paste the public key that you copied
in Step 1.d into the 'Admin Key' field, as shown below:
Figure 7-3: Pasting Public RSA Key in 'Admin Key' Field
Note: Before changing the setting, make sure that not more than the number of
sessions that you want to configure are currently active; otherwise, the new setting
will not take effect.
Note: The CLI login credentials are the same as all the device's other management
interfaces (such as Web interface). The default username and password is "Admin"
and "Admin" (case-sensitive), respectively. To configure login credentials and
management user accounts, see 'Configuring Management User Accounts' on page
75.
Note: The device can display management sessions of up to 24 hours. After this
time, the duration counter is reset.
Note: The session from which the command is run cannot be terminated.
8 SNMP-Based Management
The device provides an embedded SNMP agent that lets you manage it using AudioCodes
One Voice Operations Center (OVOC) or a third-party SNMP manager. The SNMP agent
supports standard and proprietary Management Information Base (MIBs). All supported
MIB files are supplied to customers as part of the release. The SNMP agent can send
unsolicited SNMP trap events to the SNMP manager.
Note:
• By default, SNMP-based management is enabled.
• For more information on the device's SNMP support such as SNMP trap alarms
and events, refer to the SNMP Reference Guide.
• For more information on AudioCodes OVOC, refer to the OVOC User's Manual.
To disable SNMP:
1. Open the SNMP Community Settings page (Setup menu > Administration tab >
SNMP folder > SNMP Community Settings).
2. From the 'Disable SNMP' drop-down list (DisableSNMP parameter), select Yes:
3. Click Apply.
Note:
• SNMP community strings are applicable only to SNMPv1 and SNMPv2c; SNMPv3
uses username-password authentication along with an encryption key (see
'Configuring SNMP V3 Users' on page 98).
• You can enhance security by configuring Trusted Managers (see 'Configuring
SNMP Trusted Managers' on page 97). A Trusted Manager is an IP address from
which the SNMP agent accepts Get and Set requests.
For detailed descriptions of the SNMP parameters, see 'SNMP Parameters' on page 978.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
To delete a community string, delete the configured string, click Apply., and then reset the
device with a save-to-flash for your settings to take effect.
Table 8-1: SNMP Community String Parameter Descriptions
Parameter Description
Parameter Description
Read-Only Community Strings Defines read-only SNMP community strings. Up to five read-
configure system > snmp settings > only community strings can be configured.
ro-community-string The valid value is a string of up to 30 characters that can
[SNMPReadOnlyCommunityString_x] include only the following:
Upper- and lower-case letters (a to z, and A to Z)
Numbers (0 to 9)
Hyphen (-)
Underline (_)
For example, "Public-comm_string1".
The default is "public".
Read-Write Community Strings Defines read-write SNMP community strings. Up to five read-
configure system > snmp settings > write community strings can be configured.
rw-community-string The valid value is a string of up to 30 characters that can
[SNMPReadWriteCommunityString_x] include only the following:
Upper- and lower-case letters (a to z, and A to Z)
Numbers (0 to 9)
Hyphen (-)
Underline (_)
For example, "Private-comm_string1".
The default is "private".
Trap Community String Defines the community string for SNMP traps.
configure system > snmp trap > The valid value is a string of up to 30 characters that can
community-string include only the following:
[SNMPTrapCommunityString] Upper- and lower-case letters (a to z, and A to Z)
Numbers (0 to 9)
Hyphen (-)
Underline (_)
For example, "Trap-comm_string1".
The default is "trapuser".
Note:
• Rows whose corresponding check boxes are cleared revert to default settings
when you click Apply.
• To enable the sending of the trap event,
acPerformanceMonitoringThresholdCrossing, which is sent every time a threshold
(high or low) of a performance monitored SNMP object is crossed, configure the
ini file parameter PM_EnableThresholdAlarms to 1.
• Instead of configuring SNMP trap managers with an IP address in dotted-decimal
notation, you can configure a single SNMP trap manager with an FQDN (see
'Configuring an SNMP Trap Destination with FQDN' on page 97.
Parameter Description
(check box) Enables the SNMP manager to receive traps and checks the
[SNMPManagerIsUsed_x] validity of the configured destination (IP address and port
number).
[0] (check box cleared) = (Default) Disables SNMP
manager
[1] (check box selected) = Enables SNMP manager
IP Address Defines the IP address (in dotted-decimal notation, e.g.,
[SNMPManagerTableIP_x] 108.10.1.255) of the remote host used as the SNMP
manager. The device sends SNMP traps to this IP address.
Trap Port Defines the port number of the remote SNMP manager. The
[SNMPManagerTrapPort_x] device sends SNMP traps to this port.
The valid value range is 100 to 4000. The default is 162.
Trap User Associates a trap user with the trap destination. This
[SNMPManagerTrapUser] determines the trap format, authentication level, and
encryption level.
v2cParams (default) = SNMPv2 user community string
SNMPv3 user configured in 'Configuring SNMP V3
Users' on page 98
Parameter Description
2. Configure an IP address (in dotted-decimal notation) for one or more SNMP Trusted
Managers.
3. Select the check boxes corresponding to the configured SNMP Trusted Managers that
you want to enable.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
3. Click Apply.
Note: If you delete a user that is associated with a trap destination (see 'Configuring
SNMP Trap Destinations with IP Addresses' on page 95), the trap destination
becomes disabled and the trap user reverts to default (i.e., SNMPv2).
Parameter Description
Parameter Description
auth-key or long hex string. Keys are always persisted as long hex strings and
[SNMPUsers_AuthKey] keys are localized.
Privacy Key Privacy key. Keys can be entered in the form of a text password or
priv-key long hex string. Keys are always persisted as long hex strings and
keys are localized.
[SNMPUsers_PrivKey]
Group The group with which the SNMP v3 user is associated.
group [0] Read-Only
[SNMPUsers_Group] [1] Read-Write (default)
[2] Trap
Note: All groups can be used to send traps.
• The first word of the Data line must be the table’s string name followed by the
Index field.
• Columns must be separated by a comma ",".
• A Data line must end with a semicolon ";".
End-of-Table Mark: Indicates the end of the table. The same string used for the
table’s title, preceded by a backslash "\", e.g., [\MY_TABLE_NAME].
The following displays an example of the structure of a table ini file parameter:
[Table_Title]
; This is the title of the table.
FORMAT Index = Column_Name1, Column_Name2, Column_Name3;
; This is the Format line.
Index 0 = value1, value2, value3;
Index 1 = value1, $$, value3;
; These are the Data lines.
[\Table_Title]
; This is the end-of-the-table-mark.
The table ini file parameter formatting rules are listed below:
Indices (in both the Format and the Data lines) must appear in the same order. The
Index field must never be omitted.
The Format line can include a subset of the configurable fields in a table. In this case,
all other fields are assigned with the pre-defined default values for each configured
line.
The order of the fields in the Format line isn’t significant (as opposed to the Index
fields). The fields in the Data lines are interpreted according to the order specified in
the Format line.
The double dollar sign ($$) in a Data line indicates the default value for the parameter.
The order of the Data lines is insignificant.
Data lines must match the Format line, i.e., it must contain exactly the same number
of Indices and Data fields and must be in exactly the same order.
A row in a table is identified by its table name and Index field. Each such row may
appear only once in the ini file.
Table dependencies: Certain tables may depend on other tables. For example, one
table may include a field that specifies an entry in another table. This method is used
to specify additional attributes of an entity, or to specify that a given entity is part of a
larger entity. The tables must appear in the order of their dependency (i.e., if Table X
is referred to by Table Y, Table X must appear in the ini file before Table Y).
The table below displays an example of a table ini file parameter:
[ CodersGroup0 ]
FORMAT CodersGroup0_Index = CodersGroup0_Name, CodersGroup0_pTime,
CodersGroup0_rate, CodersGroup0_PayloadType, CodersGroup0_Sce,
CodersGroup0_CoderSpecific;
CodersGroup0 0 = g711Alaw64k, 20, 0, 255, 0, 0;
CodersGroup0 1 = eg711Ulaw, 10, 0, 71, 0, 0;
[ \CodersGroup0 ]
Note: Do not include read-only parameters in the table ini file parameter as this can
cause an error when attempting to load the file to the device.
Note:
• If you save an ini file from the device and a table row is configured with invalid
values, the ini file displays the row prefixed with an exclamation mark (!), for
example:
!CpMediaRealm 1 = "ITSP", "Voice", "", 60210, 2, 6030, 0, "",
"";
• To restore the device to default settings through the ini file, see 'Restoring Factory
Defaults' on page 833.
Note: Before you load an ini file to the device, make sure that the file extension
name is *.ini.
Note: If you save an ini file from the device to a folder on your PC, an ini file that was
loaded to the device encoded is saved as a regular ini file (i.e., unencoded).
Note:
• The device is shipped with an active, default TLS setup. Configure certificates only
if required.
• Since X.509 certificates have an expiration date and time, you must configure the
device to use Network Time Protocol (NTP) to obtain the current date and time
from an NTP server. Without the correct date and time, client certificates cannot
work. To configure NTP, see 'Configuring Automatic Date and Time using SNTP'
on page 125.
• Only Base64 (PEM) encoded X.509 certificates can be loaded to the device.
Note:
• The default TLS Context cannot be deleted.
• The default TLS Context can be used for SIPS or any other supported application
such as Web (HTTPS), Telnet, and SSH.
• If you configure new TLS Contexts, you can use them only for SIPS.
• If a TLS Context for an existing TLS connection is changed during the call by the
user agent, the device ends the connection.
peer certificate is received (TLS client mode, or TLS server mode with mutual
authentication).
Note:
• The device does not query OCSP for its own certificate.
• Some PKIs do not support OCSP, but generate Certificate Revocation Lists
(CRLs). For such scenarios, set up an OCSP server such as OCSPD.
3. Configure the TLS Context according to the parameters described in the table below.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Table 10-1: TLS Contexts Parameter Descriptions
Parameter Description
General
Parameter Description
For more information on DTLS, see SRTP using DTLS
Protocol on page 215.
Note: The parameter is applicable only to the SBC
application.
Cipher Server Defines the supported cipher suite for the TLS server (in
ciphers-server OpenSSL cipher list format).
[TLSContexts_ServerCipherString] The default is AES:RC4. For valid values, visit the OpenSSL
website at
https://www.openssl.org/docs/man1.0.2/apps/ciphers.html.
Cipher Client Defines the supported cipher suite for TLS clients.
ciphers-client The default is DEFAULT. For possible values and additional
[TLSContexts_ClientCipherString] details, visit the OpenSSL website at
https://www.openssl.org/docs/man1.0.2/apps/ciphers.html.
Strict Certificate Extension Validation Enables the validation of the extensions (keyUsage and
require-strict-cert extentedKeyUsage) of peer certificates. The validation
ensures that the signing CA is authorized to sign certificates
[TLSContexts_RequireStrictCert]
and that the end-entity certificate is authorized to negotiate a
secure TLS connection.
[0] Disable (default)
[1] Enable
DH Key Size Defines the Diffie-Hellman (DH) key size (in bits). DH is an
dh-key-size algorithm used chiefly for exchanging cryptography keys
used in symmetric encryption algorithms such as AES.
[TLSContexts_DHKeySize]
[1024] 1024 (default)
[2048] 2048
OCSP
OCSP Server Enables or disables certificate checking using OCSP.
ocsp-server [0] Disable (default)
[TLSContexts_OcspEnable] [1] Enable
Primary OCSP Server Defines the IP address (in dotted-decimal notation) of the
ocsp-server-primary primary OCSP server.
[TLSContexts_OcspServerPrimary] The default is 0.0.0.0.
Secondary OCSP Server Defines the IP address (in dotted-decimal notation) of the
ocsp-server-secondary secondary OCSP server (optional).
[TLSContexts_OcspServerSecondary] The default is 0.0.0.0.
OCSP Port Defines the OCSP server's TCP port number.
ocsp-port The default port is 2560.
[TLSContexts_OcspServerPort]
OCSP Default Response Determines whether the device allows or rejects peer
ocsp-default-response certificates if it cannot connect to the OCSP server.
[TLSContexts_OcspDefaultResponse] [0] Reject (default)
[1] Allow
Note: For the Subject Name, you can use the IP address of the device instead of a
qualified DNS name. However, it is not recommended since the IP address is subject
to change and may not uniquely identify the device.
a. From the 'Signature Algorithm' drop-down list, select the hash function algorithm
(SHA-1, SHA-256, or SHA-512) with which to sign the certificate.
b. Fill in the rest of the request fields according to your security provider's
instructions.
c. Click the Create CSR button; a textual certificate signing request is displayed in
the area below the button:
Figure 10-1: Certificate Signing Request Group
5. Copy the text and send it to your security provider (CA) to sign this request.
6. When the CA sends you a server certificate, save the certificate to a file (e.g., cert.txt).
Make sure that the file is a plain-text file containing the"‘BEGIN CERTIFICATE"
header, as shown in the example of a Base64-Encoded X.509 Certificate below:
-----BEGIN CERTIFICATE-----
MIIDkzCCAnugAwIBAgIEAgAAADANBgkqhkiG9w0BAQQFADA/MQswCQYDVQQGEw
JGUjETMBEGA1UEChMKQ2VydGlwb3N0ZTEbMBkGA1UEAxMSQ2VydGlwb3N0ZSBT
ZXJ2ZXVyMB4XDTk4MDYyNDA4MDAwMFoXDTE4MDYyNDA4MDAwMFowPzELMAkGA1
UEBhMCRlIxEzARBgNVBAoTCkNlcnRpcG9zdGUxGzAZBgNVBAMTEkNlcnRpcG9z
dGUgU2VydmV1cjCCASEwDQYJKoZIhvcNAQEBBQADggEOADCCAQkCggEAPqd4Mz
iR4spWldGRx8bQrhZkonWnNm`+Yhb7+4Q67ecf1janH7GcN/SXsfx7jJpreWUL
f7v7Cvpr4R7qIJcmdHIntmf7JPM5n6cDBv17uSW63er7NkVnMFHwK1QaGFLMyb
FkzaeGrvFm4k3lRefiXDmuOe+FhJgHYezYHf44LvPRPwhSrzi9+Aq3o8pWDguJ
uZDIUP1F1jMa+LPwvREXfFcUW+w==
-----END CERTIFICATE-----
7. Scroll down to the Upload Certificates Files from your Computer group, click the
Browse button corresponding to the 'Send Device Certificate...' field, navigate to the
cert.txt file, and then click Load File:
Figure 10-2: Loading Device Certificate
8. After the certificate successfully loads to the device, save the configuration with a
device reset.
9. Verify that the private key is correct:
a. Open the TLS Contexts table.
b. Select the required TLS Context index row.
c. Click the Certificate Information link located below the table.
d. Make sure that the 'Private key' field displays "OK"; otherwise (i.e., displays
"Does not match certificate"), consult with your security administrator.
Figure 10-3: Verifying Private Key
Note:
• The certificate replacement process can be repeated whenever necessary (e.g.,
the new certificate expires).
• You can also load the device certificate through the device's Automatic
Provisioning mechanism, using the HTTPSCertFileName ini file parameter.
5. (Optional) In the 'Private key pass-phrase' field, enter the password (passphrase) of
the encrypted private key file. If not encrypted with a passphrase, leave the field blank.
6. Click the Browse button corresponding to the 'Send Private Key file ...' text, navigate
to the private key file (Step 1), and then click Load File.
7. If the security administrator has provided you with a device certificate file, load it using
the Browse button corresponding to the 'Send Device Certificate file ...' text.
8. After the files successfully load to the device, save the configuration with a device
reset.
9. Verify that the private key is correct:
a. Open the TLS Contexts table.
b. Select the required TLS Context index row.
c. Click the Certificate Information link located below the table.
d. Make sure that the 'Private key' field displays "OK"; otherwise (i.e., displays
"Does not match certificate"), consult with your security administrator.
Figure 10-6: Verifying Private Key
4. From the 'Private Key Size' drop-down list, select the desired private key size (in bits)
for RSA public-key encryption for newly self-signed generated keys:
• 512
• 768
• 1024 (default)
• 2048
• 4096
5. (Optional) In the 'Private key pass-phrase' field, enter a password (passphrase) to
encrypt the private key file. If you don't want to encrypt the file, make the field blank.
The default passphrase is "audc". The passphrase can be up to 32 characters..
6. Click Generate Private-Key; a message appears requesting you to confirm key
generation.
7. Click OK to confirm key generation; the device generates a new private key, indicated
by a message in the Certificate Signing Request group:
Figure 10-8: Indication of Newly Generated Private Key
5. Scroll down the page to the Generate New Private Key and Self-signed Certificate
group:
Figure 10-9: Generate new private key and self-signed certificate Group
8. Save the configuration with a device reset for the new certificate to take effect.
chain of certificates per TLS Context, you need to import them into the device's Trusted
Certificates Store
Figure 10-11: Certificate Chain Hierarchy
You can also import multiple TLS root certificates in bulk from a single file. Each certificate
in the file must be Base64 encoded (PEM). When copying-and-pasting the certificates into
the file, each Base64 ASCII encoded certificate string must be enclosed between "-----
BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----".
Note: Only Base64 (PEM) encoded X.509 certificates can be loaded to the device.
4. Click OK; the certificate is loaded to the device and listed in the Trusted Certificates
store.
You can also do the following with certificates that are in the Trusted Certificates store:
Delete certificates: Select the required certificate, click Remove, and then in the
Remove Certificate dialog box, click Remove.
Save certificates to a folder on your PC: Select the required certificate, click Export,
and then in the Export Certificate dialog box, browse to the folder on your PC where
you want to save the file and click Export.
Note: SIP mutual authentication can also be configured globally for all calls, using the
'TLS Mutual Authentication' (SIPSRequireClientCertificate) parameter (see
'Configuring TLS for SIP' on page 172).
setting ensures that you have a method for accessing the device in case the client
certificate doesn't work. Restore the previous setting after testing the configuration.
2. In the TLS Contexts table (see 'Configuring TLS Certificate Contexts' on page 109),
select the required TLS Context row, and then click the Trusted Root Certificates
link located below the table; the Trusted Certificates table appears.
3. Click the Import button, and then select the certificate file.
4. Wait until the import operation finishes successfully.
5. On the Web Settings page, configure the 'Require Client Certificates for HTTPS
connection' parameter to Enable.
6. Reset the device with a save-to-flash for your settings to take effect.
When a user connects to the secured Web interface of the device:
If the user has a client certificate from a CA that is listed in the Trusted Root Certificate
file, the connection is accepted and the user is prompted for the system password.
If both the CA certificate and the client certificate appear in the Trusted Root
Certificate file, the user is not prompted for a password (thus, providing a single-sign-
on experience - the authentication is performed using the X.509 digital signature).
If the user does not have a client certificate from a listed CA or does not have a client
certificate, the connection is rejected.
Note:
• The process of installing a client certificate on your PC is beyond the scope of this
document. For more information, refer to your operating system documentation
and/or consult with your security administrator.
• The root certificate can also be loaded through the device's Automatic
Provisioning mechanism, using the HTTPSRootFileName ini file parameter.
• You can enable the device to check whether a peer's certificate has been revoked
by an OCSP server per TLS Context (see 'Configuring TLS Certificate Contexts'
on page 109).
4. In the 'TLS Expiry Check Start' field, enter the number of days before the installed TLS
server certificate is to expire when the device sends an SNMP trap event to notify of
this.
5. In the 'TLS Expiry Check Period' field, enter the periodical interval (in days) for
checking the TLS server certificate expiry date. By default, the device checks the
certificate every 7 days.
6. Click the Submit TLS Expiry Settings button.
5. Verify that the device has received the correct date and time from the NTP server. The
date and time is displayed in the 'UTC Time' read-only field under the Time Zone
group.
Note: If the device does not receive a response from the NTP server, it polls the NTP
server for 10 minutes. If there is still no response after this duration, the device
declares the NTP server as unavailable and raises an SNMP alarm
(acNTPServerStatusAlarm). The failed response could be due to incorrect
configuration.
To manually configure the device's date and time through the Web interface:
1. Open the Time & Date page (Setup menu > Administration tab > Time & Date), and
then scroll down to the Local Time group:
Figure 11-2: Configuring Manual Date and Time
2. Configure the current date and time of the geographical location in which the device is
installed:
• Date:
♦ 'Year' in yyyy format (e.g., "2015")
♦ 'Month' in mm format (e.g., "3" for March)
♦ 'Day' in dd format (e.g., "27")
• Time:
♦ 'Hours' in 24-hour format (e.g., "4" for 4 am)
♦ 'Minutes' in mm format (e.g., "57")
♦ 'Seconds' in ss format (e.g., "45")
3. Click Apply; the date and time is displayed in the 'UTC Time' read-only field.
Note:
• If the device is configured to obtain date and time from an NTP server, the fields
under the Local Time group are read-only, displaying the date and time received
from the NTP server.
• After performing a hardware reset, the date and time are returned to default values
and thus, you should subsequently update the date and time.
2. In the 'UTC Offset' fields (NTPServerUTCOffset), configure the time offset in relation
to the UTC. For example, if your region is GMT +1 (an hour ahead), enter "1" in the
'Hours' field.
3. Click Apply; the updated time is displayed in the 'UTC Time' read-only field and the
fields under the Local Time group.
2. From the 'Day Light Saving Time' (DayLightSavingTimeEnable) drop-down list, select
Enable.
3. From the 'DST Mode' drop-down list, select the range type for configuring the start and
end dates for DST:
• Day of year: The range is configured by exact date (day number of month), for
example, from March 30 to October 30. If 'DST Mode' is set to Day of year, in the
'Start Time' (DayLightSavingTimeStart) and 'End Time' (DayLightSavingTimeEnd)
drop-down lists, configure the period for which DST is relevant.
• Day of month: The range is configured by month and day type, for example,
from the last Sunday of March to the last Sunday of October. If 'DST Mode' is set
to Day of month, in the 'Day of Month Start' and 'Day of Month End' drop-down
lists, configure the period for which DST is relevant.
4. In the 'Offset' (DayLightSavingTimeOffset) field, configure the DST offset in minutes.
5. If the current date falls within the DST period, verify that it has been successful applied
to the device's current date and time. You can view the device's date and time in the
'UTC Time' read-only field.
12 Network
This section describes network-related configuration.
Note: The below figure is used only as an example; your device may show different
Ethernet Groups and Ethernet ports.
Item # Description
If you click the icon, a drop-down menu appears listing the following commands:
Edit: Opens a dialog box in the IP Interfaces table to modify the IP Interface.
View List: Opens the IP Interfaces table, allowing you to configure IP Interfaces.
Delete: Opens the IP Interfaces table where you are prompted to confirm deletion of
the IP Interface.
To add an IP Interface:
1 Click Add IP Interface; the IP Interfaces table opens with a new dialog box for
adding an IP Interface to the next available index row.
2 Configure the IP Interface as desired, and then click Apply; the IP Interfaces table
closes and you are returned to the Network View, displaying the newly added IP
Interface.
For more information on configuring IP Interfaces, see 'Configuring IP Network Interfaces'
on page 141.
2 Configures and displays Ethernet Devices.
The Ethernet Device appears as an icon, displaying the row index number, name, VLAN
ID and whether its tagged or untagged, as shown in the example below:
If you click the icon, a drop-down menu appears listing the following commands:
Edit: Opens a dialog box in the Ethernet Devices table to modify the Ethernet Device.
View List: Opens the Ethernet Devices table, allowing you to configure all Ethernet
Devices.
Delete: Opens the Ethernet Devices table where you are prompted to confirm deletion
of the Ethernet Device.
To add an Ethernet Device:
1 Click Add VLAN; the Ethernet Devices table opens with a new dialog box for adding
an Ethernet Device to the next available index row.
2 Configure the Ethernet Devices as desired, and then click Apply; the Ethernet Devices
table closes and you are returned to the Network View, displaying the newly added
Item # Description
Ethernet Device.
For more information on configuring Ethernet Devices, see 'Configuring Underlying
Ethernet Devices' on page 138.
3 Configures and displays Ethernet Groups.
The Ethernet Groups appear as icons, displaying the row index number and name, as
shown in the example below:
Ethernet ports associated with Ethernet Groups are indicated by lines connecting between
them, as shown in the example below:
The connectivity status of the port is indicated by the color of the icon:
Green: Network connectivity exists through port (port connected to network).
Red: No network connectivity through port (e.g., cable disconnected).
Item # Description
To refresh the status indication, click the Refresh Network View button (described below
in Item #5).
To open the Physical Ports table, click any port icon, and then from the drop-down menu,
choose View List. You can then view and edit all the ports in the table.
5 If you keep the Network view page open for a long time, you may want to click the Refresh
Network View button to refresh the connectivity status display of the Ethernet ports.
You can also view the mapping of the ports, using the following CLI command:
# show network physical-port
Note:
• All LAN ports have the same MAC address, which is the MAC address of the
device.
• Each Ethernet port must have a unique VLAN ID in scenarios where the ports are
connected to the same switch.
The following procedure describes how to configure Ethernet ports through the Web
interface. You can also configure it through ini file (PhysicalPortsTable) or CLI (configure
network > physical-port).
3. Configure the port according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 12-2: Physical Ports Table Parameter Descriptions
Parameter Description
General
Index (Read-only) Displays the index number for the table row.
Name (Read-only) Displays the Ethernet port number. See the figure
port in the beginning of this section for the mapping between the
GUI port number and the physical port on the chassis.
[PhysicalPortsTable_Port]
Description Defines a description of the port.
port-description By default, the value is "User Port #<row index>".
[PhysicalPortsTable_PortDescription] Note: Each row must be configured with a unique name.
Mode (Read-only) Displays the mode of the port.
mode [0] Disable
[PhysicalPortsTable_Mode] [1] Enable (default)
Speed and Duplex Defines the speed and duplex mode of the port.
speed-duplex [0] 10BaseT Half Duplex
[PhysicalPortsTable_SpeedDuplex] [1] 10BaseT Full Duplex
[2] 100BaseT Half Duplex
[3] 100BaseT Full Duplex
[4] Auto Negotiation (default)
[6] 1000BaseT Half Duplex
[7] 1000BaseT Full Duplex
Ethernet Group
Member of Ethernet Group (Read-only) Displays the Ethernet Group to which the port
group-member belongs.
[PhysicalPortsTable_GroupMember] To assign the port to a different Ethernet Group, see
'Configuring Ethernet Port Groups' on page 136.
Group Status (Read-only) Displays the status of the port:
group-status "Active": Active port. When the Ethernet Group includes
[PhysicalPortsTable_GroupStatus] two ports and their transmit/receive mode is configured to
2RX 1TX or 2RX 2TX, both ports show "Active".
"Redundant": Standby (redundant) port.
Note:
• If you want to assign a port to a different Ethernet Group, you must first remove
the port from its current Ethernet Group. To remove the port, configure the
'Member' field so that no port is selected or select a different port.
• As all ports have the same MAC address, you must connect each port to a
different Layer-2 switch.
• When implementing 1+1 Ethernet port redundancy, each port in the Ethernet
Group (port pair) must be connected to a different switch (but in the same subnet).
3. Configure the Ethernet Group according to the parameters described in the table
below.
4. Click Apply, and then save your settings to flash memory.
Table 12-3: Ethernet Groups Table Parameter Descriptions
Parameter Description
Index (Read-only) Displays the index number for the table row.
Parameter Description
page 729.
Member 1 Assigns the first port to the Ethernet Group. To assign no port, set this
member1 field to None.
[EtherGroupTable_Member1] Note: Before you can re-assign a port to a different Ethernet Group,
you must first remove the port from its current Ethernet Group. To
remove the port, either set this field to None or to a different port.
Member 2 Assigns the second port to the Ethernet Group. To assign no port, set
member2 this field to None.
[EtherGroupTable_Member2] Note: Before you can re-assign a port to a different Ethernet Group,
you must first remove the port from its current Ethernet Group. To
remove the port, either set this field to None or to a different port.
Note: You cannot delete an Ethernet Device that is associated with an IP network
interface (in the IP Interfaces table). You can only delete it once you have
disassociated it from the IP network interface.
The following procedure describes how to configure Ethernet Devices through the Web
interface. You can also configure it through ini file (DeviceTable) or CLI (configure network
> network-dev).
Parameter Description
Parameter Description
untagged (i.e., removes the VLAN ID).
[1] Tagged = (Default for new Ethernet Devices) The Ethernet
Device accepts packets that have the same VLAN ID as the
Ethernet Device and sends packets with this VLAN ID. For all
Ethernet Devices that are associated with the same Ethernet
Group (see 'Underlying Interface' parameter above) and
configured to Tagged, incoming untagged packets received
on this Ethernet Group are discarded.
Note: Only one Ethernet Device can be configured as Untagged
per associated Ethernet Group. In other words, if multiple
Ethernet Devices are associated with the same Ethernet Group,
only one of these Ethernet Devices can be configured to
Untagged; all the others must be configured to Tagged.
MTU Defines the Maximum Transmission Unit (MTU) in bytes per
mtu VLAN (Ethernet Device).
[DeviceTable_MTU] The valid value is 68 to1,500. The default is 1,500.
Note:
MTU is not applicable to SBC Direct Media traffic and to
debug recording traffic.
If your first Ethernet Device is configured with an untagged
VLAN, its MTU value is the maximum MTU that can be
configured for all other Ethernet Devices that are associated
with the same Ethernet Group. In other words, if you
configure additional Ethernet Devices (tagged VLANs) that
are associated with the same Ethernet Group, their MTUs
must be equal to or less than the MTU of the first Ethernet
Device (untagged VLAN). For example, if the untagged VLAN
is configured with MTU of 100 bytes, you can configure a
tagged VLAN with an MTU value of either 100 bytes or less.
If your first Ethernet Device is configured with a tagged VLAN
and you later configure an additional Ethernet Device with an
untagged VLAN that is associated with the same Ethernet
Group, the MTU of the untagged VLAN must be equal to or
greater than the highest MTU value configured out of all the
Ethernet Devices (VLANs) associated with the Ethernet
Group. For example, if VLAN 1 is configured with the highest
MTU (100 bytes) out of all your VLANs, you can configure an
untagged VLAN with an MTU value of either 100 bytes or
greater.
The device is shipped with a default OAMP interface (see 'Default OAMP IP Address' on
page 41). The IP Interfaces table lets you change this OAMP interface and configure
additional network interfaces for control and media, if necessary. You can configure up to
12 interfaces, consisting of up to 11 Control and Media interfaces including a Maintenance
interface if your device is deployed in a High Availability (HA) mode, and 1 OAMP interface.
Each IP interface is configured with the following:
Application type allowed on the interface:
• Control: call control signaling traffic (i.e., SIP)
• Media: RTP traffic
• Operations, Administration, Maintenance and Provisioning (OAMP): management
(i.e., Web, CLI, and SNMP based management)
• Maintenance: This interface is used in HA mode when two devices are deployed
for redundancy, and represents one of the LAN interfaces or Ethernet Groups on
each device used for the Ethernet connectivity between the two devices. For
more information on HA and the Maintenance interface, see Configuring High
Availability on page 723.
IP address (IPv4 or IPv6) and subnet mask (prefix length)
To configure Quality of Service (QoS), see 'Configuring the QoS Settings' on page
159.
Default Gateway: Traffic from this interface destined to a subnet that does not meet
any of the routing rules (local or static) are forwarded to this gateway
(Optional) Primary and secondary domain name server (DNS) addresses for resolving
FQDNs into IP addresses.
Ethernet Device: Layer-2 bridging device and assigned a VLAN ID. As the Ethernet
Device is associated with an Ethernet Group, this is useful for setting trusted and un-
trusted networks on different physical Ethernet ports. Multiple entries in the IP
Interfaces table may be associated with the same Ethernet Device, providing multi-
homing IP configuration (i.e., multiple IP addresses on the same interface/VLAN).
Complementing the IP Interfaces table is the Static Routes table, which lets you configure
static routing rules for non-local hosts/subnets. For more information, see 'Configuring
Static IP Routing' on page 148.
The following procedure describes how to configure IP network interfaces through the Web
interface. You can also configure it through ini file (InterfaceTable) or CLI (configure
network > interface network-if).
3. Configure the IP network interface according to the parameters described in the table
below.
4. Click Apply.
Note:
• If you modify the OAMP interface's address, after clicking Apply you will lose
connectivity with the device and need to access the device with the new address.
• If you edit or delete an IP interface, current calls using the interface are
immediately terminated.
• If you delete an IP interface, row indices of other tables (e.g., Media Realms table)
that are associated with the deleted IP interface, lose their association with the
interface ('Interface Name' field displays "None") and the row indices become
invalid.
• When editing or deleting the Maintenance interface for HA mode, you must reset
the device for your changes to take effect.
To view configured IP network interfaces that are currently active, click the IP Interface
Status Table link located at the bottom of the table. For more information, see 'Viewing
Active IP Interfaces' on page 875.
Table 12-5: IP Interfaces Table Parameters Description
Parameter Description
General
Index Defines an index number for the new table row.
network-if Note: Each row must be configured with a unique index.
[InterfaceTable_Index]
Name Defines a name for the interface.
name The valid value is a string of up to 16 characters. The default for a
[InterfaceTable_InterfaceName] new interface is "Unknown". The name of the default OAMP
interface is "O+M+C".
Note: Each row must be configured with a unique name.
Application Type Defines the applications allowed on the IP interface.
application-type [0] OAMP = Operations, Administration, Maintenance and
[InterfaceTable_ApplicationTypes Provisioning (OAMP) applications (e.g., Web, Telnet, SSH,
] and SNMP).
[1] Media = Media (i.e., RTP streams of voice).
[2] Control = Call Control applications (e.g., SIP).
[3] OAMP + Media = OAMP and Media applications.
[4] OAMP + Control = OAMP and Call Control applications.
[5] Media + Control = Media and Call Control applications.
[6] OAMP + Media + Control = All application types are
allowed on the interface.
[99] MAINTENANCE = Only the Maintenance application for
HA is allowed on this interface.
Note: Only one IP network interface can be configured with
OAMP in this table. To configure additional management
interfaces, see Configuring Additional Management Interfaces on
page 74.
Ethernet Device Assigns an Ethernet Device to the IP interface. An Ethernet
Device is a VLAN associated with a physical Ethernet port
Parameter Description
underlying-dev (Ethernet Group). To configure Ethernet Devices, see Configuring
[InterfaceTable_UnderlyingDevic Underlying Ethernet Devices on page 138.
e] By default, no value is defined.
Note: The parameter is mandatory.
IP Address
Interface Mode Defines the method that the interface uses to acquire its IP
mode address.
[InterfaceTable_InterfaceMode] [3] IPv6 Manual Prefix = IPv6 manual prefix IP address
assignment. The IPv6 prefix (higher 64 bits) is set manually
while the interface ID (the lower 64 bits) is derived from the
device's MAC address.
[4] IPv6 Manual = IPv6 manual IP address (128 bits)
assignment.
[10] IPv4 Manual = (Default) IPv4 manual IP address (32 bits)
assignment.
IP Address Defines the IPv4/IPv6 address in dotted-decimal notation.
ip-address By default, no value is defined.
[InterfaceTable_IPAddress] Note: The parameter is mandatory.
Prefix Length Defines the prefix length of the related IP address. This is a
prefix-length Classless Inter-Domain Routing (CIDR)-style representation of a
dotted-decimal subnet notation. The CIDR-style representation
[InterfaceTable_PrefixLength]
uses a suffix indicating the number of bits which are set in the
dotted-decimal format. For example, 192.168.0.0/16 is
synonymous with 192.168.0.0 and subnet 255.255.0.0. This
CIDR lists the number of ‘1’ bits in the subnet mask (i.e., replaces
the standard dotted-decimal representation of the subnet mask
for IPv4 interfaces). For example, a subnet mask of 255.0.0.0 is
represented by a prefix length of 8 (i.e., 11111111 00000000
00000000 00000000) and a subnet mask of 255.255.255.252 is
represented by a prefix length of 30 (i.e., 11111111 11111111
11111111 11111100).
The prefix length is a Classless Inter-Domain Routing (CIDR)
style presentation of a dotted-decimal subnet notation. The CIDR-
style presentation is the latest method for interpretation of IP
addresses. Specifically, instead of using eight-bit address blocks,
it uses the variable-length subnet masking technique to allow
allocation on arbitrary-length prefixes.
The prefix length for IPv4 must be set to a value from 0 to 30. The
prefix length for IPv6 must be set to a value from 0 to 64.
The default is 16.
Default Gateway Defines the IP address of the default gateway for the IP interface.
gateway When traffic is sent from this interface to an unknown destination
(i.e., not in the same subnet and not defined for any static routing
[InterfaceTable_Gateway]
rule), it is forwarded to this default gateway.
By default, no value is defined.
DNS
Parameter Description
Primary DNS Defines the primary DNS server's IP address (in dotted-decimal
primary-dns notation), which is used for translating domain names into IP
addresses for the interface.
[InterfaceTable_PrimaryDNSServ
erIPAddress] By default, no IP address is defined.
Secondary DNS Defines the secondary DNS server's IP address (in dotted-
secondary-dns decimal notation), which is used for translating domain names
into IP addresses for the interface.
[InterfaceTable_SecondaryDNSS
erverIPAddress] By default, no IP address is defined.
For IPv4 addresses, the 'Interface Mode' column must be set to IPv4 Manual. For IPv6
addresses, this column must be set to IPv6 Manual or IPv6 Manual Prefix.
Note: Upon device start up, the IP Interfaces table is parsed and passes
comprehensive validation tests. If any errors occur during this validation phase, the
device sends an error message to the Syslog server and falls back to a "safe mode",
using a single interface without VLANs. Ensure that you view the Syslog messages
that the device sends in system startup to see if any errors occurred.
2. Static Routes table: Two routes are configured for directing traffic for subnet
201.201.0.0/16 to 192.168.11.10, and all traffic for subnet 202.202.0.0/16 to
192.168.11.1:
Table 12-7: Example of Static Routes Table
201.201.0.0 16 192.168.11.10
202.202.0.0 16 192.168.11.1
2. Static Routes table: A routing rule is required to allow remote management from a
host in 176.85.49.0 / 24:
Table 12-9: Example Static Routes Table
176.85.49.0 24 192.168.11.1
3. All other parameters are set to their respective default values. The NTP application
remains with its default application types.
Prefix Etherne
Inde Applicatio Interfac Default
IP Address Lengt t Name
x n Type e Mode Gateway
h Device
2. Static Routes table: A routing rule is required to allow remote management from a
host in 176.85.49.0/24:
Table 12-11: Example of Static Routes Table
176.85.49.0 24 192.168.0.10
3. The NTP application is configured (through the ini file) to serve as OAMP applications:
EnableNTPasOAM = 1
4. DiffServ table:
• Layer-2 QoS values are assigned:
♦ For packets sent with DiffServ value of 46, set VLAN priority to 6
♦ For packets sent with DiffServ value of 40, set VLAN priority to 6
♦ For packets sent with DiffServ value of 26, set VLAN priority to 4
♦ For packets sent with DiffServ value of 10, set VLAN priority to 2
• Layer-3 QoS values are assigned:
♦ For Media Service class, the default DiffServ value is set to 46
♦ For Control Service class, the default DiffServ value is set to 40
♦ For Gold Service class, the default DiffServ value is set to 26
♦ For Bronze Service class, the default DiffServ value is set to 10
IPv4
0 OAMP 192.168.0.2 16 192.168.0.1 100 Mgmt
Manual
Media & IPv4
1 200.200.85.14 24 200.200.85.1 200 CntrlMedia
Control Manual
A separate Static Routes table lets you configure static routing rules. Configuring the
following static routing rules enables OAMP applications to access peers on subnet
17.17.0.0 through the gateway 192.168.10.1 (which is not the default gateway of the
interface), and Media & Control applications to access peers on subnet 171.79.39.0
through the gateway 200.200.85.10 (which is not the default gateway of the interface).
Table 12-13: Separate Static Routes Table Example
entry that matches the requested destination host/network. If an entry is found, the device
sends the packet to the gateway that is configured for the static route. If no explicit entry is
found, the packet is sent to the Default Gateway as configured for the IP interface in the IP
Interfaces table.
You can view the status of configured static routes in the IP Routing Status table. This
table can be accessed by clicking the Static Routes Status Table link located at the
bottom of the Static Routes table (see 'Viewing Static Routes Status' on page 876).
The following procedure describes how to configure static routes through the Web
interface. You can also configure it through ini file (StaticRouteTable) or CLI (configure
network > static).
3. Configure a static route according to the parameters described in the table below. The
address of the host/network you want to reach is determined by an AND operation that
is applied to the fields 'Destination' and 'Prefix Length'. For example, to reach network
10.8.x.x, enter "10.8.0.0" in the 'Destination' field and "16" in the 'Prefix Length'. As a
result of the AND operation, the value of the last two octets in the 'Destination' field
are ignored. To reach a specific host, enter its IP address in the 'Destination' field and
"32" in the 'Prefix Length' field.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Note: Only static routing rules that are inactive can be deleted.
Parameter Description
Parameter Description
[StaticRouteTable_Index] The valid value is 0 to 29.
Note: Each row must be configured with a unique index.
Description Defines a name for the rule.
description The valid value is a string of up to 20 characters.
[StaticRouteTable_Description]
Destination Defines the IP address of the destination host/network. The
destination destination can be a single host or a whole subnet, depending on
the prefix length configured for this routing rule.
[StaticRouteTable_Destination]
Prefix Length Defines the Classless Inter-Domain Routing (CIDR)-style
prefix-length representation of a dotted-decimal subnet notation of the
destination host/network. The CIDR-style representation uses a
[StaticRouteTable_PrefixLength]
suffix indicating the number of bits that are set in the dotted-
decimal format. For example, the value 16 represents subnet
255.255.0.0. The value must be 0 to 31 for IPv4 interfaces and a
value of 0 to 64 for IPv6 interfaces.
Ethernet Output Name Associates an IP network interface through which the static route's
device-name Gateway is reached. The association is done by assigning the
parameter the same Ethernet Device that is assigned to the IP
[StaticRouteTable_DeviceName]
network interface in the IP Interfaces table ('Ethernet Device'
parameter). To configure IP network interface, see Configuring IP
Network Interfaces on page 141. To configure Ethernet Devices,
see Configuring Underlying Ethernet Devices on page 138.
Gateway Defines the IP address of the Gateway (next hop) used for traffic
gateway destined to the subnet/host defined in the 'Destination' / 'Prefix
Length' field.
[StaticRouteTable_Gateway]
Note:
The Gateway's address must be in the same subnet as the IP
address of the network interface that is associated with the
static route (using the 'Device Name' parameter - see above).
The IP network interface associated with the static route must
be of the same IP address family (IPv4 or IPv6).
The static route's Gateway address in the Static Routes table is in the same subnet as
the IP address of the IP network interface in the IP Interfaces table.
Figure 12-4: Example of using a Static Route
The figure below illustrates the NAT problem faced by SIP networks when the device is
located behind a NAT:
Figure 12-5: Device behind NAT and NAT Issues
The following procedure describes how to configure NAT translation rules through the Web
interface. You can also configure it through ini file (NATTranslation) or CLI (configure
network > nat-translation).
3. Configure a NAT translation rule according to the parameters described in the table
below.
4. Click Apply, and then save your settings to flash memory.
Table 12-15: NAT Translation Table Parameter Descriptions
Parameter Description
Source
Index Defines an index number for the new table row.
index Note: Each row must be configured with a unique index.
[NATTranslation_Index]
Source Interface Assigns an IP network interface (configured in the IP
src-interface-name Interfaces table) to the rule. Outgoing packets sent from the
specified network interface are NAT'ed.
[NATTranslation_SrcIPInterfaceName]
By default, no value is defined.
To configure IP network interfaces, see 'Configuring IP
Network Interfaces' on page 141.
Source Start Port Defines the optional starting port range (0-65535) of the IP
src-start-port interface, used as matching criteria for the NAT rule. If not
configured, the match is done on the entire port range. Only
[NATTranslation_SourceStartPort]
IP addresses and ports of matched source ports will be
replaced.
Source End Port Defines the optional ending port range (0-65535) of the IP
src-end-port interface, used as matching criteria for the NAT rule. If not
configured, the match is done on the entire port range. Only
[NATTranslation_SourceEndPort]
IP addresses and ports of matched source ports will be
replaced.
Target
Target IP Address Defines the global (public) IP address. The device adds the
target-ip-address address in the outgoing packet to the SIP Via header,
Contact header, 'o=' SDP field, and 'c=' SDP field.
[NATTranslation_TargetIPAddress]
Target Start Port Defines the optional starting port range (0-65535) of the
target-start-port global address. If not configured, the ports are not replaced.
Matching source ports are replaced with the target ports.
[NATTranslation_TargetStartPort]
This address is set in the SIP Via and Contact headers and
in the 'o=' and 'c=' SDP fields.
Parameter Description
Target End Port Defines the optional ending port range (0-65535) of the
target-end-port global address. If not configured, the ports are not replaced.
Matching source ports are replaced with the target ports.
[NATTranslation_TargetEndPort]
This address is set in the SIP Via and Contact headers and
in the 'o=' and 'c=' SDP fields.
3. Click Apply.
You can configure the device's NAT feature to operate in one of the following modes:
[0] Enable NAT Only if Necessary: NAT traversal is performed only if the UA is located
behind NAT:
• UA behind NAT: The device sends the media packets to the IP address:port
obtained from the source address of the first media packet received from the UA.
• UA not behind NAT: The device sends the packets to the IP address:port
specified in the SDP 'c=' line (Connection) of the first received SIP message.
Note: If the SIP session is established (ACK) and the device (not the UA) sends the
first packet, it sends it to the address obtained from the SIP message and only after
the device receives the first packet from the UA does it determine whether the UA is
behind NAT.
[1] Disable NAT: (Default) The device considers the UA as not located behind NAT
and sends media packets to the UA using the IP address:port specified in the SDP 'c='
line (Connection) of the first received SIP message.
[2] Force NAT: The device always considers the UA as behind NAT and sends the
media packets to the IP address:port obtained from the source address of the first
media packet received from the UA. The device only sends packets to the UA after it
receives the first packet from the UA (to obtain the IP address).
[3] NAT by Signaling = The device identifies whether or not the UA is located behind
NAT based on the SIP signaling. The device assumes that if signaling is behind NAT
that the media is also behind NAT, and vice versa. If located behind NAT, the device
sends media as described in option [2] Force NAT; if not behind NAT, the device
sends media as described in option [1] Disable NAT. This option is applicable only to
SBC calls. If the parameter is configured to this option, Gateway calls use option [0]
Enable NAT Option, by default.
2. Click Apply.
Note:
• The No-OP Packet feature requires DSP resources.
• Receipt of No-Op packets is always supported.
3. Configure DiffServ values per CoS according to the parameters described in the table
below.
4. Click Apply, and then save your settings to flash memory.
Table 12-17: QoS Settings Parameter Descriptions
Parameter Description
Media Premium QoS Defines the DiffServ value for Premium Media CoS content.
media-qos The valid range is 0 to 63. The default is 46.
[PremiumServiceClassMediaDiffServ] Note: You can also configure the the parameter per IP
Profile (IpProfile_IPDiffServ) or Tel Profile
(TelProfile_IPDiffServ).
Control Premium QoS Defines the DiffServ value for Premium Control CoS content
control-qos (Call Control applications).
[PremiumServiceClassControlDiffServ] The valid range is 0 to 63. The default is 40.
Note: You can also configure the the parameter per IP
Profile (IpProfile_SigIPDiffServ) or Tel Profile
(TelProfile_SigIPDiffServ).
Gold QoS Defines the DiffServ value for Gold CoS content (streaming
gold-qos applications).
[GoldServiceClassDiffServ] The valid range is 0 to 63. The default is 26.
Bronze QoS Defines the DiffServ value for Bronze CoS content (OAMP
bronze-qos applications).
[BronzeServiceClassDiffServ] The valid range is 0 to 63. The default is 10.
By prioritizing packets, DiffServ routers can minimize transmission delays for time-sensitive
packets such as VoIP packets.
The following procedure describes how to configure DiffServ-to-VLAN priority mapping
through the Web interface. You can also configure it through ini file (DiffServToVlanPriority)
or CLI (configure network > qos vlan-mapping).
Parameter Description
following:
• Address unreachable
• Port unreachable
This feature is applicable to IPv4 and IPv6 addressing schemes.
The following procedure describes how to configure ICMP messaging through the Web
interface. You can also configure it through ini file - DisableICMPUnreachable (ICMP
Unreachable messages) and DisableICMPRedirects (ICMP Redirect messages).
12.11 DNS
You can use the device's embedded domain name server (DNS) or an external, third-party
DNS to translate domain names into IP addresses. This is useful if domain names are used
as the destination in call routing. The device supports the configuration of the following
DNS types:
Internal DNS table - see 'Configuring the Internal DNS Table' on page 163
Internal SRV table - see 'Configuring the Internal SRV Table' on page 164
Note: The device first attempts to resolve a domain name using the table. If the
domain name is not configured in the table, the device performs a DNS resolution
using an external DNS server for the related IP network interface (see 'Configuring IP
Network Interfaces' on page 141).
The following procedure describes how to configure the DNS table through the Web
interface. You can also configure it through ini file (DNS2IP) or CLI (configure network >
dns dns-to-ip).
3. Configure a DNS rule according to the parameters described in the table below.
4. Click Apply.
Table 12-19: Internal DNS Table Parameter Description
Parameter Description
Note: The device first attempts to resolve a domain name using the table. If the
domain is not configured in the table, the device performs a Service Record (SRV)
resolution using an external DNS server, configured in the IP Interfaces table (see
'Configuring IP Network Interfaces' on page 141).
The following procedure describes how to configure the Internal SRV table through the
Web interface. You can also configure it through ini file (SRV2IP) or CLI (configure network
> dns srv2ip).
3. Configure an SRV rule according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 12-20: Internal SRV Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
Note: Each row must be configured with a unique index.
Domain Name Defines the host name to be translated.
domain-name The valid value is a string of up to 31 characters. By default, no
[Srv2Ip_InternalDomain] value is defined.
Parameter Description
[Srv2Ip_TransportType] [1] TCP
[2] TLS
1st/2nd/3rd Entry
DNS Name (1-3) Defines the first, second or third DNS A-Record to which the host
dns-name-1|2|3 name is translated.
[Srv2Ip_Dns1/2/3] By default, no value is defined.
Priority (1-3) Defines the priority of the target host. A lower value means that it is
priority-1|2|3 more preferred.
[Srv2Ip_Priority1/2/3] By default, no value is defined.
Weight (1-3) Defines a relative weight for records with the same priority.
weight-1|2|3 By default, no value is defined.
[Srv2Ip_Weight1/2/3]
Port (1-3) Defines the TCP or UDP port on which the service is to be found.
port-1|2|3 By default, no value is defined.
[Srv2Ip_Port1/2/3]
13 Security
This section describes the VoIP security-related configuration.
Note:
• The rules configured by the Firewall table apply to a very low-level network layer
and overrides all other security-related configuration. Thus, if you have configured
higher-level security features (e.g., on the Application level), you must also
configure firewall rules to permit this necessary traffic. For example, if you have
configured IP addresses to access the device's Web and Telnet management
interfaces in the Access List table (see 'Configuring Web and Telnet Access List'
on page 85), you must configure a firewall rule that permits traffic from these IP
addresses.
• Only users with Security Administrator or Master access levels can configure
firewall rules.
• The device supports dynamic firewall pinholes for media (RTP/RTCP) traffic
negotiated in the SDP offer-answer of SIP calls. The pinhole allows the device to
ignore its firewall and accept the traffic on the negotiated port. The device
automatically closes the pinhole once the call terminates. Therefore, it is
unnecessary to configure specific firewall rules to allow traffic through specific
ports. For example, if you have configured a firewall rule to block all media traffic
in the port range 6000 to 7000 and a call is negotiated to use the local port 6010,
the device automatically opens port 6010 to allow the call.
• Setting the 'Prefix Length' field to 0 means that the rule applies to all packets,
regardless of the defined IP address in the 'Source IP' field. Thus, it is highly
recommended to set the parameter to a value other than 0.
• It is recommended to add a rule at the end of your table that blocks all traffic and
to add firewall rules above it that allow required traffic (with bandwidth limitations).
To block all traffic, use the following firewall rule:
√ Source IP: 0.0.0.0
√ Prefix Length: 0 (i.e., rule matches all IP addresses)
√ Start Port - End Port: 0-65535
√ Protocol: Any
√ Action Upon Match: Block
• If you are using the High Availability feature and you have configured "block" rules,
ensure that you also add "allow" rules for HA traffic. For more information, see
Configuring Firewall Allowed Rules on page 736.
The following procedure describes how to configure firewall rules through the Web
interface. You can also configure it through ini file (AccessList) or CLI (configure network >
access-list).
3. Configure a firewall rule according to the parameters described in the table below.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Table 13-1: Firewall Table Parameter Descriptions
Parameter Description
Match
Index Defines an index number for the new table row.
Note: Each row must be configured with a unique index.
Source IP Defines the IP address (or DNS name) or a specific host name
of the source network from where the device receives the
source-ip incoming packet.
[AccessList_Source_IP] The default is 0.0.0.0.
Source Port Defines the source UDP/TCP ports of the remote host from
src-port where the device receives the incoming packet.
[AccessList_Source_Port] The valid range is 0 to 65535. The default is 0.
Note: When set to 0, this field is ignored and any source port
matches the rule.
Prefix Length (Mandatory) Defines the IP network mask - 32 for a single
prefixLen host or the appropriate value for the source IP addresses.
[AccessList_PrefixLen] A value of 8 corresponds to IPv4 subnet class A (network
mask of 255.0.0.0).
A value of 16 corresponds to IPv4 subnet class B (network
mask of 255.255.0.0).
A value of 24 corresponds to IPv4 subnet class C (network
mask of 255.255.255.0).
The IP address of the sender of the incoming packet is
trimmed in accordance with the prefix length (in bits) and then
compared to the parameter ‘Source IP’.
The default is 0 (i.e., applies to all packets). You must change
this value to any of the above options.
Parameter Description
Note: A value of 0 applies to all packets, regardless of the
defined IP address. Therefore, you must set the parameter to a
value other than 0.
Start Port Defines the first UDP/TCP port in the range of ports on the
start-port device on which the incoming packet is received. From the
perspective of the remote IP entity, this is the destination port.
[AccessList_Start_Port]
To configure the last port in the range, see the 'End Port'
parameter (below).
The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire
range must be provided.
End Port Defines the last UDP/TCP port in the range of ports on the
end-port device on which the incoming packet is received. From the
perspective of the remote IP entity, this is the destination port.
[AccessList_End_Port]
To configure the first port in the range, see the 'Start Port'
parameter (above).
The valid range is 0 to 65535 (default).
Note: When the protocol type isn't TCP or UDP, the entire
range must be provided.
Protocol Defines the protocol type (e.g., UDP, TCP, ICMP, ESP or Any)
protocol or the IANA protocol number in the range of 0 (Any) to 255.
The default is Any.
[AccessList_Protocol]
Note: The parameter also accepts the abbreviated strings
"SIP" and "HTTP". Specifying these strings implies selection of
the TCP or UDP protocols and the appropriate port numbers
as defined on the device.
Use Specific Interface Determines whether you want to apply the rule to a specific
use-specific-interface network interface defined in the IP Interfaces table (i.e.,
packets received from that defined in the Source IP field and
[AccessList_Use_Specific_Interface]
received on this network interface):
[0] Disable (default)
[1] Enable
Note:
If enabled, then in the 'Interface Name' field (described
below), select the interface to which the rule is applied.
If disabled, then the rule applies to all interfaces.
Interface Name Defines the network interface to which you want to apply the
network-interface-name rule. This is applicable if you enabled the 'Use Specific
Interface' field. The list displays interface names as defined in
[AccessList_Interface_x]
the IP Interfaces table in 'Configuring IP Network Interfaces' on
page 141.
Action
Action Upon Match Defines the firewall action to be performed upon rule match.
allow-type "Allow" = (Default) Permits the packets.
[AccessList_Allow_Type] "Block" = Rejects the packets
Parameter Description
[AccessList_Packet_Size] Note: When filtering fragmented IP packets, this field relates to
the overall (re-assembled) packet size, and not to the size of
each fragment.
Byte Rate Defines the expected traffic rate (bytes per second), i.e., the
byte-rate allowed bandwidth for the specified protocol. In addition to this
field, the 'Burst Bytes' field provides additional allowance such
[AccessList_Byte_Rate]
that momentary bursts of data may utilize more than the
defined byte rate, without being interrupted.
For example, if 'Byte Rate' is set to 40000 and 'Burst Bytes' to
50000, then this implies the following: the allowed bandwidth is
40000 bytes/sec with extra allowance of 50000 bytes; if, for
example, the actual traffic rate is 45000 bytes/sec, then this
allowance would be consumed within 10 seconds, after which
all traffic exceeding the allocated 40000 bytes/sec is dropped.
If the actual traffic rate then slowed to 30000 bytes/sec, then
the allowance would be replenished within 5 seconds.
Burst Bytes Defines the tolerance of traffic rate limit (number of bytes).
byte-burst The default is 0.
[AccessList_Byte_Burst]
Statistics
Firewall Rule
Parameter
1 2 3 4 5
Source IP 12.194.231.76 12.194.230.7 0.0.0.0 192.0.0.0 0.0.0.0
Prefix Length 16 16 0 8 0
Start Port and End
0-65535 0-65535 0-65535 0-65535 0-65535
Port
Protocol Any Any icmp Any Any
Use Specific
Enable Enable Disable Enable Disable
Interface
Interface Name WAN WAN None Voice-Lan None
Byte Rate 0 0 40000 40000 0
Burst Bytes 0 0 50000 50000 0
Action Upon Match Allow Allow Allow Allow Block
addresses (e.g., proxy servers). Note that the prefix length is configured.
Rule 3: A more "advanced” firewall rule - bandwidth rule for ICMP, which allows a
maximum bandwidth of 40,000 bytes/sec with an additional allowance of 50,000 bytes.
If, for example, the actual traffic rate is 45,000 bytes/sec, then this allowance would be
consumed within 10 seconds, after which all traffic exceeding the allocated 40,000
bytes/sec is dropped. If the actual traffic rate then slowed to 30,000 bytes/sec, the
allowance would be replenished within 5 seconds.
Rule 4: Allows traffic from the LAN voice interface and limits bandwidth.
Rule 5: Blocks all other traffic.
Note: When a TLS connection with the device is initiated by a SIP client, the device
also responds using TLS, regardless of whether or not TLS was configured.
To configure SIPS:
1. Configure a TLS Context as required (see 'Configuring TLS Certificate Contexts' on
page 109).
2. Assign the TLS Context to a Proxy Set or SIP Interface (see 'Configuring Proxy Sets'
on page 375 and 'Configuring SIP Interfaces' on page 351, respectively).
3. Configure a SIP Interface with a TLS port number.
4. Configure various SIPS parameters in the Security Settings page (Setup menu > IP
Network tab > Security folder > Security Settings).
For a description of the TLS parameters, see 'TLS Parameters' on page 1014.
5. By default, the device initiates a TLS connection only for the next network hop. To
enable TLS all the way to the destination (over multiple hops), configure the 'Enable
SIPS' (EnableSIPS) parameter to Enable on the Transport Settings page (Setup
menu > Signaling & Media tab > SIP Definitions folder > Transport Settings):
Figure 13-2: Enabling SIPS
To enable IDS:
1. Open the IDS General Settings page (Setup menu > Signaling & Media tab >
Intrusion Detection folder >IDS General Settings).
Figure 13-3: Enabling IDS
Note: A maximum of 100 IDS rules can be configured (regardless of how many rules
are assigned to each policy).
The device provides the following pre-configured IDS Policies that can be used in your
deployment (if they meet your requirements):
"DEFAULT_FEU": IDS Policy for far-end users in the WAN
"DEFAULT_PROXY": IDS Policy for proxy server
"DEFAULT_GLOBAL": IDS Policy with global thresholds
Note: The default IDS Policies are read-only and cannot be modified.
The following procedure describes how to configure IDS Policies through the Web
interface. You can also configure it through ini file or CLI:
IDS Policy table: IDSPolicy (ini file) or configure voip > ids policy (CLI)
IDS Rules table: IDSRule (ini file) or configure voip > ids rule (CLI)
3. Configure an IDS Policy name according to the parameters described in the table
below.
4. Click Apply.
Table 13-3: IDS Policies Table Parameter Descriptions
Parameter Description
5. In the IDS Policies table, select the required IDS Policy row, and then click the IDS
Rule link located below the table; the IDS Rule table opens.
Parameter Description
General
Index Defines an index number for the new table record.
rule-id
[IDSRule_RuleID]
Reason Defines the type of intrusion attack (malicious event).
reason [0] Any = All events listed below are considered as attacks
[IDSRule_Reason] and are counted together.
[1] Connection abuse = (Default) TLS authentication failure.
[2] Malformed message =
Message exceeds a user-defined maximum message
length (50K)
Any SIP parser error
Message Policy match (see 'Configuring SIP Message
Policy Rules')
Basic headers not present
Content length header not present (for TCP)
Header overflow
[3] Authentication failure =
Local authentication ("Bad digest" errors)
Remote authentication (SIP 401/407 is sent if original
Parameter Description
message includes authentication)
[4] Dialog establish failure =
Classification failure (see 'Configuring Classification Rules'
on page 627). This also applies to calls rejected by the
device based on a registered users policy (configured by
the SRD_BlockUnRegUsers or
SIPInterface_BlockUnRegUsersblocks parameters).
Routing failure
Other local rejects (prior to SIP 180 response)
Remote rejects (prior to SIP 180 response)
Malicious signature pattern detected (see 'Configuring
Malicious Signatures' on page 695)
[5] Abnormal flow =
Requests and responses without a matching transaction
user (except ACK requests)
Requests and responses without a matching transaction
(except ACK requests)
Threshold Scope Defines the source of the attacker to consider in the device's
threshold-scope detection count.
[IDSRule_ThresholdScope] [0] Global = All attacks regardless of source are counted
together during the threshold window.
[2] IP = Attacks from each specific IP address are counted
separately during the threshold window.
[3] IP+Port = Attacks from each specific IP address:port are
counted separately during the threshold window. This option is
useful for NAT servers, where numerous remote machines use
the same IP address but different ports. However, it is not
recommended to use this option as it may degrade detection
capabilities.
Threshold Window Defines the threshold interval (in seconds) during which the
threshold-window device counts the attacks to check if a threshold is crossed. The
counter is automatically reset at the end of the interval.
[IDSRule_ThresholdWindow]
The valid range is 1 to 1,000,000. The default is 1.
Alarms
Minor-Alarm Threshold Defines the threshold that if crossed a minor severity alarm is
minor-alrm-thr sent.
[IDSRule_MinorAlarmThreshold] The valid range is 1 to 1,000,000. A value of 0 or -1 means not
defined.
Major-Alarm Threshold Defines the threshold that if crossed a major severity alarm is
major-alrm-thr sent.
[IDSRule_MajorAlarmThreshold] The valid range is 1 to 1,000,000. A value of 0 or -1 means not
defined.
Critical-Alarm Threshold Defines the threshold that if crossed a critical severity alarm is
critical-alrm-thr sent.
[IDSRule_CriticalAlarmThreshold] The valid range is 1 to 1,000,000. A value of 0 or -1 means not
defined.
Deny
Deny Threshold Defines the threshold that if crossed, the device blocks (blacklists)
Parameter Description
deny-thr the remote host (attacker).
[IDSRule_DenyThreshold] The default is -1 (i.e., not configured).
Note: The parameter is applicable only if the 'Threshold Scope'
parameter is set to IP or IP+Port.
Deny Period Defines the duration (in sec) to keep the attacker on the blacklist,
deny-period if configured using the 'Deny Threshold' parameter.
[IDSRule_DenyPeriod] The valid range is 0 to 1,000,000. The default is -1 (i.e., not
configured).
Note: The parameter is applicable only if the 'Threshold Scope'
parameter is set to IP or IP+Port.
The figure above shows a configuration example where the IDS Policy "SIP Trunk" is
applied to SIP Interfaces 1 and 2, and to all source IP addresses outside of subnet
10.1.0.0/16 and IP address 10.2.2.2.
3. Configure a rule according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 13-5: IDS Matches Table Parameter Descriptions
Parameter Description
Parameter Description
The table below lists the Syslog text messages per malicious event:
Table 13-6: Types of Malicious Events and Syslog Text String
14 Media
This section describes the media-related configuration.
Note: The following additional echo cancellation parameters are configurable only
through the ini file:
• ECHybridLoss - defines the four-wire to two-wire worst-case Hybrid loss
• ECNLPMode - defines the echo cancellation Non-Linear Processing (NLP) mode
• EchoCancellerAggressiveNLP - enables Aggressive NLP at the first 0.5 second of
the call
Note:
• Unless otherwise specified, the configuration parameters mentioned in this section
are available on this page.
• Some SIP parameters override these fax and modem parameters. For example,
the IsFaxUsed parameter and V.152 parameters in Section 'V.152 Support' on
page 197.
• For a detailed description of the parameters appearing on this page, see
'Configuration Parameters Reference' on page 971.
any of the transport capabilities), fallback to existing logic occurs (according to the
parameter IsFaxUsed).
end device doesn't support T.38, the fax fails. In this mode, the 'Fax Transport Mode'
parameter (FaxTransportMode) is ignored.
Note: The terminating gateway sends T.38 packets immediately after the T.38
capabilities are negotiated in SIP. However, the originating device by default, sends
T.38 (assuming the T.38 capabilities are negotiated in SIP) only after it receives T.38
packets from the remote device. This default behavior cannot be used when the
originating device is located behind a firewall that blocks incoming T.38 packets on
ports that have not yet received T.38 packets from the internal network. To resolve
this problem, the device should be configured to send CNG packets in T.38 upon
CNG signal detection (CNGDetectorMode = 1).
2. On the Fax/Modem/CID Settings page, set the 'Fax Transport Mode' parameter to
T.38 Relay (FaxTransportMode = 1).
3. Configure the following optional parameters:
• 'Fax Relay Redundancy Depth' (FaxRelayRedundancyDepth)
• 'Fax Relay Enhanced Redundancy Depth'
(FaxRelayEnhancedRedundancyDepth)
• 'Fax Relay ECM Enable' (FaxRelayECMEnable)
• 'Fax Relay Max Rate' (FaxRelayMaxRate)
Note: If both T.38 (regular) and T.38 Over RTP coders are negotiated between the
call parties, the device uses T.38 Over RTP.
2. Click Apply.
In this mode, the 'Fax Transport Mode' (FaxTransportMode) parameter is ignored and
automatically set to Disable (transparent mode).
2. Click Apply.
Note: When the device is configured for modem bypass and T.38 fax, V.21 low-
speed modems are not supported and fail as a result.
Tip: When the remote (non-AudioCodes) gateway uses the G.711 coder for voice
and doesn’t change the coder payload type for fax or modem transmission, it is
recommended to use the Bypass mode with the following configuration:
• EnableFaxModemInbandNetworkDetection = 1.
• 'Fax/Modem Bypass Coder Type' = same coder used for voice.
• 'Fax/Modem Bypass Packing Factor'(FaxModemBypassM) = same interval as
voice.
• ModemBypassPayloadType = 8 if voice coder is A-Law or 0 if voice coder is Mu-
Law.
Gateway folder > Gateway General Settings), and then from the 'Fax Signaling
Method' drop-down list (IsFaxUsed), select No Fax.
2. On the Fax/Modem/CID Settings page, do the following:
a. Set the 'Fax Transport Mode' parameter to Disable (FaxTransportMode = 0).
b. Set the 'V.21 Modem Transport Type' parameter to Disable
(V21ModemTransportType = 0).
c. Set the 'V.22 Modem Transport Type' parameter to Disable
(V22ModemTransportType = 0).
d. Set the 'V.23 Modem Transport Type' parameter to Disable
(V23ModemTransportType = 0).
e. Set the 'V.32 Modem Transport Type' parameter to Disable
(V32ModemTransportType = 0).
f. Set the 'V.34 Modem Transport Type' parameter to Disable
(V34ModemTransportType = 0).
3. Set the ini file parameter, BellModemTransportType to 0 (transparent mode).
4. Configure the following optional parameters:
a. Coders in the Coders table - see 'Configuring Coder Groups' on page 423.
b. 'Dynamic Jitter Buffer Optimization Factor' (DJBufOptFactor) - 'Configuring the
Dynamic Jitter Buffer' on page 198.
c. 'Echo Canceller' (EnableEchoCanceller) - see 'Configuring Echo Cancellation' on
page 183.
Note: This mode can be used for fax, but is not recommended for modem
transmission. Instead, use the Bypass (see 'Fax/Modem Bypass Mode' on page 189)
or Transparent with Events modes (see 'Fax / Modem Transparent with Events Mode'
on page 191) for modem.
Bypass mechanism for V.34 fax transmission (see 'Bypass Mechanism for V.34 Fax
Transmission' on page 193)
T.38 Version 0 relay mode, i.e., fallback to T.38 (see 'Relay Mode for T.30 and V.34
Faxes' on page 194)
To configure whether to pass V.34 over T.38 fax relay, or use Bypass over the High Bit
Rate coder (e.g. PCM A-Law), use the 'V.34 Fax Transport Type' parameter
(V34FaxTransportType).
You can use the 'SIP T.38 Version' parameter (SIPT38Version) to configure one of the
following:
Pass V.34 over T.38 fax relay using bit rates of up to 33,600 bps ('SIP T.38 Version' is
set to Version 3).
Use Fax-over-T.38 fallback to T.30, using up to 14,400 bps ('SIP T.38 Version' is set
to Version 0).
Note:
• Interworking of T.38 Version 3 is supported only for Gateway calls. For SBC calls,
the device forwards T.38 Version 3 transparently (as is) to the other leg (no
transcoding).
• The CNG detector is disabled in all the subsequent examples. To disable the CNG
detector, set the 'CNG Detector Mode' parameter (CNGDetectorMode) to Disable.
To use bypass mode for V.34 faxes, and T.38 for T.30 faxes:
1. On the Fax/Modem/CID Settings page, do the following:
a. Set the 'Fax Transport Mode' parameter to T.38 Relay (FaxTransportMode = 1).
b. Set the 'V.22 Modem Transport Type' parameter to Enable Bypass
(V22ModemTransportType = 2).
c. Set the 'V.23 Modem Transport Type' parameter to Enable Bypass
(V23ModemTransportType = 2).
d. Set the 'V.32 Modem Transport Type' parameter to Enable Bypass
(V32ModemTransportType = 2).
To force V.34 fax machines to use their backward compatibility with T.30 faxes
and operate in the slower T.30 mode:
Set the 'SIP T.38 Version' parameter to Version 0 (SIPT38Version = 0).
Note: Interworking of T.38 Version 3 is supported only for Gateway calls. For SBC
calls, the device forwards T.38 Version 3 transparently (as is) to the other leg (i.e., no
transcoding).
Note:
• The T.38 negotiation should be completed at call start according to V.152
procedure (as shown in the INVITE example below).
• T.38 mid-call Re-INVITEs are supported.
• If the remote party supports only T.38 Version 0, the device "downgrades" the
T.38 Version 3 to T.38 Version 0.
For example, the device sends or receives the following INVITE message, negotiating both
audio and image media:
INVITE sip:2001@10.8.211.250;user=phone SIP/2.0
Via: SIP/2.0/UDP 10.8.6.55;branch=z9hG4bKac1938966220
Max-Forwards: 70
From: <sip:318@10.8.6.55>;tag=1c1938956155
To: <sip:2001@10.8.211.250;user=phone>
Call-ID: 193895529241200022331@10.8.6.55
CSeq: 1 INVITE
Contact: <sip:318@10.8.6.55:5060>
Supported: em,100rel,timer,replaces,path,resource-priority,sdp-
anat
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUB
SCRIBE,UPDATE
Remote-Party-ID:
<sip:318@10.8.211.250>;party=calling;privacy=off;screen=no;screen-
ind=0;npi=1;ton=0
Remote-Party-ID: <sip:2001@10.8.211.250>;party=called;npi=1;ton=0
User-Agent: Audiocodes-Sip-Gateway-/v.7.20A.000.038
Content-Type: application/sdp
Content-Length: 433
v=0
o=AudiocodesGW 1938931006 1938930708 IN IP4 10.8.6.55
s=Phone-Call
c=IN IP4 10.8.6.55
t=0 0
m=audio 6010 RTP/AVP 18 97
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:97 telephone-event/8000
a=fmtp:97 0-15
a=ptime:20
a=sendrecv
m=image 6012 udptl t38
a=T38FaxVersion:3
a=T38MaxBitRate:33600
a=T38FaxMaxBuffer:1024
a=T38FaxMaxDatagram:122
a=T38FaxRateManagement:transferredTCF
a=T38FaxUdpEC:t38UDPRedundancy
Note:
• The V.150.1 Modem Relay feature is available only if the device is installed with a
License Key that includes this feature. For installing a License Key, see 'License
Key' on page 781.
• V.150.1 modem relay feature support is a subset of the full V.150.1 protocol and is
designed according to the US DoD requirement document. It therefore, cannot be
used for general purposes.
• V.150.1 modem relay is applicable only to the Gateway application.
• The V.150.1 feature has been tested with certain IP phones. For more details,
please contact your AudioCodes sales representative.
• The V.150.1 SSE Tx payload type is according to the offered SDP of the remote
side.
• The V.150.1 SPRT Rx payload type is according to the 'Payload Type' field in the
Coder Groups table.
• The V.150.1 SPRT Tx payload type is according to the remote side offered SDP.
c. For additional V.150.1 related parameters, see 'Fax and Modem Parameters' on
page 1079.
2. Set the 'Dynamic Jitter Buffer Minimum Delay' parameter (DJBufMinDelay) to the
minimum delay (in msec) for the Dynamic Jitter Buffer.
3. Set the 'Dynamic Jitter Buffer Optimization Factor' parameter (DJBufOptFactor) to the
Dynamic Jitter Buffer frame error/delay optimization factor.
4. Click Apply.
Using INFO message according to Nortel IETF draft: DTMF digits are sent to the
remote side in INFO messages. To enable the mode:
a. Set the 'Declare RFC 2833 in SDP' parameter to No (RxDTMFOption = 0).
b. Set the 'First Tx DTMF Option' parameter to INFO Nortel (FirstTxDTMFOption =
1).
Note: DTMF digits are removed from the audio stream (and the 'DTMF Transport
Type' parameter is automatically set to Mute DTMF).
Using INFO message according to Cisco’s mode: DTMF digits are sent to the
remote side in INFO messages. To enable the mode:
a. Set the 'Declare RFC 2833 in SDP' parameter to No (RxDTMFOption = 0).
b. Set the 'First Tx DTMF Option' parameter to INFO Cisco (FirstTxDTMFOption =
3).
Note: DTMF digits are removed from the audio stream (and the 'DTMF Transport
Type' parameter is automatically set to Mute DTMF).
Using NOTIFY messages according to IETF Internet-Draft draft-mahy-sipping-
signaled-digits-01: DTMF digits are sent to the remote side using NOTIFY
messages. To enable the mode:
a. Set the 'Declare RFC 2833 in SDP' parameter to No (RxDTMFOption = 0).
b. Set the 'First Tx DTMF Option' parameter to NOTIFY (FirstTxDTMFOption = 2).
Note: DTMF digits are removed from the audio stream (and the 'DTMF Transport
Type' parameter is automatically set to Mute DTMF).
Using RFC 2833 relay with Payload type negotiation: DTMF digits are sent to the
remote side as part of the RTP stream according to RFC 2833. To enable the mode:
a. Set the 'Declare RFC 2833 in SDP' parameter to Yes (RxDTMFOption = 3).
b. Set the 'First Tx DTMF Option' parameter to RFC 2833 (FirstTxDTMFOption = 4).
Note: To set the RFC 2833 payload type with a value other than its default, use the
RFC2833PayloadType parameter. The device negotiates the RFC 2833 payload type
using local and remote SDP and sends packets using the payload type from the
received SDP. The device expects to receive RFC 2833 packets with the same
payload type as configured by the parameter. If the remote side doesn’t include
‘telephony-event’ in its SDP, the device sends DTMF digits in transparent mode (as
part of the voice stream).
Sending DTMF digits (in RTP packets) as part of the audio stream (DTMF Relay
is disabled): This method is typically used with G.711 coders. With other low-bit rate
(LBR) coders, the quality of the DTMF digits is reduced. To enable the mode:
a. Set the 'Declare RFC 2833 in SDP' parameter to No (RxDTMFOption = 0).
b. Set the 'First Tx DTMF Option' parameter to Not Supported (FirstTxDTMFOption
= 0).
Note:
• The device is always ready to receive DTMF packets over IP in all possible
transport modes: INFO messages, NOTIFY, and RFC 2833 (in proper payload
type) or as part of the audio stream.
• To exclude RFC 2833 Telephony event parameter from the device's SDP, set the
'Declare RFC 2833 in SDP' parameter to No.
• You can use the following parameters to configure DTMF digit handling:
√ FirstTxDTMFOption, SecondTxDTMFOption, RxDTMFOption,
RFC2833TxPayloadType, and RFC2833RxPayloadType
√ MGCPDTMFDetectionPoint, DTMFVolume, DTMFTransportType,
DTMFDigitLength, and DTMFInterDigitInterval
The consecutive port offset from the RTP port for RTCP and T.38 traffic is one and two,
respectively. For example, if the voice session uses RTP port 6000, the device allocates
ports 6001 and 6002 for RTCP and T.38, respectively. However, you can configure the
device to use the same port for RTP and T.38 packets, by configuring the T38UseRTPPort
parameter to 1.
Within the port range, the device allocates the UDP ports per media channel (leg) in
"jumps" (spacing) of 10. For example, if the port range starts at 6000 and the UDP port
spacing is 10, the available ports are 6000, 6010, 6020, 6030, and so on. Within the port
range, the device assigns these ports randomly to the different media channels. For
example, it allocates port 6000 to leg 1, port 6030 to leg 2, and port 6010 to leg 3.
You can configure the starting port (lower boundary) of the port range (default is 6000),
using the BaseUDPPort parameter. Once configured, the port range is according to the
following equation:
<BaseUDPPort parameter value> to 65,535
Where, number of channels is the maximum number of purchased channels for the device
(included in the installed License Key).
For example, if you configure the BaseUDPPort parameter to 6000, the port range is 6000
to 65,535.
You can also configure specific port ranges for specific SIP entities, using Media Realms
(see 'Configuring Media Realms' on page 333). You can configure each Media Realm with
a different UDP port range and then associate the Media Realm with a specific IP Group,
for example. However, the port range of the Media Realm must be within the range
configured by the BaseUDPPort parameter.
The following procedure describes how to configure the RTP base UDP port through the
Web interface.
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Note: The RTP port must be different from ports configured for SIP signaling traffic
(i.e., ports configured for SIP Interfaces). For example, if the RTP port range is 6000
to 6999, the SIP port can either be less than 6000 or greater than 6999.
Answering Machine Detection (AMD): Detects events that are related to the AMD
feature. AMD detects whether an answering machine or live voice has answered the
call. It can also be used to detect silence, or the beep sound played by an answering
machine to indicate the end of the greeting message after which a voice message can
be left. For more information on AMD, see 'Answering Machine Detection (AMD)' on
page 208.
Call Progress Tone (CPT): Detects whether a specific tone, defined in the installed
CPT file is received from the call. It can be used to detect the beep sound played by
an answering machine (as mentioned above), Special Information Tones (SIT) which
indicate call failure with a recorded announcement describing the call failure, and the
busy, reorder and ring tones.
Fax/modem machine: Detects whether a fax has answered the call (preamble, CED,
CNG, and modem).
PTT: Detects the start and end of voice.
Note:
• Currently, PTT is supported only for Gateway calls.
• Fax and SIT event detection is applicable only to Gateway calls.
• Event detection on SBC calls is supported only for calls using the G.711 coder.
AMD Voice (live voice) Event detection using the AMD feature. For more
Automata (answering machine) information, see Answering Machine Detection
Silence (no voice) (AMD) on page 208.
Unknown
Beep (greeting message of
answering machine)
The following example shows a SIP INFO message sent by the device to a remote
application server notifying it that SIT detection has been detected:
INFO sip:5001@10.33.2.36 SIP/2.0
Via: SIP/2.0/UDP 10.33.45.65;branch=z9hG4bKac2042168670
Max-Forwards: 70
From: <sip:5000@10.33.45.65;user=phone>;tag=1c1915542705
To: <sip:5001@10.33.2.36;user=phone>;tag=WQJNIDDPCOKAPIDSCOTG
Call-ID: AIFHPETLLMVVFWPDXUHD@10.33.2.36
CSeq: 1 INFO
Contact: <sip:2206@10.33.45.65>
Supported: em,timer,replaces,path,resource-priority
Content-Type: application/x-detect
Content-Length: 28
Type= CPT
SubType= SIT-IC
the received INVITE message contains an X-Detect header with the value
"Request=CPT":
X-Detect: Request=CPT
For more information on the CPT file, see 'Call Progress Tones File' on page 759.
The device reports beep detections to application servers, by sending a SIP INFO
message that contains a body with one of the following values, depending on the method
used for detecting the beep:
AMD-detected Beep:
Type= AMD
SubType= Beep
CPT-detected Beep:
Type= CPT
SubType=Beep
User-Agent: Audiocodes-Sip-Gateway/v.7.20A.000.038
Content-Type: application/x-detect
Content-Length: 34
Type= PTT
SubType= SPEECH-START
3. Upon detection of the end of voice (i.e., end of the greeting message of the
answering machine), the device sends the following INFO message to the
application server:
INFO sip:sipp@172.22.2.9:5060 SIP/2.0
Via: SIP/2.0/UDP 172.22.168.249;branch=z9hG4bKac482466515
Max-Forwards: 70
From: sut <sip:3000@172.22.168.249:5060>;tag=1c419779142
To: sipp <sip:sipp@172.22.2.9:5060>;tag=1
Call-ID: 1-29753@172.22.2.9
CSeq: 1 INFO
Contact: <sip:56700@172.22.168.249>
Supported: em,timer,replaces,path,resource-priority
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,I
NFO,SUBSCRIBE,UPDATE
User-Agent: Audiocodes-Sip-Gateway/v.7.20A.000.038
Content-Type: application/x-detect
Content-Length: 34
Type= PTT
SubType= SPEECH-END
4. The application server sends its message to leave on the answering message.
The following example shows a SIP call flow for event detection and notification of the
beep of an answering machine:
1. The device receives a SIP message containing the X-Detect header from the
remote application requesting beep detection:
INVITE sip:101@10.33.2.53;user=phone SIP/2.0
Via: SIP/2.0/UDP 10.33.2.53;branch=z9hG4bKac5906
Max-Forwards: 70
From: "anonymous"
<sip:anonymous@anonymous.invalid>;tag=1c25298
To: <sip:101@10.33.2.53;user=phone>
Call-ID: 11923@10.33.2.53
CSeq: 1 INVITE
Contact: <sip:100@10.33.2.53>
X-Detect: Request=AMD,CPT
2. The device sends a SIP response message to the remote party, listing the events
in the X-Detect header that it can detect:
SIP/2.0 200 OK
Via: SIP/2.0/UDP 10.33.2.53;branch=z9hG4bKac5906
From: "anonymous"
<sip:anonymous@anonymous.invalid>;tag=1c25298
To: <sip:101@10.33.2.53;user=phone>;tag=1c19282
Call-ID: 11923@10.33.2.53
CSeq: 1 INVITE
Contact: <sip:101@10.33.2.53>
X-Detect: Response=AMD,CPT
3. The device detects the beep of an answering machine and sends an INFO
message to the remote party:
INFO sip:101@10.33.2.53;user=phone SIP/2.0
Via: SIP/2.0/UDP 10.33.2.53;branch=z9hG4bKac5906
Max-Forwards: 70
From: "anonymous"
<sip:anonymous@anonymous.invalid>;tag=1c25298
To: <sip:101@10.33.2.53;user=phone>
Call-ID: 11923@10.33.2.53
CSeq: 1 INVITE
Contact: <sip:100@10.33.2.53>
X- Detect: Response=AMD,CPT
Content-Type: Application/X-Detect
Content-Length: xxx
Type = CPT
Subtype = Beep
Note: As the main factor (algorithm) for detecting human and machine is the voice
pattern and silence duration, the language on which the detection algorithm is based,
is in most cases not important as these factors are similar across most languages.
Therefore, the default, pre-installed AMD Sensitivity file, which is based on North
American English, may suffice your deployment even if the device is located in a
region where a language other than English is used.
However, if (despite the information stated in the note above) you wish to implement AMD
in a different language or region, or if you wish to fine-tune the default AMD algorithms to
suit your specific deployment, please contact your AudioCodes sales representative for
more information on this service. You will be typically required to provide AudioCodes with
a database of recorded voices (calls) in the language on which the device's AMD feature
can base its voice detector algorithms. The data needed for an accurate calibration should
be recorded under the following guidelines:
Statistical accuracy: The number of recorded calls should be as high as possible (at
least 100) and varied. The calls must be made to different people. The calls must be
made in the specific location in which the device's AMD feature is to operate.
Real-life recording: The recordings should simulate real-life answering of a called
person picking up the phone, and without the caller speaking.
Normal environment interferences: The environment in which the recordings are done
should simulate real-life scenarios, in other words, not sterile but not too noisy either.
Interferences, for example, could include background noises of other people talking,
spikes, and car noises.
Once you have provided AudioCodes with your database of recordings, AudioCodes
compiles it into a loadable file. For a brief description of the file format and for installing the
file on the device, see 'AMD Sensitivity File' on page 779.
The device supports up to eight AMD algorithm suites called Parameter Suites, where each
suite defines a range of detection sensitivity levels. Sensitivity levels refer to how
accurately, based on AudioCodes' voice detection algorithms, the device can detect
whether a human or machine has answered the call. Each level supports a different
detection sensitivity to human and machine. For example, a specific sensitivity level may
be more sensitive to detecting human than machine. In deployments where the likelihood
of a call answered by an answering machine is low, it would be advisable to configure the
device to use a sensitivity level that is more sensitive to human than machine. In addition,
this allows you to tweak your sensitivity to meet local regulatory rules designed to protect
consumers from automatic dialers (where, for example, the consumer picks up the phone
and hears silence). Each suite can support up to 16 sensitivity levels (0 to 15), except for
Parameter Suite 0, which supports up to 8 levels (0 to 7). The default, pre-installed AMD
Sensitivity file, based on North American English, provides the following Parameter Suites:
Parameter Suite 0 (normal sensitivity) - contains 8 sensitivity detection levels
Parameter Suite 1 (high sensitivity) - contains 16 sensitivity detection levels
As Parameter Suite 1 provides a greater range of detection sensitivity levels (i.e., higher
detection resolution), this may be the preferable suite to use in your deployment. The
detected AMD type (human or machine) and success of detecting it correctly are sent in
CDR and Syslog messages. For more information, see 'Syslog Fields for Answering
Machine Detection (AMD)' on page 933.
The Parameter Suite and sensitivity level can be applied globally for all calls, or for specific
calls using IP Profiles. For enabling AMD and selecting the Parameter Suite and sensitivity
level, see 'Configuring AMD' on page 210.
The tables below show the success rates of the default, pre-installed AMD Sensitivity file
(based on North American English) for correctly detecting "live" human voice and
answering machine:
Table 14-3: Approximate AMD Normal Detection Sensitivity - Parameter Suite 0 (Based on
North American English)
Performance
AMD Detection
Sensitivity
Success Rate for Live Calls Success Rate for Answering Machine
0 (Best for - -
Answering
Machine)
1 82.56% 97.10%
2 85.87% 96.43%
3 88.57% 94.76%
4 88.94% 94.31%
Performance
AMD Detection
Sensitivity
Success Rate for Live Calls Success Rate for Answering Machine
5 90.42% 91.64%
6 90.66% 91.30%
7 (Best for Live 94.72% 76.14%
Calls)
Table 14-4: Approximate AMD High Detection Sensitivity - Parameter Suite 1 (Based on North
American English)
Performance
AMD Detection
Sensitivity
Success Rate for Live Calls Success Rate for Answering Machine
and then assigning the IP Profile to a Trunk Group in the IP-to-Tel Routing table (see
Configuring IP-to-Tel Routing Rules on page 518).
2. From the 'AMD Mode' drop-down list, select Disconnect on AMD, and then click
Apply.
Note:
• Gateway application: The device only initiates the MKI size.
• SBC application: The device can forward MKI size transparently for SRTP-to-
SRTP media flows or override the MKI size during negotiation (inbound or
outbound leg).
The key lifetime field is not supported. However, if it is included in the key it is ignored and
the call does not fail. For SBC calls belonging to a specific SIP entity, you can configure the
device to remove the lifetime field in the 'a=crypto' attribute (using the IP Profile parameter,
IpProfile_SBCRemoveCryptoLifetimeInSDP).
For SDES, the keys are sent in the SDP body ('a=crypto') of the SIP message and are
typically secured using SIP over TLS (SIPS). The encryption of the keys is in plain text in
the SDP. The device supports the following session parameters:
UNENCRYPTED_SRTP
UNENCRYPTED_SRTCP
UNAUTHENTICATED_SRTP
Session parameters should be the same for the local and remote sides. When the device is
the offering side, the session parameters are configured by the following parameter -
'Authentication On Transmitted RTP Packets', 'Encryption On Transmitted RTP Packets,
and 'Encryption On Transmitted RTCP Packets'. When the device is the answering side,
the device adjusts these parameters according to the remote offering. Unsupported
session parameters are ignored, and do not cause a call failure.
Below is an example of crypto attributes usage:
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:PsKoMpHlCg+b5X0YLuSvNrImEh/dAe
a=crypto:2 AES_CM_128_HMAC_SHA1_32
inline:IsPtLoGkBf9a+c6XVzRuMqHlDnEiAd
The device also supports symmetric MKI negotiation, whereby it can forward the MKI size
received in the SDP offer 'a=crypto' line in the SDP answer. You can enable symmetric
MKI globally (using the EnableSymmetricMKI parameter) or per SIP entity (using the IP
Profile parameter, IpProfile_EnableSymmetricMKI and for SBC calls,
IpProfile_SBCEnforceMKISize). For more information on symmetric MKI, see 'Configuring
IP Profiles' on page 433.
You can configure the enforcement policy of SRTP, using the EnableMediaSecurity
parameter for Gateway calls and IpProfile_SBCMediaSecurityBehaviour parameter for
SBC calls. For example, if negotiation of the cipher suite fails or if incoming calls exclude
encryption information, the device can be configured to reject the calls.
Note:
• For a detailed description of the SRTP parameters, see 'Configuring IP Profiles' on
page 433 and 'SRTP Parameters' on page 1011.
• When SRTP is used, the channel capacity may be reduced.
The procedure below describes how to configure SRTP through the Web interface.
To configure DTLS:
1. In the TLS Context table (see 'Configuring TLS Certificate Contexts' on page 109),
configure a TLS Context with the DTLS version (TLSContexts_DTLSVersion).
2. Open the IP Groups table (see 'Configuring IP Groups' on page 359) and for the IP
Group associated with the SIP entity, assign it the TLS Context for DTLS, using the
'DTLS Context' parameter (IPGroup_DTLSContext).
3. Open the IP Profiles table (see 'Configuring IP Profiles' on page 433) and for the IP
Profile associated with the SIP entity, configure the following:
• Configure the 'SBC Media Security Mode' parameter
(IPProfile_SBCMediaSecurityBehavior) to SRTP or Both.
• Configure the 'Media Security Method' parameter
(IPProfile_SBCMediaSecurityMethod) to DTLS.
• Configure the 'RTCP Mux' parameter (IpProfile_SBCRTCPMux) to Supported.
Multiplexing is required as the DTLS handshake is done for the port used for RTP
and thus, RTCP and RTP must be multiplexed onto the same port.
• Configure the ini file parameter, SbcDtlsMtu (or CLI command configure voip >
sbc settings > sbc-dtls-mtu) to define the maximum transmission unit (MTU) size
for the DTLS handshake.
Note:
• The 'Cipher Server' parameter must be configured to "ALL".
• The device does not support forwarding of DTLS transparently between endpoints.
15 Services
This section describes configuration for various supported services.
Once you have configured the DHCP server, you can configure the following:
DHCP Vendor Class Identifier names (DHCP Option 60) - see 'Configuring the Vendor
Class Identifier' on page 222
Additional DHCP Options - see 'Configuring Additional DHCP Options' on page 223
Static IP addresses for DHCP clients - see 'Configuring Static IP Addresses for DHCP
Clients' on page 225
Note: If you configure additional DHCP Options in the DHCP Option table, they
override the default ones, which are configured in the DHCP Servers table. For
example, if you configure Option 67 in the DHCP Option table, the device uses the
value configured in the DHCP Option table instead of the value configured in the
DHCP Servers table.
To view and delete currently serviced DHCP clients, see 'Viewing and Deleting DHCP
Clients' on page 226.
The following procedure describes how to configure the DHCP server through the Web
interface. You can also configure it through ini file (DhcpServer) or CLI (configure network
> dhcp-server server <index>).
3. Configure a DHCP server according to the parameters described in the table below.
4. Click Apply.
Table 15-2: DHCP Servers Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
dhcp server <index> Note:
Each row must be configured with a unique index.
Currently, only one index row can be configured.
Interface Name Associates an IP interface on which the DHCP server operates.
network-if The IP interfaces are configured in the IP Interfaces table (see
'Configuring IP Network Interfaces' on page 141).
[DhcpServer_InterfaceName]
By default, no value is defined.
Start IP Address Defines the starting IP address (IPv4 address in dotted-decimal
start-address format) of the IP address pool range used by the DHCP server
to allocate addresses.
[DhcpServer_StartIPAddress]
The default value is 192.168.0.100.
Note: The IP address must belong to the same subnet as the
associated interface’s IP address.
End IP Address Defines the ending IP address (IPv4 address in dotted-decimal
end-address format) of the IP address pool range used by the DHCP server
Parameter Description
[DhcpServer_EndIPAddress] to allocate addresses.
The default value is 192.168.0.149.
Note: The IP address must belong to the same subnet as the
associated interface’s IP address and must be "greater or
equal" to the starting IP address defined in 'Start IP Address'.
Subnet Mask Defines the subnet mask (for IPv4 addresses) for the DHCP
subnet-mask client. The value is sent in DHCP Option 1 (Subnet Mask).
[DhcpServer_SubnetMask] The default value is 0.0.0.0.
Note: The value must be "narrower" or equal to the subnet
mask of the associated interface’s IP address. If set to "0.0.0.0",
the subnet mask of the associated interface is used.
Lease Time Defines the duration (in minutes) of the lease time to a DHCP
lease-time client for using an assigned IP address. The client needs to
request a new address before this time expires. The value is
[DhcpServer_LeaseTime]
sent in DHCP Option 51 (IP Address Lease Time).
The valid value range is 0 to 214,7483,647. The default is 1440.
When set to 0, the lease time is infinite.
DNS
DNS Server 1 Defines the IP address (IPv4) of the primary DNS server that
dns-server-1 the DHCP server assigns to the DHCP client. The value is sent
in DHCP Option 6 (Domain Name Server).
[DhcpServer_DNSServer1]
The default value is 0.0.0.0.
DNS Server 2 Defines the IP address (IPv4) of the secondary DNS server that
dns-server-2 the DHCP server assigns to the DHCP client. The value is sent
in DHCP Option 6 (Domain Name Server).
[DhcpServer_DNSServer2]
The default value is 0.0.0.0.
NetBIOS
NetBIOS Name Server Defines the IP address (IPv4) of the NetBIOS WINS server that
netbios-server is available to a Microsoft DHCP client. The value is sent in
DHCP Option 44 (NetBIOS Name Server).
[DhcpServer_NetbiosNameServer]
The default value is 0.0.0.0.
NetBIOS Node Type Defines the node type of the NetBIOS WINS server for a
netbios-node-type Microsoft DHCP client. The value is sent in DHCP Option 46
(NetBIOS Node Type).
[DhcpServer_NetbiosNodeType]
[0] Broadcast (default)
[1] peer-to-peer
[4] Mixed
[8] Hybrid
Time and Date
NTP Server 1 Defines the IP address (IPv4) of the primary NTP server that
ntp-server-1 the DHCP server assigns to the DHCP client. The value is sent
in DHCP Option 42 (Network Time Protocol Server).
[DhcpServer_NTPServer1]
The default value is 0.0.0.0.
NTP Server 2 Defines the IP address (IPv4) of the secondary NTP server that
ntp-server-2 the DHCP server assigns to the DHCP client. The value is sent
in DHCP Option 42 (Network Time Protocol Server).
[DhcpServer_NTPServer2]
Parameter Description
The default value is 0.0.0.0.
Time Offset Defines the Greenwich Mean Time (GMT) offset (in seconds)
time-offset that the DHCP server assigns to the DHCP client. The value is
sent in DHCP Option 2 (Time Offset).
[DhcpServer_TimeOffset]
The valid range is -43200 to 43200. The default is 0.
Boot File
TFTP Server Name Defines the IP address or name of the TFTP server that the
tftp-server-name DHCP server assigns to the DHCP client. The TFTP server
typically stores the boot file image, defined in the 'Boot file
[DhcpServer_TftpServer]
name' parameter (see below). The value is sent in DHCP
Option 66 (TFTP Server Name).
The valid value is a string of up to 80 characters. By default, no
value is defined.
Boot File Name Defines the name of the boot file image for the DHCP client.
boot-file-name The boot file stores the boot image for the client. The boot
image is typically the operating system the client uses to load
[DhcpServer_BootFileName]
(downloaded from a boot server). The value is sent in DHCP
Option 67 (Bootfile Name). To define the server storing the file,
use the 'TFTP Server' parameter (see above).
The valid value is a string of up to 256 characters. By default,
no value is defined.
The name can also include the following case-sensitive
placeholder strings that are replaced with actual values if the
'Expand Boot-file Name' parameter is set to Yes:
<MAC>: Replaced by the MAC address of the client (e.g.,
boot_<MAC>.ini). The MAC address is obtained in the
client's DHCP request.
<IP>: Replaced by the IP address assigned by the DHCP
server to the client.
Expand Boot-File Name Enables the use of the placeholders in the boot file name,
expand-boot-file-name defined in the 'Boot file name' parameter.
[DhcpServer_ExpandBootfileName] [0] No
[1] Yes (default)
Router
Override Router Defines the IP address (IPv4 in dotted-decimal notation) of the
override-router-address default router that the DHCP server assigns the DHCP client.
The value is sent in DHCP Option 3 (Router).
[DhcpServer_OverrideRouter]
The default value is 0.0.0.0. If not specified (empty or “0.0.0.0”),
the IP address of the default gateway configured in the IP
Interfaces table for the IP network interface that you associated
with the DHCP server (see the 'Interface Name' parameter
above) is used.
SIP
SIP Server Defines the IP address or DNS name of the SIP server that the
sip-server DHCP server assigns the DHCP client. The client uses this SIP
server for its outbound SIP requests. The value is sent in DHCP
[DhcpServer_SipServer]
Option 120 (SIP Server). After defining the parameter, use the
'SIP server type' parameter (see below) to define the type of
Parameter Description
address (FQDN or IP address).
The valid value is a string of up to 256 characters. The default is
0.0.0.0.
SIP Server Type Defines the type of SIP server address. The actual address is
sip-server-type defined in the 'SIP server' parameter (see above). Encoding is
done per SIP Server Type, as defined in RFC 3361.
[DhcpServer_SipServerType]
[0] DNS names = (Default) The 'SIP server' parameter is
configured with an FQDN of the SIP server.
[1] IP address = The 'SIP server' parameter configured with
an IP address of the SIP server.
4. Configure a VCI for the DHCP server according to the parameters described in the
table below.
5. Click Apply.
Parameter Description
Note: The additional DHCP Options configured in the DHCP Option table override the
default ones, which are configured in the DHCP Servers table. In other words, if you
configure Option 67 in the DHCP Option table, the device uses the value configured
in the DHCP Option table instead of the value configured in the DHCP Servers table.
4. Configure additional DHCP Options for the DHCP server according to the parameters
described in the table below.
5. Click Apply.
Table 15-4: DHCP Option Table Parameter Descriptions
Parameter Description
Parameter Description
IPv4 addresses, each separated by a comma (e.g.,
192.168.10.5,192.168.10.20). For hexadecimal values, the value is
a hexadecimal string (e.g., c0a80a05).
You can also configure the parameter with case-sensitive
placeholder strings that are replaced with actual values if the
'Expand Value' parameter (see below) is set to Yes:
<MAC>: Replaced by the MAC address of the client. The MAC
address is obtained from the client's DHCP request. For
example, the parameter can be set to:
http://192.168.3.155:5000/provisioning/cfg_<MAC>.txt
<IP>: Replaced by the IP address assigned by the DHCP server
to the client. For example, the parameter can be set to:
http://192.168.3.155:5000/provisioning/cfg_<IP>.txt
Expand Value Enables the use of the special placeholder strings, "<MAC>" and
expand-value "<IP>" for configuring the 'Value' parameter (see above).
[DhcpOption_ExpandValue] [0] No
[1] Yes (default)
Note: The parameter is applicable only to values of type ASCII (see
the 'Type' parameter above.
4. Configure a static IP address for a specific DHCP client according to the parameters
described in the table below.
5. Click Apply.
Table 15-5: DHCP Static IP Table Parameter Descriptions
Parameter Description
MAC Address Defines the DHCP client by MAC address (in hexadecimal format).
mac-address The valid value is a string of up to 20 characters. The format
[DhcpStaticIP_MACAddress] includes six groups of two hexadecimal digits, each separated by
a colon. The default MAC address is 00:90:8f:00:00:00.
Note:
• The SIP-based Media Recording feature is available only if the device is installed
with a License Key that includes this feature. For installing a License Key, see
'License Key' on page 781. The License Key also specifies the maximum number
of supported SIP recording sessions.
• The device supports up to 200 concurrent SIPRec sessions. This capacity
assumes that there are no other concurrent, regular (non-SIPRec) voice sessions.
The device can record calls between two IP Groups, or between an IP Group and a Trunk
Group for Gateway calls. The type of calls to record can be specified by source and/or
destination prefix number or SIP Request-URI, as well as by call initiator. The side ("leg")
on which the recording is done must be specified. Specifying the leg is important as it
determines the various call media attributes of the recorded RTP (or SRTP) such as coder
type.
The device can also record SRTP calls and send it to the SRS in SRTP. In such scenarios,
the SRTP is used on the IP leg for Gateway calls, or on one of the IP legs for SBC calls.
For an SBC RTP-SRTP session, the recorded IP Group in the SIP Recording table must be
set to the RTP leg if recording is required to be RTP, or set to the SRTP leg if recording is
required to be SRTP.
For SBC calls, the device can also be located between an SRS and an SRC and act as an
RTP-SRTP translator. In such a setup, the device receives SIP recording sessions (as a
server) from the SRC and translates SRTP media to RTP, or vice versa, and then forwards
the recording to the SRS in the translated media format.
The device can send recorded SBC calls to multiple SRSs. To achieve this, you can
configure up to three groups of SRSs, where each group can contain one SRS
(standalone), or two SRSs operating in an active-standby (1+1) mode for SRS redundancy.
. The device sends both SIP signaling and RTP to all standalone SRSs. For Gateway calls,
only one SRS is supported.
For SRS redundancy, the device sends SIP signaling to all SRSs (active and standby) in
the SRS redundancy groups, but sends RTP only to the active SRSs. If during a recorded
call session, the standby SRS detects that the active SRS has gone offline, the standby
SRS sends a re-INVITE to the device and the device then sends the recorded RTP to the
standby SRS instead (which now becomes the active SRS). For new calls, if the device
receives no response or a reject response from the active SRS to its' sent INVITE
message, the device sends the recorded call to the standby SRS.
Note:
• The device can send recordings (media) to up to three active SRSs. In other
words, any one of the following configurations are supported:
√ Up to three standalone (active) SRSs.
√ Up to three active-standby SRS pairs (i.e., six SRSs, but recordings are sent
only to the three active SRSs).
√ One standalone (active) SRS and two active-standby SRS pairs.
√ Two standalone (active) SRSs and one active-standby SRS pair.
• SRS active-standby redundancy is a license-dependent feature and is available
only if it is included in the License Key installed on the device. Therefore, the
SIPRec feature can require two licenses – the regular license ("SIPREC") for
standalone (active) SRSs and a license ("SIPRECRED") for SRS active-standby
redundancy. If you are implementing only standalone SRSs, you only need the
“SIPREC” license. If you are implementing SRS active-standby redundancy, you
need both licenses.
• The “SIPREC” license defines the maximum number of sessions for active SRSs
(standalone SRS and the active SRS in the active-standby redundancy pair). The
"SIPRECRED" license defines the maximum number of SIPRec sessions for the
standby SRS in the active-standby redundancy pair. For example, if you want to
support 10 SIPRec sessions per SRS, the required licenses for various scenarios
are as follows:
√ One standalone SRS: SIPREC = 10
√ Two standalone SRSs: SIPREC = 20
√ One active-standby redundancy pair: SIPREC = 10; SIPRECRED = 10
√ Two active-standby redundancy pairs: SIPREC = 20; SIPRECRED = 20
√ One standalone SRS and two active-standby redundancy pairs: SIPREC = 30;
SIPRECRED = 20
The device initiates a recording session by sending an INVITE message to the SRS when
the recorded call is connected. The SIP From header contains the identity of the SRC and
the To header contains the identity of the SRS. The SDP in the INVITE contains:
Two 'm=' lines that represent the two RTP/SRTP streams (Rx and Tx).
Two 'a=label:' lines that identify the streams.
XML body (also referred to as metadata) that provides information on the participants
of the call session:
• <group id>: Logging Session ID (displayed as [SID:nnnnn] in Syslog), converted
from decimal to hex. This number remains the same even if the call is forwarded
or transferred. This is important for recorded calls.
• <session id>: Originally recorded Call-ID, converted from decimal to hex.
• <group-ref>: same as <group id>.
• <participant id>: SIP From / To user.
• <nameID aor>: From/To user@host.
• <send> and <recv>: ID's for the RTP/SRTP streams in hex - bits 0-31 are the
same as group, bits 32-47 are the RTP port.
• <stream id>: Same as <send> for each participant.
• <label>: 1 and 2 (same as in the SDP's 'a=label:' line).
The SRS can respond with 'a=recvonly' for immediate recording or 'a=inactive' if recording
is not yet needed, and send re-INVITE at any later time with the desired RTP/SRTP mode
change. If a re-INVITE is received in the original call (e.g. when a call is on hold), the
device sends another re-INVITE with two 'm=' lines to the SRS with the updated
RTP/SRTP data. If the recorded leg uses SRTP, the device can send the media streams to
the SRS as SRTP; otherwise, the media streams are sent as RTP to the SRS.
Below is an example of an INVITE sent by the device to an SRS:
INVITE sip:VSRP@1.9.64.253 SIP/2.0
Via: SIP/2.0/UDP 192.168.241.44:5060;branch=z9hG4bKac505782914
Max-Forwards: 10
From: <sip:192.168.241.44>;tag=1c505764207
To: <sip:VSRP@1.9.64.253>
Call-ID: 505763097241201011157@192.168.241.44
CSeq: 1 INVITE
Contact: <sip:192.168.241.44:5060>;src
Supported: replaces,resource-priority
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUB
SCRIBE,UPDATE
Require: siprec
User-Agent: Mediant /v.7.20A.000.038
Content-Type: multipart/mixed;boundary=boundary_ac1fffff85b
Content-Length: 1832
--boundary_ac1fffff85b
Content-Type: application/sdp
v=0
o=AudiocodesGW 921244928 921244893 IN IP4 10.33.8.70
s=SBC-Call
c=IN IP4 10.33.8.70
t=0 0
m=audio 6020 RTP/AVP 8 96
c=IN IP4 10.33.8.70
a=ptime:20
a=sendonly
a=label:1
a=rtpmap:8 PCMA/8000
a=rtpmap:96 telephone-event/8000
a=fmtp:96 0-15
m=audio 6030 RTP/AVP 8 96
c=IN IP4 10.33.8.70
a=ptime:20
a=sendonly
a=label:2
a=rtpmap:8 PCMA/8000
a=rtpmap:96 telephone-event/8000
a=fmtp:96 0-15
--boundary_ac1fffff85b
Content-Type: application/rs-metadata
Content-Disposition: recording-session
<?xml version="1.0" encoding="UTF-8"?>
<recording xmlns='urn:ietf:params:xml:ns:recording'>
<datamode>complete</datamode>
<group id="00000000-0000-0000-0000-00003a36c4e3">
<associate-time>2010-01-24T01:11:57Z</associate-time>
</group>
<session id="0000-0000-0000-0000-00000000d0d71a52">
<group-ref>00000000-0000-0000-0000-00003a36c4e3</group-ref>
<start-time>2010-01-24T01:11:57Z</start-time>
<ac:AvayaUCID
xmlns="urn:ietf:params:xml:ns:Avaya">FA080030C4E34B5B9E59</ac:Avay
aUCID>
</session>
<participant id="1056" session="0000-0000-0000-0000-
00000000d0d71a52">
<nameID aor="1056@192.168.241.20"></nameID>
<associate-time>2010-01-24T01:11:57Z</associate-time>
<send>00000000-0000-0000-0000-1CF23A36C4E3</send>
<recv>00000000-0000-0000-0000-BF583A36C4E3</recv>
</participant>
<participant id="182052092" session="0000-0000-0000-0000-
00000000d0d71a52">
<nameID aor="182052092@voicelab.local"></nameID>
<associate-time>2010-01-24T01:11:57Z</associate-time>
<recv>00000000-0000-0000-0000-1CF23A36C4E3</recv>
<send>00000000-0000-0000-0000-BF583A36C4E3</send>
</participant>
<stream id="00000000-0000-0000-0000-1CF23A36C4E3" session="0000-
0000-0000-0000-00000000d0d71a52">
<label>1</label>
</stream>
<stream id="00000000-0000-0000-0000-BF583A36C4E3" session="0000-
0000-0000-0000-00000000d0d71a52">
<label>2</label>
</stream>
</recording>
--boundary_ac1fffff85b—
Note:
• To configure the device's timestamp format (local or UTC) in SIP messages sent
to the SRS, see the SIPRecTimeStamp parameter.
• To view the total number of currently active SIPRec signaling sessions, use the
CLI command show voip calls statistics siprec. For more information, refer to
the CLI Reference Guide.
The following procedure describes how to configure SIP Recording rules through the Web
interface. You can also configure it through ini file (SIPRecRouting) or CLI (configure voip >
sip-definition sip-recording sip-rec-routing).
The figure above shows a configuration example where the device records calls made
by IP Group "ITSP" to IP Group "IP-PBX" that have the destination number prefix
"1800". The device records the calls from the leg interfacing with IP Group "IP PBX"
(peer) and sends the recorded media to IP Group "SRS-1". SRS redundancy has also
been configured, where IP Group "SRS-1" is the active SRS and IP Group "SRS-2"
the standby SRS.
3. Configure a SIP recording rule according to the parameters described in the table
below.
4. Click Apply, and then save your settings to flash memory.
Table 15-6: SIP Recording Rules Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table record.
[SIPRecRouting_Index]
Recorded IP Group Defines the IP Group participating in the call and
the recording is done on the leg interfacing with this
Parameter Description
Peer Trunk Group ID Defines the peer Trunk Group that is participating
peer-trunk-group-id in the call (applicable only to Gateway calls). To
configure Trunk Groups, see Configuring Trunk
[SIPRecRouting_PeerTrunkGroupID]
Groups on page 501.
Caller Defines which calls to record according to which
caller party is the caller.
[SIPRecRouting_Caller] [0] Both = (Default) Caller can be peer or
recorded side
[1] Recorded Party (in Gateway, IP-to-Tel call)
[2] Peer Party (in Gateway, Tel-to-IP call)
Recording Server
Recording Server (SRS) IP Group Defines the IP Group of the recording server
srs-ip-group-name (SRS).
[SIPRecRouting_SRSIPGroupName] By default, no value is defined.
Note:
The parameter is mandatory.
The SIP Interface used for communicating with
the SRS is according to the SRD assigned to
the SRS IP Group (in the IP Groups table). If
Parameter Description
415), click New, and then configure a Message Condition rule with the following
properties:
• 'Index': 0
• 'Name': CallRec
• 'Condition': srctags == 'record'
4. In the SIP Recording Rules table, configure a SIP Recording rule as desired and
assign it the Message Condition rule that you configured in the previous step:
• 'Recorded IP Group': ITSP
• 'Condition': CallRec
2. In the 'Recording Server (SRS) Destination Username' field, enter a user part value
(string of up to 50 characters).
3. Click Apply.
15.2.5.1 Genesys
The device's SIP-based media recording can interwork with Genesys' equipment. Genesys
sends its proprietary X-Genesys-CallUUID header (which identifies the session) in the first
SIP message, typically in the INVITE and the first 18x response. If the device receives a
SIP message with Genesys SIP header, it adds the header's information to AudioCodes'
proprietary tag in the XML metadata of the SIP INVITE that it sends to the recording server,
as shown below:
<ac:GenesysUUID
xmlns="urn:ietf:params:xml:ns:Genesys">4BOKLLA3VH66JF112M1CC9VHKS1
4F0KP</ac:GenesysUUID>
No configuration is required for this support.
records between different systems and identifies sessions. Avaya generates this in
outgoing calls. If the device receives a SIP INVITE from Avaya, it adds the UCID value,
received in the User-to-User SIP header to AudioCodes' proprietary tag in the XML
metadata of the SIP INVITE that it sends to the recording server. For example, if the
received SIP header is:
User-to-User: 00FA080019001038F725B3;encoding=hex
the device includes the following in the XML metadata:
xml metadata:
<ac:AvayaUCID xmlns="urn:ietf:params:xml:ns:Avaya">
FA080019001038F725B3</ac:AvayaUCID>
Note: For calls sent from the device to Avaya equipment, the device can generate the
Avaya UCID, if required. To configure this support, use the following parameters:
• 'UUI Format' in the IP Groups table - enables Avaya support.
• 'Network Node ID' - defines the Network Node Identifier of the device for Avaya
UCID.
To enable RADIUS:
1. Open the Authentication Server page (Setup menu > Administration tab > Web &
CLI folder > Authentication Server).
Figure 15-9: Enabling RADIUS
2. Under the RADIUS group, from the 'Enable RADIUS Access Control' drop-down list,
select Enable.
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
When multiple RADIUS servers are configured, RADIUS server redundancy can be
implemented. When the primary RADIUS server is down, the device sends a RADIUS
request twice (one retransmission) and if both fail (i.e., no response), the device considers
the server as down and attempts to send requests to the next server. The device continues
sending RADIUS requests to the redundant RADIUS server even if the primary server
returns to service later on. However, if a device reset occurs or a switchover occurs in a
High-Availability (HA) system, the device sends RADIUS requests to the primary RADIUS
server. By default, the device waits for up to two seconds (i.e., timeout) for a response from
the RADIUS server for RADIUS requests and retransmission before it considers the server
as down.
For each RADIUS server, the IP address, port, and shared secret can be configured. Each
RADIUS server can be defined for RADIUS-based login authentication and/or RADIUS-
based accounting. By setting the relevant port (authentication or accounting) to "0" disables
the corresponding functionality. If both ports are configured, the RADIUS server is used for
authentication and accounting. All servers configured with non-zero Authorization ports
form an Authorization redundancy group and the device sends authorization requests to
one of them, depending on their availability. All servers configured with non-zero
Accounting ports form an Accounting redundancy group and the device sends accounting
CDRs to one of them, depending on their availability. Below are example configurations:
Only one RADIUS server is configured and used for authorization and accounting
purposes (no redundancy). Therefore, both the Authorization and Accounting ports are
defined.
Three RADIUS servers are configured:
• Two servers are used for authorization purposes only, providing redundancy.
Therefore, only the Authorization ports are defined, while the Accounting ports
are set to 0.
• One server is used for accounting purposes only (i.e., no redundancy). Therefore,
only the Accounting port is defined, while the Authorization port is set to 0.
Two RADIUS servers are configured and used for authorization and accounting
purposes, providing redundancy. Therefore, both the Authorization and Accounting
ports are defined.
The status of the RADIUS severs can be viewed through CLI:
# show system radius servers status
The example below shows the status of two RADIUS servers in redundancy mode for
authorization and accounting:
servers 0
ip-address 10.4.4.203
auth-port 1812
auth-ha-state "ACTIVE"
acc-port 1813
acc-ha-state "ACTIVE"
servers 1
ip-address 10.4.4.202
auth-port 1812
auth-ha-state "STANDBY"
acc-port 1813
acc-ha-state "STANDBY"
Where auth-ha-state and acc-ha-state display the authentication and accounting
redundancy status respectively. "ACTIVE" means that the server was used for the last sent
authentication or accounting request; "STANDBY" means that the server was not used in
the last sent request.
The following procedure describes how to configure a RADIUS server through the Web
interface. You can also configure it through ini file (RadiusServers) or CLI configure system
> radius servers).
Note:
• To enable and configure RADIUS-based accounting, see 'Configuring RADIUS
Accounting' on page 913.
• The device can send up to 201 concurrent RADIUS requests per RADIUS service
type (Accounting or Authentication), per RADIUS server (up to three servers per
service type), and per local port (up to 1 local port).
3. Configure a RADIUS server according to the parameters described in the table below.
4. Click Apply.
Table 15-7: RADIUS Servers Table Parameter Descriptions
Parameter Description
Parameter Description
[RadiusServers_AccountingPort] is used by the device for RADIUS-based accounting (CDR).
When set to 0, RADIUS-based accounting is not implemented.
The valid value is 0 to any integer. The default is 1646.
Shared Secret Defines the shared secret (password) for authenticating the
shared-secret device with the RADIUS server. This should be a cryptically
strong password. The shared secret is also used by the
[RadiusServers_SharedSecret]
RADIUS server to verify the authentication of the RADIUS
messages sent by the device (i.e., message integrity).
The valid value is up to 48 characters. By default, no value is
defined.
Note: If you configure the parameter to Control, make sure that only one Control
interface is configured in the IP Interfaces table (see 'Configuring IP Network
Interfaces' on page 141); otherwise, RADIUS communication fails.
Note: The Vendor ID must be the same as the Vendor ID set on the third-party
RADIUS server. See the example for setting up a third-party RADIUS server in
'Setting Up a Third-Party RADIUS Server' on page 243.
2. Under the RADIUS group, in the 'RADIUS VSA Vendor ID' field, enter the same
vendor ID number as set on the third-party RADIUS server.
3. Click Apply.
When RADIUS authentication is used, the RADIUS server stores the user accounts -
usernames, passwords, and access levels (authorization). When a management user
(client) tries to access the device, the device sends the RADIUS server the user's
username and password for authentication. The RADIUS server replies with an acceptance
or a rejection notification. During the RADIUS authentication process, the device’s Web
interface is blocked until an acceptance response is received from the RADIUS server.
Communication between the device and the RADIUS server is done using a shared secret,
which is not transmitted over the network.
Figure 15-13: RADIUS Login Authentication for Management
#
client 10.31.4.47 {
secret = FutureRADIUS
shortname = audc_device
}
2. If access levels are required, set up a Vendor-Specific Attributes (VSA) dictionary for
the RADIUS server and select an attribute ID that represents each user's access level.
The example below shows a dictionary file for FreeRADIUS that defines the attribute
"ACL-Auth-Level" with "ID=35". For the device's user access levels and their
corresponding numeric representation in RADIUS servers, see 'Configuring
Management User Accounts' on page 75.
#
# AudioCodes VSA dictionary
#
VENDOR AudioCodes 5003
ATTRIBUTE ACL-Auth-Level 35 integer AudioCodes
VALUE ACL-Auth-Level ACL-Auth-UserLevel 50
VALUE ACL-Auth-Level ACL-Auth-AdminLevel 100
VALUE ACL-Auth-Level ACL-Auth-SecurityAdminLevel 200
3. Define the list of users authorized to use the device, using one of the password
authentication methods supported by the server implementation. The example below
shows a user configuration file for FreeRADIUS using a plain-text password:
# users - local user configuration database
• If the RADIUS server response does not include the access level attribute:
In the 'Default Access Level' field, enter the default access level that is applied to
all users authenticated by the RADIUS server.
Figure 15-16: Configuring Default Access Level
5. Configure when the Local Users table must be used to authenticate login users. From
the 'Use Local Users Database' drop-down list, select one of the following:
• When No Auth Server Defined (default): When no RADIUS server is configured
or if a server is configured but connectivity with the server is down (if the server is
up, the device authenticates the user with the server).
• Always: First attempts to authenticate the user using the Local Users table, but if
not found, it authenticates the user with the RADIUS server.
Figure 15-18: Local Users Table for Login Authentication
6. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
must be returned to the device must also be configured. For more information on
configuring these attributes and search filters, see 'AD-based Routing for Microsoft
Skype for Business' on page 267.
The device can store recent LDAP queries and responses in its local cache. The
cache is used for subsequent queries and/or in case of LDAP server failure. For more
information, see 'Configuring the Device's LDAP Cache' on page 258.
If connection with the LDAP server disconnects (broken), the device sends the SNMP
alarm, acLDAPLostConnection. Upon successful reconnection, the alarm clears. If
connection with the LDAP server is disrupted during the search, all search requests
are dropped and an alarm indicating a failed status is sent to client applications.
Management-related LDAP Queries: LDAP can be used for authenticating and
authorizing management users (Web and CLI) and is based on the user's login
username and password (credentials) when attempting login to one of the device's
management platforms. When configuring the login username (LDAP Bind DN) and
password (LDAP Password) to send to the LDAP server, you can use templates
based on the dollar ($) sign, which the device replaces with the actual username and
password entered by the user during the login attempt. You can also configure the
device to send the username and password in clear-text format or encrypted using
TLS (SSL).
The device connects to the LDAP server (i.e., an LDAP session is created) only when
a login attempt occurs. The LDAP Bind operation establishes the authentication of the
user based on the username-password combination. The server typically checks the
password against the userPassword attribute in the named entry. A successful Bind
operation indicates that the username-password combination is correct; a failed Bind
operation indicates that the username-password combination is incorrect.
Once the user is successfully authenticated, the established LDAP session may be
used for further LDAP queries to determine the user's management access level and
privileges (Operator, Admin, or Security Admin). This is known as the user
authorization stage. To determine the access level, the device searches the LDAP
directory for groups of which the user is a member, for example:
CN=\# Support Dept,OU=R&D
Groups,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,DC=com
CN=\#AllCellular,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=a
bc,DC=com
The device then assigns the user the access level configured for that group (in
'Configuring Access Level per Management Groups Attributes' on page 256). The
location in the directory where you want to search for the user's member group(s) is
configured using the following:
• Search base object (distinguished name or DN, e.g.,
"ou=ABC,dc=corp,dc=abc,dc=com"), which defines the location in the directory
from where the LDAP search begins and is configured in 'Configuring LDAP DNs
(Base Paths) per LDAP Server' on page 254.
• Search filter, for example, (&(objectClass=person)(sAMAccountName=JohnD)),
which filters the search in the subtree to include only the specific username. The
search filter can be configured with the dollar ($) sign to represent the username,
for example, (sAMAccountName=$). To configure the search filter, see
'Configuring the LDAP Search Filter Attribute' on page 255.
• Management attribute (e.g., memberOf), from where objects that match the
search filter criteria are returned. This shows the user's member groups. The
attribute is configured in the LDAP Servers table (see 'Configuring LDAP Servers'
on page 251).
If the device finds a group, it assigns the user the corresponding access level and
permits login; otherwise, login is denied. Once the LDAP response has been received
(success or failure), the device ends the LDAP session.
For both of the previously discussed LDAP services, the following additional LDAP
functionality is supported:
Search method for searching DN object records between LDAP servers and within
each LDAP server (see Configuring LDAP Search Methods).
Default access level that is assigned to the user if the queried response does not
contain an access level.
Local Users table for authenticating users instead of the LDAP server (for example,
when a communication problem occurs with the server). For more information, see
'Configuring Local Database for Management User Authentication' on page 262.
To enable LDAP:
1. Open the LDAP Settings page (Setup menu > IP Network tab > RADIUS & LDAP
folder > LDAP Settings).
Figure 15-19: Enabling LDAP
2. Under the LDAP group, from the 'Use LDAP for Web/Telnet Login' drop-down list,
select Enable.
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
servers are assigned to LDAP Server Groups in the LDAP Servers table (see 'Configuring
LDAP Servers' on page 251). To use a configured LDAP server, you must assign it to an
LDAP Server Group.
To use an LDAP server for call routing, you must configure its' LDAP Server Group as
"Control" type, and then assign the LDAP Server Group to a Routing Policy. The Routing
Policy in turn, needs to be assigned to the relevant routing rule(s). A Routing Policy can be
assigned only one LDAP Server Group. Therefore, for multi-tenant deployments where
multiple Routing Policies are employed, each tenant can be assigned a specific LDAP
Server Group through its unique Routing Policy.
To use an LDAP server for management user login authentication and authorization, you
must configure its' LDAP Server Group as "Management" type. Additional LDAP-based
management parameters need to be configured, as described in 'Enabling LDAP-based
Web/CLI User Login Authentication and Authorization' on page 248 and 'Configuring LDAP
Servers' on page 251.
The following procedure describes how to configure an LDAP Server Group through the
Web interface. You can also configure it through ini file (LDAPServerGroups) or CLI
(configure system > ldap ldap-server-groups).
3. Configure an LDAP Server Group according to the parameters described in the table
below.
4. Click Apply.
Table 15-8: LDAP Server Groups Table Parameter Descriptions
Parameter Description
General
Parameter Description
Name Defines a descriptive name, which is used when associating the row in
name other tables.
[LdapServerGroups_Name] The valid value is a string of up to 20 characters.
Note: Each row must be configured with a unique name.
Type Defines whether the servers in the group are used for SIP-related
server-type LDAP queries (Control) or management login authentication-related
LDAP queries (Management).
[LdapServerGroups_ServerT
ype] [0] Control (Default)
[1] Management
Note: Only one LDAP Server Group can be defined for management.
Server Search Method Defines the method for querying between the two LDAP servers in the
server-search-method group.
[LdapServerGroups_Search [0] Parallel = (Default) The device queries the LDAP servers at the
Method] same time.
[1] Sequential = The device first queries one of the LDAP servers
and if the DN object is not found or the search fails, it queries the
second LDAP server.
DN Search Method Defines the method for querying the Distinguished Name (DN) objects
search-dn-method within each LDAP server.
[LdapServerGroups_Search [0] Sequential = (Default) The query is done in each DN object, one
DnsMethod] by one, until a result is returned. For example, a search for the DN
object record "JohnD" is first run in DN object "Marketing" and if a
result is not found, it searches in "Sales", and if not found, it
searches in "Administration", and so on.
[1] Parallel = The query is done in all DN objects at the same time.
For example, a search for the DN object record "JohnD" is done at
the same time in the "Marketing", "Sales" and "Administration" DN
objects.
Cache
Cache Entry Timeout Defines the duration (in minutes) that an entry in the device's LDAP
cache-entry-timeout cache is valid. If the timeout expires, the cached entry is used only if
there is no connectivity with the LDAP server.
[LdapServersGroups_Cache
EntryTimeout] The valid range is 0 to 35791. The default is 1200. If set to 0, the
LDAP entry is always valid.
Cache Entry Removal Defines the duration (in hours) after which the LDAP entry is deleted
Timeout from the device's LDAP cache.
cache-entry-removal- The valid range is 0 to 596. The default is 0 (i.e., the entry is never
timeout deleted).
[LdapServerGroups_CacheE
ntryRemovalTimeout]
Note: When you configure an LDAP server, you need to assign it an LDAP Server
Group. Therefore, before you can configure an LDAP server in the table, you must
first configure at least one LDAP Server Group in the LDAP Server Groups table (see
'Configuring LDAP Server Groups' on page 248).
3. Configure an LDAP server according to the parameters described in the table below.
4. Click Apply.
Table 15-9: LDAP Servers Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
Parameter Description
[LdapConfiguration_Index] Note: Each row must be configured with a unique index.
LDAP Servers Group Assigns the LDAP server to an LDAP Server Group, configured in
server-group the LDAP Server Groups table (see 'Configuring LDAP Server
Groups' on page 248).
[LdapConfiguration_Group]
Note:
The parameter is mandatory and must be set before configuring
the other parameters in the table.
Up to two LDAP servers can be assigned to the same LDAP
Server Group.
LDAP Network Interface Assigns one of the device's IP network interfaces through which
interface-type communication with the LDAP server is done.
[LdapConfiguration_Interface] By default, no value is defined and the device uses the OAMP
network interface, configured in the IP Interfaces table.
To configure IP network interfaces, see 'Configuring IP Network
Interfaces' on page 141.
Note: The parameter is mandatory.
Use TLS Enables the device to encrypt the username and password (for
use-tls Control and Management related queries) using TLS when sending
them to the LDAP server.
[LdapConfiguration_useTLS]
[0] No = (Default) Username and password are sent in clear-text
format.
[1] Yes
TLS Context Assigns a TLS Context for the connection with the LDAP server.
tls-context By default, no value is defined and the device uses the default TLS
[LdapConfiguration_ContextN Context (ID 0).
ame] To configure TLS Contexts, see 'Configuring TLS Certificate
Contexts' on page 109.
Note: The parameter is applicable only if the 'Use TLS' parameter is
configured to Yes.
Connection
LDAP Server IP Defines the IP address of the LDAP server (in dotted-decimal
server-ip notation, e.g., 192.10.1.255).
[LdapConfiguration_LdapConf By default, no IP address is defined.
ServerIp] Note:
The parameter is mandatory.
If you want to use an FQDN for the LDAP server, leave the
parameter undefined and configure the FQDN in the 'LDAP
Server Domain Name' parameter (see below).
LDAP Server Port Defines the port number of the LDAP server.
server-port The valid value range is 0 to 65535. The default port number is 389.
[LdapConfiguration_LdapConf
ServerPort]
LDAP Server Max Respond Defines the duration (in msec) that the device waits for LDAP server
Time responses.
max-respond-time The valid value range is 0 to 86400. The default is 3000.
[LdapConfiguration_LdapConf Note: If the response time expires, you can configure the device to
ServerMaxRespondTime] use the Local Users table for authenticating the user. For more
Parameter Description
information, see 'Configuring Local Database for Management User
Authentication' on page 262.
LDAP Server Domain Name Defines the domain name (FQDN) of the LDAP server. The device
domain-name tries to connect to the LDAP server according to the IP address listed
in the received DNS query. If there is no connection to the LDAP
[LdapConfiguration_LdapConf
server or the connection to the LDAP server fails, the device tries to
ServerDomainName]
connect to the LDAP server with the next IP address in the DNS
query list.
Note: If the 'LDAP Server IP' parameter is configured, the 'LDAP
Server Domain Name' parameter is ignored. Thus, if you want to use
an FQDN, leave the 'LDAP Server IP' parameter undefined.
Verify Certificate Enables certificate verification when the connection with the LDAP
verify-certificate server uses TLS.
[LdapConfiguration_VerifyCert [0] No = (Default) No certificate verification is done.
ificate] [1] Yes = The device verifies the authentication of the certificate
received from the LDAP server. The device authenticates the
certificate against the trusted root certificate store associated with
the associated TLS Context (see 'TLS Context' parameter above)
and if ok, allows communication with the LDAP server. If
authentication fails, the device denies communication (i.e.,
handshake fails). The device can also authenticate the certificate
by querying with an Online Certificate Status Protocol (OCSP)
server whether the certificate has been revoked. This is also
configured for the associated TLS Context.
Note: The parameter is applicable only if the 'Use TLS' parameter is
configured to Yes.
Connection Status (Read-only) Displays the connection status with the LDAP server.
connection-status "Not Applicable"
[LdapConfiguration_Connectio "LDAP Connection Broken"
nStatus] "Connecting"
"Connected"
For more information about a disconnected LDAP connection, see
your Syslog messages generated by the device.
Query
LDAP Password Defines the user password for accessing the LDAP server during
password connection and binding operations.
[LdapConfiguration_LdapConf LDAP-based SIP queries: The parameter is the password used
Password] by the device to authenticate itself, as a client, to obtain LDAP
service from the LDAP server.
LDAP-based user login authentication: The parameter represents
the login password entered by the user during a login attempt.
You can use the $ (dollar) sign in this value to enable the device
to automatically replace the $ sign with the user's login password
in the search filter, which it sends to the LDAP server for
authenticating the user's username-password combination. For
example, $.
Note:
The parameter is mandatory.
Parameter Description
By default, the device sends the password in clear-text format.
You can enable the device to encrypt the password using TLS
(see the 'Use SSL' parameter below).
LDAP Bind DN Defines the LDAP server's bind Distinguished Name (DN) or
bind-dn username.
[LdapConfiguration_LdapConf LDAP-based SIP queries: The DN is used as the username
BindDn] during connection and binding to the LDAP server. The DN is
used to uniquely name an AD object. Below are example
parameter settings:
cn=administrator,cn=Users,dc=domain,dc=com
administrator@domain.com
domain\administrator
LDAP-based user login authentication: The parameter represents
the login username entered by the user during a login attempt.
You can use the $ (dollar) sign in this value to enable the device
to automatically replace the $ sign with the user's login username
in the search filter, which it sends to the LDAP server for
authenticating the user's username-password combination. An
example configuration for the parameter is $@sales.local, where
the device replaces the $ with the entered username, for
example, JohnD@sales.local. The username can also be
configured with the domain name of the LDAP server.
Note: By default, the device sends the username in clear-text format.
You can enable the device to encrypt the username using TLS (see
the 'Use SSL' parameter below).
Management Attribute Defines the LDAP attribute name to query, which contains a list of
mgmt-attr groups to which the user is a member. For Active Directory, this
attribute is typically "memberOf". The attribute's values (groups) are
[LdapConfiguration_MngmAut
used to determine the user's management access level; the group's
hAtt]
corresponding access level is configured in 'Configuring Access
Level per Management Groups Attributes' on page 256.
Note:
The parameter is applicable only to LDAP-based login
authentication and authorization (i.e., the 'Type' parameter is set
to Management).
If this functionality is not used, the device assigns the user the
configured default access level. For more information, see
'Configuring Access Level per Management Groups Attributes' on
page 256.
4. Configure an LDAP DN base path according to the parameters described in the table
below.
5. Click Apply, and then save your settings to flash memory.
Table 15-10: LDAP Server Search Base DN Table Parameter Descriptions
Parameter Description
Note:
• The search filter is applicable only to LDAP-based login authentication and
authorization queries.
• The search filter is a global setting that applies to all LDAP-based login
authentication and authorization queries, across all configured LDAP servers.
3. Click Apply.
Note:
• The Management LDAP Groups table is applicable only to LDAP-based login
authentication and authorization queries.
• If the LDAP response received by the device includes multiple groups of which the
user is a member and you have configured different access levels for some of
these groups, the device assigns the user the highest access level. For example, if
the user is a member of two groups where one has access level "Monitor" and the
other "Administrator", the device assigns the user the "Administrator" access level.
• When the access level is unknown, the device assigns the default access level to
the user, configured by the 'Default Access Level' parameter as used also for
RADIUS (see 'Configuring RADIUS-based User Authentication' on page 244). This
can occur in the following scenarios:
√ The user is not a member of any group.
√ The group of which the user is a member is not configured on the device (as
described in this section).
√ The device is not configured to query the LDAP server for a management
attribute (see 'Configuring LDAP Servers' on page 251).
Group objects represent groups in the LDAP server of which the user is a member. The
access level represents the user account's permissions and rights in the device's
management interface (e.g., Web and CLI). The access level can either be Monitor,
Administrator, or Security Administrator. For an explanation on the privileges of each level,
see 'Configuring Management User Accounts' on page 75.
When the username-password authentication with the LDAP server succeeds, the device
searches the LDAP server for all groups of which the user is a member. The LDAP query is
based on the following LDAP data structure:
Search base object (distinguished name or DN, e.g.,
"ou=ABC,dc=corp,dc=abc,dc=com"), which defines the location in the directory from
which the LDAP search begins. This is configured in 'Configuring LDAP DNs (Base
Paths) per LDAP Server' on page 254.
Filter (e.g., "(&(objectClass=person)(sAMAccountName=johnd))"), which filters the
search in the subtree to include only the login username (and excludes others). For
configuration, see 'Configuring the LDAP Search Filter Attribute' on page 255.
Attribute (e.g., "memberOf") to return from objects that match the filter criteria. This
attribute is configured by the 'Management Attribute' parameter in the LDAP Servers
table.
The LDAP response includes all the groups of which the specific user is a member, for
example:
CN=\# Support Dept,OU=R&D
Groups,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,DC=com
CN=\#AllCellular,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,D
C=com
The device searches this LDAP response for the group names that you configured in the
Management LDAP Groups table in order to determine the user's access level. If the
device finds a group name, the user is assigned the corresponding access level and login
is permitted; otherwise, login is denied. Once the LDAP response has been received
(success or failure), the LDAP session terminates.
The following procedure describes how to configure an access level per management
groups through the Web interface. You can also configure it through ini file
(MgmntLDAPGroups) or CLI (configure system > ldap mgmt-ldap-groups).
Parameter Description
isolation)
The handling of LDAP queries using the device's LDAP cache is shown in the flowchart
below:
Figure 15-26: LDAP Query Process with Local LDAP Cache
If an LDAP query is required for an Attribute of a key that is already cached with that same
Attribute, instead of sending a query to the LDAP server, the device uses the cache.
However, if an LDAP query is required for an Attribute that does not appear for the cached
key, the device queries the LDAP server and then saves the new Attribute (and response)
in the cache for that key. When the device queries new Attributes for a cached key, the
device also includes already cached Attributes of the key, while adhering to the maximum
number of allowed saved Attributes (see note below), with preference to the new Attributes.
In other words, if the cached key already contains the maximum Attributes and an LDAP
query is required for a new Attribute, the device sends an LDAP query to the server for the
new Attribute and for the five most recent Attributes already cached with the key. Upon the
LDAP response, the new Attribute replaces the oldest cached Attribute while the values of
the other Attributes are refreshed with the new response. The following table shows an
example of different scenarios of LDAP queries of a cached key whose cached Attributes
include a, b , c, and d, where a is the oldest and d the most recent Attribute:
Table 15-12: Example of LDAP Query for Cached Attributes
Attributes Requested in New Attributes Sent in LDAP Query Attributes Saved in Cache after
LDAP Query for Cached Key to LDAP Server LDAP Response
e e, a, b, c, d e, a, b, c, d
e, f e, f, a, b, c, d e, f, a, b, c, d
e, f, g, h, i e, f, g, h,i, a e, f, g, h,i, a
e, f, g, h, i, j e, f, g, h, i, j e, f, g, h, i, j
Note:
• The LDAP Cache feature is applicable only to LDAP-based SIP queries (Control).
• The maximum LDAP cache size is 10,000 entries.
• The device can save up to six LDAP Attributes in the cache per user (search
LDAP key).
• The device also saves in the cache queried Attributes that do not have any values
in the LDAP server.
The following procedure describes how to configure the device's LDAP cache through the
Web interface. For a full description of the cache parameters, see 'LDAP Parameters' on
page 1202.
For example, assume the cache contains a previously queried LDAP Attribute
"telephoneNumber=1004" whose associated Attributes include "displayName", "mobile"
and "ipPhone". If you perform a cache refresh based on the search key
"telephoneNumber=1004", the device sends an LDAP query to the server requesting
values for the "displayName", "mobile" and "ipPhone" Attributes of this search key. When
the device receives the LDAP response, it replaces the old values in the cache with the
new values received in the LDAP response.
Figure 15-28: LDAP Cache Refresh Flowchart
Note:
• This feature is applicable to LDAP and RADIUS.
• This feature is applicable only to user management authentication.
b. Configure whether the Local Users table must be used to authenticate login users
upon connection timeout with the server. From the 'Behavior upon Authentication
Server Timeout' drop-down list, select one of the following:
♦ Deny Access: User is denied access to the management platform.
♦ Verify Access Locally (default): The device verifies the user's credentials
in the Local Users table.
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Management Attribute: memberOf. The attribute contains the member groups of the
user:
Figure 15-33: User's memberOf Attribute
Management Group: mySecAdmin. The group to which the user belongs, as listed
under the memberOf attribute:
Figure 15-34: User's mySecAdmin Group in memberOf Management Attribute
The configuration to match the above LDAP data structure schema is as follows:
LDAP-based login authentication (management) is enabled in the LDAP Server
Groups table (see 'Configuring LDAP Server Groups' on page 248):
Figure 15-35: Configuring LDAP Server Group for Management
The DN is configured in the LDAP Server Search Base DN table (see 'Configuring
LDAP DNs (Base Paths) per LDAP Server' on page 254):
Figure 15-36: Configuring DN
The management group and its corresponding access level is configured in the
Management LDAP Groups table (see 'Configuring Access Level per Management
Groups Attributes' on page 256):
Figure 15-39: Configuring Management Group Attributes for Determining Access Level
Skype for Business client - users connected to Skype for Business through the
Mediation Server
PBX or IP PBX - users not yet migrated to Skype for Business
Mobile - mobile number
Private - private telephone line for Skype for Business users (in addition to the primary
telephone line)
The process for querying the AD and subsequent routing based on the query results is as
follows:
1. If the Primary Key is configured, it uses the defined string as a primary key instead of
the one defined in MSLDAPPBXNumAttributeName. It requests the attributes which
are described below.
2. If the primary query is not found in the AD and the Secondary Key is configured, it
does a second query for the destination number using a second AD attribute key
name, configured by the MSLDAPSecondaryKey parameter.
3. If none of the queries are successful, it routes the call to the original dialed destination
number according to the routing rule matching the "LDAP_ERR" destination prefix
number value, or rejects the call with a SIP 404 "Not Found" response.
4. For each query (primary or secondary), it queries the following attributes (if
configured):
• MSLDAPPBXNumAttributeName
• MSLDAPOCSNumAttributeName
• MSLDAPMobileNumAttributeName
In addition, it queries the special attribute defined in
MSLDAPPrivateNumAttributeName, only if the query key (primary or secondary) is
equal to its value.
5. If the query is found: The AD returns up to four attributes - Skype for Business, PBX /
IP PBX, private (only if it equals Primary or Secondary key), and mobile.
6. The device adds unique prefix keywords to the query results in order to identify the
query type (i.e., IP domain). These prefixes are used as the prefix destination number
value in the Tel-to-IP Routing table to denote the IP domains:
• "PRIVATE" (PRIVATE:<private_number>): used to match a routing rule based on
query results of the private number (MSLDAPPrivateNumAttributeName)
• "OCS" (OCS:<Skype for Business_number>): used to match a routing rule based
on query results of the Skype for Business client number
(MSLDAPOCSNumAttributeName)
• "PBX" (PBX:<PBX_number>): used to match a routing rule based on query
results of the PBX / IP PBX number (MSLDAPPBXNumAttributeName)
• "MOBILE" (MOBILE:<mobile_number>): used to match a routing rule based on
query results of the mobile number (MSLDAPMobileNumAttributeName)
• "LDAP_ERR": used to match a routing rule based on a failed query result when
no attribute is found in the AD
Note: These prefixes are involved only in the routing and manipulation processes;
they are not used as the final destination number.
7. The device uses the Tel-to-IP Routing table to route the call based on the LDAP query
result. The device routes the call according to the following priority:
1. Private line: If the query is done for the private attribute and it's found, the device
routes the call according to this attribute.
2. Mediation Server SIP address (Skype for Business): If the private attribute
does not exist or is not queried, the device routes the call to the Mediation Server
(which then routes the call to the Skype for Business client).
3. PBX / IP PBX: If the Skype for Business client is not found in the AD, it routes the
call to the PBX / IP PBX.
4. Mobile number: If the Skype for Business client (or Mediation Server) is
unavailable (e.g., SIP response 404 "Not Found" upon INVITE sent to Skype for
Business client), and the PBX / IP PBX is also unavailable, the device routes the
call to the user's mobile number (if exists in the AD).
5. Alternative route: If the call routing to all the above fails (e.g., due to unavailable
destination - call busy), the device can route the call to an alternative destination
if an alternative routing rule is configured.
6. "Redundant" route: If the query failed (i.e., no attribute found in the AD), the
device uses the routing rule matching the "LDAP_ERR" prefix destination number
value.
Note: For Enterprises implementing a PBX / IP PBX system, but yet to migrate to
Skype for Business, if the PBX / IP PBX system is unavailable or has failed, the
device uses the AD query result for the user’s mobile phone number, routing the call
through the PSTN to the mobile destination.
The flowchart below summarizes the device's process for querying the AD and routing the
call based on the query results:
Figure 15-40: Querying AD in Skype for Business Environment
Note: If you are using the device's local LDAP cache, see 'Configuring the Device's
LDAP Cache' on page 258 for the LDAP query process.
b. Configure query-result routing rules for each IP domain (private, PBX / IP PBX,
Skype for Business clients, and mobile), using the LDAP keywords (case-
sensitive) in the Destination Username Prefix field:
♦ PRIVATE: Private number
♦ OCS: Skype for Business client number
♦ PBX: PBX / IP PBX number
♦ MOBILE: Mobile number
♦ LDAP_ERR: LDAP query failure
c. Configure a routing rule for routing the initial call (LDAP query) to the LDAP
server, by setting the 'Destination Type' field to LDAP for denoting the IP address
of the LDAP server.
d. For alternative routing, enable the alternative routing mechanism and configure
corresponding SIP reasons for alternative routing. For this feature, alternative
routing starts from the table row located under the LDAP query row.
The table below shows an example for configuring AD-based Tel-to-IP routing rules in the
Tel-to-IP Routing table:
Table 15-14: AD-Based Tel-to-IP Routing Rule Configuration Examples
1 PRIVATE: 10.33.45.60
2 PBX: 10.33.45.65
3 OCS: 10.33.45.68
4 MOBILE: 10.33.45.100
5 LDAP_ERR 10.33.45.80
6 * LDAP
7 * 10.33.45.72
The table below shows an example for configuring AD-based SBC routing rules in the IP-
to-IP Routing Table:
Table 15-15: AD-Based SBC IP-to-IP Routing Rule Configuration Examples
PBX attribute.
Rule 3: Sends call to Skype for Business client (i.e., Mediation Server at 10.33.45.68)
upon successful AD query result for the Skype for Business attribute.
Rule 4: Sends call to user's mobile phone number (to PSTN through the device's IP
address at 10.33.45.100) upon successful AD query result for the Mobile attribute.
Rule 5: Sends call to IP address of device (10.33.45.80) if AD query failure (e.g., no
response from LDAP server or attribute not found).
Rule 6: Sends query for original destination number of received call to the LDAP
server.
Rule 7: Alternative routing rule that sends the call of original dialed number to IP
destination 10.33.45.72. This rule is applied in any of the following cases
• LDAP functionality is disabled.
• LDAP query is successful but call fails (due to, for example, busy line) to all the
relevant attribute destinations (private, Skype for Business, PBX, and mobile),
and a relevant Tel-to-IP Release Reason (see Alternative Routing for Tel-to-IP
Calls on page 525) or SBC Alternative Routing Reason (see Configuring SIP
Response Codes for Alternative Routing Reasons on page 654) has been
configured.
Once the device receives the original incoming call, the first rule that it uses is Rule 6,
which queries the AD server. When the AD replies, the device searches the table, from the
first rule down, for the matching destination phone prefix (i.e., "PRIVATE:, "PBX:", "OCS:",
"MOBILE:", and "LDAP_ERR:"), and then sends the call to the appropriate destination.
Note:
• The Calling Name Manipulation for Tel-to-IP Calls table uses the numbers before
manipulation, as inputs.
• The LDAP query uses the calling number after source number manipulation, as
the search key value.
• The feature is applicable only to the Gateway application.
15.5.1 Overview
The LCR feature enables the device to choose the outbound IP destination routing rule
based on lowest call cost. This is useful in that it enables service providers to optimize
routing costs for customers. For example, you may wish to define different call costs for
local and international calls or different call costs for weekends and weekdays (specifying
even the time of call). The device sends the calculated cost of the call to a Syslog server
(as Information messages), thereby enabling billing by third-party vendors.
LCR is implemented by defining Cost Groups and assigning them to routing rules in the
Tel-to-IP Routing table (Gateway calls) or IP-to-IP Routing table (SBC calls). The device
searches the routing table for matching routing rules and then selects the rule with the
lowest call cost. If two routing rules have identical costs, the rule appearing higher up in the
table is used (i.e., first-matched rule). If the selected route is unavailable, the device selects
the next least-cost routing rule.
Even if a matched routing rule is not assigned a Cost Group, the device can select it as the
preferred route over other matched rules that are assigned Cost Groups. This is
determined according to the settings of the 'Default Call Cost' parameter configured for the
Routing Policy (associated with the routing rule for SBC calls). To configure the Routing
Policy, see Configuring a Gateway Routing Policy Rule on page 523 (for Gateway) and
Configuring SBC Routing Policy Rules on page 656 (for SBC).
The Cost Group defines a fixed connection cost (connection cost) and a charge per minute
(minute cost). Cost Groups can also be configured with time segments (time bands), which
define connection cost and minute cost based on specific days of the week and time of day
(e.g., from Saturday through Sunday, between 6:00 and 18:00). If multiple time bands are
configured per Cost Group and a call spans multiple time bands, the call cost is calculated
using only the time band in which the call was initially established.
In addition to Cost Groups, the device can calculate the call cost using an optional, user-
defined average call duration value. The logic in using this option is that a Cost Group may
be cheap if the call duration is short, but due to its high minute cost, may prove very
expensive if the duration is lengthy. Thus, together with Cost Groups, the device can use
this option to determine least cost routing. The device calculates the Cost Group call cost
as follows:
Total Call Cost = Connection Cost + (Minute Cost * Average Call Duration)
The below table shows an example of call cost when taking into consideration call duration.
This example shows four defined Cost Groups and the total call cost if the average call
duration is 10 minutes:
Table 15-16: Call Cost Comparison between Cost Groups for different Call Durations
A 1 6 7 61
B 0 10 10 100
C 0.3 8 8.3 80.3
D 6 1 7 16
If four matching routing rules are located in the routing table and each one is assigned a
different Cost Group as listed in the table above, then the rule assigned Cost Group "D" is
selected. Note that for one minute, Cost Groups "A" and "D" are identical, but due to the
average call duration, Cost Group "D" is cheaper. Therefore, average call duration is an
important factor in determining the cheapest routing role.
Below are a few examples of how you can implement LCR:
Example 1: This example uses two different Cost Groups for routing local calls and
international calls:
Two Cost Groups are configured as shown below:
Cost Group Connection Cost Minute Cost
1. "Local Calls" 2 1
2. "International Calls" 6 3
The Cost Groups are assigned to routing rules for local and international calls:
Routing Index Dest Phone Prefix Destination IP Cost Group ID
1 2000 x.x.x.x 1 "Local Calls"
2 00 x.x.x.x 2 "International Calls"
Example 2: This example shows how the device determines the cheapest routing rule
in the Tel-to-IP Routing table:
The 'Default Call Cost' parameter in the Routing Policy rule is configured to Lowest
Cost, meaning that if the device locates other matching routing rules (with Cost
Groups assigned), the routing rule without a Cost Group is considered the lowest cost
route.
• The following Cost Groups are configured:
Cost Group Connection Cost Minute Cost
1. "A" 2 1
2. "B" 6 3
The device calculates the optimal route in the following index order: 3, 1, 2, and then
4, due to the following logic:
• Index 1 - Cost Group "A" has the lowest connection cost and minute cost
• Index 2 - Cost Group "B" takes precedence over Index 4 entry based on the first-
matched method rule
• Index 3 - no Cost Group is assigned, but as the 'Default Call Cost' parameter is
configured to Lowest Cost, it is selected as the cheapest route
• Index 4 - Cost Group "B" is only second-matched rule (Index 1 is the first)
Example 3: This example shows how the cost of a call is calculated if the call spans
over multiple time bands:
Assume a Cost Group, "CG Local" is configured with two time bands, as shown below:
Connection
Cost Group Time Band Start Time End Time Minute Cost
Cost
TB1 16:00 17:00 2 1
CG Local
TB2 17:00 18:00 7 2
Assume that the call duration is 10 minutes, occurring between 16:55 and 17:05. In
other words, the first 5 minutes occurs in time band "TB1" and the next 5 minutes
occurs in "TB2", as shown below:
Figure 15-42: LCR using Multiple Time Bands (Example)
The device calculates the call using the time band in which the call was initially
established, regardless of whether the call spans over additional time bands:
Total call cost = "TB1" Connection Cost + ("TB1" Minute Cost x call duration) = 2 + 1
x 10 min = 12
3. Configure Time Bands for a Cost Group - see 'Configuring Time Bands for Cost
Groups' on page 278.
4. Assign Cost Groups to outbound IP routing rules - see 'Assigning Cost Groups to
Routing Rules' on page 279.
3. Configure a Cost Group according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 15-17: Cost Groups Table Parameter Descriptions
Parameter Description
Parameter Description
Default Minute Cost Defines the call charge per minute for a call outside the
default-minute-cost time bands.
[CostGroupTable_DefaultMinuteCost] The valid value range is 0-65533. The default is 0.
Note: When calculating the cost of a call, if the current
time of the call is not within a time band configured for
the Cost Group, then this default charge per minute is
used.
Note:
• You cannot configure overlapping Time Bands.
• If a Time Band is not configured for a specific day and time range, the default
connection cost and default minute cost configured for the Cost Group in the Cost
Groups table is applied.
The following procedure describes how to configure Time Bands per Cost Group through
the Web interface. You can also configure it through ini file (CostGroupTimebands) or CLI
(configure voip > sip-definition least-cost-routing cost-group-time-bands).
4. Configure a Time Band according to the parameters described in the table below.
Parameter Description
Note: To debug remote Web services, see Debugging Web Services on page 945.
Note:
• You can configure only one Remote Web Service for each of the following server
types: Routing, Call Status, Topology Status, and QoS.
• The Routing service also includes the Call Status and Topology Status services.
• You can configure up to four Remote Web Services for Capture. However, the
Capture service is currently not supported.
• The device supports HTTP redirect responses (3xx) only during connection
establishment with the host. Upon receipt of a redirect response, the device
attempts to open a new socket with the host and if this is successful, closes the
current connection.
The following procedure describes how to configure Remote Web Services through the
Web interface. You can also configure it through ini file (HTTPRemoteServices) or CLI
(configure system > http-services > http-remote-services).
3. Configure a remote Web service according to the parameters described in the table
below.
4. Click Apply, and then save your settings to flash memory.
Table 15-19: Remote Web Services Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[HTTPRemoteServices_In
Parameter Description
dex] Note:
Each row must be configured with a unique index.
The parameter is mandatory.
Name Defines a descriptive name, which is used when associating the row in
rest-name other tables.
[HTTPRemoteServices_Na The valid value is a string of up to 40 characters.
me] Note:
Each row must be configured with a unique name.
The parameter is mandatory.
Type Defines the type of service provided by the HTTP remote host:
rest-message-type [0] Routing (default) = Routing service (also includes Call Status and
[HTTPRemoteServices_HT Topology Status).
TPType] [1] Call Status = Call status service.
[2] Topology Status = Topology status service (e.g., change in
configuration).
[3] Capture = Recording of signaling and RTP packets, which can be
sent to a remote host, for example, to a Syslog server or
AudioCodes OVOC.
[5] QoS = QoS-based call routing. For more information, see
Configuring QoS-Based Routing by Routing Server on page 290.
Note:
You can configure only one remote Web service for each of the
following service types: Routing, Call Status, Topology Status,
and QoS.
For the Topology Status option to be functional, you must enable
the functionality (see 'Enabling Topology Status Services' on page
286).
If you do no configure the parameter to QoS, the device sends QoS
reports to the Topology server.
The Routing option also includes the Call Status and Topology
Status services.
Currently, the Capture option is not supported.
Path Defines the path (prefix) to the REST APIs.
rest-path The valid value is a string of up to 80 characters. The default is "api".
[HTTPRemoteServices_Pa
th]
Status (Read-only) Displays the status of the host associated with the Web
http-service-state service.
[HTTPRemoteServices_Se "Connected": At least one of the hosts is connected.
rviceStatus] "Disconnected": All hosts are disconnected.
"Not In Service": Configuration of the service is invalid.
Connection
Policy Defines the mode of operation when you have configured multiple
http-policy remote hosts (in the HTTP Remote Hosts table) for a specific remote
Web service.
[HTTPRemoteServices_Po
licy] [0] Round Robin = (Default) Load balancing of traffic across all
configured hosts. Every consecutive message is sent to the next
available host.
Parameter Description
[1] Sticky Primary = Device always attempts to send traffic to the first
(primary) host. If the host does not respond, the device sends the
traffic to the next available host. If the primary host becomes
available again, the device sends the traffic to the primary host.
[2] Sticky Next = Similar to Sticky Primary, but if the primary host
does not respond, the device sends the traffic to the next available
host and continues sending traffic to this host even if the primary
host becomes available again.
Persistent Connection Defines whether the HTTP connection with the host remains open or is
http-persistent- only opened per request.
connection [0] Disable = Connection is not persistent and closes when the
[HTTPRemoteServices_Pe device detects inactivity. The device uses HTTP keep-alive
rsistentConnection] messages to detect inactivity.
[1] Enable = (Default) Connection remains open (persistent) even
during inactivity. The device uses HTTP keep-alive / HTTP persistent
connection messages to keep the connection open.
Number of Sockets Defines how many sockets (connection) are established per remote
http-num-sockets host.
[HTTPRemoteServices_Nu The valid value is 1 to 10. The default is 1.
mOfSockets]
Login
Login Needed Enables the use of proprietary REST API Login and Logout commands
http-login-needed for connecting to the remote host. The commands verify specific
information (e.g., software version) before allowing connectivity with the
[HTTPRemoteServices_Lo
device.
ginNeeded]
[0] Disable = Commands are not used.
[1] Enable (default)
Username Defines the username for HTTP authentication.
rest-user-name The valid value is a string of up to 80 characters. The default is "user".
[HTTPRemoteServices_Au
thUserName]
Password Defines the password for HTTP authentication.
rest-password The valid value is a string of up to 80 characters. The default is
[HTTPRemoteServices_Au "password".
thPassword]
Security
TLS Context Assigns a TLS Context for connection with the remote host.
rest-tls-context By default, no value is defined.
[HTTPRemoteServices_TL To configure TLS Contexts, see 'Configuring TLS Certificate Contexts'
SContext] on page 109.
Note: The parameter is applicable only if the connection is HTTPS.
Verify Certificate Enables certificate verification when connection with the host is based
rest-verify- on HTTPS.
certificates [0] Disable = (Default) No certificate verification is done.
[HTTPRemoteServices_Ve [1] Enable = The device verifies the authentication of the certificate
rifyCertificate] received from the HTTPS peer. The device authenticates the
Parameter Description
4. Configure an HTTP remote host according to the parameters described in the table
below.
5. Click Apply, and then save your settings to flash memory.
Table 15-20: HTTP Remote Hosts Table Parameter Descriptions
Parameter Description
Parameter Description
hosts.
FQDN resolution is also performed (immediately)
when connection is subsequently "closed" (by timeout
or by the remote host) and connections are updated
accordingly. In addition, the device periodically (every
15 minutes) performs DNS name resolution to ensure
that the list of resolved IP addresses has not
changed. If a change is detected, the device updates
its' list of IP addresses and re-establishes
connections accordingly.
In addition to multiple HTTP sessions, the device
establishes multiple (TCP) connections per session,
thereby enhancing data exchange capabilities with
the host.
Port Defines the port of the host.
rest-port The valid value is 0 to 65535. The default is 80.
[HTTPRemoteHosts_Port]
Interface Assigns one of the device's IP network interfaces
rest-interface through which communication with the remote host is
done.
[HTTPRemoteHosts_Interface]
By default, no value is defined and the OAMP interface
is used.
Transport Type Defines the protocol for communicating with the remote
rest-transport-type host:
[HTTPRemoteHosts_HTTPTransportType] [0] HTTP (default)
[1] HTTPS
Status (Read-only) Displays the status of the connection with
http-host-state the remote host.
"Connected": The hosts is connected.
"Disconnected": The host is disconnected.
"Not In Service": Configuration of the host is invalid.
3. Click Apply.
The following figure provides an example of information exchange between devices and a
Routing server for routing calls:
Figure 15-46: Example of Call Routing Information Exchange between Devices and Routing
Server
The Routing server can also manipulate call data such as calling name, if required. It can
also create new IP Groups and associated configuration entities, if necessary for routing.
Multiple Routing servers can also be employed, whereby each device in the chain path can
use a specific Routing server. Alternatively, a single Routing server can be employed and
used for all devices ("stateful" Routing server).
The device automatically updates (sends) the Routing server with its' configuration
topology regarding SIP routing-related entities (Trunk Groups, SRDs, SIP Interfaces, and
IP Groups) that have been configured for use by the Routing server. For example, if you
add a new IP Group and enable it for use by the Routing server, the device sends this
information to the Routing server. Routing of calls associated with routing-related entities
that are disabled for use by the Routing server (default) are handled only by the device (not
the Routing server).
In addition to regular routing, the Routing server also supports the following:
Alternative Routing: If a call fails to be established, the device "closest" to the failure
and configured to send "additional" routing requests (through REST API -
"additionalRoute" attribute in HTTP Get Route request) to the Routing server, sends a
new routing request to the Routing server. The Routing server may respond with a
new route destination, thereby implementing alternative routing. Alternatively, it may
enable the device to return a failure response to the previous device in the route path
chain and respond with an alternative route to this device. Therefore, alternative
routing can be implemented at any point in the route path. If the Routing server sends
an HTTP 404 "Not Found" message for an alternative route request, the device rejects
the call. If the Routing server is configured to handle alternative routing, the device
does not make any alternative routing decisions based on its alternative routing tables.
Call Status: The device can report call status to the Routing server to indicate
whether a call has successfully been established and/or failed (disconnected). The
device can also report when an IP Group (Proxy Set) is unavailable, detected by the
keep-alive mechanism, or when the CAC thresholds permitted per IP Group have
been crossed. For Trunk Groups, the device reports when the trunk's physical state
indicates that the trunk is unavailable.
Credentials for Authentication: The Routing Server can provide user (e.g., IP Phone
caller) credentials (username-password) in the Get Route response, which can be
used by the device to authenticate outbound SIP requests if challenged by the
outbound peer, for example, Microsoft Skype for Business (per RFC 2617 and RFC
3261). If multiple devices exist in the call routing path, the Routing server sends the
credentials only to the last device ("node") in the path.
QoS: The device can report QoS metrics per IP Group to the Routing server, which
the Routing server can use to determine the best route (i.e., QoS-based routing). For
more information, see Configuring QoS-Based Routing by Routing Server on page
290.
Call Preemption for Emergency Calls: If you enable call preemption for emergency
calls (e.g., 911) on the device, the routing server determines whether or not the
incoming call is an emergency call and if so, handles the routing decision accordingly
(i.e., preempts a non-emergency call if the maximum call capacity of the device is
reached in order to allow the emergency call to be routed). To enable call preemption
for emergency calls, use the parameter SBCPreemptionMode for SBC calls and
CallPriorityMode for Gateway calls.
2. Configure an additional Security Administrator user account in the Local Users table
(see 'Configuring Management User Accounts' on page 75), which is used by the
Routing server (REST client) to log in to the device's management interface.
3. Configure the address and connection settings of the Routing server, referred to as a
Remote Web Service and HTTP remote host (see 'Configuring Remote Web Services'
on page 280). You must configure the 'Type' parameter of the Remote Web Service to
Routing, as shown in the following example:
Figure 15-48: Configuring Remote Web Service for Routing Server
4. SBC Calls: In the IP-to-IP Routing table, configure the 'Destination Type' parameter of
the routing rule to Routing Server (see Configuring SBC IP-to-IP Routing Rules on
page 635), as shown below:
Figure 15-49: Configuring Routing Rule to use Routing Server
c. Click Apply.
2. Open the Remote Web Services table (see Configuring Remote Web Services on
page 290 ), and then for the Remote Web Service entry that you configured for the
routing server, do the following:
a. From the 'Type' drop-down list (HTTPRemoteServices_HTTPType), select QoS.
b. Click Apply.
3. Enable voice quality monitoring and RTCP XR, using the 'Enable RTCP XR'
(VQMonEnable) parameter (see Configuring RTCP XR on page 877).
Note: For media metrics calculations, the device's License Key must include voice
quality monitoring and RTCP XR.
Note: It is recommended not to use port 80 as this is the default port used by IP
Phones for their Web-based management interface.
1. Enable the HTTP Proxy application (see 'Enabling the HTTP Proxy Application'
on page 292).
2. Configure two local, listening HTTP interfaces - one for the OVOC and one for the
IP Phones (see 'Configuring HTTP Interfaces' on page 292).
3. Configure the address of the OVOC server (see 'Configuring an HTTP-based
OVOC Service' on page 298).
Note: The HTTP Proxy application is a license-based feature and is available only if it
is included in the License Key installed on the device. For ordering the feature, please
contact your AudioCodes sales representative. For installing a new License Key, see
License Key on page 781.
2. From the 'HTTP Proxy Debug Level' drop-down list, select one of the following:
• No Debug: Disables debugging.
• Basic: Enables debugging and sends basic information in the Syslog.
• Detailed: Enables debugging and sends detailed information in the Syslog.
3. Click Apply.
Parameter Description
General
Index Defines an index number for the new table row.
[HTTPInterface_Index] Note:
Each row must be configured with a unique index.
The parameter is mandatory.
Name Defines a descriptive name, which is used when associating the
interface-name row in other tables.
[HTTPInterface_InterfaceName] The valid value is a string of up to 40 characters. By default, no
value is defined.
Note:
Each row must be configured with a unique name.
The parameter is mandatory.
Network Interface Assigns a local, network interface to the HTTP interface.
Parameter Description
network-interface By default, no value is defined.
[HTTPInterface_NetworkInterface] To configure network interfaces, see 'Configuring IP Network
Interfaces' on page 141.
Note: The parameter is mandatory.
Protocol Defines the protocol type.
protocol [0] HTTP (default)
[HTTPInterface_Protocol] [1] HTTPS
3. Configure an HTTP Proxy service according to the parameters described in the table
below.
4. Click Apply, and then save your settings to flash memory.
Table 15-22: HTTP Proxy Services Table Parameter Descriptions
Parameter Description
Parameter Description
4. Configure an HTTP Proxy Host according to the parameters described in the table
below.
Parameter Description
General
Index Defines an index number for the new table row.
Note:
Each row must be configured with a unique index.
The parameter is mandatory.
Network Interface Assigns a local, network interface to the HTTP Proxy Host.
network-interface By default, no value is defined.
[HTTPProxyHost_NetworkInterface] To configure network interfaces, see 'Configuring IP Network
Interfaces' on page 141.
Note: The parameter is mandatory.
Proxy Address Defines the address of the managed equipment (host).
proxy-address The valid value is an IP address in dotted-decimal notation or
[HTTPProxyHost_IpAddress] an FQDN (up to 100 characters). If the address is an FQDN,
the device uses DNS to resolve it into an IP address. If the DNS
resolution results in multiple IP addresses, the device uses the
first available address (i.e., that responds to the keep-alive).
Protocol Defines the protocol type.
protocol [0] HTTP (default)
[HTTPProxyHost_Protocol] [1] HTTPS
Parameter Description
3. Configure an OVOC Service according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 15-24: OVOC Services Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[EMSService_Index] Note:
Each row must be configured with a unique index.
The parameter is mandatory.
Name Defines a descriptive name, which is used when associating the row in
service-name other tables.
[EMSService_ServiceNam The valid value is a string of up to 40 characters. By default, no value
e] is defined.
Note:
Each row must be configured with a unique name.
The parameter is mandatory.
OVOC
OVOC Listening Interface Assigns an HTTP Interface (local, listening HTTP interface:port) for
ems-int communication with the OVOC. To configure HTTP Interfaces, see
Configuring HTTP Interfaces on page 292.
[EMSService_EMSInterfac
e] By default, no value is defined.
Note: The parameter is mandatory.
OVOC Address 1 Defines the address of the primary OVOC server.
primary-server Note: The parameter is mandatory.
[EMSService_PrimaryServ
er]
OVOC Address 2 Defines the address of the secondary OVOC server.
secondary-server
[EMSService_SecondaryS
erver]
Device
Device Login Interface Assigns an HTTP Interface (local, listening HTTP interface:port) for
dev-login-int communication with the client. To configure HTTP Interfaces, see
Configuring HTTP Interfaces on page 292.
[EMSService_DeviceLoginI
nterface] By default, no value is defined.
Note: The parameter is mandatory.
Note:
• The ELIN feature for E9-1-1 is a license-based feature and is available only if it is
included in the License Key installed on the device. For ordering the feature,
please contact your AudioCodes sales representative. For installing a new License
Key, see 'License Key' on page 781.
• The ELIN feature for E9-1-1 is applicable to the SBC application as well as the
Gateway application for digital PSTN interfaces.
that match phone numbers, addresses and cross streets to their corresponding PSAP.
This MSAG is the official record of valid streets (with exact spelling), street number
ranges, and other address elements with which the service providers are required to
update their ALI databases.
5. The E9-1-1 Selective Router sends the call to the appropriate PSAP based on the
retrieved location information from the ALI.
6. The PSAP operator dispatches the relevant emergency services to the E9-1-1 caller.
15.8.2.1 Gathering Location Information of Skype for Business Clients for 911
Calls
When a Microsoft® Skype for Business client is enabled for E9-1-1, the location data that is
stored on the client is sent during an emergency call. This stored location information is
acquired automatically from the Microsoft Location Information Server (LIS). The LIS stores
the location of each network element in the enterprise. Immediately after the Skype for
Business client registration process or when the operating system detects a network
connection change, each Skype for Business client submits a request to the LIS for a
location. If the LIS is able to resolve a location address for the client request, it returns the
address in a location response. Each client then caches this information. When the Skype
for Business client dials 9-1-1, this location information is then included as part of the
emergency call and used by the emergency service provider to route the call to the correct
PSAP.
The gathering of location information in the Skype for Business network is illustrated in the
figure below:
Figure 15-56: Microsoft Skype for Business Client Acquiring Location Information
1. The Administrator provisions the LIS database with the location of each network
element in the Enterprise. The location is a civic address, which can include
also manually select any location stored in the local users table and manage existing
entries.
<BSSID>,<Description>,<Location>,<CompanyName>,<HouseNumber>,<House
Wireless access
NumberSuffix>,<PreDirectional>,…<StreetName>,<StreetSuffix>,<PostDirectiona
point
l>,<City>,<State>,<PostalCode>,<Country>
<Subnet>,<Description>,<Location>,<CompanyName>,<HouseNumber>,<House
Subnet NumberSuffix>,<PreDirectional>,…<StreetName>,<StreetSuffix>,<PostDirectiona
l>,<City>,<State>,<PostalCode>,<Country>
<ChassisID>,<PortIDSubType>,<PortID>,<Description>,<Location>,<CompanyN
Port ame>,<HouseNumber>,<HouseNumberSuffix>,…<PreDirectional>,<StreetName
>,<StreetSuffix>,<PostDirectional>,<City>,<State>,<PostalCode>,<Country>
<ChassisID>,<Description>,<Location>,<CompanyName>,<HouseNumber>,<Ho
Switch useNumberSuffix>,<PreDirectional>,…<StreetName>,<StreetSuffix>,<PostDirecti
onal>,<City>,<State>,<PostalCode>,<Country>
For the ELIN number to be included in the SIP INVITE (XML-based PIDF-LO message)
sent by the Mediation Server to the ELIN device, the administrator must add the ELIN
number to the <CompanyName> column (shown in the table above in bold typeface). As
the ELIN device supports up to five ELINs per PIDF-LO, the <CompanyName> column can
be populated with up to this number of ELINs, each separated by a semicolon. The digits of
each ELIN can be separated by hyphens (xxx-xxx-xxx) or they can be adjacent
(xxxxxxxxx).
When the ELIN device receives the SIP INVITE, it extracts the ELINs from the NAM field in
the PIDF-LO (e.g., <ca:NAM>1111-222-333; 1234567890 </ca:NAM>), which corresponds
to the <CompanyName> column of the LIS.
If you do not populate the location database, and the Skype for Business location policy,
Location Required is set to Yes or Disclaimer, the user will be prompted to enter a location
manually.
assign a dedicated Emergency Location Identification Number (ELIN) to each ERL (or
zone). When Skype for Business sends a SIP INVITE message with the PIDF-LO to the
device, it can parse the content and translate the calling number to an appropriate ELIN.
The device then sends the call to the SIP Trunk or PSTN with the ELIN number as the
calling number. The ELIN number is sent to the emergency service provider, which sends it
on to the appropriate PSAP according to the ELIN address match in the ALI database
lookup.
The ERL defines a specific location at a street address, for example, the floor number of
the building at that address. The geographical size of an ERL is according to local or
national regulations (for example, less than 7000 square feet per ERL). Typically, you
would have an ERL for each floor of the building. The ELIN is used as the phone number
for 911 callers within this ERL.
The figure below illustrates the use of ERLs and ELINs, with an E9-1-1 call from floor 2 at
the branch office:
The table below shows an example of designating ERLs to physical areas (floors) in a
building and associating each ERL with a unique ELIN.
Table 15-26: Designating ERLs and Assigning to ELINs
In the table above, a unique IP subnet is associated per ERL. This is useful if you
implement different subnets between floors. Therefore, IP phones, for example, on a
specific floor are in the same subnet and therefore, use the same ELIN when dialing 9-1-1.
15.8.3 AudioCodes ELIN Device for Skype for Business E9-1-1 Calls to
PSTN
Microsoft Mediation Server sends the location information of the E9-1-1 caller in the XML-
based PIDF-LO body contained in the SIP INVITE message. However, this content cannot
be sent on the SIP Trunk or PSTN network since they do not support such content. To
solve this issue, Skype for Business requires a device (ELIN SBC or Gateway) to send the
E9-1-1 call to the SIP Trunk or PSTN. When Skype for Business sends the PIDF-LO to the
device, it parses the content and translates the calling number to an appropriate ELIN. This
ensures that the call is routed to an appropriate PSAP, based on ELIN-address match
lookup in the emergency service provider's ALI database.
The figure below illustrates an AudioCodes ELIN device deployed in the Skype for
Business environment for handling E9-1-1 calls between the Enterprise and the emergency
service provider.
shown below:
<ca:NAM>1111-222-333; 1234567890 </ca:NAM>
3. The device saves the From header value of the SIP INVITE message in its ELIN
database table (Call From column). The ELIN table is used for PSAP callback, as
discussed later in 'PSAP Callback to Skype for Business Clients for Dropped E9-1-1
Calls' on page 308. The ELIN table also stores the following information:
• ELIN: ELIN number
• Time: Time at which the original E9-1-1 call was terminated with the PSAP
• Count: Number of E9-1-1 calls currently using the ELIN
An example of the ELIN database table is shown below:
ELIN Time Count Index Call From
The ELIN table stores this information for a user-defined period (see 'Configuring the
E9-1-1 Callback Timeout' on page 310), starting from when the E9-1-1 call,
established with the PSAP, terminates. After this time expires, the table entry with its
ELIN is disregarded and no longer used (for PSAP callback). Therefore, table entries
of only the most recently terminated E9-1-1 callers are considered in the ELIN table.
The maximum entries in the ELIN table is 100.
4. The device uses the ELIN number as the E9-1-1 calling number and sends it in the
SIP INVITE or ISDN Setup message (as an ANI / Calling Party Number) to the SIP
Trunk or PSTN.
An example of a SIP INVITE message received from an E9-1-1 caller is shown below. The
SIP Content-Type header indicating the PIDF-LO, and the NAM field listing the ELINs are
shown in bold typeface.
INVITE sip:911;phone-context=Redmond@192.168.1.12;user=phone
SIP/2.0
From:
"voip_911_user1"<sip:voip_911_user1@contoso.com>;epid=1D19090AED;t
ag=d04d65d924
To: <sip:911;phone-context=Redmond@192.168.1.12;user=phone>
CSeq: 8 INVITE
Call-ID: e6828be1-1cdd-4fb0-bdda-cda7faf46df4
VIA: SIP/2.0/TLS 192.168.0.244:57918;branch=z9hG4bK528b7ad7
CONTACT:
<sip:voip_911_user1@contoso.com;opaque=user:epid:R4bCDaUj51a06PUbk
raS0QAA;gruu>;text;audio;video;image
PRIORITY: emergency
CONTENT-TYPE: multipart/mixed; boundary= ------
=_NextPart_000_4A6D_01CAB3D6.7519F890
geolocation: <cid:voip_911_user1@contoso.com>;inserted-
by="sip:voip_911_user1@contoso .com"
Message-Body:
------=_NextPart_000_4A6D_01CAB3D6.7519F890
Content-Type: application/sdp ; charset=utf-8
v=0
o=- 0 0 IN IP4 Client
s=session
15.8.3.3 PSAP Callback to Skype for Business Clients for Dropped E9-1-1 Calls
As the E9-1-1 service automatically provides all the contact information of the E9-1-1 caller
to the PSAP, the PSAP operator can call back the E9-1-1 caller. This is especially useful in
cases where the caller disconnects prematurely. However, as the Enterprise sends ELINs
to the PSAP for E9-1-1 calls, a callback can only reach the original E9-1-1 caller using the
device to translate the ELIN number back into the E9-1-1 caller's extension number.
In the ELIN table of the device, the temporarily stored From header value of the SIP
INVITE message originally received from the E9-1-1 caller is used for PSAP callback.
When the PSAP makes a callback to the E9-1-1 caller, the device translates the called
number (i.e., ELIN) received from the PSAP to the corresponding E9-1-1 caller's extension
number as matched in the ELIN table.
The handling of PSAP callbacks by the device is as follows:
1. When the device receives a call from the emergency service provider, it searches the
ELIN table for an ELIN that corresponds to the received called party number in the
incoming message.
2. If a match is found in the ELIN table, it routes the call to the Mediation Sever by
sending a SIP INVITE, where the values of the To and Request-URI are taken from
the value of the original From header that is stored in the ELIN table (in the Call From
column).
3. The device updates the Time in the ELIN table. (The Count is not affected).
The PSAP callback can be done only within a user-defined period (see 'Configuring the E9-
1-1 Callback Timeout' on page 310), started from after the original E9-1-1 call established
with the PSAP is terminated. After this time expires, the table entry with its ELIN is
disregarded and no longer used (for PSAP callback). Therefore, table entries of only the
most recently terminated E9-1-1 callers are considered in the ELIN table. If the PSAP
callback is done after this timeout expires, the device is unable to route the call to the E9-1-
1 caller and instead, either sends it as a regular call or most likely, rejects it if there are no
matching routing rules. However, if another E9-1-1 caller has subsequently been
processed with the same ELIN number, the PSAP callback is routed to this new E9-1-1
caller.
In scenarios where the same ELIN number is used by multiple E9-1-1 callers, upon receipt
of a PSAP callback, the device sends the call to the most recent E9-1-1 caller. For
example, if the ELIN number "4257275678" is being used by three E9-1-1 callers, as
shown in the table below, then when a PSAP callback is received, the device sends it to
the E9-1-1 caller with phone number "4258359555".
Table 15-27: Choosing Caller of ELIN
If the first ELIN in the list is being used by another active call, the device skips to the
next ELIN in the list, and so on until it finds an ELIN that is not being used and sends
this ELIN.
If all the ELINs in the list are in use by active calls, the device selects the ELIN number
as follows:
1. The ELIN with the lowest count (i.e., lowest number of active calls currently using
this ELIN).
2. If the count between ELINs is identical, the device selects the ELIN with the
greatest amount of time passed since the original E9-1-1 call using this ELIN was
terminated with the PSAP. For example, if E9-1-1 caller using ELIN 4257275678
was terminated at 11:01 and E9-1-1 caller using ELIN 4257275670 was
terminated at 11:03, then the device selects ELIN 4257275678.
In this scenario, multiple E9-1-1 calls are sent with the same ELIN.
Gateway.
Figure 15-57: Enabling ELIN E9-1-1 for Skype for Business
3. Click Apply.
3. Click Apply.
15.8.4.3 Configuring the SIP Release Cause Code for Failed E9-1-1 Calls
When a Skype for Business client makes an emergency call, the call is routed through the
Microsoft Mediation Server to the ELIN device, which sends it on to the PSTN. In some
scenarios, the call may not be established due to either the destination (for example, busy
or not found) or the ELIN device (for example, lack of resources or an internal error). In
such a scenario, the Mediation Server requires that the ELIN device "reject" the call with
the SIP release cause code 503 "Service Unavailable" instead of the designated release
call. Such a release cause code enables the Mediation Server to issue a failover to another
entity (for example, another ELIN device), instead of retrying the call or returning the
release call to the user.
To support this requirement, you can configure the ELIN device to send a 503 "Service
Unavailable" release cause code instead of SIP 4xx if an emergency call cannot be
established:
3. Click Apply.
Note: The feature is applicable only to the Gateway application (digital interfaces).
To add manipulation rules for location-based emergency routing, you need to use the
Destination Phone Number Manipulation for IP-to-Tel Calls table. In this table, you need to
use the ELIN number (e.g., 5000) as the source prefix, with the "ELIN" string value added
in front of it (e.g., ELIN5000) which is used by the device to identify the number as an ELIN
number (and not used for any other routing processes etc.). For each corresponding ELIN
source number prefix entry, you need to configure the manipulation action required on the
destination number so that the call is routed to the appropriate destination.
Following is an example of how to configure location-based emergency routing:
Assumptions:
• Company with offices in different cities -- London and Manchester.
• Each city has its local police department.
• In an emergency, users need to dial 999.
• Company employs Microsoft Skype for Business for communication between
employers, and between employers and the external telephone network (PSTN).
In other words, all employers are seemingly (virtual) in the same location in
respect to the IP network.
• ELIN numbers are used to identify the geographical location of emergency calls
dialed by users:
♦ London ELIN is 5000.
♦ Manchester ELIN is 3000.
Configuration Objectives:
• Emergency calls received from London office users are routed by the device to
the London police department (+4420999).
• Emergency calls received from Manchester office users are routed by the device
to the Manchester police department (+44161999).
The international code, +44 for England is used for IP routing considerations, but can
be omitted depending on your specific deployment.
The above scenario is configured as follows:
1. Enable location-based emergency routing, by loading an ini file to the device with the
following parameter setting:
a. Open the Gateway Advanced Settings page (Setup menu > Signaling & Media
tab > Gateway folder > Gateway Advanced Settings).
b. From the 'E911 Gateway' drop-down list (E911Gateway), select Location Based
Manipulations.
Figure 15-61: Enabling Location-based Emergency Routing
2. In the Destination Phone Number Manipulation for IP-to-Tel Calls table (see
'Configuring Source/Destination Number Manipulation' on page 537), add the following
two rules for manipulating the destination number of incoming emergency calls, based
on ELIN numbers:
Figure 15-62: Configuring Destination Number Manipulation Rules for Location-Based
Emergency Routing
Index 0 manipulates the destination number for London emergency callers; Index 1
manipulates the destination number for Manchester emergency callers.
Note:
• Currently, the device reports the following presence status:
√ "On the Phone" - user is busy (in a call or doesn't want to be disturbed)
√ "Clear" - cancels the "On the Phone" status (returning the user's presence to its
previous state)
• The feature supports Skype for Business Server 2015 and Lync Server 2013
version 5.0.8308.866 and later.
• The feature is applicable to the SBC application and the Gateway application (Tel-
to-IP calls only).
• This is a license-based feature and is available only if it is included in the License
Key installed on the device. For ordering the feature, please contact your
AudioCodes sales representative.
The device notifies the Skype for Business Server of a user's presence status, by using
SIP PUBLISH messages. The message transactions between the device and Skype for
Business Server is as follows:
1. The device routes a call between two Skype for Business users and when connected,
sends a PUBLISH message with the Event header set to "presence", Expires header
set to "600", Content-Type header set to "application/pidf+xml", and where the XML
body's "activity" is set to "on-the-phone", as shown in the following example for user
John Doe:
PUBLISH sip:john.doe@sfb.example SIP/2.0
From: <sip:john.doe@sfb.example>;tag=1c537837102
To: <sip:john.doe@sfb.example>
CSeq: 1 PUBLISH
Event: presence
Expires: 600
Content-Type: application/pidf+xml
Content-Length: 489
<?xml version="1.0" encoding="utf-8"?>
<presence xmlns="urn:ietf:params:xml:ns:pidf"
xmlns:ep="urn:ietf:params:xml:ns:pidf:status:rpid-status"
xmlns:et="urn:ietf:params:xml:ns:pidf:rpid-tuple"
xmlns:ci="urn:ietf:params:xml:ns:pidf:cipid"
entity="sip:john.doe@sfb.example">
<tuple id="0">
<status>
<basic>open</basic>
<ep:activities>
<ep:activity>on-the-phone</ep:activity>
</ep:activities>
</status>
</tuple>
<ci:display-name>John Doe</ci:display-name>
</presence>
2. The Skype for Business Server responds to the device with a SIP 200 OK. The
message is sent with a SIP-ETag header which identifies the entity (and Expires
header set to 600 seconds), as shown in the following example:
SIP/2.0 200 OK
From: "John Doe"<sip:john.doe@sfb.example>;tag=1c537837102
To:
<sip:john.doe@sfb.example>;tag=0E4324A4B27040E4A167108D4FAD27E3
Call-ID: 1284896643279201635736@10.33.221.57
CSeq: 1 PUBLISH
Via: SIP/2.0/TLS
10.33.221.57:5061;alias;…received=10.33.221.57;ms-received
port=48093;ms-received-cid=4900
SIP-ETag: 2545777538-1-1
Expires: 600
Content-Length: 0
3. If the call lasts longer than 600 seconds, the device sends another PUBLISH message
with the same SIP-ETag value and with an Expires header value of 600 seconds. The
Skype for Business Server responds with another 200 OK, but with a new SIP-ETag
value (and Expires header set to 600 seconds). This scenario occurs for each 600-
second call interval.
4. When the call ends, the device sends a PUBLISH message to cancel the user's online
presence status (and the user's previous presence state is restored). The message is
sent with a SIP-If-Match header set to the matching entity tag (SIP-ETag) value (i.e.,
SIP-ETag value of last 200 OK) and Expires header value set to "0", as shown in the
following example:
PUBLISH sip:john.doe@sfb.example SIP/2.0
From: <sip:john.doe@sfb.example>;tag=1c1654434948
To: <sip:john.doe@sfb.example>
CSeq: 1 PUBLISH
Contact: <sip:john.doe@10.33.221.57:5061;transport=tls>
Event: presence
Expires: 0
User-Agent: sur1-vg1.ecarecenters.net/v.7.20A.001.080
SIP-If-Match: 2545777538-1-1
Content-Length: 0
The following figure shows a basic illustration of the device's integration into Microsoft
Skype for Business Presence feature for third-party endpoints.
Note:
• Detailed configuration of Skype for Business Server is beyond the scope of this
document.
• Before performing the below procedure, make sure that you have defined the
device in the PSTN Gateway node of the Skype for Business Server Topology
(using the Topology Builder).
Using the Skype for Business Server Management Shell, perform the following steps:
1. Obtain the Site ID
Run the following cmdlet to retrieve the SiteId property of the site:
Get-CsSite
2. Create a Trusted Application Pool
Run the following cmdlet to create a new pool to host the presence application:
New-CsTrustedApplicationPool -Identity <Pool FQDN> -Registrar
<Registrar FQDN> -Site <Site Id>
where:
• Identity is the FQDN of the device, which sends the SIP PUBLISH messages with
the presence status to Skype for Business Server
• Registrar is the FQDN of the Registrar service for the pool
• Site is the Site Id
For example:
New-CsTrustedApplicationPool -Identity audcsbcgw.example.com -
Registrar skypepool.example.com -Site Portland
3. Add the Trusted Application (Presence) to the Pool
New-CsTrustedApplication-ApplicationId <String> -
TrustedApplicationPoolFqdn <String> -Port <Port Number>
where:
• ApplicationId is the name of the application
• TrustedApplicationPoolFqdn is the FQDN of the trusted application pool
• Port is the port number on which the application will run (5061)
For example:
New-CsTrustedApplication -ApplicationId MSpresence –
TrustedApplicationPoolFqdn audcsbcgw.example.com -Port 5061
Make sure the port number matches the port number configured on the device.
4. Enable and Publish the Skype for Business Server 2015 Topology
Run the following cmdlet to publish and enable your new topology:
Enable-CsTopology
page (Setup menu > Signaling & Media tab > SIP Definitions folder > SIP
Definitions General Settings), and then from the 'Enable MsPresence message'
drop-down list, select Enable:
Figure 15-63: Enabling Microsoft Presence Integration
6. Configure the Skype for Business LDAP server (Active Directory) to query for the
Skype for Business users' SIP URIs (see Configuring LDAP Servers on page 251).
7. Configure Call Setup Rules to perform LDAP queries in the Microsoft Active Directory
for the SIP URI of the caller (source) and called (destination) parties (see Configuring
Call Setup Rules on page 400). The device first needs to search the AD for the caller
or called number of the third-party endpoint device. For example, to search for a called
mobile number, the searched LDAP Attribute would be "mobile" set to the value of the
destination number (e.g., 'mobile=+' + param.call.dst.user). If the entry exists, the
query searches for the Attribute (e.g., ipPhone) where the SIP URI is defined for the
corresponding mobile user. If found, the query returns the Attribute's value (i.e., URI)
to the device (instructed using the special 'Condition' string "presence.dst" or
"presence.src"). This is the URI that the device uses as the Request-URI in the
PUBLISH message that it sends to the Skype for Business Server. The configuration
of the example used in this step is shown below:
16 Quality of Experience
This chapter describes how to configure the Quality of Experience feature.
Note: For information on the OVOC server, refer to the OVOC User's Manual.
Note:
• If a QoE traffic overflow is experienced between OVOC and the device, the device
sends the QoE data only at the end of the call, regardless of your settings.
• The 'Call Flow Report Mode' parameter is for enabling the device to send SIP
messages to OVOC for displaying SIP call dialog sessions as call flow diagrams.
For more information, see Enabling SIP Call Flow Diagrams in OVOC on page
947.
For a detailed description of the OVOC parameters, see 'Quality of Experience Parameters'
on page 1019.
VoIP call quality and diagnosing problems. Enabling RTCP XR means that the device can
send RTCP XR messages, containing the call-quality metrics, to the OVOC server.
For enabling RTCP XR reporting, see 'Configuring RTCP XR' on page 877. To configure
what to report to the OVOC, see 'Configuring Quality of Experience Profiles' on page 321.
Threshold based on
Threshold Crossing Calculation
Example
Green to Yellow (Minor alarm) The change occurs if the measured metric 4
crosses the configured Minor threshold only
(i.e., hysteresis is not used).
Green to Red (Major alarm) The change occurs if the measured metric 2
crosses the configured Major threshold only
(i.e., hysteresis is not used).
The change occurs if the measured metric 2
Yellow to Red (Major alarm) crosses the configured Major threshold only
(i.e., hysteresis is not used).
Red to Yellow (Minor alarm) The change occurs if the measured metric 2.1 (i.e., 2 + 0.1)
crosses the configured Major threshold with
hysteresis configured for the Major
threshold.
Red to Green (alarm cleared) The change occurs if the measured metric 4.1 (i.e., 4 + 0.1)
crosses the configured Minor threshold with
hysteresis configured for the Minor
threshold.
The change occurs if the measured metric 4.1 (i.e., 4 + 0.1)
Yellow to Green (alarm crosses the configured Minor threshold with
cleared) hysteresis configured for the Minor
threshold.
Each time a voice metric threshold is crossed (i.e., color changes), the device can do the
following depending on configuration:
Report the change in the measured metrics to AudioCodes' One Voice Operations
Center (OVOC) server. The OVOC displays this call quality status for the associated
OVOC link (IP Group, Media Realm, or Remote Media Subnet). To configure the
OVOC server's address, see 'Configuring the OVOC Server' on page 319.
Depending on the crossed threshold type, you can configure the device to reject calls
to the destination IP Group or use an alternative IP Profile for the IP Group. For more
information, see 'Configuring Quality of Service Rules' on page 330.
Alternative routing based on measured metrics. If a call is rejected because of a
crossed threshold, the device generates a SIP 806 response. You can configure this
SIP response code as a reason for alternative routing (see 'Configuring SIP Response
Codes for Alternative Routing Reasons' on page 654).
The following procedure describes how to configure Quality of Experience Profiles through
the Web interface. You can also configure it through other management platforms:
Quality of Experience Profile table: ini file (QoEProfile) or CLI (configure voip > qoe
qoe-profile)
Quality of Experience Color Rules table: ini file (QOEColorRules) or CLI (configure
voip > qoe qoe-color-rules)
3. Configure a QoE Profile according to the parameters described in the table below.
4. Click Apply.
Table 16-2: Quality of Experience Profile Table Parameter Descriptions
Parameter Description
Parameter Description
5. In the Quality of Experience Profile table, select the row for which you want to
configure QoE thresholds, and then click the Quality of Experience Color Rules link
located below the table; the Quality of Experience Color Rules table appears.
6. Click New; the following dialog box appears:
Figure 16-4: Quality of Experience Color Rules Table - Dialog Box
Parameter Description
General
Index Defines an index number for the new table row.
index Note: Each row must be configured with a unique index.
[QOEColorRules_ColorRuleIndex]
Monitored Parameter Defines the parameter to monitor and report.
monitored-parameter [0] MOS (default)
[QOEColorRules_monitoredParam] [1] Delay
[2] Packet Loss
[3] Jitter
[4] RERL [Echo]
Direction Defines the monitoring direction.
direction [0] Device Side (default)
[QOEColorRules_direction] [1] Remote Side
Parameter Description
sensitivity-level [0] User Defined = Need to define the thresholds in the
[QOEColorRules_profile] parameters described below.
[1] Low = Pre-configured low sensitivity threshold values.
Thus, reporting is done only if changes in parameters' values
are significant.
[2] Medium = (Default) Pre-configured medium sensitivity
threshold values.
[3] High = Pre-configured high sensitivity threshold values.
Thus, reporting is done for small fluctuations in parameter
values.
Thresholds
Minor Threshold (Yellow) Defines the Minor threshold value, which is the lower threshold
minor-threshold-yellow located between the Yellow and Green states. To consider a
threshold crossing:
[QOEColorRules_MinorThreshold]
Increase in severity (i.e., Green to Yellow): Only this value
is used.
Decrease in severity (Red to Green, or Yellow to Green):
This value is used with the hysteresis, configured by the
'Minor Hysteresis (Yellow)' parameter (see below).
The valid threshold values are as follows:
MOS values are in multiples of 10. For example, to denote a
MOS of 3.2, the value 32 (i.e., 3.2*10) must be entered.
Delay values are in msec.
Packet Loss values are in percentage (%).
Jitter is in msec.
Echo measures the Residual Echo Return Loss (RERL) in
dB.
Minor Hysteresis (Yellow) Defines the amount of fluctuation (hysteresis) from the Minor
minor-hysteresis-yellow threshold, configured by the 'Minor Threshold (Yellow)'
parameter in order for the threshold to be considered as
[QOEColorRules_MinorHysteresis]
crossed. The hysteresis is used only to determine threshold
crossings to Green (i.e., from Yellow to Green, or Red to
Green). In other words, the device considers a threshold
crossing to Green only if the measured voice metric crosses the
Minor threshold and the hysteresis.
For example, if you configure the 'Minor Threshold (Yellow)'
parameter to 4 and the 'Minor Hysteresis (Yellow)' parameter to
0.1 (for MOS), the device considers a threshold crossing to
Green only if the MOS crosses 4.1 (i.e., 4 + 0.1).
Major Threshold (Red) Defines the Major threshold value, which is the upper threshold
major-threshold-red located between the Yellow and Red states. To consider a
threshold crossing:
[QOEColorRules_MajorThreshold]
Increase in severity (i.e., Yellow to Red): Only this value is
used.
Decrease in severity (Red to Yellow): This value is used
with the hysteresis, configured by the 'Major Hysteresis
(Red)' parameter (see below).
The valid threshold values are as follows:
MOS values are in multiples of 10. For example, to denote a
MOS of 3.2, the value 32 (i.e., 3.2*10) must be entered.
Parameter Description
Delay values are in msec.
Packet Loss values are in percentage (%).
Jitter is in msec.
Echo measures the Residual Echo Return Loss (RERL) in
dB.
Major Hysteresis (Red) Defines the amount of fluctuation (hysteresis) from the Major
major-hysteresis-red threshold, configured by the 'Major Threshold (Red)' parameter
in order for the threshold to be considered as crossed. The
[QOEColorRules_MajorHysteresis]
hysteresis is used only to determine threshold crossings from
Red to Yellow. In other words, the device considers a threshold
crossing to Yellow only if the measured voice metric crosses the
Major threshold and the hysteresis.
For example, if you configure the 'Major Threshold (Red)'
parameter to 2 and the 'Major Hysteresis (Red)' parameter to
0.1 (for MOS), the device considers a threshold crossing to
Yellow only if the MOS crosses 2.1 (i.e., 2 + 0.1).
threshold, the device considers it a Yellow state (Minor alarm severity); when it goes
below the threshold, it considers it a Green state (cleared alarm).
Yellow-Red (Major) Threshold: Upper threshold configured by the major (total)
bandwidth threshold. When bandwidth goes over the threshold, the device considers it
a Red state (Major alarm severity); when it goes below the threshold, it considers it a
Yellow state (Minor alarm severity).
The device also uses hysteresis to determine whether the threshold has indeed being
crossed. Hysteresis defines the amount of fluctuation from the threshold in order for the
threshold to be considered as crossed (i.e., change in color state). Hysteresis is used to
avoid false reports being sent by the device. Hysteresis is used only for threshold crossings
toward a lesser severity (i.e., from Red to Yellow, Red to Green, or Yellow to Green).
Hysteresis is configured as a percentage of the configured major (total) bandwidth
threshold.
The following example is used to explain how the device considers threshold crossings.
The example is based on a setup where the Major (total) bandwidth threshold is configured
to 64,000 Kbps, the Minor threshold to 50% (of the total) and the hysteresis to 10% (of the
total):
Figure 16-5: Bandwidth Threshold Crossings
Threshold based on
Threshold Crossing Calculation
Example
Green to Yellow (Minor alarm) The change occurs if the current bandwidth 32,000 Kbps
crosses the configured Minor threshold only
(i.e., hysteresis is not used).
Green to Red (Major alarm) The change occurs if the current bandwidth 64,000 Kbps
crosses the configured Major threshold only
(i.e., hysteresis is not used).
Yellow to Red (Major alarm) The change occurs if the current bandwidth 64,000 Kbps
crosses the configured Major threshold only
(i.e., hysteresis is not used).
Red to Yellow (Minor alarm) The change occurs if the current bandwidth 57,600 Kbps
crosses the configured Major threshold with [64,000 - (10% x
hysteresis. 64,000)]
Yellow to Green (alarm The change occurs if the current bandwidth 25,600 Kbps
cleared) crosses the configured Minor threshold with [32,000 - (10% x
hysteresis. 64,000)]
Threshold based on
Threshold Crossing Calculation
Example
Red to Green (alarm cleared) The change occurs if the current bandwidth 25,600 Kbps
crosses the configured Minor threshold with [32,000 - (10% x
hysteresis. 64,000)]
The following procedure describes how to configure Bandwidth Profiles through the Web
interface. You can also configure it through ini file (BWProfile) or CLI (configure voip > qoe
bw-profile).
Parameter Description
General
Index Defines an index number for the new table row.
[BWProfile_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating
name the row in other tables.
[BWProfile_Name] The valid value is a string of up to 20 characters.
Egress Audio Bandwidth Defines the major (total) threshold for outgoing audio traffic (in
egress-audio-bandwidth Kbps).
[BWProfile_EgressAudioBandwidth]
Ingress Audio Bandwidth Defines the major (total) threshold for incoming audio traffic (in
ingress-audio-bandwidth Kbps).
[BWProfile_IngressAudioBandwidth]
Parameter Description
Egress Video Bandwidth Defines the major (total) threshold for outgoing video traffic (in
egress-video-bandwidth Kbps).
[BWProfile_EgressVideoBandwidth]
Ingress Video Bandwidth Defines the major (total) threshold for incoming video traffic (in
ingress-video-bandwidth Kbps).
[BWProfile_IngressVideoBandwidth]
Total Egress Bandwidth Defines the major (total) threshold for video and audio outgoing
total-egress-bandwidth bandwidth (in Kbps).
[BWProfile_TotalEgressBandwidth]
Total Ingress Bandwidth Defines the major (total) threshold for video and audio
total-ingress-bandwidth incoming bandwidth (in Kbps).
[BWProfile_TotalIngressBandwidth]
Thresholds
Minor Threshold Defines the Minor threshold value, which is the lower threshold
minor-threshold located between the Yellow and Green states. The parameter
is configured as a percentage of the major (total) bandwidth
[BWProfile_MinorThreshold]
threshold (configured by the above bandwidth parameters). For
example, if you configure the parameter to 50 and the 'Egress
Audio Bandwidth' parameter to 64,000, the Minor threshold for
outgoing audio bandwidth is 32,000 (i.e., 50% of 64,000).
To consider a threshold crossing:
Increase in severity (i.e., Green to Yellow): Only this
value is used.
Decrease in severity (Red to Green, or Yellow to Green):
This value is used with the hysteresis, configured by the
'Hysteresis' parameter (see below).
Note: The parameter applies to all your configured bandwidths.
Hysteresis Defines the amount of fluctuation (hysteresis) from the
hysteresis configured bandwidth threshold in order for the threshold to be
considered as crossed (i.e., avoids false reports of threshold
[BWProfile_Hysteresis]
crossings). The hysteresis is used only to determine threshold
crossings when severity is reduced (i.e., from Red to Yellow,
Yellow to Green, or Red to Green). The parameter is
configured as a percentage of the Major (total) bandwidth
threshold.
For example, if you configure the parameter to 10 and the
'Egress Audio Bandwidth' parameter to 64,000, the hysteresis
is 6,400 (10% of 64,000) and threshold crossings are
considered at the following bandwidths:
Red-to-Yellow (Yellow-Minor alarm severity): 57,600 Kbps
[64,000 - (10% x 64,000)]
Yellow-to-Green (Green-alarm cleared): 25,600 Kbps
[32,000 - (10% x 64,000)]
Generate Alarm Enables the device to send an SNMP alarm if a bandwidth
generate-alarms threshold is crossed.
[BWProfile_GenerateAlarms] [0] Disable (default)
[1] Enable
The following procedure describes how to configure Quality of Service rules through the
Web interface. You can also configure it through ini file (QualityOfServiceRules) or CLI
(configure voip > qoe quality-of-service-rules).
Parameter Description
Match
Index Defines an index number for the new table row.
[QualityOfServiceRules_Inde Note: Each row must be configured with a unique index.
x]
IP Group Assigns an IP Group. The rule applies to all calls belonging to the IP
ip-group-name Group.
[QualityOfServiceRules_IPG
roupName]
Rule Metric Defines the performance monitoring call metric to which the rule
rule-metric applies if the metric's threshold is crossed.
[QualityOfServiceRules_Rul [0] Voice Quality = (Default) The device calculates MOS of calls
eMetric] and if the threshold is crossed (i.e., poor quality), the configured
action (see 'Rule Action' parameter below) is done for all new calls
and for the entire IP Group.
[1] Bandwidth
[2] ACD
[3] ASR
[4] NER
[5] Poor InVoice Quality = The device calculates MOS (and
TMMBR) of the call and if the threshold is crossed (i.e., poor
quality), the device uses a different IP Profile (see 'Rule Action'
parameter below) for the current call only (not the entire IP
Group).
Severity Defines the alarm severity level. When the configured severity occurs,
severity the device performs the action of the rule.
[QualityOfServiceRules_Sev [0] Major (Default)
erity] [1] Minor
Note: If you configure the 'Rule Metric' parameter to ACD, ASR or
Parameter Description
NER, you must configure the parameter to Major. For all other 'Rule
Metric' parameter values, you can configure the parameter to any
value.
Action
Rule Action Defines the action to be done if the rule is matched.
rule-action [0] Reject Calls = (Default) New calls destined to the specified IP
[QualityOfServiceRules_Rul Group are rejected for a user-defined duration. To configure the
eAction] duration, use the 'Calls Reject Duration' parameter (see below).
[1] Alternative IP Profile = A different IP Profile is used for the IP
Group or call (depending on the 'Rule Metric' parameter). To
specify the IP Profile, use the 'Alternative IP Profile Name'
parameter (see below).
Note:
If you configure the 'Rule Metric' parameter to ACD, ASR or NER,
you must configure the parameter to Reject Calls.
If you configure the 'Rule Metric' parameter to Voice Quality or
Bandwidth:
If you configure the 'Severity' parameter to Minor, you must
configure the parameter to Alternative IP Profile.
If you configure the 'Severity' parameter to Major, you can
configure the parameter to any option.
When configured to Alternative IP Profile and the threshold is
crossed, the device changes the IP Profile for the entire IP Group
for all new calls.
If you configure the 'Rule Metric' parameter to Poor InVoice
Quality, you must configure the parameter to Alternative IP
Profile. If the threshold is crossed (i.e., poor call quality), the
device changes the IP Profile for the specific call only (during the
call).
Calls Reject Duration Defines the duration (in minutes) for which the device rejects calls to
calls-reject-duration the IP Group if the rule is matched.
[QualityOfServiceRules_Call The default is 5.
sRejectDuration] Note: The parameter is applicable only if the 'Rule Action' parameter
is configured to Reject Calls.
Alternative IP Profile Name Assigns a different IP Profile to the IP Group or call (depending on the
alt-ip-profile-name 'Rule Metric' parameter) if the rule is matched.
[QualityOfServiceRules_AltI By default, no value is defined.
PProfileName] Note: The parameter is applicable only if the 'Rule Action' parameter
is configured to Alternative IP Profile.
17 Control Network
This section describes configuration of the network at the SIP control level.
Note:
• The Media Realm assigned to an IP Group overrides any other Media Realm
assigned to any other configuration entity associated with the call.
• If you modify a Media Realm that is currently being used by a call, the device does
not perform Quality of Experience for the call.
• If you delete a Media Realm that is currently being used by a call, the device
maintains the call until the call parties end the call.
• The device provides a preconfigured Media Realm ("DefaultRealm") in the Media
Realms table, which can be modified or deleted.
The following procedure describes how to configure Media Realms through the Web
interface. You can also configure it through ini file (CpMediaRealm) or CLI (configure voip >
realm).
3. Configure the Media Realm according to the parameters described in the table below.
4. Click Apply.
Table 17-1: Media Realms table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[CpMediaRealm_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating
name the row in other tables.
[CpMediaRealm_MediaRealmName] The valid value is a string of up to 40 characters.
Note:
The parameter is mandatory.
Each row must be configured with a unique name.
Topology Location Defines the display location of the Media Realm in the
topology-location Topology view.
[CpMediaRealm_TopologyLocation] [0] Down = (Default) The Media Realm element is displayed
on the lower border of the view.
[1] Up = The Media Realm element is displayed on the
upper border of the view.
For more information on the Topology view, see 'Building and
Viewing SIP Entities in Topology View' on page 385.
IPv4 Interface Name Assigns an IPv4 network interface to the Media Realm.
ipv4 By default, no value is defined.
[CpMediaRealm_IPv4IF] To configure IP network interfaces, see 'Configuring IP
Network Interfaces' on page 141.
Parameter Description
IPv6 Interface Name Assigns an IPv6 network interface to the Media Realm.
ipv6if By default, no value is defined.
[CpMediaRealm_IPv6IF] To configure IP network interfaces, see Configuring IP
Network Interfaces on page 141.
Port Range Start Defines the starting port for the range of media interface UDP
port-range-start ports.
[CpMediaRealm_PortRangeStart] By default, no value is defined.
Note:
You must either configure all your Media Realms with port
ranges or all without; not some with and some without.
The available UDP port range is according to the
BaseUDPport parameter. For more information, see
'Configuring RTP Base UDP Port' on page 201.
The port must be different from ports configured for SIP
traffic (i.e., ports configured for SIP Interfaces). For
example, if the RTP port range is 6000 to 6999, the SIP
port can be less than 6000 or greater than 6999.
Number of Media Session Legs Defines the number of media sessions for the configured port
session-leg range.
[CpMediaRealm_MediaSessionLeg] By default, no value is defined.
Port Range End (Read-only field) Displays the ending port for the range of
port-range-end media interface UDP ports. The device automatically
populates the parameter with a value, calculated by the
[CpMediaRealm_PortRangeEnd]
summation of the 'Port Range Start' parameter and 'Number of
Media Session Legs' parameter (multiplied by the port chunk
size) minus 1:
start port + (sessions * port spacing) - 1
For example, a port starting at 6,000, 5 sessions and 10 port
spacing:
6,000 + (5 * 10) - 1 = 6,000 + (50) - 1 =
6,000 + 49 = 6,049
The device allocates the UDP ports for RTP, RTCP and T.38
traffic per leg in "jumps" (spacing) of 10. For example, if the
port range starts at 6000 and the UDP port spacing is 10, the
available ports include 6000, 6010, 6020, 6030, and so on
(depending on number of media sessions).
For RTCP and T.38 traffic, the port offset from the RTP port
used for the voice session is one and two, respectively. For
example, if the voice session uses RTP port 6000, the RTCP
port and T.38 port for the session is 6001 and 6002,
respectively. However, you can configure the device to use the
same port for RTP and T.38 packets, by configuring the
T38UseRTPPort parameter to 1.
For more information on local UDP port range, see
'Configuring RTP Base UDP Port' on page 201.
Default Media Realm Defines the Media Realm as the default Media Realm. The
is-default default Media Realm is used for SIP Interfaces and IP Groups
for which you have not assigned a Media Realm.
[CpMediaRealm_IsDefault]
Parameter Description
[0] No (default)
[1] Yes
Note:
You can configure the parameter to Yes for only one Media
Realm; all the other Media Realms must be configured to
No.
If you do not configure the parameter (i.e., the parameter is
No for all Media Realms), the device uses the first Media
Realm in the table as the default.
If the table is not configured, the default Media Realm
includes all configured media interfaces.
Quality of Experience
QoE Profile Assigns a QoE Profile to the Media Realm.
qoe-profile By default, no value is defined.
[CpMediaRealm_QoeProfile] To configure QoE Profiles, see 'Configuring Quality of
Experience Profiles' on page 321.
BW Profile Assigns a Bandwidth Profile to the Media Realm.
bw-profile By default, no value is defined.
[CpMediaRealm_BWProfile] To configure Bandwidth Profiles, see 'Configuring Bandwidth
Profiles' on page 326.
The figure below illustrates an example for implementing Remote Media Subnets. IP Group
#2 represents a SIP Trunk which routes international (USA and India) and local calls. As
international calls are typically more prone to higher delay than local calls, different Quality
of Experience Profiles are assigned to them. This is done by creating Remote Media
Subnets for each of these call destinations and assigning each Remote Media Subnet a
different Quality of Experience Profile. A Quality of Experience Profile that defines a packet
delay threshold is assigned to the international calls, which if crossed, a different IP Profile
is used that defines higher traffic priority to voice over other traffic. In addition, IP Group #2
has a 10-Mbps bandwidth threshold and a "tighter" bandwidth limitation (e.g., 1 Mbps) is
allocated to local calls. If this limit is exceeded, the device rejects new calls to this Remote
Media Subnet.
Figure 17-2: Remote Media Subnets Example
The following procedure describes how to configure Remote Media Subnets through the
Web interface. You can also configure it through ini file (RemoteMediaSubnet) or CLI
(configure voip > remote-media-subnet).
4. Configure the Remote Media Subnet according to the parameters described in the
table below.
5. Click Apply.
Table 17-2: Remote Media Subnet Table Parameter Descriptions
Parameter Description
Parameter Description
ame] Experience Profiles' on page 321.
BW Profile Assigns a Bandwidth Profile to the Remote Media Subnet.
bw-profile By default, no value is defined.
[RemoteMediaSubnet_BWProfileNa To configure Bandwidth Profiles, see 'Configuring Bandwidth
me] Profiles' on page 326.
The following procedure describes how to configure Media Realm Extensions through the
Web interface. You can also configure it through ini file (MediaRealmExtension) or CLI
(configure voip > voip-network realm-extension).
4. Configure the Media Realm Extension according to the parameters described in the
table below.
5. Click Apply.
Table 17-3: Media Realm Extension Table Parameter Descriptions
Parameter Description
Parameter Description
version(s) as the Media Realm to which the Media
Realm Extension is associated. If the associated
Media Realm is assigned both an IPv4 and IPv6
network interface, you also need to assign the Media
Realm Extension with both an IPv4 and IPv6 network
interface. For example, if the associated Media
Realm is assigned only an IPv6 network interface,
you also need to assign the Media Realm Extension
with an IPv6 network interface.
Port Range Start Defines the first (lower) port in the range of media UDP
[MediaRealmExtension_PortRangeStart] ports for the Media Realm Extension.
By default, no value is defined.
Notes:
You must either configure all your Media Realms with
port ranges or all without; not some with and some
without.
The available UDP port range is according to the
BaseUDPport parameter. For more information, see
'Configuring RTP Base UDP Port' on page 201.
Port Range End Defines the last (upper) port in the range of media UDP
[MediaRealmExtension_PortRangeEnd] ports for the Media Realm Extension.
Note: It is unnecessary to configure the parameter. The
device automatically populates the parameter with a
value, calculated by the summation of the 'Number of
Media Session Legs' parameter (multiplied by the port
chunk size) and the 'Port Range Start' parameter. After
you have added the Media Realm Extension row to the
table, the parameter is displayed with the calculated
value.
Number Of Media Session Legs Defines the number of media sessions for the port
[MediaRealmExtension_MediaSessionLeg] range. For example, 100 ports correspond to 10 media
sessions, since ports are allocated in chunks of 10.
By default, no value is defined.
Note: The parameter is mandatory.
Note:
• It is recommended to use a single-SRD configuration topology, unless you are
deploying the device in a multi-tenant environment, in which case multiple SRDs
are required.
• Each SIP Interface, Proxy Set, and IP Group can be associated with only one
SRD.
• If you have upgraded your device to Version 7.0 and your device was configured
with multiple SRDs but not operating in a multi-tenant environment, it is
recommended to gradually change your configuration to a single SRD topology.
• If you upgrade the device from an earlier release to Version 7.0, your previous
SRD configuration is fully preserved regarding functionality. The same number of
SRDs is maintained, but the configuration elements are changed to reflect the
configuration topology of Version 7.0. Below are the main changes in configuration
topology when upgrading to Version 7.0:
√ The SIP Interface replaces the associated SRD in several tables (due to
support for multiple SIP Interfaces per SRD).
√ Some fields in the SRDs table were duplicated or moved to the SIP Interfaces
table.
√ Indices used for associating configuration entities in tables are changed to row
pointers (using the entity's name).
√ Some tables are now associated (mandatory) with an SRD (SIP Interface, IP
Group, Proxy Set, and Classification).
√ Some fields used for associating configuration entities in tables now have a
value of Any to distinguish between Any and None (deleted entity or not
associated).
The following procedure describes how to configure SRDs through the Web interface. You
can also configure it through ini file (SRD) or CLI (configure voip > srd).
To configure an SRD:
1. Open the SRDs table (Setup menu > Signaling & Media tab > Core Entities folder >
SRDs).
2. Click New; the following dialog box appears:
Figure 17-7: SRDs Table - Add Dialog Box
Parameter Description
General
Index Defines an index for the new table row.
[SRD_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
name other tables.
[SRD_Name] The valid value can be a string of up to 40 characters.
Note:
The parameter is mandatory.
Each row must be configured with a unique name.
Sharing Policy Defines the sharing policy of the SRD, which determines whether the
type SRD shares its SIP resources (SIP Interfaces, Proxy Sets, and IP
Groups) with all other SRDs (Shared and Isolated).
[SRD_SharingPolicy]
[0] Shared = (Default) SRD shares its resources with other SRDs
(Isolated and Shared) and calls can thus be routed between the
SRD and other SRDs.
[1] Isolated = SRD does not share its resources with other SRDs
and calls cannot be routed between the SRD and other Isolated
SRDs. However, calls can be routed between the SRD and other
Shared SRDs.
For more information on SRD Sharing Policy, see Multiple SRDs for
Multi-tenant Deployments on page 347.
Note: The parameter is applicable only to the SBC application.
SBC Operation Mode Defines the device's operational mode for the SRD.
sbc-operation-mode [0] B2BUA = (Default) Device operates as a back-to-back user
[SRD_SBCOperationMode] agent (B2BUA), changing the call identifiers and headers between
the inbound and outbound legs.
[1] Call Stateful Proxy = Device operates as a Stateful Proxy,
passing the SIP message transparently between inbound and
outbound legs. In other words, the same SIP dialog identifiers
(tags, Call-Id and CSeq) occur on both legs (as long as no other
configuration disrupts the CSeq compatibleness).
For more information on B2BUA and Stateful Proxy modes, see
B2BUA and Stateful Proxy Operating Modes on page 592.
Note:
The settings of the parameter also determines the default behavior
of related parameters in the IP Profiles table
(SBCRemoteRepresentationMode, SBCKeepVIAHeaders,
SBCKeepUserAgentHeader, SBCKeepRoutingHeaders,
SBCRemoteMultipleEarlyDialogs).
If the 'SBC Operation Mode' parameter is configured in the IP
Groups table, the 'SBC Operation Mode' parameter in the SRDs
table is ignored.
The parameter is applicable only to the SBC application.
SBC Routing Policy Assigns a Routing Policy to the SRD.
sbc-routing-policy-name By default, no value is defined if you have configured multiple Routing
Parameter Description
[SRD_SBCRoutingPolicyNa Policies. If you have configured only one Routing Policy, the device
me] assigns it to the SRD by default.
For more information on Routing Policies, see Configuring SBC
Routing Policy Rules on page 656.
Note:
If you have assigned a Routing Policy to a Classification rule that is
associated with the SRD, the Routing Policy assigned to the SRD
is ignored.
You can assign the same Routing Policy to multiple SRDs.
The parameter is applicable only to the SBC application.
Used By Routing Server Enables the SRD to be used by a third-party routing server for call
used-by-routing-server routing decisions.
[SRD_UsedByRoutingServer [0] Not Used (default)
] [1] Used
For more information on the third-party routing server feature, see
'Centralized Third-Party Routing Server' on page 287.
Dial Plan Assigns a Dial Plan to the SRD. The device searches the Dial Plan for
sbc-dial-plan-name a dial plan rule that matches the source number and if not found, for a
rule that matches the destination number. If a matching dial plan rule
[SRD_SBCDialPlanName]
is found, the rule's tag is used in the routing and/or manipulation
processes as source and/or destination tags.
To configure Dial Plans, see Configuring Dial Plans on page 678.
Registration
Max. Number of Registered Defines the maximum number of users belonging to the SRD that can
Users register with the device.
max-reg-users The default is -1, which means that the number of allowed user
[SRD_MaxNumOfRegUsers] registrations is unlimited.
Note: The parameter is applicable only to the SBC application.
User Security Mode Defines the blocking (reject) policy for incoming SIP dialog-initiating
block-un-reg-users requests (e.g., INVITE messages) from registered and unregistered
users belonging to the SRD.
[SRD_BlockUnRegUsers]
[0] Accept All = (Default) Accepts requests from registered and
unregistered users.
[1] Accept Registered Users = Accepts requests only from users
registered with the device. Requests from users not registered are
rejected.
[2] Accept Registered Users from Same Source = Accepts requests
only from registered users whose source address is the same as
that registered with the device (during the REGISTER message
process). All other requests are rejected. If the transport protocol is
UDP, the device verifies the IP address and port; otherwise, it
verifies only the IP address. The verification is performed before
any of the device's call handling processes (i.e., Classification,
Manipulation and Routing).
Note:
The parameter is applicable only to calls belonging to User-type IP
Groups.
The feature is not applicable to REGISTER requests.
Parameter Description
The option, Accept Registered Users from Same Source [2] does
not apply to registration refreshes. These requests are accepted
even if the source address is different to that registered with the
device.
When the device rejects a call, it sends a SIP 500 "Server Internal
Error" response to the user. In addition, it reports the rejection
(Dialog establish failure - Classification failure) using the Intrusion
Detection System (IDS) feature (see Configuring IDS Policies on
page 174), by sending an SNMP trap.
When the corresponding parameter in the SIP Interfaces table
(SIPInterface_BlockUnRegUsers) is configured to any value other
than default [-1] for a SIP Interface that is associated with the SRD,
the parameter in the SRDs table is ignored for calls belonging to
the SIP Interface.
The parameter is applicable only to the SBC application.
Enable Un-Authenticated Enables the device to accept REGISTER requests and register them
Registrations in its registration database from new users that have not been
enable-un-auth-registrs authenticated by a proxy/registrar server (due to proxy down) and
thus, re-routed to a User-type IP Group.
[SRD_EnableUnAuthenticat
edRegistrations] In normal operation scenarios in which the proxy server is available,
the device forwards the REGISTER request to the proxy and if
authenticated by the proxy (i.e., device receives a success response),
the device adds the user to its registration database. The routing to the
proxy is according to the SBC IP-to-IP Routing table where the
destination is the proxy’s IP Group. However, when the proxy is
unavailable (e.g., due to network connectivity loss), the device can
accept REGISTER requests from new users if a matching alternative
routing rule exists in the SBC IP-to-IP Routing table where the
destination is the user’s User-type IP Group (i.e., call survivability
scenarios) and if the parameter is enabled.
[0] Disable = The device rejects REGISTER requests from new
users that were not authenticated by a proxy server.
[1] Enable = (Default) The device accepts REGISTER requests
from new users even if they were not authenticated by a proxy
server, and registers the user in its registration database.
Note:
Regardless of the parameter, the device always accepts
registration refreshes from users that are already registered in its
database.
For a SIP Interface that is associated with the SRD, if the
corresponding parameter in the SIP Interfaces table
(SIPInterface_EnableUnAuthenticatedRegistrations) is configured
to Disable or Enable, the parameter in the SRD is ignored for calls
belonging to the SIP Interface.
The parameter is applicable only to the SBC application.
The filter is applied throughout the Web GUI. When you select an SRD for filtering, the
Web interface displays only table rows associated with the filtered SRD. When you add a
new row to a table, the filtered SRD is automatically selected as the associated SRD. For
example, if you filter the Web display by SRD "Comp-A" and you then add a new Proxy
Set, the Proxy Set is automatically associated with this SRD (i.e., the 'SRD' parameter is
set to "Comp-A"). All other parameters in the dialog box are also automatically set to values
associated with the filtered SRD.
The SRD filter also affects display of number of configured rows and invalid rows by status
icons on table items in the Navigation tree. The status icons only display information
relating to the filtered SRD.
SRD filtering is especially useful in multi-tenant setups where multiple SRDs may be
configured. In such a setup, SRD filtering eliminates configuration clutter by "hiding" SRDs
that are irrelevant to the current configuration and facilitates configuration by automatically
associating the filtered SRD, and other configuration elements associated with the filtered
SRD, wherever applicable.
tenants on the one hand, and not to allocate too many instances for a single
tenant/customer on the other. For example, it would be a waste to allocate a capacity of
100 concurrent sessions to a small tenant for which 10 concurrent sessions suffice.
In a multi-tenant deployment, each tenant is represented by a dedicated SRD. The different
Layer-3 networks (e.g., LAN IP-PBX users, WAN SIP Trunk, and WAN far-end users) of
the tenant are represented by SIP Interfaces, which are all associated with the tenant's
SRD. As related configuration entities (SIP Interfaces, IP Groups, Proxy Sets,
Classification rules, and IP-to-IP Routing rules) are associated with the specific SRD, each
SRD has its own logically separated configuration tables (although configured in the same
tables). Therefore, full logical separation (on the SIP application layer) between tenants is
achieved by SRD.
To create a multi-tenant configuration topology that is as non-bleeding as possible, you can
configure an SRD (tenant) as Isolated and Shared:
Isolated SRD: An Isolated SRD has its own dedicated SIP resources (SIP Interfaces,
Proxy Sets, and IP Groups). No other SRD can use the SIP resources of an Isolated
SRD. Thus, call traffic of an Isolated SRD is kept separate from other SRDs (tenants),
preventing any risk of traffic "leakage" with other SRDs.
Isolated SRDs are more relevant when each tenant needs its own separate
(dedicated) routing "table" for non-bleeding topology. Separate routing tables are
implemented using Routing Policies. In such a non-bleeding topology, routing between
Isolated SRDs is not possible. This enables accurate and precise routing per SRD,
eliminating any possibility of erroneous call routing between SRDs, restricting routing
to each tenant's (SRD's) sphere. Configuring only one Routing Policy that is shared
between Isolated SRDs is not best practice for non-bleeding environments, since it
allows routing between these SRDs.
Shared SRD: Isolated SRDs have their own dedicated SIP resources (SIP Interfaces,
Proxy Sets, and IP Groups). This may not be possible in some deployments. For
example, in deployments where all tenants use the same SIP Trunking service, or use
the same SIP Interface due to limited SIP interface resources (e.g., multiple IP
addresses cannot be allocated and SIP port 5060 must be used). In contrast to
Isolated SRDs, a Shared SRD can share its' SIP resources with all other SRDs
(Shared and Isolated). This is typically required when tenants need to use common
resources. In the SIP Trunk example, the SIP Trunk would be associated with a
Shared SRD, enabling all tenants to route calls with the SIP Trunk.
Another configuration entity that can be used for multi-tenant deployments is the Routing
Policy. Routing Policies allow each SRD (or tenant) to have its own routing rules,
manipulation rules, Least Cost Routing (LCR) rules, and/or LDAP-based routing
configuration. However, not all multi-tenant deployments need multiple Routing Policies
and typically, their configuration is not required. Isolated SRDs are more relevant only
when each tenant requires its own dedicated Routing Policy to create separate, dedicated
routing "tables"; for all other scenarios, SRDs can be Shared. For more information on
Routing Policies, see 'Configuring SBC Routing Policy Rules' on page 656.
The figure below illustrates a multi-tenant architecture with Isolated SRD tenants ("A" and
"B") and a Shared SRD tenant ("Data Center") serving as a SIP Trunk:
To facilitate multi-tenant configuration through CLI, you can access a specific tenant "view".
Once in a specific tenant view, all configuration commands apply only to the currently
viewed tenant. Only table rows (indexes) belonging to the viewed tenant can be modified.
New table rows are automatically associated with the viewed tenant (i.e., SRD name). The
display of tables and show running-configuration commands display only rows relevant to
the viewed tenant (and shared tenants). The show commands display only information
relevant to the viewed tenant. To support this CLI functionality, use the following
commands:
To access a specific tenant view:
# srd-view <SRD name>
Once accessed, the tenant's name (i.e., SRD name) forms part of the CLI prompt, for
example:
# srd-view datacenter
(srd-datacenter)#
To exit the tenant view:
# no srd-view
When an SRD is cloned, the device adds the new SRD clone to the next available index
row in the SRDs table. The SRD clone is assigned a unique name in the following syntax
format: <unique clone ID>_<original SRD index>_CopyOf_<name, or index if no name, of
original SRD>. For example, if you clone SRD "SIP-Trunk" at index 2, the new SRD clone
is assigned the name, "36454371_2_CopyOf_SIP-Trunk".
The SRD clone has identical settings as the original SRD. In addition, all configuration
entities associated with the original SRD are also cloned and these clones are associated
with the SRD clone. The naming convention of these entities is the same as the SRD clone
(see above) and all have the same unique clone ID ("36454371" in the example above) as
the cloned SRD. These configuration entities include IP Groups, SIP Interfaces, Proxy Sets
(without addresses), Classification rules, and Admission Control rules. If the Routing Policy
associated with the original SRD is not associated with any other SRD, the Routing Policy
is also cloned and its' clone is associated with the SRD clone. All configuration entities
associated with the original Routing Policy are also cloned and these clones are associated
with the Routing Policy clone. These configuration entities include IP-to-IP Routing rules,
Inbound Manipulation rules, and Outbound Manipulation rules.
When any configuration entity is cloned (e.g., an IP-to-IP Routing rule) as a result of a
cloned SRD, all fields of the entity's row which "point" to other entities (e.g., SIP Interface,
Source IP Group, and Destination IP Group) are replaced by their corresponding clones.
Note: For some cloned entities such as SIP Interfaces, some parameter values may
change. This occurs in order to avoid the same parameter having the same value in
more than one table row (index), which would result in invalid configuration. For
example, a SIP Interface clone will have an empty Network Interface setting. After the
clone process finishes, you thus need to update the Network Interface for valid
configuration.
To clone an SRD:
Web interface: In the SRDs table, select an SRD to clone, and then click the Clone
button.
CLI:
(config-voip)# srd clone <SRD index that you want cloned>
Note: The device terminates active calls associated with a SIP Interface in the
following scenarios:
• If you delete the associated SIP Interface.
• If you edit any of the following fields of the associated SIP Interface: 'Application
Type', 'UDP Port, 'TCP Port', 'TLS Port' or 'SRD' fields.
• If you edit or delete a network interface in the IP Interfaces table that is associated
with the SIP Interface.
The following procedure describes how to configure SIP interfaces through the Web
interface. You can also configure it through ini file (SIPInterface) or CLI (configure voip >
sip-interface).
3. Configure a SIP Interface according to the parameters described in the table below.
4. Click Apply.
Parameter Description
UDP Port Defines the device's listening and source port for SIP signaling
udp-port traffic over UDP.
[SIPInterface_UDPPort] The valid range is 1 to 65534. The default is 5060.
Note:
The port must be different from ports configured for RTP
traffic (i.e., ports configured for Media Realms). For example, if
the RTP port range is 6000 to 6999, the SIP port can either be
less than 6000 or greater than 6999.
Parameter Description
Each SIP Interface must have a unique signaling port (i.e., no
two SIP Interfaces can share the same port - no port
overlapping).
TCP Port Defines the device's listening port for SIP signaling traffic over
tcp-port TCP.
[SIPInterface_TCPPort] The valid range is 1 to 65534. The default is 5060.
Note:
The port must be different from ports configured for RTP
traffic (i.e., ports configured for Media Realms). For example, if
the RTP port range is 6000 to 6999, the SIP port can either be
less than 6000 or greater than 6999.
Each SIP Interface must have a unique signaling port (i.e., no
two SIP Interfaces can share the same port - no port
overlapping).
TLS Port Defines the device's listening port for SIP signaling traffic over
tls-port TLS.
[SIPInterface_TLSPort] The valid range is 1 to 65534. The default is 5061.
Note:
The port must be different from ports configured for RTP
traffic (i.e., ports configured for Media Realms). For example, if
the RTP port range is 6000 to 6999, the SIP port can either be
less than 6000 or greater than 6999.
Each SIP Interface must have a unique signaling port (i.e., no
two SIP Interfaces can share the same port - no port
overlapping).
Additional UDP Ports Defines a port range for the device's local, listening and source
additional-udp-ports ports for SIP signaling traffic over UDP. The parameter can be
used for two different features:
[SIPInterface_AdditionalUDPPort
s] Assigning a unique port per registered user (User-type IP
Group) on the leg interfacing with the proxy server (Server-
type IP Group). For enabling this feature and for more
information, see the 'User UDP Port Assignment' parameter in
the IP Groups table.
Assigning a specific local port to each SIP entity (e.g., PBX)
communicating with a common SIP entity (e.g., proxy
server).This is the port on the leg interfacing with the proxy
server. In other words, the SIP Interface associated with the
proxy server. For more information, see Configuring Specific
UDP Ports using Tag-based Routing on page 650.
The valid range is 1,025 to 65535. The range is configured using
the syntax x-y, where x is the starting port and y the ending port
of the range (e.g., 6000-7000). By default, the parameter is not
configured.
Note:
The parameter's port range value must not overlap with the
UDP port configured by the 'UDP Port' parameter
(SIPInterface_UDPPort). For example, if the 'UDP Port'
parameter is configured to 5070, you cannot configure the
'Additional UDP Ports' parameter with a range of 5060-6000.
The parameter's port range value must not overlap with UDP
port ranges of Media Realms that are configured on the same
Parameter Description
network interface. For example, if the RTP port range is 6000-
6999, you must configure the 'Additional UDP Ports'
parameter to a range that is less than 6000 or greater than
6999.
The maximum number of ports in the range is limited to the
maximum number of licensed registered SBC users as
specified in the License Key installed on the device, or the
maximum number of IP Groups that can be configured (see
Configuring IP Groups on page 359) - the higher of the two
determines it. For example, if the License Key allows 20 users
and the maximum IP Groups that can be configured is 10,
then the maximum number of ports is 20.
The parameter is applicable only to the SBC application.
Encapsulating Protocol Defines the type of incoming traffic (SIP messages) expected on
encapsulating-protocol the SIP Interface.
[SIPInterface_EncapsulatingProt [0] No Encapsulation (default) = Regular (non-WebSocket)
ocol] traffic.
[1] WebSocket = Traffic received on the SIP Interface is
identified by the device as WebSocket signaling traffic
(encapsulated by WebSocket frames). For outgoing traffic, the
device encapsulates the traffic using the WebSocket protocol
(frames) on the TCP/TLS ports.
Note: WebSocket encapsulation is not supported for UDP ports.
Enable TCP Keepalive Enables the TCP Keep-Alive mechanism with the IP entity on this
tcp-keepalive-enable SIP Interface. TCP keep-alive can be used, for example, to keep
a NAT entry open for clients located behind a NAT server, or
[SIPInterface_TCPKeepaliveEna
simply to check that the connection to the IP entity is available.
ble]
[0] Disable (default)
[1] Enable
Note: To configure TCP keepalive, use the following ini file
parameters: TCPKeepAliveTime, TCPKeepAliveInterval, and
TCPKeepAliveRetry.
Used By Routing Server Enables the SIP Interface to be used by a third-party routing
used-by-routing-server server for call routing decisions.
[SIPInterface_UsedByRoutingSer [0] Not Used (default)
ver] [1] Used
For more information on the third-party routing server feature, see
Centralized Third-Party Routing Server on page 287.
Pre-Parsing Manipulation Set Assigns a Pre-Parsing Manipulation Set to the SIP Interface. This
pre-parsing-man-set lets you apply pre-parsing SIP message manipulation rules on
any incoming SIP message received on this SIP Interface.
[SIPInterface_PreParsingManSet
Name] By default, no Pre-Parsing Manipulation Set is assigned.
To configure Pre-Parsing Manipulation Sets, see Configuring Pre-
parsing Manipulation Rules on page 420.
Note:
Pre-Parsing Manipulation is done only on incoming calls.
The device performs Pre-Parsing Manipulation before Pre-
Classification Manipulation and Classification.
Classification
Parameter Description
Classification Failure Response Defines the SIP response code that the device sends if a
Type received SIP request (OPTIONS, REGISTER, or INVITE) fails the
classification_fail_response_type SBC Classification process.
[SIPInterface_ClassificationFailur The valid value can be a SIP response code from 400 through
eResponseType] 699, or it can be set to 0 to not send any response at all. The
default response code is 500 (Server Internal Error).
This feature is important for preventing Denial of Service (DoS)
attacks, typically initiated from the WAN. Malicious attackers can
use SIP scanners to detect ports used by SIP devices. These
scanners scan devices by sending UDP packets containing a SIP
request to a range of specified IP addresses, listing those that
return a valid SIP response. Once the scanner finds a device that
supports SIP, it extracts information from the response and
identifies the type of device (IP address and name) and can
execute DoS attacks. A way to defend the device against such
attacks is to not send a SIP reject response to these unclassified
"calls" so that the attacker assumes that no device exists at such
an IP address and port.
Note:
The parameter is applicable only if you configure the device to
reject unclassified calls, which is done using the 'Unclassified
Calls' parameter (see Configuring Classification Rules on
page 627).
The parameter is applicable only to the SBC application.
Pre Classification Manipulation Assigns a Message Manipulation Set ID to the SIP Interface. This
Set ID lets you apply SIP message manipulation rules on incoming SIP
preclassification-manset initiating-dialog request messages (not in-dialog), received on this
SIP Interface, prior to the Classification process.
[SIPInterface_PreClassificationM
anipulationSet] By default, no Message Manipulation Set ID is defined.
To configure Message Manipulation rules, see Configuring SIP
Message Manipulation on page 409.
Note:
The Message Manipulation Set assigned to a SIP Interface
that is associated with an outgoing call, is ignored. Only the
Message Manipulation Set assigned to the associated IP
Group is applied to the outgoing call.
If both the SIP Interface and IP Group associated with the
incoming call are assigned a Message Manipulation Set, the
one assigned to the SIP Interface is applied first.
The parameter is applicable only to the SBC application.
Media
Media Realm Assigns a Media Realm to the SIP Interface.
media-realm-name By default, no value is defined.
[SIPInterface_MediaRealm] To configure Media Realms, see 'Configuring Media Realms' on
page 333.
Direct Media Enables direct media (RTP/SRTP) flow (i.e., no Media Anchoring)
sbc-direct-media between endpoints associated with the SIP Interface.
[SIPInterface_SBCDirectMedia] [0] Disable = (Default) Media Anchoring is employed, whereby
the media stream traverses the device (and each leg uses a
different coder or coder parameters).
Parameter Description
[1] Enable = No Media Anchoring. Media stream flows directly
between endpoints (i.e., does not traverse the device - no
Media Anchoring).
[2] Enable when Same NAT = No Media Anchoring. Media
stream flows directly between endpoints if they are located
behind the same NAT.
For more information on direct media, see Direct Media on page
602.
Note:
If the parameter is enabled for direct media and the two
endpoints belong to the same SIP Interface, calls cannot be
established if the following scenario exists:
a. One of the endpoints is defined as a foreign user (for
example, “follow me service”)
b. and one endpoint is located on the WAN and the other on
the LAN.
The reason for the above is that in direct media, the device
does not interfere in the SIP signaling such as manipulation of
IP addresses, which is necessary for calls between LAN and
WAN.
To enable direct media for all calls, use the global parameter
SBCDirectMedia. If enabled, even if the SIP Interface is
disabled for direct media, direct media is employed for calls
belonging to the SIP Interface.
If you enable direct media for the SIP Interface, make sure
that your Media Realm provides sufficient ports, as media may
traverse the device for mid-call services (e.g., call transfer).
The parameter is applicable only to the SBC application.
Security
TLS Context Name Assigns a TLS Context (SSL/TLS certificate) to the SIP Interface.
tls-context-name The default TLS Context ("default" at Index 0) is assigned to the
[SIPInterface_TLSContext] SIP Interface by default.
Note:
For incoming calls: The assigned TLS Context is used if no
TLS Context is configured for the Proxy Set associated with
the call or classification to an IP Group based on Proxy Set
fails.
For outgoing calls: The assigned TLS Context is used if no
TLS Context is configured for the Proxy Set associated with
the call.
To configure TLS Contexts, see 'Configuring SSL/TLS
Certificates' on page 109.
TLS Mutual Authentication Enables TLS mutual authentication for the SIP Interface (when
tls-mutual-auth the device acts as a server).
[SIPInterface_TLSMutualAuthenti [0] Disable = Device does not request the client certificate for
cation] TLS connection on the SIP Interface.
[1] Enable = Device requires receipt and verification of the
client certificate to establish the TLS connection on the SIP
Interface.
By default, no value is defined and the
Parameter Description
SIPSRequireClientCertificate global parameter setting is applied.
Message Policy Assigns a SIP message policy to the SIP interface.
message-policy-name To configure SIP Message Policy rules, see 'Configuring SIP
[SIPInterface_MessagePoli Message Policy Rules'.
cyName]
User Security Mode Defines the blocking (reject) policy for incoming SIP dialog-
block-un-reg-users initiating requests (e.g., INVITE messages) from registered and
unregistered users belonging to the SIP Interface.
[SIPInterface_BlockUnRegUsers]
[-1] Not Configured = (Default) The corresponding parameter
in the SRDs table (SRD_BlockUnRegUsers) of the SRD that is
associated with the SIP Interface is applied.
[0] Accept All = Accepts requests from registered and
unregistered users.
[1] Accept Registered Users = Accepts requests only from
users registered with the device. Requests from users not
registered are rejected.
[2] Accept Registered Users from Same Source = Accepts
requests only from registered users whose source address is
the same as that registered with the device (during the
REGISTER message process). All other requests are rejected.
If the transport protocol is UDP, the device verifies the IP
address and port; otherwise, it verifies only the IP address.
The verification is performed before any of the device's call
handling processes (i.e., Classification, Manipulation and
Routing).
Note:
The parameter is applicable only to calls belonging to User-
type IP Groups.
The feature is not applicable to REGISTER requests.
The option, Accept Registered Users from Same Source [2]
does not apply to registration refreshes. These requests are
accepted even if the source address is different to that
registered with the device.
When the device rejects a call, it sends a SIP 500 "Server
Internal Error" response to the user. In addition, it reports the
rejection (Dialog establish failure - Classification failure) using
the Intrusion Detection System (IDS) feature (see Configuring
IDS Policies on page 174), by sending an SNMP trap.
If you configure the parameter to any value other than default
[-1], it overrides the corresponding parameter in the SRDs
table (SRD_BlockUnRegUsersInterface) for the SRD
associated with the SIP Interface.
Enable Un-Authenticated Enables the device to accept REGISTER requests and register
Registrations them in its registration database from new users that have not
enable-un-auth-registrs been authenticated by a proxy/registrar server (due to proxy
down) and thus, re-routed to a User-type IP Group.
[SIPInterface_EnableUnAuthentic
atedRegistrations] In normal operation scenarios in which the proxy server is
available, the device forwards the REGISTER request to the
proxy and if authenticated by the proxy (i.e., device receives a
success response), the device adds the user to its registration
database. The routing to the proxy is according to the SBC IP-to-
IP Routing table where the destination is the proxy’s IP Group.
Parameter Description
However, when the proxy is unavailable (e.g., due to network
connectivity loss), the device can accept REGISTER requests
from new users if a matching alternative routing rule exists in the
SBC IP-to-IP Routing table where the destination is the user’s
User-type IP Group (i.e., call survivability scenarios) and if the
parameter is enabled.
[-1] Not Configured = (Default) The corresponding parameter
in the SRDs table (SRD_EnableUnAuthenticatedRegistrations)
of the SRD associated with the SIP Interface is applied.
[0] Disable = The device rejects REGISTER requests from
new users that were not authenticated by a proxy server.
[1] Enable = The device accepts REGISTER requests from
new users even if they were not authenticated by a proxy
server, and registers the user in its registration database.
Note:
Regardless of the parameter, the device always accepts
registration refreshes from users that are already registered in
its database.
If configured to Disable or Enable, the parameter overrides the
'Enable Un-Authenticated Registrations' parameter settings of
the SRD (in the SRDs table) that is associated with the SIP
Interface.
The parameter is applicable only to the SBC application.
Max. Number of Registered Defines the maximum number of users belonging to the SIP
Users Interface that can register with the device.
max-reg-users By default, no value is defined (i.e., the number of allowed user
[SIPInterface_MaxNumOfRegUs registrations is unlimited).
ers] Note: The parameter is applicable only to the SBC application.
Note:
• For the Gateway application: IP Group ID 0 cannot be associated with Proxy Set
ID 0.
• If you delete an IP Group or modify the 'Type' or 'SRD' parameters, the device
immediately terminates currently active calls that are associated with the IP
Group. In addition, all users belonging to the IP Group are removed from the
device's users database.
The following procedure describes how to configure IP Groups through the Web interface.
You can also configure it through ini file (IPGroup) or CLI (configure voip > ip-group).
To configure an IP Group:
1. Open the IP Groups table (Setup menu > Signaling & Media tab > Core Entities
folder > IP Groups).
2. Click New; the following dialog box appears:
Parameter Description
General
Index Defines an index for the new table row.
[IPGroup_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
name other tables.
[IPGroup_Name] The valid value is a string of up to 40 characters.
Note: Each row must be configured with a unique name.
Topology Location Defines the display location of the IP Group in the Topology view of the
topology-location Web interface.
[IPGroup_TopologyLocatio [0] Down = (Default) The IP Group element is displayed on the lower
n] border of the view.
[1] Up = The IP Group element is displayed on the upper border of
the view.
For more information on the Topology view, see 'Building and Viewing
SIP Entities in Topology View' on page 385.
Parameter Description
Parameter Description
Proxy Set Assigns a Proxy Set to the IP Group. All INVITE messages destined to
proxy-set-name the IP Group are sent to the IP address configured for the Proxy Set.
[IPGroup_ProxySetName] To configure Proxy Sets, see 'Configuring Proxy Sets' on page 375.
Note:
For the Gateway application: IP Group ID 0 cannot be associated
with Proxy Set ID 0.
The Proxy Set must be associated with the same SRD as that
assigned to the IP Group.
You can assign the same Proxy Set to multiple IP Groups.
For the SBC application: Proxy Sets are used for Server-type IP
Groups, but may in certain scenarios also be used for User-type IP
Groups. For example, this is required in deployments where the
device mediates between an IP PBX and a SIP Trunk, and the SIP
Trunk requires SIP registration for each user that requires service. In
such a scenario, the device must register all the users to the SIP
Trunk on behalf of the IP PBX. This is done by using the User Info
table where each user is associated with the source IP Group (i.e.,
the IP PBX). To configure the User Info table, see SBC User
Information for SBC User Database on page 776.
For the Gateway application: Proxy Sets are applicable only to
Sever-type IP Groups.
IP Profile Assigns an IP Profile to the IP Group.
ip-profile-name By default, no value is defined.
[IPGroup_ProfileName] To configure IP Profiles, see 'Configuring IP Profiles' on page 433.
Media Realm Assigns a Media Realm to the IP Group. The Media Realm determines
media-realm-name the UDP port range and maximum sessions on a specific interface for
media traffic associated with the IP Group.
[IPGroup_MediaRealm]
By default, no value is defined.
To configure Media Realms, see Configuring Media Realms on page
333.
Note:
For the parameter to take effect, a device reset is required.
If you delete a Media Realm from the Media Realms table that is
assigned to the IP Group, the parameter value reverts to None.
Contact User Defines the user part of the From, To, and Contact headers of SIP
contact-user REGISTER messages, and the user part of the Contact header of
INVITE messages received from this IP Group and forwarded by the
[IPGroup_ContactUser]
device to another IP Group.
By default, no value is defined.
Note:
The parameter is applicable only to Server-type IP Groups.
The parameter is overridden by the ‘Contact User’ parameter in the
Accounts table (see 'Configuring Registration Accounts' on page
391).
SIP Group Name Defines the SIP Request-URI host name in INVITE and REGISTER
sip-group-name messages sent to the IP Group, or the host name in the From header of
INVITE messages received from the IP Group. In other words, it
[IPGroup_SIPGroupName]
replaces the original host name.
Parameter Description
The valid value is a string of up to 100 characters. By default, no value
is defined.
Note:
If the parameter is not configured, the value of the global parameter,
ProxyName is used instead (see 'Configuring Proxy and Registration
Parameters' on page 398).
The parameter overrides inbound message manipulation rules that
manipulate the host name in Request-URI, To, and/or From SIP
headers. If you configure the parameter and you want to manipulate
the host name in any of these SIP headers, you must apply your
manipulation rule (Manipulation Set ID) to the IP Group as an
Outbound Message Manipulation Set (see the
IPGroup_OutboundManSet parameter), when the IP Group is the
destination of the call. If you apply the Manipulation Set as an
Inbound Message Manipulation Set (see the
IPGroup_InboundManSet parameter), when the IP Group is the
source of the call, the manipulation rule is overridden by the SIP
Group Name parameter.
If the IP Group is of User type, the parameter is used internally as a
host name in the Request-URI for Tel-to-IP initiated calls. For
example, if an incoming call from the device's trunk is routed to a
User-type IP Group, the device first creates the Request-URI
(<destination_number>@<SIP Group Name>), and then it searches
the registration database for a match.
Created By Routing Server (Read-only) Indicates whether the IP Group was created by a third-party
[IPGroup_CreatedByRouti routing server:
ngServer] [0] No
[1] Yes
For more information on the third-party routing server feature, see
Centralized Third-Party Routing Server on page 287.
Used By Routing Server Enables the IP Group to be used by a third-party routing server for call
used-by-routing-server routing decisions.
[IPGroup_UsedByRouting [0] Not Used (default)
Server] [1] Used
For more information on the third-party routing server feature, see
Centralized Third-Party Routing Server on page 287.
Proxy Set Connectivity (Read-only field) Displays the connectivity status with Server-type IP
show voip proxy sets Groups. As the Proxy Set defines the address of the IP Group, the
status connectivity check (keep-alive) by the device is done to this address.
[IPGroup_ProxySetConnec "NA": Functionality is not applicable due to one of the following:
tivity] User-type IP Group.
Server-type IP Group, but the keep-alive mechanism of its'
associated Proxy Set is disabled.
"Not Connected": Keep-alive failure (i.e., no connectivity with the IP
Group).
"Connected": Keep-alive success (i.e., connectivity with the IP
Group).
The connectivity status is also displayed in the Topology View page
(see 'Building and Viewing SIP Entities in Topology View' on page 385).
Note:
The feature is applicable only to Server-type IP Groups.
Parameter Description
To support the feature, you must enable the keep-alive mechanism
of the Proxy Set that is associated with the IP Group (see
'Configuring Proxy Sets' on page 375).
If the Proxy Set is configured with multiple proxies (addresses) and
at least one of them is "alive", the displayed status is "Connected".
To view the connected proxy server, see 'Viewing Proxy Set Status'
on page 863.
The "Connected" status also applies to scenarios where the device
rejects calls with the IP Group due to low QoE (e.g., low MOS),
despite connectivity.
SBC General
Classify By Proxy Set Enables classification of incoming SIP dialogs (INVITEs) to Server-type
classify-by-proxy-set IP Groups based on Proxy Set (assigned using the
IPGroup_ProxySetName parameter).
[IPGroup_ClassifyByProxy
Set] [0] Disable
[1] Enable = (Default) The device searches the Proxy Sets table for a
Proxy Set that is configured with the same source IP address as that
of the incoming INVITE (if host name, then according to the
dynamically resolved IP address list). If such a Proxy Set is found,
the device classifies the INVITE as belonging to the IP Group
associated with the Proxy Set.
Note:
The parameter is applicable only to Server-type IP Groups.
For security, it is recommended to classify SIP dialogs based on
Proxy Set only if the IP address of the IP Group is unknown. In other
words, if the Proxy Set associated with the IP Group is configured
with an FQDN. In such cases, the device classifies incoming SIP
dialogs to the IP Group based on the DNS-resolved IP address. If
the IP address is known, it is recommended to use a Classification
rule instead (and disable the Classify by Proxy Set feature), where
the rule is configured with not only the IP address, but also with SIP
message characteristics to increase the strictness of the
classification process (see Configuring Classification Rules on page
627).
The reason for preferring classification based on Proxy Set when the
IP address is unknown is that IP address forgery (commonly known
as IP spoofing) is more difficult than malicious SIP message
tampering and therefore, using a Classification rule without an IP
address offers a weaker form of security. When classification is
based on Proxy Set, the Classification table for the specific IP Group
is ignored.
If you have assigned the same Proxy Set to multiple IP Groups,
disable the parameter and instead, use Classification rules to classify
incoming SIP dialogs to these IP Groups. If the parameter is
enabled, the device is unable to correctly classify incoming INVITEs
to their appropriate IP Groups.
Classification by Proxy Set occurs only if classification based on the
device's registration database fails (i.e., the INVITE is not from a
registered user).
SBC Operation Mode Defines the device's operational mode for the IP Group.
sbc-operation-mode [-1] Not Configured = (Default)
Parameter Description
[IPGroup_SBCOperationM [0] B2BUA = Device operates as a back-to-back user agent
ode] (B2BUA), changing the call identifiers and headers between the
inbound and outbound legs.
[1] Call Stateful Proxy = Device operates as a Stateful Proxy,
passing the SIP message transparently between inbound and
outbound legs. In other words, the same SIP dialog identifiers (tags,
Call-Id and CSeq) occur on both legs (as long as no other
configuration disrupts the CSeq compatibleness).
For more information on B2BUA and Stateful Proxy modes, see B2BUA
and Stateful Proxy Operating Modes on page 592.
Note: If configured, the parameter overrides the 'SBC Operation Mode'
parameter in the SRDs table.
SBC Client Forking Mode Defines call forking of INVITE messages to up to five separate SIP
sbc-client-forking-mode outgoing legs for User-type IP Groups. This occurs if multiple contacts
are registered under the same AOR in the device's registration
[IPGroup_EnableSBCClien
database.
tForking]
[0] Sequential = (Default) Sequentially sends the INVITE to each
contact. If there is no answer from the first contact, it sends the
INVITE to the second contact, and so on until a contact answers. If
no contact answers, the call fails or is routed to an alternative
destination, if configured.
[1] Parallel = Sends the INVITE simultaneously to all contacts. The
call is established with the first contact that answers.
[2] Sequential Available Only = Sequentially sends the INVITE only
to available contacts (i.e., not busy). If there is no answer from the
first available contact, it sends the INVITE to the second contact, and
so on until a contact answers. If no contact answers, the call fails or
is routed to an alternative destination, if configured.
Note: The device can also fork INVITE messages received for a
Request-URI of a specific contact (user) registered in the database to all
other users located under the same AOR as the specific contact. This is
configured using the SBCSendInviteToAllContacts parameter.
Advanced
Local Host Name Defines the host name (string) that the device uses in the SIP
local-host-name message's Via and Contact headers. This is typically used to define an
FQDN as the host name. The device uses this string for Via and
[IPGroup_ContactName]
Contact headers in outgoing INVITE messages sent to a specific IP
Group, and the Contact header in SIP 18x and 200 OK responses for
incoming INVITE messages received from a specific IP Group. The IP-
to-Tel Routing table can be used to identify the source IP Group from
where the INVITE message was received.
If the parameter is not configured, these headers are populated with the
device's dotted-decimal IP address of the network interface on which
the message is sent.
By default, no value is defined.
Note: To ensure proper device handling, the parameter should be a
valid FQDN.
UUI Format Enables the generation of the Avaya UCID value, adding it to the
uui-format outgoing INVITE sent to this IP Group.
[IPGroup_UUIFormat] [0] Disabled (default)
[1] Enabled
Parameter Description
This provides support for interworking with Avaya equipment by
generating Avaya's UCID value in outgoing INVITE messages sent to
Avaya's network. The device adds the UCID in the User-to-User SIP
header.
Avaya's UCID value has the following format (in hexadecimal): 00 + FA
+ 08 + node ID (2 bytes) + sequence number (2 bytes) + timestamp (4
bytes)
This is interworked in to the SIP header as follows:
User-to-User: 00FA080019001038F725B3;encoding=hex
Note: To define the Network Node Identifier of the device for Avaya
UCID, use the 'Network Node ID' (NetworkNodeId) parameter.
Always Use Src Address Enables the device to always send SIP requests and responses, within
always-use-source-addr a SIP dialog, to the source IP address received in the previous SIP
message packet. This feature is especially useful in scenarios where
[IPGroup_AlwaysUseSourc
the IP Group endpoints are located behind a NAT firewall (and the
eAddr]
device is unable to identify this using its regular NAT mechanism).
[0] No = (Default) The device sends SIP requests according to the
settings of the global parameter, SIPNatDetection.
[1] Yes = The device sends SIP requests and responses to the
source IP address received in the previous SIP message packet.
For more information on NAT traversal, see 'Remote UA behind NAT'
on page 155.
SBC Advanced
Source URI Input Defines the SIP header in the incoming INVITE that is used for call
src-uri-input matching characteristics based on source URIs.
[IPGroup_SourceUriInput] [-1] Not Configured (default)
[0] From
[1] To
[2] Request-URI
[3] P-Asserted - First Header
[4] P-Asserted - Second Header
[5] P-Preferred
[6] Route
[7] Diversion
[8] P-Associated-URI
[9] P-Called-Party-ID
[10] Contact
[11] Referred-by
Note:
The parameter is applicable only when classification is done
according to the Classification table.
If the configured SIP header does not exist in the incoming INVITE
message, the classification of the message to a source IP Group
fails.
If the device receives an INVITE as a result of a REFER request or a
3xx response, then the incoming INVITE is routed according to the
Request-URI. The device identifies such INVITEs according to a
specific prefix in the Request-URI header, configured by the
Parameter Description
SBCXferPrefix parameter. Therefore, in this scenario, the device
ignores the parameter setting.
Destination URI Input Defines the SIP header in the incoming INVITE to use as a call
dst-uri-input matching characteristic based on destination URIs. The parameter is
used for classification and routing purposes. The device first uses the
[IPGroup_DestUriInput]
parameter’s settings as a matching characteristic (input) to classify the
incoming INVITE to an IP Group (source IP Group) in the Classification
table. Once classified, the device uses the parameter for routing the
call. For example, if set to To, the URI in the To header of the incoming
INVITE is used as a matching characteristic for classifying the call to an
IP Group in the Classification table. Once classified, the device uses the
URI in the To header as the destination.
[-1] Not Configured (default)
[0] From
[1] To
[2] Request-URI
[3] P-Asserted - First Header
[4] P-Asserted - Second Header
[5] P-Preferred
[6] Route
[7] Diversion
[8] P-Associated-URI
[9] P-Called-Party-ID
[10] Contact
[11] Referred-by
Note:
The parameter is applicable only when classification is done
according to the Classification table.
If the configured SIP header does not exist in the incoming INVITE
message, the classification of the message to a source IP Group
fails.
If the device receives an INVITE as a result of a REFER request or a
3xx response, the incoming INVITE is routed according to the
Request-URI. The device identifies such INVITEs according to a
specific prefix in the Request-URI header, configured by the
SBCXferPrefix parameter. Therefore, in this scenario, the device
ignores the parameter setting.
SIP Connect Defines the IP Group as representing multiple registering servers, each
sip-connect of which may use a single registration, yet represent multiple users. In
addition, it defines how the device saves registrations’ information for
[IPGroup_SIPConnect]
REGISTER messages received from the IP Group, in its registration
database. For requests routed to the IP Group's users, the device
replaces the Request-URI header with the incoming To header (which
contains the remote phone number).
[0] No = (Default) No extra key based on source IP address is added
to the registration database.
[1] Classify by IP = For initial registrations from the IP Group, the
device adds a key representing the user to its registration database,
based on the REGISTER request source IP address, port (if UDP)
and SIP Interface ID (e.g., "10.33.3.3:5010#1"). The device classifies
incoming non-REGISTER SIP dialog requests (e.g., INVITEs) from
Parameter Description
the IP Group according to the received source IP address. The
device rejects initial registration requests that have the same IP
address, as the necessary key is already used for another
registration.
[2] Classify by IP and Contact = For initial registrations from the IP
Group, the device adds a key representing the user to its registration
database, based on the URI of the Contact header, source IP
address, port (if UDP) and SIP Interface ID (e.g.,
"user@host.com#10.33.3.3:5010#1"). The device classifies incoming
non-REGISTER SIP dialog requests (e.g., INVITEs) from the IP
Group according to the received IP address and Contact URI. The
device rejects initial registration requests that have the same IP
address and Contact URI, as the necessary key is already used for
another registration.
Note:
The parameter is applicable only to User-type IP Groups.
The parameter is applicable only to the SBC application.
SBC PSAP Mode Enables E9-1-1 emergency call routing in a Microsoft Skype for
sbc-psap-mode Business environment.
[IPGroup_SBCPSAPMode] [0] Disable (default)
[1] Enable
For more information, see E9-1-1 Support for Microsoft Skype for
Business on page 299.
Route Using Request URI Enables the device to use the port indicated in the Request-URI of the
Port incoming message as the destination port when routing the message to
use-requri-port the IP Group. The device uses the IP address (and not port) that is
configured for the Proxy Set associated with the IP Group. The
[IPGroup_SBCRouteUsing
parameter thus allows the device to route calls to the same server (IP
RequestURIPort]
Group), but different port.
[0] Disable = (Default) The port configured for the associated Proxy
Set is used as the destination port.
[1] Enable = The port indicated in the Request-URI of the incoming
message is used as the destination port.
DTLS Context Assigns a TLS Context (certificate) to the IP Group, which is used for
dtls-context DTLS sessions (handshakes) with the IP Group.
[IPGroup_DTLSContext] By default, no value is defined.
To configure TLS Contexts, see Configuring TLS Certificate Contexts on
page 109.
Keep Original Call-ID Enables the device to use the same call identification (SIP Call-ID
sbc-keep-call-id header value) received in incoming messages for the call identification
in outgoing messages. The call identification value is contained in the
[IPGroup_SBCKeepOrigin
SIP Call-ID header.
alCallID]
[0] No = (Default) The device creates a new Call-ID value for the
outgoing message.
[1] Yes = The device uses the same Call-ID value received in the
incoming message for the Call-ID in the outgoing message.
Note: When the device sends an INVITE as a result of a REFER/3xx
termination, the device always creates a new Call-ID value and ignores
the parameter's settings.
Parameter Description
Dial Plan Assigns a Dial Plan to the IP Group. The device searches the Dial Plan
sbc-dial-plan-name for a dial plan rule that matches the source number and if not found, for
a rule that matches the destination number. If a matching dial plan rule
[IPGroup_SBCDialPlanNa
is found, the rule's tag is used in the routing and/or manipulation
me]
processes as source and/or destination tags.
To configure Dial Plans, see Configuring Dial Plans on page 678.
Note: For IP-to-IP Routing rules that are configured for destination
based on tags (i.e., 'Destination Type' parameter configured to
Destination Tag), the parameter is applicable only to the source IP
Group and the device searches the Dial Plan for a dial plan rule that
matches the prefix of the destination number only. For more
information on routing based on destination tags, see Using Dial Plan
Tags for Routing Destinations on page 688.
Tags Assigns a Dial Plan tag that is used to determine whether the incoming
tags SIP dialog is sent to this IP Group. The parameter is used when IP-to-IP
Routing rules are configured for destination based on tags (i.e.,
[IPGroup_Tags]
'Destination Type' parameter configured to Destination Tag). For more
information on routing based on destination tags, see Using Dial Plan
Tags for Routing Destinations on page 688.
Call Setup Rules Set ID Assigns a Call Setup Rule Set ID to the IP Group. The device runs the
call-setup-rules-set-id Call Setup rule immediately before the routing stage (i.e., only after the
classification and manipulation stages).
[IPGroup_CallSetupRulesS
etId] By default, no value is assigned.
To configure Call Setup Rules, see Configuring Call Setup Rules on
page 400.
Quality of Experience
QoE Profile Assigns a Quality of Experience Profile rule.
qoe-profile By default, no value is defined.
[IPGroup_QOEProfile] To configure Quality of Experience Profiles, see 'Configuring Quality of
Experience Profiles' on page 321.
Bandwidth Profile Assigns a Bandwidth Profile rule.
bandwidth-profile By default, no value is defined.
[IPGroup_BWProfile] To configure Bandwidth Profiles, see 'Configuring Bandwidth Profiles'
on page 326.
Message Manipulation
Inbound Message Assigns a Message Manipulation Set (rule) to the IP Group for SIP
Manipulation Set message manipulation on the inbound leg.
inbound-mesg- By default, no value is defined.
manipulation-set To configure Message Manipulation rules, see Configuring SIP
[IPGroup_InboundManSet] Message Manipulation on page 409.
Note:
The parameter is applicable only to the SBC application.
The IPGroup_SIPGroupName parameter overrides inbound
message manipulation rules (assigned to the
IPGroup_InboundManSet parameter) that manipulate the host name
in Request-URI, To, and/or From SIP headers. If you want to
manipulate the host name using message manipulation rules in any
of these SIP headers, you must apply your manipulation rule
Parameter Description
(Manipulation Set ID) to the IP Group as an Outbound Message
Manipulation Set (see the IPGroup_OutboundManSet parameter),
when the IP Group is the destination of the call.
Outbound Message Assigns a Message Manipulation Set (rule) to the IP Group for SIP
Manipulation Set message manipulation on the outbound leg.
outbound-mesg- By default, no value is defined.
manipulation-set To configure Message Manipulation rules, see 'Configuring SIP
[IPGroup_OutboundManSe Message Manipulation' on page 409.
t] Note: If you assign a Message Manipulation Set ID that includes rules
for manipulating the host name in the Request-URI, To, and/or From
SIP headers, the parameter overrides the IPGroup_SIPGroupName
parameter.
Message Manipulation Defines a value for the SIP user part that can be used in Message
User-Defined String 1 Manipulation rules configured in the Message Manipulations table. The
msg-man-user-defined- Message Manipulation rule obtains this value from the IP Group, by
string1 using the following syntax:
[IPGroup_MsgManUserDef param.ipg.<src|dst>.user-defined.<0>.
1] The valid value is a string of up to 30 characters. By default, no value is
defined.
To configure Message Manipulation rules, see 'Configuring SIP
Message Manipulation' on page 409.
Message Manipulation Defines a value for the SIP user part that can be used in Message
User-Defined String 2 Manipulation rules configured in the Message Manipulations table. The
msg-man-user-defined- Message Manipulation rule obtains this value from the IP Group, by
string2 using the following syntax: param.ipg.<src|dst>.user-defined.<1>.
[IPGroup_MsgManUserDef The valid value is a string of up to 30 characters. By default, no value is
2] defined.
To configure Message Manipulation rules, see 'Configuring SIP
Message Manipulation' on page 409.
SBC Registration and Authentication
Max. Number of Defines the maximum number of users in this IP Group that can register
Registered Users with the device.
max-num-of-reg-users The default is -1, meaning that no limitation exists for registered users.
[IPGroup_MaxNumOfReg Note: The parameter is applicable only to User-type IP Groups.
Users]
Registration Mode Defines the registration mode for the IP Group:
registration-mode [0] User Initiates Registration (default)
[IPGroup_RegistrationMod [1] SBC Initiates Registration = Used when the device serves as a
e] client (e.g., with an IP PBX). This functions only with the User Info
file.
[2] Registrations not Needed = The device adds users to its
database in active state.
User Stickiness Enables user "stickiness" (binding) to a specific registrar server. The
sbc-user-stickiness registrar server is one of the IP addresses of the Proxy Set associated
with this Server-type IP Group. This feature applies to users belonging
[IPGroup_SBCUserStickin
to a User-type IP Group that are routed to this destination Server-type
ess]
IP Group.
[0] Disable = After a successful initial registration of the user to a
Parameter Description
registrar, whenever the device receives a SIP request or registration
refresh from the user, the device sends the request to whichever
registrar (IP address of the Proxy Set) is currently active. In the case
of proxy load-balancing, there is no certainty to which IP address the
request is routed.
[1] Enable = The device always routes SIP requests (INVITEs,
SUBSCRIBEs and REGISTER refreshes) received from the user to
the same registrar server to which the last successful REGISTER
request for that user was routed. In other words, once initial
registration of the user to one of the IP addresses of the Proxy Set
associated with this destination Server-type IP Group is successful
(i.e., 200 OK), binding occurs to this specific address (registrar) and
all future SIP requests from the user are routed (based on matched
routing rule) only to this specific registrar.
Note:
The parameter is applicable only to Server-type IP Groups.
The Proxy Set associated with the Server-type IP Group must be
configured with multiple IP addresses (or an FQDN that resolves into
multiple IP addresses).
This feature is also applicable to IP Group Sets (see Configuring IP
Group Sets on page 660). If a user is bound to a registrar associated
with this Server-type IP Group which also belongs to an IP Group
Set, IP Group Set logic of choosing an IP Group is ignored and
instead, the device always routes requests from this user to this
specific registrar.
A user's "stickiness" to a specific registrar ends upon the following
scenarios:
If you modify the Proxy Set.
If the Proxy Set is configured with an FQDN and a DNS
resolution refresh removes the IP address to which the user is
bound.
User registration expires or the user initiates an unregister
request.
The Proxy Set's Hot-Swap feature (for proxy redundancy) is not
supported for users that are already bound to a registrar. However,
you can achieve proxy "hot-swap" for failed initial (non-bounded)
REGISTER requests. If a failure response is received for the initial
REGISTER request and the response’s code appears in the
Alternative Routing Reasons table (see Configuring SIP Response
Codes for Alternative Routing Reasons onn page 654), "hot-swap" to
the other IP addresses of the Proxy Set is done until a success
response is received from one of the addresses. In the case of failed
REGISTER refresh requests from users that are already bound to a
registrar, no "hot-swap" occurs for that request; only for subsequent
refresh requests.
When using the User Info table (see SBC User Information for SBC
User Database on page 776), registrar "stickiness" is supported only
when the user initiates the REGISTER request. Therefore, you must
configure the 'Registration Mode' parameter of the IP Group (User-
type) to which the user belongs, to User Initiates Registration.
This feature is also supported when the device operates in HA mode;
registrar "stickiness" is retained even after an HA switchover.
User UDP Port Assignment Enables the device to assign a unique, local UDP port (for SIP
signaling) per registered user (User-type IP Group) on the leg
Parameter Description
user-udp-port- interfacing with the proxy server (Server-type IP Group). The port is
assignment used for incoming (from the proxy to the user) and outgoing (from the
[IPGroup_UserUDPPortAs user to the proxy) SIP messages. Therefore, the parameter must be
signment] enabled for the IP Group of the proxy server.
[0] Disable = (Default) The device uses the same local UDP port for
all the registered users. This single port is configured for the SIP
Interface ('UDP Port' parameter) associated with the Proxy Set of the
proxy server.
[1] Enable = The device assigns each registered user a unique local
port, chosen from a configured UDP port range. The port range is
configured for the SIP Interface ('Additional UDP Ports' parameter)
associated with the proxy server.
The device assigns a unique port upon the first REGISTER request
received from the user. Subsequent SIP messages other than
REGISTER messages (e.g., INVITE) from the user are sent to the
proxy server on this unique local port. The device rejects the SIP
request if there is no available unique port for use (due to the
number of registered users exceeding the configured port range).
The same unique port is also used for registration refreshes. The
device de-allocates the port for registration expiry. For SIP requests
from the proxy server, the local port on which they are received is
irrelevant (unique port or any other port); the device does not use
this port to identify the registered user.
Note:
This feature does not apply to SIP requests received from non-
registered users. For these users, the device sends all requests to
the proxy server on the single port configured for the SIP Interface
('UDP Port' parameter).
For HA systems, the unique port assigned to a registered user is
also used after an HA switchover.
This feature is applicable only if the user initiates registration (i.e.,
user sends the REGISTER request). In other words, the 'Registration
Mode' parameter of the IP Group of the user must be configured to
User Initiates Registration.
Authentication Mode Defines the authentication mode.
authentication-mode [0] User Authenticates = (Default) The device does not handle the
[IPGroup_AuthenticationM authentication, but simply forwards the authentication messages
ode] between the SIP user agents.
[1] SBC as Client = The device authenticates as a client. It receives
the 401/407 response from the proxy requesting for authentication.
The device sends the proxy the authorization credentials (i.e.,
username and password) according to one of the following:
1)Account configured in the Accounts table (only if authenticating
Server-type IP Group), 2) global username and password
parameters (only if authenticating Server-type IP Group), 3) User
Information file, or 4) sends request to users requesting credentials
(only if authenticating User-type IP Group). For more information on
Accounts, see Configuring Registration Accounts on page 391.
[2] SBC as Server = The device acts as an Authentication server:
Authenticates SIP clients, using the usernames and passwords
in the User Information table (see SBC User Information for SBC
User Database on page 776). This is applicable only to User-
Parameter Description
type IP Groups.
Authenticates SIP severs. This is applicable only to Server-type
IP Groups.
Authentication Method List Defines SIP methods received from the IP Group that must be
authentication-method-list challenged by the device when the device acts as an Authentication
server. If no methods are configured, the device doesn't challenge any
[IPGroup_MethodList]
methods.
By default, no value is defined. To define multiple SIP methods, use the
backslash ( \ ) to separate each method (e.g., INVITE\REGISTER).
Note: The parameter is applicable only if the 'Authentication Mode'
parameter is set to SBC as Server [2].
Username Defines the shared username for authenticating the IP Group, when the
username device acts as an Authentication server.
[IPGroup_Username] The valid value is a string of up to 51 characters. By default, no
username is defined.
Note:
The parameter is applicable only to Server-type IP Groups and when
the 'Authentication Mode' parameter is set to SBC as Server (i.e.,
authentication of servers).
To specify the SIP request types (e.g., INVITE) that must be
challenged by the device, use the 'Authentication Method List'
parameter.
Password Defines the shared password for authenticating the IP Group, when the
password device acts as an Authentication server.
IPGroup_Password] The valid value is a string of up to 51 characters. By default, no
password is defined.
Note:
The parameter is applicable only to Server-type IP Groups and when
the 'Authentication Mode' parameter is set to SBC as Server (i.e.,
authentication of servers).
To specify the SIP request types (e.g., INVITE) that must be
challenged by the device, use the 'Authentication Method List'
parameter.
Gateway
SIP Re-Routing Mode Defines the routing mode after a call redirection (i.e., a 3xx SIP
re-routing-mode response is received) or transfer (i.e., a SIP REFER request is
received).
[IPGroup_SIPReRoutingM
ode] [-1] = Not Configured (Default)
[0] Standard = INVITE messages that are generated as a result of
Transfer or Redirect are sent directly to the URI, according to the
Refer-To header in the REFER message or Contact header in the
3xx response.
[1] Proxy = Sends a new INVITE to the Proxy. This is applicable only
if a Proxy server is used and the parameter AlwaysSendtoProxy is
set to 0.
[2] Routing Table = Uses the Routing table to locate the destination
and then sends a new INVITE to this destination.
Note:
When the parameter is set to [1] and the INVITE sent to the Proxy
fails, the device re-routes the call according to the Standard mode
Parameter Description
[0].
When the parameter is set to [2] and the INVITE fails, the device re-
routes the call according to the Standard mode [0]. If DNS resolution
fails, the device attempts to route the call to the Proxy. If routing to
the Proxy also fails, the Redirect / Transfer request is rejected.
When the parameter is set to [2], the XferPrefix parameter can be
used to define different routing rules for redirected calls.
The parameter is ignored if the parameter AlwaysSendToProxy is set
to 1.
Always Use Route Table Defines the Request-URI host name in outgoing INVITE messages.
always-use-route-table [0] No (default).
[IPGroup_AlwaysUseRout [1] Yes = The device uses the IP address (or domain name) defined
eTable] in the Tel-to-IP Routing table (see Configuring Tel-to-IP Routing
Rules on page 509) as the Request-URI host name in outgoing
INVITE messages, instead of the value configured in the 'SIP Group
Name' field.
Note: The parameter is applicable only to Server-type IP Groups.
GW Group Status
GW Group Registered IP (Read-only field) Displays the IP address of the IP Group entity
Address (gateway) if registered with the device; otherwise, the field is blank.
Note: The field is applicable only to Gateway-type IP Groups (i.e., the
'Type' parameter is configured to Gateway).
GW Group Registered (Read-only field) Displays whether the IP Group entity (gateway) is
Status registered with the device ("Registered" or "Not Registered").
Note: The field is applicable only to Gateway-type IP Groups (i.e., the
'Type' parameter is configured to Gateway).
response codes are received from the keep-alive messages. To ensure that a previously
offline proxy is now online, you can configure the number of required consecutive
successful keep-alive messages (SIP OPTIONS only) before the device considers the
proxy as being online. This mechanism avoids the scenario in which the device falsely
detects a proxy as being online when it is actually offline, resulting in call routing failure. To
view the connectivity status of Proxy Sets, see Viewing Proxy Set Status on page 863.
You can also enable the device to classify incoming SBC SIP dialogs to IP Groups, based
on Proxy Set. If the source address of the incoming SIP dialog is the same as the address
of a Proxy Set, the device classifies the SIP dialog as belonging to the IP Group that is
associated with the Proxy Set.
To use a configured Proxy Set, you need to assign it to an IP Group in the IP Groups table
(see 'Configuring IP Groups' on page 359). When the device sends INVITE messages to
an IP Group, it sends it to the address configured for the Proxy Set. You can assign the
same Proxy Set to multiple IP Groups (belonging to the same SRD).
Note:
• It is recommended to classify incoming SIP dialogs to IP Groups, based on the
Classification table (see Configuring Classification Rules on page 627) instead of
based on Proxy Set.
• You can view the device's connectivity status with proxy servers in the Tel-to-IP
Routing table, for Tel-to-IP routing rules whose destination is an IP Group that is
associated with a Proxy Set. The status is only displayed for Proxy Sets enabled
with the Proxy Keep-Alive feature.
The Proxy Set is configured using two tables, one a "child" of the other:
Proxy Sets table: Defines the attributes of the Proxy Set such as associated SIP
Interface and redundancy features - ini file parameter, ProxySet or CLI command,
configure voip > proxy-set
Proxy Set Address table ("child"): Defines the addresses of the Proxy Set - table ini
file parameter, ProxyIP or CLI command, configure voip > proxy-ip > proxy-set-id
3. Configure a Proxy Set according to the parameters described in the table below.
4. Click Apply.
5. Select the index row of the Proxy Set that you added, and then click the Proxy
Address link located below the table; the Proxy Address table opens.
6. Click New; the following dialog box appears:
Figure 17-11: Proxy Address Table - Add Dialog Box
7. Configure the address of the Proxy Set according to the parameters described in the
table below.
8. Click Apply.
Table 17-7: Proxy Sets Table and Proxy Address Table Parameter Description
Parameter Description
Parameter Description
[ProxySet_SRDName] The parameter is mandatory and must be configured first
before you can configure the other parameters in the table.
To configure SRDs, see Configuring SRDs on page 341.
General
Index Defines an index number for the new table row.
configure voip > voip-network Note: Each row must be configured with a unique index.
proxy-set
[ProxySet_Index]
Name Defines a descriptive name, which is used when associating the
proxy-name row in other tables.
[ProxySet_ProxyName] The valid value is a string of up to 40 characters.
Note: Each row must be configured with a unique name.
Gateway IPv4 SIP Interface Assigns an IPv4-based SIP Interface for Gateway calls to the
gwipv4-sip-int-name Proxy Set.
[ProxySet_GWIPv4SIPInterfaceN Note:
ame] At least one SIP Interface must be assigned to the Proxy Set.
The parameter appears only if you have configured a network
interface with an IPv4 address in the IP Interfaces table (see
Configuring IP Network Interfaces on page 141).
To configure SIP Interfaces, see Configuring SIP Interfaces
on page 351.
SBC IPv4 SIP Interface Assigns an IPv4-based SIP Interface for SBC calls to the Proxy
sbcipv4-sip-int-name Set.
[ProxySet_SBCIPv4SIPInterfaceN Note:
ame] At least one SIP Interface must be assigned to the Proxy Set.
The parameter appears only if you have configured a network
interface with an IPv4 address in the IP Interfaces table (see
Configuring IP Network Interfaces on page 141).
To configure SIP Interfaces, see 'Configuring SIP Interfaces'
on page 351.
Gateway IPv6 SIP Interface Assigns an IPv6-based SIP Interface for Gateway calls to the
gwipv6-sip-int-name Proxy Set.
[ProxySet_GWIPv6SIPInterfaceN Note:
ame] At least one SIP Interface must be assigned to the Proxy Set.
The parameter appears only if you have configured a network
interface with an IPv6 address in the IP Interfaces table.
SBC IPv6 SIP Interface Assigns an IPv6-based SIP Interface for SBC calls to the Proxy
sbcipv6-sip-int-name Set.
[ProxySet_SBCIPv6SIPInterfaceN Note:
ame] At least one SIP Interface must be assigned to the Proxy Set.
The parameter appears only if you have configured a network
interface with an IPv6 address in the IP Interfaces table.
TLS Context Index Assigns a TLS Context (SSL/TLS certificate) to the Proxy Set.
tls-context-name By default, no TLS Context is assigned. If you assign a TLS
[ProxySet_TLSContextName] Context, the TLS Context is used as follows:
Incoming calls: If the 'Transport Type' parameter (in this
table) is set to TLS and the incoming call is successfully
Parameter Description
classified to an IP Group based on the Proxy Set, this TLS
Context is used. If the 'Transport Type' parameter is set to
UDP or classification to this Proxy Set fails, the TLS Context
is not used. Instead, the device uses the TLS Context
configured for the SIP Interface (see 'Configuring SIP
Interfaces' on page 351) used for the call; otherwise, the
default TLS Context (ID 0) is used.
Outgoing calls: If the 'Transport Type' parameter is set to
TLS and the outgoing call is sent to an IP Group that is
associated with this Proxy Set, this TLS Context is used.
Instead, the device uses the TLS Context configured for the
SIP Interface used for the call; otherwise, the default TLS
Context (ID 0) is used. If the 'Transport Type' parameter is set
to UDP, the device uses UDP to communicate with the proxy
and no TLS Context is used.
To configure TLS Contexts, see 'Configuring TLS Certificate
Contexts' on page 109.
Keep Alive
Proxy Keep-Alive Enables the device's Proxy Keep-Alive feature, which checks
proxy-enable-keep-alive communication with the proxy server.
[ProxySet_EnableProxyKeepAlive] [0] Disable (default).
[1] Using OPTIONS = Enables the Proxy Keep-Alive feature
using SIP OPTIONS messages. The device sends an
OPTIONS message every user-defined interval, configured
by the 'Proxy Keep-Alive Time' parameter (in this table). If the
device receives a SIP response code that is configured in the
'Keep-Alive Failure Responses' parameter (in this table), the
device considers the proxy as down. You can also configure
whether to use the device's IP address or string name
("gateway name") in the OPTIONS message (see the
UseGatewayNameForOptions parameter).
[2] Using REGISTER = Enables the Proxy Keep-Alive feature
using SIP REGISTER messages. The device sends a
REGISTER message every user-defined interval, configured
by the RegistrationTime parameter (Gateway application) or
SBCProxyRegistrationTime parameter (SBC application). Any
SIP response from the proxy - success (200 OK) or failure
(4xx response) - is considered as if the proxy is "alive". If the
proxy does not respond to INVITE messages sent by the
device, the proxy is considered as down (offline).
Note:
Proxy keep-alive using REGISTER messages (Using
REGISTER option) is applicable only to the Parking
redundancy mode ('Redundancy Mode' parameter configured
to Parking).
For Survivability mode for User-type IP Groups, you must
enable this Proxy Keep-Alive feature.
If you enable this Proxy Keep-Alive feature and the proxy
uses the TCP/TLS transport type, you can enable CRLF
Keep-Alive feature, using the UsePingPongKeepAlive
parameter.
If you enable this Proxy Keep-Alive feature, the device can
Parameter Description
operate with multiple proxy servers (addresses) for
redundancy and load balancing (see the 'Proxy Load
Balancing Method' parameter).
Proxy Keep-Alive Time Defines the interval (in seconds) between keep-alive messages
proxy-keep-alive-time sent by the device when the Proxy Keep-Alive feature is enabled
(see the 'Proxy Keep-Alive' parameter in this table).
[ProxySet_ProxyKeepAliveTime]
The valid range is 5 to 2,000,000. The default is 60.
Note: The parameter is applicable only if the 'Proxy Keep-Alive'
parameter is set to Using Options.
Keep-Alive Failure Responses Defines SIP response codes that if any is received in response
keepalive-fail-resp to a keep-alive message using SIP OPTIONS, the device
considers the proxy as down.
[ProxySet_KeepAliveFailureResp]
Up to three response codes can be configured, where each code
is separated by a comma (e.g., 407,404). By default, no
response code is defined. If no response code is configured, or if
response codes received are not those configured, the proxy is
considered "alive".
Note: The SIP 200 response code is not supported for this
feature.
Success Detection Retries Defines the minimum number of consecutive, successful keep-
success-detect-retries alive messages that the device sends to an offline proxy, before
the device considers the proxy as being online. The interval
[ProxySet_SuccessDetectionRetri
between the sending of each consecutive successful keep-alive
es]
is configured by the 'Success Detection Interval' parameter (see
below). For an example of using this parameter, see the
'Success Detection Interval' parameter.
The valid range is 1 to 100. The default is 1.
Note: The parameter is applicable only if the 'Proxy Keep-Alive'
parameter is set to Using Options.
Success Detection Interval Defines the interval (in seconds) between each keep-alive retries
success-detect-int (as configured by the 'Success Detection Retries' parameter)
that the device performs for offline proxies.
[ProxySet_SuccessDetectionInter
val] The valid range is 1 to 200. The default is 10.
For example, assume that the ‘Success Detection Retries’
parameter is configured to 3 and the ‘Success Detection Interval’
parameter to 5 (seconds). When connectivity is lost with the
proxy, the device sends keep-alive messages to the proxy. If the
device receives a successful response from the proxy, it sends
another (1st) keep-alive after 5 seconds, and if successful, sends
another (2nd) keep-alive after 5 seconds, and if successful,
sends another (3rd) keep-alive after 5 seconds, and if
successful, considers connectivity with the proxy as being
restored.
Note: The parameter is applicable only if the 'Proxy Keep-Alive'
parameter is set to Using Options.
Failure Detection Retransmissions Defines the maximum number of UDP retransmissions that the
fail-detect-rtx device sends to an offline proxy, before the device considers the
proxy as being offline.
[ProxySet_FailureDetectionRetran
smissions] The valid range is -1 to 255. The default is -1 (i.e., the settings of
the global parameter SIPMaxRtxis applied).
Note: The parameter is applicable only if the 'Proxy Keep-Alive'
Parameter Description
parameter is set to Using Options.
Redundancy
Redundancy Mode Determines whether the device switches from a redundant proxy
proxy-redundancy-mode to the primary proxy when the primary proxy becomes available
again.
[ProxySet_ProxyRedundancyMod
e] [-1] = Not configured (Default). Proxy redundancy method is
according to the settings of the global parameter,
ProxyRedundancyMode.
[0] Parking = The device continues operating with the
redundant (now active) proxy even if the primary proxy
returns to service. If the redundant proxy subsequently
becomes unavailable, the device operates with the next
configured redundant proxy.
[1] Homing = The device always attempts to operate with the
primary proxy. The device switches back to the primary proxy
whenever it becomes available.
Note:
To enable this functionality, you must also enable the Proxy
Keep-Alive feature (see the 'Proxy Keep-Alive' parameter in
this table).
The Homing option can only be used if the 'Proxy Keep-Alive'
parameter is set to Using Options.
Proxy Hot Swap Enables the Proxy Hot-Swap feature, whereby the device
is-proxy-hot-swap switches to a redundant proxy upon a failure in the primary proxy
(no response is received).
[ProxySet_IsProxyHotSwap]
[0] Disable = (Default) Disables the Proxy Hot-Swap feature.
If a failure occurs in te primary proxy, the device does not
connect with any other address (proxy) configured for the
Proxy Set.
[1] Enable = The device sends SIP INVITE/REGISTER
messages to the first address listed in the Proxy Address
table that is configured for the Proxy Set. If a SIP response is
received and this response code is configured in the
Alternative Routing Reasons table (see Configuring SIP
Response Codes for Alternative Routing Reasons on page
654) for SBC, or in the Reasons for Tel-to-IP Alternative
Routing table (see Alternative Routing Based on SIP
Responses on page 528) for Gateway, the device assumes
that the proxy is down and sends the message to the next
available proxy (address) in the list.
Proxy Load Balancing Method Enables load balancing between proxy servers of the Proxy Set.
proxy-load-balancing-method [0] Disable = (Default) Disables proxy load balancing.
[ProxySet_ProxyLoadBalancingM [1] Round Robin = A list of all possible proxy IP addresses is
ethod] compiled. This list includes all IP addresses of the Proxy Set
after DNS resolutions (including NAPTR and SRV, if
configured). After this list is compiled, the Proxy Keep-Alive
feature (enabled by the 'Proxy Keep-Alive' and 'Proxy Keep-
Alive Time' parameters in this table) tags each entry as
"offline" or "online". Load balancing is only performed on
proxy servers that are tagged as "online". All outgoing
messages are equally distributed across the list of IP
Parameter Description
addresses. REGISTER messages are also distributed unless
a RegistrarIP is configured. The IP address list is refreshed
every user-defined interval (see the ProxyIPListRefreshTime
parameter). If a change in the order of the IP address entries
in the list occurs, all load statistics are erased and balancing
starts over again.
[2] Random Weights = The outgoing requests are not
distributed equally among the Proxies. The weights are
received from the DNS server, using SRV records. The
device sends the requests in such a fashion that each proxy
receives a percentage of the requests according to its'
assigned weight. A single FQDN should be configured as a
proxy IP address. Random Weights Load Balancing is not
used in the following scenarios:
More than one IP address has been configured for the
Proxy Set.
The proxy address is not configured as an FQDN (only IP
address).
SRV is disabled (see the DNSQueryType parameter).
The SRV response includes several records with a
different Priority value.
Min. Active Servers for Load Defines the minimum number of proxies in the Proxy Set that
Balancing must be online for the device to consider the Proxy Set as online,
min-active-serv-lb when proxy load balancing is used.
[ProxySet_MinActiveServersLB] The valid value is 1 to 15. The default is 1.
Note: The parameter is applicable only if proxy load balancing is
enabled (see the 'Proxy Load Balancing Method' parameter,
above).
Advanced
Classification Input Defines how the device classifies incoming IP calls to the Proxy
classification-input Set.
[ProxySet_ClassificationInput] [0] IP Address Only = (Default) Classifies calls to the Proxy
Set according to IP address only.
[1] IP Address, Port & Transport Type = Classifies calls to the
Proxy Set according to IP address, port, and transport type.
Note:
The parameter is applicable only if the IP Groups table's
parameter, 'Classify by Proxy Set' is set to Enable (see
Configuring IP Groups on page 359).
The parameter is applicable only to the SBC application.
If more than one Proxy Set is configured with the same IP
address and associated with the same SIP Interface, the
device may classify and route the SIP dialog to an incorrect
IP Group. In such a scenario, a warning is generated in the
Syslog message. However, if some Proxy Sets are
configured with the same IP address but different ports (e.g.,
10.1.1.1:5060 and 10.1.1.1:5070) and the parameter is
configured to IP Address, Port & Transport Type,
classification to the correct IP Group is achieved. Therefore,
when classification is by Proxy Set, pay attention to the
configured IP addresses and this parameter. When more than
one Proxy Set is configured with the same IP address, the
Parameter Description
device selects the matching Proxy Set in the following order:
Selects the Proxy Set whose IP address, port, and
transport type match the source of the incoming dialog
(regardless of the settings of this parameter).
If no match is found for above, it selects the Proxy Set
whose IP address and transport type match the source of
the incoming dialog (if the parameter is configured to IP
Address Only).
If no match is found for above, it selects the Proxy Set
whose IP address match the source of the incoming
dialog (if the parameter is configured to IP Address Only.
DNS Resolve Method Defines the DNS query record type for resolving the proxy
dns-resolve-method server's host name (FQDN) into an IP address(es).
[ProxySet_DNSResolveMethod] [-1] = Not configured. DNS resolution method is according to
the settings of the global parameter, ProxyDNSQueryType.
[0] A-Record = (Default) DNS A-record query is used to
resolve DNS to IP addresses.
[1] SRV = If the proxy address is configured with a domain
name without a port (e.g., domain.com), an SRV query is
done. The SRV query returns the host names (and their
weights). The device then performs DNS A-record queries
per host name (according to the received weights). If the
configured proxy address contains a domain name with a port
(e.g., domain.com:5080), the device performs a regular DNS
A-record query.
[2] NAPTR = NAPTR query is done. If successful, an SRV
query is sent according to the information received in the
NAPTR response. If the NAPTR query fails, an SRV query is
done according to the configured transport type. If the
configured proxy address contains a domain name with a port
(e.g., domain.com:5080), the device performs a regular DNS
A-record query. If the transport type is configured for the
proxy address, a NAPTR query is not performed.
[3] Microsoft Skype for Business = SRV query as required by
Microsoft when the device is deployed in a Microsoft Skype
for Business environment. The device sends a special SRV
query to the DNS server according to the transport protocol
configured in the 'Transport Type' parameter (described later
in this section):
TLS: "_sipinternaltls_tcp.<domain>" and
"_sip_tls.<domain>". For example, if the configured
domain name (in the 'Proxy Address' parameter) is "ms-
server.com", the device queries for
"_sipinternaltls_tcp.ms-server.com" and "_sip_tls.ms-
server.com".
TCP: "_sipinternal._tcp.<domain>" and
"_sip_tcp.<domain>".
Undefined: "_sipinternaltls_tcp.<domain>",
"_sipinternal_tcp.<domain>", "_sip_tls.<domain>" and
"_sip_tcp.<domain>".
The SRV query returns the host names (and their weights).
The device then performs DNS A-record queries per host
name (according to the received weights) to resolve into IP
Parameter Description
addresses.
Note: An SRV query can return up to four host names. For each
host name, the subsequent DNS A-record query can resolve into
up to 15 IP addresses. However, the device supports up to 30
DNS-resolved IP addresses. If the device receives more than
this number of IP addresses, it uses the first 30 IP addresses in
the received list and ignores the rest.
Proxy Address Table
Index Defines an index number for the new table row.
proxy-ip-index Note: Each row must be configured with a unique index.
[ProxyIp_ProxyIpIndex]
Proxy Address Defines the address of the proxy.
proxy-address Up to 10 addresses can be configured per Proxy Set. The
[ProxyIp_IpAddress] address can be defined as an IP address in dotted-decimal
notation (e.g., 201.10.8.1) or FQDN. You can also specify the
port using the following format:
IPv4 address: <IP address>:<port> (e.g., 201.10.8.1:5060)
IPv6 address: <[IPV6 address]>:<port> (e.g.,
[2000::1:200:200:86:14]:5060)
Note:
When configured with an FQDN, you can configure the
periodic rate at which the device performs DNS queries to
resolve the FQDN into IP addresses. For more information,
see the ProxyIPListRefreshTime parameter.
When configured with an FQDN, you can configure the
method (e.g., A-record) for resolving the domain name into an
IP address, using the 'DNS Resolve Method' parameter in
this table (see above).
The device supports up to 30 DNS-resolved IP addresses. If
the DNS resolution provides more than this number, the
device uses the first 30 IP addresses in the received list and
ignores the rest.
For the SBC application: You can configure the device to use
the port indicated in the Request-URI of the incoming
message, instead of the port configured for the parameter. To
enable this, use the
IPGroup_SBCRouteUsingRequestURIPort parameter for the
IP Group that is associated with the Proxy Set (Configuring IP
Groups on page 359).
Transport Type Defines the transport type for communicating with the proxy.
transport-type [0] UDP
[ProxyIp_TransportType] [1] TCP
[2] TLS
[-1] = (Default) The transport type is according to the settings
of the global parameter, SIPTransportType.
Item # Description
1 Demarcation area of the topology. By default, the Topology view displays the following
names to represent the different demarcations of your voice configuration:
"PSTN": Indicates the PSTN side
"WAN": Indicates the external network side
"LAN": Indicates the internal network (e.g., inside the Enterprise)
To modify a demarcation name, do the following:
1 Click the demarcation name; the name becomes editable in a text box, as shown in the
example below:
2 Type a name as desired, and then click anywhere outside of the text box to apply the
Item # Description
name.
You can use demarcation to visually separate your voice network to provide a clearer
understanding of your topology. This is especially useful for IP Groups, SIP Interfaces, and
Media Realms, where you can display them on the top or bottom border of the Topology
view (as shown in the figure below for callouts #1 and #2, respectively). For example, on
the top border you can position all entities relating to WAN, and on the bottom border all
entities relating to LAN.
Figure 17-12: Display Location in Topology View
By default, configuration entities are displayed on the bottom border. To define the
position, use the 'Topology Location' parameter when configuring the entity, where Down
is the bottom border and Up the top border:
Figure 17-13: Configuration Postion in Topology View
2 Configured SIP Interfaces. Each SIP Interface is displayed using the following "SIP
Interface"-titled icon, which includes the name and row index number:
If you hover your mouse over the icon, a pop-up appears displaying the following basic
information (example):
If you click the icon, a drop-down menu appears listing the following commands:
Edit: Opens a dialog box in the SIP Interfaces table to modify the SIP Interface.
Item # Description
Show List: Opens the SIP Interfaces table.
Delete: Opens the SIP Interfaces table where you are prompted to confirm deletion of
the SIP Interface.
To add a SIP Interface, do the following:
1 Click the Add SIP Interface plus icon. The icon appears next to existing SIP
If you hover your mouse over the icon, a pop-up appears displaying the following basic
information (example):
If you click the icon, a drop-down menu appears listing the following commands:
Edit: Opens a dialog box in the Media Realms table to modify the Media Realm.
Show List: Opens the Media Realms table.
Delete: Opens the Media Realms table where you are prompted to confirm deletion of
the Media Realm.
To add a Media Realm, do the following:
1 Click the Add Media Realm plus icon. The icon appears next to existing Media
Item # Description
For more information on configuring Media Realms, see 'Configuring Media Realms' on
page 333.
4 Configured IP Groups. Each IP Group is displayed using the following "IP Group [Server]"
or "IP Group [User]" titled icon (depending on whether it's a Server- or User-type IP Group
respectively), which includes the name and row index number (example of a Server-type):
If you hover your mouse over the icon, a pop-up appears displaying the following basic
information (example):
If you click the icon, a drop-down menu appears listing the following commands:
Edit: Opens a dialog box in the IP Groups table to modify the IP Group.
Show List: Opens the IP Groups table.
Delete: Opens the IP Groups table where you are prompted to confirm deletion of the
IP Group.
To add an IP Group, do the following:
1 Click the Add IP Group plus icon. The icon appears next to existing IP Groups, or
(Red with "x"): Keep-alive has failed and there is a loss of connectivity
with the IP Group.
The line type connecting between an IP Group and a SIP Interface indicates whether a
routing rule has been configured for the IP Group. A solid line indicates that you have
configured a routing rule for the IP Group; a dashed line indicates that you have yet to
configure a routing rule.
Note:
You can also view connectivity status in the IP Groups table.
Item # Description
To support the connectivity status feature, you must enable the keep-alive mechanism
for the Proxy Set that is associated with the IP Group (see 'Configuring Proxy Sets' on
page 375).
The green-color state also applies to scenarios where the device rejects calls with the
IP Group due to low QoE (e.g., low MOS), despite connectivity.
5 Links to Web pages relating to commonly required SBC configuration:
Classification: Opens the Classification table where you can configure Classification
rules (see 'Configuring Classification Rules' on page 627).
Number Manipulation: Opens the Outbound Manipulations table where you can
configure manipulation rules on SIP Request-URI user parts (source or destination) or
calling names in outbound SIP dialog requests (see 'Configuring IP-to-IP Outbound
Manipulations' on page 671).
Routing: Opens the IP-to-IP Routing table where you can configure IP-to-IP routing
rules (see 'Configuring SBC IP-to-IP Routing Rules' on page 635).
SBC Settings: Opens the SBC General Settings page where you can configure
miscellaneous settings.
6 Configured Trunk Groups. Each Trunk Group is displayed using the following "Trunk
Group"-titled icon, which includes the row index number:
To edit or delete the Trunk Group, click the icon, and then from the drop-down menu,
choose Show List to open the Trunk Group table.
To add a Trunk Group, do the following:
1 Click the Add Trunk Group plus icon. The icon appears next to existing Trunk
For more information on configuring Trunk Groups, see Configuring Trunk Groups on page
501.
7 Displays the device's hardware configuration concerning telephony (Tel/PSTN) trunks and
ports (e.g., E1/T1). It also displays the number of ports. The ports are displayed as round
icons, as shown in Item #6 above.
To configure a trunk (E1/T1), do the following:
1 Click the icon, and then from the drop-down menu, choose Trunk Settings; the Trunk
Settings page appears.
2 Configure the trunk as desired.
Item # Description
For more information on configuring trunk settings, see Configuring Trunk Settings on
page 479.
8 Links to Web pages relating to commonly required Gateway configuration:
Number Manipulation: Opens the Destination Phone Number Manipulation for IP-to-Tel
Calls table where you can configure destination phone number manipulation rules for
IP-to-Tel calls (see Configuring Number Manipulation Tables on page 537).
Routing: Opens the IP-to-Tel Routing table where you can configure IP-to-Tel routing
rules (see 'Configuring IP-to-Tel Routing Rules' on page 518).
DTMF & Dialing: Opens the DTMF & Dialing page where you can configure DTMF and
dialing related settings.
GW Settings: Opens the Gateway General Settings page where you can configure
general gateway related settings.
18 SIP Definitions
This section describes configuration of various SIP-related functionalities.
Note:
• If no match is found in the Accounts table for incoming or outgoing calls, the
username and password is taken from:
√ 'UserName' and 'Password' parameters on the Proxy & Registration page
• See also the following optional, related parameters:
√ UseRandomUser - enables the device to assign a random string to the user
part of the SIP Contact header of new Accounts.
√ UnregisterOnStartup - enables the device to unregister and then re-register
Accounts upon a device reset.
The following procedure describes how to configure Accounts through the Web interface.
You can also configure it through ini file (Account) or CLI (configure voip > sip-definition
account).
To configure an Account:
1. Open the Accounts table (Setup menu > Signaling & Media tab > SIP Definitions
folder > Accounts).
2. Click New; the following dialog box appears:
Parameter Description
Served IP Group Defines the IP Group (e.g., IP-PBX) that you want to
served-ip-group-name register and/or authenticate upon its behalf.
[Account_ServedIPGroupName] Note:
The parameter is applicable only to the SBC application.
By default, all IP Groups are displayed. However, if you
filter the Web display by SRD (using the SRD Filter box),
only IP Groups associated with the filtered SRD are
displayed.
Parameter Description
General
Index Defines an index for the new table row.
Note: Each row must be configured with a unique index.
Served Trunk Group Defines the Trunk Group ID that you want to register and/or
served-trunk-group authenticate.
[Account_ServedTrunkGroup] For Tel-to-IP calls, the served Trunk Group is the source
Trunk Group from where the call originated.
For IP-to-Tel calls, the served Trunk Group is the Trunk
Group ID to where the call is sent.
Note: The parameter is applicable only to the Gateway
application.
Application Type Defines the application type:
application-type [0] GW = (Default) Gateway application.
[Account_ApplicationType] [2] SBC = SBC application.
Parameter Description
table. If a matching row exists, the device authenticates
the INVITE by providing the corresponding MD5
authentication username and password to the "serving"
IP Group.
[1] Regular = Regular registration process. For more
information, see 'Regular Registration Mode' on page
396.
[2] GIN = Registration for legacy PBXs, using Global
Identification Number (GIN). For more information, see
'Single Registration for Multiple Phone Numbers using
GIN' on page 396.
Note:
Gateway application: To enable registration, you also
need to set the 'Registration Mode' parameter to Per
Account in the Trunk Group Settings table (see
Configuring Trunk Group Settings on page 503).
The account registration is not affected by the
IsRegisterNeeded parameter.
Contact User Defines the AOR username. This appears in REGISTER
contact-user From/To headers as ContactUser@HostName, and in
INVITE/200 OK Contact headers as
[Account_ContactUser]
ContactUser@<device's IP address>.
Note:
If the parameter is not configured, the 'Contact User'
parameter in the IP Groups table is used instead.
If registration fails, the user part in the INVITE Contact
header contains the source party number.
Registrar Stickiness Enables the Registrar Stickiness feature, whereby the
registrar-stickiness device always routes SIP requests of a registered Account
to the same registrar server to where the last successful
[Account_RegistrarStickiness]
REGISTER request was routed. In other words, once initial
registration of the Account to one of the IP addresses in the
Proxy Set (associated with the Serving IP Group) is
successful (i.e., 200 OK), binding ("stickiness") occurs to
this specific address (registrar). All future SIP requests
(INVITEs, SUBSCRIBEs and REGISTER refreshes) whose
source and destination match the Account are sent to this
registrar only. This applies until the registrar is unreachable
or registration refresh fails, for whatever reason.
[0] Disable = (Default) Disables the Registrar Stickiness
feature. After successful initial registration of the Account
with a registrar (IP address), whenever the device
receives a SIP request or registration refresh, the device
sends the request to whichever IP address is the
currently working registrar. In other words, there is no
binding to a specific IP address in the Proxy Set and at
any given time, requests may be sent to a different IP
address, whichever is the working one. In the case of
proxy load-balancing, there is no certainty as to which IP
address in the Proxy Set the request is routed.
[1] Enable = Enables the Register Stickiness feature.
Note: The parameter is applicable only if you have enabled
Account registration ('Register' parameter configured to
Parameter Description
Regular or GIN).
Registrar Search Mode Defines the method for choosing an IP address (registrar) in
registrar-search-mode the Proxy Set (associated with the Serving IP Group) to
which the Account initially registers and performs
[Account_RegistrarSearchMode]
registration refreshes, when the Register Stickiness feature
is enabled. Once chosen, the Account is binded to the IP
address for subsequent SIP requests.
[0] Current Working Server = (Default) For each initial
and refresh registration request, the device routes to the
currently working server in the list of IP addresses
(configured or DNS-resolved IP addresses) in the Proxy
Set. In the case of proxy load-balancing, the chosen IP
address is according to the load-balancing mechanism.
[1] According to IMS Specifications = For the initial
registration request, the device performs DNS resolution
if the address of the Proxy Set is configured as an
FQDN. It then attempts to register to one of the listed
DNS-resolved addresses (or configured IP addresses),
starting with the first listed address and then going down
the list sequentially. If an address results in an
unsuccessful registration, the device immediately tries
the next address (without waiting any retry timeout). The
device goes through the list of addresses until an
address results in a successful registration. If registration
is unsuccessful for all addresses, the device waits a
configured retry time and then goes through the list
again. Once initial registration is successful, periodic
registration refreshes are performed as usual. In addition
to the periodic refreshes, immediate register refreshes
are done upon the following triggers according to the
IMS specification:
The device receives a SIP 408, 480, or 403
response from the Serving IP Group in response to
an INVITE.
The transaction timeout expires for an INVITE sent
to the Serving IP Group.
The device receives an INVITE from the Serving IP
Group from an IP address other than the address to
which it is currently registered. In this case, it also
rejects the INVITE with a SIP 480 response.
If the device's physical Ethernet link to the proxy goes
down, the device re-registers this Account with the proxy
when the link comes up again. Re-registration occurs
even if proxy keep-alive is disabled.
Note: The parameter is applicable only if you have enabled
the Registrar Stickiness feature (in this table):
'Register' parameter to Regular or GIN.
'Registrar Stickiness' parameter to Enable.
Reg Event Package Subscription Enables the device to subscribe to the registration event
reg-event-package- package service (as defined in RFC 3680) with the registrar
subscription server (Serving IP Group) to which the Account is
successfully registered and binded, when the Registrar
[Account_RegEventPackageSubscripti
Parameter Description
on] Stickiness feature is enabled. The service allows the device
to receive notifications of the Accounts registration state
change with the registrar.
The device subscribes to the service by sending a
SUBSCRIBE message containing the Event header with the
value "reg" (Event: reg). Whenever a change occurs in the
registration binding state, the registrar notifies the device by
sending a SIP NOTIFY message.
[0] Disable (default)
[1] Enable
Note: The parameter is applicable only if you have enabled
the Registrar Stickiness feature (in this table):
'Register' parameter to Regular or GIN.
'Registrar Stickiness' parameter to Enable.
Credentials
User Name Defines the digest MD5 Authentication username.
user-name The valid value is a string of up to 50 characters.
[Account_Username]
Password Defines the digest MD5 Authentication password.
password The valid value is a string of up to 50 characters.
[Account_Password]
According to this mechanism, the PBX delivers to the service provider in the Contact
header field of a REGISTER request a template from which the service provider can
construct contact URIs for each of the AORs assigned to the PBX and thus, can register
these contact URIs within its location service. These registered contact URIs can then be
used to deliver to the PBX inbound requests targeted at the AORs concerned. The
mechanism can be used with AORs comprising SIP URIs based on global E.164 numbers
and the service provider's domain name or sub-domain name.
The SIP REGISTER request sent by the device for GIN registration with a SIP server
provider contains the Require and Proxy-Require headers. These headers contain the
token 'gin'. The Supported header contains the token 'path' and the URI in the Contact
header contains the parameter 'bnc' without a user part:
Contact: <sip:198.51.100.3;bnc>;
The figure below illustrates the GIN registration process:
registrar. This applies until the registrar is unreachable or registration refresh fails, for
whatever reason.
To configure the Registrar Stickiness feature, use the following parameters in the Accounts
table:
Registrar Stickiness: Enables the feature.
Registrar Search Mode: Defines the method for choosing an IP address (registrar) in
the Proxy Set to which the Account initially registers and performs registration
refreshes. Once chosen, the Account is binded to this registrar.
Reg Event Package Subscription: Enables the device to subscribe to the registration
event package service (as defined in RFC 3680) with the registrar to which the
Account is registered and binded. The service allows the device to receive
notifications of the Accounts registration state change with the registrar.
Note: To view the registration status of endpoints with a SIP Registrar/Proxy server,
see 'Viewing Registration Status' on page 865.
User agents, Redirect or Registrar servers typically use the SIP 401 Unauthorized
response to challenge authentication containing a WWW-Authenticate header, and expect
the re-INVITE to contain an Authorization header.
The following example shows the Digest Authentication procedure, including computation
of user agent credentials:
1. The REGISTER request is sent to a Registrar/Proxy server for registration:
REGISTER sip:10.2.2.222 SIP/2.0
Via: SIP/2.0/UDP 10.1.1.200
From: <sip: 122@10.1.1.200>;tag=1c17940
To: <sip: 122@10.1.1.200>
Call-ID: 634293194@10.1.1.200
User-Agent: Sip-Gateway/Mediant 500 E-SBC/v.7.20A.000.038
CSeq: 1 REGISTER
Contact: sip:122@10.1.1.200:
Expires:3600
2. Upon receipt of this request, the Registrar/Proxy returns a 401 Unauthorized
response:
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 10.2.1.200
From: <sip:122@10.2.2.222 >;tag=1c17940
To: <sip:122@10.2.2.222 >
Call-ID: 634293194@10.1.1.200
Cseq: 1 REGISTER
Date: Mon, 30 Jul 2012 15:33:54 GMT
Server: Columbia-SIP-Server/1.17
Content-Length: 0
WWW-Authenticate: Digest realm="audiocodes.com",
nonce="11432d6bce58ddf02e3b5e1c77c010d2",
stale=FALSE,
algorithm=MD5
3. According to the sub-header present in the WWW-Authenticate header, the correct
REGISTER request is created.
4. Since the algorithm is MD5:
• The username is equal to the endpoint phone number "122".
• The realm return by the proxy is "audiocodes.com".
• The password from the ini file is "AudioCodes".
• The equation to be evaluated is "122:audiocodes.com:AudioCodes". According to
the RFC, this part is called A1.
• The MD5 algorithm is run on this equation and stored for future usage.
• The result is "a8f17d4b41ab8dab6c95d3c14e34a9e1".
5. The par called A2 needs to be evaluated:
• The method type is "REGISTER".
• Using SIP protocol "sip".
• Proxy IP from ini file is "10.2.2.222".
• The equation to be evaluated is "REGISTER:sip:10.2.2.222".
• The MD5 algorithm is run on this equation and stored for future usage.
• The result is "a9a031cfddcb10d91c8e7b4926086f7e".
6. Final stage:
• A1 result: The nonce from the proxy response is
"11432d6bce58ddf02e3b5e1c77c010d2".
rule in the Set ID until the last rule or until a rule with an Exit Action Type. If the Exit
rule is configured with a "True" Action Value, the device uses the current routing rule.
If the Exit rule is configured with a "False" Action Value, the device moves to the next
routing rule. If an Exit Action Type is not configured and the device has run all the
rules in the Set ID, the default Action Value of the Set ID is "True" (i.e., use the current
routing rule).
Rule's condition is not met: The device runs the next rule in the Set ID. When the
device reaches the end of the Set ID and no Exit was performed, the Set ID ends with
a "True" result.
You can also configure a Call Setup rule that determines whether the device must
discontinue with the Call Setup Rules Set ID and route the call accordingly. This is done
using the Exit optional value of the ‘Action Type’ parameter. When used, the ‘Action Value’
parameter can be configured to one of the following strings:
“true”: Indicates that if the condition is met, the device routes the call according to the
selected routing rule. Note that if the condition is not met, the device also uses the
selected routing rule, unless the next Call Setup rule in the Set ID has an Exit option
configured to “false” for an empty condition.
“false”: Indicates that if the condition is met, the device attempts to route the call to the
next matching routing rule (if configured). If the condition is not met, the device routes
the call according to the selected routing rule.
As the default result of a Call Setup rule is always “true”, please adhere to the following
guidelines when configuring the ‘Action Type’ field to Exit: If, for example, you want to exit
the Call Setup Rule Set ID with "true" when LDAP query result is found and "false" when
LDAP query result is not found:
Incorrect -this rule will always exit with result = True:
Condition: ldap.found exists Action Type: Exit Action Value: True
Correct:
• Single rule:
Condition: ldap.found !exists Action Type: Exit Action Value: False
• Set of rules:
Condition: ldap.found exists Action Type: Exit Action Value: True
Condition: <leave it blank> Action Type: Exit Action Value: False
Note: If the source and/or destination numbers are manipulated by the Call Setup
rules, they revert to their original values if the device moves to the next routing rule.
The following procedure describes how to configure Call Setup Rules through the Web
interface. You can also configure it through ini file (CallSetupRules) or CLI (configure voip >
message call-setup-rules).
3. Configure a Call Setup rule according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 18-2: Call Setup Rules Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table record.
[CallSetupRules_Index] Note: Each rule must be configured with a unique index.
Rules Set ID Defines a Set ID for the rule. You can define the same Set ID
rules-set-id for multiple rules to create a group of rules. You can configure
up to 10 Set IDs, where each Set ID can include up to 10 rules.
[CallSetupRules_RulesSetID]
The Set ID is used to assign the Call Setup rules to a routing
rule in the routing table.
The valid value is 0 to 9. The default is 0.
Query Type Defines the type of query.
query-type [0] None (default)
[CallSetupRules_QueryType] [1] LDAP = The Call Setup rule performs an LDAP query
with an LDAP server.
[2] Dial Plan = The Call Setup rule performs a query with
the Dial Plan.
[3] ENUM = The Call Setup rule performs a query with an
ENUM (E.164 Number to URI Mapping) server for retrieving
a SIP URI address for an E.164 telephone number. The
ENUM server address is configured for the IP Interface in
the IP Interfaces table ('Primary DNS' or 'Secondary DNS'
parameters) used for the call. For a configuration example,
see "Call Setup Rule Examples" on page 406.
To specify an LDAP server or Dial Plan, use the 'Query Target'
parameter (see below).
Query Target Defines one of the following, depending on the value
query-target configured for the 'Query Type' parameter (above):
Parameter Description
[CallSetupRules_QueryTarget] LDAP: Specifies an LDAP server (LDAP Server Group) on
which to perform an LDAP query for a defined search key.
This option is applicable only if you configure the 'Query
Type' parameter to LDAP. To configure LDAP Server
Groups, see Configuring LDAP Server Groups on page 248.
Dial Plan: Specifies a Dial Plan (name) in which to search
for a defined search key. This option is applicable only if
you configure the 'Query Type' parameter to Dial Plan. To
configure Dial Plans, see Configuring Dial Plans on page on
page 678.
To configure the search key, use the 'Search Key' parameter
(see below).
Search Key Defines the key to query. For LDAP queries, the key string is
attr-to-query queried in the specified LDAP server. For Dial Plan queries,
the key string is searched for in the specified Dial Plan. For
[CallSetupRules_AttributesToQuery]
ENUM queries, the key string is queried in the ENUM server.
The valid value is a string of up to 100 characters. Combined
strings and values can be configured like in the Message
Manipulations table, using the '+' operator. Single quotes (')
can be used for specifying a constant string (e.g., '12345').
Examples:
To LDAP query the AD attribute "mobile" that has the value
of the destination user part of the incoming call:
'mobile=' + param.call.dst.user
To LDAP query the AD attribute "telephoneNumber" that
has a redirect number:
'telephoneNumber=' + param.call.redirect +
'*'
To query a Dial Plan for the source number:
param.call.src.user
To query an ENUM server for the URI of the called
(destination) number:
param.call.dst.user
Note: The parameter is applicable only if the 'Query Type'
parameter is configured to any value other than None.
Attributes To Get Defines the attributes of the queried LDAP record that the
attr-to-get device must handle (e.g., retrieve value).
[CallSetupRules_AttributesToGet] The valid value is a string of up to 100 characters. Up to five
attributes can be defined, each separated by a comma (e.g.,
msRTCSIP-PrivateLine,msRTCSIP-Line,mobile).
Note:
The parameter is applicable only if you configure the 'Query
Type' parameter to LDAP.
The device saves the retrieved attributes' values for future
use in other rules, until the next LDAP query or until the call
is connected. Thus, the device does not need to re-query
the same attributes.
Row Role Determines which condition must be met in order for this rule to
row-role be performed.
[CallSetupRules_RowRole] [0] Use Current Condition = The Condition configured for
this rule must be matched in order to perform the configured
Parameter Description
action (default).
[1] Use Previous Condition = The Condition configured for
the rule located directly above this rule in the Call Setup
table must be matched in order to perform the configured
action. This option lets you configure multiple actions for the
same Condition.
Condition Defines the condition that must exist for the device to perform
condition the action.
[CallSetupRules_Condition] The valid value is a string of up to 200 characters (case-
insensitive). Regular Expression (regex) can also be used.
Examples:
LDAP:
ldap.attr.mobile exists (if Attribute "mobile" exists in AD)
param.call.dst.user == ldap.attr.msRTCSIP-PrivateLine
(if called number is the same as the number in the
Attribute "msRTCSIP-PrivateLine")
ldap.found !exists (if LDAP record not found)
ldap.err exists (if LDAP error exists)
Dial Plan:
dialplan.found exists (if Dial Plan exists)
dialplan.found !exists (if Dial Plan query search key not
found)
dialplan.result=='uk' (if corresponding tag of the searched
key is "uk")
ENUM:
enum.found exists (if ENUM record of E.164 number
exists)
Action
Action Subject Defines the element (header, parameter, body, or Dial Plan
action-subject tag) upon which you want to perform the action if the condition,
configured in the 'Condition' parameter (see above) is met.
[CallSetupRules_ActionSubject]
The valid value is a string of up to 100 characters (case-
insensitive).
Examples:
header.from contains '1234'
param.call.dst.user (called number)
param.call.src.user (calling number)
param.call.src.name (calling name)
param.call.redirect (redirect number)
param.call.src.host (source host)
param.call.dst.host (destination host)
srctags (source tag)
dsttags (destination tag)
Action Type Defines the type of action to perform.
action-type [0] Add (default) = Adds new message header, parameter
[CallSetupRules_ActionType] or body elements.
[1] Remove = Removes message header, parameter, or
body elements.
[2] Modify = Sets element to the new value (all element
Parameter Description
types).
[3] Add Prefix = Adds value at the beginning of the string
(string element only).
[4] Add Suffix = Adds value at the end of the string (string
element only).
[5] Remove Suffix = Removes value from the end of the
string (string element only).
[6] Remove Prefix = Removes value from the beginning of
the string (string element only).
[20] Run Rules Set = Performs a different Rule Set ID,
specified in the 'Action Value' parameter (below)
[21] Exit = Stops the Rule Set ID and returns a result
("True" or "False"). .
Action Value Defines a value that you want to use in the action.
action-value The valid value is a string of up to 300 characters (case-
[CallSetupRules_ActionValue] insensitive).
Examples:
'+9723976'+ldap.attr.alternateNumber
'9764000'
srctags
enum.result.url
ldap.attr.displayName
true (if the 'Action Type' is set to Exit)
false (if the 'Action Type' is set to Exit)
♦ Index 1:
'Call Setup Rules Set ID': 1
Example 2: This example configures the device to replace (manipulate) the incoming
call's calling name (caller ID) with a name retrieved from the AD by an LDAP query.
The device queries the AD server for the attribute record, "telephoneNumber" whose
value is the same as the received source number (e.g., "telephoneNumber =5098"). If
such an attribute is found, the device retrieves the name from the attribute record,
"displayName" and uses this as the calling name in the incoming call.
• Call Setup Rules table:
♦ 'Rules Set ID': 2
♦ 'Query Type': LDAP
♦ 'Query Target': LDAP-DC-CORP
♦ 'Search Key': ‘telephoneNumber=’ + param.call.src.user
♦ 'Attributes to Get': displayName
♦ 'Row Role': Use Current Condition
♦ 'Condition': ldap.attr. displayName exists
♦ 'Action Subject': param.call.src.name
♦ 'Action Type': Modify
♦ 'Action Value': ldap.attr. displayName
• Routing table configuration: A single routing rule is assigned the Call Setup
Rule Set ID.
♦ Index 1:
'Call Setup Rules Set ID': 2
Example 3: This example configures the device to route the incoming call according
to whether or not the source number of the incoming call also exists in the AD server.
The device queries the AD server for the attribute record, "telephoneNumber" whose
value is the same as the received source number (e.g., telephoneNumber=4064"). If
such an attribute is found, the device sends the call to Skype for Business; if the query
fails, the device sends the call to the PBX.
• Call Setup Rules table:
♦ 'Rules Set ID': 3
♦ 'Query Type': LDAP
♦ 'Query Target': LDAP-DC-CORP
♦ 'Search Key': ‘telephoneNumber=’ + param.call.src.user
♦ 'Attributes to Get': telephoneNumber
♦ 'Row Role': Use Current Condition
♦ 'Condition': ldap.found !exists
♦ 'Action Subject': -
♦ 'Action Type': Exit
♦ 'Action Value': false
If the attribute record is found (i.e., condition is not met), the rule ends with a
default exit result of true and uses the first routing rule (Skype for Business). If the
attribute record does not exist (i.e., condition is met), the rule exits with a false
result and uses the second routing rule (PBX).
• Routing table: Two routing rules are assigned with the same matching
characteristics. Only the main routing rule is assigned a Call Setup Rules Set ID.
♦ Index 1:
'Call Setup Rules Set ID': 3
Note:
• For a detailed description of the syntax used for configuring Message Manipulation
rules, refer to the SIP Message Manipulations Quick Reference Guide.
• For the SBC application, Inbound message manipulation is done only after the
Classification, inbound/outbound number manipulations, and routing processes.
• Each message can be manipulated twice - on the source leg and on the
destination leg (i.e., source and destination IP Groups).
• Unknown SIP parts can only be added or removed.
• SIP manipulations do not allow you to remove or add mandatory SIP headers.
They can only be modified and only on requests that initiate new dialogs.
Mandatory SIP headers include To, From, Via, CSeq, Call-Id, and Max-Forwards.
• The SIP Group Name (IPGroup_SIPGroupName) parameter overrides inbound
message manipulation rules that manipulate the host name in Request-URI, To,
and/or From SIP headers. If you configure a SIP Group Name for the IP Group
(see 'Configuring IP Groups' on page 359) and you want to manipulate the host
name in these SIP headers, you must apply your manipulation rule (Manipulation
Set ID) to the IP Group as an Outbound Message Manipulation Set
(IPGroup_OutboundManSet), when the IP Group is the destination of the call. If
you apply the Manipulation Set as an Inbound Message Manipulation Set
(IPGroup_InboundManSet), when the IP Group is the source of the call, the
manipulation rule will be overridden by the SIP Group Name.
The following procedure describes how to configure Message Manipulation rules through
the Web interface. You can also configure it through ini file (MessageManipulations) or CLI
(configure voip > message message-manipulations).
Index 0: Adds the suffix ".com" to the host part of the To header.
Index 1: Changes the user part of the From header to the user part of the P-Asserted-
ID.
Index 2: Changes the user part of the SIP From header to "200".
Index 3: If the user part of the From header equals "unknown", then it is changed
according to the srcIPGroup call’s parameter.
Index 4: Removes the Priority header from an incoming INVITE message.
Table 19-1: Message Manipulations Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[MessageManipulations_Index] Note: Each row must be configured with a unique index.
Name Defines an arbitrary name to easily identify the rule.
manipulation-name The valid value is a string of up to 40 characters.
[MessageManipulations_Manip
ulationName]
Manipulation Set ID Defines a Manipulation Set ID for the rule. You can define the
manipulation-set-id same Manipulation Set ID for multiple rules to create a group of
rules. The Manipulation Set ID is used to assign the manipulation
[MessageManipulations_ManSe
rules to an IP Group (in the IP Groups table) for inbound and/or
tID]
outbound messages.
The valid value is 0 to 19. The default is 0.
Row Role Determines which message manipulation condition (configured by
row-role the 'Condition' parameter) to use for the rule.
[MessageManipulations_RowR [0] Use Current Condition = (Default) The condition configured
ole] in the table row of the rule is used.
[1] Use Previous Condition = The condition configured in the
first table row above the rule that is configured to Use Current
Condition is used. For example, if Index 3 is configured to Use
Current Condition and Index 4 and 5 are configured to Use
Previous Condition, Index 4 and 5 use the condition
configured for Index 3. A configuration example is shown in the
beginning of this section. The option allows you to use the same
condition for multiple manipulation rules.
Note:
When configured to Use Previous Condition, the 'Message
Parameter Description
Type' and 'Condition' parameters are not applicable and if
configured are ignored.
When multiple manipulation rules apply to the same header, the
next rule applies to the resultant string of the previous rule.
Match
Message Type Defines the SIP message type that you want to manipulate.
message-type The valid value is a string (case-insensitive) denoting the SIP
[MessageManipulations_Messa message.
geType] For example:
Empty = rule applies to all messages
Invite = rule applies to all INVITE requests and responses
Invite.Request = rule applies to INVITE requests
Invite.Response = rule applies to INVITE responses
subscribe.response.2xx = rule applies to SUBSCRIBE
confirmation responses
Note: Currently, SIP 100 Trying messages cannot be manipulated.
Condition Defines the condition that must exist for the rule to be applied.
condition The valid value is a string (case-insensitive).
[MessageManipulations_Conditi For example:
on] header.from.url.user== '100' (indicates that the user part of the
From header must have the value "100")
header.contact.param.expires > '3600'
header.to.url.host contains 'domain'
param.call.dst.user != '100'
Action
Action Subject Defines the SIP header upon which the manipulation is performed.
action-subject The valid value is a string (case-insensitive).
[MessageManipulations_Action
Subject]
Action Type Defines the type of manipulation.
action-type [0] Add (default) = Adds new header/param/body (header or
[MessageManipulations_Action parameter elements).
Type] [1] Remove = Removes header/param/body (header or
parameter elements).
[2] Modify = Sets element to the new value (all element types).
[3] Add Prefix = Adds value at the beginning of the string (string
element only).
[4] Add Suffix = Adds value at the end of the string (string
element only).
[5] Remove Suffix = Removes value from the end of the string
(string element only).
[6] Remove Prefix = Removes value from the beginning of the
string (string element only).
[7] Normalize = Removes unknown SIP message elements
before forwarding the message.
Action Value Defines a value that you want to use in the manipulation.
The default value is a string (case-insensitive) in the following
Parameter Description
action-value syntax:
[MessageManipulations_Action string/<message-element>/<call-param> +
Value] string/<message-element>/<call-param>
For example:
'itsp.com'
header.from.url.user
param.call.dst.user
param.call.dst.host + '.com'
param.call.src.user + '<' + header.from.url.user + '@' +
header.p-asserted-id.url.host + '>'
Note: Only single quotation marks must be used.
Note: For a description on SIP message manipulation syntax, refer to the SIP
Message Manipulations Quick Reference Guide.
The following procedure describes how to configure Message Condition rules through the
Web interface. You can also configure it through ini file (ConditionTable) or CLI (configure
voip > sbc routing condition-table).
Parameter Description
bugs and vulnerabilities. For example, the attacker might try sending a SIP message
containing either an oversized parameter or too many occurrences of a parameter.
You can also enable the Message Policy to protect the device against incoming SIP
messages with malicious signature patterns, which identify specific scanning tools used by
attackers to search for SIP servers in a network. To configure Malicious Signatures, see
'Configuring Malicious Signatures' on page 695.
Each Message Policy rule can be configured with the following:
Maximum message length
Maximum header length
Maximum message body length
Maximum number of headers
Maximum number of bodies
Option to send 400 "Bad Request" response if message request is rejected
Blacklist and whitelist for defined methods (e.g., INVITE)
Blacklist and whitelist for defined bodies
Malicious Signatures
The Message Policies table provides a default Message Policy called "Malicious Signature
DB Protection" (Index 0), which is based only on Malicious Signatures and discards SIP
messages identified with any of the signature patterns configured in the Malicious
Signature table.
To apply a SIP Message Policy rule to calls, you need to assign it to the SIP Interface
associated with the relevant IP Group (see 'Configuring SIP Interfaces' on page 351).
The following procedure describes how to configure Message Policy rules through the Web
interface. You can also configure it through ini file (MessagePolicy) or CLI (configure voip >
message message-policy).
3. Configure a Message Policy rule according to the parameters described in the table
below.
4. Click Apply.
Table 19-3: Message Policies Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[MessagePolicy_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the
name row in other tables.
[MessagePolicy_Name] The valid value is a string of up to 40 characters.
Note: Each row must be configured with a unique name.
Limits
Max Message Length Defines the maximum SIP message length.
max-message-length The valid value is up to 32,768 characters. The default is
[MessagePolicy_MaxMessageLen 32,768.
gth]
Max Header Length Defines the maximum SIP header length.
max-header-length The valid value is up to 512 characters. The default is 512.
[MessagePolicy_MaxHeaderLengt
h]
Max Body Length Defines the maximum SIP message body length. This is the
max-body-length value of the Content-Length header.
Parameter Description
[MessagePolicy_MaxBodyLength] The valid value is up to 1,024 characters. The default is 1,024.
Max Num Headers Defines the maximum number of SIP headers.
max-num-headers The valid value is any number up to 32. The default is 32.
[MessagePolicy_MaxNumHeaders] Note: The device supports up to 20 SIP Record-Route headers
that can be received in a SIP INVITE request or a 200 OK
response. If it receives more than this, it responds with a SIP
513 'Message Too Large' response.
Max Num Bodies Defines the maximum number of bodies (e.g., SDP) in the SIP
max-num-bodies message.
[MessagePolicy_MaxNumBodies] The valid value is any number up to 8. The default is 8.
Policies
Send Rejection Defines whether the device sends a SIP response if it rejects a
send-rejection message request due to the Message Policy. The default
response code is SIP 400 "Bad Request". To configure a
[MessagePolicy_SendRejection]
different response code, use the
MessagePolicyRejectResponseType parameter.
[0] Policy Reject = (Default) The device discards the
message and sends a SIP response to reject the request.
[1] Policy Drop = The device discards the message without
sending any response.
SIP Method Blacklist-Whitelist Policy
Method List Defines SIP methods (e.g., INVITE\BYE) to blacklist or whitelist.
method-list Multiple methods are separated by a backslash (\). The method
[MessagePolicy_MethodList] values are case-insensitive.
Method List Type Defines the policy (blacklist or whitelist) for the SIP methods
method-list-type specified in the 'Method List' parameter (above).
[MessagePolicy_MethodListType] [0] Policy Blacklist = The specified methods are rejected.
[1] Policy Whitelist = (Default) Only the specified methods
are allowed; the others are rejected.
SIP Body Blacklist-Whitelist Policy
Body List Defines the SIP body type (i.e., value of the Content-Type
body-list header) to blacklist or whitelist. For example, application/sdp.
[MessagePolicy_BodyList] The values of the parameter are case-sensitive.
Body List Type Defines the policy (blacklist or whitelist) for the SIP body
body-list-type specified in the 'Body List' parameter (above).
[MessagePolicy_BodyListType] [0] Policy Blacklist =The specified SIP body is rejected.
[1] Policy Whitelist = (Default) Only the specified SIP body is
allowed; the others are rejected.
Malicious Signature
Malicious Signature Database Enables the use of the Malicious Signature database (signature-
signature-db-enable based detection).
[MessagePolicy_UseMaliciousSign [0] Disable (default)
atureDB] [1] Enable
To configure Malicious Signatures, see 'Configuring Malicious
Parameter Description
Signatures' on page 695.
Note: The parameter is applicable only to the SBC application.
Note: For a detailed description of supported regex syntax, refer to the Message
Manipulation Reference Guide.
Pre-Parsing Manipulation is configured using two tables with parent-child type relationship:
Parent table: Pre-Parsing Manipulation Sets table, which defines a descriptive name
for the Pre-Parsing Manipulation Set.
Child table: Pre-Parsing Manipulation Rules table, which defines the actual
manipulation rule. You can configure up to 10 rules per Pre-Parsing Manipulation Set.
The following procedure describes how to configure Pre-Parsing Manipulation Sets through
the Web interface. You can also configure it through other management platforms:
Pre-Parsing Manipulation Sets table: ini file (PreParsingManipulationSets) or CLI
(configure voip > message pre-parsing-manip-sets)
Pre-Parsing Manipulation Rules table: ini file (PreParsingManipulationRules) or CLI
(configure voip > message pre-parsing-manip-rules)
Parameter Description
5. In the Pre-Parsing Manipulation Sets table, select the row, and then click the Pre-
Parsing Manipulation Rules link located below the table; the Pre-Parsing
Manipulation Rules table appears.
6. Click New; the following dialog box appears:
Figure 19-9: Pre-Parsing Manipulation Rules Table - Add Dialog Box
Parameter Description
Match
Index Defines an index number for the new table row.
[PreParsingManipulationRules_R Note: Each row must be configured with a unique index.
uleIndex]
Message Type Defines the SIP message type to which you want to apply the
message-type rule.
[PreParsingManipulationRules_M The following syntax is supported:
essageType] To apply the rule to any message type, leave the field empty
or configure it to any.
SIP requests:
any.request: The rule is applied to any request.
<SIP Method>.request: The rule is applied to the
specified SIP Method (e.g., invite.request).
SIP responses:
any.response: The rule is applied to any response.
response.<response code>: The rule is applied to
messages with the specified response (e.g.,
response.200 for SIP 200 or response.1xx for any
provisional response).
Action
Pattern Defines a pattern, based on regex, to search for (match) in the
pattern incoming message.
[PreParsingManipulationRules_P For more information on regex, refer to the Message
attern] Manipulation Reference Guide.
Note:
• For supported audio coders, see 'Supported Audio Coders' on page 425.
• Some coders are license-based and are available only if purchased from
AudioCodes and included in the License Key installed on your device. For more
information, contact your AudioCodes sales representative.
• Only the packetization time of the first coder listed in the Coder Group is declared
in INVITE/200 OK SDP even if multiple coders are configured. The device always
uses the packetization time requested by the remote side for sending RTP
packets. If not specified, the packetization time is assigned the default value.
• The value of some fields is hard-coded according to common standards (e.g.,
payload type of G.711 U-law is always 0).
• The G.722 coder provides Packet Loss Concealment (PLC) capabilities, ensuring
higher voice quality.
• Opus coder:
√ For SBC calls: If one leg uses a narrowband coder (e.g., G.711) and the other
leg uses the Opus coder, the device maintains the narrowband coder flavor by
using the narrowband Opus coder. Alternatively, if one leg uses a wideband
coder (e.g., G.722) and the other leg uses the Opus coder, the device
maintains the wideband coder flavor by using the wideband Opus coder.
√ Gateway calls always use the narrowband Opus coder.
• For more information on V.152 and implementation of T.38 and VBD coders, see
'Supporting V.152 Implementation' on page 197.
The following procedure describes how to configure the Coder Groups table through the
Web interface. You can also configure it through ini file (AudioCodersGroups and
AudioCoders) or CLI (configure voip > coders-and-profiles audio-coders-groups).
2. From the 'Coder Group Name' drop-down list, select the desired Coder Group index
number and name.
3. Configure the Coder Group according to the parameters described in the table below.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
You can delete a Coder Group, as described in the following procedure.
Parameter Description
Coder Group Name Defines the name and index for the Coder Group.
[AudioCodersGroups_Index] Note: The Coder Group index/name cannot be configured.
[AudioCodersGroups_Name]
[AudioCoders_AudioCodersIndex] Index row of the coder per Coder Group
Note: The parameter is applicable only to the ini file.
Coder Name Defines the coder type. For coder names, see 'Supported Audio
name Coders' on page 425.
[AudioCoders_Name] Note: Each coder type (e.g., G.729) can be configured only once
in the table.
Packetization Time Defines the packetization time (in msec) for the coder. The
p-time packetization time determines how many coder payloads are
combined into a single RTP packet. For ptime, see 'Supported
[AudioCoders_pTime]
Audio Coders' on page 425.
Rate Defines the bit rate (in kbps) for the coder. For rates, see
rate 'Supported Audio Coders' on page 425.
Parameter Description
[AudioCoders_rate]
Payload Type Defines the payload type if the payload type (i.e., format of the
payload-type RTP payload) for the coder is dynamic. For payload types, see
'Supported Audio Coders' on page 425.
[AudioCoders_PayloadType]
♦ 'Silk Max Average Bit Rate': Defines the maximum average bit rate for the
SILK coder.
Figure 20-2: Configuring SILK Coder Attributes
3. Click Apply.
Note:
• The Allowed Audio Coders Groups table is applicable only to the SBC application.
• The Allowed Audio Coders Group for coder restriction takes precedence over the
Coder Group for extension coders. In other words, if an extension coder is not
listed as an allowed coder, the device does not add the extension coder to the
SDP offer.
The following procedure describes how to configure Allowed Audio Coders Groups through
the Web interface. You can also configure it through ini file (AllowedAudioCodersGroups
and AllowedAudioCoders) or CLI (configure voip > coders-and-profiles allowed-audio-
coders-groups; configure voip > coders-and-profiles allowed-audio-coders <group
index/coder index>).
3. Configure a name for the Allowed Audio Coders Group according to the parameters
described in the table below.
4. Click Apply.
5. Select the new row that you configured, and then click the Allowed Audio Coders
link located below the table; the Allowed Audio Coders table opens.
6. Click New; the following dialog box appears:
Figure 20-4: Allowed Audio Coders Table - Add Dialog Box
7. Configure coders for the Allowed Audio Coders Group according to the parameters
described in the table below.
8. Click Apply.
Table 20-3: Allowed Audio Coders Groups and Allowed Audio Coders Tables Parameter
Descriptions
Parameter Description
and the last coder, the lowest priority. For more information, see 'Prioritizing Coder List in
SDP Offer' on page 605.
Note: The Allowed Audio Coders Groups table is applicable only to the SBC
application.
The following procedure describes how to configure Allowed Video Coders Groups through
the Web interface. You can also configure it through ini file (AllowedVideoCodersGroups
and AllowedVideoCoders) or CLI (configure voip > coders-and-profiles allowed-video-
coders-groups; configure voip > coders-and-profiles allowed-video-coders <group
index/coder index>).
3. Configure a name for the Allowed Video Coders Group according to the parameters
described in the table below.
4. Click Apply.
5. Select the new row that you configured, and then click the Allowed Video Coders link
located below the table; the Allowed Video Coders table opens.
6. Click New; the following dialog box appears:
Figure 20-6: Allowed Video Coders Table - Add Dialog Box
7. Configure coders for the Allowed Video Coders Group according to the parameters
described in the table below.
8. Click Apply.
Table 20-4: Allowed Video Coders Groups and Allowed Video Coders Tables Parameter
Descriptions
Parameter Description
Note: IP Profiles can also be implemented when using a Proxy server (when the
AlwaysUseRouteTable parameter is set to 1).
The following procedure describes how to configure IP Profiles through the Web interface.
You can also configure it through ini file (IPProfile) or CLI (configure voip > coders-and-
profiles ip-profile).
To configure an IP Profile:
1. Open the IP Profiles table (Setup menu > Signaling & Media tab > Coders &
Profiles folder > IP Profiles).
Parameter Description
General
Index Defines an index number for the new table row.
[IpProfile_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row
profile-name in other tables.
[IpProfile_ProfileName] The valid value is a string of up to 40 characters.
Media Security
SBC Media Security Mode Defines the handling of RTP and SRTP for the SIP entity associated
sbc-media-security-behaviour with the IP Profile.
[IpProfile_SBCMediaSecurityB [0] As is = (Default) No special handling for RTP\SRTP is done.
ehaviour] [1] SRTP = SBC legs negotiate only SRTP media lines, and RTP
media lines are removed from the incoming SDP offer-answer.
[2] RTP = SBC legs negotiate only RTP media lines, and SRTP
media lines are removed from the incoming offer-answer.
[3] Both = Each offer-answer is extended (if not already) to two
media lines - one RTP and the other SRTP.
If two SBC legs (after offer-answer negotiation) use different security
types (i.e., one RTP and the other SRTP), the device performs RTP-
SRTP transcoding. To transcode between RTP and SRTP, the
following prerequisites must be met:
At least one supported SDP "crypto" attribute and parameters.
Parameter Description
EnableMediaSecurity must be set to 1.
If one of the above transcoding prerequisites is not met, then:
any value other than “As is” is discarded.
if the incoming offer is SRTP, force transcoding, coder
transcoding, and DTMF extensions are not applied.
Gateway Media Security Defines the handling of SRTP for the SIP entity associated with the
Mode IP Profile.
media-security-behaviour [-1] Not Configured = Applies the settings of the corresponding
[IpProfile_MediaSecurityBeha global parameter, MediaSecurityBehaviour.
viour] [0] Preferable = (Default) The device initiates encrypted calls to
this SIP entity. However, if negotiation of the cipher suite fails, an
unencrypted call is established. The device accepts incoming
calls received from the SIP entity that don't include encryption
information.
[1] Mandatory = The device initiates encrypted calls to this SIP
entity, but if negotiation of the cipher suite fails, the call is
terminated. The device rejects incoming calls received from the
SIP entity that don't include encryption information.
[2] Disable = This SIP entity does not support encrypted calls
(i.e., SRTP).
[3] Preferable - Single Media = The device sends SDP with a
single media ('m=') line only (e.g., m=audio 6000 RTP/AVP 4 0 70
96) with RTP/AVP and crypto keys. The SIP entity can respond
with SRTP or RTP parameters:
If the SIP entity does not support SRTP, it uses RTP and
ignores the crypto lines.
If the device receives an SDP offer with a single media (as
shown above) from the SIP entity, it responds with SRTP
(RTP/SAVP) if the EnableMediaSecurity parameter is set to
1. If SRTP is not supported (i.e., EnableMediaSecurity is set
to 0), it responds with RTP.
If two 'm=' lines are received in the SDP offer, the device
prefers the SAVP (secure audio video profile), regardless of
the order in the SDP.
Note:
The parameter is applicable only when the EnableMediaSecurity
parameter is set to 1.
The corresponding global parameter is MediaSecurityBehaviour.
Symmetric MKI Enables symmetric MKI negotiation.
enable-symmetric-mki [0] Disable = (Default) The device includes the MKI in its SIP 200
[IpProfile_EnableSymmetricM OK response according to the SRTPTxPacketMKISize parameter
KI] (if set to 0, it is not included; if set to any other value, it is included
with this value).
[1] Enable = The answer crypto line contains (or excludes) an
MKI value according to the selected crypto line in the offer. For
example, assume that the device receives an INVITE containing
the following two crypto lines in SDP:
a=crypto:2 AES_CM_128_HMAC_SHA1_80
inline:TAaxNnQt8/qLQMnDuG4vxYfWl6K7eBK/ufk04pR4|2
^31|1:1
a=crypto:3 AES_CM_128_HMAC_SHA1_80
Parameter Description
inline:bnuYZnMxSfUiGitviWJZmzr7OF3AiRO0l5Vnh0kH|2
^31
The first crypto line includes the MKI parameter "1:1". In the 200
OK response, the device selects one of the crypto lines (i.e., '2' or
'3'). Typically, it selects the first line that supports the crypto suite.
However, for SRTP-to-SRTP in SBC sessions, it can be
determined by the remote side on the outgoing leg. If the device
selects crypto line '2', it includes the MKI parameter in its answer
SDP, for example:
a=crypto:2 AES_CM_128_HMAC_SHA1_80
inline:R1VyA1xV/qwBjkEklu4kSJyl3wCtYeZLq1/QFuxw|2
^31|1:1
If the device selects a crypto line that does not contain the MKI
parameter, then the MKI parameter is not included in the crypto
line in the SDP answer (even if the SRTPTxPacketMKISize
parameter is set to any value other than 0).
Note: The corresponding global parameter is EnableSymmetricMKI.
MKI Size Defines the size (in bytes) of the Master Key Identifier (MKI) in SRTP
mki-size Tx packets.
[IpProfile_MKISize] The valid value is 0 to 4. The default is 0 (i.e., new keys are
generated without MKI).
Note:
Gateway application: The device only initiates the MKI size.
SBC application: The device can forward MKI size as is for
SRTP-to-SRTP flows or override the MKI size during negotiation.
This can be done on the inbound or outbound leg.
The corresponding global parameter is SRTPTxPacketMKISize.
SBC Enforce MKI Size Enables negotiation of the Master Key Identifier (MKI) length for
sbc-enforce-mki-size SRTP-to-SRTP flows between SIP networks (i.e., IP Groups). This
includes the capability of modifying the MKI length on the inbound or
[IpProfile_SBCEnforceMKISiz
outbound SBC call leg for the SIP entity associated with the IP
e]
Profile.
[0] Don't enforce = (Default) Device forwards the MKI size as is.
[1] Enforce = Device changes the MKI length according to the
settings of the IP Profile parameter, MKISize.
SBC Media Security Method Defines the media security protocol for SRTP, for the SIP entity
sbc-media-security-method associated with the IP Profile.
[IpProfile_SBCMediaSecurity [0] SDES = (Default) The device secures RTP using the Session
Method] Description Protocol Security Descriptions (SDES) protocol to
negotiate the cryptographic keys (RFC 4568). The keys are sent
in the SDP body ('a=crypto') of the SIP message and are typically
secured using SIP over TLS (SIPS). The encryption of the keys is
in plain text in the SDP. SDES implements TLS over TCP.
[1] DTLS = The device uses Datagram Transport Layer Security
(DTLS) protocol to secure UDP-based media streams (RFCs
5763 and 5764). For more information on DTLS, see SRTP using
DTLS Protocol.
[2] Both = SDES and DTLS protocols are supported.
Note:
To support DTLS, you must also configure the following for the
SIP entity:
Parameter Description
TLS Context for DTLS (see Configuring TLS Certificate
Contexts on page 109). The server cipher ('Cipher Server')
must be configured to All.
IpProfile_SBCMediaSecurityBehaviourMedia configured to
SRTP or Both.
IpProfile_SBCRTCPMux configured to Supported. The
setting is required as the DTLS handshake is done for the
port used for RTP. Therefore, RTCP and RTP should be
multiplexed over the same port.
The device does not support forwarding of DTLS transparently
between endpoints (SIP entities).
Reset SRTP Upon Re-key Enables synchronization of the SRTP state between the device and
reset-srtp-upon-re-key a server when a new SRTP key is generated upon a SIP session
expire. This feature ensures that the roll-over counter (ROC), one of
[IpProfile_ResetSRTPStateUp
the parameters used in the SRTP encryption/decryption process of
onRekey]
the SRTP packets is synchronized on both sides for transmit and
receive packets.
[0] Disable = (Default) ROC is not reset on the device side.
[1] Enable = If the session expires causing a session refresh
through a re-INVITE, the device or server generates a new key
and the device resets the ROC index (and other SRTP fields) as
done by the server, resulting in a synchronized SRTP.
Note:
If this feature is disabled and the server resets the ROC upon a
re-key generation, one-way voice may occur.
The corresponding global parameter is
ResetSRTPStateUponRekey.
Generate SRTP Keys Mode Enables the device to generate a new SRTP key upon receipt of a
generate-srtp-keys re-INVITE with the SIP entity associated with the IP Profile.
[IpProfile_GenerateSRTPKe [0] Only If Required= (Default) The device generates an SRTP
ys] key only if necessary.
[1] Always = The device always generates a new SRTP key.
SBC Remove Crypto Lifetime Defines the handling of the lifetime field in the 'a=crypto' attribute of
in SDP the SDP for the SIP entity associated with the IP Profile. The SDP
sbc-sdp-remove-crypto- field defines the lifetime of the master key as measured in maximum
lifetime number of SRTP or SRTCP packets using the master key.
[IpProfile_SBCRemoveCrypto [0] No = (Default) The device retains the lifetime field (if present)
LifetimeInSDP] in the SDP.
[1] Yes = The device removes the lifetime field from the 'a=crypto'
attribute.
Note: If you configure the parameter to Yes, the following IP Profile
parameters must be configured as follows:
IpProfile_EnableSymmetricMKI configured to Enable [1].
IpProfile_MKISize configured to 0.
IpProfile_SBCEnforceMKISize configured to Enforce [1].
SBC Early Media
Remote Early Media Defines whether the remote side can accept early media or not.
sbc-rmt-early-media-supp [0] Not Supported = Early media is not supported.
[IpProfile_SBCRemoteEarlyM [1] Supported = (Default) Early media is supported.
Parameter Description
ediaSupport]
Remote Multiple 18x Defines whether multiple 18x responses including 180 Ringing, 181
sbc-rmt-mltple-18x-supp Call is Being Forwarded, 182 Call Queued, and 183 Session
Progress are forwarded to the caller, for the SIP entity associated
[IpProfile_SBCRemoteMultiple
with the IP Profile.
18xSupport]
[0] Not Supported = Only the first 18x response is forwarded to
the caller.
[1] Supported = (Default) Multiple 18x responses are forwarded to
the caller.
Remote Early Media Defines the SIP provisional response type - 180 or 183 - for
Response Type forwarding early media to the caller, for the SIP entity associated
sbc-rmt-early-media-resp with the IP Profile.
[IpProfile_SBCRemoteEarlyM [0] Transparent = (Default) All early media response types are
ediaResponseType] supported; the device forwards all responses as is (unchanged).
[1] 180 = Early media is sent as 180 response only.
[2] 183 = Early media is sent as 183 response only.
Parameter Description
Remote Multiple Early Dialogs Defines the device's handling of To-header tags in call forking
sbc-multi-early-diag responses (i.e., multiple SDP answers) sent to the SIP entity
associated with the IP Profile. When the SIP entity initiates an
[IpProfile_SBCRemoteMultiple
INVITE that is subsequently forked (for example, by a proxy server)
EarlyDialogs]
to multiple endpoints, the endpoints respond with a SIP 183
containing an SDP answer. Typically, each endpoint's response has
a different To-header tag. For example, a call initiated by the SIP
entity (100@A) is forked and two endpoints respond with ringing,
each with a different tag:
Endpoint "tag 2":
SIP/2.0 180 Ringing
From: <sip:100@A>;tag=tag1
To: sip:200@B;tag=tag2
Call-ID: c2
Endpoint "tag 3":
SIP/2.0 180 Ringing
From: <sip:100@A>;tag=tag1
To: sip:200@B;tag=tag3
Call-ID: c2
In non-standard behavior (when the parameter is configured to
Disable), the device forwards all the SDP answers with the same tag.
In the example, endpoint "tag 3" is sent with the same tag as
endpoint "tag 2" (i.e., To: sip:200@B;tag=tag2).
[-1] According to Operation Mode = (Default) Depends on the
setting of the 'Operation Mode' parameter in the IP Group or
SRDs table:
B2BUA: Device operates as if the parameter is set to Disable
[0].
Call State-full Proxy: Device operates as if the parameter is
set to Enable [1]. In addition, the device preserves the From
tags and Call-IDs of the endpoints in the SDP answer sent to
the SIP entity.
[0] Disable = Device sends the multiple SDP answers with the
same To-header tag, to the SIP entity. In other words, this option
is relevant if the SIP entity does not support multiple dialogs (and
multiple tags). However, non-standard, multiple answer support
may still be configured by the SBCRemoteMultipleAnswersMode
parameter.
[1] Enable = Device sends the multiple SDP answers with
different To-header tags, to the SIP entity. In other words, the SIP
entity supports standard multiple SDP answers (with different To-
header tags). In this case, the SBCRemoteMultipleAnswersMode
parameter is ignored.
Note: If the parameter and the SBCRemoteMultipleAnswersMode
parameter are disabled, multiple SDP answers are not reflected to
the SIP entity (i.e., the device sends the same SDP answer in
multiple 18x and 200 responses).
Remote Multiple Answers Enables interworking multiple SDP answers within the same SIP
Mode dialog (non-standard). The parameter enables the device to forward
sbc-multi-answers multiple answers to the SIP entity associated with the IP Profile. The
parameter is applicable only when the
[IpProfile_SBCRemoteMultiple
IpProfile_SBCRemoteMultipleEarlyDialogs parameter is disabled.
AnswersMode]
Parameter Description
[0] Disable = (Default) Device always sends the same SDP
answer, which is based on the first received answer that it sent to
the SIP entity, for all forked responses (even if 'Forking Handling
Mode' is Sequential), and thus, may result in transcoding.
[1] Enable = If the 'Forking Handling Mode' parameter is
configured to Sequential, the device sends multiple SDP
answers.
Remote Early Media RTP Defines whether the destination UA sends RTP immediately after it
Detection Mode sends a 18x response.
sbc-rmt-early-media-rtp [0] By Signaling = (Default) Remote client sends RTP immediately
[IpProfile_SBCRemoteEarlyM after it sends 18x response with early media. The device forwards
ediaRTP] 18x and RTP as is.
[1] By Media = After sending 18x response, the remote client
waits before sending RTP (e.g., Microsoft Skype for Business
environment). For the device's handling of this remote UA
support, see Interworking SIP Early Media on page 612.
Remote RFC 3960 Support Defines whether the destination UA is capable of receiving 18x
sbc-rmt-rfc3960-supp messages with delayed RTP.
[IpProfile_SBCRemoteSupport [0] Not Supported = (Default) UA does not support receipt of 18x
sRFC3960] messages with delayed RTP. For the device's handling of this
remote UA support, see Interworking SIP Early Media on page
612.
[1] Supported = UA is capable of receiving 18x messages with
delayed RTP.
Remote Can Play Ringback Defines whether the destination UA can play a local ringback tone.
sbc-rmt-can-play-ringback [0] No = UA does not support local ringback tone. The device
[IpProfile_SBCRemoteCanPla sends 18x with delayed SDP to the UA.
yRingback] [1] Yes = (Default) UA supports local ringback tone. For the
device's handling of this remote UA support, see Interworking SIP
Early Media on page 612.
Generate RTP Enables the device to generate "silence" RTP packets to the SIP
sbc-generate-rtp entity until it detects audio RTP packets from the SIP entity. The
parameter provides support for interworking with SIP entities that
[IPProfile_SBCGenerateRTP]
wait for the first incoming packets before sending RTP (e.g., early
media used for ringback tone or IVR) during media negotiation.
[0] None (Default) = Silence packets are not generated.
[1] Until RTP Detected = The device generates silence RTP
packets to the SIP entity upon receipt of a SIP response (183 with
SDP) from the SIP entity. In other words, these packets serve as
the first incoming packets for the SIP entity. The device stops
sending silence packets when it receives RTP packets from the
peer side (which it then forwards to the SIP entity).
Note: To generate silence packets, DSP resources are required
(except for calls using the G.711 coder).
SBC Media
Allowed Audio Coders Assigns an Allowed Audio Coders Group, which defines audio
allowed-audio-coders-group- (voice) coders that can be used for the SIP entity associated with the
name IP Profile.
[IpProfile_SBCAllowedAudioC To configure Allowed Audio Coders Groups, see Configuring Allowed
odersGroupName] Audio Coder Groups on page 428. For a description of the Allowed
Parameter Description
Coders feature, see 'Restricting Coders' on page 604.
Allowed Coders Mode Defines the mode of the Allowed Coders feature for the SIP entity
sbc-allowed-coders-mode associated with the IP Profile.
[IpProfile_SBCAllowedCoders [0] Restriction = In the incoming SDP offer, the device uses only
Mode] Allowed coders; the rest are removed from the SDP offer (i.e.,
only coders common between those in the received SDP offer
and the Allowed coders are used).
[1] Preference = The device re-arranges the priority (order) of the
coders in the incoming SDP offer according to their order of
appearance in the Allowed Audio Coders Group or Allowed Video
Coders Group. The coders in the original SDP offer are listed
after the Allowed coders.
[2] Restriction and Preference = Performs both Restriction and
Preference.
Note:
The parameter is applicable only if Allowed coders are assigned
to the IP Profile (see the 'Allowed Audio Coders' or 'Allowed
Video Coders' parameters).
For more information on the Allowed Coders feature, see
Restricting Coders on page 604.
Allowed Video Coders Assigns an Allowed Video Coders Group. This defines permitted
allowed-video-coders-group- video coders when forwarding video streams to the SIP entity
name associated with the IP Profile. The video coders are listed in the
"video" media type in the SDP (i.e., 'm=video' line). For this SIP
[IpProfile_SBCAllowedVideoC
entity, the device uses only video coders that appear in both the SDP
odersGroupName]
offer and the Allowed Video Coders Group.
By default, no Allowed Video Coders Group is assigned (i.e., all
video coders are allowed).
To configure Allowed Video Coders Groups, see Configuring Allowed
Video Coder Groups on page 430.
Allowed Media Types Defines media types permitted for the SIP entity associated with the
sbc-allowed-media-types IP Profile. The media type appears in the SDP 'm=' line (e.g.,
'm=audio'). The device permits only media types that appear in both
[IpProfile_SBCAllowedMediaT
the SDP offer and this configured list. If no common media types
ypes]
exist between the SDP offer and this list, the device drops the call.
The valid value is a string of up to 64 characters. To configure
multiple media types, separate the strings with a comma, e.g., "
audio, text" (without quotes). By default, no media types are
configured (i.e., all media types are permitted).
Direct Media Tag Defines an identification tag for enabling direct media (no Media
sbc-dm-tag Anchoring) for the SIP entity associated with the IP Profile. Direct
media occurs between all endpoints whose IP Profiles have the
[IPProfile_SBCDirectMediaTa
same tag value (non-empty value). For example, if you set the
g]
parameter to "direct-rtp" for two IP Profiles "IP-PBX-1" and "IP-PBX-
2", the device employs direct media for calls amongst endpoints
associated with IP Profile "IP-PBX-1", for calls amongst endpoints
associated with IP Profile "IP-PBX-2", and for calls between
endpoints associated with IP Profile "IP-PBX-1" and IP Profile "IP-
PBX-2".
The valid value is a string of up to 16 characters. By default, no value
Parameter Description
is defined.
For more information on direct media, see Direct Media on page 602.
Note: If you enable direct media for the IP Profile, make sure that
your Media Realm provides sufficient ports, as media may traverse
the device for mid-call services (e.g., call transfer).
RFC 2833 DTMF Payload Defines the payload type of DTMF digits for the SIP entity associated
Type with the IP Profile. This enables the interworking of the DTMF
sbc-2833dtmf-payload payload type for RFC 2833 between different SBC call legs. For
example, if two entities require different DTMF payload types, the
[IpProfile_SBC2833DTMFPayl
SDP offer received by the device from one entity is forwarded to the
oadType]
destination entity with its payload type replaced with the configured
payload type, and vice versa.
The value range is 0 to 200. The default is 0 (i.e., the device
forwards the received payload type as is).
Send Multiple DTMF Methods Enables the device to send DTMF digits out-of-band (not with audio
sbc-send-multiple- stream) using both the SIP INFO and RFC 2833 methods for the
dtmf-methods same call on the leg to which this IP Profile is associated. The RFC
2833 method sends out-of-band DTMF digits using the RTP protocol
[IPProfile_SBCSupportMultipl
while the SIP INFO method sends the digits using the SIP protocol.
eDTMFMethods]
[0] Disable = (Default) The device sends DTMF digits using only
one method (either SIP INFO, RFC 2833, or in-band).
[1] Enable = The device sends DTMF digits using both methods -
SIP INFO and RFC 2833.
If you have enabled the parameter, you can also configure the
device to stop sending DTMF digits using the SIP INFO method if the
device receives a SIP re-INVITE (or UPDATE) from the SIP entity to
where the SIP INFO is being sent (and keep sending the DTMF
digits using the RFC 2833 method). This is done using AudioCodes
proprietary SIP header X-AC-Action and a Message Manipulation
rule (inbound) to instruct the device to switch to a different IP Profile
that is configured to disable the sending of DTMF digits using both
methods (i.e., 'Send Multiple DTMF Methods' is configured to
Disable):
X-AC-Action: 'switch-profile;profile-name=<IP Profile Name>'
If the IP Profile name contains one or more spaces, you must
enclose the name in double quotation marks, for example:
X-AC-Action: 'switch-profile;profile-name="My IP Profile"'
The Message Manipulation rule adds the proprietary header with the
value of the new IP Profile to the incoming re-INVITE or UPDATE
message and as a result, the device uses the new IP Profile for the
SIP entity and stops sending it SIP INFO messages. You can also
configure an additional Message Manipulation rule to re-start the
sending of the SIP INFO. For example, you can configure two
Message Manipulation rules where the sending of both SIP INFO
and RFC 2833 depends on the negotiated media port -- the device
stops sending SIP INFO if the SDP of the re-INVITE or UPDATE
message contains port 7550 and re-starts sending if the port is 8660.
The rule that re-starts the SIP INFO switches the IP Profile back to
the initial IP Profile that enables the sending of DTMF digits using
both methods (i.e., 'Send Multiple DTMF Methods' is configured to
Enable). The configured Message Manipulation rules for this
example are shown below:
Parameter Description
Index 1
Message Type: reinvite.request
Condition: body.sdp regex (.*)(m=audio 7550 RTP/AVP)(.*)
Action Subject: header.X-AC-Action
Action Type: Add
Action Value: 'switch-profile;profile-name=ITSP-Profile-2'
Index 2
Message Type: reinvite.request
Condition: body.sdp regex (.*)(m=audio 8660 RTP/AVP)(.*)
Action Subject: header.X-AC-Action
Action Type: Add
Action Value: 'switch-profile;profile-name=ITSP-Profile-1'
The Message Manipulation rules must be assigned to the SIP
entity's IP Group, using the 'Inbound Message Manipulation Set'
parameter.
Note:
To send DTMF digits using both methods (i.e., when the
parameter is enabled), you need to also configure the following:
Configure the 'Alternative DTMF Method'
(IPProfile_SBCAlternativeDTMFMethod) parameter to one of
the SIP INFO options (INFO – Cisco, INFO – Nortel, or
INFO – Lucent).
Enable the sending of DTMF digits using the RFC 2833
method, by configuring the 'RFC 2833 Mode'
(IpProfile_SBCRFC2833Behavior) parameter to As Is or
Extend.
When using the X-AC-Action header to switch IP Profiles, it is
recommended that the settings of the switched IP Profile are
identical (except for the 'Send Multiple DTMF Methods'
parameter) to the initial IP Profile in order to avoid any possible
call handling errors.
This feature requires DSP resources (for detection and
generation of RFC 2833).
The parameter is applicable only to the SBC application.
SDP Ptime Answer Defines the packetization time (ptime) of the coder in RTP packets
sbc-sdp-ptime-ans for the SIP entity associated with the IP Profile. This is useful when
implementing transrating.
[IpProfile_SBCSDPPtimeAns
wer] [0] Remote Answer = (Default) Use ptime according to SDP
answer.
[1] Original Offer = Use ptime according to SDP offer.
[2] Preferred Value= Use the ptime according to the 'Preferred
Ptime' parameter (see below) if it is configured to a non-zero
value.
Note: Regardless of the settings of this parameter, if a non-zero
value is configured for the 'Preferred Ptime' parameter (see below), it
is used as the ptime in the SDP offer.
Preferred Ptime Defines the packetization time (ptime) in msec for the SIP entity
sbc-preferred-ptime associated with the IP Profile, in the outgoing SDP offer.
[IpProfile_SBCPreferredPTim If the 'SDP Ptime Answer' parameter (see above) is configured to
e] Preferred Value [2] and the 'Preferred Ptime' parameter is
configured to a non-zero value, the configured ptime is used
Parameter Description
(enabling ptime transrating if the other side uses a different ptime).
If the 'SDP Ptime Answer' parameter is configured to Remote
Answer [0] or Original Offer [1] and the 'Preferred Ptime' parameter
is configured to a non-zero value, the configured value is used as the
ptime in the SDP offer.
The valid range is 0 to 200. The default is 0 (i.e., a preferred ptime is
not used).
Use Silence Suppression Defines silence suppression support for the SIP entity associated
sbc-use-silence-supp with the IP Profile
[IpProfile_SBCUseSilenceSup [0] Transparent = (Default) Forward as is.
p] [1] Add = Enable silence suppression for each relevant coder
listed in the SDP.
[2] Remove = Disable silence suppression for each relevant coder
listed in the SDP.
Note: The parameter requires DSP resources.
RTP Redundancy Mode Enables interworking RTP redundancy negotiation support between
sbc-rtp-red-behav SIP entities in the SDP offer-answer exchange (according to RFC
2198). The parameter defines the device's handling of RTP
[IpProfile_SBCRTPRedundan
redundancy for the SIP entity associated with the IP Profile.
cyBehavior]
According to the RTP redundancy SDP offer/answer negotiation, the
device uses or discards the RTP redundancy packets. The
parameter enables asymmetric RTP redundancy, whereby the
device can transmit and receive RTP redundancy packets to and
from a specific SIP entity, while transmitting and receiving regular
RTP packets (no redundancy) for the other SIP entity involved in the
voice path.
The device can identify the RTP redundancy payload type in the
SDP for indicating that the RTP packet stream includes redundant
packets. RTP redundancy is indicated in SDP using the "red" coder
type, for example:
a=rtpmap:<payload type> red/8000/1
RTP redundancy is useful when there is packet loss; the missing
information may be reconstructed at the receiver side from the
redundant packets.
[0] As Is = (Default) The device does not interfere in the RTP
redundancy negotiation and forwards the SDP offer/answer
(incoming and outgoing calls) as is without interfering in the RTP
redundancy negotiation.
[1] Enable = The device always adds RTP redundancy
capabilities in the outgoing SDP offer sent to the SIP entity.
Whether RTP redundancy is implemented depends on the
subsequent incoming SDP answer from the SIP entity. The
device does not modify the incoming SDP offer received from the
SIP entity, but if RTP redundancy is required, it will be supported.
Select the option if the SIP entity requires RTP redundancy.
[2] Disable = The device removes the RTP redundancy payload
(if present) from the SDP offer/answer for calls received from or
sent to the SIP entity. Select the option if the SIP entity does not
support RTP redundancy.
Note:
To enable the device to generate RFC 2198 redundant packets,
use the IPProfile_RTPRedundancyDepth parameter.
Parameter Description
To configure the payload type in the SDP offer for RTP
redundancy, use the RFC2198PayloadType.
RTCP Mode Defines how the device handles RTCP packets during call sessions
sbc-rtcp-mode for the SIP entity associated with the IP Profile. This is useful for
interworking RTCP between SIP entities. For example, this may be
[IPProfile_SBCRTCPMode]
necessary when incoming RTCP is not compatible with the
destination SIP entity's (this IP Profile) RTCP support. In such a
scenario, the device can generate the RTCP and send it to the SIP
entity.
[0] Transparent = (Default) RTCP is forwarded as is.
[1] Generate Always = Generates RTCP packets during active
and inactive (e.g., during call hold) RTP periods (i.e., media is
'a=recvonly' or 'a=inactive' in the INVITE SDP).
[2] Generate only if RTP Active = Generates RTCP packets only
during active RTP periods. In other words, the device does not
generate RTCP when there is no RTP traffic (such as when a call
is on hold).
Note: The corresponding global parameter is SBCRTCPMode.
Jitter Compensation Enables the on-demand jitter buffer for SBC calls. The jitter buffer is
sbc-jitter-compensation useful when incoming packets are received at inconsistent intervals
(i.e., packet delay variation). The jitter buffer stores the packets and
[IpProfile_SBCJitterCompensa
sends them out at a constant rate (according to the coder's settings).
tion]
[0] Disable (default)
[1] Enable
Note:
The jitter buffer parameters, 'Dynamic Jitter Buffer Minimum
Delay' (DJBufMinDelay) and 'Dynamic Jitter Buffer Optimization
Factor' (DJBufOptFactor) can be used to configure minimum
packet delay only when transcoding is employed.
ICE Mode Enables Interactive Connectivity Establishment (ICE) Lite for the SIP
ice-mode entity associated with the IP Profile. ICE is a methodology for NAT
traversal, employing the Session Traversal Utilities for NAT (STUN)
[IPProfile_SBCIceMode]
and Traversal Using Relays around NAT (TURN) protocols to
provide a peer with a public IP address and port that can be used to
connect to a remote peer.
[0] Disable (default)
[1] Lite
For more information on ICE Lite, see ICE Lite.
SDP Handle RTCP Enables the interworking of the RTCP attribute, 'a=rtcp' (RTCP) in
sbc-sdp-handle-rtcp the SDP, for the SIP entity associated with the IP Profile. The RTCP
attribute is used to indicate the RTCP port for media when that port
[IpProfile_SBCSDPHandleRT
is not the next higher port number following the RTP port specified in
CPAttribute]
the media line ('m=').
The parameter is useful for SIP entities that either require the
attribute or do not support the attribute. For example, Google
Chrome and Web RTC do not accept calls without the RTCP
attribute in the SDP. In Web RTC, Chrome (SDES) generates the
SDP with 'a=rtcp', for example:
m=audio 49170 RTP/AVP 0
a=rtcp:53020 IN IP6
Parameter Description
2001:2345:6789:ABCD:EF01:2345:6789:ABCD
[0] Don't Care = (Default) The device forwards the SDP as is
without interfering in the RTCP attribute (regardless if present or
not).
[1] Add = The device adds the 'a=rtcp' attribute to the outgoing
SDP offer sent to the SIP entity if the attribute was not present in
the original incoming SDP offer.
[2] Remove = The device removes the 'a=rtcp' attribute, if present
in the incoming SDP offer received from the other SIP entity,
before sending the outgoing SDP offer to the SIP entity.
RTCP Mux Enables interworking of multiplexing of RTP and RTCP onto a single
sbc-rtcp-mux local port, between SIP entities. The parameter enables multiplexing
of RTP and RTCP traffic onto a single local port, for the SIP entity
[IPProfile_SBCRTCPMux]
associated with the IP Profile.
Multiplexing of RTP data packets and RTCP packets onto a single
local UDP port is done for each RTP session (according to RFC
5761). If multiplexing is not enabled, the device uses different (but
adjacent) ports for RTP and RTCP packets.
With the increased use of NAT and firewalls, maintaining multiple
NAT bindings can be costly and also complicate firewall
administration since multiple ports must be opened to allow RTP
traffic. To reduce these costs and session setup times, support for
multiplexing RTP data packets and RTCP packets onto a single port
is advantageous.
For multiplexing, the initial SDP offer must include the "a=rtcp-mux"
attribute to request multiplexing of RTP and RTCP onto a single port.
If the SDP answer wishes to multiplex RTP and RTCP, it must also
include the "a=rtcp-mux" attribute. If the answer does not include the
attribute, the offerer must not multiplex RTP and RTCP packets. If
both ICE and multiplexed RTP-RTCP are used, the initial SDP offer
must also include the "a=candidate:" attribute for both RTP and
RTCP along with the "a=rtcp:" attribute, indicating a fallback port for
RTCP in case the answerer does not support RTP and RTCP
multiplexing.
[0] Not Supported = (Default) RTP and RTCP packets use
different ports.
[1] Supported = Device multiplexes RTP and RTCP packets onto
a single port.
RTCP Feedback Enables RTCP-based feedback indication in outgoing SDPs sent to
sbc-rtcp-feedback the SIP entity associated with the IP Profile.
[IPProfile_SBCRTCPFeedbac The parameter supports indication of RTCP-based feedback,
k] according to RFC 5124, during RTP profile negotiation between two
communicating SIP entities. RFC 5124 defines an RTP profile
(S)AVPF for (secure) real-time communications to provide timely
feedback from the receivers to a sender. For more information on
RFC 5124, see http://tools.ietf.org/html/rfc5124.
Some SIP entities may require RTP secure-profile feedback
negotiation (AVPF/SAVPF) in the SDP offer/answer exchange, while
other SIP entities may not support it. The device indicates whether or
not feedback is supported on behalf of the SIP entity. It does this by
adding an "F" or removing the "F" from the SDP media line ('m=') for
AVP and SAVP. For example, the following shows "AVP" appended
with an "F", indicating that the SIP entity is capable of receiving
Parameter Description
feedback
m=audio 49170 RTP/SAVPF 0 96
[0] Feedback Off = (Default) The device does not send the
feedback flag ("F") in SDP offers/answers that are sent to the SIP
entity. If the SDP 'm=' attribute of an incoming message that is
destined to the SIP entity includes the feedback flag, the device
removes it before sending the message to the SIP entity.
[1] Feedback On = The device includes the feedback flag ("F") in
the SDP offer sent to the SIP entity. The device includes the
feedback flag in the SDP answer sent to the SIP entity only if it
was present in the SDP offer received from the other SIP entity.
[2] As Is = The device does not involve itself in the feedback, but
simply forwards any feedback indication as is.
Quality of Service
RTP IP DiffServ Defines the DiffServ value for Premium Media class of service (CoS)
rtp-ip-diffserv content.
[IpProfile_IPDiffServ] The valid range is 0 to 63. The default is 46.
Note: The corresponding global parameter is
PremiumServiceClassMediaDiffServ.
Signaling DiffServ Defines the DiffServ value for Premium Control CoS content (Call
signaling-diffserv Control applications).
[IpProfile_SigIPDiffServ] The valid range is 0 to 63. The default is 40.
Note: The corresponding global parameter is
PremiumServiceClassControlDiffServ.
Jitter Buffer
Dynamic Jitter Buffer Defines the minimum delay (in msec) of the device's dynamic Jitter
Minimum Delay Buffer.
jitter-buffer-minimum-delay The valid range is 0 to 150. The default delay is 10.
[IpProfile_JitterBufMinDelay] For more information on Jitter Buffer, see Configuring the Dynamic
Jitter Buffer on page 198.
Note: The corresponding global parameter is DJBufMinDelay.
Dynamic Jitter Buffer Defines the Dynamic Jitter Buffer frame error/delay optimization
Optimization Factor factor.
jitter-buffer-optimization-factor The valid range is 0 to 12. The default factor is 10.
[IpProfile_JitterBufOptFactor] For more information on Jitter Buffer, see Configuring the Dynamic
Jitter Buffer on page 198.
Note:
For data (fax and modem) calls, set the parameter to 12.
The corresponding global parameter is DJBufOptFactor.
Jitter Buffer Max Delay Defines the maximum delay and length (in msec) of the Jitter Buffer.
jitter-buffer-max-delay The valid range is 150 to 2,000. The default is 250.
[IpProfile_JitterBufMaxDelay]
Voice
Echo Canceler Enables the device's Echo Cancellation feature (i.e., echo from voice
echo-canceller calls is removed).
Parameter Description
[IpProfile_EnableEchoCancell [0] Disable
er] [1] Line (default)
For a detailed description of the Echo Cancellation feature, see
Configuring Echo Cancellation on page 183.
Note: The corresponding global parameter is EnableEchoCanceller.
Input Gain Defines the pulse-code modulation (PCM) input gain control (in
input-gain decibels). For the Gateway application: Defines the level of the
received signal for Tel-to-IP calls.
[IpProfile_InputGain]
The valid range is -32 to 31 dB. The default is 0 dB.
Note: The corresponding global parameter is InputGain.
Voice Volume Defines the voice gain control (in decibels). For the Gateway
voice-volume application: Defines the level of the transmitted signal for IP-to-Tel
calls.
[IpProfile_VoiceVolume]
The valid range is -32 to 31 dB. The default is 0 dB.
Note: The corresponding global parameter is VoiceVolume.
SBC Signaling
PRACK Mode Defines the device's handling of SIP PRACK messages for the SIP
sbc-prack-mode entity associated with the IP Profile.
[IpProfile_SbcPrackMode] [1] Optional = PRACK is optional. If required, the device performs
the PRACK process on behalf of the SIP entity.
[2] Mandatory = PRACK is required for this SIP entity. Calls from
endpoints that do not support PRACK are rejected. Calls destined
to these endpoints are also required to support PRACK.
[3] Transparent (default) = The device does not intervene with the
PRACK process and forwards the request as is.
P-Asserted-Identity Header Defines the device's handling of the SIP P-Asserted-Identity header
Mode for the SIP entity associated with the IP Profile. This header indicates
sbc-assert-identity how the outgoing SIP message asserts identity.
[IpProfile_SBCAssertIdentity] [0] As Is = (Default) P-Asserted Identity header is not affected and
the device uses the same P-Asserted-Identity header (if present)
in the incoming message for the outgoing message.
[1] Add = Adds a P-Asserted-Identity header. The header's values
are taken from the source URL.
[2] Remove = Removes the P-Asserted-Identity header.
Note:
The parameter affects only the initial INVITE request.
The corresponding global parameter is SBCAssertIdentity.
Diversion Header Mode Defines the device’s handling of the SIP Diversion header for the SIP
sbc-diversion-mode entity associated with the IP Profile.
[IpProfile_SBCDiversionMode] [0] As Is = (Default) Diversion header is not handled.
[1] Add = History-Info header is converted to a Diversion header.
[2] Remove = Removes the Diversion header and the conversion
to the History-Info header depends on the SBCHistoryInfoMode
parameter.
For more information on interworking of the History-Info and
Diversion headers, see Interworking SIP Diversion and History-Info
Headers on page 610.
Note: If the Diversion header is used, you can specify the URI type
Parameter Description
(e.g., "tel:") to use in the header, using the SBCDiversionUriType
parameter.
History-Info Header Mode Defines the device’s handling of the SIP History-Info header for the
sbc-history-info-mode SIP entity associated with the IP Profile.
[IpProfile_SBCHistoryInfoMod [0] As Is = (Default) History-Info header is not handled.
e] [1] Add = Diversion header is converted to a History-Info header.
[2] Remove = History-Info header is removed from the SIP dialog
and the conversion to the Diversion header depends on the
SBCDiversionMode parameter.
For more information on interworking of the History-Info and
Diversion headers, see Interworking SIP Diversion and History-Info
Headers on page 610.
Session Expires Mode Defines the required session expires mode for the SIP entity
sbc-session-expires-mode associated with the IP Profile.
[IpProfile_SBCSessionExpires [0] Transparent = (Default) The device does not interfere with the
Mode] session expires negotiation.
[1] Observer = If the SIP Session-Expires header is present, the
device does not interfere, but maintains an independent timer for
each leg to monitor the session. If the session is not refreshed on
time, the device disconnects the call.
[2] Not Supported = The device does not allow a session timer
with this SIP entity.
[3] Supported = The device enables the session timer with this
SIP entity. If the incoming SIP message does not include any
session timers, the device adds the session timer information to
the sent message. You can configure the value of the Session-
Expires and Min-SE headers, using the SBCSessionExpires and
SBCMinSE parameters, respectively.
Remote Update Support Defines whether the SIP UPDATE message is supported by the SIP
sbc-rmt-update-supp entity associated with the IP Profile.
[IpProfile_SBCRemoteUpdate [0] Not Supported = UPDATE message is not supported.
Support] [1] Supported Only After Connect = UPDATE message is
supported only after the call is connected.
[2] Supported = (Default) UPDATE message is supported during
call setup and after call establishment.
Remote re-INVITE Defines whether the destination UA of the re-INVITE request
sbc-rmt-re-invite-supp supports re-INVITE messages and if so, whether it supports re-
INVITE with or without SDP.
[IpProfile_SBCRemoteReinvit
eSupport] [0] Not Supported = re-INVITE is not supported and the device
does not forward re-INVITE requests. The device sends a SIP
response to the re-INVITE request, which can either be a success
or a failure, depending on whether the device can bridge the
media between the endpoints.
[1] Supported only with SDP = re-INVITE is supported, but only
with SDP. If the incoming re-INVITE arrives without SDP, the
device creates an SDP and adds it to the outgoing re-INVITE.
[2] Supported = (Default) re-INVITE is supported with or without
SDP.
Remote Delayed Offer Defines whether the remote endpoint supports delayed offer (i.e.,
Parameter Description
Support initial INVITEs without an SDP offer).
sbc-rmt-delayed-offer [0] Not Supported = Initial INVITE requests without SDP are not
[IpProfile_SBCRemoteDelaye supported.
dOfferSupport] [1] Supported = (Default) Initial INVITE requests without SDP are
supported.
Remote Representation Mode Enables interworking SIP in-dialog, Contact and Record-Route
sbc-rmt-rprsntation headers between SIP entities. The parameter defines the device's
handling of in-dialog, Contact and Record-Route headers for
[IpProfile_SBCRemoteRepres
messages sent to the SIP entity associated with the IP Profile.
entationMode]
[-1] According to Operation Mode = (Default) Depends on the
setting of the 'Operation Mode' parameter in the IP Group or
SRDs table:
B2BUA: Device operates as if the parameter is set to
Replace Contact [0].
Call State-full Proxy: Device operates as if the parameter is
set to Add Routing Headers [1].
[0] Replace Contact = The URI host part in the Contact header of
the received message (from the other side) is replaced with the
device's address or with the value of the 'SIP Group Name'
parameter (configured in the IP Groups table) in the outgoing
message sent to the SIP entity.
[1] Add Routing Headers = Device adds a Record-Route header
for itself to outgoing messages (requests\responses) sent to the
SIP entity in dialog-setup transactions. The Contact header
remains unchanged.
[2] Transparent = Device doesn't change the Contact header and
doesn't add a Record-Route header for itself. Instead, it relies on
its' own inherent mechanism to remain in the route of future
requests in the dialog (for example, relying on the way the
endpoints are set up or on TLS as the transport type).
Keep Incoming Via Headers Enables interworking SIP Via headers between SIP entities. The
sbc-keep-via-headers parameter defines the device's handling of Via headers for
messages sent to the SIP entity associated with the IP Profile.
[IpProfile_SBCKeepVIAHeade
rs] [-1] According to Operation Mode = Depends on the setting of the
'Operation Mode' parameter in the IP Groups table or SRDs table:
B2BUA: Device operates as if the parameter is set to Disable
[0].
Call State-full Proxy: Device operates as if the parameter is
set to Enable [1].
[0] Disable = Device removes all Via headers received in the
incoming SIP request from the other leg and adds a Via header
identifying only itself, in the outgoing message sent to the SIP
entity.
[1] Enable = Device retains the Via headers received in the
incoming SIP request and adds itself as the top-most listed Via
header in the outgoing message sent to the SIP entity.
Keep Incoming Routing Enables interworking SIP Record-Route headers between SIP
Headers entities. The parameter defines the device's handling of Record-
sbc-keep-routing-headers Route headers for request/response messages sent to the the SIP
entity associated with the IP Profile.
[IpProfile_SBCKeepRoutingH
eaders] [-1] According to Operation Mode = (Default) Depends on the
setting of the 'Operation Mode' in the IP Group or SRDs table:
Parameter Description
B2BUA: Device operates as if the parameter is set to Disable
[0].
Call State-full Proxy: Device operates as if the parameter is
set to Enable [1].
[0] Disable = Device removes the Record-Route headers received
in requests and responses from the other side, in the outgoing
SIP message sent to the SIP entity. The device creates a route
set for that side of the dialog based on these headers, but doesn't
send them to the SIP entity.
[1] Enable = Device retains the incoming Record-Route headers
received in requests and non-failure responses from the other
side, in the following scenarios:
The message is part of a SIP dialog-setup transaction.
The messages in the setup and previous transaction didn't
include the Record-Route header, and therefore hadn't set
the route set.
Note: Record-Routes are kept only for SIP INVITE, UPDATE,
SUBSCRIBE and REFER messages.
Keep User-Agent Header Enables interworking SIP User-Agent headers between SIP entities.
sbc-keep-user-agent The parameter defines the device's handling of User-Agent headers
for response/request messages sent to the SIP entity associated
[IpProfile_SBCKeepUserAgen
with the IP Profile.
tHeader]
[-1] According to Operation Mode = (Default) Depends on the
setting of the 'Operation Mode' parameter in the IP Group or
SRDs table:
B2BUA: Device operates as if this parameter is set to Disable
[0].
Call State-full Proxy: Device operates as if this parameter is
set to Enable [1].
[0] Disable = Device removes the User-Agent/Server headers
received in the incoming message from the other side, and adds
its' own User-Agent header in the outgoing message sent to the
SIP entity.
[1] Enable = Device retains the User-Agent/Server headers
received in the incoming message and sends the headers as is in
the outgoing message to the SIP entity.
Handle X-Detect Enables the detection and notification of events (AMD, CPT, and
sbc-handle-xdetect fax), using the X-Detect SIP header.
[IpProfile_SBCHandleXDetect] [0] No (default)
[1] Yes
For more information, see Event Detection and Notification using X-
Detect Header on page 202.
ISUP Body Handling Defines the handling of ISUP data for interworking between SIP and
sbc-isup-body-handling SIP-I endpoints.
[IpProfile_SBCISUPBodyHand [0] Transparent = (Default) ISUP data is passed transparently (as
ling] is) between endpoints (SIP-I to SIP-I calls).
[1] Remove = ISUP body is removed from INVITE messages.
[2] Create = ISUP body is added to outgoing INVITE messages.
For more information on interworking SIP and SIP-I, see Interworking
SIP and SIP-I Endpoints on page 699.
Parameter Description
ISUP Variant Defines the ISUP variant for interworking SIP and SIP-I endpoints.
sbc-isup-variant [0] itu92 = (Default) ITU 92 variant
[IpProfile_SBCISUPVariant] [1] Spirou = SPIROU (ISUP France)
Max Call Duration Defines the maximum duration (in minutes) per SBC call that is
sbc-max-call-duration associated with the IP Profile. If the duration is reached, the device
terminates the call.
[IpProfile_SBCMaxCallDuratio
n] The valid range is 0 to 35,791, where 0 is unlimited duration. The
default is the value configured for the global parameter,
SBCMaxCallDuration.
SBC Registration
User Registration Time Defines the registration time (in seconds) that the device responds to
sbc-usr-reg-time SIP REGISTER requests from users belonging to the SIP entity
associated with the IP Profile. The registration time is inserted in the
[IpProfile_SBCUserRegistratio
Expires header in the outgoing response sent to the user.
nTime]
The Expires header determines the lifespan of the registration. For
example, a value of 3600 means that the registration will timeout in
one hour and at that point, the user will not be able to make or
receive calls.
The valid range is 0 to 2,000,000. The default is 0. If configured to 0,
the Expires header's value received in the user’s REGISTER request
remains unchanged. If no Expires header is received in the
REGISTER message and the parameter is set to 0, the Expires
header's value is set to 180 seconds, by default.
Note: The corresponding global parameter is
SBCUserRegistrationTime.
NAT UDP Registration Time Defines the registration time (in seconds) that the device includes in
sbc-usr-udp-nat-reg-time register responses, in response to SIP REGISTER requests from
users belonging to the SIP entity associated with the IP Profile.
[IpProfile_SBCUserBehindUd
pNATRegistrationTime] The parameter applies only to users that are located behind NAT
and whose communication type is UDP. The registration time is
inserted in the Expires header in the outgoing response sent to the
user.
The Expires header determines the lifespan of the registration. For
example, a value of 3600 means that the registration will timeout in
one hour, unless the user sends a refresh REGISTER before the
timeout. Upon timeout, the device removes the user’s details from
the registration database, and the user will not be able to make or
receive calls through the device.
The valid value is 0 to 2,000,000. If configured to 0, the Expires
header's value received in the user’s REGISTER request remains
unchanged. By default, no value is defined (-1).
Note: If the parameter is not configured, the registration time is
according to the global parameter SBCUserRegistrationTime or IP
Profile parameter IpProfile_SBCUserRegistrationTime.
NAT TCP Registration Time Defines the registration time (in seconds) that the device includes in
sbc-usr-tcp-nat-reg-time register responses, in response to SIP REGISTER requests from
users belonging to the SIP entity associated with the IP Profile.
[IpProfile_SBCUserBehindTcp
NATRegistrationTime] The parameter applies only to users that are located behind NAT
and whose communication type is TCP. The registration time is
inserted in the Expires header in the outgoing response sent to the
Parameter Description
user.
The Expires header determines the lifespan of the registration. For
example, a value of 3600 means that the registration will timeout in
one hour, unless the user sends a refresh REGISTER before the
timeout. Upon timeout, the device removes the user’s details from
the registration database, and the user will not be able to make or
receive calls through the device.
The valid value is 0 to 2,000,000. If configured to 0, the Expires
header's value received in the user’s REGISTER request remains
unchanged. By default, no value is defined (-1).
Note: If the parameter is not configured, the registration time is
according to the global parameter SBCUserRegistrationTime or IP
Profile parameter IpProfile_SBCUserRegistrationTime.
SBC Forward and Transfer
Remote REFER Mode Defines the device's handling of SIP REFER requests for the IP
sbc-rmt-refer-behavior entity (transferee - call party that is transfered to the transfer target)
associated with the IP Profile.
[IpProfile_SBCRemoteReferB
ehavior] [0] Regular = (Default) SIP Refer-To header value is unchanged
and the device forwards the REFER message as is.
[1] Database URL = SIP Refer-To header value is changed so
that the re-routed INVITE is sent through the device:
a. Before forwarding the REFER request, the device changes
the host part to the device's IP address and adds a special
prefix ("T~&R_") to the Contact user part.
b. The incoming INVITE is identified as a REFER-resultant
INVITE according to this special prefix.
c. The device replaces the host part in the Request-URI with
the host from the REFER contact. The special prefix remains
in the user part for regular classification, manipulation, and
routing. The special prefix can also be used for specific
routing rules for REFER-resultant INVITEs.
d. The special prefix is removed before the resultant INVITE is
sent to the destination.
[2] IP Group Name = Sets the host part in the REFER message to
the name defined for the IP Group (in the IP Groups table).
[3] Handle Locally = Handles the incoming REFER request itself
without forwarding the REFER. The device generates a new
INVITE to the alternative destination (transfer target) according to
the rules in the IP-to-IP Routing table (the 'Call Trigger' parameter
must be set to REFER).
[4] Local Host = In the REFER message received from the
transferor, the device replaces the Refer-To header value (URL)
with the IP address of the device or with the ‘Local Host Name’
parameter value configured for the IP Group (transferee) to where
the device forwards the REFER message. This ensures that the
transferee sends the re-routed INVITE back to the device which
then sends the call to the transfer target.
[5] Keep Host = The device forwards the REFER message
without changing the host part in the SIP Refer-To header. This
applies to all types of call transfers (e.g., blind and attendant
transfer).
Parameter Description
Note: The corresponding global parameter is SBCReferBehavior.
Remote Replaces Mode Enables the device to handle incoming INVITEs containing the
sbc-rmt-replaces-behavior Replaces header for the SIP entity (which does not support the
header) associated with the IP Profile. The Replaces header is used
[IpProfile_SBCRemoteReplac
to replace an existing SIP dialog with a new dialog such as in call
esBehavior]
transfer or call pickup.
[0] Standard = (Default) The SIP entity supports INVITE
messages containing Replaces headers. The device forwards the
INVITE message containing the Replaces header to the SIP
entity. The device may change the value of the Replaces header
to reflect the call identifiers of the leg.
[1] Handle Locally = The SIP entity does not support INVITE
messages containing Replaces headers. The device terminates
the received INVITE containing the Replaces header and
establishes a new call between the SIP entity and the new call
party. It then disconnects the call with the initial call party, by
sending it a SIP BYE request.
[2] Keep as is = The SIP entity supports INVITE messages
containing Replaces headers. The device forwards the Replaces
header as is in incoming REFER and outgoing INVITE messages
from/to the SIP entity (i.e., Replaces header's value is
unchanged).
For example, assume that the device establishes a call between A
and B. If B initiates a call transfer to C, the device receives an
INVITE with the Replaces header from C. If A supports the Replaces
header, the device simply forwards the INVITE as is to A; a new call
is established between A and C and the call between A and B is
disconnected. However, if A does not support the Replaces header,
the device uses this feature to terminate the INVITE with Replaces
header and handles the transfer for A. The device does this by
connecting A to C, and disconnecting the call between A and B, by
sending a SIP BYE request to B. Note that if media transcoding is
required, the device sends an INVITE to C on behalf of A with a new
SDP offer.
Play RBT To Transferee Enables the device to play a ringback tone to the transferred party
sbc-play-rbt-to-xferee (transferee) during a blind call transfer, for the SIP entity associated
with the IP Profile (which does not support such a tone generation
[IpProfile_SBCPlayRBTToTra
during call transfer). The ringback tone indicates to the transferee of
nsferee]
the ringing of the transfer target (to where the transferee is being
transferred).
[0] No (Default)
[1] Yes
Typically, the transferee hears a ringback tone only if the transfer
target sends it early media. However, if the transferee is put on-hold
before being transferred, no ringback tone is heard.
When this feature is enabled, the device generates a ringback tone
to the transferee during call transfer in the following scenarios:
Transfer target sends a SIP 180 (Ringing) to the device.
For non-blind transfer, if the call is transferred while the transfer
target is ringing and no early media occurs.
The 'Remote Early Media RTP Behavior parameter is set to
Delayed (used in the Skype for Business environment), and
Parameter Description
transfer target sends a 183 Session Progress with SDP offer. If
early media from the transfer target has already been detected,
the transferee receives RTP stream from the transfer target. If it
has not been detected, the device generates a ringback tone to
the transferee and stops the tone generation once RTP has been
detected from the transfer target.
For any of these scenarios, if the transferee is put on-hold by the
transferor, the device retrieves the transferee from hold, sends a re-
INVITE if necessary, and then plays the ringback tone.
Note: For the device to play the ringback tone, it must be loaded with
a Prerecorded Tones (PRT) file. For more information, see
Prerecorded Tones File on page 762.
Remote 3xx Mode Defines the device's handling of SIP 3xx redirect responses for the
sbc-rmt-3xx-behavior SIP entity associated with the IP Profile. By default, the device's
handling of SIP 3xx responses is to send the Contact header
[IpProfile_SBCRemote3xxBeh
unchanged. However, some SIP entities may support different
avior]
versions of the SIP 3xx standard while others may not even support
SIP 3xx.
When enabled, the device handles SIP redirections between
different subnets (e.g., between LAN and WAN sides). This is
required when the new address provided by the redirector (Redirect
sever) may not be reachable by the far-end user (FEU) located in
another subnet. For example, a far-end user (FEU) in the WAN
sends a SIP request via the device to a Redirect server in the LAN,
and the Redirect server replies with a SIP 3xx response to a PBX in
the LAN in the Contact header. If the device sends this response as
is (i.e., with the original Contact header), the FEU is unable to reach
the new destination.
[0] Transparent = (Default) The device forwards the received SIP
3xx response as is, without changing the Contact header
(i.e.,transparent handling).
[1] Database URL = The device changes the Contact header so
that the re-route request is sent through the device. The device
changes the URI in the Contact header of the received SIP 3xx
response to its own URI and adds a special user prefix
("T~&R_”), which is then sent to the FEU. The FEU then sends a
new INVITE to the device, which the device then sends to the
correct destination.
[2] Handle Locally = The device handles SIP 3xx responses on
behalf of the dialog-initiating UA and retries the request (e.g.,
INVITE) using one or more alternative URIs included in the 3xx
response. The device sends the new request to the alternative
destination according to the IP-to-IP Routing table (the 'Call
Trigger' field must be set to 3xx).
Note:
When the parameter is changed from 1 to 0, new 3xx Contact
headers remain unchanged. However, requests with the special
prefix continue using the device's database to locate the new
destination.
Only one database entry is supported for the same host, port, and
transport combination. For example, the following URLs cannot
be distinguished by the device:
Parameter Description
sip:10.10.10.10:5060;transport=tcp;param=a
sip:10.10.10.10:5060;transport=tcp;param=b
The database entry expires two hours after the last use.
The maximum number of destinations (i.e., database entries) is
50.
The corresponding global parameter is SBC3xxBehavior.
SBC Hold
Remote Hold Format Defines the format of the SDP in the SIP re-INVITE (or UPDATE) for
remote-hold-Format call hold that the device sends to the held party.
[IPProfile_SBCRemoteHoldFo [0] Transparent = (Default) Device forwards SDP as is.
rmat] [1] Send Only = Device sends SDP with 'a=sendonly'.
[2] Send Only Zero ip = Device sends SDP with 'a=sendonly' and
'c=0.0.0.0'.
[3] Inactive = Device sends SDP with 'a=inactive'.
[4] Inactive Zero ip = Device sends SDP with 'a=inactive' and
'c=0.0.0.0'.
[5] Not Supported = This option can be used when the remote
side does not support call hold. The device terminates call hold
requests received on the leg interfacing with the initiator of the
call hold, and replies to this initiator with a SIP 200 OK response.
However, call retrieve (resume) requests received from the
initiator are forwarded to the remote side. The device can play a
held tone to the held party if the 'SBC Play Held Tone' parameter
is set to Yes.
[6] Hold and Retrieve Not Supported = This option can be used
when the remote side does not support call hold and retrieve
(resume). The device terminates call hold and call retrieve
requests received on the leg interfacing with the initiator of the
call hold/retrieve, and replies to this initiator with a SIP 200 OK
response. Therefore, the device does not forward call hold and/or
retrieve requests to the remote side.
Reliable Held Tone Source Enables the device to consider the received call-hold request (re-
reliable-heldtone-source INVITE/UPDATE) with SDP containing 'a=sendonly', as genuine.
[IPProfile_ReliableHoldToneS [0] No = (Default) Even if the received SDP contains 'a=sendonly',
ource] the device plays a held tone to the held party. This is useful in
cases where the initiator of the call hold does not support the
generation of held tones.
[1] Yes = If the received SDP contains 'a=sendonly', the device
does not play a held tone to the held party (and assumes that the
initiator of the call hold plays the held tone).
Note: The device plays a held tone only if the 'SBC Play Held Tone'
parameter is set to Yes.
Play Held Tone Enables the device to play a hold tone to the call party that is placed
play-held-tone on hold. This is useful if the held party does not support play of a
local hold tone, or for IP entities initiating call hold that do not support
[IpProfile_SBCPlayHeldTone]
the generation of hold tones.
[0] No (default)
[1] Yes
Note: If you configure the parameter to Yes, the device plays the
tone only if the 'SBC Remote Hold Format' parameter is configured
to one of the following: send-only, send only 0.0.0.0, not
Parameter Description
supported, or transparent (when the incoming SDP is 'sendonly').
SBC Fax
Fax Rerouting Mode Enables the rerouting of incoming SBC calls that are identified as fax
sbc-fax-rerouting-mode calls to a new IP destination.
[IpProfile_SBCFaxReroutingM [0] Disable (default)
ode] [1] Rerouting without delay
For more information, see Configuring Rerouting of Calls to Fax
Destinations on page 648.
Note: Configure the parameter for the IP leg that is interfacing with
the fax termination.
Media
Broken Connection Mode Defines the device's handling of calls when RTP packets (media) are
disconnect-on-broken- not received within a user-defined timeout interval (configured by the
connection BrokenConnectionEventTimeout parameter). The interval can be
during call setup (configured by the NoRTPDetectionTimeout
[IpProfile_DisconnectOnBroke
parameter) or mid-call when RTP flow suddenly stops (configured by
nConnection]
the BrokenConnectionEventTimeout parameter).
[0] Ignore = The call is maintained despite no media and is
released when signaling ends the call (i.e., SIP BYE).
[1] Disconnect = (Default) The device ends the call.
[2] Reroute = (SBC application only) The device ends the call and
searches the IP-to-IP Routing table for a matching rule and if
found, generates a new INVITE to the corresponding destination
(i.e., alternative routing). You can configure a routing rule whose
matching characteristics is explicitly for calls with broken RTP
connections. This is done using the Call Trigger parameter, as
described in Configuring SBC IP-to-IP Routing Rules on page
635.
Note:
The device can only detect a broken RTP connection if silence
compression is disabled for the RTP session.
If during a call the source IP address (from where the RTP
packets are received by the device) is changed without notifying
the device, the device rejects these RTP packets. To overcome
this, configure the DisconnectOnBrokenConnection parameter to
0. By this configuration, the device doesn't detect RTP packets
arriving from the original source IP address and switches (after
300 msec) to the RTP packets arriving from the new source IP
address.
The corresponding global parameter is
DisconnectOnBrokenConnection.
Media IP Version Preference Defines the preferred RTP media IP addressing version for outgoing
media-ip-version-preference SIP calls (according to RFC 4091 and RFC 4092). The RFCs
concern Alternative Network Address Types (ANAT) semantics in the
[IpProfile_MediaIPVersionPref
SDP to offer groups of network addresses (IPv4 and IPv6) and the IP
erence]
address version preference to establish the media stream. The IP
address is indicated in the "c=" field (Connection) of the SDP.
[0] Only IPv4 = (Default) SDP offer includes only IPv4 media IP
addresses.
Parameter Description
[1] Only IPv6 = SDP offer includes only IPv6 media IP addresses.
[2] Prefer IPv4 = SDP offer includes IPv4 and IPv6 media IP
addresses, but the first (preferred) media is IPv4.
[3] Prefer IPv6 = SDP offer includes IPv4 and IPv6 media IP
addresses, but the first (preferred) media is IPv6.
To indicate ANAT support, the device uses the SIP Allow header or
to enforce ANAT it uses the Require header:
Require: sdp-anat
In the outgoing SDP, each 'm=' field is associated with an ANAT
group. This is done using the 'a=mid:' and 'a=group:ANAT' fields.
Each 'm=' field appears under a unique 'a=mid:' number, for
example:
a=mid:1
m=audio 63288 RTP/AVP 0 8 18 101
c=IN IP6 3000::290:8fff:fe40:3e21
The 'a=group:ANAT' field shows the 'm=' fields belonging to it, using
the number of the 'a=mid:' field. In addition, the ANAT group with the
preferred 'm=' fields appears first. For example, the preferred group
includes 'm=' fields under 'a=mid:1' and 'a=mid3':
a=group:ANAT 1 3
a=group:ANAT 2 4
If you configure the parameter to a "prefer" option, the outgoing SDP
offer contains two medias which are the same except for the "c="
field. The first media is the preferred address type (and this type is
also on the session level "c=" field), while the second media has its
"c=" field with the other address type. Both medias are grouped by
ANAT. For example, if the incoming SDP contains two medias, one
secured and the other non-secured, the device sends the outgoing
SDP with four medias:
Two secured medias grouped in the first ANAT group, one with
IPv4 and the other with IPv6. The first is the preferred type.
Two non-secured medias grouped in the second ANAT group,
one with IPv4 and the other with IPv6. The first is the preferred
type.
Note:
The parameter is applicable only when the device offers an SDP.
The IP addressing version is determined according to the first
SDP "m=" field.
The feature is applicable to any type of media (e.g., audio and
video) that has an IP address.
The corresponding global parameter is
MediaIPVersionPreference.
RTP Redundancy Depth Enables the device to generate RFC 2198 redundant packets. This
rtp-redundancy-depth can be used for packet loss where the missing information (audio)
can be reconstructed at the receiver's end from the redundant data
[IpProfile_RTPRedundancyDe
that arrives in subsequent packets. This is required, for example, in
pth]
wireless networks where a high percentage (up to 50%) of packet
loss can be experienced.
[0] 0 = (Default) Disable.
[1] 1 = Enable - previous voice payload packet is added to current
packet.
Parameter Description
Note:
When enabled, you can configure the payload type, using the
RFC2198PayloadType parameter.
For the Gateway application only: The RTP redundancy dynamic
payload type can be included in the SDP, by using the
EnableRTPRedundancyNegotiation parameter.
The corresponding global parameter is RTPRedundancyDepth.
Gateway
Early Media Enables the Early Media feature for sending media (e.g., ringing)
early-media before the call is established.
[IpProfile_EnableEarlyMedia] [0] Disable (default)
[1] Enable
The device sends a SIP 18x response with SDP, allowing the
media stream to be established before the call is answered.
Note:
The inclusion of the SDP in the 18x response depends on the
ISDN Progress Indicator (PI). The SDP is sent only if PI is set to 1
or 8 in the received Proceeding, Alerting, or Progress messages.
See also the ProgressIndicator2IP parameter, which if set to 1 or
8, the device behaves as if it received the ISDN messages with
the PI.
CAS: See the ProgressIndicator2IP parameter.
ISDN: Sending a 183 response depends on the ISDN PI. It is
sent only if PI is set to 1 or 8 in the received Proceeding or
Alerting messages. Sending 183 response also depends on
the ReleaseIP2ISDNCallOnProgressWithCause parameter,
which must be set to any value other than 2.
See also the IgnoreAlertAfterEarlyMedia parameter. The
parameter allows, for example, to interwork Alert with PI to SIP
183 with SDP instead of 180 with SDP.
You can also configure early SIP 183 response immediately upon
the receipt of an INVITE, using the EnableEarly183 parameter.
The corresponding global parameter is EnableEarlyMedia.
Early 183 Enables the device to send SIP 183 responses with SDP to the IP
enable-early-183 upon receipt of INVITE messages.
[IpProfile_EnableEarly183] [0] Disable (default)
[1] Enable = By sending the 183 response, the device opens an
RTP channel before receiving the "progress" tone from the ISDN
side. The device sends RTP packets immediately upon receipt of
an ISDN Progress, Alerting with Progress indicator, or Connect
message according to the initial negotiation without sending the
183 response again, thereby saving response time and avoiding
early media clipping.
Note:
The parameter is applicable only to IP-to-Tel ISDN calls, and
applies to all calls.
To enable this feature, set the EnableEarlyMedia parameter to 1.
When the BChannelNegotiation parameter is set to Preferred or
Any, the EnableEarly183 parameter is ignored and a SIP 183 is
not sent upon receipt of an INVITE. In such a case, you can set
Parameter Description
the ProgressIndicator2IP parameter to 1 (PI = 1) for the device to
send a SIP 183 upon receipt of an ISDN Call Proceeding
message.
The corresponding global parameter is EnableEarly183.
Early Answer Timeout Defines the duration (in seconds) that the device waits for an ISDN
early-answer-timeout Connect message from the called party (Tel side), started from when
it sends a Setup message. If this timer expires, the call is answered
[IpProfile_EarlyAnswerTimeou
by sending a SIP 200 OK message (to the IP side).
t]
The valid range is 0 to 2400. The default is 0 (i.e., disabled).
Note:
The parameter is applicable only to digital interfaces.
The corresponding global parameter is EarlyAnswerTimeout.
Profile Preference Defines the priority of the IP Profile, where 20 is the highest priority
ip-preference and 1 the lowest priority.
[IpProfile_IpPreference] Note:
If an IP Profile and a Tel Profile apply to the same call, the coders
and other common parameters of the profile with the highest
preference are applied to the call. If the preference of the profiles
is identical, the Tel Profile parameters are applied.
If the coder lists of both an IP Profile and a Tel Profile apply to the
same call, only the coders common to both are used. The order
of the coders is determined by the preference.
The parameter is applicable only to the Gateway application.
Coders Group Assigns a Coder Group, which defines audio coders supported by
coders-group the SIP entity associated with the IP Profile.
[IpProfile_CodersGroupName] The default value is the default Coder Group
("AudioCodersGroups_0"). To configure Coder Groups, see
Configuring Coder Groups on page 423.
Play RB Tone to IP Enables the device to play a ringback tone to the IP side for IP-to-Tel
play-rbt-to-ip calls.
[IpProfile_PlayRBTone2IP] [0] Disable (Default)
[1] Enable = Plays a ringback tone after a SIP 183 session
progress response is sent.
Note:
To enable the device to send a 183/180+SDP responses, set the
EnableEarlyMedia parameter to 1.
If the EnableDigitDelivery parameter is set to 1, the device
doesn't play a ringback tone to IP and doesn't send 183 or
180+SDP responses.
If the parameter is enabled and EnableEarlyMedia is set to 1, the
device plays a ringback tone according to the following:
CAS: The device opens a voice channel, sends a 183+SDP
response, and then plays a ringback tone to IP.
ISDN: If a Progress or an Alerting message with PI (1 or 8) is
received from the ISDN, the device opens a voice channel,
sends a 183+SDP or 180+SDP response, but doesn't play a
ringback tone to IP. If PI (1 or 8) is received from the ISDN,
the device assumes that ringback tone is played by the ISDN
switch; otherwise, the device plays a ringback tone to IP after
receiving an Alerting message from the ISDN. It sends a
Parameter Description
180+SDP response, signaling to the calling party to open a
voice channel to hear the played ringback tone.
The corresponding global parameter is PlayRBTone2IP.
Progress Indicator to IP Defines the progress indicator (PI) sent to the IP.
prog-ind-to-ip [-1] = (Default) Not configured:
[IpProfile_ProgressIndicator2I The PI received in ISDN Proceeding, Progress, and Alerting
P] messages is used, as described in the options below.
[0] No PI =
For IP-to-Tel calls, the device sends 180 Ringing response to
the IP after receiving an ISDN Alerting or (for CAS) after
placing a call to the PBX/PSTN.
[1] PI = 1:
For IP-to-Tel calls, if the parameter EnableEarlyMedia is set
to 1, the device sends 180 Ringing with SDP in response to
an ISDN Alerting or it sends a 183 Session Progress
message with SDP in response to only the first received
ISDN Proceeding or Progress message after a call is placed
to PBX/PSTN over the trunk.
[8] PI = 8: same as PI = 1.
Note: The corresponding global parameter is ProgressIndicator2IP.
Hold Enables the interworking of the Hold/Retrieve supplementary service
enable-hold from ISDN to SIP.
[IpProfile_EnableHold] [0] Disable
[1] Enable (default)
Note:
To interwork the Hold/Retrieve supplementary service from SIP to
ISDN (Euro ISDN), set the EnableHold2ISDN parameter to 1.
The corresponding global parameter is EnableHold.
Add IE In Setup Defines an optional Information Element (IE) data (in hex format)
add-ie-in-setup which is added to ISDN Setup messages. For example, to add IE
'0x20,0x02,0x00,0xe1', enter the value "200200e1".
[IpProfile_AddIEInSetup]
Note:
The parameter is applicable only to digital interfaces.
The IE is sent from the Trunk Group IDs configured by the
SendIEonTG parameter .
You can configure different IE data for Trunk Groups by
configuring the parameter for different IP Profiles and then
assigning the required IP Profile in the IP-to-Tel Routing table
(PSTNPrefix).
The feature is similar to that of the EnableISDNTunnelingIP2Tel
parameter. If both parameters are configured, the
EnableISDNTunnelingIP2Tel parameter takes precedence.
The corresponding global parameter is AddIEinSetup.
QSIG Tunneling Enables QSIG tunneling-over-SIP for this SIP entity. This is
enable-qsig-tunneling according to IETF Internet-Draft draft-elwell-sipping-qsig-tunnel-03
and ECMA-355 and ETSI TS 102 345.
[IpProfile_EnableQSIGTunneli
ng] [0] Disable (default).
[1] Enable = Enables QSIG tunneling from QSIG to SIP, and vice
versa. All QSIG messages are sent as raw data in corresponding
Parameter Description
SIP messages using a dedicated message body.
Note:
The parameter is applicable only to digital interfaces.
QSIG tunneling must be enabled on originating and terminating
devices.
To enable this function, set the ISDNDuplicateQ931BuffMode
parameter to 128 (i.e., duplicate all messages).
To define the format of encapsulated QSIG messages, use the
QSIGTunnelingMode parameter.
Tunneling according to ECMA-355 is applicable to all ISDN
variants (in addition to the QSIG protocol).
For more information on QSIG tunneling, see QSIG Tunneling on
page 489.
The corresponding global parameter is EnableQSIGTunneling.
Copy Destination Number to Enables the device to copy the called number, received in the SIP
Redirect Number INVITE message, to the redirect number in the outgoing Q.931
copy-dst-to-redirect-number Setup message, for IP-to-Tel calls. Thus, even if there is no SIP
Diversion or History header in the incoming INVITE message, the
[IpProfile_CopyDest2Redirect
outgoing Q.931 Setup message will contain a redirect number.
Number]
[0] Disable (default).
[1] After Manipulation = Copies the called number after
manipulation. The device first performs IP-to-Tel destination
phone number manipulation, and only then copies the
manipulated called number to the redirect number sent in the
Q.931 Setup message to the Tel. Thus, the called and redirect
numbers are the same.
[2] Before Manipulation = Copies the called number before
manipulation. The device first copies the original called number to
the SIP Diversion header, and then performs IP-to-Tel destination
phone number manipulation. Thus, the called (i.e., SIP To
header) and redirect (i.e., SIP Diversion header) numbers are
different.
Note: The corresponding global parameter is
CopyDest2RedirectNumber.
Number of Calls Limit Defines the maximum number of concurrent calls (incoming and
call-limit outgoing) for the SIP entity associated with the IP Profile. If the
number of concurrent calls reaches this limit, the device rejects any
[IpProfile_CallLimit]
new incoming and outgoing calls belonging to this IP Profile.
The parameter can also be set to the following:
[-1] = (Default) No limitation on calls.
[0] = All calls are rejected.
Gateway DTMF
Is DTMF Used Enables DTMF signaling.
[IpProfile_IsDTMFUsed] [0] Disable = (Default)
[1] Enable
First Tx DTMF Option Defines the first preferred transmit DTMF negotiation method.
first-tx-dtmf-option [0] Not Supported = No negotiation - DTMF digits are sent
[IpProfile_FirstTxDtmfOption] according to the parameters DTMFTransportType and
RFC2833PayloadType (for transmit and receive).
[1] INFO (Nortel) = Sends DTMF digits according to IETF
Parameter Description
Internet-Draft draft-choudhuri-sip-info-digit-00.
[2] NOTIFY = Sends DTMF digits according to IETF Internet-Draft
draft-mahy-sipping-signaled-digits-01.
[3] INFO (Cisco) = Sends DTMF digits according to the Cisco
format.
[4] RFC 2833 = (Default) The device:
negotiates RFC 2833 payload type using local and remote
SDPs.
sends DTMF packets using RFC 2833 payload type
according to the payload type in the received SDP.
expects to receive RFC 2833 packets with the same payload
type as configured by the parameter RFC2833PayloadType.
removes DTMF digits in transparent mode (as part of the
voice stream).
[5] INFO (Korea) = Sends DTMF digits according to the Korea
Telecom format.
Note:
When out-of-band DTMF transfer is used ([1], [2], [3], or [5]), the
DTMFTransportType parameter is automatically set to 0 (DTMF
digits are removed from the RTP stream).
The corresponding global parameter is FirstTxDTMFOption.
Second Tx DTMF Option Defines the second preferred transmit DTMF negotiation method.
second-tx-dtmf-option For a description, see IpProfile_FirstTxDtmfOption (above).
[IpProfile_SecondTxDtmfOptio Note: The corresponding global parameter is
n] SecondTxDTMFOption.
Rx DTMF Option Enables the device to declare the RFC 2833 'telephony-event'
rx-dtmf-option parameter in the SDP.
[IpProfile_RxDTMFOption] [0] Not Supported
[3] Supported (default)
The device is always receptive to RFC 2833 DTMF relay packets.
Thus, it is always correct to include the 'telephony-event' parameter
by default in the SDP. However, some devices use the absence of
the 'telephony-event' in the SDP to decide to send DTMF digits in-
band using G.711 coder. If this is the case, set the parameter to 0.
Note: The corresponding global parameter is RxDTMFOption.
Gateway Fax and Modem
Fax Signaling Method Defines the SIP signaling method for establishing and transmitting a
fax-sig-method fax session when the device detects a fax.
[IpProfile_IsFaxUsed] [0] No Fax = (Default) No fax negotiation using SIP signaling. The
fax transport method is according to the FaxTransportMode
parameter.
[1] T.38 Relay = Initiates T.38 fax relay.
[2] G.711 Transport = Initiates fax/modem using the coder G.711
A-law/Mu-law with adaptations (see Note below).
[3] Fax Fallback = Initiates T.38 fax relay. If the T.38 negotiation
fails, the device re-initiates a fax session using the coder G.711
A-law/Mu-law with adaptations (see the Note below).
Note:
Parameter Description
Fax adaptations (for options 2 and 3):
Echo Canceller = On
Silence Compression = Off
Echo Canceller Non-Linear Processor Mode = Off
Dynamic Jitter Buffer Minimum Delay = 40
Dynamic Jitter Buffer Optimization Factor = 13
If the device initiates a fax session using G.711 (option 2 or 3), a
'gpmd' attribute is added to the SDP in the following format:
For A-law: 'a=gpmd:8 vbd=yes;ecan=on'
For Mu-law: 'a=gpmd:0 vbd=yes;ecan=on'
When the parameter is set to 1, 2, or 3, the parameter
FaxTransportMode is ignored.
When the parameter is set to 0, T.38 might still be used without
the control protocol's involvement. To completely disable T.38,
set FaxTransportMode to a value other than 1.
For more information on fax transport methods, see Fax/Modem
Transport Modes on page 185.
The corresponding global parameter is IsFaxUsed.
CNG Detector Mode Enables the detection of the fax calling tone (CNG) and defines the
cng-mode detection method.
[IpProfile_CNGmode] [0] Disable = (Default) The originating fax does not detect CNG;
the device passes the CNG signal transparently to the remote
side.
[1] Relay = The originating fax detects CNG. The device sends
CNG packets to the remote side according to T.38 (if IsFaxUsed
is set to 1) and the fax session is started. A SIP Re-INVITE
message is not sent and the fax session starts by the terminating
fax. This option is useful, for example, when the originating fax is
located behind a firewall that blocks incoming T.38 packets on
ports that have not yet received T.38 packets from the internal
network (i.e., originating fax). To also send a Re-INVITE message
upon detection of a fax CNG tone in this mode, set the parameter
FaxCNGMode to 1 or 2.
[2] Event Only = The originating fax detects CNG and a fax
session is started by the originating fax, using the Re-INVITE
message. Typically, T.38 fax session starts when the preamble
signal is detected by the answering fax. Some SIP devices do not
support the detection of this fax signal on the answering fax and
thus, in these cases, it is possible to configure the device to start
the T.38 fax session when the CNG tone is detected by the
originating fax. However, this mode is not recommended.
Note: The corresponding global parameter is CNGDetectorMode.
Vxx Modem Transport Type Defines the modem transport type.
vxx-transport-type [-1] = (Not Configured) The settings of the global parameters are
[IpProfile_VxxTransportType] used:
V21ModemTransportType
V22ModemTransportType
V23ModemTransportType
V32ModemTransportType
V34ModemTransportType
[0] Disable = Transparent.
[2] Enable Bypass (Default)
Parameter Description
[3] Events Only = Transparent with Events.
For a detailed description of the parameter per modem type, see the
relevant global parameter (listed above).
NSE Mode Enables Cisco's compatible fax and modem bypass mode, Named
nse-mode Signaling Event (NSE) packets.
[IpProfile_NSEMode] [0] Disable (Default)
[1] Enable
In NSE bypass mode, the device starts using G.711 A-Law (default)
or G.711-Law, according to the FaxModemBypassCoderType
parameter. The payload type for these G.711 coders is a standard
one (8 for G.711 A-Law and 0 for G.711 -Law). The parameters
defining payload type for the 'old' Bypass mode
FaxBypassPayloadType and ModemBypassPayloadType are not
used with NSE Bypass. The bypass packet interval is configured
according to the FaxModemBypassBasicRtpPacketInterval
parameter.
The SDP contains the following line:
'a=rtpmap:100 X-NSE/8000'.
Note:
When enabled, the following conditions must also be met:
The Cisco gateway must include the following definition:
'modem passthrough nse payload-type 100 codec g711alaw'.
Set the Modem transport type to Bypass mode
(VxxModemTransportType is set to 2) for all modems.
Set the NSEPayloadType parameter to 100.
The corresponding global parameter is NSEMode.
Gateway Answering Machine
AMD Sensitivity Parameter Defines the AMD Parameter Suite to use for the Answering Machine
Suite Detection (AMD) feature.
amd-sensitivity-parameter-suit [0] 0 = (Default) Parameter Suite 0 based on North American
[IpProfile_AMDSensitivityPara English with standard detection sensitivity resolution (8 sensitivity
meterSuit] levels, from 0 to 7). This AMD Parameter Suite is provided by the
AMD Sensitivity file, which is shipped pre-installed on the device.
[1] 1 = Parameter Suite based 1 on North American English with
high detection sensitivity resolution (16 sensitivity levels, from 0 to
15). This AMD Parameter Suite is provided by the AMD
Sensitivity file, which is shipped pre-installed on the device.
[2] 2 to [7]7 = Optional Parameter Suites that you can create
based on any language (16 sensitivity levels, from 0 to 15). This
requires a customized AMD Sensitivity file that needs to be
installed on the device. For more information, contact your
AudioCodes sales representative.
Note:
To configure the detection sensitivity level, use the 'AMD
Sensitivity Level' parameter.
For more information on the AMD feature, see Answering
Machine Detection (AMD) on page 208.
The corresponding global parameter is
AMDSensitivityParameterSuit.
Parameter Description
AMD Sensitivity Level Defines the AMD detection sensitivity level of the selected AMD
amd-sensitivity-level Parameter Suite (using the 'AMD Sensitivity Parameter Suite'
parameter).
[IpProfile_AMDSensitivityLeve
l] For Parameter Suite 0, the valid range is 0 to 7, where 0 is for best
detection of an answering machine and 7 for best detection of a live
call. For any Parameter Suite other than 0, the valid range is 0 to 15,
where 0 is for best detection of an answering machine and 15 for
best detection of a live call.
Note: The corresponding global parameter is AMDSensitivityLevel.
AMD Max Greeting Time Defines the maximum duration (in 5-msec units) that the device can
amd-max-greeting-time take to detect a greeting message.
[IpProfile_AMDMaxGreetingTi The valid range value is 0 to 51132767. The default is 300.
me] Note: The corresponding global parameter is
AMDMaxGreetingTime.
AMD Max Post Silence Defines the maximum duration of silence from after the greeting time
Greeting Time is over (configured by AMDMaxGreetingTime) until the device's AMD
amd-max-post-silence- decision.
greeting-time Note: The corresponding global parameter is
[IpProfile_AMDMaxPostSilenc AMDMaxPostGreetingSilenceTime.
eGreetingTime]
Local Tones
Local RingBack Tone Index Defines the ringback tone that you want to play from the PRT file.
local-ringback-tone- To associate a user-defined tone, configure the parameter with the
index tone's index number (0-79) as appears in the PRT file. By default
[IPProfile_LocalRingbackTone (value of -1), the device plays a default ringback tone.
] To play user-defined tones, you need to record your tones and then
install them on the device using a loadable Prerecorded Tones
(PRT) file. For more information, see Prerecorded Tones File on
page 762.
Local Held Tone Index Defines the held tone that you want to play from the PRT file.
local-held-tone-index To associate a user-defined tone, configure the parameter with the
[IPProfile_LocalHeldTone] tone's index number (0-79) as appears in the PRT file. By default
(value of -1), the device plays a default held tone.
To play user-defined tones, you need to record your tones and then
install them on the device using a loadable Prerecorded Tones
(PRT) file. For more information, see Prerecorded Tones File on
page 762.
3. Configure a Tel Profile according to the parameters described in the table below. For a
description of each parameter, refer to the corresponding "global" parameter.
4. Click Apply.
Table 20-6: Tel Profile Table Parameters and Corresponding Global Parameters
Parameter Description
General
Parameter Description
Profile Preference Defines the priority of the Tel Profile, where 1 is the lowest priority
tel-preference and 20 the highest priority.
[TelProfile_TelPreference] Note:
If both the IP Profile and Tel Profile apply to the same call, the
coders and common parameters of the Preferred profile are
applied to the call.
If the Preference of the Tel Profile and IP Profile are identical,
the Tel Profile parameters are applied.
If the coder lists of both the IP Profile and Tel Profile apply to
the same call, only the coders common to both are used. The
order of the coders is determined by the preference.
Fax Signaling Method Defines the SIP signaling method for establishing and transmitting
fax-sig-method a fax session when the device detects a fax.
[TelProfile_IsFaxUsed] [0] No Fax = (Default) No fax negotiation using SIP signaling.
The fax transport method is according to the FaxTransportMode
parameter.
[1] T.38 Relay = Initiates T.38 fax relay.
[2] G.711 Transport = Initiates fax/modem using the coder
G.711 A-law/Mu-law with adaptations (see Note below).
[3] Fax Fallback = Initiates T.38 fax relay. If the T.38 negotiation
fails, the device re-initiates a fax session using the coder G.711
A-law/Mu-law with adaptations (see the Note below).
Note:
Fax adaptations (for options 2 and 3):
Echo Canceller = On
Silence Compression = Off
Echo Canceller Non-Linear Processor Mode = Off
Dynamic Jitter Buffer Minimum Delay = 40
Dynamic Jitter Buffer Optimization Factor = 13
If the device initiates a fax session using G.711 (option 2 or 3), a
'gpmd' attribute is added to the SDP in the following format:
For A-law: 'a=gpmd:8 vbd=yes;ecan=on'
For Mu-law: 'a=gpmd:0 vbd=yes;ecan=on'
When the parameter is set to 1, 2, or 3, the parameter
FaxTransportMode is ignored.
When the parameter is set to 0, T.38 might still be used without
the control protocol's involvement. To completely disable T.38,
set FaxTransportMode to a value other than 1.
For more information on fax transport methods, see
'Fax/Modem Transport Modes' on page 185.
The corresponding global parameter is IsFaxUsed.
Enable Digit Delivery Enables the Digit Delivery feature, which sends DTMF digits of the
digit-delivery called number to the device's B-channel (phone line) after the call
Parameter Description
[TelProfile_EnableDigitDelivery] is answered for IP-to-Tel calls.
[0] Disable (default)
[1] Enable
If the called number in IP-to-Tel call includes the characters 'w' or
'p', the device places a call with the first part of the called number
(before 'w' or 'p') and plays DTMF digits after the call is answered.
If the character 'w' is used, the device waits for detection of a dial
tone before it starts playing DTMF digits. For example, if the called
number is '1007766p100', the device places a call with 1007766 as
the destination number, then after the call is answered it waits 1.5
seconds ('p') and plays the rest of the number (100) as DTMF
digits.
Additional examples: 1664wpp102, 66644ppp503, and
7774w100pp200.
Note:
For the parameter to take effect, a device reset is required.
The corresponding global parameter is EnableDigitDelivery.
Dial Plan Index DialPlanIndex
dial-plan-index
[TelProfile_DialPlanIndex]
Digital Cut Through Enables PSTN CAS channels/endpoints to receive incoming IP
digital-cut-through calls even if the B-channels are in off-hook state.
[TelProfile_DigitalCutThrough] [0] Disable (default)
[1] Enable = When enabled, the feature operates as follows:
a. A Tel-to-IP call is established (connected) by the device for
a B-channel.
b. The device receives a SIP BYE (i.e., IP side ends the call)
and plays a reorder tone to the PSTN side for the duration
configured by the CutThroughTimeForReOrderTone
parameter. The device releases the call towards the IP side
(sends a SIP 200 OK).
c. The PSTN side, for whatever reason, remains off-hook.
d. If a new IP call is received for this B-channel after the
reorder tone has ended, the device “cuts through” the
channel and connects the call immediately (despite the B-
channel being in physical off-hook state) without playing a
ring tone. If an IP call is received while the reorder tone is
played, the device rejects the call.
Note:
If the parameter is disabled and the PSTN side remains in off-
hook state after the IP call ends the call, the device releases the
call after 60 seconds.
A special CAS table can be used to report call status events
(Active/Idle) to the PSTN side during Cut Through mode (see
Configuring CAS State Machines on page 483).
The corresponding global parameter is DigitalCutThrough.
Call Priority Mode Defines call priority handling.
call-priority-mode [0] Disable (default).
[TelProfile_CallPriorityMode] [1] MLPP = Enables MLPP Priority Call handling. MLPP
prioritizes call handling whereby the relative importance of
Parameter Description
various kinds of communications is strictly defined, allowing
higher precedence communication at the expense of lower
precedence communications. Higher priority calls override less
priority calls when, for example, congestion occurs in a network.
[2] Emergency = Enables Preemption of IP-to-Tel E911
emergency calls. If the device receives an E911 call and there
are unavailable channels to receive the call, the device
terminates one of the channel calls and sends the E911 call to
that channel. The preemption is done only on a channel
belonging to the same Trunk Group for which the E911 call was
initially destined and if the channel select mode (configured by
the ChannelSelectMode parameter) is set to other than By Dest
Phone Number (0). The preemption is done only if the incoming
IP-to-Tel call is identified as an emergency call. The device
identifies emergency calls by one of the following:
The destination number of the IP call matches one of the
numbers configured by the EmergencyNumbers parameter.
(For E911, you must configure the parameter to "911".)
The incoming SIP INVITE message contains the
“emergency” value in the Priority header.
Note:
The parameter is applicable to ISDN and CAS.
For more information, see 'Pre-empting Existing Call for E911
IP-to-Tel Call' on page 574.
The corresponding global parameter is CallPriorityMode.
Behavior
Disconnect Call on Detection of Enables the device to disconnect the call upon detection of a busy
Busy Tone or reorder (fast busy) tone.
disconnect-on-busy-tone [0] Disable
[TelProfile_DisconnectOnBusyT [1] Enable (Default)
one] Note:
The parameter is applicable only to CAS.
The corresponding global parameter is DisconnectOnBusyTone.
Time For Reorder Tone Defines the duration (in seconds) that the device plays a busy or
time-for-reorder-tone reorder tone before releasing the line.
[TelProfile_TimeForReorderTon The valid range is 0 to . The default is 10 seconds. Note that the
e] Web interface denotes the default value as a string value of "255".
Note:
The selected busy or reorder tone is according to the SIP
release cause code received from IP.
The parameter is applicable to CAS.
The parameter is also applicable to ISDN when the
PlayBusyTone2ISDN parameter is set to 2.
The corresponding global parameter is TimeForReorderTone.
Enable Voice Mail Delay Enables and disables voice mail services.
enable-voice-mail-delay [0] Disable
[TelProfile_EnableVoiceMailDel [1] Enable (default)
ay] The parameter is useful if you want to disable voice mail services
per Trunk Group to eliminate the phenomenon of call delay on
Trunks that do not implement voice mail when voice mail is
Parameter Description
configured using the global parameter, VoiceMailInterface.
Swap Tel To IP Phone Enables the device to swap the calling and called numbers
Numbers received from the Tel side (for Tel-to-IP calls). The SIP INVITE
swap-teltoip-phone-numbers message contains the swapped numbers.
[TelProfile_SwapTelToIpPhone [0] Disable (default)
Numbers] [1] Enable
Note: The corresponding global parameter is
SwapTEl2IPCalled&CallingNumbers.
Voice
DTMF Volume Defines the DTMF gain control value (in decibels) to the Tel side.
dtmf-volume The valid range is -31 to 0 dB. The default is -11 dB.
[TelProfile_DtmfVolume] Note: The corresponding global parameter is DTMFVolume.
Input Gain Defines the pulse-code modulation (PCM) input (received) gain
input-gain control level (in decibels), which is the level of the received signal
for Tel-to-IP calls.
[TelProfile_InputGain]
The valid range is -32 to 31 dB. The default is 0 dB.
Note: The corresponding global parameter is InputGain.
Voice Volume Defines the voice gain control (in decibels), which is the level of the
voice-volume transmitted signal for IP-to-Tel calls.
[TelProfile_VoiceVolume] The valid range is -32 to 31 dB. The default is 0 dB.
Note: The corresponding global parameter is VoiceVolume
Enable AGC Enables the Automatic Gain Control (AGC) feature. The AGC
enable-agc feature automatically adjusts the level of the received signal to
[TelProfile_EnableAGC]
maintain a steady (configurable) volume level.
[0] Disable (default)
[1] Enable
Note:
For a description of AGC, see 'Automatic Gain Control (AGC)'
on page 212.
The corresponding global parameter is EnableAGC.
IP Settings
Coders Group Assigns a Coder Group, which defines audio (voice) coders that
coders-group can be used for the endpoints associated with the Tel Profile.
[TelProfile_CodersGroupName] To configure Coders Groups, see 'Configuring Coder Groups' on
page 423.
RTP IP DiffServ Defines the DiffServ value for Premium Media class of service
rtp-ip-diffserv (CoS) content.
[TelProfile_IPDiffServ] The valid range is 0 to 63. The default is 46.
Note:
For more information on DiffServ, see 'Configuring Class-of-
Service QoS' on page 159.
The corresponding global parameter is
PremiumServiceClassMediaDiffServ.
Signaling DiffServ Defines the DiffServ value for Premium Control CoS content (Call
Control applications).
Parameter Description
signaling-diffserv The valid range is 0 to 63. The default is 40.
[TelProfile_SigIPDiffServ] Note:
For more information on DiffServ, see 'Configuring Class-of-
Service QoS' on page 159.
The corresponding global parameter is
PremiumServiceClassControlDiffServ.
Enable Early Media Enables the Early Media feature, which sends media (e.g., ringing)
early-media before the call is established.
[TelProfile_EnableEarlyMedia] [0] Disable (default)
[1] Enable
The device sends a SIP 18x response with SDP, allowing
the media stream to be established before the call is
answered.
Note:
The inclusion of the SDP in the 18x response depends on the
ISDN Progress Indicator (PI). The SDP is sent only if PI is set to
1 or 8 in the received Proceeding, Alerting, or Progress
messages. See also the ProgressIndicator2IP parameter, which
if set to 1 or 8, the device behaves as if it received the ISDN
messages with the PI.
CAS: See the ProgressIndicator2IP parameter.
ISDN: Sending a 183 response depends on the ISDN PI. It
is sent only if PI is set to 1 or 8 in the received Proceeding
or Alerting messages. Sending 183 response also depends
on the ReleaseIP2ISDNCallOnProgressWithCause
parameter, which must be set to any value other than 2.
See also the IgnoreAlertAfterEarlyMedia parameter. The
parameter allows, for example, to interwork Alert with PI to SIP
183 with SDP instead of 180 with SDP.
You can also configure early SIP 183 response immediately
upon the receipt of an INVITE, using the EnableEarly183
parameter.
The corresponding global parameter is EnableEarlyMedia.
Progress Indicator to IP Defines the progress indicator (PI) sent to the IP.
prog-ind-to-ip [-1] = (Default) Not configured:
[TelProfile_ProgressIndicator2I The PI received in ISDN Proceeding, Progress, and Alerting
P] messages is used, as described in the options below.
[0] No PI =
For IP-to-Tel calls, the device sends 180 Ringing response
to the IP after receiving an ISDN Alerting or (for CAS) after
placing a call to the PBX/PSTN.
[1] PI = 1:
For IP-to-Tel calls, if the parameter EnableEarlyMedia is set
to 1, the device sends 180 Ringing with SDP in response to
an ISDN Alerting or it sends a 183 Session Progress
message with SDP in response to only the first received
ISDN Proceeding or Progress message after a call is
placed to PBX/PSTN over the trunk.
[8] PI = 8: same as PI = 1.
Note: The corresponding global parameter is ProgressIndicator2IP.
Parameter Description
Echo Canceler
Echo Canceler Enables the device's Echo Cancellation feature (i.e., echo from
echo-canceller voice calls is removed).
[TelProfile_EnableEC] [0] Disable
[1] Line Echo Canceller (default)
For more information on echo cancellation, see 'Configuring Echo
Cancellation' on page 183.
Note: The corresponding global parameter is
EnableEchoCanceller.
EC NLP Mode Enables Non-Linear Processing (NLP) mode for echo cancellation.
echo-canceller-nlp-mode [0] Adaptive NLP = (Default) NLP adapts according to echo
[TelProfile_ECNlpMode] changes
[1] Disable NLP
Note: The corresponding global parameter is ECNLPMode.
Jitter Buffer
Dynamic Jitter Buffer Minimum Defines the minimum delay (in msec) of the device's dynamic Jitter
Delay Buffer.
jitter-buffer-minimum-delay The valid range is 0 to 150. The default delay is 10.
[TelProfile_JitterBufMinDelay] For more information on Jitter Buffer, see 'Configuring the Dynamic
Jitter Buffer' on page 198.
Note: The corresponding global parameter is DJBufMinDelay.
Dynamic Jitter Buffer Maximum Defines the maximum delay (in msec) for the device's Dynamic
Delay Jitter Buffer.
jitter-buffer-maximum- The default is 300.
delay
[TelProfile_JitterBufMaxDelay]
Dynamic Jitter Buffer Defines the Dynamic Jitter Buffer frame error/delay optimization
Optimization Factor factor.
jitter-buffer-optimization-factor The valid range is 0 to 12. The default factor is 10.
[TelProfile_JitterBufOptFactor] For more information on Jitter Buffer, see 'Configuring the Dynamic
Jitter Buffer' on page 198.
Note:
For data (fax and modem) calls, configure the parameter to 12.
The corresponding global parameter is DJBufOptFactor.
21 Introduction
This section describes configuration of the Gateway application. The Gateway application
refers to IP-to-Tel (PSTN for digital interfaces) and Tel-to-IP call routing. For digital
interfaces, Tel refers to the PSTN.
Note:
• In some areas of the Web interface, the term "GW" refers to the Gateway
application.
• The terms IP-to-Tel and Tel-to-IP refer to the direction of the call relative to the
device. IP-to-Tel refers to calls received from the IP network and destined to the
PSTN/PBX (i.e., telephone connected directly or indirectly to the device); Tel-to-IP
refers to calls received from the PSTN/PBX, and destined for the IP network.
Tel-to-IP Call:
Figure 21-2: Tel-to-IP Call Processing Flowchart
22 Digital PSTN
This section describes the configuration of the public switched telephone network (PSTN)
related parameters.
Note:
• To delete a configured trunk, set the 'Protocol Type' parameter to NONE.
• For a description of the trunk parameters, see 'PSTN Parameters' on page 1109.
• During trunk deactivation, you cannot configure trunks.
• You cannot activate or deactivate a stopped trunk.
• If the trunk can’t be stopped because it provides the device’s clock (assuming the
device is synchronized with the trunk clock), assign a different trunk to provide the
device’s clock or enable ‘TDM Bus PSTN Auto Clock’ in the TDM Bus Settings
page (see 'TDM and Timing' on page 481).
• If the ‘Protocol Type’ parameter is set to NONE (i.e., no protocol type is selected)
and no other trunks have been configured, after selecting a PRI protocol type you
must reset the device.
• The displayed parameters depend on the protocol selected.
• All PRI trunks of the device must be of the same line type (either E1 or T1).
However, different variants of the same line type can be configured on different
trunks. For example, E1 Euro ISDN and E1 CAS (subject to the constraints in the
device's Release Note).
• If the protocol type is CAS, you can assign or modify a dial plan (in the 'Dial Plan'
field) and perform this without stopping the trunk.
To configure trunks:
1. Open the Trunk Settings page (Setup menu > Signaling & Media tab > Gateway
folder > Trunks & Groups > Trunks).
On the top of the page, a bar with Trunk number icons displays the status of each
trunk according to the following color codes:
• Grey: Disabled
• Green: Active
• Yellow: RAI alarm (also appears when you deactivate a Trunk by clicking the
Deactivate button)
• Red: LOS/LOF alarm
• Blue: AIS alarm
• Orange: D-channel alarm (ISDN only)
2. Select the trunk that you want to configure, by clicking the desired Trunk number icon.
The bar initially displays the first eight trunk number icons (i.e., trunks 1 through 8). To
scroll through the trunk number icons (i.e., view the next/last or previous/first group of
eight trunks), see the figure below:
Figure 22-1: Trunk Scroll Bar (Used Only as an Example)
Note: If the Trunk scroll bar displays all available trunks, the scroll bar buttons are
unavailable.
Note: When the device is used in a ‘non-span’ configuration, the internal device
clock must be used (as explained above).
a. From the 'TDM Bus Clock Source' drop-down list (TDMBusClockSource), select
Network to recover the clock from the line interface.
b. In the 'TDM Bus Local Reference' field (TDMBusLocalReference), enter the trunk
from which the clock is derived.
Note: The E1/T1 trunk should recover the clock from the remote side (see below
description of the 'Clock Master' parameter).
c. Enable automatic switchover to the next available "slave" trunk if the device
detects that the local-reference trunk is no longer capable of supplying the clock
to the system:
a. From the 'TDM Bus PSTN Auto FallBack Clock' drop-down list
(TDMBusPSTNAutoClockEnable), select Enable.
b. From the 'TDM Bus PSTN Auto Clock Reverting' drop-down list
(TDMBusPSTNAutoClockRevertingEnable), select Enable to enable the
device to switch back to a previous trunk that returns to service if it has
higher switchover priority.
c. In the Trunk Settings page (see 'Configuring Trunk Settings' on page 479),
configure the priority level of the trunk for taking over as a local-reference
trunk, using the 'Auto Clock Trunk Priority' parameter
(AutoClockTrunkPriority). A value of 100 means that it never uses the trunk
as local reference.
2. (E1/T1 Trunks Only) Configure the PSTN trunk to recover/derive clock from/to the
remote side of the PSTN trunk (i.e. clock slave or clock master): In the Trunk Settings
page, configure the 'Clock Master' parameter (ClockMaster) to one of the following:
• Recovered - to recover clock (i.e. slave)
• Generated - to transmit clock (i.e. master)
Note: Prior to configuring CAS, you must enable the CASOrientedBoard ini file
parameter (and reset the device with a save-to-flash for your settings to take effect).
2. Ensure that the trunk is inactive. The trunk number displayed in the 'Related Trunks'
field must be green. If it is red, indicating that the trunk is active, click the trunk number
to open the Trunk Settings page (see 'Configuring Trunk Settings' on page 479),
select the required Trunk number icon, and then click Stop Trunk.
3. In the CAS State Machine table, modify the required parameters according to the table
below.
4. Once you have completed the configuration, activate the trunk if required in the Trunk
Settings page, by clicking the trunk number in the 'Related Trunks' field, and in the
Trunk Settings page, select the required Trunk number icon, and then click Apply
Trunk Settings.
5. Click Apply, and then reset the device.
Note:
• The CAS state machine can only be configured using the Web-based
management tool.
• Don't modify the default values unless you fully understand the implications of the
changes and know the default values. Every change affects the configuration of
the state machine parameters and the call process related to the trunk you are
using with this state machine.
• You can modify CAS state machine parameters only if the following conditions are
met:
√ Trunks are inactive (stopped), i.e., the 'Related Trunks' field displays the trunk
number in green.
√ State machine is not in use or is in reset, or when it is not related to any trunk.
If it is related to a trunk, you must delete the trunk or de-activate (Stop) the
trunk.
• Field values displaying '-1' indicate CAS default values. In other words, CAS state
machine values are used.
• The modification of the CAS state machine occurs at the CAS application
initialization only for non-default values (-1).
• For more information on the CAS Protocol table, refer to the CAS Protocol Table
Configuration Note.
Parameter Description
Parameter Description
The value must be an integer. The default is -1 (use
value from CAS state machine).
Collet ANI In some cases, when the state machine handles the
[CasStateMachineCollectANI] ANI collection (not related to MFCR2), you can control
the state machine to collect ANI or discard ANI.
[0] No = Don't collect ANI.
[1] Yes = Collect ANI.
[-1] Default = Default value - use value from CAS
state machine.
Digit Signaling System Defines which Signaling System to use in both
[CasStateMachineDigitSignalingSystem] directions (detection\generation).
[0] DTMF = Uses DTMF signaling.
[1] MF = Uses MF signaling (default).
[-1] Default = Default value - use value from CAS
state machine.
Note: It's possible to configure both devices to also operate in symmetric mode. To
do so, set EnableTDMOverIP to 1 and configure the Tel-to-IP Routing table in both
devices. In this mode, each device (after it's reset) initiates calls to the second device.
The first call for each B-channel is answered by the second device.
The device continuously monitors the established connections. If for some reason, one or
more calls are released, the device automatically re-establishes these ‘broken’
connections. When a failure in a physical trunk or in the IP network occurs, the device re-
establishes the tunneling connections when the network is restored.
Note: It's recommended to use the keep-alive mechanism for each connection, by
activating the ‘session expires’ timeout and using Re-INVITE messages.
For tunneling CAS trunks, set the protocol type to 'Raw CAS' (ProtocolType = 3 / 9) and
enable RFC 2833 CAS relay mode ('CAS Transport Type' parameter is set to 'CAS
RFC2833 Relay').
Note: For TDM over IP, the parameter CallerIDTransportType must be set to '0'
(disabled), i.e., transparent.
Below is an example of ini files for two devices implementing TDM Tunneling for four E1
spans. Note that in this example both devices are dedicated to TDM tunneling.
Terminating Side:
EnableTDMOverIP = 1
;E1_TRANSPARENT_31
ProtocolType_0 = 5
ProtocolType_1 = 5
ProtocolType_2 = 5
ProtocolType_3 = 5
[PREFIX]
FORMAT PREFIX_Index = PREFIX_RouteName, PREFIX_DestinationPrefix,
PREFIX_DestAddress, PREFIX_SourcePrefix, PREFIX_ProfileName,
PREFIX_MeteringCode, PREFIX_DestPort, PREFIX_DestIPGroupName,
PREFIX_TransportType, PREFIX_SrcTrunkGroupID,
PREFIX_DestSIPInterfaceName, PREFIX_CostGroup,
PREFIX_ForkingGroup, PREFIX_CallSetupRulesSetId,
PREFIX_ConnectivityStatus;
Prefix 1 = TunnelA,*,10.8.24.12;
[\PREFIX]
[ AudioCoders ]
AudioCoders 0 = "AudioCodersGroups_0", 0, 0, 3, 7, -1, 0, "";
AudioCoders 1 = "AudioCodersGroups_1", 0, 7, 2, 90, 56, 0, "";
[TelProfile]
FORMAT TelProfile_Index = TelProfile_ProfileName,
TelProfile_TelPreference, TelProfile_CodersGroupName,
TelProfile_IsFaxUsed, TelProfile_JitterBufMinDelay,
TelProfile_JitterBufOptFactor, TelProfile_IPDiffServ,
TelProfile_SigIPDiffServ, TelProfile_DtmfVolume,
TelProfile_InputGain, TelProfile_VoiceVolume,
TelProfile_EnableReversePolarity,
TelProfile_EnableCurrentDisconnect,
TelProfile_EnableDigitDelivery, TelProfile_EnableEC,
TelProfile_MWIAnalog, TelProfile_MWIDisplay,
TelProfile_FlashHookPeriod, TelProfile_EnableEarlyMedia,
TelProfile_ProgressIndicator2IP;
TelProfile 1 = voice,$$,1,$$,$$,$$,$$,$$,$$,$$;
TelProfile 2 = data,$$,2,$$,$$,$$,$$,$$,$$,$$;
[\TelProfile]
Originating Side:
;E1_TRANSPARENT_31
ProtocolType_0 = 5
ProtocolType_1 = 5
ProtocolType_2 = 5
ProtocolType_3 = 5
;Channel selection by Phone number.
ChannelSelectMode = 0
[TrunkGroup]
FORMAT TrunkGroup_Index = TrunkGroup_TrunkGroupNum,
TrunkGroup_FirstTrunkId, TrunkGroup_LastTrunkId,
TrunkGroup_FirstBChannel, TrunkGroup_LastBChannel,
TrunkGroup_FirstPhoneNumber, TrunkGroup_ProfileName,
TrunkGroup_Module;
TrunkGroup 0 = 0,0,0,1,31,1000,1;
TrunkGroup 0 = 0,1,1,1,31,2000,1;
TrunkGroup 0 = 0,2,2,1,31,3000,1;
TrunkGroup 0 = 0,3,1,31,4000,1;
TrunkGroup 0 = 0,0,0,16,16,7000,2;
TrunkGroup 0 = 0,1,1,16,16,7001,2;
TrunkGroup 0 = 0,2,2,16,16,7002,2;
TrunkGroup 0 = 0,3,3,16,16,7003,2;
[\TrunkGroup]
[ CodersGroup0 ]
FORMAT CodersGroup0_Index = CodersGroup0_Name, CodersGroup0_pTime,
CodersGroup0_rate, CodersGroup0_PayloadType, CodersGroup0_Sce,
CodersGroup0_CoderSpecific;
CodersGroup0 0 = g7231;
CodersGroup0 1 = Transparent;
[ \CodersGroup0 ]
[TelProfile]
FORMAT TelProfile_Index = TelProfile_ProfileName,
TelProfile_TelPreference, TelProfile_CodersGroupName,
TelProfile_IsFaxUsed, TelProfile_JitterBufMinDelay,
TelProfile_JitterBufOptFactor, TelProfile_IPDiffServ,
TelProfile_SigIPDiffServ, TelProfile_DtmfVolume,
TelProfile_InputGain, TelProfile_VoiceVolume,
TelProfile_EnableReversePolarity,
TelProfile_EnableCurrentDisconnect,
TelProfile_EnableDigitDelivery, TelProfile_EnableEC,
TelProfile_MWIAnalog, TelProfile_MWIDisplay,
TelProfile_FlashHookPeriod, TelProfile_EnableEarlyMedia,
TelProfile_ProgressIndicator2IP;
TelProfile_1 = voice,$$,1,$$,$$,$$,$$,$$,$$,$$
TelProfile_2 = data,$$,2,$$,$$,$$,$$,$$,$$,$$
[\TelProfile]
CAS channels into a SIP call with a called and calling number and if required, passes the
ABCD bit state changes through SIP messages, and vice versa. The following diagram
shows an example of private-wire interworking by the device:
Figure 22-5: Example of Private Wire System
SIP-based private wire calls are established as any other INVITE dialog, but with the
addition of the following headers:
SIP Supported header with the value "pw-info-package" (i.e., Supported: pw-info-
package).
SIP Recv-Info header with the value "pw-info-package" and with the parameter "pw-
type=" with a value denoting the private wire state, which can be:
• Ring Down state:
Recv-Info: pw-info-package;pw-type=ringdown
• Hook Switch:
Recv-Info: pw-info-package;pw-type=hookswitch
• TOS:
Recv-Info: pw-info-package;pw-type=tos
The following is an example of an INVITE message for a private wire call:
INVITE sip:109701@10.221.108.249:5060;transport=tcp SIP/2.0
Via:SIP/2.0/TCP10.221.109.4:5060;oc-
node=101;branch=z9hG4bKqkYGTNi7Husc11Jlmw6d9g;rport
From: <sip:uas@10.221.109.4>;tag=ENvIDQ
To: <sip:109701@10.221.108.249:5060;transport=tcp>
Call-ID: WHuqvQgdIZB27ewgrhJRYw
CSeq: 835392 INVITE
Contact: <sip:10.221.109.4:5060;transport=tcp;oc-node=101>
Max-Forwards: 70
Content-Type: application/sdp
Content-Length: 635
Supported: pw-info-package
Recv-Info: pw-info-package;pw-type=ringdown
Once a SIP-based private wire is established, the private wire user may wish to signal any
of the following private wire events to the far-end private wire user, at any time during the
"always-on" call:
Hook Switch (On Hook and Off Hook states): This event signals a change in the
state of an electronic hook switch. An example is when the user connects a wireless
headset to the phone.
Ring Down (Ring and No Ring states): This event signals a ring or no ring state. An
example is when the user lifts the handset or pushes a button on the phone to alert
the far-end user, which instantly sends ringing to the far end (even though they are
already connected). This is also known as Automatic Ring Down (ARD) or Manual
Ring Down (MRD).
TOS (transmission only service): If neither Ring Down or Hook Switch modes are
specified in the INVITE, TOS is assumed. In this case, the device ignores all CAS
signaling, replies with 200 OK and opens a media channel.
These special private wire events are signaled during a call using the SIP INFO message
in association with the INFO package (per IETF draft). The INFO package is the INFO
message's body, which is in XML schema. The root element of the XML is "<pwsignal>",
which contains two child elements:
"<ringDown>" - requests a local Ring Down alert
"<hookSwitch>" - requests a Hook Switch alert:
♦ "onHook" - signals that the endpoint is not in use
♦ "offHook" - signals that the endpoint is in use
The following is an example of the XML for private wire signaling in the SIP INFO
message:
<?xml version="1.0" encoding="UTF-8"?>
<xsd:schema targetNamespace="urn:bt-trs:params:xml:ns:private-
wire:0"
xmlns="urn:bt-trs:params:xml:ns:private-wire:0"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
elementFormDefault="qualified"
version="0.1">
<xsd:annotation>
<xsd:documentation xml:lang="en">Version 0.1 Draft XML
schema
for Private Wire Signalling in SIP INFO body
</xsd:documentation>
</xsd:annotation>
<!-- pwSignal -->
<xsd:complexType name="pwSignallingType">
<xsd:sequence>
<xsd:choice>
<xsd:element ref="ringDown" />
<xsd:element ref="hookSwitch" />
<xsd:any namespace="##other" minOccurs="0"
maxOccurs="unbounded" processContents="lax" />
</xsd:choice>
</xsd:sequence>
<xsd:anyAttribute namespace="##other" processContents="lax" />
</xsd:complexType>
<xsd:element name="pwSignal" type="pwSignallingType"/>
<!-- ringDown -->
<xsd:complexType name="ringDownType">
<xsd:sequence>
<xsd:any namespace="##other" minOccurs="0"
maxOccurs="unbounded" processContents="lax" />
</xsd:sequence>
<xsd:attribute name="signal" type="ringDownSignalType"
use="required"/>
<xsd:anyAttribute namespace="##other" processContents="lax" />
</xsd:complexType>
<xsd:element name="ringDown" type="ringDownType"/>
</xsd:schema>
The following is an example of the message flow for the interworking private wire Ring
Down state between the private wire trunk and the E1/T1 CAS trunk:
Figure 22-6: Message Flow for Private Wire Setup with Ring Signaling
The following is an example of the message flow for interworking private wire Hook Switch
states between the private wire trunk and the E1/T1 CAS trunk:
Figure 22-7: Message Flow for Private Wire Setup with Hook Signaling
5. In the Trunk Group table (see Configuring Trunk Groups on page 501), configure the
Trunk Group ID for the E1/T1 CAS Trunk, as shown in the following example:
Figure 22-10: Configuring Trunk Group for Private Wire
6. In the Trunk Group Settings table (see Configuring Trunk Group Settings on page
503), configure the method for selecting channels for the E1/T1 CAS Trunk to By Dest
Phone Number, as shown in the following example:
Figure 22-11: Configuring Channel Select Method for Private Wire Trunk
7. In the IP-to-Tel Routing table (see Configuring IP-to-Tel Routing Rules on page 518),
configure IP-to-Tel Routing rules.
Call tear-down: The SIP connection is terminated once the QSIG call is complete.
The Release Complete message is encapsulated in the SIP BYE message that
terminates the session.
With NFAS it is possible to define a group of T1 trunks, called an NFAS group, in which a
single D-channel carries ISDN signaling messages for the entire group. The NFAS group’s
B-channels are used to carry traffic such as voice or data. The NFAS mechanism also
enables definition of a backup D-channel on a different T1 trunk, to be used if the primary
D-channel fails.
The device supports up to 12 NFAS groups. Each group can comprise up to 10 T1 trunks
and each group must contain different T1 trunks. Each T1 trunk is called an "NFAS
member". The T1 trunk whose D-channel is used for signaling is called the "Primary NFAS
Trunk". The T1 trunk whose D-channel is used for backup signaling is called the "Backup
NFAS Trunk". The primary and backup trunks each carry 23 B-channels while all other
NFAS trunks each carry 24 B-channels.
The NFAS group is identified by an NFAS GroupID number (possible values are 1 to 12).
To assign a number of T1 trunks to the same NFAS group, use the NFASGroupNumber_x
= groupID (where x is the physical trunk ID (0 to the maximum number of trunks) or the
Web interface (see 'Configuring Trunk Settings' on page 479).
The parameter DchConfig_x = Trunk_type defines the type of NFAS trunk. Trunk_type is
set to 0 for the primary trunk, to 1 for the backup trunk, and to 2 for an ordinary NFAS
trunk. ‘x’ denotes the physical trunk ID (0 to the maximum number of trunks). You can also
use the Web interface (see 'Configuring Trunk Settings' on page 479).
For example, to assign the first four T1 trunks to NFAS group #1, in which trunk #0 is the
primary trunk and trunk #1 is the backup trunk, use the following configuration:
NFASGroupNumber_0 = 1
NFASGroupNumber_1 = 1
NFASGroupNumber_2 = 1
NFASGroupNumber_3 = 1
DchConfig_0 = 0 ;Primary T1 trunk
DchConfig_1 = 1 ;Backup T1 trunk
DchConfig_2 = 2 ;24 B-channel NFAS trunk
DchConfig_3 = 2 ;24 B-channel NFAS trunk
The NFAS parameters are described in 'PSTN Parameters' on page 1109.
Note:
• Usually the Interface Identifier is included in the Q.931 Setup/Channel
Identification IE only on T1 trunks that doesn’t contain the D-channel. Calls
initiated on B-channels of the Primary T1 trunk, by default, don’t contain the
Interface Identifier. Setting the parameter ISDNIBehavior_x to 2048’ forces the
inclusion of the Channel Identifier parameter also for the Primary trunk.
• The parameter ISDNNFASInterfaceID_x = ID can define the ‘Interface ID’ for any
Primary T1 trunk, even if the T1 trunk is not a part of an NFAS group. However, to
include the Interface Identifier in Q.931 Setup/Channel Identification IE configure
ISDNIBehavior_x = 2048 in the ini file.
For example, if four T1 trunks on a device are configured as a single NFAS group with
Primary and Backup T1 trunks that is used with a DMS-100 switch, the following
parameters should be used:
NFASGroupNumber_0 = 1
NFASGroupNumber_1 = 1
NFASGroupNumber_2 = 1
NFASGroupNumber_3 = 1
DchConfig_0 = 0 ;Primary T1 trunk
DchConfig_1 = 1 ;Backup T1 trunk
DchConfig_2 = 2 ;B-Channel NFAS trunk
DchConfig_3 = 2 ;B-channel NFAS trunk
If there is no NFAS Backup trunk, the following configuration should be used:
ISDNNFASInterfaceID_0 = 0
ISDNNFASInterfaceID_1 = 2
ISDNNFASInterfaceID_2 = 3
ISDNNFASInterfaceID_3 = 4
ISDNIBehavior = 512 ;The parameter should be added because of
;ISDNNFASInterfaceID coniguration above
NFASGroupNumber_0 = 1
NFASGroupNumber_1 = 1
NFASGroupNumber_2 = 1
NFASGroupNumber_3 = 1
DchConfig_0 = 0 ;Primary T1 trunk
DchConfig_1 = 2 ;B-Channel NFAS trunk
DchConfig_2 = 2 ;B-Channel NFAS trunk
DchConfig_3 = 2 ;B-channel NFAS trunk
Note:
• All trunks in the group must be configured with the same values for trunk
parameters TerminationSide, ProtocolType, FramingMethod, and LineCode.
• After stopping or deleting the backup trunk, delete the group and then reconfigure
it.
Note:
• The Switch Activity button is unavailable (i.e, grayed out) if a switchover cannot
be done due to, for example, alarms or unsuitable states.
• This feature is applicable only to T1 ISDN protocols supporting NFAS, and only if
the NFAS group is configured with two D-channels.
Note: If the device receives SIP 4xx responses during the overlap dialing (while
collecting digits), it does not release the call.
Interworking SIP to ISDN overlap dialing (IP to Tel): The device sends the first
digits (e.g., "331") received from the initial SIP INVITE message to the Tel side in an
ISDN Setup message. Each time it receives additional (collected) digits for the same
dialog, which are received from subsequent SIP re-INVITE messages or SIP INFO
messages, it sends them to the Tel side in SIP Q.931 Information messages. For each
subsequent re-INVITE or SIP INFO message received, the device sends a SIP 484
"Address Incomplete" response to the IP side to maintain the current dialog session
and to receive additional digits from subsequent re-INVITE or INFO messages. You
can use the following parameters to configure overlap dialing for IP-to-Tel calls:
• ISDNTxOverlap: Enables IP-to-Tel overlap dialing and defines how the device
receives the collected digits from the IP side - in SIP re-INVITE [1] or INFO
messages [2].
• TimeBetweenDigits: Defines the maximum time (in seconds) that the device waits
between digits received from the IP side. When the time expires, the device uses
the collected digits to dial the called destination number.
Note: For IP-to-Tel overlap dialing, to send ISDN Setup messages without including
the Sending Complete IE, you must configure the ISDNOutCallsBehavior parameter
to USER SENDING COMPLETE [2].
For more information on the above mentioned parameters, see 'PSTN Parameters' on
page 1109. To configure ISDN overlap dialing using the Web interface, see 'Configuring
Trunk Settings' on page 479.
23 Trunk Groups
This section describes the configuration of the device's channels, which includes assigning
them to Trunk Groups.
2. Configure a Trunk Group according to the parameters described in the table below.
3. Click Apply.
You can also register all your Trunk Groups. The registration method per Trunk Group is
configured by the 'Registration Mode' parameter in the Trunk Group Settings page (see
'Configuring Trunk Group Settings' on page 503).
To register the Trunk Groups, click the Register button located below the Trunk
Group table.
To unregister the Trunk Groups, click the Unregister button located below the Trunk
Group table.
Parameter Description
Module Defines the telephony interface module for which you want to
module define the Trunk Group.
[TrunkGroup_Module]
From Trunk Defines the starting physical Trunk number in the Trunk Group.
first-trunk-id The number of listed Trunks depends on the device's hardware
configuration.
[TrunkGroup_FirstTrunkId]
To Trunk Defines the ending physical Trunk number in the Trunk Group.
last-trunk-id The number of listed Trunks depends on the device's hardware
configuration.
[TrunkGroup_LastTrunkId]
Parameter Description
Trunk Group ID Defines the Trunk Group ID for the specified channels. The same
trunk-group-id Trunk Group ID can be assigned to more than one group of
channels. If an IP-to-Tel call is assigned to a Trunk Group, the IP
[TrunkGroup_TrunkGroupNum]
call is routed to the channel(s) pertaining to that Trunk Group ID.
The valid value can be 0 to 119.
3. Configure a Trunk Group according to the parameters described in the table below.
4. Click Apply.
Table 23-2: Trunk Group Settings Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[TrunkGroupSettings_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the
trunk-group-name row in other tables.
[TrunkGroupSettings_TrunkGrou The valid value can be a string of up to 40 characters. By default,
pName] no name is configured.
The name also represents the Trunk Group in the SIP 'tgrp'
parameter in outgoing INVITE messages (according to RFC
4904) if the UseSIPtgrp or UseBroadsoftDTG parameter is
enabled. For example, if you configure the parameter to "ITSP-
ABC":
sip:+16305550100;tgrp=ITSP-ABC;trunk-
context=+1-630@isp.example.net;user=phone
If the parameter is not configured, the Trunk Group number is
used in the 'tgrp' parameter, for example:
sip:+16305550100;tgrp=TG-1;trunk-context=+1-
630@isp.example.net;user=phone
Note: Each row must be configured with a unique name.
Trunk Group ID Defines the Trunk Group ID that you want to configure.
trunk-group-id
[TrunkGroupSettings_TrunkGrou
pId]
Channel Select Mode Defines the method by which IP-to-Tel calls are assigned to the
channel-select-mode channels of the Trunk Group.
[TrunkGroupSettings_ChannelSel [0] By Dest Phone Number = The channel is selected
ectMode] according to the called (destination) number. If the number is
not located, the call is released. If the channel is unavailable
Parameter Description
(e.g., busy), the call is put on call waiting (if call waiting is
enabled and no other call is on call waiting); otherwise, the call
is released.
[1] Channel Cyclic Ascending = The next available channel in
the Trunk Group, in ascending cyclic order is selected. After
the device reaches the highest channel number in the Trunk
Group, it selects the lowest channel number in the Trunk
Group, and then starts ascending again.
[2] Always Ascending = The lowest available channel in the
Trunk Group is selected, and if unavailable, the next higher
channel is selected.
[3] Cyclic Descending = The next available channel in
descending cyclic order is selected. The next lower channel
number in the Trunk Group is always selected. When the
device reaches the lowest channel number in the Trunk
Group, it selects the highest channel number in the Trunk
Group, and then starts descending again.
[4] Always Descending = The highest available channel in the
Trunk Group is selected, and if unavailable, the next lower
channel is selected.
[5] Dest Number & Cyclic Ascending = The channel is
selected according to the called number. If the called number
isn't found, the next available channel in ascending cyclic
order is selected.
Note: If the called number is located, but the port associated
with the number is busy, the call is released.
[6] By Source Phone Number = The channel is selected
according to the calling number.
[7] Trunk Cyclic Ascending = The channel from the first
channel of the next trunk (adjacent to the trunk from which the
previous channel was selected) is selected.
[8] Trunk & Channel Cyclic Ascending = The device
implements the Trunk Cyclic Ascending and Cyclic Ascending
methods to select the channel. This method selects the next
physical trunk in the Trunk Group, and then selects the B-
channel of this trunk according to the Cyclic Ascending
method (i.e., selects the channel after the last allocated
channel).
For example, if the Trunk Group includes two physical trunks,
0 and 1:
For the first incoming call, the first channel of Trunk 0 is
selected.
For the second incoming call, the first channel of Trunk 1
is selected.
For the third incoming call, the second channel of Trunk 0
is selected.
[11] By Dest Number & Ascending = The device allocates a
channels to incoming IP-to-Tel calls as follows:
a. The device attempts to route the call to the channel that is
associated with the destination (called) number. If located,
the call is sent to that channel.
b. If the number is not located or the channel is unavailable
(e.g., busy), the device searches in ascending order for
Parameter Description
the next available channel in the Trunk Group. If located,
the call is sent to that channel.
c. If all the channels are unavailable, the call is released.
Note: If the parameter is not configured, the Trunk Group's
channel select method is according to the global parameter,
ChannelSelectMode.
Registration Mode Defines the registration method of the Trunk Group:
registration-mode [0] Per Endpoint = Each channel in the Trunk Group registers
[TrunkGroupSettings_Registratio individually. The registrations are sent to the 'Serving IP Group
nMode] ID' if configured in the table; otherwise, it is sent to the default
Proxy, and if no default Proxy, then to the Registrar IP.
[1] Per Gateway = (Default) Single registration for the entire
device. This is applicable only if a default Proxy or Registrar IP
is configured and Registration is enabled (i.e., parameter
IsRegisterUsed is set to 1). In this mode, the SIP URI user
part in the From, To, and Contact headers is set to the value
of the global registration parameter, GWRegistrationName or
username if GWRegistrationName is not configured.
[4] Don't Register = No registrations are sent by endpoints
pertaining to the Trunk Group. For example, if the device is
configured globally to register all its endpoints (using the
parameter ChannelSelectMode), you can exclude some
endpoints from being registered by assigning them to a Trunk
Group and configuring the Trunk Group registration mode to
'Don't Register'.
[5] Per Account = Registrations are sent (or not) to an IP
Group according to the settings in the Accounts table (see
'Configuring Registration Accounts' on page 391).
An example is shown below of a REGISTER message for
registering endpoint "101" using the registration Per Endpoint
mode:
REGISTER sip:SipGroupName SIP/2.0
Via: SIP/2.0/UDP
10.33.37.78;branch=z9hG4bKac862428454
From: <sip:101@GatewayName>;tag=1c862422082
To: <sip:101@GatewayName>
Call-ID: 9907977062512000232825@10.33.37.78
CSeq: 3 REGISTER
Contact: <sip:101@10.33.37.78>;expires=3600
Expires: 3600
User-Agent: Sip-Gateway/v.7.20A.000.038
Content-Length: 0
The "SipGroupName" in the Request-URI is configured in the IP
Groups table (see 'Configuring IP Groups' on page 359).
Note:
If the parameter is not configured, the registration is performed
according to the global registration parameter,
ChannelSelectMode.
To enable Trunk Group registration, set the global parameter,
IsRegisterNeeded to 1. This is unnecessary for 'Per Account'
registration mode.
If the device is configured globally to register Per Endpoint and
an channel group includes four channels to register Per
Parameter Description
Gateway, the device registers all channels except the first four
channels. The group of these four channels sends a single
registration request.
Used By Routing Server Enables the use of the Trunk Group by a routing server for
used-by-routing-server routing decisions.
[TrunkGroupSettings_UsedByRo [0] Not Used (default)
utingServer] [1] Used
For more information, see Centralized Third-Party Routing Server
on page 287.
SIP Configuration
Gateway Name Defines the host name for the SIP From header in INVITE
gateway-name messages, and the From and To headers in REGISTER
requests.
[TrunkGroupSettings_GatewayN
ame] By default, no value is defined.
Note: If the parameter is not configured, the global parameter,
SIPGatewayName is used.
Contact User Defines the user part for the SIP Contact URI in INVITE
contact-user messages, and the From, To, and Contact headers in REGISTER
requests.
[TrunkGroupSettings_ContactUs
er] By default, no value is defined.
Note:
The parameter is applicable only if the 'Registration Mode'
parameter is configured to Per Account and registration
based on the Accounts table is successful.
If registration fails, the user part in the INVITE Contact header
is set to the source party number.
The 'Contact User' parameter in the Accounts table overrides
this parameter (see 'Configuring Registration Accounts' on
page 391).
Serving IP Group Assigns an IP Group to where the device sends INVITE
serving-ip-group messages for calls received from the Trunk Group. The actual
destination to where the INVITE messages are sent is according
[TrunkGroupSettings_ServingIPG
to the Proxy Set associated with the IP Group. The Request-URI
roupName]
host name in the INVITE and REGISTER messages (except for
'Per Account' registration modes) is set to the value of the 'SIP
Group Name' parameter configured in the IP Groups table (see
'Configuring IP Groups' on page 359).
Note:
If the parameter is not configured, the INVITE messages are
sent to the default Proxy or according to the Tel-to-IP Routing
table (see 'Configuring Tel-to-IP Routing Rules' on page 509).
If the PreferRouteTable parameter is set to 1 (see 'Configuring
Proxy and Registration Parameters' on page 398), the routing
rules in the Tel-to-IP Routing table take precedence over the
selected Serving IP Group ID.
MWI Interrogation Type Defines message waiting indication (MWI) QSIG-to-IP
mwi-interrogation-type interworking for interrogating MWI supplementary services:
[TrunkGroupSettings_MWIInterro [255] Not configured.
Parameter Description
gationType] [0] None = Disables the feature.
[1] Use Activate Only = MWI Interrogation messages are not
sent and only "passively" responds to MWI Activate requests
from the PBX.
[2] Result Not Used = MWI Interrogation messages are sent,
but the result is not used. Instead, the device waits for MWI
Activate requests from the PBX.
[3] Use Result = MWI Interrogation messages are sent, its
results are used, and the MWI Activate requests are used.
MWI Activate requests are interworked to SIP NOTIFY MWI
messages. The SIP NOTIFY messages are sent to the IP
Group defined by the NotificationIPGroupID parameter.
Note: The parameter appears in the table only if the
VoiceMailInterface parameter is set to 3 (QSIG) (see Configuring
Voice Mail on page 586).
Status
Admin State (Read-only) Displays the administrators state:
"Locked": The Lock command has been chosen from the
Action drop-down button.
"Unlocked": The Unlock command has been chosen from the
Action drop-down button.
Status (Read-only) Displays the current status of the trunks/channels in
the Trunk Group:
"In Service": Indicates that all channels in the Trunk Group are
in service, for example, when the Trunk Group is unlocked or
Busy Out state cleared (see the EnableBusyOut parameter for
more information).
"Going Out Of Service": Appears as soon as you choose the
Lock command and indicates that the device is starting to lock
the Trunk Group and take channels out of service.
"Going Out Of Service (<duration remaining of graceful
period> sec / <number of calls still active> calls)": Appears
when the device is locking the Trunk Group and indicates the
number of buys channels and the time remaining until the
graceful period ends, after which the device locks the
channels regardless of whether the call has ended or not.
"Out Of Service": All fully configured trunks in the Trunk Group
are out of service, for example, when the Trunk Group is
locked or in Busy Out state (see the EnableBusyOut
parameter).
24 Routing
This section describes the configuration of call routing rules.
The device searches the table from top to bottom for the first rule that matches the
characteristics of the incoming call. If it finds a matching rule, it sends the call to the IP
destination configured for that rule. If it doesn't find a matching rule, it rejects the call.
Figure 24-1: Locating SRD
In addition to normal Tel-to-IP routing, you can configure the following features:
Least Cost Routing (LCR): If the LCR feature is enabled, the device searches the
routing table for matching routing rules and then selects the one with the lowest call
cost. The call cost of the routing rule is done by assigning it a Cost Group. To
configure Cost Groups, see 'Least Cost Routing' on page 274. If two routing rules
have identical costs, the rule appearing higher up in the table (i.e., first-matched rule)
is used. If a selected route is unavailable, the device uses the next least-cost routing
rule. However, even if a matched rule is not assigned a Cost Group, the device can
select it as the preferred route over other matched routing rules with Cost Groups,
according to the optional, default LCR settings configured by the Routing Policy (see
'Configuring a Gateway Routing Policy Rule' on page 523).
Call Forking: If the Tel-to-IP Call Forking feature is enabled, the device can send a
Tel call to multiple IP destinations. An incoming Tel call with multiple matched routing
rules (e.g., all with the same source prefix numbers) can be sent (forked) to multiple IP
destinations if all these rules are configured with a Forking Group. The call is
established with the first IP destination that answers the call.
Call Restriction: Calls whose matching routing rule is configured with the destination
IP address of 0.0.0.0 are rejected.
Always Use Routing Table: Even if a proxy server is used, the SIP Request-URI
host name in the outgoing INVITE message is obtained from this table. Using this
feature, you can assign a different SIP URI host name for different called and/or
calling numbers. This feature is enabled using the AlwaysUseRouteTable parameter.
IP Profiles: IP Profiles can be assigned to destination addresses (also when a proxy
is used).
Alternative Routing (when a proxy isn't used): An alternative IP destination
(alternative routing rule) can be configured for specific calls ("main" routing rule).
When the "main" route fails (e.g., busy), the device can send the call to the alternative
route. You must configure the alternative routing rules in table rows (indices) that are
located anywhere below the "main" routing rule. For example, if you configure a
"main" routing rule in Index 4, the alternative routing rule can be configured in Index 6.
In addition, you must configure the alternative routing rules with identical matching
characteristics (e.g., destination prefix number) as the "main" routing rule, but
assigned with different destination IP addresses. Instead of an IP address, you can
use an FQDN to resolve into two IP addresses. For more information on alternative
routing, see 'Alternative Routing for Tel-to-IP Calls' on page 525.
Advice of Charge (AOC): AOC is a pre-billing feature that tasks the rating engine
with calculating the cost of using a service (Tel-to-IP call) and relaying that information
to the customer. AOC, which is configured in the Charge Codes table, can be applied
per Tel-to-IP routing rule.
Note:
• Instead of using the table for Tel-to-IP routing, you can employ a third-party
Routing server to handle the routing decisions. For more information, see
'Centralized Third-Party Routing Server' on page 287.
• You can configure up to three alternative routing rules per "main" routing rule in
the Tel-to-IP Routing table.
• By default, the device applies telephone number manipulation (if configured) only
after processing the routing rule. You can change this and apply number
manipulation before processing the routing rule (see the RouteModeTel2IP
parameter).
• When using a proxy server, it is unnecessary to configure routing rules in the Tel-
to-IP Routing table unless you require one of the following:
√ Alternative routing (fallback) when communication with the proxy server fails.
√ IP security, whereby the device routes only received calls whose source IP
addresses are configured in the table. Enable IP security using the
SecureCallsFromIP parameter.
√ Filter Calls to IP feature. The device checks the table before a call is routed to
the proxy server. However, if the number is not allowed (i.e., the number is not
specified in the table or a Call Restriction routing rule is configured), the call is
rejected.
√ Obtain different SIP URI host names (per called number).
√ Assign IP Profiles to calls.
√ For the table to take precedence over a proxy server for routing calls, you need
to configure the PreferRouteTable parameter to 1. The device checks the
'Destination IP Address' field in the table for a match with the outgoing call; a
proxy is used only if a match is not found.
The following procedure describes how to configure Tel-to-IP routing rules through the
Web interface. You can also configure it through ini file (Prefix) or CLI (configure voip >
gateway routing tel2ip-routing).
3. Configure a routing rule according to the parameters described in the table below.
4. Click Apply.
The following table shows configuration examples of Tel-to-IP routing rules:
Table 24-1: Example of Tel-to-IP Routing Rules
Parameter Description
Source Phone Prefix Defines the prefix and/or suffix of the calling (source) telephone
src-phone-prefix number. You can use special notations for denoting the prefix.
For example, [100-199](100,101,105) denotes a number that
[PREFIX_SourcePrefix]
starts with 100 to 199 and ends with 100, 101 or 105. To denote
any prefix, use the asterisk (*) symbol (default) or to denote calls
Parameter Description
without a calling number, use the $ sign. For a description of
available notations, see 'Dialing Plan Notation for Routing and
Manipulation Tables' on page 967.
The number can include up to 50 digits.
Destination Phone Prefix Defines the prefix and/or suffix of the called (destination)
dst-phone-prefix telephone number. The suffix is enclosed in parenthesis after the
suffix value. You can use special notations for denoting the prefix.
[PREFIX_DestinationPrefix]
For example, [100-199](100,101,105) denotes a number that
starts with 100 to 199 and ends with 100, 101 or 105. To denote
any prefix, use the asterisk (*) symbol (default) or to denote calls
without a called number, use the $ sign. For a description of
available notations, see 'Dialing Plan Notation for Routing and
Manipulation Tables' on page 967.
The number can include up to 50 digits.
Note:
For LDAP-based routing, enter the LDAP query keyword as
the prefix number to denote the IP domain:
"PRIVATE" = Private number
"OCS" = Skype for Business / OCS client number
"PBX" = PBX / IP PBX number
"MOBILE" = Mobile number
"LDAP_ERR" = LDAP query failure
For more information, see AD-based Routing for Microsoft
Skype for Business on page 267.
If you want to configure re-routing of ISDN Tel-to-IP calls to fax
destinations, enter the value string "FAX" (case-sensitive) as
the destination phone prefix. For more information, see the
FaxReroutingMode parameter.
Action
Destination IP Group Assigns an IP Group to where you want to route the call. The SIP
dst-ip-group-id INVITE message is sent to the IP address configured for the
Proxy Set that is associated with the IP Group.
[PREFIX_DestIPGroupName]
Note:
If you select an IP Group, you do not need to configure a
destination IP address. However, if both parameters are
configured in the table, the INVITE message is sent only to the
IP Group.
If the destination is a User-type IP Group, the device searches
for a match of the Request-URI in the received INVITE to an
AOR registration record in the device's database. The INVITE
is then sent to the IP address of the registered contact.
If the AlwaysUseRouteTable parameter is set to 1 (see
'Configuring IP Groups' on page 359), the Request-URI host
name in the INVITE message is set to the value configured for
the 'Destination IP Address' parameter (in this table);
otherwise, if no IP address is defined, it is set to the value of
the 'SIP Group Name' parameter (configured in the IP Groups
table).
The parameter is used as the 'Serving IP Group' in the
Accounts table for acquiring authentication
username/password for this call (see 'Configuring Registration
Accounts' on page 391).
Parameter Description
To configure Proxy Sets, see 'Configuring Proxy Sets' on page
375.
SIP Interface Assigns a SIP Interface to the routing rule. The call is sent to its'
dest-sip-interface-name destination through this SIP interface.
[PREFIX_DestSIPInterfaceName] To configure SIP Interfaces, see 'Configuring SIP Interfaces' on
page 351.
Note: If a SIP Interface is not assigned, the device uses the SIP
Interface associated with the default SRD (Index 0). If, for
whatever reason, you have deleted the default SRD and there are
no SRDs, the call is rejected.
Destination IP Address Defines the IP address (in dotted-decimal notation or FQDN) to
dst-ip-address where the call is sent. If an FQDN is used (e.g., domain.com),
DNS resolution is done according to the DNSQueryType
[PREFIX_DestAddress]
parameter.
The IP address can include the following wildcards:
"x": represents single digits. For example, 10.8.8.xx denotes
all addresses between 10.8.8.10 and 10.8.8.99.
"*": represents any number between 0 and 255. For example,
10.8.8.* denotes all addresses between 10.8.8.0 and
10.8.8.255.
For ENUM-based routing, enter the string "ENUM". The device
sends an ENUM query containing the destination phone number
to an external DNS server, configured in the IP Interfaces table.
The ENUM reply includes a SIP URI which is used as the
Request-URI in the subsequent outgoing INVITE and for routing
(if a proxy is not used). To configure the type of ENUM service
(e.g., e164.arpa), see the EnumService parameter.
For LDAP-based routing, enter the string "LDAP" to denote the IP
address of the LDAP server. For more information, see Active
Directory-based Routing for Microsoft Skype for Business on
page 267.
Note:
The parameter is ignored if you have configured a destination
IP Group in the 'Destination IP Group' field (in this table).
To reject calls, enter the IP address 0.0.0.0. For example, if
you want to prohibit international calls, then in the 'Destination
Phone Prefix' field, enter 00 and in the 'Destination IP Address'
field, enter 0.0.0.0.
For routing calls between phones connected to the device (i.e.,
local routing), enter the device's IP address. If the device's IP
address is unknown (e.g., when DHCP is used), enter IP
address 127.0.0.1.
When using domain names, enter the DNS server's IP
address or alternatively, configure these names in the Internal
DNS table (see 'Configuring the Internal DNS Table' on page
163).
IP Profile Assigns an IP Profile to the routing rule in the outgoing direction.
ip-profile-id The IP Profile allows you to assign various configuration attributes
(e.g., voice coder) per routing rule. To configure IP Profiles, see
[PREFIX_ProfileName]
'Configuring IP Profiles' on page 433.
Parameter Description
Destination Port Defines the destination port to where you want to route the call.
dst-port
[PREFIX_DestPort]
Transport Type Defines the transport layer type used for routing the call:
transport-type [-1] = (Default) Not configured and the transport type is
[PREFIX_TransportType] according to the settings of the global parameter,
SIPTransportType.
[0] UDP
[1] TCP
[2] TLS
Advanced
Call Setup Rules Set ID Assigns a Call Setup Rule Set ID to the routing rule. The device
call-setup-rules-set-id performs the Call Setup rules of this Set ID if the incoming call
matches the characteristics of the routing rule. The device routes
[PREFIX_CallSetupRulesSetId]
the call to the destination according to the routing rule's
configured action only after it has performed the Call Setup rules.
By default, no value is defined.
To configure Call Setup rules, see 'Configuring Call Setup Rules'
on page 422.
Forking Group Defines a Forking Group number for the routing rule. This enables
forking-group forking of incoming Tel calls to multiple IP destinations. The
device sends simultaneous INVITE messages and handles
[PREFIX_ForkingGroup]
multiple SIP dialogs until one of the calls is answered. When one
of the calls is answered, the other calls are dropped.
Each Forking Group can contain up to 10 members. In other
words, up to 10 routing rules can be configured with the same
Forking Group number.
By default, no value is defined.
If all matched routing rules belong to the same Forking Group
number, the device sends an INVITE to all the destinations
belonging to this group. If matched routing rules belong to
different Forking Groups, the device sends the call to the Forking
Group of the first matched routing rule. If the call cannot be
established with any of the destinations associated with the
Forking Group and alternative routing is enabled, the device forks
the call to the Forking Group of the next matched routing rules, as
long as the Forking Group is defined with a higher number than
the previous Forking Group. For example:
Table index entries 1 and 2 are defined with Forking Group
"1", and index entries 3 and 4 with Forking Group "2": The
device first sends the call according to index entries 1 and 2,
and if unavailable and alternative routing is enabled, sends the
call according to index entries 3 and 4.
Table index entry 1 is defined with Forking Group "2", and
index entries 2, 3, and 4 with Forking Group "1": The device
sends the call according to index entry 1 only and ignores the
other index entries even if the destination is unavailable and
alternative routing is enabled. This is because the subsequent
index entries are defined with a Forking Group number that is
lower than that of index entry 1.
Parameter Description
Table index entry 1 is defined with Forking Group "1", index
entry 2 with Forking Group "2", and index entries 3 and 4 with
Forking Group "1": The device first sends the call according to
index entries 1, 3, and 4 (all belonging to Forking Group "1"),
and if the destination is unavailable and alternative routing is
enabled, the device sends the call according to index entry 2.
Table index entry 1 is defined with Forking Group "1", index
entry 2 with Forking Group "3", index entry 3 with Forking
Group "2", and index entry 4 with Forking Group "1": The
device first sends the call according to index entries 1 and 4
(all belonging to Forking Group "1"), and if the destination is
unavailable and alternative routing is enabled, the device
sends the call according to index entry 2 (Forking Group "3").
Even if index entry 2 is unavailable and alternative routing is
enabled, the device ignores index entry 3 because it belongs
to a Forking Group that is lower than index entry 2.
Note:
To enable Tel-to-IP call forking, set the 'Tel2IP Call Forking
Mode' (Tel2IPCallForkingMode) parameter to Enable.
You can configure the device to immediately send the INVITE
message to the first member of the Forking Group (as in
normal operation) and then only after a user-defined interval,
send the INVITE messages simultaneously to the other
members. If the device receives a SIP 4xx or 5xx in response
to the first INVITE, it immediately sends INVITEs to all the
other members, regardless of the interval. To configure this
feature, see the ForkingDelayTimeForInvite ini file parameter.
You can implement Forking Groups when the destination is an
LDAP server or a domain name using DNS. In such scenarios,
the INVITE is sent to all the queried LDAP or resolved IP
addresses, respectively. You can also use LDAP routing rules
with standard routing rules for Forking Groups.
When the UseDifferentRTPportAfterHold parameter is
enabled, every forked call is sent with a different RTP port.
Thus, ensure that the device has sufficient available RTP ports
for these forked calls.
Cost Group Assigns a Cost Group to the routing rule for determining the cost
cost-group-id of the call (i.e., Least Cost Routing or LCR).
[PREFIX_CostGroup] By default, no value is defined.
To configure Cost Groups, see 'Configuring Cost Groups' on page
277.
Note: To implement LCR and its Cost Groups, you must enable
LCR
To implement LCR and its Cost Groups, the Routing Policy
must be enabled for LCR (see 'Configuring a Gateway Routing
Policy Rule' on page 523). If LCR is disabled, the device
ignores the parameter.
The Routing Policy also determines whether matched routing
rules that are not assigned Cost Groups are considered as a
higher or lower cost route compared to matching routing rules
that are assigned Cost Groups. For example, if the 'Default
Call Cost' parameter in the Routing Policy is configured to
Parameter Description
Lowest Cost, even if the device locates matching routing
rules that are assigned Cost Groups, the first-matched routing
rule without an assigned Cost Group is considered as the
lowest cost route and thus, chosen as the preferred route.
Charge Code Assigns a Charge Code to the routing rule for generating
charge-code metering pulses (Advice of Charge).
[PREFIX_MeteringCode] By default, no value is defined.
To configure Charge Codes, see 'Configuring Charge Codes' on
page 584.
Note: The parameter is applicable only to Euro ISDN PRI trunks.
Status Tab
Connectivity Status (Read-only field) Displays the connectivity status of the routing
rule's destination. The destination can be an IP address or an IP
Group, as configured in the 'Destination IP Address' and
'Destination IP Group' fields respectively.
For IP Groups, the status indicates the connectivity with the SIP
proxy server's address configured for the Proxy Set that is
associated with the IP Group. For the status to be displayed, the
Proxy Keep-Alive feature, which monitors the connectivity with
proxy servers per Proxy Set, must be enabled for the Proxy Set
(see 'Configuring Proxy Sets' on page 375). If a Proxy Set is
configured with multiple proxies for redundancy, the status may
change according to the proxy server with which the device
attempts to verify connectivity. For example, if there is no
response from the first configured proxy address, the status
displays "No Connectivity". However, if there is a response from
the next proxy server in the list, the status changes to "OK".
If there is connectivity with the destination, the field displays "OK"
and the device uses the routing rule if required. The routing rule is
not used if any of the following is displayed:
"n/a" = IP Group is unavailable.
"No Connectivity" = No connection with the destination (no
response to the SIP OPTIONS).
"QoS Low" = Poor Quality of Service (QoS) of the destination.
"DNS Error" = No DNS resolution. This status is applicable
only when a domain name is used (instead of an IP address).
"Not Available" = Destination is unreachable due to networking
issues.
Action: Defines the action that is done if the incoming call matches the characteristics
of the rule (i.e., routes the call to the specified Tel/Trunk Group destination).
The device searches the table from top to bottom for the first rule that matches the
characteristics of the incoming call. If it finds a matching rule, it sends the call to the Tel
destination configured for that rule. If it doesn't find a matching rule, it rejects the call.
If an IP-to-Tel call cannot be routed to the Trunk Group, the device can route it to an
alternative destination:
Routing to an Alternative Trunk Group: If the device sends the IP call to the Tel
destination and a subsequent call release reason (cause) code (e.g., 17 for User
Busy) is received from the Tel side, and you have configured this release reason code
in the Reasons for IP-to-Tel Alternative Routing table, the device re-routes the call to
an alternative Trunk Group if an alternative routing rule has been configured in the
table. The alternative routing rules must be configured in table rows (indices) that are
located anywhere below the "main" routing rule. For example, if you configure a "main"
routing rule in Index 4, the alternative routing rule can be configured in Index 6. In
addition, you must configure the alternative routing rules with identical matching
characteristics (e.g., destination prefix number) to the "main" routing rule, but assigned
with different destinations (i.e., Trunk Groups). For more information on IP-to-Tel
alternative routing and for configuring call release reasons for alternative routing, see
'Alternative Routing to Trunk upon Q.931 Call Release Cause Code' on page 532.
Routing to an IP Destination (i.e., Call Redirection): The device can re-route the
IP-to-Tel call to an alternative IP destination, using SIP 3xx responses. For more
information, see 'Alternative Routing to IP Destinations upon Busy Trunk' on page
534.
Routing to an Alternative Physical Trunk within Same Trunk Group: The device can re-
route an IP-to-Tel call to a different physical trunk if the destined trunk within the same
Trunk Group is out of service (e.g., physically disconnected). When the physical trunk
is disconnected, the device sends the SNMP trap, GWAPP_TRAP_BUSYOUT_LINK
notifying of the out-of-service state for the specific trunk number. When the physical
trunk is physically reconnected, this trap is sent notifying of the back-to-service state.
Note:
• Instead of using the table for IP-to-Tel routing, you can employ a third-party
Routing server to handle the routing decisions. For more information, see
'Centralized Third-Party Routing Server' on page 287.
• You can configure up to three alternative routing rules per "main" routing rule in
the table.
• If your deployment includes calls of many different called (source) and/or calling
(destination) numbers that need to be routed to the same destination, you can
employ user-defined prefix tags to represent these numbers. Thus, instead of
configuring many routing rules, you need to configure only one routing rule using
the prefix tag as the source and destination number matching characteristics, and
a destination for the calls. For more information on prefix tags, see 'Dial Plan
Prefix Tags for IP-to-Tel Routing' on page 766.
• By default, the device applies destination telephone number manipulation (if
configured) only after processing the routing rule. You can change this and apply
number manipulation before processing the routing rule (see the
RouteModeIP2Tel parameter). To configure number manipulation, see
'Configuring Source/Destination Number Manipulation' on page 537.
The following procedure describes how to configure IP-to-Tel routing rules through the
Web interface. You can also configure it through ini file (PSTNPrefix) or CLI (configure voip
> gateway routing ip2tel-routing).
3. Configure a routing rule according to the parameters described in the table below.
4. Click Apply.
The following table shows configuration examples of Tel-to-IP routing rules:
Table 24-3: Example of IP-to-Tel Routing Rules
Parameter Description
General
Index Defines an index number for the new table row.
[PstnPrefix_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the
route-name row in other tables.
[PstnPrefix_RouteName] The valid value is a string of up to 40 characters. By default, no
value is defined.
Note: Each row must be configured with a unique name.
Match
Source IP Group Assigns an IP Group from where the SIP message (INVITE) is
src-ip-group-id received.
[PstnPrefix_SrcIPGroupName] By default, no value is defined.
To configure IP Groups, see 'Configuring IP Groups' on page
359.
The IP Group can be used as the 'Serving IP Group' in the
Accounts table for obtaining authentication username/password
for the call. To configure registration accounts, see 'Configuring
Registration Accounts' on page 391.
Source SIP Interface Defines the SIP Interface on which the incoming IP call is
src-sip-interface-name received.
[PstnPrefix_SrcSIPInterfaceName] The default is Any (i.e., any SIP Interface).
To configure SIP Interfaces, see Configuring SIP Interfaces on
page 351.
Note: If the incoming INVITE is received on the specified SIP
Interface and the SIP Interface associated with the specified IP
Group in the 'Source IP Group' parameter (in this table) is
different, the incoming SIP call is rejected. If the 'Source IP
Group' parameter is not defined, the SIP Interface associated
with the default SRD (Index 0) is used. If there is no valid source
IP Group, the call is rejected.
Source IP Address Defines the source IP address of the incoming IP call.
src-ip-address The IP address must be configured in dotted-decimal notation
[PstnPrefix_SourceAddress] (e.g., 10.8.8.5); not as an FQDN. By default, no value is defined.
Note:
The source IP address is obtained from the Contact header in
the INVITE message.
You can configure from where the source IP address is
obtained, using the SourceIPAddressInput parameter.
The source IP address can include the following wildcards:
"x": denotes single digits. For example, 10.8.8.xx
represents all the addresses between 10.8.8.10 and
10.8.8.99.
"*": denotes any number between 0 and 255. For
example, 10.8.8.* represents all addresses between
10.8.8.0 and 10.8.8.255.
Source Phone Prefix Defines the prefix or suffix of the calling (source) telephone
Parameter Description
src-phone-prefix number.
[PstnPrefix_SourcePrefix] The prefix can include up to 49 digits. You can use special
notations for denoting the prefix. For example, [100-
199](100,101,105) denotes a number that starts with 100 to 199
and ends with 100, 101 or 105. To denote any prefix, use the
asterisk (*) symbol. To denote calls without a calling number, use
the $ sign. For a description of available notations, see 'Dialing
Plan Notation for Routing and Manipulation Tables' on page 967.
By default, no value is defined.
Note: If the P-Asserted-Identity header is present in the
incoming INVITE message, the value of the parameter is
compared to the P-Asserted-Identity URI host name (and not the
From header).
Source Host Prefix Defines the prefix of the URI host name in the From header of
src-host-prefix the incoming INVITE message.
[PstnPrefix_SrcHostPrefix] By default, no value is defined. To denote any prefix, use the
asterisk (*) wildcard.
Note: If the P-Asserted-Identity header is present in the
incoming INVITE message, the value of the parameter is
compared to the P-Asserted-Identity URI host name (and not the
From header).
Destination Phone Prefix Defines the prefix or suffix of the called (destined) telephone
dst-host-prefix number. You can use special notations for denoting the prefix.
For example, [100-199](100,101,105) denotes a number that
[PstnPrefix_DestHostPrefix]
starts with 100 to 199 and ends with 100, 101 or 105. To denote
any prefix, use the asterisk (*) symbol or to denote calls without
a called number, use the $ sign. For a description of available
notations, see 'Dialing Plan Notation for Routing and
Manipulation Tables' on page 967.
By default, no value is defined.
The prefix can include up to 49 digits.
Destination Host Prefix Defines the Request-URI host name prefix of the incoming
dst-phone-prefix INVITE message.
[PstnPrefix_DestPrefix] By default, no value is defined. To denote any prefix, use the
asterisk (*) wildcard.
Action
Destination Type Defines the type of Tel destination:
dst-type [0] Trunk Group (default)
[PstnPrefix_DestType] [1] Trunk
Trunk Group ID Defines the Trunk Group ID to where the incoming SIP call is
trunk-group-id sent.
[PstnPrefix_TrunkGroupId]
Trunk ID Defines the Trunk to where the incoming SIP call is sent.
trunk-id Note:
[PstnPrefix_TrunkId] If both 'Trunk Group ID' and 'Trunk ID' parameters are
configured in the table, the routing is done according to the
'Trunk Group ID' parameter.
To configure the method for selecting the trunk's channel to
Parameter Description
which the IP call is sent, see the global parameter,
ChannelSelectMode.
IP Profile Assigns an IP Profile to the call.
ip-profile-id To configure IP Profiles, see 'Configuring IP Profiles' on page
[PstnPrefix_ProfileName] 433.
Call Setup Rules Set ID Assigns a Call Setup Rule Set ID to the routing rule. The device
call-setup-rules-set-id performs the Call Setup rules of this Set ID if the incoming call
matches the characteristics of the routing rule. The device routes
[PstnPrefix_CallSetupRulesSetId]
the call to the destination according to the routing rule's
configured action, only after it has performed the Call Setup
rules.
To configure Call Setup rules, see 'Configuring Call Setup Rules'
on page 422.
3. Configure the Routing Policy rule according to the parameters described in the table
below.
4. Click Apply.
Table 24-5: Routing Policies Table Parameter Descriptions
Parameter Description
Parameter Description
[0] Lowest Cost = (Default) The device considers a matched
routing rule that is not assigned a Cost Group as the lowest
cost route. Therefore, it uses the routing rule.
[1] Highest Cost = The device considers a matched routing
rule that is not assigned a Cost Group as the highest cost
route. Therefore, it is only used if the other matched routing
rules that are assigned Cost Groups are unavailable.
LCR Call Duration Defines the average call duration (in minutes) and is used to
lcr-call-length calculate the variable portion of the call cost. This is useful, for
example, when the average call duration spans over multiple
[GWRoutingPolicy_LCRAverageCa
time bands. The LCR is calculated as follows:
llLength]
cost = call connect cost + (minute cost * average call duration)
The valid value is 0-65533. The default is 1.
For example, assume the following Cost Groups:
"Weekend A": call connection cost is 1 and charge per
minute is 6. Therefore, a call of 1 minute cost 7 units.
"Weekend B": call connection cost is 6 and charge per
minute is 1. Therefore, a call of 1 minute cost 7 units.
Therefore, for calls under one minute, "Weekend A" carries the
lower cost. However, if the average call duration is more than
one minute, "Weekend B" carries the lower cost.
These parameters are configured in the Routing Settings page (Setup menu >
Signaling & Media tab > Gateway folder > Routing > Routing Settings), as shown
below:
Figure 24-5: Configuring IP Connectivity Method
Quality of Service (QoS): You can enable the device to check the QoS of IP
destinations. The device measures the QoS according to RTCP statistics of previously
established calls with the IP destination. The RTCP includes packet delay (in
milliseconds) and packet loss (in percentage). If these measured statistics exceed a
user-defined threshold, the destination is considered unavailable. Note that if call
statistics is not received within two minutes, the QoS data is reset. These thresholds
are configured using the following parameters:
• 'Max Allowed Packet Loss for Alt Routing' (IPConnQoSMaxAllowedPL): defines
the threshold value for packet loss after which the IP destination is considered
unavailable.
• 'Max Allowed Delay for Alt Routing' (IPConnQoSMaxAllowedDelay): defines the
threshold value for packet delay after which the IP destination is considered
unavailable
These parameters are configured in the Routing Settings page (Setup menu >
Signaling & Media tab > Gateway folder > Routing > Routing Settings), as shown
below:
Figure 24-6: Configuring IP QoS Thresholds for Alternative Tel-to-IP Routing
DNS Resolution: When a host name (FQDN) is used (instead of an IP address) for
the IP destination, it is resolved into an IP address by a DNS server. The device
checks network connectivity and QoS of the resolved IP address. If the DNS host
name is unresolved, the device considers the connectivity of the IP destination as
unavailable.
You can view the connectivity status of IP destinations in the following Web interface
pages:
Tel-to-IP Routing table: The connectivity status of the IP destination per routing rule
is displayed in the 'Status' column. For more information, see 'Configuring Tel-to-IP
Routing Rules' on page 509.
IP Connectivity: This page displays a more informative connectivity status of the IP
destinations used in Tel-to-IP routing rules in the Tel-to-IP Routing table. For viewing
this page, see 'Viewing IP Connectivity' on page 866.
Note:
• Alternative routing based on IP connectivity is applicable only when a proxy server
is not used.
• You can also enable the Busy Out feature, whereby the device can take specified
actions if all IP destinations of matching routing rules in the Tel-to-IP Routing table
do not respond to connectivity checks. For more information, see the
EnableBusyOut parameter.
• If the AltRoutingTel2IPEnable parameter is enabled, the Busy Out feature does
not function with the Proxy Set keep-alive mechanism (see Alternative Routing
Based on SIP Responses on page 526). To use the Busy Out feature with the
Proxy Set keep-alive mechanism (for IP Groups), disable the
AltRoutingTel2IPEnable parameter.
The device searches for an alternative routing rule (IP destination) when any of the
following connectivity states are detected with the IP destination of the "main" routing rule:
No response received from SIP OPTIONS messages. This depends on the chosen
method for checking IP connectivity.
Poor QoS according to the configured thresholds for packet loss and delay.
No response from a DNS-resolved IP address, where the domain name (FQDN) is
configured for the IP destination. If the device sends the INVITE message to the first
IP address and receives no response, the device makes a user-defined number of
attempts (configured by the HotSwapRtx parameter) to send it again (re-transmit). If
there is still no response after all the attempts, it sends it to the next DNS-resolved IP
address, and so on. For example, if you configure the parameter to "3" and the device
receives no response from the first IP address, it attempts up to three times to send
the INVITE to the first IP address and if unsuccessful, it attempts to send the call to
the next DNS-resolved IP address, and so on.
No response for in-dialog request from a DNS-resolved IP address, where the domain
name is received in the Contact header of an incoming setup or target refresh SIP
message (e.g., 200 OK). If no response is received from the first IP address, the
device tries to send it again for up to a user-defined number of attempts (configured by
the HotSwapRtx parameter). If there is still no response, it attempts to send the SIP
request to the next DNS-resolved IP address, and so on.
The connectivity status of the IP destination is displayed in the 'Status' column of the Tel-
to-IP Routing table per routing rule. If it displays a status other than "ok", the device
considers the IP destination as unavailable and attempts to re-route the call to an
alternative destination. For more information on the IP connectivity methods and on
viewing IP connectivity status, see 'IP Destinations Connectivity Feature' on page 525.
The table below shows an example of alternative routing where the device uses an
available alternative routing rule in the Tel-to-IP Routing table to re-route the initial Tel-to-IP
call.
Table 24-6: Alternative Routing based on IP Connectivity Example
Destination IP Connectivity
IP Destination Rule Used?
Phone Prefix Status
The following procedure describes how to configure alternative Tel-to-IP routing based on
IP connectivity.
is terminated due to crossed thresholds of QoE metrics such as MOS, packet delay,
and packet loss (configured in the Quality of Experience Profile table) and/or media
bandwidth (configured in the Bandwidth profile table). When this occurs, the device
sends a SIP 480 (Temporarily Unavailable) response to the SIP entity. This is
configured by 1) assigning an IP Group a QoE and/or Bandwidth profile that rejects
calls if the threshold is crossed, 2) configuring 806 in the Reasons for Tel-to-IP
Alternative Routing table and 3) configuring an alternative routing rule.
Depending on configuration, alternative routing is done using one of the following
configuration entities:
Tel-to-IP Routing Rules: Alternative routing rules can be configured for a specific
routing rule in the Tel-to-IP Routing table. If the destination of the "main" routing rule is
unavailable, the device searches the table for the next matching rule (e.g., destination
phone number), and if available attempts to re-route the call to the IP destination
configured for this alternative routing rule. For more information on configuring
alternative Tel-to-IP routing rules, see 'Configuring Tel-to-IP Routing Rules' on page
509. The table below shows an example of alternative routing where the device uses
the first available alternative routing rule to re-route the initial, unsuccessful Tel-to-IP
call destination.
Table 24-7: Alternative Routing based on SIP Response Code Example
Destination
IP Destination SIP Response Rule Used?
Phone Prefix
408 Request No
Main Route 40 10.33.45.68
Timeout
Alternative Route #1 40 10.33.45.70 486 Busy Here No
Alternative Route #2 40 10.33.45.72 200 OK Yes
Proxy Sets: Proxy Sets are used for Server-type IP Groups (e.g., an IP PBX or
proxy), which define the address (IP address or FQDN) of the server (see 'Configuring
Proxy Sets' on page 375). As you can configure multiple IP destinations per Proxy Set,
the device supports proxy redundancy, which works together with the alternative
routing feature. If the destination of a routing rule in the Tel-to-IP Routing table is an IP
Group, the device routes the call to the IP destination configured for the Proxy Set
associated with the IP Group. If the first IP destination of the Proxy Set is unavailable,
the device attempts to re-route the call to the next proxy destination, and so on until an
available IP destination is located. To enable the Proxy Redundancy feature for a
Proxy Set, set the IsProxyHotSwap parameter to 1 and the EnableProxyKeepAlive
parameter to 1.
When the Proxy Redundancy feature is enabled, the device continually monitors the
connection with the proxies by using keep-alive messages (SIP OPTIONS). The
device sends these messages every user-defined interval (ProxyKeepAliveTime
parameter). If the first (primary) proxy in the list replies with a SIP response code that
you have also configured by the 'Keep-Alive Failure Responses' parameter, the device
considers the Proxy as down; otherwise, the device considers the proxy as "alive". If
the proxy is still considered down after a user-defined number of re-transmissions
(configured by the HotSwapRtx parameter), the device attempts to communicate
(using the same INVITE) with the next configured (redundant) proxy in the list, and so
on until an available redundant proxy is located. Once an available proxy is located,
the device can operate in one of the following modes (configured by the
ProxyRedundancyMode parameter):
• Parking mode: The device continues operating with the redundant proxy (now
active) until the next failure occurs, after which it switches to the next redundant
proxy.
• Homing mode: The device always attempts to operate with the primary proxy. In
other words, it switches back to the primary proxy whenever it's available again.
If none of the proxy servers respond, the device goes over the list again.
Note:
• The device assumes that all the proxy servers belonging to the Proxy Set are
synchronized with regards to registered users. Thus, when the device locates an
available proxy using the Hot Swap feature, it does not re-register the users; new
registration (refresh) is done as normal.
• You can also enable the Busy Out feature, whereby the device can take specified
actions if all Proxy Sets of associated destination IP Groups of matching routing
rules in the Tel-to-IP Routing table do not respond to connectivity checks. For
more information, see the EnableBusyOut parameter.
• If the AltRoutingTel2IPEnable parameter is enabled for the IP Connectivity feature
(see Alternative Routing Based on IP Connectivity on page 526), the Busy Out
feature does not function with the Proxy Set keep-alive mechanism (see below).
To use the Busy Out feature with the Proxy Set keep-alive mechanism (for IP
Groups), disable the AltRoutingTel2IPEnable parameter.
The following procedure describes how to configure alternative Tel-to-IP routing based on
SIP response codes through the Web. You can also configure it through ini file
(AltRouteCauseTel2Ip) or CLI (configure voip > gateway routing alt-route-cause-tel2ip).
Parameter Description
Parameter Description
Release Cause Defines a SIP response code that if received, the device
rel-cause attempts to route the call to an alternative destination (if
configured).
[AltRouteCauseTel2Ip_ReleaseCause]
4. If you are using the Tel-to-IP Routing table, configure alternative routing rules with
identical call matching characteristics, but different IP destinations. If you are using the
Proxy Set, configure redundant proxies.
3. Click Apply.
Note: If a SIP 401 or 407 response is received from a contact, the device does not
try to redirect the call to the next contact. Instead, the device continues with the
regular authentication process, as indicated by these response types.
3. Click Apply.
Note:
• If a Trunk is disconnected or not synchronized, the device issues itself the internal
Cause Code No. 27. This cause code is mapped (by default) to SIP 502.
• The default release cause is described in the Q.931 notation and translated to
corresponding SIP 40x or 50x values (e.g., Cause Code No. 3 to SIP 404, and
Cause Code No. 34 to SIP 503).
• For mapping SIP-to-Q.931 and Q.931-to-SIP release causes, see Configuring
Release Cause Mapping on page 555.
The following procedure describes how to configure alternative routing reasons for IP-to-
Tel calls through the Web interface. You can also configure it through ini file
(AltRouteCauseIP2Tel) or CLI (configure voip > gateway routing alt-route-cause-ip2tel).
3. Open the IP-to-Tel Routing table, and then configure alternative routing rules with the
same call matching characteristics as the "main" routing rule, but with different Trunk
Group destinations.
4. Configure Q.931 cause codes that invoke alternative IP-to-Tel routing:
a. Open the Reasons for IP-to-Tel Alternative Routing table (Setup menu >
Signaling & Media tab > Gateway folder > Routing > Alternative Routing
Reasons > Reasons for IP > Tel).
c. Configure a Q.931 release cause code for alternative routing according to the
parameters described in the table below.
d. Click Apply.
Table 24-9: Reasons for IP-to-Tel Alternative Routing Table Parameter Descriptions
Parameter Description
The figure above displays a configuration that forwards IP-to-Tel calls destined for
Trunk Group ID 1 to destination IP address 10.13.5.67 if conditions mentioned earlier
exist.
3. Configure a rule according to the parameters described in the table below.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Table 24-10: Forward on Busy Trunk Destination Parameter Descriptions
Parameter Description
3. Click Apply.
25 Manipulation
This section describes the configuration of various manipulation processes.
• Destination Phone Number Manipulation for IP-to-Tel Calls (up to 120 entries)
Configuration of number manipulation rules includes two areas:
Match: Defines the matching characteristics of the incoming call (e.g., prefix of
destination number).
Action: Defines the action that is done if the incoming call matches the characteristics
of the rule (e.g., removes a user-defined number of digits from the left of the number).
The device searches the table from top to bottom for the first rule that matches the
characteristics of the incoming call. If it finds a matching rule, it applies the manipulation
configured for that rule. In other words, a rule at the top of the table takes precedence over
a rule defined lower down in the table. Therefore, define more specific rules above more
generic rules. For example, if you configure the source prefix number as "551" for rule
index 1 and "55" for rule index 2, the device uses rule index 1 for numbers that start with
551 and uses rule index 2 for numbers that start with 550, 552, 553, and so on until 559.
However, if you configure the source prefix number as "55" for rule index 1 and "551" for
rule index 2, the device applies rule index 1 to all numbers that start with 55, including
numbers that start with 551. If the device doesn't find a matching rule, no manipulation is
done on the call.
You can perform a second "round" (additional) of source and destination number
manipulations for IP-to-Tel calls on an already manipulated number. The initial and
additional number manipulation rules are both configured in the number manipulation
tables for IP-to-Tel calls. The additional manipulation is performed on the initially
manipulated number. Thus, for complex number manipulation schemes, you only need to
configure relatively few manipulation rules in these tables (that would otherwise require
many rules). To enable this additional manipulation, use the following parameters:
Source number manipulation - PerformAdditionalIP2TELSourceManipulation
Destination number manipulation - PerformAdditionalIP2TELDestinationManipulation
Telephone number manipulation can be useful, for example, for the following:
Stripping or adding dialing plan digits from or to the number, respectively. For
example, a user may need to first dial 9 before dialing the phone number to indicate
an external line. This number 9 can then be removed by number manipulation before
the call is setup.
Allowing or blocking Caller ID information according to destination or source prefixes.
Assigning Numbering Plan Indicator (NPI) and Type of Numbering (TON) to IP-to-Tel
calls. The device can use a single global setting for NPI/TON classification or it can
use the setting in the manipulation tables on a call-by-call basis.
Note:
• Number manipulation can be performed before or after a routing decision is made.
For example, you can route a call to a specific Trunk Group according to its
original number, and then you can remove or add a prefix to that number before it
is routed. To determine when number manipulation is performed, use the 'IP to Tel
Routing Mode' parameter (RouteModeIP2Tel) and 'Tel to IP Routing Mode'
parameter (RouteModeTel2IP).
• The device manipulates the number in the following order: 1) strips digits from the
left of the number, 2) strips digits from the right of the number, 3) retains the
defined number of digits, 4) adds the defined prefix, and then 5) adds the defined
suffix.
The following procedure describes how to configure number manipulation rules through the
Web interface. You can also configure this using the following management tools:
Destination Phone Number Manipulation for IP-to-Tel Calls table: ini file
(NumberMapIP2Tel) or CLI (configure voip > gateway manipulation dst-number-map-
ip2tel)
Destination Phone Number Manipulation for Tel-to-IP Calls table: ini file
(NumberMapTel2IP) or CLI (configure voip > gateway manipulation dst-number-map-
tel2ip)
Source Phone Number Manipulation for IP-to-Tel Calls table: ini file
(SourceNumberMapIP2Tel) or CLI (configure voip > gateway manipulation src-
number-map-ip2tel)
Source Phone Number Manipulation for Tel-to-IP Calls table: ini file
(SourceNumberMapTel2IP) or CLI (configure voip > gateway manipulation src-
number-map-tel2ip)
Destination 03 * * [6,7,8]
Prefix
Source Prefix 201 1001 123451001# [30-40]x 2001
Stripped Digits - 4 - - 5
From Left
Stripped Digits - - - 1 -
From Right
Prefix to Add 971 5 - 2 3
Suffix to Add - 23 8 - -
Number of - - 4 - -
Digits to Leave
Presentation Allowed Restricted - - -
Parameter Description
General
Index Defines an index number for the new table row.
[_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
manipulation-name other tables.
[_ManipulationName] The valid value is a string of up to 40 characters. By default, no value is
defined.
Note: Each row must be configured with a unique name.
Match
Source IP Address Defines the source IP address of the caller. This is obtained from the
src-ip-address Contact header in the INVITE message.
[_SourceAddress] The default is the asterisk (*) wildcard (i.e., any address).
Note:
The parameter is applicable only to the Destination Phone Number
Manipulation for IP-to-Tel Calls table and Source Phone Number
Manipulation for IP-to-Tel Calls table.
The source IP address can include the 'x' wildcard to represent
single digits. For example, 10.8.8.xx represents all IP addresses
between 10.8.8.10 to 10.8.8.99.
The source IP address can include the asterisk (*) wildcard to
represent any number between 0 and 255. For example, 10.8.8.*
represents all IP addresses between 10.8.8.0 and 10.8.8.255.
Destination IP Group Defines the IP Group to where the call is sent.
Parameter Description
dst-ip-group-id The default is Any (i.e., any IP Group).
[_DestIPGroupID] Note: The parameter is applicable only to the Destination Phone
Number Manipulation for Tel-to-IP Calls table.
Source Trunk Group Defines the source Trunk Group ID for Tel-to-IP calls.
src-trunk-group-id The default is -1 (i.e., any Trunk Group).
[_SrcTrunkGroupID] Note: The parameter is applicable only to the number manipulation
tables for Tel-to-IP calls.
Source Prefix Defines the source (calling) telephone number prefix and/or suffix. You
src-prefix can use special notations for denoting the prefix. For example, [100-
199](100,101,105) denotes a number that starts with 100 to 199 and
[_SourcePrefix]
ends with 100, 101 or 105. You can also use the $ sign to denote calls
without a calling number. For a description of available notations, see
'Dialing Plan Notation for Routing and Manipulation Tables' on page
967.
The default is the asterisk (*) wildcard (i.e., any prefix).
Source Host Prefix Defines the URI host name prefix of the incoming SIP INVITE message
src-host-prefix in the From header.
[_SrcHost] The default is the asterisk (*) wildcard (i.e., any prefix).
Note:
The parameter is applicable only to the Destination Phone Number
Manipulation for IP-to-Tel Calls table and Source Phone Number
Manipulation for IP-to-Tel Calls table.
If the P-Asserted-Identity header is present in the incoming INVITE
message, then the value of the parameter is compared to the P-
Asserted-Identity URI host name (instead of the From header).
Destination Prefix Defines the destination (called) telephone number prefix and/or suffix.
dst-prefix You can use special notations for denoting the prefix. For example,
[100-199](100,101,105) denotes a number that starts with 100 to 199
[_DestinationPrefix]
and ends with 100, 101 or 105. You can also use the $ sign to denote
calls without a called number. For a description of available notations,
see 'Dialing Plan Notation for Routing and Manipulation Tables' on
page 967.
The default is the asterisk (*) wildcard (i.e., any prefix).
Destination Host Prefix Defines the Request-URI host name prefix of the incoming SIP INVITE
dst-host-prefix message.
[_DestHost] The default is the asterisk (*) wildcard (i.e., any prefix).
Note: The parameter is applicable only to the Destination Phone
Number Manipulation for IP-to-Tel Calls table and Source Phone
Number Manipulation for IP-to-Tel Calls table.
Source IP Group Defines the IP Group from where the IP call originated.
src-ip-group-id The default is Any (i.e., any IP Group).
[_SrcIPGroupID] Note: The parameter is applicable only to the Destination Phone
Number Manipulation for IP-to-Tel Calls table and Source Phone
Number Manipulation for IP-to-Tel Calls table.
Action
Stripped Digits From Left Defines the number of digits to remove from the left of the telephone
remove-from-left number prefix. For example, if you enter 3 and the phone number is
Parameter Description
[_RemoveFromLeft] 5551234, the new phone number is 1234.
Stripped Digits From Right Defines the number of digits to remove from the right of the telephone
remove-from-right number prefix. For example, if you enter 3 and the phone number is
5551234, the new phone number is 5551.
[RemoveFromRight]
Number of Digits to Leave Defines the number of digits that you want to keep from the right of the
num-of-digits-to-leave phone number. For example, if you enter 4 and the phone number is
00165751234, then the new number is 1234.
[LeaveFromRight]
Prefix to Add Defines the number or string that you want added to the front of the
prefix-to-add telephone number. For example, if you enter 9 and the phone number
is 1234, the new number is 91234.
[Prefix2Add]
Suffix to Add Defines the number or string that you want added to the end of the
suffix-to-add telephone number. For example, if you enter 00 and the phone number
is 1234, the new number is 123400.
[Suffix2Add]
TON Defines the Type of Number (TON).
ton [0] Unknown (default)
[NumberType] [1] International-Level2 Regional
[2] National-Level1 Regional
[3] Network-PSTN Specific
[4] Subscriber-Level0 Regional
[6] Abbreviated
The applicable values depend on the NPI value:
If you select Unknown for NPI, you can select Unknown.
If you select Private for NPI, you can set TON to one of the
following:
Unknown
International-Level2 Regional
National-Level1 Regional
PISN Specific
Subscriber-Level0 Regional
If you select E.164 Public for NPI, you can set TON to one of the
following:
Unknown
International-Level2 Regional
National-Level1 Regional
Network-PSTN Specific
Subscriber-Level0 Regional
Abbreviated
Note:
The parameter is applicable only to the Destination Phone Number
Manipulation for IP-to-Tel Calls table and Source Phone Number
Manipulation for IP-to-Tel Calls table.
TON can be used in the SIP Remote-Party-ID header by using the
EnableRPIHeader and AddTON2RPI parameters.
For more information on available NPI/TON values, see Numbering
Plans and Type of Number on page 563.
Parameter Description
Parameter Rule 1
Source Prefix *
Source IP Address *
Stripped Digits from Left 7
Prefix to Add 0[5,3]15
name).
The device searches the table from top to bottom for the first rule that matches the
characteristics of the incoming call. If it finds a matching rule, it applies the manipulation
configured for that rule.
Note: To use the Calling Name Manipulation for Tel-to-IP Calls table for retrieving the
calling name (display name) from an Active Directory using LDAP queries, see
Querying the AD for Calling Name on page 273.
The following procedure describes how to configure calling name manipulation rules
through the Web interface. You can also configure these rules using the the following
management tools:
Calling Name Manipulation for Tel-to-IP Calls table: ini file (CallingNameMapTel2Ip) or
CLI (configure voip > gateway manipulation calling-name-map-tel2ip)
Calling Name Manipulation for IP-to-Tel Calls table: ini file (CallingNameMapIp2Tel) or
CLI (configure voip > gateway manipulation calling-name-map-ip2tel)
Parameter Description
General
Index Defines an index number for the new table row.
[_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
manipulation-name other tables.
[_ManipulationName] The valid value is a string of up to 40 characters.
Note: Each row must be configured with a unique name.
Match
Destination Prefix Defines the destination (called) telephone number prefix and/or suffix.
dst-prefix You can use special notations for denoting the prefix. For example,
[_DestinationPrefix] [100-199](100,101,105) denotes a number that starts with 100 to 199
and ends with 100, 101 or 105. You can also use the $ sign to denote
calls without a called number. For a description of available notations,
see 'Dialing Plan Notation for Routing and Manipulation Tables' on
page 967.
The default value is the asterisk (*) symbol (i.e., any destination prefix).
Source Prefix Defines the source (calling) telephone number prefix and/or suffix.
src-prefix You can use special notations for denoting the prefix. For example,
[_SourcePrefix] [100-199](100,101,105) denotes a number that starts with 100 to 199
and ends with 100, 101 or 105. You can also use the $ sign to denote
calls without a calling number. For a description of available notations,
see 'Dialing Plan Notation for Routing and Manipulation Tables' on
page 967.
The default value is the asterisk (*) symbol (i.e., any source prefix).
Calling Name Prefix Defines the caller name (i.e., caller ID) prefix.
calling-name-prefix You can use special notations for denoting the prefix. For example, to
[_CallingNamePrefix] denote calls without a calling name, use the $ sign. For a description of
available notations, see 'Dialing Plan Notation for Routing and
Manipulation Tables' on page 967.
The default value is the asterisk (*) symbol (i.e., any calling name
prefix).
Source Trunk Group ID Defines the source Trunk Group ID from where the Tel-to-IP call was
src-trunk-group-id received.
[_SrcTrunkGroupID] The default value is -1, which denotes any Trunk Group.
Note: The parameter is applicable only to the Calling Name
Manipulation for Tel-to-IP Calls table.
Source IP Address Defines the source IP address of the caller for IP-to-Tel calls. The
src-ip-address source IP address appears in the SIP Contact header in the INVITE
message.
[_SourceAddress]
The default value is the asterisk (*) symbol (i.e., any IP address). The
source IP address can include the following wildcards:
"x" wildcard: represents single digits. For example, 10.8.8.xx
represents all IP addresses between 10.8.8.10 to 10.8.8.99.
"*" (asterisk) wildcard: represents any number between 0 and 255.
For example, 10.8.8.* represents all IP addresses between 10.8.8.0
and 10.8.8.255.
Parameter Description
Note: The parameter is applicable only to the Calling Name
Manipulation for IP-to-Tel Calls table.
Source Host Prefix Defines the URI host name prefix of the incoming SIP INVITE message
src-host-prefix in the From header.
[_SrcHost] The default value is the asterisk (*) symbol (i.e., any source host prefix).
Note:
The parameter is applicable only to the Calling Name Manipulation
for IP-to-Tel Calls table.
If the P-Asserted-Identity header is present in the incoming INVITE
message, the value of the parameter is compared to the P-Asserted-
Identity URI host name (instead of the From header).
Destination Host Prefix Defines the Request-URI host name prefix of the incoming SIP INVITE
dst-host-prefix message.
[_DestHost] The default value is the asterisk (*) symbol (i.e., any destination host
prefix).
Note: The parameter is applicable only to the Calling Name
Manipulation for IP-to-Tel Calls table.
Action
Stripped Characters From Defines the number of characters to remove from the left of the calling
Left name.
remove-from-left For example, if you enter 3 and the calling name is "company:john", the
[_RemoveFromLeft] new calling name is "pany:john".
Stripped Characters From Defines the number of characters to remove from the right of the calling
Right name.
remove-from-right For example, if you enter 3 and the calling name is "company:name",
[_RemoveFromRight] the new name is "company:n".
Number of Characters to Defines the number of characters that you want to keep from the right
Leave of the calling name.
num-of-digits-to-leave For example, if you enter 4 and the calling name is "company:name",
[LeaveFromRight] the new name is "name".
Prefix to Add Defines the number or string to add at the front of the calling name.
prefix-to-add For example, if you enter ITSP and the calling name is
[_Prefix2Add] "company:name", the new name is ITSPcompany:john".
Suffix to Add Defines the number or string to add at the end of the calling name.
suffix-to-add For example, if you enter 00 and calling name is "company:name", the
[_Suffix2Add] new name is "company:name00".
Note:
• If the device copies the received destination number to the outgoing SIP redirect
number (enabled by the CopyDest2RedirectNumber parameter), no redirect
number Tel-to-IP manipulation is done.
• The manipulation rules are done in the following order: 'Stripped Digits From Left',
'Stripped Digits From Right', 'Number of Digits to Leave', 'Prefix to Add', and then
'Suffix to Add'.
• The device uses the 'Redirect Prefix' parameter before it manipulates the prefix.
The following procedure describes how to configure redirect number manipulation rules
through the Web interface. You can also configure these rules using the following
management tools:
Redirect Number IP to Tel table: ini file (RedirectNumberMapIp2Tel) or CLI (configure
voip > gateway manipulation redirect-number-map-ip2tel)
Redirect Number Tel to IP table: ini file (RedirectNumberMapTel2Ip) or CLI (configure
voip > gateway manipulation redirect-number-map-tel2ip)
2. Click New; the following dialog box appears (e.g., Redirect Number Tel-to-IP table):
Figure 25-4: Redirect Number Manipulation for Tel-to-IP Table (Example) - Add Dialog Box
Parameter Description
General
Index Defines an index number for the new table row.
[_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
manipulation-name other tables.
[_ManipulationName] The valid value is a string of up to 40 characters.
Match
Destination Prefix Defines the destination (called) telephone number prefix.
dst-prefix The default value is the asterisk (*) symbol (i.e., any number).
[_DestinationPrefix] For manipulating the diverting and redirected numbers for call
diversion, you can use the strings "DN" and "RN" to denote the
destination prefix of these numbers. For more information, see
Manipulating Redirected and Diverted Numbers for Call Diversion on
page 552.
Redirect Prefix Defines the redirect telephone number prefix.
redirect-prefix The default value is the asterisk (*) symbol (i.e., any number prefix).
[_RedirectPrefix]
Source Trunk Group ID Defines the Trunk Group from where the Tel call is received.
src-trunk-group-id To denote any Trunk Group, leave this field empty. The value -1
Parameter Description
[_SrcTrunkGroupID] indicates that this field is ignored in the rule.
Note: The parameter is applicable only to the Redirect Number Tel-to-
IP table.
Source IP Address Defines the IP address of the caller. The IP address appears in the SIP
src-ip-address Contact header of the incoming INVITE message.
[_SourceAddress] The default value is the asterisk (*) symbol (i.e., any IP address). The
value can include the following wildcards:
"x": represents single digits, for example, 10.8.8.xx denotes all
addresses between 10.8.8.10 and 10.8.8.99.
"*": represents any number between 0 and 255, for example,
10.8.8.* denotes all addresses between 10.8.8.0 and 10.8.8.255.
Note: The parameter is applicable only to the Redirect Number IP-to-
Tel table.
Source Host Prefix Defines the URI host name prefix of the caller. The host name appears
src-host-prefix in the SIP From header of the incoming SIP INVITE message.
[_SrcHost] The default value is the asterisk (*) symbol (i.e., any host name prefix).
Note:
The parameter is applicable only to the Redirect Number IP-to-Tel
table.
If the P-Asserted-Identity header is present in the incoming INVITE
message, the value of the parameter is compared to the P-
Asserted-Identity URI host name (instead of to the From header).
Destination Host Prefix Defines the Request-URI host name prefix, which appears in the
dst-host-prefix incoming SIP INVITE message.
[_DestHost] The default value is the asterisk (*) symbol (i.e., any prefix).
Note: The parameter is applicable only to the Redirect Number IP-to-
Tel table.
Action
Stripped Digits From Left Defines the number of digits to remove from the left of the redirect
remove-from-left number prefix.
[_RemoveFromLeft] For example, if you enter 3 and the redirect number is 5551234, the
new number is 1234.
Stripped Digits From Right Defines the number of digits to remove from the right of the redirect
remove-from-right number prefix.
[_RemoveFromRight] For example, if you enter 3 and the redirect number is 5551234, the
new number is 5551.
Number of Digits to Leave Defines the number of digits that you want to retain from the right of the
num-of-digits-to-leave redirect number.
[_LeaveFromRight]
Prefix to Add Defines the number or string that you want added to the front of the
prefix-to-add redirect number.
[_Prefix2Add] For example, if you enter 9 and the redirect number is 1234, the new
number is 91234.
Suffix to Add Defines the number or string that you want added to the end of the
suffix-to-add redirect number.
[_Suffix2Add] For example, if you enter 00 and the redirect number is 1234, the new
number is 123400.
Parameter Description
Note: The feature is applicable only to Euro ISDN and QSIG variants in the IP-to-Tel
call direction.
The incoming redirection Facility message includes, among other parameters, the
Diverted-to number and Diverting number. The Diverted-to number (i.e., new destination) is
mapped to the user part in the Contact header of the SIP 302 response. The Diverting
number is mapped to the user part in the Diversion header of the SIP 302 response. These
two numbers can be manipulated by entering the following special strings in the
'Destination Prefix' field of the Redirect Number Tel-to-IP table:
"RN" - used in the rule to manipulate the Redirected number (i.e., originally called
number or Diverting number).
"DN" - used in the rule to manipulate the Diverted-to number (i.e., the new called
number or destination). This manipulation is done on the user part in the Contact
header of the SIP 302 response.
For example, assume the following required manipulation:
Manipulate Redirected number 6001 (originally called number) to 6005
Manipulate Diverted-to number 8002 (the new called number or destination) to 8005
The configuration in the Redirect Number Tel-to-IP table is as follows:
Table 25-6: Redirect Number Configuration Example
Destination Prefix RN DN
Redirect Prefix 6 8
Stripped Digits From Right 1 1
Suffix to Add 5 5
Number of Digits to Leave 5 -
After the above manipulation is done, the device sends the following outgoing SIP 302
response:
SIP/2.0 302 Moved Temporarily
Via: SIP/2.0/TLS 10.33.45.68;branch=z9hG4bKac54132643;alias
From: "MP118 1" <sip:8001@10.33.45.68>;tag=1c54119560
To: <sip:6001@10.33.45.69;user=phone>;tag=1c664560944
Call-ID: 541189832710201115142@10.33.45.68
CSeq: 1 INVITE
Contact: <sip:8005@10.33.45.68;user=phone>
Supported: em,timer,replaces,path,early-session,resource-priority
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUB
SCRIBE,UPDATE
Diversion: <tel:6005>;reason=unknown;counter=1
3. Configure a mapping rule according to the parameters described in the table below.
4. Click Apply.
Note:
• You can configure multiple rows with the same NPI/TON or same SIP 'phone-
context'. In such a configuration, a Tel-to-IP call uses the first matching rule in the
table.
• To add the incoming SIP 'phone-context' parameter as a prefix to the outgoing
ISDN Setup message with called and calling numbers, from the 'Add Phone
Context As Prefix' drop-down list (AddPhoneContextAsPrefix), select Enable.
Parameter Description
Note: For Tel-to-IP calls, you can also map less commonly used SIP responses to a
single, default ISDN release cause code, using the DefaultCauseMapISDN2IP
parameter. The parameter defines a default ISDN cause code that is always used,
except when the following Release Causes are received: Normal Call Clearing (16),
User Busy (17), No User Responding (18) or No Answer from User (19).
The following procedure describes how to configure SIP-to-ISDN release cause mapping
through the Web interface. You can also configure it through ini file (CauseMapSIP2ISDN)
or CLI (configure voip > gateway manipulation cause-map-sip2isdn).
3. Configure a mapping rule according to the parameters described in the table below.
4. Click Apply.
Table 25-8: Release Cause Mapping from SIP to ISDN Table Parameter Descriptions
Parameter Description
ISDN Release
SIP Response Description Description
Reason
ISDN Release
SIP Response Description Description
Reason
* Messages and responses were created because the ‘ISUP to SIP Mapping’ draft does
not specify their cause code mapping.
Note: You can change the originally received ISDN cause code to any other ISDN
cause code, using the Release Cause ISDN to ISDN table (see 'Configuring ISDN-to-
ISDN Release Cause Mapping' on page 561). If the originally received ISDN cause
code appears in both the Release Cause ISDN to ISDN table and the Release Cause
Mapping ISDN to SIP table, the mapping rule in the Release Cause Mapping ISDN to
SIP table is ignored. The device only uses a mapping rule that matches the new ISDN
cause code.
The following procedure describes how to configure ISDN-to-SIP release cause mapping
through the Web interface. You can also configure it through ini file (CauseMapISDN2SIP)
or CLI (configure voip > gateway manipulation cause-map-isdn2sip).
3. Configure a mapping rule according to the parameters described in the table below.
4. Click Apply.
Table 25-10: Release Cause Mapping from ISDN to SIP Table Parameter Descriptions
Parameter Description
Parameter Description
q850-causes Code 6 Channel Unacceptable.
[CauseMapIsdn2Sip_IsdnReleaseCause]
SIP Response Defines the SIP response code. For example, you can
sip-response enter "406" (without apostrophes) to represent the SIP
406 Not Acceptable response.
[CauseMapIsdn2Sip_SipResponse]
* Messages and responses were created because the ‘ISUP to SIP Mapping’ draft doesn’t
specify their cause code mapping.
Note: If the originally received ISDN cause code is configured in both the Release
Cause ISDN to ISDN table and the Release Cause Mapping ISDN to SIP table, the
mapping rule with the originally received code in the Release Cause Mapping ISDN to
SIP table is ignored; the device uses only the mapping rule in the Release Cause
Mapping ISDN to SIP table that matches the new ISDN cause code. For example, if
you configure a mapping rule in the Release Cause ISDN to ISDN table to change a
received 127 code to 16, the device searches for a rule in the Release Cause
Mapping ISDN to SIP table for an ISDN code of 16 (ignoring any entry with code
127).
The following procedure describes how to configure ISDN-to-ISDN release cause mapping
through the Web interface. You can also configure it through ini file (CauseMapIsdn2Isdn)
or CLI (configure voip > gateway manipulation cause-map-isdn2isdn).
3. Configure a mapping rule according to the parameters described in the table below.
4. Click Apply.
Table 25-12: Release Cause Mapping ISDN to ISDN Table Parameter Descriptions
Parameter Description
Parameter Description
The valid value (cause code) is 1 to 127.
Unknown [0] Unknown [0] A valid classification, but one that has no information
about the numbering plan.
E.164 Public Unknown [0] A public number in E.164 format, but no information
[1] on what kind of E.164 number.
International-Level2 Regional A public number in complete international E.164
[1] format, e.g., 16135551234.
National-Level1 Regional [2] A public number in complete national E.164 format,
e.g., 6135551234.
Network-PSTN Specific [3] The type of number "network specific number" is
used to indicate administration / service number
specific to the serving network, e.g., used to access
an operator.
Subscriber-Level0 Regional A public number in complete E.164 format
[4] representing a local subscriber, e.g., 5551234.
For NI-2 and DMS-100 ISDN variants, the valid combinations of TON and NPI for calling
and called numbers include (Plan/Type):
0/0 - Unknown/Unknown
1/1 - International number in ISDN/Telephony numbering plan
1/2 - National number in ISDN/Telephony numbering plan
1/4 - Subscriber (local) number in ISDN/Telephony numbering plan
9/4 - Subscriber (local) number in Private numbering plan
Notation Description
DigitMapping = 11xS|00[1-
7]xxx|8xxxxxxx|#xxxxxxx|*xx|91xxxxxxxxxx|9011x|xx.T
In the example, the rule "00[1-7]xxx" denotes dialed numbers that begin with 00, and then
any digit from 1 through 7, followed by three digits (of any number). Once the device
receives these digits, it does not wait for additional digits, but starts sending the collected
digits (dialed number) immediately.
Note:
• If you want the device to accept/dial any number, ensure that the digit map
contains the rule "xx.T"; otherwise, dialed numbers not defined in the digit map are
rejected.
• If you are using an external Dial Plan file for dialing plans (see 'Dialing Plans for
Digit Collection' on page 764), the device first attempts to locate a matching digit
pattern in the Dial Plan file, and if not found it searches for a matching digit pattern
in the Digit Map (configured by the DigitMapping parameter).
• It may be useful to configure both Dial Plan file and Digit Maps. For example, the
Digit Map can be used for complex digit patterns (which are not supported by the
Dial Plan) and the Dial Plan can be used for long lists of relatively simple digit
patterns. In addition, as timeout between digits is not supported by the Dial Plan,
the Digit Map can be used to define digit patterns (MaxDigits parameter) that are
shorter than those defined in the Dial Plan, or left at default. For example, “xx.T”
Digit Map instructs the device to use the Dial Plan and if no matching digit pattern,
it waits for two more digits and then after a timeout (TimeBetweenDigits
parameter), it sends the collected digits. Therefore, this ensures that calls are not
rejected as a result of their digit pattern not been completed in the Dial Plan.
Note: The feature is applicable only to the Euro ISDN variant (User side).
If the device receives from the IP side an INVITE message whose called party number (To
header) contains the asterisk (*) or pound (#) character, or a SIP NOTIFY or SIP INFO
message that contains these characters (e.g., 123#456), the device sends the character
and the digits positioned to its right, as Keypad IE in the INFORMATION message. The
device sends only the digits positioned before the character to the PSTN (in SETUP
message) as the called party number. For example, if the device receives the below
INVITE, it sends "123" to the PSTN as the called party number and #456 as Keypad IE in
the INFORMATION message:
INVITE sip:%7B54443994-BDFF-413C-AE4F-
D039B0FFB134%7D@192.168.100.214:5064;transport=tcp;rinstance=9f25c
4452eff4acb SIP/2.0
To: sip:123#456@192.168.100.214;user=phone;x-type=unknown;x-
plan=unknown;x-pres=allowed
The destination number can be manipulated when this feature is enabled. Note that if
manipulation before routing is required, the * and # characters should not be used, as the
device will handle them according to the above keypad protocol. For example, a
manipulation rule should not be configured to add #456 to the destination number. If
manipulation after routing is required, the destination number to be manipulated will not
include the keypad part. For example, if you configure a manipulation rule to add the suffix
888 and the received INVITE contains the number 123#456, only 123 is manipulated and
the number dialed toward the PSTN is 123888; #456 is sent as keypad.
To enable this feature, use the ISDNKeypadMode parameter.
c. Click Apply.
2. Configure the hook-flash transport type:
a. Open the DTMF & Dialing page (Setup menu > Signaling & Media tab >
Gateway folder > DTMF & Supplementary > DTMF & Dialing).
b. From the the 'Hook-Flash Option' (HookFlashOption) drop-down list, select the
required transport type.
Figure 26-2: Configuring Hook-Flash Transport
c. Click Apply.
Note:
• All call participants must support the specific supplementary service that is used.
• When working with certain application servers (such as BroadSoft’s BroadWorks)
in client server mode (the application server controls all supplementary services
and keypad features by itself), the device's supplementary services must be
disabled.
Note:
• When call forward is initiated, the device sends a SIP 302 response with a contact
that contains the phone number from the Call Forward table and its corresponding
IP address from the routing table (or when a proxy is used, the proxy’s IP
address).
• For receiving call forward, the device handles SIP 3xx responses for redirecting
calls with a new contact.
2. From the 'Enable Call Forward' drop-down list (EnableForward), select Enable.
3. Click Apply.
Note: For more information on configuring IP-based voice mail, refer to the IP Voice
Mail CPE Configuration Guide.
2. The device responds by sending an empty SIP NOTIFY to the softswitch, and
then sending an ISDN Setup message with Facility IE containing an MWI
Interrogation request to the PBX.
3. The PBX responds by sending to the device an ISDN Connect message
containing Facility IE with an MWI Interrogation result, which includes the number
of voice messages waiting for the specific user.
4. The device sends another SIP NOTIFY to the softswitch, containing this MWI
information.
5. The SIP NOTIFY messages are sent to the IP Group defined by the
NotificationIPGroupID parameter.
When a change in the status occurs (e.g., a new voice message is waiting or the user
has retrieved a message from the voice mail), the PBX initiates an ISDN Setup
message with Facility IE containing an MWI Activate request, which includes the new
number of voice messages waiting for the user. The device forwards this information
to the softswitch by sending a SIP NOTIFY.
Depending on PBX support, the MWIInterrogationType parameter can be configured
to handle these MWI Interrogation messages in different ways. For example, some
PBXs support only the MWI Activate request (and not MWI Interrogation request).
Some support both these requests. Therefore, the device can be configured to disable
this feature or enable it with one of the following support:
• Responds to MWI Activate requests from the PBX by sending SIP NOTIFY MWI
messages (i.e., does not send MWI Interrogation messages).
• Send MWI Interrogation message, but don't use its result. Instead, wait for MWI
Activate requests from the PBX.
• Send MWI Interrogation message, use its result, and use the MWI Activate
requests.
The following example demonstrates three-way conferencing using the device's local, on-
board conferencing feature. In the example, telephone "A" connected to the device
establishes a three-way conference call with two remote IP phones, "B" and "C":
1. A establishes a regular call with B.
2. A places B on hold, by pressing the telephone's flash-hook button and the number "1"
key.
3. A hears a dial tone and then makes a call to C.
4. C answers the call.
5. A establishes a three-way conference call with B and C, by pressing the flash-hook
button and the number "3" key.
• For specific calls: Open the Tel Profiles table (see Configuring Tel Profiles on
page 467), and then for the required Tel Profile, configure the 'Call Priority Mode'
drop-down list (TelProfile_CallPriorityMode) to Emergency.
2. (Optional) Configure emergency telephone numbers (e.g., 911). Open the Priority &
Emergency page (Setup menu > Signaling & Media tab > SIP Definitions folder >
Priority and Emergency), and then in the 'Emergency Number' fields
(EmergencyNumbers), configure the emergency numbers:
Figure 27-3: Emergency Numbers
The device identifies the IP-to-Tel call as an emergency call if the destination
number matches one of these configured emergency numbers. For E911, you
must configure the parameter to "911".
Note:
• The device also identifies emergency calls if the Priority header of the incoming
SIP INVITE message contains the “emergency” value.
• This feature is applicable to the following interfaces:
√ ISDN
√ CAS
• For Trunk Groups configured with call preemption, all must be configured to MLPP
[1] or all configured to Emergency [2]. In other words, you cannot set some trunks
to [1] and some to [2].
• The global parameter must be set to the same value as that of the Tel Profile
parameter; otherwise, the Tel Profile parameter is not applied.
• If you configure call preemption using the global parameter and a new Tel Profile
is subsequently added, the TelProfile_CallPriorityMode parameter automatically
acquires the same setting as well.
• For FXO interfaces, the preemption is done only on existing IP-to-Tel calls. In
other words, if all the current FXO channels are busy with calls that were
answered by the FXO device (i.e., Tel-to-IP calls), new incoming emergency IP-to-
Tel calls are rejected.
Note:
• MLPP is applicable only to ISDN PRI interfaces.
• The device provides MLPP interworking between SIP and ISDN (both directions).
• For Trunk Groups configured with call preemption, all must be configured to MLPP
[1] or all configured to Emergency [2]. In other words, you cannot set some trunks
to [1] and some to [2].
• The global parameter must be set to the same value as that of the Tel Profile
parameter; otherwise, the Tel Profile parameter is not applied.
• If you configure call preemption using the global parameter and a new Tel Profile
is subsequently added, the TelProfile_CallPriorityMode parameter automatically
acquires the same setting as well.
The Resource Priority value in the Resource-Priority SIP header can be any one of those
listed in the table below. A default MLPP call Precedence Level (configured by the
SIPDefaultCallPriority parameter) is used if the incoming SIP INVITE or ISDN Setup
message contains an invalid priority or Precedence Level value respectively. For each
MLPP call priority level, the Multiple Differentiated Services Code Points (DSCP) can be
set to a value from 0 to 63.
Table 27-1: MLPP Call Priority Levels (Precedence) and DSCP Configuration Parameters
8 flash-override MLPPFlashOverRTPDSCP
The device automatically interworks the network identity digits (NI) in the ISDN Q.931
Precedence Information Element (IE) to the network domain subfield of the INVITE's
Resource-Priority header, and vice versa. The SIP Resource-Priority header contains two
fields, namespace and priority. The namespace is subdivided into two subfields, network-
domain and precedence-domain. Below is an example of a Resource-Priority header
whose network-domain subfield is "uc", r-priority field is "priority" (2), and precedence-
domain subfield is "000000":
Resource-Priority: uc-000000.2
The MLPP Q.931 Setup message contains the Precedence IE. The NI digits are presented
by four nibbles found in octets 5 and 6. The device checks the NI digits according to the
translation table of the Department of Defense (DoD) Unified Capabilities (UC)
Requirements (UCR 2008, Changes 3) document, as shown below:
Table 27-2: NI Digits in ISDN Precedence
0000 uc
0001 cuc
0002 dod
0003 nato
Note:
• If the received ISDN message contains NI digits that are not listed in the
translation table, the device sets the network-domain to "uc" in the outgoing SIP
message.
• If the received SIP message contains a network-domain value that is not listed in
the translation table, the device sets the NI digits to "0000" in the outgoing ISDN
message.
• If the received ISDN message does not contain a Precedence IE, you can
configure the namespace value - dsn (default), dod, drsn, uc, or cuc - in the SIP
Resource-Priority header of the outgoing INVITE message. This is done using the
MLPPDefaultNamespace parameter. You can also configure up to 32 user-defined
namespaces, using the table ini file parameter, ResourcePriorityNetworkDomains.
Once defined, you need to set the MLPPDefaultNamespace parameter value to
the desired table row index.
By default, the device maps the received Resource-Priority field of the SIP Resource-
Priority header to the outgoing ISDN Precedence Level (priority level) field as follows:
If the network-domain field in the Resource-Priority header is "uc", then the device
sets the Precedence Level field in the ISDN Precedence Level IE according to Table
5.3.2.12-4 (Mapping of RPH r-priority Field to ISDN Precedence Level Value):
Table 27-3: Mapping of SIP Resource-Priority Header to ISDN Precedence Level for MLPP
MLPP Precedence Level ISDN Precedence Level SIP Resource-Priority Header Field
MLPP Precedence Level ISDN Precedence Level SIP Resource-Priority Header Field
Routine 4 0
Priority 3 2
Immediate 2 4
Flash 1 6
Flash Override 0 8
If the network-domain field in the Resource-Priority header is any value other than
"uc", then the device sets the Precedence Level field to "0 1 0 0" (i.e., "routine").
This can be modified using the EnableIp2TelInterworkingtable field of the ini file parameter,
ResourcePriorityNetworkDomains.
Note:
• If required, you can exclude the "resource-priority” tag from the SIP Require
header in INVITE messages for Tel-to-IP calls when MLPP priority call handling is
used. This is configured using the RPRequired parameter.
• For a complete list of the MLPP parameters, see 'MLPP and Emergency Call
Parameters' on page 1104.
Settings table, set the 'Channel Select Mode' field to Select Trunk by
Supplementary Services Table for the Trunk Group to which the port belongs (see
'Configuring Trunk Group Settings' on page 503).
Mapping local numbers (line extension number) with global phone numbers (E.164).
The endpoint can be configured with two numbers – local and global. The local
number represents the endpoint’s line extension number (e.g., PBX extension
number); the global number represents the corresponding E.164 number used for the
IP side in the SIP message:
• IP-to-Tel calls: Maps the called global number in the user part of the SIP
Request-URI in the incoming SIP message to the local number sent to the Tel
side. For example, the device receives an incoming IP call with a destination
(called) that is a global number 638002 and then sends the call to the Tel side
with the destination number manipulated to the corresponding local number of
402.
• Tel-to-IP Calls: Maps the calling (source) local number of the Tel side to the
global number sent to the IP side (in the From and To headers of the outgoing
SIP message). For example, if the device receives a Tel call from line extension
local number 402, it changes this calling number to 638002 and then sends the
call to the IP side with this calling number. This functionality in effect, validates
the calling number.
Note: If you have configured regular Tel-to-IP or IP-to-Tel manipulation rules (see
'Configuring Source/Destination Number Manipulation' on page 537), the device
applies them before applying the local-global mapping rules configured in the table.
The following procedure describes how to configure the Supplementary Services table
through the Web interface. You can also configure it through ini file (ISDNSuppServ) or CLI
(configure voip > gateway digital isdn-supp-serv).
Parameter Description
General
Parameter Description
Note: The feature is applicable only to the Euro ISDN protocol variant.
To configure AOC:
1. Make sure that the PSTN protocol for the trunk line is configured to Euro ISDN and
network side.
2. Make sure that the date and time of the device is correct. For accuracy, it is
recommended to use an NTP server to obtain the date and time. For more
information, see 'Date and Time' on page 125.
3. Configure the required AOC method:
• Device Generation of AOC to Tel:
a. Open the Supplementary Services page (Setup menu > Signaling & Media
tab > Gateway folder > DTMF & Supplementary > Supplementary
Services Settings), and then configure the 'Generate Metering Tones'
parameter (PayPhoneMeteringMode) to Charge Code Table.
Figure 27-4: Configuring Metering Tone Method
• AOC in IP-to-Tel Direction: Open the Supplementary Services page, and then
configure the 'Generate Metering Tones' parameter (PayPhoneMeteringMode) to
one of the following: SIP Interval Provided, SIP RAW Data Provided, SIP RAW
Data Incremental Provided, or SIP-to-Tel Interworking.
Note: The Charge Codes table is applicable only to Euro ISDN PRI interfaces.
The following procedure describes how to configure Charge Codes through the Web
interface. You can also configure it through ini file (ChargeCode) or CLI (configure voip >
gateway analog charge-code).
3. Configure a Charge Code according to the parameters described in the table below.
4. Click Apply.
Table 27-5: Charge Codes Table Parameter Descriptions
Parameter Description
Parameter Description
pulses-on-answer-<1-4> call answer.
[ChargeCode_PulsesOnAnswer<1-
4>]
The following procedure describes how to configure Character Conversion rules through
the Web interface. You can also configure it through ini file (CharConversion) or CLI
(configure voip > gateway dtmf-supp-service dtmf-and-dialing > char-conversion).
Parameter Description
28 SBC Overview
This section provides an overview of the device's SBC application.
Note:
• For guidelines on how to deploy your SBC device, refer to the SBC Design Guide
document.
• The SBC feature is available only if the device is installed with a License Key that
includes this feature. For installing a License Key, see 'License Key' on page 781.
• For the maximum number of supported SBC sessions, and SBC users than can
be registered in the device's registration database, see 'Technical Specifications'
on page 1211.
Note:
• The To-header tag remains the same for inbound and outbound legs of the dialog,
regardless of operation mode.
• If the Operation Mode of the SRD\IP Group of one leg of the dialog is set to 'Call
Stateful Proxy', the device also operates in this mode on the other leg with regards
to the dialog identifiers (Call-ID header, tags, CSeq header).
• It is recommended to implement the B2BUA mode, unless one of the reasons
mentioned previously is required. B2BUA supports all the device's feature-rich
offerings, while Stateful Proxy may offer only limited support. The following
features are not supported when in Stateful Proxy mode:
√ Alternative routing
√ Call forking
√ Terminating REFER/3xx
• If Stateful Proxy mode is enabled and any one of the unsupported features is
enabled, the device disables the Stateful Proxy mode and operates in B2BUA
mode.
• You can configure the device to operate in both B2BUA and Stateful Proxy modes
for the same users. This is typically implemented when users need to
communicate with different SIP entities (IP Groups). For example, B2BUA mode
for calls destined to a SIP Trunk and Stateful Proxy mode for calls destined to an
IP PBX. The configuration is done using IP Groups and SRDs.
• If Stateful Proxy mode is used only due to the debugging benefits, it is
recommended to configure the device to only forward the Call-ID header
unchanged
Note: You can specify the SIP header from where you want the device to obtain the
source URL in the incoming dialog request. This is configured in the IP Groups table
using the 'Source URI Input' parameter (see 'Configuring IP Groups' on page 359).
2. Determining SIP Interface: The device checks the SIP Interface on which the SIP
dialog is received. The SIP Interface defines the local SIP "listening" port and IP
network interface. For more information, see 'Configuring SIP Interfaces' on page 351.
3. Applying SIP Message Manipulation: Depending on configuration, the device can
apply a SIP message manipulation rule (assigned to the SIP Interface) on the
incoming SIP message. A SIP Message Manipulation rule defines a matching
characteristics (condition) of the incoming SIP message and the corresponding
manipulation operation (e.g., remove the P-Asserted-Identity header), which can apply
to almost any aspect of the message (add, remove or modify SIP headers and
parameters). For more information, see 'Configuring SIP Message Manipulation' on
page 409.
4. Classifying to an IP Group: Classification identifies the incoming SIP dialog request
as belonging to a specific IP Group (i.e., from where the SIP dialog request
originated). The classification process is based on the SRD to which the dialog
belongs (the SRD is determined according to the SIP Interface). For more information,
see 'Configuring Classification Rules' on page 627.
5. Applying Inbound Manipulation: Depending on configuration, the device can apply
an Inbound Manipulation rule to the incoming dialog. This manipulates the user part of
the SIP URI for source (e.g., in the SIP From header) and destination (e.g., in the
Request-URI line). The manipulation rule is associated with the incoming dialog, by
configuring the rule with incoming matching characteristics such as source IP Group
and destination host name. The manipulation rules are also assigned a Routing
Policy, which in turn, is assigned to IP-to-IP routing rules. As most deployments
require only one Routing Policy, the default Routing Policy is automatically assigned to
manipulation and routing rules. For more information, see 'Configuring IP-to-IP
Inbound Manipulations' on page 667.
6. SBC IP-to-IP Routing: The device searches the IP-to-IP Routing table for a routing
rule that matches the characteristics of the incoming call. If found, the device routes
the call to the configured destination which can be, for example, an IP Group, the
Request-URI if the user is registered with the device, and a specified IP address. For
more information, see 'Configuring SBC IP-to-IP Routing Rules' on page 635.
7. Applying Inbound SIP Message Manipulation: Depending on configuration, the
device can apply a SIP message manipulation rule (assigned to the IP Group) on the
incoming dialog. For more information, see Stage 3.
8. Applying Outbound Manipulation: Depending on configuration, the device can
apply an Outbound Manipulation rule to the outbound dialog. This manipulates the
user part of the Request-URI for source (e.g., in the SIP From header) or destination
(e.g., in the SIP To header) or calling name in the outbound SIP dialog. The
manipulation rule is associated with the dialog, by configuring the rule with incoming
matching characteristics such as source IP Group and destination host name. The
manipulation rules are also assigned a Routing Policy, which in turn, is assigned to IP-
to-IP routing rules. As most deployments require only one Routing Policy, the default
Routing Policy is automatically assigned to manipulation rules and routing rules. For
more information, see 'Configuring IP-to-IP Outbound Manipulations' on page 671.
9. Applying Outbound SIP Message Manipulation: Depending on configuration, the
device can apply a SIP message manipulation rule (assigned to the IP Group) on the
outbound dialog. For more information, see Stage 3.
10. The call is sent to the configured destination.
between an AOR (obtained from the SIP To header), optional additional AORs, and one or
more contacts (obtained from the SIP Contact headers). Database bindings are added
upon successful registration responses from the proxy server (SIP 200 OK). The device
removes database bindings in the following cases:
Successful de-registration responses (REGISTER with Expires header that equals
zero).
Registration failure responses.
Timeout of the Expires header value (in scenarios where the UA did not send a
refresh registration request).
Note:
• The same contact cannot belong to more than one AOR.
• Contacts with identical URIs and different ports and transport types are not
supported (same key is created).
• Multiple contacts in a single REGISTER message is not supported.
• One database is shared between all User-type IP Groups.
When an incoming INVITE is received for routing to a user and the user is located in the
registration database, the device sends the call to the user's corresponding contact
address specified in the database.
Note: If the Request-URI contains the "tel:" URI or "user=phone" parameter, the
device searches only for the user part.
user from the database only when this additional time expires.
The graceful period is also used before removing a user from the registration
database when the device receives a successful unregister response (200 OK) from
the registrar/proxy server. This is useful in scenarios, for example, in which users (SIP
user agents) such as IP Phones erroneously send unregister requests. Instead of
immediately removing the user from the registration database upon receipt of a
successful unregister response, the device waits until it receives a successful
unregister response from the registrar server, waits the user-defined graceful time and
if no register refresh request is received from the user agent, removes the contact (or
AOR) from the database.
The device keeps registered users in its' registration database even if connectivity with the
proxy is lost (i.e., proxy does not respond to users' registration refresh requests). The
device removes users from the database only when their registration expiry time is reached
(with the additional grace period, if configured).
Media coders (coders and their characteristics used in each media flow)
Other (standard or proprietary) media and session characteristics
Typically, the device does not change the negotiated media capabilities (mainly performed
by the remote user agents). However, it does examine and may take an active role in the
SDP offer-answer mechanism. This is done mainly to anchor the media to the device
(default) and also to change the negotiated media type, if configured. Some of the media
handling features, which are described later in this section, include the following:
Media anchoring (default)
Direct media
Audio coders restrictions
Early media and ringback tone handling
Call hold translations and held tone generation
NAT traversal
RTP broken connections
Media firewall
• RTP pin holes - only RTP packets related to a successful offer-answer
negotiation traverse the device: When the device initializes, there are no RTP pin
holes opened. This means that each RTP\RTCP packets destined to the device
are discarded. Once an offer-answer transaction ends successfully, an RTP pin
hole is opened and RTP\RTCP flows between the two remote user agents. Once
a pin hole is opened, the payload type and RTP header version is validated for
each packet. RTP pin holes close if one of the associated SIP dialogs is closed
(may also be due to broken connection).
• Late rogue detection - once a dialog is disconnected, the related pin holes also
disconnect.
• Deep Packet inspection of the RTP that flows through the opened pin holes.
The device uses different local ports (e.g., for RTP, RTCP and fax) for each leg (inbound
and outbound). The local ports are allocated from the Media Realm associated with each
leg. The Media Realm assigned to the leg's IP Group (in the IP Groups table) is used. If not
assigned to the IP Group, the Media Realm assigned to the leg's SIP Interface (in the SIP
Interfaces table) is used. The following figure provides an example of SDP handling for a
call between a LAN IP Phone 10.2.2.6 and a remote IP Phone 212.179.1.13 on the WAN.
Figure 28-3: SDP Offer/Answer Example
Direct media is typically implemented for calls between users located in the same LAN or
domain, and where NAT traversal is not required and other media handling features such
as media transcoding is not required. The following figure provides an example of direct
media between LAN IP phones, while SIP signaling continues to traverse the device
between LAN IP phones and the hosted WAN IP-PBX.
Figure 28-4: Direct Media where only Signaling Traverses Device
Note:
• If you enable direct media by the SBCDirectMedia parameter, direct media is
applied to all calls even if direct media is disabled per SIP Interface.
• If you configure direct media for all calls (using the SBCDirectMedia parameter),
the device does not open voice channels nor allocate media ports for the calls, as
the media always bypasses the device. In contrast, if you configure direct media
for specific calls, the device allocates ports for these calls. The reason is that the
ports may be required for mid-call services (e.g., early media, call forwarding, call
transfer, and playing on-hold tones) handled by the server (IP PBX), which
traverse the device. Therefore, make sure that you have allocated sufficient media
ports (Media Realm) for such calls.
• Direct media cannot operate with the following features:
√ Manipulation of SDP data (offer-answer transaction) such as ports, IP address,
coders
√ Extension of RFC 2833 / out-of-band DTMF / in-band DTMF
√ Extension of SRTP/RTP
• All restriction features (Allowed Coders, restrict SRTP/RTP, restrict RFC 2833)
can operate with direct media. Restricted coders are removed from the SDP offer
message.
• For two users belonging to the same SIP Interface that is enabled for direct media
and one of the users is defined as a foreign user (example, “follow me service”)
located in the WAN while the other is located in the LAN: calls between these two
users cannot be established until direct media is disabled for the SIP Interface.
The reason for this is that the device does not interfere in the SIP signaling. In
other words, parameters such as IP addresses are not manipulated for calls
between LAN and WAN (although required).
The allowed coders are configured in the Allowed Audio Coders Groups table. For more
information, see 'Configuring Allowed Audio Coder Groups' on page 428.
The device transparently forwards Binary Floor Control Protocol (BFCP) signaling over
UDP between IP entities (RFC 4582). BFCP is a signaling protocol used by some third-
party conferencing servers to share content (such as video conferencing, presentations or
documents) between conference participants (SIP clients supporting BFCP). The SDP
offer/answer exchange model is used to establish (negotiate) BFCP streams between
clients. The BFCP stream is identified in the SDP as 'm=application <port> UDP/BFCP' and
a dedicated UDP port is used for the BFCP streams.
3. Click Apply.
User Information for SBC User Database' on page 776). If the client is not
successfully authenticated after three attempts, the device sends a SIP 403
(Forbidden) response to the client. If the user is successfully identified, the
device accepts the SIP message request.
The device's Authentication server functionality is configured per IP Group, using the
'Authentication Mode' parameter in the IP Groups table (see 'Configuring IP Groups' on
page 359).
2. The device replaces the Contact header value with the special prefix and database
key value as user part, and with the device's URL as host part (e.g., Contact:
<sip:Prefix_Key_User@SBC:5070;transport=udp>;q=0.5).
3. The device sends this manipulated SIP 3xx response to the Far-End User (FEU).
4. The FEU sends a new request with the Request-URI set to the value of the received
3xx response's Contact header (e.g., RequestURI:
sip:Prefix_Key_User@SBC:5070;transport=udp).
5. Upon receipt of the new request from the FEU, the device replaces the Request-URI
with the new destination address (e.g., RequestURI:
sip:Prefix_User@IPPBX:5070;transport=tcp;param=a).
6. The device removes the user prefix from the Request-URI, and then sends this
Request-URI to the new destination (e.g., RequestURI:
sip:User@IPPBX:5070;transport=tcp;param=a).
The device refers to the parameter also for features that require early media such as
playing ringback tone.
Early Media Response Type: The device supports the interworking of different SIP
provisional response types between UAs for forwarding the early media to the caller.
This can support all early media response types (default), SIP 180 only, or SIP 183
only, and is configured by the IP Profile parameter, 'SBC Remote Early Media
Response Type'.
Multiple 18x: The device supports the interworking of different support for multiple
18x responses (including 180 Ringing, 181 Call is Being Forwarded, 182 Call Queued,
and 183 Session Progress) that are forwarded to the caller. The UA can be configured
as supporting only receipt of the first 18x response (i.e., the device forwards only this
response to the caller), or receipt of multiple 18x responses (default). This is
configured by the IP Profile parameter, 'SBC Remote Multiple 18x Support'.
Early Media RTP: The device supports the interworking with remote clients that send
18x responses with early media and whose subsequent RTP is delayed, and with
remote clients that do not support this and require RTP to immediately follow the 18x
response. Some clients do not support 18x with early media, while others require 18x
with early media (i.e., they cannot play ringback tone locally). These various
interworking capabilities are configured by the IP Profile parameters, 'Remote Early
Media RTP Detection Mode', 'SBC Remote Supports RFC 3960', and 'SBC Remote
Can Play Ringback'. See the flowcharts below for the device's handling of such
scenarios:
Figure 28-7: SBC Early Media RTP 18x without SDP
to IP Groups that do not support it. Instead, it sends a SIP response to the UPDATE
request which can either be a success or a failure, depending on whether the device can
bridge the media between the endpoints. The handling of UPDATE messages is configured
by the IP Profile parameter 'SBC Remote Update Support'.
Note:
• To support the feature, the License Key installed on your device must include the
"TDMtoSBC" feature key; otherwise, to purchase the feature, contact your
AudioCodes sales representative to upgrade your License Key.
• The maximum number of SBC sessions that can be supported is according to the
device's maximum SBC capacity (see 'Channel Capacity' on page 1209).
Note: The SBC feature is available only if the device is installed with a License Key
that includes this feature. For installing a License Key, see 'License Key' on page 781.
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
remote-tag="CCDORRTDRKIKWFVBRWYM" direction="initiator">
<state event="replaced">terminated</state>
</dialog>
<dialog id="sfhjsjk12" call-id="67402270@10.132.10.150"
local-tag="1c137249965"
remote-tag="CCDORRTDRKIKWFVBRWYM" direction="receiver">
<state reason="replaced">confirmed</state>
<replaces
call-id="67402270@10.132.10.150"
local-tag="1c137249965"
remote-tag="CCDORRTDRKIKWFVBRWYM"/>
<referred-by>
sip:bob-is-not-here@vm.example.net
</referred-by>
<local>
<identity display="Jason Forster">
sip:jforsters@home.net
</identity>
<target uri="sip:alice@pc33.example.com">
<param pname="+sip.rendering" pval="yes"/>
</target>
</local>
<remote>
<identity display="Cathy Jones">
sip:cjones@example.net
</identity>
<target uri="sip:line3@host3.example.net">
<param pname="actor" pval="attendant"/>
<param pname="automaton" pval="false"/>
</target>
</remote>
</dialog>
</dialog-info>
routing rule exists, the device rejects the SIP request with a SIP 480 "Temporarily
Unavailable" response.
Note: The device applies the CAC rule for the incoming leg immediately after the
Classification process. If the call/request is rejected at this stage, no routing is
performed. The enforcement for the outgoing leg is performed within each alternative
route iteration. This is accessed from two places: one during initial
classification/routing, and another during alternative routing process.
The following procedure describes how to configure CAC rules through the Web interface.
You can also configure it through ini file (SBCAdmissionControl) or CLI (configure voip >
sbc sbc-admission-control).
Parameter Description
Parameter Description
Parameter Description
capacity (limit) configured for the CAC rule (see the 'Limit'
parameter below).
The total reserved call capacity configured for all CAC rules
must be within the device's total call capacity support.
Limit Defines the maximum number of concurrent SIP dialogs per IP
limit Group, SIP Interface or SRD. You can also use the following
special values:
[SBCAdmissionControl_Limit]
[0] 0 = Block all these dialogs.
[-1] -1 = (Default) Unlimited.
Limit Per User Defines the maximum number of concurrent SIP dialogs per
limit-per-user user belonging to the specified IP Group, SIP Interface or SRD.
You can also use the following special values:
[SBCAdmissionControl_LimitPerUs
er] [-1] -1 = (Default) Unlimited.
[0] 0 = Block all these dialogs.
Rate Defines the maximum number of SIP dialogs per IP Group, SIP
rate Interface or SRD that can be handled per second.
[SBCAdmissionControl_Rate] The default is 0 (i.e., unlimited rate).
Note:
You must first configure the 'Maximum Burst' parameter (see
below) before configuring the 'Rate' parameter.
The token bucket feature is per IP Group, SIP Interface,
SRD, SIP request type, and SIP request direction.
Maximum Burst Defines the maximum number of tokens (SIP dialogs) that the
max-burst bucket can hold. The device only accepts a SIP dialog if a token
exists in the bucket. Once the SIP dialog is accepted, a token is
[SBCAdmissionControl_MaxBurst]
removed from the bucket. If a SIP dialog is received by the
device and the token bucket is empty, the device rejects the SIP
dialog. Alternatively, if the bucket is full, for example, 100
tokens, and 101 SIP dialogs arrive (before another token is
added to the bucket, i.e., faster than that configured in the 'Rate'
field), the device accepts the first 100 SIP dialogs and rejects
the last one.
The device sends a SIP 480 “Temporarily Unavailable”
response when it rejects requests. Dropped requests are not
counted in the bucket.
The default is 0 (i.e., unlimited SIP dialogs).
Note: The token bucket feature is per IP Group, SIP Interface,
SRD, SIP request type, and SIP request direction.
33 Routing SBC
This section describes the configuration of the call routing entities for the SBC application.
Note: Configure stricter classification rules higher up in the table than less strict rules
to ensure incoming dialogs are classified to the desired IP Group. Strict refers to the
number of matching characteristics configured for the rule. For example, a rule
configured with source host name and destination host name as matching
characteristics is stricter than a rule configured with only source host name. If the rule
configured with only source host name appears higher up in the table, the device
("erroneously") uses the rule to classify incoming dialogs matching this source host
name (even if they also match the rule appearing lower down in the table configured
with the destination host name as well).
If the device doesn't find a matching rule (i.e., classification fails), the device rejects or
allows the call depending on the following configuration:
2. From the 'Unclassified Calls' drop-down list, select Reject to reject unclassified calls
or Allow to accept unclassified calls:
Figure 33-1: Configuring Action for Classification Failure
3. Click Apply.
If you configure the parameter to Allow, the incoming SIP dialog is assigned to an IP
Group as follows:
1. The device determines on which SIP listening port (e.g., 5061) the incoming SIP
dialog request was received and the SIP Interface configured with this port (in the SIP
Interfaces table).
2. The device determines the SRD associated with this SIP Interface (in the SIP
Interfaces table) and then classifies the SIP dialog to the first IP Group in the IP
Groups table that is associated with the SRD. For example, if IP Groups 3 and 4
belong to the same SRD, the device classifies the call to IP Group 3.
Note: If classification of a SIP request fails and you configure the device to reject
unclassified calls, the device can send a specific SIP response code per SIP
Interface. To configure this, use the 'Classification Failure Response Type' parameter
in the SIP Interfaces table (see 'Configuring SIP Interfaces' on page 351).
The Classification table is used to classify incoming SIP dialog requests only if the
following classification stages fail:
1. Classification Stage 1 - Based on User Registration Database: The device
searches its users registration database to check whether the incoming SIP dialog
arrived from a registered user. The device searches the database for a user that
matches the address-of-record (AOR) and Contact of the incoming SIP message:
• Compares the SIP Contact header to the contact value in the database.
• Compares the URL in the SIP P-Asserted-Identity/From header to the registered
AOR in the database.
If the device finds a matching registered user, it classifies the user to the IP Group
associated with the user in the database. If this classification stage fails, the device
proceeds to classification based on Proxy Set.
2. Classification Stage 2 - Based on Proxy Set: If the database search fails, the
device performs classification based on Proxy Set. This classification is applicable
only to Server-type IP Groups and is done only if classification based on Proxy Set is
enabled (see the 'Classify By Proxy Set' parameter in the IP Groups table in
'Configuring IP Groups' on page 359). The device checks whether the incoming
INVITE's IP address (if host name, then according to the dynamically resolved IP
address list) is configured for a Proxy Set (in the Proxy Sets table). If such a Proxy Set
exists, the device classifies the INVITE to the IP Group that is associated with the
Proxy Set. The Proxy Set is assigned to the IP Group in the IP Groups table.
If more than one Proxy Set is configured with the same IP address and associated
with the same SIP Interface, the device may classify and route the SIP dialog to an
incorrect IP Group. In such a scenario, a warning is generated in the Syslog message.
However, if some Proxy Sets are configured with the same IP address but different
ports (e.g., 10.1.1.1:5060 and 10.1.1.1:5070) and the 'Classification Input' parameter
is configured to IP Address, Port & Transport Type, classification (based on IP
address and port combination) to the correct IP Group is achieved. Therefore, when
classification is by Proxy Set, pay attention to the configured IP addresses and the
'Classification Input' parameter of your Proxy Sets. When more than one Proxy Set is
configured with the same IP address, the device selects the matching Proxy Set in the
following precedence order:
a. Selects the Proxy Set whose IP address, port, and transport type match the
source of the incoming dialog.
b. If no match is found for a), it selects the Proxy Set whose IP address and
transport type match the source of the incoming dialog (if the 'Classification Input'
parameter is configured to IP Address Only).
c. If no match is found for b), it selects the Proxy Set whose IP address match the
source of the incoming dialog (if the 'Classification Input' parameter is configured
to IP Address Only).
If classification based on Proxy Set fails (or classification based on Proxy Set is
disabled), the device proceeds to classification based on the Classification table.
Note:
• For security, it is recommended to classify SIP dialogs based on Proxy Set only if
the IP address of the Server-type IP Group is unknown. In other words, if the
Proxy Set associated with the IP Group is configured with an FQDN. In such
cases, the device classifies incoming SIP dialogs to the IP Group based on the
DNS-resolved IP address. If the IP address is known, it is recommended to use a
Classification rule instead (and disable the Classify by Proxy Set feature), where
the rule is configured with not only the IP address, but also with SIP message
characteristics to increase the strictness of the classification process. The reason
for preferring classification based on Proxy Set when the IP address is unknown is
that IP address forgery (commonly known as IP spoofing) is more difficult than
malicious SIP message tampering and therefore, using a Classification rule
without an IP address offers a weaker form of security. When classification is
based on Proxy Set, the Classification table for the specific IP Group is ignored.
• If multiple IP Groups are associated with the same Proxy Set, use Classification
rules to classify the incoming dialogs to the IP Groups (do not use the Classify by
Proxy Set feature).
• The device saves incoming SIP REGISTER messages in its registration database.
If the REGISTER message is received from a User-type IP Group, the device
sends the message to the configured destination.
The following procedure describes how to configure Classification rules through the Web
interface. You can also configure it through ini file (Classification) or CLI (configure voip >
sbc classification).
3. Configure the Classification rule according to the parameters described in the table
below.
4. Click Apply.
Table 33-1: Classification Table Parameter Descriptions
Parameter Description
Parameter Description
[Classification_SrcSIPInterface The default is Any (i.e., all SIP Interfaces belonging to the SRD
Name] assigned to the rule).
Note: The SIP Interface must belong to the SRD assigned to the
rule (see the 'SRD' parameter in the table).
Source IP Address Defines a source IP address as a matching characteristic for the
src-ip-address incoming SIP dialog.
[Classification_SrcAddress] The valid value is an IP address in dotted-decimal notation. In
addition, the following wildcards can be used:
"x" wildcard: represents single digits. For example, 10.8.8.xx
represents all addresses between 10.8.8.10 and 10.8.8.99.
Asterisk (*) wildcard: represents any number between 0 and
255. For example, 10.8.8.* represents all addresses between
10.8.8.0 and 10.8.8.255.
By default, no value is defined (i.e., any source IP address is
accepted).
Note:
The parameter is applicable only to Server-type IP Groups.
If the IP address is unknown (i.e., configured for the associated
Proxy Set as an FQDN), it is recommended to classify incoming
dialogs based on Proxy Set (instead of using a Classification
rule). For more information on classification by Proxy Set or by
Classification rule, see the note bulletin in the beginning of this
section.
Source Transport Type Defines the source transport type as a matching characteristic for
src-transport-type the incoming SIP dialog.
[Classification_SrcTransportTyp [-1] Any = (Default) All transport types
e] [0] UDP
[1] TCP
[2] TLS
Source Port Defines the source port number as a matching characteristic for the
src-port incoming SIP dialog.
[Classification_SrcPort] By default, no value is defined.
Source Username Prefix Defines the prefix of the source URI user part as a matching
src-user-name-prefix characteristic for the incoming SIP dialog.
[Classification_SrcUsernamePr The URI is typically located in the SIP From header. However, you
efix] can configure the SIP header from where the device obtains the
source URI, in the IP Groups table ('Source URI Input' parameter).
For more information on how the device obtains the URI, see 'SIP
Dialog Initiation Process' on page 595.
The default is the asterisk (*) symbol, which represents any source
username prefix. The prefix can be a single digit or a range of
digits. For available notations, see 'Dialing Plan Notation for
Routing and Manipulation' on page 967.
Note: For REGISTER requests, the source URI is obtained from
the To header.
Source Host Defines the prefix of the source URI host name as a matching
src-host characteristic for the incoming SIP dialog.
[Classification_SrcHost] The URI is typically located in the SIP From header. However, you
can configure the SIP header from where the device obtains the
Parameter Description
source URI, in the IP Groups table ('Source URI Input' parameter).
For more information on how the device obtains this URI, see 'Call
Processing of SIP Dialog Requests' on page 595.
The default is the asterisk (*) symbol, which represents any source
host prefix.
Note: For REGISTER requests, the source URI is obtained from
the To header.
Destination Username Prefix Defines the prefix of the destination Request-URI user part as a
dst-user-name-prefix matching characteristic for the incoming SIP dialog.
[Classification_DestUsernameP The default is the asterisk (*) symbol, which represents any
refix] destination username. The prefix can be a single digit or a range of
digits. For available notations, see 'Dialing Plan Notation for
Routing and Manipulation' on page 967.
Destination Host Defines the prefix of the destination Request-URI host name as a
dst-host matching characteristic for the incoming SIP dialog.
[Classification_DestHost] The default is the asterisk (*) symbol, which represents any
destination host prefix.
Message Condition Assigns a Message Condition rule to the Classification rule as a
message-condition-name matching characteristic for the incoming SIP dialog.
[Classification_MessageConditi By default, no value is defined.
onName] To configure Message Condition rules, see 'Configuring Message
Condition Rules' on page 415.
Action
Action Type Defines a whitelist or blacklist for the matched incoming SIP dialog.
action-type [0] Deny = Blocks incoming SIP dialogs that match the
[Classification_ActionType] characteristics of the rule (blacklist).
[1] Allow = (Default) Allows incoming SIP dialogs that match the
characteristics of the rule (whitelist) and assigns it to the
associated IP Group.
Destination Routing Policy Assigns a Routing Policy to the matched incoming SIP dialog.
dest-routing-policy The assigned Routing Policy overrides the Routing Policy assigned
[Classification_DestRoutingPoli to the SRD (in the SRDs table). The option to assign Routing
cy] Policies to Classification rules is useful in deployments requiring
different routing and manipulation rules for specific calls pertaining
to the same SRD. In such scenarios, you need to configure
multiple Classification rules for the same SRD, where for some
rules no Routing Policy is assigned (i.e., the SRD's assigned
Routing Policy is used) while for others a different Routing Policy is
specified to override the SRD's assigned Routing Policy.
By default, no value is defined.
To configure Routing Policies, see 'Configuring SBC Routing Policy
Rules' on page 656.
Source IP Group Assigns an IP Group to the matched incoming SIP dialog.
src-ip-group-name By default, no value is defined.
[Classification_SrcIPGroupNam To configure IP Groups, see 'Configuring IP Groups' on page 359.
e] Note: The IP Group must be associated with the assigned SRD
(see the 'SRD' parameter in the table).
Parameter Description
In the example, a match exists only for Classification Rule #1. This is because the source
(1111) and destination (2000) username prefixes match those in the INVITE's P-Called-
Party-ID header (i..e., "<sip:1111@10.33.38.1>") and Route header (i.e.,
"<sip:2000@10.10.10.10.10>"), respectively. These SIP headers were determined in IP
Group 2.
Note: Configure stricter rules higher up in the table than less strict rules to ensure the
desired rule is used to route the call. Strict refers to the number of matching
characteristics configured for the rule. For example, a rule configured with source host
name and source IP Group as matching characteristics is stricter than a rule
configured with only source host name. If the rule configured with only source host
name appears higher up in the table, the device ("erroneously") uses the rule to route
calls matching this source host name (even if they also match the rule appearing
lower down in the table configured with the source IP Group as well).
You can route incoming SIP dialog messages (e.g., INVITE) to any of the following IP
destinations:
According to registered user Contact listed in the device's registration database (only
for User-type IP Groups).
IP Group - the destination is the address configured for the Proxy Set associated with
the IP Group.
IP Group Set - the destination can be based on multiple IP Groups for load balancing,
where each call may be sent to a different IP Group within the IP Group Set
depending on the IP Group Set's definition.
Routing tag - the device sends the call to an IP Group (or IP Group Set) based on a
destination Dial Plan tag that corresponds to the destination (called) prefix number.
IP address in dotted-decimal notation or FQDN. Routing to a host name can be
resolved using NAPTR/SRV/A-Record.
Request-URI of incoming SIP dialog-initiating requests.
Any registered user in the registration database. If the Request-URI of the incoming
INVITE exists in the database, the call is sent to the corresponding contact address
specified in the database.
According to result of an ENUM query.
Hunt Group - used for call survivability of call centers (see 'Configuring Call
Survivability for Call Centers' on page 709).
According to result of LDAP query (for more information on LDAP-based routing, see
'Routing Based on LDAP Active Directory Queries' on page 246).
Third-party routing server, which determines the destination (next hop) of the call (IP
Group). The IP Group represents the next device in the routing path to the final
destination. For more information, see 'Centralized Third-Party Routing Server' on
page 287.
Tel destination (i.e., Gateway call). The rule redirects the call to the IP-to-Tel Routing
table where the device searches for a matching IP-to-Tel routing rule. This feature can
also be done for alternative routing. If an IP-to-IP routing rule fails and it is configured
with a "Gateway" routing rule as an alternative route, the device uses the IP-to-Tel
Routing table to send the call to the Tel. The device identifies (internally) calls re-
directed for alternative Gateway routing, by appending a user-defined string to the
prefix destination Request-URI user part (by default, "acgateway-<prefix destination>",
for example, acgateway-200). The device removes this prefix before sending it to the
Tel side. To configure this prefix string, use the GWDirectRoutePrefix ini file
parameter.
Back to the sender of the incoming message, where the reply can be a SIP response
code or a 3xx redirect response (with an optional Contact field to where the sender
must re-send the message).
The following figure summarizes the destination types:
To configure and apply an IP-to-IP Routing rule, the rule must be associated with a Routing
Policy. The Routing Policy associates the routing rule with an SRD(s). Therefore, the
Routing Policy lets you configure routing rules for calls belonging to specific SRD(s).
However, as multiple Routing Policies are relevant only for multi-tenant deployments (if
needed), for most deployments, only a single Routing Policy is required. As the device
provides a default Routing Policy ("Default_SBCRoutingPolicy"), when only one Routing
Policy is required, the device automatically assigns the default Routing Policy to the routing
rule. If you are implementing LDAP-based routing (with or without Call Setup Rules) and/or
Least Cost Routing (LCR), you need to configure these settings for the Routing Policy
(regardless of the number of Routing Policies employed). For more information on Routing
Policies, see 'Configuring SBC Routing Policy Rules' on page 656.
The IP-to-IP Routing table also provides the following features:
Alternative Routing: In addition to the alternative routing/load balancing provided by
the Proxy Set associated with the destination IP Group, the table allows the
configuration of alternative routes whereby if a route fails, the next adjacent (below)
rule in the table that is configured as 'Alt Route Ignore/Consider Inputs' are used. The
alternative routes rules can be set to enforce the input matching criteria or to ignore
any matching criteria. Alternative routing occurs upon one of the following conditions:
• A request sent by the device is responded with one of the following:
♦ SIP response code (i.e., 4xx, 5xx, and 6xx SIP responses) configured in the
Alternative Routing Reasons table (see 'Configuring SIP Response Codes
for Alternative Routing Reasons' on page 654).
♦ SIP 408 Timeout or no response (after timeout).
• The DNS resolution includes IP addresses that the device has yet to try (for the
current call).
Messages are re-routed with the same SIP Call-ID and CSeq header fields (increased
by 1).
Note: If the Proxy Set (see Configuring Proxy Sets on page 375) associated with the
destination of the call is configured with multiple IP addresses, the device first
attempts to route the call to one of these IP addresses, starting with the first listed
address. Only when the call cannot be routed to any of the Proxy Set’s IP addresses
does the device search the IP-to-IP Routing table for an alternative routing rule for the
call.
Load Balancing: You can implement load balancing of calls, belonging to the same
source, between a set of destination IP Groups known as an IP Group Set. The IP
Group Set can include up to five IP Groups (Server-type and/or Gateway-type only)
and the chosen IP Group depends on the configured load-balancing policy (e.g.,
Round Robin). To configure the feature, you need to first configure an IP Group Set
(see Configuring IP Group Sets on page 660), and then assign it to a routing rule with
'Destination Type' configured to IP Group Set.
Re-routing of SIP Requests: This table enables you to configure "re-routing" rules of
requests (e.g., INVITEs) that the device sends upon receipt of SIP 3xx responses or
REFER messages. These rules are configured for destinations that do not support
receipt of 3xx or REFER and where the device handles the requests locally (instead of
forwarding the 3xx or REFER to the destination).
Least Cost Routing (LCR): If the LCR feature is enabled, the device searches the
routing table for matching routing rules and then selects the one with the lowest call
cost. The call cost of the routing rule is done by assigning it a Cost Group. To
configure Cost Groups, see 'Least Cost Routing' on page 274. If two routing rules
have identical costs, then the rule appearing higher up in the table (i.e., first-matched
rule) is used. If a selected route is unavailable, the device uses the next least-cost
routing rule. However, even if a matched rule is not assigned a Cost Group, the device
can select it as the preferred route over other matched routing rules that are assigned
Cost Groups, according to the default LCR settings configured for the assigned
Routing Policy (see 'Configuring SBC Routing Policy Rules' on page 656).
Call Forking: The IP-to-IP Routing table can be configured to route an incoming IP
call to multiple destinations (call forking). The incoming call can be routed to multiple
destinations of any type such as an IP Group or IP address. The device forks the call
by sending simultaneous INVITE messages to all the specified destinations. It handles
the multiple SIP dialogs until one of the calls is answered and then terminates the
other SIP dialogs.
Call forking is configured by creating a Forking group. A Forking group consists of a
main routing rule ('Alternative Route Options' set to Route Row) whose 'Group Policy'
is set to Forking, and one or more associated routing rules ('Alternative Route
Options' set to Group Member Ignore Inputs or Group Member Consider Inputs).
The group members must be configured in contiguous table rows to the main routing
rule. If an incoming call matches the input characteristics of the main routing rule, the
device routes the call to its destination and all those of the group members.
An alternative routing rule can also be configured for the Forking group. The
alternative route is used if the call fails for the Forking group (i.e., main route and all its
group members). The alternative routing rule must be configured in the table row
immediately below the last member of the Forking group. The 'Alternative Route
Options' of this alternative route must be set to Alt Route Ignore Inputs or Alt Route
Consider Inputs. The alternative route can also be configured with its own forking
group members, where if the device uses the alternative route, the call is also sent to
its group members. In this case, instead of setting the alternative route's 'Group Policy'
to None, you must set it to Forking. The group members of the alternative route must
be configured in the rows immediately below it.
The LCR feature can also be employed with call forking. The device calculates a
maximum call cost for each Forking group and routes the call to the Forking group
with the lowest cost. Thus, even if the call can successfully be routed to the main
routing rule, a different routing rule can be chosen (even an alternative route, if
configured) based on LCR. If routing to one Forking group fails, the device tries to
route the call to the Forking group with the next lowest cost (main or alternative route),
and so on. The prerequisite for this functionality is that the incoming call must
successfully match the input characteristics of the main routing rule.
Dial Plan Tags for Representing Source / Destination Numbers: If your
deployment includes calls of many different called (source URI user name) and/or
calling (destination URI user name) numbers that need to be routed to the same
destination, you can employ user-defined tags to represent these numbers. Thus,
instead of configuring many routing rules, you can configure only one routing rule
using the tag as the source and destination number matching characteristics, and a
destination for the calls. For more information, see Using Dial Plan Tags for Matching
Routing Rules on page 678.
Dial Plan Tags for Determining Destination IP Group: Instead of configuring
multiple routing rules, you can configure a single routing rule with a specific
"destination" Dial Plan tag. The device uses the tag to determine the destination IP
Group. For more information, see Using Dial Plan Tags for Routing Destinations on
page 688.
Fax Rerouting: You can configure the device to reroute incoming calls that it
identifies as fax calls to a new IP destination. For more information, see Configuring
Rerouting of Calls to Fax Destinations on page 648.
The following procedure describes how to configure IP-to-IP routing rules through the Web
interface. You can also configure it through ini file (IP2IPRouting) or CLI (configure voip >
sbc routing ip2ip-routing).
3. Configure an IP-to-IP routing rule according to the parameters described in the table
below.
4. Click Apply.
Table 33-2: IP-to-IP Routing Table Parameter Descriptions
Parameter Description
Routing Policy Assigns a Routing Policy to the rule. The Routing Policy associates
sbc-routing-policy-name the rule with an SRD(s). The Routing Policy also defines default LCR
settings as well as the LDAP servers used if the routing rule is based
[IP2IPRouting_RoutingPolicy
on LDAP routing (and Call Setup Rules).
Name]
If only one Routing Policy is configured in the Routing Policies table,
the Routing Policy is automatically assigned. If multiple Routing
Policies are configured, no value is assigned.
To configure Routing Policies, see 'Configuring SBC Routing Policy
Rules' on page 656.
Note: The parameter is mandatory.
General
Index Defines an index number for the new table row.
[IP2IPRouting_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
route-name other tables.
[IP2IPRouting_RouteName] The valid value is a string of up to 40 characters. By default, no value
is defined.
Alternative Route Options Determines whether this routing rule is the main routing rule or an
alt-route-options alternative routing rule (to the rule defined directly above it in the
table).
[IP2IPRouting_AltRouteOpti
[0] Route Row = (Default) Main routing rule - the device first
Parameter Description
ons] attempts to route the call to this route if the incoming SIP dialog's
input characteristics matches this rule.
[1] Alternative Route Ignore Inputs = If the call cannot be routed to
the main route (Route Row), the call is routed to this alternative
route regardless of the incoming SIP dialog's input characteristics.
[2] Alternative Route Consider Inputs = If the call cannot be routed
to the main route (Route Row), the call is routed to this alternative
route only if the incoming SIP dialog matches this routing rule's
input characteristics.
[3] Group Member Ignore Inputs = This routing rule is a member of
the Forking routing rule. The incoming call is also forked to the
destination of this routing rule. The matching input characteristics
of the routing rule are ignored.
[4] Group Member Consider Inputs = This routing rule is a member
of the Forking routing rule. The incoming call is also forked to the
destination of this routing rule only if the incoming call matches this
rule's input characteristics.
Note:
The alternative routing entry ([1] or [2]) must be defined in the next
consecutive table entry index to the Route Row entry (i.e., directly
below it). For example, if Index 4 is configured as a Route Row,
Index 5 must be configured as the alternative route.
The Forking Group members must be configured in a table row that
is immediately below the main Forking routing rule, or below an
alternative routing rule for the main rule, if configured.
For IP-to-IP alternative routing, configure alternative routing
reasons upon receipt of 4xx, 5xx, and 6xx SIP responses (see
'Configuring SIP Response Codes for Alternative Routing Reasons'
on page 654). However, if no response, ICMP, or a SIP 408
response is received, the device attempts to use the alternative
route even if no entries are configured in the Alternative Routing
Reasons table.
Multiple alternative route entries can be configured (e.g., Index 1 is
the main route - Route Row - and indices 2 through 4 are
configured as alternative routes).
Match
Source IP Group Defines the IP Group from where the IP call is received (i.e., the IP
src-ip-group-name Group that sent the SIP dialog). Typically, the IP Group of an incoming
SIP dialog is determined (or classified) using the Classification table
[IP2IPRouting_SrcIPGroupN
(see 'Configuring Classification Rules' on page 627).
ame]
The default is Any (i.e., any IP Group).
Note: The selectable IP Group for the parameter depends on the
assigned Routing Policy (in the 'Routing Policy' parameter in this
table). For more information, see 'Configuring SBC Routing Policy
Rules' on page 656.
Request Type Defines the SIP dialog request type (SIP Method) of the incoming SIP
request-type dialog.
[IP2IPRouting_RequestType [0] All (default)
] [1] INVITE
[2] REGISTER
Parameter Description
[3] SUBSCRIBE
[4] INVITE and REGISTER
[5] INVITE and SUBSCRIBE
[6] OPTIONS
Source Username Prefix Defines the prefix of the user part of the incoming SIP dialog's source
src-user-name-prefix URI (usually the From URI). You can use special notations for
denoting the prefix. To denote calls without a user part in the URI, use
[IP2IPRouting_SrcUsername
the $ sign. For available notations, see 'Dialing Plan Notation for
Prefix]
Routing and Manipulation' on page 967.
The default is the asterisk (*) symbol (i.e., any prefix). If this rule is not
required, leave this field empty.
Note: If you need to route calls of many different source URI user
names to the same destination, you can use tags (see 'Source Tags'
parameter below) instead of this parameter.
Source Host Defines the host part of the incoming SIP dialog's source URI (usually
src-host the From URI).
[IP2IPRouting_SrcHost] The default is the asterisk (*) symbol (i.e., any host name). If this rule
is not required, leave this field empty.
Source Tags Assigns a tag to denote source URI user names corresponding to the
src-tags tag configured in the associated Dial Plan.
[IP2IPRouting_SrcTags] The valid value is a string of up to 20 characters. The tag is case
insensitive.
To configure tags, see 'Configuring Dial Plans' on page 678.
Note:
Make sure that you assign the Dial Plan in which you have
configured the tag, to the related IP Group or SRD.
Instead of using tags and configuring the parameter, you can use
the 'Source Username Prefix' parameter to specify a specific URI
source user or all source users.
Destination Username Prefix Defines the prefix of the incoming SIP dialog's destination URI (usually
dst-user-name-prefix the Request URI) user part. You can use special notations for
denoting the prefix. To denote calls without a user part in the URI, use
[IP2IPRouting_DestUsernam
the $ sign. For available notations, see 'Dialing Plan Notation for
ePrefix]
Routing and Manipulation' on page 967.
The default is the asterisk (*) symbol (i.e., any prefix). If this rule is not
required, leave this field empty.
Note: If you need to route calls of many different destination URI user
names to the same destination, you can use tags (see 'Source Tags'
parameter below) instead of this parameter.
Destination Host Defines the host part of the incoming SIP dialog’s destination URI
dst-host (usually the Request-URI).
[IP2IPRouting_DestHost] The default is the asterisk (*) symbol (i.e., any destination host). If this
rule is not required, leave this field empty.
Destination Tags Assigns a prefix tag to denote destination URI user names
dest-tags corresponding to the tag configured in the associated Dial Plan.
[IP2IPRouting_DestTags] The valid value is a string of up to 20 characters. The tag is case
insensitive.
To configure prefix tags, see 'Configuring Dial Plans' on page 678.
Note:
Parameter Description
Make sure that you assign the Dial Plan in which you have
configured the prefix tag, to the related IP Group or SRD.
Instead of using tags and configuring the parameter, you can use
the 'Destination Username Prefix' parameter to specify a specific
URI destination user or all destinations users.
Message Condition Assigns a SIP Message Condition rule to the IP-to-IP Routing rule.
message-condition-name To configure Message Condition rules, see 'Configuring Message
[IP2IPRouting_MessageCon Condition Rules' on page 415.
ditionName]
Call Trigger Defines the reason (i.e., trigger) for re-routing (i.e., alternative routing)
trigger the SIP request:
[IP2IPRouting_Trigger] [0] Any = (Default) This routing rule is used for all scenarios (re-
routes and non-re-routes).
[1] 3xx = Re-routes the request if it was triggered as a result of a
SIP 3xx response.
[2] REFER = Re-routes the INVITE if it was triggered as a result of
a REFER request.
[3] 3xx or REFER = Applies to options [1] and [2].
[4] Initial only = This routing rule is used for regular requests that
the device forwards to the destination. This rule is not used for re-
routing of requests triggered by the receipt of REFER or 3xx.
[5] Broken Connection = If the device detects a broken RTP
connection during the call and the Broken RTP Connection feature
is enabled (IpProfile_DisconnectOnBrokenConnection parameter is
configured to [2]), you can use this option as an explicit matching
characteristics to route the call to an alternative destination.
Therefore, for alternative routing upon broken RTP detection,
position the routing rule configured with this option above the
regular routing rule associated with the call. Such a configuration
setup ensures that the device uses this alternative routing rule only
when RTP broken connection is detected.
[6] Fax Rerouting = Reroutes the INVITE to a fax destination
(different IP Group) if it is identified as a fax call. For more
information, see Configuring Rerouting of Calls to Fax Destinations
on page 648.
ReRoute IP Group Defines the IP Group that initiated (sent) the SIP redirect response
re-route-ip-group-id (e.g., 3xx) or REFER message. This parameter is typically used for re-
routing requests (e.g., INVITEs) when interworking is required for SIP
[IP2IPRouting_ReRouteIPGr
3xx redirect responses or REFER messages. For more information,
oupName]
see 'Interworking SIP 3xx Redirect Responses' on page 608 and
'Interworking SIP REFER Messages' on page 611, respectively. The
parameter functions together with the 'Call Trigger' parameter (in the
table).
The default is Any (i.e., any IP Group).
Note: The selectable IP Group for the parameter depends on the
assigned Routing Policy (in the 'Routing Policy' parameter in this
table). For more information, see 'Configuring SBC Routing Policy
Rules' on page 656.
Action
Destination Type Determines the destination type to which the outgoing SIP dialog is
Parameter Description
dst-type sent.
[IP2IPRouting_DestType] [0] IP Group = (Default) The SIP dialog is sent to the IP Group as
defined in the 'Destination IP Group'
(IP2IPRouting_DestIPGroupName) parameter. For more
information on the actual address, see the 'Destination IP Group'
parameter.
[1] Dest Address = The SIP dialog is sent to the address
configured in the following parameters: 'Destination Address',
'Destination Port' and 'Destination Transport Type'.
[2] Request URI = The SIP dialog is sent to the address indicated
in the incoming Request-URI. If the parameters 'Destination Port'
and 'Destination Transport Type' are configured, the incoming
Request-URI parameters are overridden and these parameters
take precedence.
[3] ENUM = An ENUM query is sent to include the destination
address. If the parameters 'Destination Port' and 'Destination
Transport Type' are configured, the incoming Request-URI
parameters are overridden and these parameters take precedence.
[4] Hunt Group = Used for call center survivability. For more
information, see 'Configuring Call Survivability for Call Centers' on
page 709.
[5] Dial Plan = (For Backward Compatibility Only - see Note
below) The IP destination is determined by a Dial Plan index of the
loaded Dial Plan file. The syntax of the Dial Plan index in the Dial
Plan file is as follows: <destination / called prefix number>,0,<IP
destination>
Note that the second parameter "0" is ignored. An example of a
configured Dial Plan (# 6) in the Dial Plan file is shown below:
[ PLAN6 ]
200,0,10.33.8.52 ; called prefix 200 is
routed to destination 10.33.8.52
201,0,10.33.8.52
300,0,itsp.com ; called prefix 300 is
routed to destination itsp.com
Once the Dial Plan is defined, you need to assign it (0 to 7) to the
routing rule as the destination in the 'Destination Address'
parameter, where "0" denotes [PLAN1], "1" denotes [PLAN2], and
so on.
[7] LDAP = LDAP-based routing. Make sure that the Routing Policy
assigned to the routing rule is configured with the LDAP Server
Group for defining the LDAP server(s) to query.
[8] Gateway = The device routes the SBC call to the Tel side
(Gateway call) using an IP-to-Tel routing rule in the IP-to-Tel
Routing table (see Configuring IP-to-Tel Routing Rules on page
518). The IP-to-Tel routing rule must be configured with the same
call matching characteristics as this SBC IP-to-IP routing rule. This
option is also used for alternative routing of an IP-to-IP route to the
PSTN. In such a case, the IP-to-Tel routing rule must also be
configured with the same call matching characteristics as this SBC
IP-to-IP routing rule.
[9] Routing Server = Device sends a request to a third-party routing
server for an appropriate destination (next hop) for the matching
call.
[10] All Users = Device checks whether the Request-URI (i.e.,
Parameter Description
destination user) in the incoming INVITE is registered in its' users’
database, and if yes, it sends the INVITE to the address of the
corresponding contact specified in the database. If the Request-
URI is not registered, the call is rejected.
[11] IP Group Set = The device employs load balancing and routes
the call to one of the IP Groups in the IP Group Set, assigned using
the 'IP Group Set' parameter (below).
[12] Destination Tag = The device routes the call to an IP Group
determined by Dial Plan tags. The tag is specified in the 'Routing
Tag Name' parameter (below). For more information, see Using
Dial Plan Tags for Routing Destinations on page 688.
[13] Internal = Instead of sending the incoming SIP dialog to
another destination, the device replies to the sender of the dialog
with a SIP response code or a redirection response, configured by
the 'Internal Action' (IP2IPRouting_InternalAction) parameter in this
table (see below).
Note: Use option [5] Dial Plan only for backward compatibility
purposes; otherwise, use prefix tags as described in 'Configuring Dial
Plans' on page 678.
Destination IP Group Defines the IP Group to where you want to route the call. The actual
dst-ip-group-name destination of the SIP dialog message depends on the IP Group type
(as defined in the 'Type' parameter):
[IP2IPRouting_DestIPGroup
Name] Server-type IP Group: The SIP dialog is sent to the IP address
configured for the Proxy Set that is associated with the IP Group.
User-type IP Group: The device checks if the SIP dialog is from a
registered user, by searching for a match between the Request-
URI of the received SIP dialog and an AOR registration record in
the device's database. If found, the device sends the SIP dialog to
the IP address specified in the database for the registered contact.
By default, no value is defined.
Note:
The parameter is applicable only if the 'Destination Type'
parameter is configured to IP Group.
The selectable IP Group for the parameter depends on the
assigned Routing Policy (in the 'Routing Policy' parameter in this
table). For more information, see 'Configuring SBC Routing Policy
Rules' on page 656.
Destination SIP Interface Defines the destination SIP Interface to where the call is sent.
dest-sip-interface-name By default, no value is defined.
[IP2IPRouting_DestSIPInterf To configure SIP Interfaces, see 'Configuring SIP Interfaces' on page
aceName] 351.
Note:
The parameter is applicable only if the 'Destination Type'
parameter is configured to any value other than IP Group. If the
'Destination Type' parameter is configured to IP Group, the
following SIP Interface is used:
Server-type IP Groups: SIP Interface that is assigned to the
Proxy Set associated with the IP Group.
User-type IP Groups: SIP Interface is determined during user
registration with the device.
For multi-tenancy, if the assigned Routing Policy is not shared (i.e.,
Parameter Description
the Routing Policy is associated with an Isolated SRD), the SIP
Interface must be one that is associated with the Routing Policy or
with a shared Routing Policy (i.e., the Routing Policy is associated
with one or more Shared SRDs). If the Routing Policy is shared,
the SIP Interface can be one that is associated with any SRD or
Routing Policy (but it's recommended that it belong to the same
SRD/Routing Policy or to shared SRD/Routing Policy to avoid
"bleeding").
Destination Address Defines the destination address to where the call is sent. The address
dst-address can be an IP address or a domain name (e.g., domain.com).
[IP2IPRouting_DestAddress] If ENUM-based routing is used (i.e., the 'Destination Type' parameter
is set to ENUM) the parameter defines the IP address or domain name
(FQDN) of the ENUM service, for example, e164.arpa,
e164.customer.net or NRENum.net. The device sends the ENUM
query containing the destination phone number to an external DNS
server, configured in the IP Interfaces table. The ENUM reply includes
a SIP URI (user@host) which is used as the destination Request-URI
in this routing table.
The valid value is a string of up to 50 characters (IP address or
FQDN). By default, no value is defined.
Note:
The parameter is applicable only if the 'Destination Type'
parameter is set to Dest Address [1] or ENUM [3]; otherwise, the
parameter is ignored.
When using domain names, enter a DNS server IP address or
alternatively, define these names in the Internal DNS table (see
'Configuring the Internal SRV Table' on page 164).
To terminate SIP OPTIONS messages at the device (i.e., to handle
them locally), set the parameter to "internal".
Destination Port Defines the destination port to where the call is sent.
dst-port
[IP2IPRouting_DestPort]
Destination Transport Type Defines the transport layer type for sending the call:
dst-transport-type [-1] = (Default) Not configured - the transport type is determined by
[IP2IPRouting_DestTranspor the SIPTransportType global parameter.
tType] [0] UDP
[1] TCP
[2] TLS
IP Group Set Assigns an IP Group Set to the routing rule. The device routes the call
ipgroupset-name to one of the IP Groups in the IP Group Set according to the load-
balancing policy configured for the IP Group Set. For more
[IP2IPRouting_IPGroupSetN
information, see Configuring IP Group Sets on page 660.
ame]
Note: The parameter is applicable only if you configure the
'Destination Type' parameter to IP Group Set (above).
Call Setup Rules Set ID Assigns a Call Setup Rule Set ID to the routing rule. The device
call-setup-rules-set-id performs the Call Setup rules of this Set ID if the incoming call
matches the characteristics of this routing rule. The device routes the
[IP2IPRouting_CallSetupRul
call to the destination according to the routing rule's configured action,
esSetId]
only after it has performed the Call Setup rules.
To configure Call Setup rules, see 'Configuring Call Setup Rules' on
Parameter Description
page 422.
Group Policy Defines whether the routing rule includes call forking.
group-policy [0] None = (Default) Call uses only this route (even if Forking
[IP2IPRouting_GroupPolicy] Group members are configured in the rows below it).
[1] Forking = Call uses this route and the routes of Forking Group
members, if configured (in the rows below it).
Note: Each Forking Group can contain up to 20 members. In other
words, up to 20 routing rules can be configured for the same Forking
Group.
Cost Group Assigns a Cost Group to the routing rule for determining the cost of the
cost-group call.
[IP2IPRouting_CostGroup] By default, no value is defined.
To configure Cost Groups, see 'Configuring Cost Groups' on page
277.
Note:
To implement LCR and its Cost Groups, you must enable LCR for
the Routing Policy assigned to the routing rule (see 'Configuring
SBC Routing Policy Rules' on page 656). If LCR is disabled, the
device ignores the parameter.
The Routing Policy also determines whether matched routing rules
that are not assigned Cost Groups are considered as a higher or
lower cost route compared to matching routing rules that are
assigned Cost Groups. For example, if the 'Default Call Cost'
parameter in the Routing Policy is configured to Lowest Cost,
even if the device locates matching routing rules that are assigned
Cost Groups, the first-matched routing rule without an assigned
Cost Group is considered as the lowest cost route and thus,
chosen as the preferred route.
Routing Tag Name Defines the destination Dial Plan tag, which is used to determine the
routing-tag-name destination IP Group.
[IP2IPRouting_RoutingTagN The default value is "default", meaning that the device uses the first
ame] tag name in the Dial Plan rule that is configured without a value. For
example, if the Dial Plan rule is configured with tags
"Country=England;City=London;Essex", the default tag is "Essex".
For more information, see Using Dial Plan Tags for Routing
Destinations on page page 688.
Note:
The parameter is applicable only if the 'Destination Type'
parameter is configured to Destination Tag (see above).
Only one tag can be configured for the parameter.
Only the tag name must be configured (not the value, if exists). For
example, if the tag is configured in the Dial Plan rule as
"Country=England", configure the parameter to "Country" only.
Internal Action Defines a SIP response code (e.g., 200 OK) or a redirection response
internal-action (with an optional Contact field indicating to where the sender must re-
send the message) that the device sends to the sender of the
[IP2IPRouting_InternalAction
incoming SIP dialog (instead of sending the call to another
]
destination). The parameter is applicable only when the 'Destination
Type' parameter in this table is configured to Internal (see above).
Parameter Description
The valid value syntax is (case-insensitive):
For SIP response codes:
Reply(response='<code>')
The following example sends a SIP 200:
Reply(response='200')
For redirection responses:
Redirect (response='<code>', contact='sip:'+….)
Redirect (contact='…', response = '<code>')
Redirect (contact = 'sip:user@host')
Examples:
The device responds to the dialog with a SIP 300 redirect
response that includes a contact value:
Redirect (response=’300’, contact=’sip:102@host’)
The device redirects the call from the sender to a SIP
Recording Server (SRS):
Redirect(response='302',contact='sip:'+header.to.u
rl.user+'@siprecording.com')
Note:
The parameter can be used for normal and alternative routing.
The response code for redirect messages can only be 3xx.
Note:
• You must configure the originating fax to use the G.711 coder.
• If the remote side replies with T.38 or G.711 VBD, fax rerouting is not done.
• If both fax rerouting and fax re-INVITE are configured, only fax rerouting is done.
The following procedure describes how to configure fax rerouting, using an example
consisting of three IP Groups.
2. Configure three IP Groups in the IP Groups table (see Configuring IP Groups on page
359):
• IP Group #0 "HQ": This is the source IP Group, sending voice calls and fax calls.
• IP Group #1 "Voice": This is the destination for voice calls sent from IP Group #0.
• IP Group #2 "Fax": This is the destination for fax calls sent from IP Group #0.
3. For the fax destination (IP Group #2), do the following:
a. Configure a Coder Group with T.38, which allows fax transmission over IP (see
Configuring Coder Groups on page 423).
b. Configure an IP Profile (see Configuring IP Profiles on page 433):
♦ Assign it the Coder Group.
♦ Configure the 'Fax Rerouting Mode' parameter to Rerouting without delay:
• IP-to-IP Routing Rule #1 - routes fax calls from IP Group #0 to IP Group #2:
Match
Source IP Group HQ (IP Group #0)
Call Trigger Fax Rerouting
Action
Destination Type IP Group
Destination IP Group Fax (IP Group #2)
For each IP PBX, the device sends SIP messages to the proxy server using the specific
local, UDP port on the leg interfacing with the proxy server. For SIP messages received
from the proxy server, the device routes the messages to the appropriate IP PBX according
to the local UDP port on which the message was received. On the leg interfacing with the
IP PBXs, the device uses the same local UDP port (e.g., 5060) for all IP PBXs (send and
receive).
To configure this feature, you need to configure the SIP Interface of the proxy server with a
special UDP port range, and use tag-based routing with Call Setup Rules to specify the
exact UDP port you want assigned to each SIP entity (IP PBX), from the SIP Interface port
range. The following procedure describes how to configure the device to use a specific
local UDP port per SIP entity on the leg interfacing with a proxy server that is common to
all the SIP entities. To facilitate understanding, the procedure is based on the previous
example.
To configure specific UDP ports for SIP entities communicating with common
proxy server:
1. Open the SIP Interfaces table (see Configuring SIP Interfaces on page 351), and then
configure the following SIP Interfaces:
• SIP Interface for leg interfacing with IP PBXs (local UDP port 5060 is used):
General
Index 1
Name PBX
Network Interface WAN
UDP Port 5060
• SIP Interface for leg interfacing with proxy server (specific local UDP ports are
later taken from this port range):
General
Index 2
Name ITSP
Network Interface LAN
UDP Port 5060
Additional UDP Ports 6000-7000
2. Open the IP Groups table (see Configuring IP Groups on page 359), and then
configure the following IP Groups:
• IP Group for the first IP PBX ("Type" and "Port" tags are later used to identify the
IP PBX and assign it a local UDP port 6001 on the leg interfacing with the proxy
server):
General
Index 1
Name PBX-1
Type Server
SBC Advanced
Tags Type=PBX;Port=6001
• IP Group for the second IP PBX ("Type" and "Port" tags are later used to identify
the IP PBX and assign it a local UDP port 6002 on the leg interfacing with the
proxy server):
General
Index 2
Name PBX-2
Type Server
SBC Advanced
Tags Type=PBX;Port=6002
• IP Group for the third IP PBX ("Type" and "Port" tags are later used to identify the
IP PBX and assign it a local UDP port 6003 on the leg interfacing with the proxy
server):
General
Index 3
Name PBX-3
Type Server
SBC Advanced
Tags Type=PBX;Port=6003
• IP Group for the proxy server ("Type" tag is later used to identify proxy server):
General
Index 4
Name ITSP
Type Server
SBC Advanced
Tags Type=ITSP
3. Open the Call Setup Rules table (see Configuring Call Setup Rules on page 400), and
then configure the following Call Setup rules:
• Uses the value of the "Type" tag name, configured in the IP Group's 'Tags'
parameter, as the source tag:
General
Index 1
Rule Set ID 1
Action
Action Subject srctags.Type
Action Type Modify
Action Value param.ipg.src.tags.Type
• If the source tag name "Type" equals "PBX" (i.e., SIP message from an IP Group
belonging to one of the IP PBXs), then use the value of the "Port" tag name,
configured in the 'Tags' parameter of the classified IP Group, as the local UDP
port on the leg interfacing with the proxy server for messages sent to the proxy
server:
General
Index 2
Rule Set ID 1
Condition srctags.Type=='PBX'
Action
Action Subject message.outgoing.local-port
Action Type Modify
Action Value param.ipg.src.tags.Port
• If the source tag name "Type" equals "ITSP" (i.e., SIP message from the ITSP),
then use the value (port number) of the local port on which the incoming message
from the proxy server is received by the device, as the value of the destination
tag name "Port". In other words, the value could either be "6001", "6002", or
"6003". This value is then used by the IP-to-IP Routing table to determine to
which IP PBX to send the message. For example, if the destination tag value is
"6001", the device identifies the destination as "PBX-1":
General
Index 3
Rule Set ID 1
Condition srctags.Type=='ITSP'
Action
Action Subject dsttags.Port
Action Type Modify
Action Value message.incoming.local-port
4. Open the IP-to-IP Routing table (see Configuring SBC IP-to-IP Routing Rules on page
635), and then configure the following IP-to-IP Routing rules:
• Routes calls from the IP PBXs (identified by the source tag name-value
"Type=PBX") to the ITSP (identified as an IP Group):
General
Index 1
Name PBX-to-ITSP
Match
Source Tag Type=PBX
Action
Destination Type IP Group
Destination IP Group ITSP
• Routes calls from the ITSP (identified by the source tag name-value
"Type=ITSP") to the IP PBXs (identified by the specific port assigned to the IP
PBX by the value of the destination tag name "Port"):
General
Index 2
Name ITSP-to-PBX
Match
Source Tag Type=ITSP
Action
Destination Type Destination Tag
Routing Tag Name Port
Note:
• If the device receives a SIP 408 response, an ICMP message, or no response,
alternative routing is still performed even if the code is not configured in the
Alternative Routing Reasons table.
• SIP requests belonging to an SRD or IP Group that have reached the call limit
(maximum concurrent calls and/or call rate) as configured in the Call Admission
table are sent to an alternative route if configured in the IP-to-IP Routing table for
the SRD or IP Group. If no alternative routing rule is located, the device
automatically rejects the SIP request with a SIP 480 (Temporarily Unavailable)
response.
The following procedure describes how to configure the Alternative Routing Reasons table
through the Web interface. You can also configure it through ini file
(SBCAlternativeRoutingReasons) or CLI (configure voip > sbc routing sbc-alt-routing-
reasons).
3. Configure a SIP response code for alternative routing according to the parameters
described in the table below.
4. Click Apply.
Table 33-3: Alternative Routing Reasons Table Parameter Descriptions
Parameter Description
Parameter Description
Session Interval Too Small; [480] Unavailable; [481]
Transaction Not Exist; [482] Loop Detected; [483] Too Many
Hops; [484] Address Incomplete; [485] Ambiguous; [486]
Busy; [487] Request Terminated; [488] Not Acceptable Here;
[491] Request Pending; [493] Undecipherable; [500] Internal
Error; [501] Not Implemented; [502] Bad Gateway; [503]
Service Unavailable; [504] Server Timeout; [505] Version Not
Supported; [513] Message Too Large; [600] Busy
Everywhere; [603] Decline; [604] Does Not Exist Anywhere;
[606] Not Acceptable; [805] Admission Failure; [806] Media
Limits Exceeded; [818] Signalling Limits Exceeded.
Note: If possible, it is recommended to use only one Routing Policy for all SRDs
(tenants), unless deployment requires otherwise (i.e., a dedicated Routing Policy per
SRD).
Once configured, you need to associate the Routing Policy with an SRD(s) in the SRDs
table. To determine the routing and manipulation rules for the SRD, you need to assign the
Routing Policy to routing and manipulation rules. The figure below shows the configuration
entities to which Routing Policies can be assigned:
Note:
• The Classification table is used only if classification by registered user in the
device's users registration database or by Proxy Set fails.
• If the device receives incoming calls (e.g., INVITE) from users that have already
been classified and registered in the device's registration database, the device
ignores the Classification table and uses the Routing Policy that was determined
for the user during the initial classification process.
The following procedure describes how to configure Routing Policies rules through the
Web interface. You can also configure it through ini file (SBCRoutingPolicy) or CLI
(configure voip > sbc routing sbc-routing-policy).
3. Configure the Routing Policy rule according to the parameters described in the table
below.
4. Click Apply.
Table 33-4: Routing Policies table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the
name row in other tables.
The valid value is a string of up to 40 characters. By default, no
Parameter Description
[SBCRoutingPolicy_Name] name is defined. If you don't configure a name, the device
automatically assigns a name in the following format:
"SBCRoutingPolicy_<Index>", for example,
"SBCRoutingPolicy_2".
Note: Each row must be configured with a unique name.
LDAP Servers Group Name Assigns an LDAP Server Group to the Routing Policy. Routing
ldap-srv-group-name rules in the IP-to-IP Routing table that are associated with the
[SBCRoutingPolicy_LdapServ Routing Policy and that are configured with LDAP and/or Call
ersGroupName] Setup Rules, use the LDAP server(s) configured for this LDAP
Server Group.
By default, no value is defined.
For more information on LDAP Server Groups, see 'Configuring
LDAP Server Groups' on page 248.
Note: The default Routing Policy is assigned the default LDAP
Server Group ("DefaultCTRLServersGroup").
Least Cost Routing
LCR Feature Enables the Least Cost Routing (LCR) feature for the Routing
lcr-enable Policy.
[SBCRoutingPolicy_LCREnable] [0] Disable (default)
[1] Enable
For more information on LCR, see 'Least Cost Routing' on page
274.
Default Call Cost Defines whether routing rules in the IP-to-IP Routing table that
lcr-default-cost are not assigned a Cost Group are considered a higher cost or
lower cost route compared to other matched routing rules that
[SBCRoutingPolicy_LCRDefaultCo
are assigned Cost Groups.
st]
[0] Lowest Cost = (Default) The device considers a matched
routing rule (belonging to the Routing Policy) that is not
assigned a Cost Group as the lowest cost route. Therefore, it
uses the routing rule.
[1] Highest Cost = The device considers a matched routing
rule (belonging to the Routing Policy) that is not assigned a
Cost Group as the highest cost route. Therefore, it is only
used if the other matched routing rules that are assigned
Cost Groups are unavailable.
Note: If multiple matched routing rules without an assigned Cost
Group exist, the device selects the first matched rule in the
table.
LCR Call Duration Defines the average call duration (in minutes) and is used to
lcr-call-length calculate the variable portion of the call cost. This is useful, for
example, when the average call duration spans over multiple
[SBCRoutingPolicy_LCRAverageC
time bands. The LCR is calculated as follows: cost = call
allLength]
connect cost + (minute cost * average call duration).
The valid value is 0-65533. The default is 1.
For example, assume the following Cost Groups:
"Weekend A": call connection cost is 1 and charge per
minute is 6. Therefore, a call of 1 minute cost 7 units.
"Weekend B": call connection cost is 6 and charge per
minute is 1. Therefore, a call of 1 minute cost 7 units.
Parameter Description
Therefore, for calls under one minute, "Weekend A" carries the
lower cost. However, if the average call duration is more than
one minute, "Weekend B" carries the lower cost.
7. Configure the IP Group Set according to the parameters described in the table below.
8. Click Apply.
Table 33-5: IP Group Set Table Parameter Descriptions
Parameter Description
General
Index Defines an index number for the new table row.
[IPGroupSet_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating the row in
name other tables.
[IPGroupSet_Name] The valid value is a string of up to 40 characters. By default, no name is
defined. If you don't configure a name, the device automatically assigns
a name in the following format: "IPGroupSet_<index>". For example, if
you add a new row to Index 0, the following name is assigned:
"IPGroupSet_0"
Note: Each row must be configured with a unique name.
Parameter Description
9. Select the IP Group Set row for which you want to assign IP Groups, and then click
the IP Group Set Member link located below the table; the IP Group Set Member
table appears.
11. Configure IP Group Set members according to the parameters described in the table
below.
12. Click Apply, and then save your settings to flash memory.
IP Group Set Member Table Parameter Descriptions
Parameter Description
34 SBC Manipulations
This section describes the configuration of the manipulation rules for the SBC application.
The device supports SIP URI user part (source and destination) manipulations for inbound
and outbound routing. These manipulations can be applied to a source IP group, source
and destination host and user prefixes, and/or user-defined SIP request (e.g., INVITE,
OPTIONS, SUBSCRIBE, and/or REGISTER). Since outbound manipulations are
performed after routing, the outbound manipulation rule matching can also be done by
destination IP Group. Manipulated destination user and host are performed on the following
SIP headers: Request-URI, To, and Remote-Party-ID (if exists). Manipulated source user
and host are performed on the following SIP headers: From, P-Asserted (if exists), P-
Preferred (if exists), and Remote-Party-ID (if exists).
Figure 34-1: SIP URI Manipulation in IP-to-IP Routing
You can also restrict source user identity in outgoing SIP dialogs in the Outbound
Manipulation table (using the column PrivacyRestrictionMode). The device identifies an
incoming user as restricted if one of the following exists:
From header user is 'anonymous'.
P-Asserted-Identity and Privacy headers contain the value 'id'.
All restriction logic is done after the user number has been manipulated.
Host name (source and destination) manipulations are simply host name substitutions with
the names defined for the source and destination IP Groups respectively (if any, in the IP
Groups table).
CSeq: 1 INVITE
Contact: <sip:7000@10.2.2.3>
Supported: em,100rel,timer,replaces
Allow: REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK
User-Agent: Sip Message Generator V1.0.0.5
Content-Type: application/sdp
Content-Length: 155
v=0
o=SMG 791285 795617 IN IP4 10.2.2.6
s=Phone-Call
c=IN IP4 10.2.2.6
t=0 0
m=audio 6000 RTP/AVP 8
a=rtpmap:8 pcma/8000
a=sendrecv
a=ptime:20
Outgoing INVITE to WAN:
INVITE sip: 9721000@ITSP;user=phone;x=y;z=a SIP/2.0
Via: SIP/2.0/UDP 212.179.1.12;branch=z9hGWwan
From:
<sip:97000@IP_PBX;user=phone;x=y;z=a>;tag=OWan;paramer1=abe
To: <sip: 9721000@ ITSP;user=phone>
Call-ID: USEVWWAN@212.179.1.12
CSeq: 38 INVITE
Contact: <sip:7000@212.179.1.12>
Supported: em,100rel,timer,replaces
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER
User-Agent: Sip Message Generator V1.0.0.5
Content-Type: application/sdp
Content-Length: 155
v=0
o=SMG 5 9 IN IP4 212.179.1.11
s=Phone-Call
c=IN IP4 212.179.1.11
t=0 0
m=audio 8000 RTP/AVP 8
a=rtpmap:8 pcma/8000
a=sendrecv
a=ptime:20
The SIP message manipulations in the example above (contributing to typical topology
hiding) are as follows:
Inbound source SIP URI user name from "7000" to "97000":
From:<sip:7000@10.2.2.6;user=phone;x=y;z=a>;tag=OlLAN;paramer1
=abe
to
From:
<sip:97000@IP_PBX;user=phone;x=y;z=a>;tag=OWan;paramer1=abe
Source IP Group name (i.e., SIP URI host name) from "10.2.2.6" to "IP_PBX":
From:<sip:7000@10.2.2.6;user=phone;x=y;z=a>;tag=OlLAN;paramer1
=abe
to
From:
<sip:97000@IP_PBX;user=phone;x=y;z=a>;tag=OWan;paramer1=abe
Inbound destination SIP URI user name from "1000" to 9721000":
Note: Configure stricter classification rules higher up in the table than less strict rules
to ensure the desired rule is used to manipulate the incoming dialog. Strict refers to
the number of matching characteristics configured for the rule. For example, a rule
configured with source host name and source IP Group as matching characteristics is
stricter than a rule configured with only source host name. If the rule configured with
only source host name appears higher up in the table, the device ("erroneously") uses
the rule to manipulate incoming dialogs matching this source host name (even if they
also match the rule appearing lower down in the table configured with the source IP
Group as well).
To configure and apply an Inbound Manipulation rule, the rule must be associated with a
Routing Policy. The Routing Policy associates the rule with an SRD(s). Therefore, the
Routing Policy lets you configure manipulation rules for calls belonging to specific SRD(s).
However, as multiple Routing Policies are relevant only for multi-tenant deployments (if
needed), for most deployments, only a single Routing Policy is required. As the device
provides a default Routing Policy ("Default_SBCRoutingPolicy"), when only one Routing
Policy is required, the device automatically assigns the default Routing Policy to the routing
rule. If you are implementing LDAP-based routing (with or without Call Setup Rules) and/or
Least Cost Routing (LCR), you need to configure these settings for the Routing Policy
(regardless of the number of Routing Policies employed). For more information on Routing
Policies, see 'Configuring SBC Routing Policy Rules' on page 656.
Note: The IP Groups table can be used to configure a host name that overwrites the
received host name. This manipulation can be done for source and destination IP
Groups (see 'Configuring IP Groups' on page 359).
The following procedure describes how to configure Inbound Manipulation rules through
the Web interface. You can also configure it through ini file (IPInboundManipulation) or CLI
(configure voip > sbc manipulation ip-inbound-manipulation).
3. Configure the Inbound Manipulation rule according to the parameters described in the
table below.
4. Click Apply.
Table 34-1: Inbound Manipulations Table Parameter Descriptions
Parameter Description
Routing Policy Assigns an Routing Policy to the rule. The Routing Policy
routing-policy-name associates the rule with an SRD(s). The Routing Policy also
defines default LCR settings as well as the LDAP servers if
[IPInboundManipulation_RoutingPolic
the routing rule is based on LDAP routing (and Call Setup
yName]
Rules).
Parameter Description
If only one Routing Policy is configured in the Routing
Policies table, the Routing Policy is automatically assigned. If
multiple Routing Policies are configured, no value is
assigned.
To configure Routing Policies, see 'Configuring SBC Routing
Policy Rules' on page 656.
Note: The parameter is mandatory.
General
Index Defines an index number for the new table record.
[IPInboundManipulation_Index] Note: Each table row must be configured with a unique
index.
Name Defines an arbitrary name to easily identify the manipulation
manipulation-name rule.
[IPInboundManipulation_Manipulation The valid value is a string of up to 40 characters. By default,
Name] no value is defined.
Parameter Description
[4] INVITE and REGISTER = All SIP messages except
SUBSCRIBE.
[5] INVITE and SUBSCRIBE = All SIP messages except
REGISTER.
Source IP Group Defines the IP Group from where the incoming INVITE is
CLI: src-ip-group-name received.
[IPInboundManipulation_SrcIpGrou The default is Any (i.e., any IP Group).
pName]
Source Username Prefix Defines the prefix of the source SIP URI user name (usually
CLI: src-user-name-prefix in the From header).
[IPInboundManipulation_SrcUserna The default is the asterisk (*) symbol (i.e., any source
mePrefix] username prefix).
Note: The prefix can be a single digit or a range of digits. For
available notations, see 'Dialing Plan Notation for Routing
and Manipulation' on page 967.
Source Host Defines the source SIP URI host name - full name (usually in
CLI: src-host the From header).
[IPInboundManipulation_SrcHost] The default is the asterisk (*) symbol (i.e., any host name).
Destination Username Prefix Defines the prefix of the destination SIP URI user name,
CLI: dst-user-name-prefix typically located in the Request-URI and To headers.
[IPInboundManipulation_DestUsern The default is the asterisk (*) symbol (i.e., any destination
amePrefix] username prefix).
Note: The prefix can be a single digit or a range of digits. For
available notations, see 'Dialing Plan Notation for Routing
and Manipulation' on page 967.
Destination Host Defines the destination SIP URI host name - full name,
CLI: dst-host typically located in the Request URI and To headers.
[IPInboundManipulation_DestHost] The default is the asterisk (*) symbol (i.e., any destination
host name).
Operation Rule - Action
Manipulated Item Determines whether the source or destination SIP URI user
CLI: manipulated-uri part is manipulated.
[IPInboundManipulation_Manipulat [0] Source = (Default) Manipulation is done on the source
edURI] SIP URI user part.
[1] Destination = Manipulation is done on the destination
SIP URI user part.
Remove From Left Defines the number of digits to remove from the left of the
CLI: remove-from-left user name prefix. For example, if you enter 3 and the user
[IPInboundManipulation_RemoveFr name is "john", the new user name is "n".
omLeft]
Remove From Right Defines the number of digits to remove from the right of the
CLI: remove-from-right user name prefix. For example, if you enter 3 and the user
[IPInboundManipulation_RemoveFr name is "john", the new user name is "j".
omRight] Note: If both 'Remove From Right' and 'Leave From Right'
parameters are configured, the 'Remove From Right' setting
is applied first.
Leave From Right Defines the number of characters that you want retained
CLI: leave-from-right from the right of the user name.
Parameter Description
[IPInboundManipulation_LeaveFro Note: If both 'Remove From Right' and 'Leave From Right'
mRight] parameters are configured, the 'Remove From Right' setting
is applied first.
Prefix to Add Defines the number or string that you want added to the front
CLI: prefix-to-add of the user name. For example, if you enter 'user' and the
[IPInboundManipulation_Prefix2Ad user name is "john", the new user name is "userjohn".
d]
Suffix to Add Defines the number or string that you want added to the end
CLI: suffix-to-add of the user name. For example, if you enter '01' and the user
[IPInboundManipulation_Suffix2Ad name is "john", the new user name is "john01".
d]
Note:
• Configure stricter classification rules higher up in the table than less strict rules to
ensure the desired rule is used to manipulate the outbound dialog. Strict refers to
the number of matching characteristics configured for the rule. For example, a rule
configured with source host name and source IP Group as matching
characteristics is stricter than a rule configured with only source host name. If the
rule configured with only source host name appears higher up in the table, the
device ("erroneously") uses the rule to manipulate outbound dialogs matching this
source host name (even if they also match the rule appearing lower down in the
table configured with the source IP Group as well).
• SIP URI host name (source and destination) manipulations can also be configured
in the IP Groups table (see 'Configuring IP Groups' on page 359). These
manipulations are simply host name substitutions with the names configured for
the source and destination IP Groups, respectively.
The following procedure describes how to configure Outbound Manipulations rules through
the Web interface. You can also configure it through ini file (IPOutboundManipulation) or
CLI (configure voip > sbc manipulation ip-outbound-manipulation).
Parameter Description
Routing Policy Assigns a Routing Policy to the rule. The Routing Policy
routing-policy-name associates the rule with an SRD(s). The Routing Policy also
defines default LCR settings as well as the LDAP servers if the
[IPOutboundManipulation_RoutingP
routing rule is based on LDAP routing (and Call Setup Rules).
olicyName]
If only one Routing Policy is configured in the Routing Policies
table, the Routing Policy is automatically assigned. If multiple
Routing Policies are configured, no value is assigned.
To configure Routing Policies, see 'Configuring SBC Routing
Policy Rules' on page 656.
Note: The parameter is mandatory.
General
Index Defines an index number for the new table row.
[IPOutboundManipulation_Index] Note: Each row must be configured with a unique index.
Name Defines a descriptive name, which is used when associating
manipulation-name the row in other tables.
Parameter Description
[IPOutboundManipulation_Manipulati The valid value is a string of up to 40 characters. By default,
onName] no value is defined.
Additional Manipulation Determines whether additional manipulation is done for the
is-additional-manipulation table entry rule listed directly above it.
[IPOutboundManipulation_IsAddition [0] No = (Default) Regular manipulation rule - not done in
alManipulation] addition to the rule above it.
[1] Yes = If the previous table row entry rule matched the
call, consider this row entry as a match as well and perform
the manipulation specified by this rule.
Note: Additional manipulation can only be done on a different
item (source URI, destination URI, or calling name) to the rule
configured in the row above (configured by the 'Manipulated
URI' parameter).
Call Trigger Defines the reason (i.e., trigger) for the re-routing of the SIP
trigger request:
[IPOutboundManipulation_Trigger] [0] Any = (Default) Re-routed for all scenarios (re-routes
and non-re-routes).
[1] 3xx = Re-routed if it triggered as a result of a SIP 3xx
response.
[2] REFER = Re-routed if it triggered as a result of a
REFER request.
[3] 3xx or REFER = Applies to options [1] and [2].
[4] Initial only = Regular requests that the device forwards
to a destination. In other words, re-routing of requests
triggered by the receipt of REFER or 3xx does not apply.
Match
Request Type Defines the SIP request type to which the manipulation rule is
request-type applied.
[IPOutboundManipulation_RequestT [0] All = (Default) all SIP messages.
ype] [1] INVITE = All SIP messages except REGISTER and
SUBSCRIBE.
[2] REGISTER = Only SIP REGISTER messages.
[3] SUBSCRIBE = Only SIP SUBSCRIBE messages.
[4] INVITE and REGISTER = All SIP messages except
SUBSCRIBE.
[5] INVITE and SUBSCRIBE = All SIP messages except
REGISTER.
Source IP Group Defines the IP Group from where the INVITE is received.
src-ip-group-name The default value is Any (i.e., any IP Group).
[IPOutboundManipulation_SrcIPGro
upName]
Destination IP Group Defines the IP Group to where the INVITE is to be sent.
dst-ip-group-name The default value is Any (i.e., any IP Group).
[IPOutboundManipulation_DestIPGr
oupName]
Source Username Prefix Defines the prefix of the source SIP URI user name, typically
src-user-name-prefix used in the SIP From header.
Parameter Description
[IPOutboundManipulation_SrcUsern The default value is the asterisk (*) symbol (i.e., any source
amePrefix] username prefix). The prefix can be a single digit or a range of
digits. For available notations, see 'Dialing Plan Notation for
Routing and Manipulation' on page 967.
Note: If you need to manipulate calls of many different source
URI user names, you can use tags (see 'Source Tags'
parameter below) instead of this parameter.
Source Host Defines the source SIP URI host name - full name, typically in
src-host the From header.
[IPOutboundManipulation_SrcHost] The default value is the asterisk (*) symbol (i.e., any source
host name).
Source Tags Assigns a prefix tag to denote source URI user names
src-tags corresponding to the tag configured in the associated Dial
Plan.
[IPOutboundManipulation_SrcTags]
The valid value is a string of up to 20 characters. The tag is
case insensitive.
To configure prefix tags, see 'Configuring Dial Plans' on page
678.
Note:
Make sure that you assign the Dial Plan in which you have
configured the prefix tag, to the related IP Group or SRD.
Instead of using tags and configuring the parameter, you
can use the 'Source Username Prefix' parameter to specify
a specific URI source user or all source users.
Destination Username Prefix Defines the prefix of the destination SIP URI user name,
dst-user-name-prefix typically located in the Request-URI and To headers.
[IPOutboundManipulation_DestUser The default value is the asterisk (*) symbol (i.e., any
namePrefix] destination username prefix). The prefix can be a single digit
or a range of digits. For available notations, see 'Dialing Plan
Notation for Routing and Manipulation' on page 967.
Note: If you need to manipulate calls of many different
destination URI user names, you can use tags (see
'Destination Tags' parameter below) instead of this parameter.
Destination Host Defines the destination SIP URI host name - full name,
dst-host typically located in the Request-URI and To headers.
[IPOutboundManipulation_DestHost] The default value is the asterisk (*) symbol (i.e., any
destination host name).
Destination Tags Assigns a prefix tag to denote destination URI user names
dest-tags corresponding to the tag configured in the associated Dial
Plan.
[IPOutboundManipulation_DestTags]
The valid value is a string of up to 20 characters. The tag is
case insensitive.
To configure prefix tags, see 'Configuring Dial Plans' on page
678.
Note:
Make sure that you assign the Dial Plan in which you have
configured the prefix tag, to the related IP Group or SRD.
Instead of using tags and configuring the parameter, you
can use the 'Destination Username Prefix' parameter to
specify a specific URI destination user or all destinations
Parameter Description
users.
Calling Name Prefix Defines the prefix of the calling name (caller ID). The calling
calling-name-prefix name appears in the SIP From header.
[IPOutboundManipulation_CallingNa The valid value is a string of up to 37 characters. By default,
mePrefix] no prefix is defined.
Parameter Description
[IPOutboundManipulation_Prefix2Ad name is "john", the new user name is "userjohn".
d] If you set the 'Manipulated Item' parameter to Source URI or
Destination URI, you can configure the parameter to a string
of up 49 characters. If you set the 'Manipulated Item'
parameter to Calling Name, you can configure the parameter
to a string of up 36 characters.
Suffix to Add Defines the number or string to add at the end of the
suffix-to-add manipulated item. For example, if you enter '01' and the user
name is "john", the new user name is "john01".
[IPOutboundManipulation_Suffix2Ad
d] If you set the 'Manipulated Item' parameter to Source URI or
Destination URI, you can configure the parameter to a string
of up 49 characters. If you set the 'Manipulated Item'
parameter to Calling Name, you can configure the parameter
to a string of up 36 characters.
Privacy Restriction Mode Defines user privacy handling (i.e., restricting source user
privacy-restriction-mode identity in outgoing SIP dialogs).
[IPOutboundManipulation_PrivacyRe [0] Transparent = (Default) No intervention in SIP privacy.
strictionMode] [1] Don't change privacy = The user identity in the outgoing
SIP dialog remains the same as in the incoming SIP dialog.
If a restricted number exists, the restricted presentation is
normalized as follows:
From URL header: "anonymous@anonymous.invalid"
If a P-Asserted-Identity header exists (either in the
incoming SIP dialog or added by the device), a Privacy
header is added with the value "id".
[2] Restrict = The user identity is restricted. The restriction
presentation is as follows:
From URL header: "anonymous@anonymous.invalid"
If a P-Asserted-Identity header exists (either in the
incoming SIP dialog or added by the device), a Privacy
header is added with the value "id".
[3] Remove Restriction = The device attempts to reveal the
user identity by setting user values in the From header and
removing the privacy "id" value if the Privacy header exists.
If the From header user is anonymous, the value is taken
from the P-Preferred-Identity, P-Asserted-Identity, or
Remote-Party-ID header (if exists).
Note:
Restriction is done only after user number manipulation (if
any).
The device identifies an incoming user as restricted if one
of the following exists:
From header user is "anonymous".
P-Asserted-Identity and Privacy headers contain the
value "id".
interworking of SIP-I and SIP endpoints for the ISUP SPIROU variant (see Enabling
Interworking of SIP and SIP-I Endpoints on page 699).
The following actions are supported by the X-AC-Action header:
To disconnect a call (optionally, after a user-defined time):
X-AC-Action: 'disconnect'
X-AC-Action: 'disconnect;delay=<time in ms>'
To resume a previously suspended call:
X-AC-Action: 'abort-disconnect'
To automatically reply to a message without forwarding the response to the
other side:
X-AC-Action: 'reply'
To automatically reply to a message with a specific SIP response without
forwarding the response to the other side:
X-AC-Action: 'reply;response=<response code, e.g., 200>]'
To switch to a different IP Profile for the call (re-INVITE only), as defined in the
IP Group:
X-AC-Action: 'switch-profile;profile-name=<IP Profile Name>'
X-AC-Action: 'switch-profile;profile-name=<IP Profile
Name>;reason=<PoorInVoiceQuality or
PoorInVoiceQualityFailure>]'
If the IP Profile name contains one or more spaces (e.g., "ITSP NET"), enclose the
name in double quotation marks, for example:
X-AC-Action: 'switch-profile;profile-name="ITSP NET"'
For example, to use the X-AC-Action header to switch IP Profiles from "ITSP-Profile-1" to
"ITSP-Profile-2" during a call for an IP Group (e.g., IP PBX) if the negotiated media port
changes to 7550, perform the following configuration:
1. In the IP Profiles table, configure two IP Profiles ("ITSP-Profile-1" and "ITSP-Profile-
2").
2. In the IP Groups table, assign the main IP Profile ("ITSP-Profile-1") to the IP Group
using the 'IP Profile' parameter.
3. In the Message Manipulations table, configure the following manipulation rule:
• Manipulation Set ID: 1
• Message Type: reinvite.request
• Condition: body.sdp regex (.*)(m=audio 7550 RTP/AVP)(.*)
• Action Subject: header.X-AC-Action
• Action Type: Add
• Action Value: 'switch-profile;profile-name=ITSP-Profile-2'
4. In the IP Groups table, assign the Message Manipulation rule to the IP Group, using
the 'Inbound Message Manipulation Set' parameter.
In the above example, if the device receives from the IP Group a re-INVITE message
whose media port value is 7550, the device adds the SIP header "X-AC-Action: switch-
profile;profile-name=ITSP-Profile-2"to the incoming re-INVITE message. As a result of
receiving this manipulated message, the device starts using IP Profile "ITSP-Profile-2"
instead of "ITSP-Profile-1", for the IP Group.
The figure below shows a conceptual example of routing based on tags, where users
categorized as tag "A" are routed to SIP Trunk "X" and those categorized as tag "B" are
routed to SIP Trunk "Y":
Figure 35-1: Routing based on Prefix Tags
Note:
• User categorization by Dial Plan is done only after the device's Classification and
Inbound Manipulation processes, and before the routing process.
• Once the device successfully categorizes an incoming call by Dial Plan, it not only
uses the resultant tag in the immediate routing or manipulation process, but also in
subsequent routing and manipulation processes that may occur, for example, due
to alternative routing or local handling of call transfer and call forwarding (SIP
3xx\REFER).
• For manipulation, tags are applicable only to outbound manipulation.
You can assign a Dial Plan to an IP Group or SRD. After Classification and Inbound
Manipulation, the device checks if a Dial Plan is associated with the incoming call. It first
checks the source IP Group and if no Dial Plan is assigned, it checks the SRD. If a Dial
Plan is assigned to the IP Group or SRD, the device first searches the Dial Plan for a dial
plan rule that matches the source number and then it searches the Dial Plan for a rule that
matches the destination number. If matching dial plan rules are found, the tags configured
for these rules are used in the routing and/or manipulation processes as source and/or
destination tags.
Note: When tags are used in the IP-to-IP Routing table to determine destination IP
Groups (i.e., 'Destination Type' parameter configured to Destination Tag), the device
searches the Dial Plan for a matching destination (called) prefix number only.
The Dial Plan itself is a set of dial plan rules having the following attributes:
Prefix: The prefix is matched against the source and/or destination number of the
incoming SIP dialog-initiating request.
Tag: The tag corresponds to the matched prefix of the source and/or destination
number and is the categorization result.
You can use various syntax notations to configure the prefix numbers in dial plan rules.
You can configure the prefix as a complete number (all digits) or as a partial number using
some digits and various syntax notations (patterns) to allow the device to match a dial pan
rule for similar source and/or destination numbers. For more information, see the
description of the 'Prefix' parameter (DialPlanRule_Prefix) described later in this section.
The device employs a "best-match" method instead of a "first-match" method to match the
source/destination numbers to prefixes configured in the dial plan. The matching order is
done digit-by-digit and from left to right. The numbers are first matched to the rule
configured with the most constrained (specific) character set. Most constrained implies that
the dial plan pattern that has the fewest possible matches for a digit is matched first. For
example, if one rule contains the "x" wildcard character, which has ten possible matches
(i.e., 0-9) and another rule a specific digit (e.g., 4), the rule with the specific digit is selected
as the matching rule. The best match priority is listed below in chronological order:
Specific character (prefix)
Number range
"x" wildcard, which denotes any digit (0-9)
Suffix, where the longest digits is first matched. For example, ([001-999]) takes
precedence over ([01-99]) which takes precedence over ([1-9]).
. (dot), which denotes any character
For example, the table below shows the best match priority of an incoming call with prefix
number "5234":
Table 35-1: Dial Plan Best Match Priority
Dial Plan
Best Match Priority (Where 1 is Highest)
Prefix Tag
523x A 3
523([4]) or [(5234)] A 4
523[2-6] A 2
523. A 5
5234 B 1
The following examples show how the best-matching method is done. Each example has
two dial plan rules which are shown listed in chronological order as they would be
configured in the table.
For incoming calls with prefix number "5234", the rule with tag B is chosen (more
specific for digit "4"):
Prefix Tag
523x A
5234 B
For incoming calls with prefix number "5234", the rule with tag B is chosen (more
specific for digit "4"):
Prefix Tag
523x A
523[1-9] B
For incoming calls with prefix number "53211111", the rule with tag B is chosen (more
specific for fourth digit):
Prefix Tag
532[1-9]1111 A
5321 B
For incoming calls with prefix number "53124", the rule with tag B is chosen (more
specific for digit "1"):
Prefix Tag
53([2-4]) A
531(4) B
For incoming calls with prefix number "321444", the rule with tag A is chosen and for
incoming calls with prefix number "32144", the rule with tag B is chosen:
Prefix Tag
321xxx A
321 B
For incoming calls with prefix number "5324", the rule with tag B is chosen (prefix is
more specific for digit "4"):
Prefix Tag
532[1-9] A
532[2-4] B
For incoming calls with prefix number "53124", the rule with tag C is chosen (longest
suffix - C has three digits, B two digits and A one digit):
Prefix Tag
53([2-4]) A
53([01-99]) B
53([001-999]) C
For incoming calls with prefix number "53124", the rule with tag B is chosen (suffix is
more specific for digit "4"):
Prefix Tag
53([2-4]) A
53(4),B B
Dial Plans are configured using two tables with parent-child type relationship:
Parent table: Dial Plan table, which defines the name of the Dial Plan. You can
configure up to 10 Dial Plans.
Child table: Dial Plan Rule table, which defines the actual dial plans (rules) per Dial
Plan. You can configure up to 2,000 dial plan rules in total (where all can be
configured for one Dial Plan or configured between different Dial Plans).
The following procedure describes how to configure Dial Plans through the Web interface.
You can also configure it through other management platforms:
Dial Plan table: ini file (DialPlan) or CLI (configure voip > sbc dial-plan)
Dial Plan Rule table: ini file (DialPlanRule) or CLI (configure voip > sbc dial-plan-rule)
3. Configure a Dial Plan name according to the parameters described in the table below.
4. Click Apply.
Table 35-2: Dial Plan Table Parameter Descriptions
Parameter Description
5. In the Dial Plan table, select the row for which you want to configure dial plan rules,
and then click the Dial Plan Rule link located below the table; the Dial Plan Rule table
appears.
6. Click New; the following dialog box appears:
Figure 35-3: Dial Plan Rule Table - Add Dialog Box
7. Configure a dial plan rule according to the parameters described in the table below.
8. Click New, and then save your settings to flash memory.
Table 35-3: Dial Plan Rule Table Parameter Descriptions
Parameter Description
Parameter Description
mixed notation of single numbers and multiple ranges. To
represent the prefix, the notation is enclosed by square
brackets [...]; to represent the suffix, the notation is enclosed
by square brackets which are enclosed by parenthesis ([...]).
For example, to denote numbers 123 through 130, 455, 766,
and 780 through 790:
Prefix: [123-130,455,766,780-790]
Suffix: ([123-130,455,766,780-790])
Note: The ranges and the single numbers in the syntax must
have the same amount of digits. For example, each number
range and single number in the example above consists of
three digits.
Tag Defines a tag.
tag The valid value of the tag:
[DialPlanRule_Tag] Up to 16 characters (alphanumeric and special characters
such as the dollar $ sign).
Case-insensitive.
The tag can be a name (e.g., "India") or a name with a value
(e.g., "Country=India").
You can configure multiple tags, where each tag is separated
by a semicolon (e.g.,
"Belgium;Country1=England;Country2=India").
The value can include dots (.). This can be useful, for
example, when you need to configure the tag as an IP
address in dotted-decimal notation.
Note:
Only one tag name can be configured without a value. For
example, "Belgium;England" is an invalid configuration. An
example of a valid configuration is
"Belgium;Country1=England;Country2=India".
Tag names with values (i.e., name=value) must be unique. For
example, "Country=England;Country=India" is an invalid
configuration. An example of a valid configuration is
"Country1=England;Country2=India".
The tag cannot start with a dot (.); it can be used anywhere
after the first character. For example, ".Country" is an invalid
configuration. Examples of valid configurations are "10.1.1.2"
and "Country=USA.NY".
The same tag can be configured in multiple Dial Plan rules.
3. Select the Save File option, and then click OK; the file is saved to the default
folder on your PC for downloading files.
CLI (to a remote server):
(config-voip)# sbc dial-plan-rule export-csv-to all <URL to
CSV file>
To overwrite all existing Dial Plans with imported Dial Plan file:
Web interface (from a local folder):
1. Open the Dial Plan table.
2. From the 'Action' drop-down menu, choose Import; the following dialog box
appears:
Figure 35-5: Importing Dial Plan Rules for Specific Dial Plan
3. Use the Browse button to select the Dial Plan file on your PC, and then click OK.
CLI (from a remote server):
(config-voip)# sbc dial-plan-rule import-csv-from all <URL of
server>
Note:
• The file import feature only imports rules of Dial Plans that already exist in the Dial
Plan table. If a Dial Plan in the file does not exist in the table, the specific Dial Plan
is not imported.
• Make sure that the names of the Dial Plans in the imported file are identical to the
existing Dial Plan names in the Dial Plan table; otherwise, Dial Plans in the file
with different names are not imported.
• When importing a file, the rules in the imported file replace all existing rules of the
corresponding Dial Plan. For existing Dial Plans in the Dial Plan table that are not
listed in the imported file, the device deletes all their rules. For example, if the
imported file contains only the Dial Plan "MyDialPlan1" and the device is currently
configured with "MyDialPlan1" and "MyDialPlan2", the rules of "MyDialPlan1" in
the imported file replace the rules of "MyDialPlan1" on the device, and the rules of
"MyDialPlan2" on the device are deleted (the Dial Plan name itself remains).
3. From the 'Action' drop-down menu, choose Import; the following dialog box
appears:
Figure 35-6: Importing Dial Plan Rules for Specific Dial Plan
4. Use the Browse button to select the Dial Plan file on your PC, and then click OK.
Note: The rules in the imported file replace all existing rules of the specific Dial Plan.
Note:
• Source and destination tags can be used in the same routing rule.
• The same tag can be used for source and destination tags in the same routing
rule.
The following procedure describes how to configure IP-to-IP routing based on tags.
2. For the IP Group or SRD associated with the calls for which you want to use tag-
based routing, assign the Dial Plan that you configured in Step 1.
• IP Groups table: 'Dial Plan' parameter (IPGroup_SBCDialPlanName) - see
'Configuring IP Groups' on page 359
The following figure displays the device's SIP dialog processing when Dial Plan tags are
used to determine the destination IP Group:
Figure 35-7: SIP Dialog Handling for Tag-Based Routing
The following displays the configuration in the Web interface of the Dial Plan rule for Index
0:
Figure 35-8: Dial Plan configuration Example
2. In the IP Groups table, configure your IP Groups. Make sure that you assign the
source IP Group with the Dial Plan that you configured in Step 1 and that you
configure each destination IP Group with one of the required Dial Plan tags. If the tag
has a value, include it as well. In our example, we will configure three IP Groups:
Parameter Index 0 Index 1 Index 2
Name HQ ENG BEL
Dial Plan Dial Plan 1 - -
Tags - Country=England Country=Belgium
3. In the IP-to-IP Routing table, configure a routing rule where the 'Destination Type'
parameter is configured to Destination Tag and the 'Routing Tag Name' to one of
your Dial Plan tags. In our example, the tag "Country" is used:
Parameter Index 0
Name Europe
Source IP Group HQ
Destination Type Destination Tag
Routing Tag Name Country
Note:
• For configuring Dial Plan tags, see Configuring Dial Plans on page 678:
• Configure the 'Routing Tag Name' parameter with only the name of the tag (i.e.,
without the value, if exists). For example, instead of "Country=England", configure
it as "Country" only.
• If the same Dial Plan tag is configured for an IP Group in the IP Groups table and
an IP Group Set in the IP Group Set table, the IP Group Set takes precedence
and the device sends the SIP dialog to the IP Group(s) belonging to the IP Group
Set.
Configure prefix tags in the Dial Plan file using the following syntax:
[ PLAN<index> ]
<prefix number>,0,<prefix tag>
where:
Index is the Dial Plan index
prefix number is the called or calling number prefix (ranges can be defined in
brackets)
prefix tag is the user-defined prefix tag of up to nine characters, representing the prefix
number
Each prefix tag type - called or calling - must be configured in a dedicated Dial Plan index
number. For example, Dial Plan 1 can be for called prefix tags and Dial Plan 2 for calling
prefix tags.
The example Dial Plan file below defines the prefix tags "LOCL"and "INTL" to represent
different called number prefixes for local and long distance calls:
[ PLAN1 ]
42520[3-5],0,LOCL
425207,0,LOCL
42529,0,LOCL
425200,0,INTL
425100,0,INTL
....
Note:
• Called and calling prefix tags can be used in the same routing rule.
• When using prefix tags, you need to configure manipulation rules to remove the
tags before the device sends the calls to their destinations.
The following procedure describes how to configure IP-to-IP routing using prefix tags.
d. Configure the Dial Plan index for which you configured your prefix tag, in the
'Prefix to Add' or 'Suffix to Add' fields, using the following syntax: $DialPlan<x>,
where x is the Dial Plan index (0 to 7). For example, if the called number is
4252000555, the device manipulates it to LOCL4252000555.
3. Add an SBC IP-to-IP routing rule using the prefix tag to represent the different source
or destination URI user parts:
a. Open the IP-to-IP Routing table (see 'Configuring SBC IP-to-IP Routing Rules' on
page 635), and then click New.
b. Configure the prefix tag in the 'Source Username Prefix' or 'Destination
Username Prefix' fields (e.g., "LOCL", without the quotes).
c. Continue configuring the rule as required.
4. Configure a manipulation rule to remove the prefix tags before the device sends the
message to the destination:
a. Open the Outbound Manipulations table (see 'Configuring IP-to-IP Outbound
Manipulations' on page 671), and then click New.
b. Configure matching characteristics for the incoming call (e.g., set 'Source IP
Group' to "1"), including calls with the prefix tag (in the 'Source Username Prefix'
or 'Destination Username Prefix' fields, enter the prefix tag to remove).
c. Configure the 'Remove from Left' or 'Remove from Right' fields (depending on
whether you added the tag at the beginning or end of the URI user part,
respectively), enter the number of characters making up the tag.
Note: You cannot modify Dial Plan tags using Message Manipulation rules.
Note:
• Malicious Signatures do not apply to the following:
√ Calls from IP Groups where Classification is by Proxy Set.
√ In-dialog SIP sessions (e.g., refresh REGISTER requests and re-INVITEs).
√ Calls from users that are registered with the device.
• If you delete all the entries in the table, when you next reset the device, the table
is populated again with all the default signatures.
You can export / import Malicious Signatures in CSV file format to / from a remote server
through HTTP, HTTPS, or TFTP. To do this, use the following CLI commands:
(config-voip)# sbc malicious-signature-database <export-csv-to |
import-csv-from> <URL>
To apply malicious signatures to calls, you need to enable the use of malicious signatures
for a Message Policy and then assign the Message Policy to the SIP Interface associated
with the calls (i.e., IP Group). To configure Message Policies, see 'Configuring SIP
Message Policy Rules'.
The following procedure describes how to configure Malicious Signatures through the Web
interface. You can also configure it through ini file (MaliciousSignatureDB) or CLI (configure
voip > sbc malicious-signature-database).
Parameter Description
Note:
• The device does not preempt established emergency calls.
• The device does not monitor emergency calls with regards to Quality of
Experience (QoE).
2. Enable the E9-1-1 feature, by configuring the 'PSAP Mode' parameter to PSAP
Server in the IP Groups table for the IP Group of the PSAP server (see 'Enabling the
E9-1-1 Feature' on page 309).
3. Configure routing rules in the IP-to-IP Routing table for routing between the
emergency callers' IP Group and the PSAP server's IP Group. The only special
configuration required for the routing rule from emergency callers to the PSAP server:
• Configure the emergency number (e.g., 911) in the 'Destination Username Prefix'
field.
• Assign the Call Setup rule that you configured for obtaining the ELIN number
from the AD (see Step 1) in the 'Call Setup Rules Set ID' field (see 'Configuring
SBC IP-to-IP Routing Rule for E9-1-1' on page 311).
The SIP-I sends calls, originating from the SS7 network, to the SIP network by adding
ISUP messaging in the SIP INVITE message body. The device can receive such a
message from the SIP-I and remove the ISUP information before forwarding the call to the
SIP endpoint. In the other direction, the device can receive a SIP INVITE message that has
no ISUP information and before forwarding it to the SIP-I endpoint, create a SIP-I message
by adding ISUP information in the SIP body. For SIP-I to SIP-I calls, the device can pass
ISUP data transparently between the endpoints.
Figure 37-4: Example of Interworking SIP and SIP-I
For the interworking process, the device maps between ISUP data (including cause codes)
and SIP headers. For example, the E.164 number in the Request-URI of the outgoing SIP
INVITE is mapped to the Called Party Number parameter of the IAM message, and the
From header of the outgoing INVITE is mapped to the Calling Party Number parameter of
the IAM message.
The ISUP data is included in SIP messages using the Multipurpose Internet Mail
Extensions (MIME) body part, for example (some headers have been removed for
simplicity):
INVITE sip:1774567@172.20.1.177;user=phone SIP/2.0
Via: SIP/2.0/UDP 172.20.73.230:5060;branch=z9hG4bK.iI
...
Accept: application/sdp, application/isup, applicatio
Content-Type: multipart/mixed; boundary=unique-bounda
MIME-Version: 1.0
Content-Length: 350
...
Content-Type: application/isup; version=FTSSURI; base
Content-Disposition: signal; handling=required
01 00 40 01 0a 02 02 08 06 83 10 71 47 65 07 08
01 00 00
--unique-boundary-1—
D6 SIP-T ISUP/IAM (Initial address message)
(--) len:-- >> Nature of connection indicators
Oct 1 : ---0---- Echo ctrl = Half echo not included
----00-- Cont. check = Not required
------00 Satellite = No circuit
(--) len:-- >> Forward call indicators
Oct 1 : 01------ ISUP pref. = Not req. all the way
--0----- ISUP indic. = Not used all the way
---0---- End-end inf = Not available
----0--- Interwork. = Not encountered
-----00- Method. ind = No method available
-------0 Call indic. = as National call
Oct 2 : -----00- SCCP method = No indication
ISUP data, received in the MIME body of the incoming SIP message is parsed according
to the ISUP variant (SPIROU itu or ansi), indicated in the SIP Content-Type header. The
device supports the following ISUP variants (configured by the 'ISUP Variant' parameter in
the IP Profile table):
French (France) specification, SPIROU (Système Pour l'Interconnexion des Réseaux
OUverts), which regulates Telecommunication equipment that interconnect with
networks in France. For SPIROU, the device sets the value of the SIP Content-Type
header to "version=spirou; base=itu-t92+".
ITU-92, where the device sets the value of the SIP Content-Type header to
"version=itu-t92+; base=itu-t92+".
To configure interworking of SIP and SIP-I endpoints, using the 'ISUP Body Handling'
parameter (IpProfile_SBCISUPBodyHandling) in the IP Profile table (see 'Configuring IP
Profiles' on page 433).
You can manipulate ISUP data, by configuring manipulation rules for the SIP Content-Type
and Content-Disposition header values in the Message Manipulations table (see
'Configuring SIP Message Manipulation' on page 409). For a complete description of the
ISUP manipulation syntax, refer to the SIP Message Manipulation Reference Guide. In
addition, you can use AudioCodes proprietary SIP header X-AC-Action in Message
Manipulation rules to support various call actions (e.g., SIP-I SUS and RES messages) for
the ISUP SPIROU variant. For more information, see Using the Proprietary SIP X-AC-
Action Header on page 676.
For two such user registrations as shown in the example above, the device adds two AORs
("300@domain1" and "300@domain2") to its registration database, where each AOR is
assigned the same Contact URI ("300@10.33.2.40"). To route a call for the correct user,
the device needs to search the database for the full URl (user@host parts). To enable this
support, perform the following configuration steps:
The basic SIP call flow for INVITEs to and from the registered user is shown below:
a user agent (UA), to a proxy server and the proxy server then forks the INVITE request to
multiple UAs. Several UAs may answer and the device may therefore, receive several
replies (responses) for the single INVITE request. Each response has a different 'tag' value
in the SIP To header.
During call setup, forked SIP responses may result in a single SDP offer with two or more
SDP answers. The device "hides" all the forked responses from the INVITE-initiating UA,
except the first received response ("active" UA) and it forwards only subsequent requests
and responses from this active UA to the INVITE-initiating UA. All requests/responses from
the other UAs are handled by the device; SDP offers from these UAs are answered with an
"inactive" media.
The device supports two forking modes:
Latch On First: The device forwards only the first received 18x response to the
INVITE-initiating UA and disregards subsequently received 18x forking responses
(with or without SDP).
Sequential: The device forwards all 18x responses to the INVITE-initiating UA,
sequentially (one after another). If 18x arrives with an offer only, only the first offer is
forwarded to the INVITE-initiating UA.
3. Click Apply.
The device also supports media synchronization for call forking. If the active UA is the first
one to send the final response (e.g., 200 OK), the call is established and all other final
responses are acknowledged and a BYE is sent if needed. If another UA sends the first
final response, it is possible that the SDP answer that was forwarded to the INVITE-
initiating UA is irrelevant and thus, media synchronization is needed between the two UAs.
Media synchronization is done by sending a re-INVITE request immediately after the call is
established. The re-INVITE is sent without an SDP offer to the INVITE-initiating UA. This
causes the INVITE-initiating UA to send an offer which the device forwards to the UA that
confirmed the call. Media synchronization is enabled by the EnableSBCMediaSync
parameter.
The device saves the users in its registration database with their phone numbers and
extensions, enabling future routing to these destinations during survivability mode when
communication with the BroadWorks server is lost. When in survivability mode, the device
routes the call to the Contact associated with the dialed phone number or extension
number in the registration database.
3. Click Apply.
To configure this capability, you need to configure a shared-line, inbound manipulation rule
for registration requests to change the destination number of the secondary extension
numbers (e.g. 601 and 602) to the primary extension (e.g., 600). Call forking must also be
enabled. The following procedure describes the main configuration required.
Note:
• The device enables outgoing calls from all equipment that share the same line
simultaneously (usually only one simultaneous call is allowed per a specific shared
line).
• You can configure whether REGISTER messages from secondary lines are
terminated on the device or forwarded transparently (as is), using the
SBCSharedLineRegMode parameter.
• The LED indicator of a shared line may display the wrong current state.
The figure below displays a routing rule example, assuming IP Group "1" represents
the TDM Gateway and IP Group "3" represents the call center agents:
Figure 37-9: Routing Rule Example for Call Center Survivability
38 CRP Overview
The device's Cloud Resilience Package (CRP) application enhances cloud-based or
hosted communications environments by ensuring survivability, high voice quality and
security at enterprise branch offices and cloud service customer premises. CRP is
designed to be deployed at customer sites and branches of:
Cloud-based and hosted communications
Cloud-based or hosted contact-center services
Distributed PBX or unified communications deployments
The CRP application is based on the functionality of the SBC application, providing branch
offices with call routing and survivability support. CRP is implemented in a network
topology where the device is located at the branch office, routing calls between the branch
users, and/or between the branch users and other users located elsewhere (at
headquarters or other branch offices), through a hosted server (IP PBX) located at the
Enterprise's headquarters. The device maintains call continuity even if a failure occurs in
communication with the hosted IP PBX. It does this by using its Call Survivability feature,
enabling the branch users to call one another or make external calls through the device's
PSTN gateway interface (if configured).
Note:
• The CRP application is available only if the device is installed with a License Key
that includes this feature. For installing a License Key, see 'License Key' on page
781.
• For the maximum number of supported CRP sessions and CRP users than can be
registered in the device's registration database, see 'Technical Specifications' on
page 1211.
For cloud providers, CRP ensures uninterrupted communications in the event of lost
connection with the cloud providers’ control systems. For distributed enterprises and
contact centers, CRP is an essential solution for enterprises deploying geographically
distributed communications solutions or distributed call centers with many branch offices.
CRP ensures the delivery of internal and external calls even when the connection with the
centralized control servers is lost.
Table 38-1: Key Features
One of the main advantages of CRP is that it enables quick-and-easy configuration. This is
accomplished by its pre-configured routing entities, whereby only minimal configuration is
required. For example, defining IP addresses to get the device up and running and
deployed in the network.
39 CRP Configuration
This section describes configuration specific to the CRP application. As CRP has similar
functionality to the SBC application, for configuration that is common to the SBC, which is
not covered in this section, see the following SBC sections:
'Configuring Admission Control' on page 623
'Configuring Allowed Audio Coder Groups' on page 428
'Configuring Classification Rules' on page 627
'Configuring Message Condition Rules' on page 415
'Configuring SBC IP-to-IP Routing Rules' on page 635
'Configuring SIP Response Codes for Alternative Routing Reasons' on page 654
'Configuring IP-to-IP Inbound Manipulations' on page 667
'Configuring IP-to-IP Outbound Manipulations' on page 671
Note: The main difference in the common configuration between the CRP and SBC
applications is the navigation menu paths to opening these Web configuration pages.
Wherever "SBC" appears in the menu path, for the CRP application it appears as
"CRP".
Note: The CRP feature is available only if the device is installed with a License Key
that includes this feature. For installing a License Key, see 'License Key' on page 781.
Normal (Default): The CRP interworks between the branch users and the IP PBX
located at headquarters. The CRP forwards all requests (such as for registration) from
the branch users to the IP PBX, and routes the calls based on the IP-to-IP routing
rules. If communication with the IP PBX fails (i.e., Emergency mode), it still allows
calls between the branch users themselves. If this fails, it routes the calls to the PSTN
(if employed).
Figure 39-1: CRP in Normal & Auto Answer to Registrations Modes
Auto Answer to Registrations: This mode is the same as the Normal mode, except
that the CRP registers the branch users in its registration database instead of
forwarding them to the IP PBX.
Note: SIP REGISTER and OPTIONS requests are terminated at the CRP.
Always Emergency: The CRP routes the calls between the branch users themselves
as if connectivity failure has occurred with the IP PBX. The CRP also registers the
branch users in its registration database.
Figure 39-2: CRP in Always Emergency Mode
1 "CRP Users" User LAN users (e.g., IP phones) at the branch office
"CRP Proxy" Server (e.g., hosted IP PBX at the Enterprise's
2 Server
headquarters)
3 "CRP Gateway" Server Device's interface with the PSTN
These IP Groups are used in the IP-to-IP routing rules to indicate the source and
destination of the call (see 'Pre-Configured IP-to-IP Routing Rules' on page 720).
Note:
• These IP Groups cannot be deleted and additional IP Groups cannot be
configured. The IP Groups can be edited, except for the fields listed above, which
are read-only.
• For accessing the IP Groups table and for a description of its parameters, see
'Configuring IP Groups' on page 359.
Note:
• The IP-to-IP Routing table is read-only.
• For accessing the IP-to-IP Routing table and for a description of its parameters,
see 'Configuring SBC IP-to-IP Routing Rules' on page 635.
Note:
• The destination for the routing rule at Index 2 is the source IP Group (i.e., from
where the REGISTER message is received).
• Routing rule at Index 7 appears only if the CRPGatewayFallback parameter is
enabled (see Configuring PSTN Fallback on page 722).
Note:
• Enabling this feature (this routing rule) may expose the device to a security "hole",
allowing calls from the WAN to be routed to the Gateway. Thus, configure this
feature with caution and only if necessary.
• This PSTN routing rule is not an alternative routing rule. In other words, if a match
for a user is located in the database, this PSTN rule will never be used regardless
of the state of the user endpoint (e.g., busy).
40 HA Overview
The device's High Availability (HA) feature provides 1+1 system redundancy using two
devices. If failure occurs in the active device, a switchover occurs to the redundant device
which takes over the call handling process. Thus the continuity of call services is ensured.
All active calls (signaling and media) are maintained upon switchover.
The figure below illustrates the Active-Redundant HA devices under normal operation.
Communication between the two devices is through a Maintenance interface, having a
unique IP address for each device. The devices have identical software and configuration
including network interfaces (i.e., OAMP, Control, and Media), and have identical local-port
cabling of these interfaces.
Note: If the active unit runs an earlier version (e.g., 7.0) than the redundant unit (e.g.,
7.2), the redundant unit is downgraded to the same version as the active unit (e.g.,
7.0).
Thus, under normal operation, one of the devices is in active state while the other is in
redundant state, where both devices share the same configuration and software. Any
subsequent configuration update or software upgrade on the active device is also done on
the redundant device.
In the active device, all logical interfaces (i.e., Media, Control, OAMP, and Maintenance)
are active. In the redundant device, only the Maintenance interface is active, which is used
for connectivity to the active device. Therefore, management is done only through the
active device. Upon a failure in the active device, the redundant device becomes active
and activates all its logical interfaces exactly as was used on the active device.
disconnects (i.e., no link) and these physical network groups are connected OK on the
redundant device, a switchover occurs to the redundant device.
Loss of network (logical) connectivity: No network connectivity, verified by keep-
alive packets between the devices. This applies only to the Maintenance interface.
Note:
• Switchover triggered by loss of physical connectivity in one or more Ethernet
Group is not done if the active device has been configured to a Preempt mode
level of 10. In such a scenario, the device remains active.
• After HA switchover, the active device updates other hosts in the network about
the new mapping of its Layer-2 hardware address to the global IP address, by
sending a broadcast gratuitous Address Resolution Protocol (ARP) message.
You can change the name of each device, as described in the following procedure:
4. Click Apply.
Note: Once the devices are running in HA mode, you can change the name of the
redundant device, through the active device only, in the 'Redundant HA Device Name'
field.
41 HA Configuration
This section describes HA configuration.
Note:
• The Maintenance interface is used for heartbeats and data transfer from active to
standby device and therefore, any short interval interruption in communication
may cause undesired switchovers.
• If you assign the same Underlying Ethernet Device to all the IP network interfaces,
logical separation of traffic may not occur.
If the two devices are connected through two (or more) isolated LAN switches (i.e.,
packets from one switch cannot traverse the second switch), configure the mode to
2RX/2TX:
Figure 41-2: Redundancy Mode for Two Isolated Switches
For Geographical HA (both units are located far from each other), 2Rx/1Tx port mode
connected to a port aggregation switch is the recommended option:
Figure 41-3: Rx/Tx Mode for Geographical HA
Note:
• When two LAN switches are used, the LAN switches must be in the same subnet
(i.e., broadcast domain).
• To configure Rx/Tx modes of the Ethernet ports, see 'Configuring Ethernet Port
Groups' on page 136
Note:
• The HA feature is available only if both devices are installed with a License Key
that includes this feature. For installing a License Key, see 'License Key' on page
781.
• The physical connections of the first and second devices to the network (i.e.,
Maintenance interface and OAMP, Control and Media interfaces) must be
identical. This also means that the two devices must also use the same Ethernet
Groups and the port numbers belonging to these Ethernet Groups. For example, if
the first device uses Ethernet Group 1 (with ports 1 and 2), the second device
must also use Ethernet Group 1 (with ports 1 and 2).
• Before configuring HA, determine the required network topology, as described in
'Network Topology Types and Rx/Tx Ethernet Port Group Settings' on page 729.
• The Maintenance network should be able to perform a fast switchover in case of
link failure and thus, Spanning Tree Protocol (STP) should not be used in this
network; the Ethernet connectivity of the Maintenance interface between the two
devices should be constantly reliable without any disturbances.
Note: During this stage, make sure that the second device is powered off or
disconnected from the network.
more information on initial access, see Assigning the OAMP IP Address on page
43.
b. Open the IP Interfaces table (see 'Configuring IP Network Interfaces' on page
141).
c. Change the default OAMP network settings to suit your networking scheme.
d. Configure the Control and Media network interfaces, as required.
e. Add the HA Maintenance interface (i.e., the MAINTENANCE Application Type).
Note: Make sure that the Maintenance interface uses an Ethernet Device and
Ethernet Group that is not used by any other IP network interface. The Ethernet
Group is associated with the Ethernet Device, which is assigned to the interface.
The IP Interfaces table below shows an example where the Maintenance interface is
configured with Ethernet Device "vlan 2" (which is associated with Ethernet Group
"GROUP_2"), while the other interface is assigned "vlan 1" (associated with Ethernet
Group "GROUP_1"):
Figure 41-4: Configuring MAINTENANCE Interface
2. If the connection is through a switch, the packets of both interfaces should generally
be untagged. To do this, open the Ethernet Devices table (see 'Configuring Underlying
Ethernet Devices' on page 138 ), and then configure the 'Tagging' parameter to
Untagged for the Ethernet Device assigned to the Maintenance interface. The figure
below shows an example (highlighted) where VLAN 2 is configured as the Native
(untagged) VLAN ID of the Ethernet Group "GROUP_2":
Figure 41-5: Configuring Untagged VLAN for Maintenance and Other Interfaces
3. Set the Ethernet port Tx / Rx mode of the Ethernet Group used by the Maintenance
interface (see 'Configuring Ethernet Port Groups' on page 136). The port mode
depends on the type of Maintenance connection between the devices, as described in
'Network Topology Types and Rx/Tx Ethernet Port Group Settings' on page 729.
4. Configure HA parameters:
a. Open the HA Settings page (Setup menu > IP Network tab > Core Entities
folder > HA Settings):
Figure 41-6: HA Settings Page
b. In the 'HA Remote Address' field, enter the Maintenance IP address of the
second device.
c. (Optional) Enable the HA Preempt feature by configuring the 'Preempt Mode'
parameter to Enable, and then setting the priority level of the device in the
'Preempt Priority' field. Make sure that you configure different priority levels for
the two devices. Typically, you would configure the active device with a higher
priority level (number) than the redundant device. The only factor that influences
the configuration is which device has the greater number; the actual number is
not important. For example, configuring the active with 5 and redundant with 4, or
active with 9 and redundant with 2 both assign highest priority to the active
device. Configuring the level to 10 does not cause a switchover upon Ethernet
connectivity loss. For more information on the feature, see 'Device Switchover
upon Failure' on page 726.
5. Burn the configuration to flash without a reset.
6. Power down the device.
7. Configure the second device (see 'Step 2: Configure the Second Device' on page
733).
Note: During this stage, ensure that the first device is powered off or disconnected
from the network.
3. Configure a Maintenance interface for this device. The IP address must be different to
that configured for the Maintenance interface of the first device. The Maintenance
interfaces of the devices must be in the same subnet.
4. Configure the same Ethernet Groups and VLAN IDs of the network interfaces as
configured for the first device.
5. Configure the same Ethernet port Tx / Rx mode of the Ethernet Group used by the
Maintenance interface as configured for the first device.
6. Configure HA parameters in the HA Settings page:
a. In the 'HA Remote Address' field, enter the Maintenance IP address of the first
device.
b. (Optional) Enable the HA Preempt feature by configuring the 'Preempt Mode'
parameter to Enable, and then setting the priority level of the device in the
'Preempt Priority' field. Make sure that you configure different priority levels for
the two devices. Typically, you would configure the active device with a higher
priority level (number) than the redundant device. The only factor that influences
the configuration is which device has the greater number; the actual number is
not important. For example, configuring the active with 5 and redundant with 4, or
active with 9 and redundant with 2 both assign highest priority to the active
device. Configuring the level to 10 does not cause a switchover upon Ethernet
connectivity loss. For more information on the HA Preempt feature, see 'Device
Switchover upon Failure' on page 726.
8. Burn the configuration to flash without a reset.
9. Power down the device.
10. Continue to 'Step 3: Initialize HA on the Devices' on page 734.
Note: You must connect both ports (two) in the Ethernet Group of the Maintenance
interface to the network (i.e., two network cables are used). This provides 1+1
Maintenance port redundancy.
2. Power up the devices; the redundant device synchronizes with the active device and
updates its configuration according to the active device. The synchronization status is
indicated as follows:
• Active device: The Web interface's Monitor page displays "Synchronizing" in the
'HA Status' field.
When synchronization completes, the redundant device resets to apply the received
configuration and software.
When both devices become operational in HA, the HA status is indicated as follows:
• Both devices: The Web interface's Monitor page displays "Operational" in the 'HA
Status' field.
• Active device: The Status LED is lit green - slow-flash, steady on, and then slow
flash.
• Redundant device: The Status LED is lit green - slow-fast flash.
3. Access the active device with its' OAMP IP address and configure the device as
required. For information on configuration done after HA is operational, see
'Configuration while HA is Operational' on page 735.
Note: If the HA system is already in HA Preempt mode and you want to change the
priority of the device, to ensure that system service is maintained and traffic is not
disrupted, it is recommended to set the higher priority to the redundant device and
then reset it. After it synchronizes with the active device, it initiates a switchover and
becomes the new active device (the former active device resets and becomes the
new redundant device).
Use Action
Source Prefix Start Interface Packet Byte Byte
Index Source IP End Port Protocol Specific Upon
Port Length Port Name Size Rate Burst
Interface Match
0
... Various rules for basic traffic.
9
10 10.31.4.61 669 32 669 669 udp Enable HA_IF Allow 0 0 0
11 10.31.4.62 669 32 669 669 udp Enable HA_IF Allow 0 0 0
12 10.31.4.61 0 32 2442 2442 tcp Enable HA_IF Allow 0 0 0
13 10.31.4.62 2442 32 0 65535 tcp Enable HA_IF Allow 0 0 0
14 10.31.4.61 2442 32 0 65535 tcp Enable HA_IF Allow 0 0 0
15 10.31.4.62 0 32 2442 2442 tcp Enable HA_IF Allow 0 0 0
16 10.31.4.61 80 32 0 65535 tcp Enable HA_IF Allow 0 0 0
17 10.31.4.62 80 32 0 65535 tcp Enable HA_IF Allow 0 0 0
18 10.31.4.61 670 32 670 670 udp Enable HA_IF Allow 0 0 0
19 10.31.4.61 680 32 680 680 udp Enable HA_IF Allow 0 0 0
20 10.31.4.62 670 32 670 670 udp Enable HA_IF Allow 0 0 0
21 10.31.4.62 680 32 680 680 udp Enable HA_IF Allow 0 0 0
22 0.0.0.0 0 0 0 65535 Any Disable -- Block 0 0 0
Note:
• The index numbers in the table above may change according to your specific
allow and block rules.
• The last rule (Index 22) is an example of a blocking traffic rule (blocks all other
traffic).
• Configure the firewall on the Active device. This configuration is automatically
applied to the Redundant device.
• If you have an external firewall located between the Active and the Redundant HA
Maintenance interfaces, you must open (allow) the same port ranges as
configured in the table above, on that external firewall.
Note:
• The HA Network Reachability feature is not functional under the following
conditions:
√ HA is disabled (i.e., active device is in standalone mode).
√ HA Preempt Priority is used (to prevent endless loops of switchovers).
√ Number of Ethernet Groups in the redundant device that are in "up" state are
less than on the active device (to prevent endless loops of switchovers).
• If you have configured the HA Network Reachability feature, but the feature is not
operational (see note above), the device sends the SNMP trap event,
acHANetworkWatchdogStatusAlarm to notify of the situation.
• If a switchover occurs due to no ping reply, the device sends the SNMP trap
alarm, acHASystemFaultAlarm to notify of the switchover due to the HA Network
Reachability feature.
• For a detailed description of the HA ping parameters, see 'HA Parameters' on
page 1007.
• In the 'Ping Retries' field, enter the number of ping requests that the device sends
after no ping response is received from the destination, before it considers the
destination as unavailable.
Figure 41-7: Configuring HA Network Reachability
3. Click Apply.
If the feature is operational, the status of the connectivity to the pinged destination is
displayed in the 'Monitor Destination Status' read-only field:
“Enabled": Ping is sent as configured.
"Disabled by configuration and HA state": HA and ping are not configured.
"Disabled by HA state": same as above.
"Disabled by configuration”: same as above.
“Disabled by invalid configuration": invalid configuration, for example, invalid interface
name or destination address (destination address must be different than a local
address and from the redundant device's Maintenance address).
"Disabled by HA priority in use": when HA priority is used, ping mechanism is
disabled.
"Disabled by Eth groups error": when the number of Ethernet Groups in the redundant
device becomes less than in the active device, the ping mechanism is disabled.
“Failed to be activated": Internal error (failed activating the ping mechanism).
42 HA Maintenance
This section describes HA maintenance procedures.
To disconnect HA:
On the active device, enter the following CLI command:
# debug ha disconnect-system < new OAMP address of redundant
device >
Note:
• The new OAMP address of the redundant device must be different to the active
device.
• The HA Maintenance network interface (in the IP Interfaces table) on the
You can later restore the HA system, by following the below procedure.
Note: The procedure assumes that no network changes were made to both devices'
HA Maintenance interface or Ethernet Devices (VLAN); otherwise, the devices may
not be able to communicate with each other.
43 Basic Maintenance
This section describes basic maintenance procedures.
The Web interface also provides you with the following options when resetting the device:
Save current configuration to the device's flash memory (non-volatile) prior to reset
Reset the device only after a user-defined time (Graceful Shutdown) to allow current
calls to end (calls are terminated after this interval)
To reset the device (and save configuration to flash) through CLI, use the following
command:
# reset now
2. From the 'Save To Flash' drop-down list, select one of the following:
• Yes: Current configuration is saved (burned) to flash memory prior to reset
(default).
• No: The device resets without saving the current configuration to flash. All
configuration done after the last configuration save will be discarded (lost) after
reset.
3. From the 'Graceful Option' drop-down list, select one of the following:
• Yes: Reset starts only after a user-defined time, configured in the 'Shutdown
Timeout' field (see next step). During this interval, no new traffic is accepted. If no
traffic exists and the time has not yet expired, the device resets immediately.
• No: Reset begins immediately, regardless of traffic. Any existing traffic is
immediately terminated.
4. In the 'Shutdown Timeout' field (available only if the 'Graceful Option' field is
configured to Yes), enter the time after which the device resets. Note that if no traffic
exists and the time has not yet expired, the device resets.
5. Click the Reset button; a confirmation message box appears, requesting you to
confirm.
6. Click OK to confirm device reset; if the 'Graceful Option' field is configured to Yes (in
Step 3), the reset is delayed and a screen displaying the number of remaining calls
and time is displayed. When the device begins to reset, a message appears to notify
you.
3. Click Apply.
• Navigation tree: Setup menu > Administration tab > Maintenance folder >
Maintenance Actions.
Figure 43-3: Locking and Unlocking the Device
2. From the 'Graceful Option' drop-down list, select one of the following options:
• Yes: The device locks only after a user-defined time, configured in the 'Lock
Timeout' field (see next step). During this interval, no new traffic is accepted. If no
traffic exists and the time has not yet expired, the device locks immediately.
• No: The device locks immediately, terminating all existing traffic.
Note: These options are available only if the current status of the device is in
"UNLOCKED" state.
3. If you configured 'Graceful Option' to Yes (see previous step), then in the 'Lock
Timeout' field, enter the time (in seconds) after which the device locks.
4. Click the LOCK button; a confirmation message box appears requesting you to
confirm device lock.
5. Click OK to confirm; if you configured 'Graceful Option' to Yes, a lock icon is displayed
and a window appears displaying the number of remaining calls and time. If you
configured 'Graceful Option' to No, the lock process begins immediately. The
'Gateway Operational State' read-only field displays "LOCKED" and the device does
not process any calls.
Note: Saving configuration to flash may disrupt current traffic on the device. To avoid
this, disable all new traffic before saving, by performing a graceful lock (see 'Locking
and Unlocking the Device' on page 744).
To perform a switch-over:
1. Open the High Availability Maintenance page:
• Toolbar: Click the Actions button, and then from the drop-down menu, choose
Switchover.
• Navigation tree: Setup menu > Administration tab > Maintenance folder > High
Availability Maintenance.
Figure 44-1: Performing a Device HA Switchover
Note: When resetting the Redundant device, the HA mode becomes temporarily
unavailable.
• Navigation tree: Setup menu > Administration tab > Maintenance folder > High
Availability Maintenance.
Figure 44-2: Resetting Redundant Device
45 Channel Maintenance
This chapter describes various channel-related maintenance procedures.
Note:
• If a voice call is currently in progress on the B-channel, it is disconnected when the
B-channel is restarted.
• B-channel restart can only be done if the D-channel of the trunk to which it
belongs is synchronized (Layer 2).
• B-channel restart does not affect the B-channel's configuration.
When you lock a Trunk Group, the method for taking trunks/channels out-of-service is
determined by the following parameters:
DigitalOOSBehaviorForTrunk parameter per trunk or DigitalOOSBehavior parameter
for all trunks.
If you have configured registration for the Trunk Group (see the 'Registration Mode'
parameter in the Trunk Group Settings table) and you subsequently lock the Trunk Group,
it stops performing registration requests (un-registers) with the Serving IP Group with which
you have configured it to register. When you unlock such a Trunk Group, it starts
performing registration requests (re-registers) with the Serving IP Group once its trunks
return to service.
c. Click Apply.
2. Lock the Trunk Group:
a. Open the Trunk Group Settings table (see 'Configuring Trunk Group Settings' on
page 503).
b. Select the row of the Trunk Group that you want to lock or unlock.
c. Click the Action button located on the table's toolbar, and then from the drop-
down list, choose one of the following:
♦ Lock: Locks the Trunk Group.
♦ Un-Lock: Unlocks a locked Trunk Group.
The Trunk Group Settings table provides the following read-only fields related to locking
and unlocking of a Trunk Group:
'Admin State': Displays the administrators state - "Locked" or "Unlocked"
'Status': Displays the current status of the channels in the Trunk Group:
• "In Service": Indicates that all channels in the Trunk Group are in service, for
example, when the Trunk Group is unlocked or Busy Out state cleared (see the
EnableBusyOut parameter for more information).
• "Going Out Of Service": Appears as soon as you choose the Lock button and
indicates that the device is starting to lock the Trunk Group and take channels out
of service.
• "Going Out Of Service (<duration remaining of graceful period> sec / <number of
calls still active> calls)": Appears when the device is locking the Trunk Group and
indicates the number of buys channels and the time remaining until the graceful
period ends, after which the device locks the channels regardless of whether the
call has ended or not.
• "Out Of Service": All fully configured trunks in the Trunk Group are out of service,
for example, when the Trunk Group is locked or in Busy Out state (see the
EnableBusyOut parameter).
Note:
• If the device is reset, a locked Trunk Group remains locked. If the device is reset
while graceful lock is in progress, the Trunk Group is forced to lock immediately
after the device finishes its reset.
• When the device is in High Availability (HA) mode:
√ After an HA switchover, a locked Trunk Group remains locked.
√ If an HA switchover is initiated while a Trunk Group is in locking progress, the
locking process is stopped and only starts again (with the configured graceful
period) once switchover completes.
√ When HA status is in "Synchronizing" state, the Trunk Group status is not
updated in the Trunk Group Settings table. In addition, the lock/unlock actions
cannot be invoked during this time. When HA synchronization finishes and HA
status is in "Operational" state, the Trunk Group Settings table is refreshed with
the lock/unlock status. The HA state is displayed on the Monitor home page.
46 Software Upgrade
The Web interface's Software Upgrade wizard lets you easily upgrade the device's
software version (.cmp file). You can also use the wizard to load an ini file and Auxiliary
files (e.g., CPT file). However, you can only use the wizard if you at least load a .cmp file.
Once loaded, you can select other file types to load.
You can also use the wizard to upgrade devices in High Availability (HA) mode. You can
choose between two optional HA upgrade methods:
System Reset Upgrade (non-Hitless): Both active and redundant devices are
upgraded simultaneously. Therefore, this method is traffic-affecting and terminates
current calls during the upgrade process. The process is as follows:
1. The active (current) device loads the .cmp file.
2. The active device sends the .cmp file to the redundant device.
3. Both active and redundant devices install and burn the file to flash memory with a
reset. In other words, no HA switchover occurs.
Hitless Upgrade: The devices are upgraded without disrupting traffic (i.e., current calls
are maintained). The process is as follows:
1. The active (current) device loads the .cmp file.
2. The active device sends the .cmp file to the redundant device.
3. The redundant device installs and burns the file to its flash memory with a reset.
The redundant device now runs the new software version.
4. An HA switchover occurs from active to redundant device. Therefore, current
calls are maintained and now processed by the previously redundant device,
which is now the active device.
5. The previously active device (now in redundant mode) installs and burns the file
to flash memory with a reset. Therefore, both devices now run the new software
version.
6. An HA switchover occurs from active device (i.e., the initial redundant device) to
redundant device (i.e., the initial active device) to return the devices to their
original HA state. Only the initial redundant deviceundergoes a reset to return to
redundant state.
Note:
• You can obtain the latest software files from AudioCodes Web site at
http://www.audiocodes.com/downloads.
• When you start the wizard, the rest of the Web interface is unavailable. After the
files are successfully installed with a device reset, access to the full Web interface
is restored.
• If you upgraded your firmware (.cmp file) and the "SW version mismatch" message
appears in the Syslog or Web interface, your License Key does not support the
new .cmp file version. If this occurs, contact AudioCodes support for assistance.
• Instead of manually upgrading the device, you can use the device's Automatic
Update feature for automatic provisioning (see 'Automatic Provisioning' on page
797).
• You can also upgrade the device's firmware by loading a .cmp file from an external
USB hard drive connected to the device's USB port. For more information, see
USB Storage Capabilities on page 817.
The following procedure describes how to load files using the Web interface's Software
Upgrade Wizard. Alternatively, you can load files using the CLI:
cmp file:
copy firmware from <URL>
ini or Auxiliary file:
copy <ini file or auxiliary file> from <URL>
CLI script file:
copy cli-script from <URL>
HA devices:
• Hitless Software Upgrade:
# copy firmware from <URL and file name>
• Non-Hitless Software Upgrade:
# copy firmware from <URL and file name> non-hitless
If you load the firmware file through CLI, when you initiate the copy command a message is
displayed in the console showing the load progress. If other management users are
connected to the device through CLI, the message also appears in their CLI sessions,
preventing them from performing further actions on the device and disrupting the upload
process. For more information, refer to the CLI Reference Guide.
5. Click Start Software Upgrade; the wizard starts, prompting you to load a .cmp file:
Note:
• The Hitless Upgrade and System Reset Upgrade options appear only if the device
is configured for HA.
• At this stage, you can quit the Software Upgrade wizard without having to reset
the device, by clicking Cancel. However, if you continue with the wizard and start
loading the cmp file, the upgrade process must be completed with a device reset.
6. Click Browse, and then navigate to and select the .cmp file.
7. Click Load File; the device begins to install the .cmp file and a progress bar displays
the status of the loading process:
Figure 46-2: CMP File Loading Progress Bar
Note: If you select the Hitless Upgrade option, the wizard can only be used to upload
a .cmp file; Auxiliary and ini files cannot be uploaded.
9. To load additional files, use the Next and Back buttons to navigate through the wizard
to the desired file-load wizard page; otherwise, skip to the next step to load the .cmp
file only.
The wizard page for loading an ini file lets you do one of the following:
• Load a new ini file:
a. Click Browse, and then navigate to and select the new ini file.
b. Click Load File; the device loads the ini file.
• Restore configuration to factory defaults: Clear the 'Use existing configuration'
check box.
• Retain the existing configuration (default): Select the 'Use existing
configuration' check box.
Figure 46-3: Load an INI File in the Software Upgrade Wizard
Note: If you use the wizard to load an ini file, parameters excluded from the ini file are
assigned default values (according to the .cmp file) and thereby, overwrite values
previously configured for these parameters.
10. Click Reset; a progress bar is displayed, indicating the progress of saving the files to
flash and device reset.
Figure 46-4: Progress Bar Indicating Burning Files to Flash
Note: Device reset may take a few minutes (even up to 30 minutes), depending on
.cmp file version.
When the device finishes the installation process and resets, the wizard displays the
following, which lists the installed .cmp software version and other files that you may
also have installed:
Figure 46-5: Software Upgrade Process Completed (Example)
11. Click End Process to close the wizard; the Web Login page appears, allowing you to
log in to your upgraded device.
47 Auxiliary Files
You can load the following Auxiliary files to the device.
Table 47-1: Auxiliary Files
File Description
INI Configures the device. The Web interface enables practically full device
provisioning. However, some features may only be configured by ini file or you
may wish to configure your device through ini file. For more information, see 'INI
File-Based Management' on page 101.
CAS Contains CAS Protocol definitions for CAS-terminated trunks (for various types
of CAS signaling). You can use the supplied files or construct your own files. Up
to eight different CAS files can be installed on the device. For more information,
see CAS Files on page 763.
Call Progress Region-specific, telephone exchange-dependent file that contains the Call
Tones Progress Tones (CPT) levels and frequencies for the device. The default CPT
file is U.S.A. For more information, see 'Call Progress Tones File' on page 759.
Prerecorded The Prerecorded Tones (PRT) file enhances the device's capabilities of playing
Tones a wide range of telephone exchange tones that cannot be defined in the CPT
file. For more information, see 'Prerecorded Tones File' on page 762.
Dial Plan Provides dialing plans, for example, to know when to stop collecting dialed digits
and start forwarding them or for obtaining the destination IP address for
outbound IP routing. For more information, see 'Dial Plan File' on page 763.
User Info The User Information file maps PBX extensions to IP numbers. The file can be
used to represent PBX extensions as IP phones in the global 'IP world'. For
more information, see 'User Information File' on page 771.
AMD Sensitivity Answer Machine Detector (AMD) Sensitivity file containing the AMD Sensitivity
suites. For more information, see AMD Sensitivity File on page 779.
SBC Wizard Contains the vendor-interoperability configuration templates for the SBC
Template Package Configuration Wizard. For more information, see SBC Configuration Wizard on
page 819.
Note:
• You can automatically load Auxiliary files from a remote server using the device's
Automatic Update mechanism (see Automatic Update Mechanism).
• Saving Auxiliary files to flash memory may disrupt traffic on the device. To avoid
this, disable all traffic on the device by performing a graceful lock as described in
'Locking and Unlocking the Device' on page 744.
Note:
• When loading an ini file through the Auxiliary Files page (as described in this
section), only parameter settings specified in the ini file are applied to the device;
all other parameters remain at their current settings.
• If you load an ini file containing Auxiliary file(s), the Auxiliary files specified in the
file overwrite the Auxiliary files currently installed on the device.
2. Click the Browse button corresponding to the Auxiliary file type that you want to load,
navigate to the folder in which the file is located, and then click Open; the name of the
file appears next to the Browse button.
3. Click the corresponding Load File button.
4. Repeat steps 2 through 3 for each file you want to load.
5. Reset the device with a save-to-flash for your settings to take effect (if you have
loaded a Call Progress Tones file).
2. Click the Delete button corresponding to the file that you want deleted; a confirmation
message box appears.
3. Click OK to confirm.
4. Reset the device with a save-to-flash for your settings to take effect.
Note: The CPT file can only be loaded in .dat file format.
You can create up to 32 different Call Progress Tones, each with frequency and format
attributes. The frequency attribute can be single or dual-frequency (in the range of 300 to
1980 Hz) or an Amplitude Modulated (AM). Up to 64 different frequencies are supported.
Only eight AM tones, in the range of 1 to 128 kHz, can be configured (the detection range
is limited to 1 to 50 kHz). Note that when a tone is composed of a single frequency, the
second frequency field must be set to zero.
The format attribute can be one of the following:
Continuous: A steady non-interrupted sound (e.g., a dial tone). Only the 'First Signal
On time' should be specified. All other on and off periods must be set to zero. In this
case, the parameter specifies the detection period. For example, if it equals 300, the
tone is detected after 3 seconds (300 x 10 msec). The minimum detection time is 100
msec.
Cadence: A repeating sequence of on and off sounds. Up to four different sets of
on/off periods can be specified.
Burst: A single sound followed by silence. Only the 'First Signal On time' and 'First
Signal Off time' should be specified. All other on and off periods must be set to zero.
The burst tone is detected after the off time is completed.
You can specify several tones of the same type. These additional tones are used only for
tone detection. Generation of a specific tone conforms to the first definition of the specific
tone. For example, you can define an additional dial tone by appending the second dial
tone's definition lines to the first tone definition in the ini file. The device reports dial tone
detection if either of the two tones is detected.
The Call Progress Tones section of the ini file comprises the following segments:
[NUMBER OF CALL PROGRESS TONES]: Contains the following key:
'Number of Call Progress Tones' defining the number of Call Progress Tones that are
defined in the file.
[CALL PROGRESS TONE #X]: containing the Xth tone definition, starting from 0 and
not exceeding the number of Call Progress Tones less 1 defined in the first section
(e.g., if 10 tones, then it is 0 to 9), using the following keys:
• Tone Type: Call Progress Tone types:
♦ [1] Dial Tone
♦ [2] Ringback Tone
♦ [3] Busy Tone
♦ [4] Congestion Tone
♦ [6] Warning Tone
♦ [7] Reorder Tone
♦ [17] Call Waiting Ringback Tone (heard by the calling party)
♦ [18] Comfort Tone
♦ [23] Hold Tone
♦ [46] Beep Tone
• Tone Modulation Type: Amplitude Modulated (1) or regular (0)
• Tone Form: The tone's format can be one of the following:
♦ Continuous (1)
♦ Cadence (2)
♦ Burst (3)
• Low Freq [Hz]: Frequency (in Hz) of the lower tone component in case of dual
frequency tone, or the frequency of the tone in case of single tone. This is not
relevant to AM tones.
• High Freq [Hz: Frequency (in Hz) of the higher tone component in case of dual
frequency tone, or zero (0) in case of single tone (not relevant to AM tones).
• Low Freq Level [-dBm]: Generation level 0 dBm to -31 dBm in dBm (not
relevant to AM tones).
• High Freq Level: Generation level of 0 to -31 dBm. The value should be set to
32 in the case of a single tone (not relevant to AM tones).
• First Signal On Time [10 msec]: 'Signal On' period (in 10 msec units) for the
first cadence on-off cycle. For continuous tones, the parameter defines the
detection period. For burst tones, it defines the tone's duration.
• First Signal Off Time [10 msec]: 'Signal Off' period (in 10 msec units) for the
first cadence on-off cycle (for cadence tones). For burst tones, the parameter
defines the off time required after the burst tone ends and the tone detection is
reported. For continuous tones, the parameter is ignored.
• Second Signal On Time [10 msec]: 'Signal On' period (in 10 msec units) for the
second cadence on-off cycle. Can be omitted if there isn't a second cadence.
• Second Signal Off Time [10 msec]: 'Signal Off' period (in 10 msec units) for the
second cadence on-off cycle. Can be omitted if there isn't a second cadence.
• Third Signal On Time [10 msec]: 'Signal On' period (in 10 msec units) for the
third cadence on-off cycle. Can be omitted if there isn't a third cadence.
• Third Signal Off Time [10 msec]: 'Signal Off' period (in 10 msec units) for the
third cadence on-off cycle. Can be omitted if there isn't a third cadence.
• Fourth Signal On Time [10 msec]: 'Signal On' period (in 10 msec units) for the
fourth cadence on-off cycle. Can be omitted if there isn't a fourth cadence.
• Fourth Signal Off Time [10 msec]: 'Signal Off' period (in 10 msec units) for the
fourth cadence on-off cycle. Can be omitted if there isn't a fourth cadence.
• Carrier Freq [Hz]: Frequency of the carrier signal for AM tones.
• Modulation Freq [Hz]: Frequency of the modulated signal for AM tones (valid
range from 1 to 128 Hz).
• Signal Level [-dBm]: Level of the tone for AM tones.
• AM Factor [steps of 0.02]: Amplitude modulation factor (valid range from 1 to
50). Recommended values from 10 to 25.
Note:
• When the same frequency is used for a continuous tone and a cadence tone, the
'Signal On Time' parameter of the continuous tone must have a value that is
greater than the 'Signal On Time' parameter of the cadence tone. Otherwise, the
continuous tone is detected instead of the cadence tone.
• The tones frequency must differ by at least 40 Hz between defined tones.
Note:
• The PRT file only generates (plays) tones; detection of tones is according to the
CPT file.
• The PRT file can be up to 4 megabytes in size.
• If the PRT file contains a tone that also exists in the CPT file, the tone in the PRT
file is played instead (i.e., overrides the tone in the CPT file).
• Play of tones from the PRT file is applicable to Gateway and SBC calls.
• The device does not require DSPs for playing tones from a PRT file if the coder
defined for the tone is the same as that used by the current call. If the coders are
different, the device uses DSPs.
• The device requires DSPs for local generation of tones.
• For SBC calls, the PRT file supports only the ringback tone and hold tone.
You can include up to 80 user-defined tones (a maximum of 10 minutes) in a PRT file. The
tones can be recorded using a standard third-party, recording utility (such as Adobe
Audition), and then combined into a single and loadable PRT file (.dat) using the latest
version of AudioCodes DConvert utility (refer to the DConvert Utility User's Guide). Once
created, you need to install the PRT file on the device (flash memory), using the Web
interface (see 'Loading Auxiliary Files' on page 757) or CLI.
You must record the tones (raw data files) with the following properties:
Coders: G.711 A-law or G.711 µ-law (and other coders)
Rate: 8 kHz
Resolution: 8-bit
Channels: mono
The PRT file can include prerecorded audio tones of different coders (e.g., some with
G.711 and some with G.729). The prerecorded tones are played repeatedly. This allows
you to record only part of the tone and then play the tone for the full duration. For example,
if a tone has a cadence of 2 seconds on and 4 seconds off, the recorded file should contain
only these 6 seconds. The device repeatedly plays this cadence for the configured
duration. Similarly, a continuous tone can be played by repeating only part of it.
Note: All CAS files loaded together must belong to the same trunk type (i.e., either E1
or T1).
Note: For the SBC application: The Dial Plan described in this section is for backward
compatibility purposes only. For the new Dial Plan method, see Configuring Dial
Plans on page 678.
Note: For the SBC application: The Dial Plan described in this section is for backward
compatibility purposes only. For the new method, see Configuring Dial Plans on page
678.
The Dial Plan file is a text-based file that can contain up to 8 Dial Plans (Dial Plan indices)
and up to 8,000 rules (lines). The general syntax rules for the Dial Plan file are as follows
(syntax specific to the feature is described in the respective section):
Each Dial Plan index must begin with a Dial Plan name enclosed in square brackets
"[...]" on a new line.
Each line under the Dial Plan index defines a rule.
Empty lines are ignored.
Lines beginning with a semicolon ";" are ignored. The semicolon can be used for
comments.
Creating a Dial Plan file is similar for all Dial Plan features. The main difference is the
syntax used in the Dial Plan file and the method for selecting the Dial Plan index.
Note:
• Only one Dial Plan file can be loaded to the device.
• The Dial Plan file can only be loaded in .dat file format.
Note:
• It may be useful to configure both Dial Plan file and Digit Maps. For example, the
Digit Map can be used for complex digit patterns (which are not supported by the
Dial Plan file) and the Dial Plan can be used for long lists of relatively simple digit
patterns. In addition, as timeout between digits is not supported by the Dial Plan,
the Digit Map can be used to configure digit patterns that are shorter than those in
the Dial Plan or left at default (MaxDigits parameter). For example, the “xx.T” digit
map instructs the device to use the Dial Plan and if no matching digit pattern is
found, it waits for two more digits and then after a timeout (TimeBetweenDigits
parameter), it sends the collected digits. This ensures that calls are not rejected as
a result of their digit pattern not been completed in the Dial Plan.
• This section is applicable only to the Gateway application.
Note:
• To use the Dial Plan file, you must also use a special CAS .dat file that supports
this feature. For more information, contact your AudioCodes sales representative.
• For E1 CAS MFC-R2 variants, which don't support terminating digit for the called
party number, usually I-15, the Dial Plan file and the DigitMapping parameter are
ignored. Instead, you can define a Dial Plan template per trunk using the
parameter CasTrunkDialPlanName_x.
The Dial Plan file can contain up to 8 Dial Plans (Dial Plan indices), with a total of up to
8,000 dialing rules (lines) of distinct prefixes (e.g. area codes, international telephone
number patterns) for the PSTN to which the device is connected.
The Dial Plan file is created in a textual ini file with the following syntax:
<called number prefix>,<total digits to wait before sending>
Each new Dial Plan index begins with a Dial Plan name enclosed in square brackets
"[...]" on a new line.
Each line under the Dial Plan index defines a dialing prefix and the number of digits
expected to follow that prefix. The prefix is separated by a comma "," from the number
of additional digits.
The prefix can include numerical ranges in the format [x-y], as well as multiple
numerical ranges [n-m][x-y] (no comma between them).
The prefix can include the asterisk "*" and number "#" signs.
The number of additional digits can include a numerical range in the format x-y.
Empty lines are ignored.
Lines beginning with a semicolon ";" are ignored. The semicolon can be used for
comments.
Below shows an example of a Dial Plan file (in ini-file format), containing two dial plans:
; Example of dial-plan configuration.
; This file contains two dial plans:
[ PLAN1 ]
; Destination cellular area codes 052, 054, and 050 with 8 digits.
052,8
054,8
050,8
; Defines International prefixes 00, 012, 014.
; The number following these prefixes may
; be 7 to 14 digits in length.
00,7-14
012,7-14
014,7-14
; Defines emergency number 911. No additional digits are expected.
911,0
[ PLAN2 ]
; Defines area codes 02, 03, 04.
; In these area codes, phone numbers have 7 digits.
0[2-4],7
; Operator services starting with a star: *41, *42, *43.
; No additional digits are expected.
*4[1-3],0
The following procedure provides a summary on how to create a Dial Plan file and select
the required Dial Plan index.
6. Click Apply.
Note:
• The Dial Plan file must not contain overlapping prefixes. Attempting to process an
overlapping configuration by the DConvert utility results in an error message
specifying the problematic line.
• The Dial Plan index can be selected globally for all calls (as described in the
previous procedure), or per specific calls using Tel Profiles.
• It may be useful to configure both Dial Plan file and Digit Maps. For example, the
Digit Map can be used for complex digit patterns (which are not supported by the
Dial Plan file) and the Dial Plan can be used for long lists of relatively simple digit
patterns. In addition, as timeout between digits is not supported by the Dial Plan,
the Digit Map can be used to configure digit patterns that are shorter than those
defined in the Dial Plan or left at default (MaxDigits parameter). For example, the
“xx.T” digit map instructs the device to use the Dial Plan and if no matching digit
pattern is found, it waits for two more digits and then after a timeout
(TimeBetweenDigits parameter), it sends the collected digits. Therefore, this
ensures that calls are not rejected as a result of their digit pattern not been
completed in the Dial Plan.
• By default, if no matching digit pattern is found in both the Dial Plan and Digit Map,
the device rejects the call. However, if you set the DisableStrictDialPlan parameter
to 1, the device attempts to complete the call using the MaxDigits and
TimeBetweenDigits parameters. In such a setup, it collects the number of digits
configured by the MaxDigits parameters. If more digits are received, it ignores the
settings of the parameter and collects the digits until the inter-digit timeout
configured by the TimeBetweenDigits parameter is exceeded.
string labels (tags) to represent the many different prefix calling (source) and called
(destination) numbers. The prefix tags are used in the IP-to-Tel Routing table (see
'Configuring IP-to-Tel Routing Rules' on page 518) as source and destination number
matching characteristics for the routing rule. Prefix tags are typically implemented when
you have calls of many different called or calling numbers that need to be routed to the
same destination. Thus, instead of configuring a routing rule for each prefix number, you
need to configure only one routing rule using the prefix tag.
For example, this feature is useful in deployments that need to handle hundreds of call
routing scenarios such as for a large geographical area (a state in the US). Such an area
could consist of hundreds of local area codes as well as codes for international calls. The
local calls and international calls would need to be routed to different SIP trunks. Thus,
instead of configuring many routing rules for each call destination type, you can simply
configure two routing rules, one with a unique prefix tag representing the different local
area codes and the other with a prefix tag representing international calls.
Note:
• When using prefix tags, you need to configure manipulation rules to remove the
tags before the device sends the calls to their destinations.
• Called and calling prefix tags can be used in the same routing rule.
• This section is applicable only to the Gateway application .
Use the following syntax to configure prefix tags in the Dial Plan file:
[ PLAN<index> ]
<prefix number>,0,<prefix tag>
where:
Index is the Dial Plan index
prefix number is the called or calling number prefix (ranges can be defined in
brackets)
prefix tag is the user-defined prefix tag of up to nine characters, representing the prefix
number
Each prefix tag type - called or calling - must be configured in a dedicated Dial Plan index
number. For example, Dial Plan 1 can be for called prefix tags only and Dial Plan 2 for
calling prefix tags only.
The example Dial Plan file below defines the prefix tags "LOCL"and "LONG" to represent
different called number prefixes for local and long distance calls respectively:
[ PLAN1 ]
42520[3-5],0,LOCL
425207,0,LOCL
42529,0,LOCL
425200,0,LONG
425100,0,LONG
....
The following procedure describes how to configure IP-to-Tel routing using prefix tags.
b. In the 'IP-to-Tel Tagging Destination Dial Plan Index' field, enter the Dial Plan
index that you want to use for prefix tags for called number prefixes.
c. In the 'IP-to-Tel Tagging Source Dial Plan Index' field, enter the Dial Plan index
that you want to use for prefix tags for calling number prefixes.
Figure 47-3: Specifying Dial Plan for Prefix Tags
d. Click Apply.
3. Configure the device to perform the routing process before manipulation:
a. Open the Routing Settings page (see previous step).
b. From the 'IP-to-Tel Routing Mode' drop-down list, select Route calls before
manipulation, and then click Apply.
4. Configure IP-to-Tel routing rules where the prefix tags are used as matching
characteristics for destination or source number prefixes:
a. Open the IP-to-Tel Routing table (see 'Configuring IP-to-Tel Routing Rules' on
page 518).
b. Configure routing rules using the one or both of the following fields for specifying
the tags:
♦ 'Destination Phone Prefix': Prefix tags for called number prefixes: For
example, configure two routing rules:
Configure the field to "LOCL" and the 'Trunk Group ID' field to 1 (local
Trunk Group).
Configure the field to "LONG" and the 'Trunk Group ID' field to 2 (long
distance Trunk Group).
♦ 'Source Phone Prefix': Prefix tags for calling number prefixes.
Figure 47-4: Configuring IP-to-Tel Routing Based on Dial Plan Prefix Tags
Note: For the SBC application, the method described in this section for obtaining an
IP address using the Dial Plan file is for backward compatibility purposes only. For the
new method, see Configuring Dial Plans on page 678.
Note:
• Tel-to-IP routing is performed on the original source number if the parameter 'Tel
to IP Routing Mode' is set to 'Route calls before manipulation'.
• Tel-to-IP routing is performed on the modified source number as defined in the
Dial Plan file, if the parameter 'Tel To IP Routing Mode' is set to 'Route calls after
manipulation'.
• Source number Tel-to-IP manipulation is performed on the modified source
number as defined in the Dial Plan file.
Note: The 'Enable User-Information Usage' parameter appears in the Web interface
only if the device's License Key is defined with far-end users.
4. Reset the device with a save-to-flash for your settings to take effect; the User Info
table now appears in the Web interface.
Note: If you have configured regular IP-to-Tel manipulation rules (see 'Configuring
Source/Destination Number Manipulation' on page 537), the device applies these
rules before applying the mapping rules of the User Info table.
• Tel-to-IP Calls: Maps the calling (source) PBX extension to the "global" number.
For example, if the device receives a Tel call from PBX extension 402, it changes
this calling number to 638002, and then sends call to the IP side with this calling
number. In addition to the "global" phone number, the display name (caller ID)
configured for the PBX user in the User Info table is used in the SIP From header.
Note: If you have configured regular Tel-to-IP manipulation rules (see 'Configuring
Source/Destination Number Manipulation' on page 537), the device applies these
rules before applying the mapping rules of the User Info table.
Registering Users: The device can register each PBX user configured in the User
Info table. For each user, the device sends a SIP REGISTER to an external IP-based
Registrar server, using the "global" number in the From/To headers. If authentication
is necessary for registration, the device sends the user's username and password,
configured in the User Info table, in the SIP MD5 Authorization header.
You can configure up to 500 mapping rules in the GW User Info table. These rules can be
configured using any of the following methods:
Web interface - see 'Configuring GW User Info Table through Web Interface' on page
773
CLI - see Configuring GW User Info Table through CLI on page 774
Loadable User Info file - see 'Configuring GW User Info Table in Loadable Text File'
on page 775
Note:
• To enable user registration, configure the following parameters:
√ 'Enable Registration': Enable (IsRegisterNeeded is set to 1).
√ 'Registration Mode': Per Endpoint (AuthenticationMode is set to 0).
Note:
• To configure the User Info table, make sure that you have enabled the feature, as
described in 'Enabling the User Info Table' on page 771.
• If a User Info file is loaded to the device (as described in 'Configuring GW User
Info Table in Loadable Text File' on page 775), all previously configured entries
are removed from the table in the Web interface and replaced with the entries from
the loaded User Info file.
Parameter Description
Parameter Description
password (0aGzoKfh5uI=)
status (not-resgistered)
To search a user by pbx-ext:
(sip-def-proxy-and-reg)# user-info find <pbx-ext e.g., 405>
405: Found at index 0 in GW user info table, not registered
Note: To configure the User Info table, make sure that you have enabled the feature
as described in 'Enabling the User Info Table' on page 771.
Note:
• Make sure that there are no spaces between the values.
• Make sure that the last line in the User Info file ends with a carriage return (i.e., by
pressing the <Enter> key).
• To modify the GW User Info table using a User Info file, you need to load to the
device a new User Info file containing your modifications.
402,638002,Lee,leem,4321
403,638003,Sue,suer,8790
404,638004,John,johnd,7694
405,638005,Pam,pame,3928
406,638006,Steve,steveg,1119
407,638007,Fred,frede,8142
408,638008,Maggie,maggiea,9807
Note:
• To configure the User Info table, make sure that you have enabled the feature, as
described in 'Enabling the User Info Table' on page 771.
• If you load any User Info file to the device, all previously configured entries are
removed from the table in the Web interface and replaced with the entries from the
loaded User Info file.
To configure the SBC User Info table through the Web interface:
1. Open the SBC User Info table (Setup menu > Signaling & Media tab > SBC folder >
User Information).
2. Click New; the following dialog box appears:
Figure 47-7: SBC User Info Table - Add Dialog Box
Parameter Description
Local User Defines the user and is used as the Request-URI user part for
[SBCUserInfoTable_LocalUser] the AOR in the database.
The valid value is a string of up to 10 characters.
Parameter Description
Note: To configure the User Info table, make sure that you have enabled the feature
as described in 'Enabling the User Info Table' on page 771.
Note:
• Make sure that there are no spaces between the values.
• To modify the SBC User Info table using a User Info file, you need to load to the
device a new User Info file containing your modifications.
whether a human or answering machine has answered the call, and is based on North
American English. In most cases, the detection algorithms in this file suffice even when
your deployment is in a region where a language other than English is spoken. However, if
you wish to replace the default file with a different AMD Sensitivity file containing
customized detection algorithms, please contact your AudioCodes sales representative for
more information.
The AMD Sensitivity file is created in .xml format and then converted to a binary .dat file
that can be installed on the device. The XML-to-binary format conversion can be done
using AudioCodes DConvert utility. For more information on using this utility, refer to
DConvert Utility User's Guide. Only one AMD Sensitivity file can be installed on the device.
To install a new AMD Sensitivity file, use any of the following methods:
Web interface: Auxiliary Files page - see 'Loading Auxiliary Files' on page 757.
TFTP during initialization: You need to configure the ini file parameter,
AMDSensitivityFileName, and then copy the AMD Sensitivity file to the TFTP
directory.
Automatic Update feature: For more information, see Automatic Update Mechanism.
For this method, the AMDSensitivityFileUrl parameter must be set through SNMP or
ini file.
For more information on the AMD feature, see 'Answering Machine Detection (AMD)' on
page 208.
48 License Key
The License Key determines the device's supported features and call capacity, as ordered
from your AudioCodes sales representative. You can upgrade or change your device's
supported features and capacity, by purchasing and installing a new License Key that
match your requirements.
Note: The availability of certain Web pages depends on the installed License Key.
The License Key page displays your ordered features and capabilities as well as the
following general information:
Product Key: Device's Product Key - for more information, see Viewing the Device's
Product Key on page 791.
Serial Number: Device's serial number.
Board Type: AudioCodes internal identification number of the type of your device.
Remote License Server / Remote License Server IP: For more information, see
Upgrading SBC Capacity Licenses by License Pool Manager Server on page 789.
Note: When you install a new License Key, it overwrites the previously installed
License Key. Any license-based features that were included in the old License Key,
but not included in the new License Key, will no longer be available.
Red Indicates features from the previous License Key that were not included in the new
License Key and are no longer available.
Note: After you install the License Key (device reset with a save-to-flash), the icons
no longer appear and the License Key page displays only features and capacity of
the new License Key.
Note:
• The License Key installation process includes a device reset and therefore, is
traffic-affecting. To minimize the disruption of current calls, it is recommended to
perform this procedure during periods of low traffic.
• Installation of License Keys in string format is not applicable to devices in HA
mode.
3. Click Load By String; the Load Feature Key By String dialog box appears.
4. In the text box, paste your License Key string, as shown in the following example:
Figure 48-3: Pasting License Key String in Load Feature Key By String Dialog Box
5. Click Apply; the dialog box closes and the Apply New License Key button appears.
The License Key page uses color-coded icons to indicate the changes between the
previous License Key and the newly loaded License Key (for more information, see
Installing License Key through Web Interface on page 789).
6. Click Apply New License Key; the following message box appears:
Figure 48-4: Apply New License Key Message
7. Click Reset; the device begins to save the file to flash memory with a reset and the
following progress message box appears:
Figure 48-5: Reset in Progress for License Key
8. Click Close to close the message box; you are logged out of the Web interface and
prompted to log in again. The features and capabilities displayed on the License Key
page now reflect the newly installed License Key.
Note: The License Key installation process includes a device reset and is therefore,
traffic-affecting. To minimize the disruption of current calls, it is recommended to
perform this procedure during periods of low traffic.
To install a License Key file for standalone devices through Web interface:
1. Open the License Key page (see Viewing the License Key on page 781).
2. Back up the currently installed License Key, as a precaution. If the new License Key
does not comply with your requirements, you can re-load this backed-up License Key
to restore the device's original capabilities. For backing up the License Key, see
Backing up the License Key on page 790.
3. Click the Load By File button, navigate to the License Key file on your computer, and
then select the file to load to the device; the Apply New License Key button appears.
The License Key page uses color-coded icons to indicate the changes between the
previous License Key and the newly loaded License Key (for more information, see
Installing License Key through Web Interface on page 789).
Note: If want to cancel installation, reset the device without a save to flash. For more
information, see Resetting the Device on page 743.
4. Click Apply New License Key; the following message box appears:
Figure 48-7: Apply New License Key Message
5. Click Reset; the device begins to save the file to flash memory with a reset and the
following progress message box appears:
Figure 48-8: Reset in Progress for License Key
6. Clock Close to close the message box; you are logged out of the Web interface and
prompted to log in again. The features and capabilities displayed on the License Key
page now reflect the newly installed License Key.
Note:
• The License Key file for HA contains two License Keys - one for the active device
and one for the redundant device. Each License Key has a different serial number
("S/N"), which reflects the serial number of each device in the HA system.
• Currently, hitless software downgrade from Version 7.2.150 to an earlier version is
not supported (and the non-hitless method must be used).
then select the file to load to the device; the Apply New License Key button appears.
The License Key page uses color-coded icons to indicate the changes between the
previous License Key and the newly loaded License Key (for more information, see
Installing License Key through Web Interface on page 789).
Note: If want to cancel installation, reset the device without a save to flash. For more
information, see Resetting the Device 743.
6. Clock Close to close the message box; you are logged out of the Web interface and
prompted to log in again. The features and capabilities displayed on the License Key
page now reflect the newly installed License Key.
3. Verify that the content of the file has not been altered.
The number of sessions received from the License Pool Manager Server are displayed
under the "remote" column while the sessions from the locally installed License Key are
displayed under the "local" column. The far-right column displays the total sessions, which
is the summation of the remote and local sessions. However, the total sessions is only
updated once the remote license is applied to the device with a reset (initiated by the
License Pool Manager or locally on the device by the management user).
Communication between the device and License Pool Manager Server is through HTTPS
(port 443) and SNMP. If a firewall exists in the network, make sure that ports for these
applications are opened. The connectivity status with the License Pool Manager Server is
displayed in the top section of the License Key page, as shown in the example below:
Figure 48-15: Connectivity Status with License Pool Manager Server
The device periodically checks with the License Pool Manager Server for SBC capacity
licenses. The License Pool Manager Server identifies the device by serial number. If it has
an SBC license for the device, it sends it to the device. If the device's installed License Key
already includes SBC capacity figures, the SBC license allocated from the pool is simply
added to it (but up to the device's maximum supported capacity capabilities). For
standalone devices, you must reset the device with a save to flash for the allocated SBC
license to take effect. If communication with the License Pool Manager Server is lost for a
long duration, the device discards the allocated SBC license (i.e., expires) and resets with
its initial, local SBC license according to the local License Key. This mechanism prevents
misuse of SBC licenses allocated by the License Pool Manager Server.
When the device operates in High-Availability (HA) mode, the active and redundant
devices are installed with the new SBC license from the License Pool Manager without
affecting traffic. This is achieved by a hitless license upgrade mechanism, whereby the
License Pool Manager first downloads the license to the redundant device, resets it, and
then triggers the devices to perform an HA switchover. It then downloads the same license
to the previously active device (now the redundant), resets it, and then triggers another HA
switchover. Therefore, currently active calls are maintained throughout the process.
The device sends the following SNMP alarms relating to the allocation/de-allocation of SBC
licenses by the License Pool Manager Server:
acLicensePoolInfraAlarm (OID 1.3.6.1.4.1.5003.9.10.1.21.2.0.106)
acLicensePoolApplicationAlarm (OID 1.3.6.1.4.1.5003.9.10.1.21.2.0.107)
acLicensePoolOverAllocationAlarm (OID 1.3.6.1.4.1.5003.9.10.1.21.2.0.125)
For more information on the alarms, refer to the SNMP Reference Guide.
Note:
• No configuration is required on the device; the License Pool Manager Server
controls the allocation/de-allocation of its resource pool to the managed devices.
For more information on the License Pool Manager Server, refer to the OVOC
User's Manual.
• The allocation/de-allocation of SBC licenses to standalone devices by the License
Pool Manager Server is service affecting and requires a device reset.
• For HA systems, the License Pool Manager Server automatically allocates an
equal number of SBC licenses (sessions) to both the active and redundant
devices. For example, if the License Pool Manager Server allocates 200 sessions
to the active device, it also allocates 200 to the redundant. Thus, it is important to
take this into consideration when ordering a license pool.
• If the device is restored to factory defaults, the SBC licenses allocated by the
License Pool Manager Server are removed and the SBC licenses from the locally
installed License Key are applied.
• If the device is allocated an SBC license by the License Pool Manager Server that
exceeds the maximum number of sessions that the device can support, the device
sets the number of sessions to its maximum supported.
• : Copies the License Key as a string to your computer's clipboard. You can
then paste the string into any application, for example, an e-mail message.
49 Configuration File
This section describes how to save the device's configuration to a file and how to load a
configuration file to the device.
Note:
• The saved configuration file includes only parameters whose values you have
modified.
• To save the configuration as a CLI script file to a remote server (TFTP or
HTTP/S):
# write-and-backup to <URL with file name>
• To save the configuration to a USB device plugged into the device:
# write-and-backup to usb:///<file name>
Warning:
• When loading an ini file as described in this section, parameters not included in
the ini file are restored to default settings. If you want to keep the device's current
configuration settings and also apply the settings specified in the ini file, load the
file through the Auxiliary Files page, as described in Loading Auxiliary Files
through Web Interface on page 758.
• Regarding device reset when loading a configuration file:
√ ini File: The device automatically resets for the settings to take effect.
√ CLI Script File: The device resets only if the file contains the reload if-needed
command (on the last line).
√ CLI Startup Script File: The device automatically resets twice for the settings to
take effect.
50 Automatic Provisioning
This chapter describes the device's automatic provisioning mechanisms.
Note:
• When using DHCP to acquire an IP address, the IP Interfaces table, VLANs and
other advanced configuration options are disabled.
• For additional DHCP parameters, see 'DHCP Parameters' on page 994.
3. Click Apply.
4. To activate the DHCP process, reset the device.
The following shows an example of a configuration file for a Linux DHCP server
(dhcpd.conf). The devices are allocated temporary IP addresses in the range 10.31.4.53 to
Note:
• If the DHCP server denies the use of the device's current IP address and specifies
a different IP address (according to RFC 1541), the device must change its
networking parameters. If this occurs while calls are in progress, they are not
automatically rerouted to the new network address. Therefore, administrators are
advised to configure DHCP servers to allow renewal of IP addresses.
• If the device's network cable is disconnected and then reconnected, a DHCP
renewal is performed (to verify that the device is still connected to the same
network). The device also includes its product name in the DHCP Option 60
Vendor Class Identifier. The DHCP server can use this product name to assign an
IP address accordingly.
• After power-up, the device performs two distinct DHCP sequences. Only in the
second sequence is DHCP Option 60 included. If the device is software reset
(e.g., from the Web interface or SNMP), only a single DHCP sequence containing
Option 60 is sent.
pool {
allow members of "audiocodes";
range 10.31.4.53 10.31.4.75;
option routers 10.31.0.1;
option subnet-mask 255.255.0.0;
option domain-name-servers 10.1.0.11;
option bootfile-name
"INI=http://www.corp.com/master.ini";
option dhcp-parameter-request-list 1,3,6,51,67;
}
}
Note:
• The value of Option 67 must include the URL address, using the following syntax:
"INI=<URL with ini file name>"
• This method is NAT-safe.
To configure the device for automatic provisioning through HTTP/S using DHCP
Option 67:
1. Enable DHCP client functionality, by configuring the following ini file parameter:
DHCPEnable = 1
2. Enable the device to include DHCP Option 67 in DHCP Option 55 (Parameter
Request List) when requesting HTTP provisioning parameters from a DHCP server,
using the following ini file parameter:
DHCPRequestTFTPParams = 1
3. Reset the device with a save-to-flash for your settings to take effect.
To configure the device for automatic provisioning through TFTP using DHCP
Option 66:
1. Enable DHCP client functionality, by configuring the following ini file parameter:
DHCPEnable = 1
2. Enable the device to include DHCP Option 66 in DHCP Option 55 (Parameter
Request List) when requesting TFTP provisioning parameters from a DHCP server,
using the following ini file parameter:
DHCPRequestTFTPParams = 1
3. Reset the device with a save-to-flash for your settings to take effect.
Note:
• Access to the core network through TFTP is not NAT-safe.
• The TFTP data block size (packets) when downloading a file from a TFTP server
for the Automatic Update mechanism can be configured using the
AUPDTftpBlockSize parameter.
797.
4. Enable the device to include DHCP Option 160 in the DHCP Parameter Request List
field of the DHCP request packet that is sent to the DHCP server. Do this by loading
an ini file to the device with the following parameter setting:
DhcpOption160Support = 1
5. Reset the device with a save-to-flash for your settings to take effect.
Warning: If you use the IniFileURL parameter for the Automatic Update feature, do
not use the Web interface to configure the device. If you do configure the device
through the Web interface and save (burn) the new settings to the device's flash
memory, the IniFileURL parameter is automatically set to 0 and Automatic Updates is
consequently disabled. To enable Automatic Updates again, you need to re-load the
ini file (using the Web interface or BootP) with the correct IniFileURL settings. As a
safeguard to an unintended save-to-flash when resetting the device, if the device is
configured for Automatic Updates, the 'Burn To FLASH' field under the Reset
Configuration group in the Web interface's Maintenance Actions page is automatically
set to No by default.
Note:
• For a description of all the Automatic Update parameters, see 'Automatic Update
Parameters' on page 984 or refer to the CLI Reference Guide.
• For additional security, use HTTPS or FTPS. The device supports HTTPS (RFC
2818) and FTPS using the AUTH TLS method <draft-murray-auth-ftp-ssl-16>.
• CLI Script File: Contains only CLI commands and configures all the device's
functionalities (except commands such as show, debug or copy). The file updates
the device's configuration only according to the configuration settings in the file.
The device's existing configuration settings (not included in the file) are retained.
The device does not undergo a reset and therefore, this file typically contains
configuration settings that do not require a device reset. If a reset is required, for
example, to apply certain settings, you must include the following CLI command
(root level) at the end of the file:
# reload if-needed
To configure the URL of the server where the file is located, use the
AUPDCliScriptURL ini file parameter or CLI command, configure system >
automatic-update > cli-script <URL>.
• Startup Script File: Contains only CLI commands and configures all the device's
functionalities (except commands such as show, debug or copy). The file updates
the device's configuration according to the configuration settings in the file and
sets all other parameters that are not included in the file to factory defaults. The
file causes two device resets to apply the settings. Therefore, the file typically
contains the Automatic Update settings and other configuration settings that
require a device reset. The URL of the server where this file is located is
configured by the AUPDStartupScriptURL ini file parameter or CLI command,
configure system > automatic-update > startup-script <URL>.
Note: For configuration files (ini), the file name in the URL can automatically contain
the device's MAC address for enabling the device to download a file unique to the
device. For more information, see 'MAC Address P;aceholder in Configuration File
Name' on page 804.
Note: If you write the MAC address placeholder string in lower case (i.e., "<mac>"),
the device adds the MAC address in lower case to the file name (e.g.,
config_<mac>.ini results in config_00908f053736e); if in upper case (i.e., "<MAC>"),
the device adds the MAC address in upper case to the file name (e.g.,
config_<MAC>.ini results in config_00908F053736E).
Note:
• Unlike the parameters that define specific URLs for Auxiliary files (e.g.,
CptFileURL), the file template feature always retains the URLs after each
automatic update process. Therefore, with the file template the device always
attempts to download the files upon each automatic update process.
• If you configure a parameter used to define a URL for a specific file (e.g.,
CptFileURL), the settings of the TemplateUrl parameter is ignored for the specific
file type (e.g., CPT file).
• Additional placeholders can be used in the file name in the URL, for example,
<MAC> for MAC address (see 'MAC Address Placeholder in Configuration File
Name' on page 804).
c. Click Apply.
To enable through CLI: configure voip > sip-definition advanced-settings > sip-
remote-reset.
Note: If you configure the AupdHttpUserAgent parameter with the <CONF> variable
tag, you must reset the device with a save-to-flash for your settings to take effect.
4. If the provisioning server has relevant files available for the device, the following
occurs, depending on file type and configuration:
• File Download upon each Automatic Update process: This is applicable to
software (.cmp), ini files. In the sent HTTP Get request, the device uses the
HTTP If-Modified-Since header to determine whether to download these files.
The header contains the date and time (timestamp) of when the device last
downloaded the file from the specific URL. This date and time is regardless of
whether the file was installed or not on the device. An example of an If-Modified-
Since header is shown below:
If-Modified-Since: Mon, 1 January 2014 19:43:31 GMT
If the file on the provisioning server was unchanged (not modified) since the date
and time specified in the header, the server replies with an HTTP 304 response
and the file is not downloaded. If the file was modified, the provisioning server
sends an HTTP 200 OK response with the file in the body of the HTTP response.
The device downloads the file and compares the version of the file with the
currently installed version on its flash memory. If the downloaded file is of a later
version, the device installs it after the device resets (which is only done after the
device completes all file downloads); otherwise, the device does not reset and
does not install the file.
To enable the automatic software (.cmp) file download method based on this
timestamp method, use the ini file parameter, AutoCmpFileUrl or CLI command,
configure system > automatic-update > auto-firmware <URL>. The device uses
the same configured URL to download the .cmp file for each subsequent
Automatic Update process.
You can also enable the device to run a CRC on the downloaded configuration
file (ini) to determine whether the file has changed in comparison to the
previously downloaded file. Depending on the CRC result, the device can install
or discard the downloaded file. For more information, see 'Cyclic Redundancy
Check on Downloaded Configuration Files' on page 811.
Note:
• When this method is used, there is typically no need for the provisioning server to
check the device’s current firmware version using the HTTP-User-Agent header.
• The Automatic Update feature assumes that the Web server conforms to the
HTTP standard. If the Web server ignores the If-Modified-Since header or doesn’t
provide the current date and time during the HTTP 200 OK response, the device
may reset itself repeatedly. To overcome this problem, modify the update
frequency, using the ini file parameter AutoUpdateFrequency or CLI command
configure system > automatic update > update-frequency.
Note:
• For one-time file download, the HTTP Get request sent by the device does not
include the If-Modified-Since header. Instead, the HTTP-User-Agent header can
be used in the HTTP Get request to determine whether firmware update is
required.
• When downloading SSL certificate files, it is recommended to use HTTPS with
mutual authentication for secure transfer of the SSL Private Key.
• After the device downloads the License Key file (FeatureKeyURL), it checks that
the serial number in the file (“S/N <serial number>") is the same as that of the
device. If the serial number is the same and the license key is different to the one
currently installed on the device, it applies the new License Key. For devices in HA
mode, the License Key is applied to both active and redundant units.
5. If the device receives an HTTP 301/302/303 redirect response from the provisioning
server, it establishes a connection with the new server at the redirect URL and re-
sends the HTTP Get request.
Warning: If you use the ResetNow parameter in an ini file for periodic automatic
provisioning with non-HTTP (e.g., TFTP) and without CRC, the device resets after
every file download. Therefore, use the parameter with caution and only if necessary
for your deployment requirements.
Note:
• For ini file downloads, by default, parameters not included in the file are set to
defaults. To retain the current settings of these parameters, set the
SetDefaultOnINIFileProcess parameter to 0.
• If you have configured one-time software file (.cmp) download (configured by the
ini file parameter CmpFileURL or CLI command configure system > automatic-
update > firmware), the device will only apply the file if one-time software updates
are enabled. This is disabled by default to prevent unintentional software
upgrades. To enable one-time software upgrades, set the ini file parameter
AutoUpdateCmpFile to 1 or CLI command, configure system > automatic-update >
update-firmware on.
• If you need to update the device's software and configuration, it is recommended
to first update the software. This is because the current ("old") software (before the
upgrade) may not be compatible with the new configuration. However, if both files
are available for download on the provisioning server(s), the device first
downloads and applies the new configuration, and only then does it download and
install the new software. Therefore, this is a very important issue to take into
consideration.
• If more than one file needs to be updated:
√ CLI Script and cmp: The device downloads and applies the CLI Script file on
the currently ("old") installed software version. It then downloads and installs
the cmp file with a reset. Therefore, the CLI Script file MUST have configuration
compatible with the "old" software version.
√ Startup Script and cmp: The device downloads both files, resets, applies the
new cmp, and then applies the configuration from the Startup Script file on the
new software version.
√ CLI Script and Startup Script: The device downloads and applies both files;
but the Startup Script file overwrites all the configuration of the CLI Script file.
♦ CLI:
# configure system
(config-system)# automatic update
(automatic-update)# call-progress-tones
'http://www.company.com/call_progress.dat'
d. Automatic Update of ini configuration file:
♦ ini File:
IniFileURL = 'https://www.company.com/config.ini'
♦ CLI:
# configure system
(config-system)# automatic update
(automatic-update)# voice-configuration
'http://www.company.com/config.ini'
e. Enable Cyclical Redundancy Check (CRC) on downloaded ini file:
♦ ini File:
AUPDCheckIfIniChanged = 1
♦ CLI:
# configure system
(config-system)# automatic update
(automatic-update)# crc-check regular
4. Power down and then power up the device.
• ini File:
AutoUpdateFrequency = '03:00'
• CLI:
# configure system
(config-system)# automatic update
(automatic-update)# update-frequency 03:00
https://company.com/files/cli_script_<MAC>.txt
(automatic-update)# voice-configuration
http://www.company.com/config_<MAC>.ini
2. Copy the master configuration file that you created in Step 1 as well as the CPT and
.cmp files to the HTTP-based provisioning server.
3. Configure each device with the following:
a. URL of the master configuration file:
♦ ini File:
IniFileURL =
'http://www.company.com/master_configuration.ini'
♦ CLI:
# configure system
(config-system)# automatic update
(automatic-update)# voice-configuration
http://www.company.com/master_configuration.ini
(automatic-update)# cli-script
https://company.com/files/master_startup.txt
b. Configure the device with the IP address of the DNS server for resolving the
domain name (e.g., http://www.company.com) that is used in the URL for the
provisioning server. This is done in the IP Interfaces table:
♦ ini File:
[ InterfaceTable ]
FORMAT InterfaceTable_Index =
InterfaceTable_ApplicationTypes,
InterfaceTable_InterfaceMode, InterfaceTable_IPAddress,
InterfaceTable_PrefixLength, InterfaceTable_Gateway,
InterfaceTable_VlanID, InterfaceTable_InterfaceName,
InterfaceTable_PrimaryDNSServerIPAddress,
InterfaceTable_SecondaryDNSServerIPAddress,
InterfaceTable_UnderlyingDevice;
InterfaceTable 0 = 6, 10, 10.15.7.95, 16, 10.15.0.1, 1,
"Voice", 80.179.52.100, 0.0.0.0, "vlan 1";
[ \InterfaceTable ]
♦ CLI:
# configure network
(config-network)# interface network-if 0
(network-if-0)# primary-dns 80.179.52.100
4. Power down and then power up the device.
Note:
• When the SBC Configuration Wizard applies the configuration template to the
device, all parameters configured by the SBC Configuration Wizard overwrite the
device's existing configuration of those parameter. Parameters not configured by
the SBC Configuration Wizard are restored to factory defaults, except basic device
settings such as management users (Web and CLI). Some of these basic settings
also appear in the SBC Configuration Wizard and their fields are automatically
populated with their current settings; if you do modify them in the SBC
Configuration Wizard, their new settings are used.
• On some wizard pages, the availability of certain fields depends on the selected
application.
2. If desired, the SBC Configuration Wizard allows you to share usage statistics with
AudioCodes in order to help us improve our software. To agree, select the 'Report
usage statistics' check box, and then fill in the subsequent fields.
3. The version of the template pack currently installed on the device is displayed in the
'Template pack version' field. The template pack contains the interoperability
configuration templates available on the SBC Configuration Wizard. If the template
pack is not the latest version (as displayed in the 'Remote Template pack version'
field), you can update it by clicking the Update from remote server button.
Alternatively, if you have received a template pack file from AudioCodes sales
representative, you can install it on the device using the Auxiliary Files page (see
Loading Auxiliary Files on page 757).
4. Click Next; the General Setup page appears (see General Setup Page on page 712).
b. From the 'SIP-Trunk' drop-down list, select the SIP trunk provider. If the provider
is not listed, select Generic SIP Trunk.
c. To generate a configuration template based on the individual properties of the
selected IP PBX and SIP Trunk, instead of using the existing template for the
specific combination, select the 'Override template' check box.
3. If you selected any application except SIP Trunk in Step 1, from the 'Template' drop-
down list, select the interoperability configuration template.
4. From the 'Network Setup' drop-down list, select the physical network topology:
• Two ports: LAN and WAN: The device connects to the network through two
separate physical network links (interfaces). The first interface ("LAN") is
connected to the Enterprise LAN (typically, a switch) and has a private IP
address. The second interface ("WAN") is connected to the DMZ port of the
Enterprise router and has a public (globally routable) IP address. Each link may
be accompanied with a backup link for Ethernet link redundancy.
• One port: LAN: The device connects to the Enterprise LAN (typically, a switch)
through a single physical network link (interface). The interface ("LAN") has a
private IP address. You must enable port forwarding on the Enterprise router to
forward all VoIP traffic from the ITSP (located on the WAN) to the device. The
exact port forwarding configuration is shown on the Conclusion page and consists
of the device's address, SIP port (e.g. 5060) and a media port range (e.g. 6000-
6999).
• One port: WAN: The device connects to the DMZ port of the Enterprise router
through a single physical network link (interface). The interface ("WAN") has a
public (globally routable) IP address. You must enable port forwarding on the
Enterprise router to forward all VoIP traffic from the device to the IP PBX (located
on the LAN). The exact port forwarding configuration is shown on the Conclusion
page and consists of the IP PBX address, SIP port (e.g. 5060) and a media port
range (e.g. 6000-6999).
• One port: LAN only: The device connects to the Enterprise LAN (typically, a
switch) through a single physical network link (interface). All SIP entities (IP PBX
and users) connect to the same LAN. Note that this option is applicable to all
applications (see Step 1), except SIP Trunk.
5. Click Next; the System page appears (see System Page on page 712).
'NAT Public IP' address, configure the public IP address (of the Enterprise router)
used by the device to communicate with the ITSP (for the SIP Trunk application) or IP
PBX (for the Hosted IP-PBX application).
7. In the 'Primary DNS Server' (and optionally, 'Secondary DNS Server') field, configure
your primary (and optionally, secondary) DNS server in the network. This is mandatory
if you use a hostname (FQDN) for ITSP (WAN only) and IP PBX addresses.
8. From the 'OAM Interface' drop-down list, select the device's interface for management
traffic:
• LAN: Management traffic is carried over the regular LAN interface, as defined
above.
• WAN: Management traffic is carried over the WAN interface, as defined above.
• Additional: Configure a different interface for management traffic.
9. Click Next; the IP-PBX page appears (see IP-PBX Page on page 712).
• 'Address': Configure the IP address (or hostname) of the IP PBX. Note that for
the One port: WAN network topology, when the device is assigned a public IP
address, you must use the public IP address (of the Enterprise router) instead of
the private address of the IP PBX, and configure the Enterprise router to forward
VoIP traffic from the device to the IP PBX.
• 'Backup Address': (Optional) Configure the backup IP address (or hostname) of
the IP PBX.
• 'SIP Domain': Configure the SIP domain name used for communication with the
IP PBX. The domain name is used in the following SIP message headers:
♦ Outbound calls: Request-URI and To headers
♦ Inbound calls: From header
• 'Keep Alive': Enable the periodic keep-alive check for multiple IP PBX addresses.
2. Under the Media Ports (Realm) group, configure the media protocol type and ports
used by the device for communicating with the IP PBX:
• 'Media Protocol': Configure the media protocol type (RTP or SRTP).
• 'Base Port' Configure the first media port in the port range.
• 'Number Of Sessions': Configure the number of required media sessions. For
more information on media port ranges and number of sessions, see Configuring
RTP Base UDP Port on page 201.
3. Under the SIP Interface group, configure SIP ports and transport type for
communicating with the IP PBX:
• 'Transport Type': Configure the SIP transport type.
• 'Destination Port': Configure the SIP port used by the IP PBX.
• 'Listening Port': Configure the SIP port used by the device when communicating
with the IP PBX.
4. Click Next; the SIP Trunk page appears (SIP Trunk Page on page 712).
• 'SIP Domain': Configures the SIP domain name for communicating with the SIP
Trunk. The domain name is used in the following SIP message headers:
♦ Outbound calls: Request-URI and To headers
♦ Inbound calls: From header
• 'Keep Alive': Enables the periodic keep-alive check of multiple SIP Trunk
addresses.
2. Under the SIP Interface group, configure the SIP ports and transport type for
communicating with the SIP Trunk:
• 'Transport Type: Configure the SIP transport type.
• 'Destination Port: Configure the SIP port used by the SIP Trunk.
• 'Listening Port: Configure the SIP port used by the device for communicating with
the SIP Trunk. Note that for the One port: WAN network topology, the device
must use different Listening Ports when communicating with the IP PBX and SIP
Trunk.
3. Under the Media Ports (Realm) group, configure the media protocol type and ports
used by the device for communicating with the IP PBX:
• 'Media Protocol': Configure the media protocol type.
• 'Base Port': Configure the first media port.
• 'Number Of Sessions': Configure the number of required media sessions. For
more information on media port ranges and number of sessions, see Configuring
RTP Base UDP Port on page 201.
4. Under the SIP Account group, configure the device's registration with the SIP Trunk:
• 'Account Type': Configure whether the device must perform registration or
authentication with the SIP Trunk (None, Registration or Authentication).
• 'Trunk Main Line': Configure the "leading number" assigned by the SIP Trunk.
Many SIP Trunks use the same value for Trunk Main Line and Username
parameters.
• 'Username': Configure the SIP authentication username (as provided by the SIP
Trunk provider).
• 'Password': Configure the SIP authentication password (as provided by the SIP
Trunk provider).
5. Click Next; the Number Manipulation page appears (see Number Manipulation Page
on page 712).
Remove:"4"
Add: "0"
Note: This page is applicable only to IP PBXs that support such configuration.
Note: When restoring to factory defaults, you can preserve your IP network settings
that are configured in the IP Interfaces table (see 'Configuring IP Network Interfaces'
on page 141), as described in the procedure below. This may be important, for
example, to maintain connectivity with the device (through the OAMP interface) after
factory defaults have been applied.
Note: The only settings that are not restored to default are the management (OAMP)
LAN IP address and the Web interface's login username and password.
54 System Status
This section describes how to view various system statuses.
Parameter Description
General Settings
MAC Address Media access control (MAC) address.
Serial Number Serial number of the CPU. This serial number also appears
on the product label that is affixed to the chassis, as "CPU
S/N".
Product Key Product Key, which identifies the specific device purchase.
The Product Key also appears on the product label that is
affixed to the chassis, as "S/N(Product Key)". For more
information, see Viewing the Device's Product Key on page
791.
Parameter Description
Flash Size [Mbytes] Size of the non-volatile storage memory (flash), measured in
megabytes.
RAM Size [Mbytes] Size of the random access memory (RAM), measured in
megabytes.
CPU Speed [MHz] Clock speed of the CPU, measured in megahertz (MHz).
Versions
Version ID Software version number.
DSP Type Type of DSP.
DSP Software Version DSP software version.
DSP Software Name DSP software name.
Flash Version Flash memory version number.
Loaded Files: Displays installed Auxiliary files. You can also delete a file, by clicking the
corresponding Delete button, as described in Deleting Auxiliary Files on page 759.
• Active Calls: Total number of SBC calls. The corresponding SNMP performance
monitoring MIB is PM_gwInINVITEDialogs.
• Average Success Rate (ASR): Number of successfully answered calls out of the
total number of attempted calls. The corresponding SNMP performance
monitoring MIB is PM_gwSBCASR.
• Average Call Duration (ACD): Average call duration in seconds of established
calls. The value is refreshed every 15 minutes and therefore, this value reflects
the average duration of all established calls made within a 15 minute period. The
corresponding SNMP performance monitoring MIB is PM_gwSBCACD.
• Calls per Sec: Total number of new calls per second (CPS).
• Transactions per Sec: Total number of new SIP transactions per second (out-of-
dialog transactions such as INVITE and REGISTER, or in-dialog transactions
such as UPDATE and BYE). The corresponding SNMP performance monitoring
MIB is PM_gwActiveSIPTransacionsPerSecond. The counter is applicable to
SBC and Gateway calls.
• Registered Users: Number of users registered with the device. The
corresponding SNMP performance monitoring MIB is
PM_gwSBCRegisteredUsers.
Figure 54-2: Viewing Call Statistics on Monitor Page
Graphical display of the device with color-coded status icons, as shown in the figure
below and described in the subsequent table:
Note:
• The displayed number and type of telephony interfaces depends on the ordered
hardware configuration.
• For a description of the Monitor page when the device is in High Availability (HA)
mode, see HA Status Display on Monitor Web Page on page 727.
Item # Description
1 Displays the highest severity of an active alarm raised (if any) by the device:
Item # Description
Green = No alarms
Red = Critical alarm
Orange = Major alarm
Yellow = Minor alarm
To view active alarms, click the Alarms area to open the Active Alarms page (see
Viewing Active Alarms on page 845).
2 STATUS LED displaying the operating status.
3 USB ports for USB storage services.
4 RS-232 interface port (RJ-45).
5 Module number of LAN or telephony interfaces
6 Ethernet LAN module with port status icons:
AIS Alarm: Alarm Indication Signal (AIS), also known as the Blue
(blue) Alarm
Note:
• The alarms in the table are deleted upon a device reset.
• To configure the maximum number of active alarms that can be displayed in the
table, see the ini file parameter, ActiveAlarmTableMaxSize.
• For more information on SNMP alarms, refer to the SNMP Reference Guide
document.
Field Description
The number of the alarm. The alarms are numbered sequentially as they
are raised by the device. The numbering resets to 1 immediately after a
Sequential Number
device reset (i.e., the first alarm raised after a reset is assigned the number
#1).
Severity Severity level of the alarm:
Critical (red)
Major (orange)
Minor (yellow)
Source Component of the device from which the alarm was raised.
Description Brief description of the alarm.
Date Date (DD/MM/YYYY) and time (HH:MM:SS) the alarm was raised.
Note:
• The alarms in the table are deleted upon a device reset.
• For more information on SNMP alarms, refer to the SNMP Reference Guide
document.
Field Description
The number of the alarm. The alarms are numbered sequentially as they
are raised by the device. The numbering resets to 1 immediately after a
Sequential Number
device reset (i.e., the first alarm raised after a reset is assigned the number
#1).
Severity Severity level of the alarm:
Critical (red)
Major (orange)
Minor (yellow)
Cleared (green)
Source Component of the device from which the alarm was raised.
Description Brief description of the alarm.
Field Description
Date Date (DD/MM/YYYY) and time (HH:MM:SS) the alarm was raised.
Parameter Description
Time Date (mm/dd/yyyy) and time (hh:mm:ss) that the activity was performed.
Description Description of the activity.
User Username of the user account that performed the activity.
Interface Protocol used for connecting to the management interface (e.g., Telnet, SSH,
Web, or HTTP).
Client IP address of the client PC from where the user accessed the management
interface.
Note:
• The Trunk Utilization page is applicable only to the Gateway application.
• To view the graph, your device must be connected to and configured with trunks.
• To view the graph, you must first disable the SBC application.
• If you navigate to a different page, the data displayed on the graph and all its
settings are cleared.
2. From the 'Trunk' drop-down list, select the trunk for which you want to view active
channels.
3. For more graph functionality, see the following table:
Button Description
Add button Displays additional trunks in the graph. Up to five trunks can be
displayed simultaneously. To view another trunk, click the button and
then from the new 'Trunk' drop-down list, select the required trunk.
The graph displays each trunk in a different color, according to the
legend shown in the top-left corner of the graph.
Remove button Removes the corresponding trunk from the graph.
Disable check box Hides or shows an already selected trunk. Select the check box to hide
the trunk display; clear the check box to show the trunk. This is useful if
you do not want to remove the trunk entirely (using the Remove button).
Get Most Active button Displays only the trunk with the most active channels (i.e., trunk with the
most calls).
Pause button Pauses the display in the graph.
Play button Resumes the display in the graph.
Zoom slide ruler and Increases or reduces the trunk utilization display resolution concerning
buttons
time. The Zoom In button increases the time resolution; the
Zoom Out button decreases it. Instead of using the buttons, you
can use the slide ruler. As you increase the resolution, more data is
displayed on the graph. The minimum resolution is about 30 seconds;
the maximum resolution is about an hour.
2. From the 'SRD/IP Group' drop-down list, select whether you want to view statistic for
an SRD or IP Group.
3. From the 'Index' drop-down list, select the SRD or IP Group index.
4. From the 'Direction' drop-down list, select the call direction:
• In: incoming calls
• Out: outgoing calls
• Both: incoming and outgoing calls
5. From the 'Type' drop-down list, select the SIP message type:
• INVITE: INVITE
• SUBSCRIBE: SUBSCRIBE
• Other: all SIP messages
If there is no data for the charts, the chart appears gray and "No Data" is displayed to the
right of the chart.
Note: The Average Call Duration page is applicable only to SBC calls.
2. From the 'SRD / IP Group' drop-down list, select the configuration entity (SRD or IP
Group).
3. From the 'Index' drop-down list, select the specific SRD or IP Group index.
Use the Zoom In button to increase the displayed time resolution or the Zoom Out
button to decrease it. Instead of using these buttons, you can use the slide ruler. As
you increase the resolution, more data is displayed on the graph. The minimum resolution
is about 30 seconds; the maximum resolution is about an hour.
To pause the graph, click the Pause button; click Play to resume.
At any given time during a call, a voice metric can be in one of the following color-coded
quality states (as displayed by OVOC):
Green: Indicates good call quality
Yellow: Indicates fair call quality
Red: Indicates poor call quality
When the threshold of a voice metric is crossed, the device changes the alarm severity and
corresponding color-coded quality state of the call:
Minor Threshold (Yellow): Lower threshold that indicates changes from Green or
Red to Yellow.
Major Threshold (Red): Higher threshold that indicates changes from Green or
Yellow to Red.
The device also uses hysteresis to determine whether the threshold has indeed being
crossed. Hysteresis defines the amount of fluctuation from the threshold in order for the
threshold to be considered as crossed (i.e., change in color state). Hysteresis is used to
avoid false reports being sent by the device. Hysteresis is used only for threshold crossings
toward a lesser severity (i.e., from Red to Yellow, Red to Green, or Yellow to Green).
The following example is used to explain how the device considers threshold crossings.
The example is based on the ASR of a call, where the Major threshold is configured to
70%, the Minor threshold to 90% and the hysteresis for both thresholds to 2%:
Figure 57-4: Example of Threshold Crossings (ASR)
Threshold based on
Threshold Crossing Calculation
Example
Green to Yellow (Minor alarm) The change occurs if the measured metric 90%
crosses the configured Minor threshold only
(i.e., hysteresis is not used).
Green to Red (Major alarm) The change occurs if the measured metric 70%
crosses the configured Major threshold only
(i.e., hysteresis is not used).
Yellow to Red (Major alarm) The change occurs if the measured metric 70%
crosses the configured Major threshold only
(i.e., hysteresis is not used).
Red to Yellow (Minor alarm) The change occurs if the measured metric 72% (i.e., 70 + 2)
crosses the configured Major threshold with
hysteresis.
Red to Green (alarm cleared) The change occurs if the measured metric 92 (i.e., 90 + 2)
crosses the configured Minor threshold with
Threshold based on
Threshold Crossing Calculation
Example
hysteresis.
Yellow to Green (alarm The change occurs if the measured metric 92 (i.e., 90 + 2)
cleared) crosses the configured Minor threshold with
hysteresis.
Note:
• Forwarded calls are not considered in the calculation for ASR and NER.
• If you don't configure thresholds for a specific metric, the device still provides
current performance monitoring values of the metric, but does not raise any
threshold alarms for it.
• You can configure the device to perform certain actions, for example, reject calls
to the IP Group for a user-defined duration, if a threshold is crossed. For more
information, see 'Configuring Quality of Service Rules' on page 330.
• The section is applicable only to the SBC application.
The following procedure describes how to configure Performance Profile rules through the
Web interface. You can also configure it through ini file (PerformanceProfile) or CLI
(configure system > performance-profile).
3. Configure the rule according to the parameters described in the table below.
4. Click Apply.
Parameter Description
Parameter Description
[PerformanceProfile_Hysteresis] considered as crossed. Hysteresis is used to avoid false
reports being sent by the device. Hysteresis is used only
when the severity level decreases (i.e., from Red to Yellow,
Yellow to Green, or Red to Green).
The valid value is 0 to 15 (in percentage). The default is 5.
For example, if you configure the 'Major Threshold'
parameter to 70% and the 'Hysteresis' parameter to 2%, the
device considers a threshold crossing from Red to Yellow
only if the ASR crosses 72% (i.e., 70% + 2%).
Minimum Samples Defines the minimum number of call sessions (sample) that
minimum-samples is required for the device to calculate the performance
monitoring metrics (per window size). If the number of call
[PerformanceProfile_MinimumSample]
sessions is less than the configured value, no calculation is
done.
The default is 10 calls.
Note: The calculation also depends on the configured
sampling window size (see 'Window Size' parameter). For
example, if the parameter is configured to 10 calls, but only 5
calls were processed during the configured sampling
window, no calculation is done.
Window Size Defines the time interval (in minutes) during which the device
window-size calculates the performance monitoring metrics. For example,
if the parameter is configured to five minutes, the calculation
[PerformanceProfile_WindowSize]
is done for the last five minutes.
The default is 5 minutes.
Note: The calculation depends on the configured minimum
samples (see 'Minimum Samples' parameter). For example,
if the parameter is configured to five minutes, but the number
of calls during the interval is less than the configured
minimum samples, no calculation is done.
Note:
• The PacketSmart feature is a license-based feature and is available only if it is
included in the License Key installed on the device. For ordering the feature,
please contact your AudioCodes sales representative.
• Before configuring the PacketSmart agent, configure the following:
√ Correct data and time of the device. It is recommended to use an NTP server to
obtain the date and time (see 'Configuring Automatic Date and Time using
SNTP' on page 125).
√ IP network interface for communicating with the PacketSmart server. Typically,
the OAMP interface is used. To configure IP network interfaces, see
'Configuring IP Network Interfaces' on page 141.
√ IP network interface for the VoIP traffic that you want monitored by
PacketSmart.
• For detailed information on setting up the PacketSmart solution, refer to the
document, Mediant Gateways and SBCs with BroadCloud PacketSmart
Configuration Note.
The following procedure describes how to configure PacketSmart through the Web
interface. You can also configure it through ini file or CLI (configure system > packetsmart).
2. From the 'PacketSmart Agent Mode' drop-down list, select Enable to enable the
feature.
3. Configure the remaining parameters, as required. For parameter descriptions, see
'PacketSmart Parameters' on page 1006.
The following read-only fields are displayed:
• 'ID': Displays the name and serial number of the PacketSmart agent (i.e., the
device) on the PacketSmart server.
• 'Platform': Displays the name of the device.
4. Click Submit, and then reset the device with a save-to-flash for your settings to take
effect.
Counter Description
Counter Description
RELEASE_BECAUSE_DISCONNECT_CODE
Note: When the duration of the call is zero, the release reason
GWAPP_NORMAL_CALL_CLEAR increments the 'Number of Failed
Calls due to No Answer' counter. The rest of the release reasons
increment the 'Number of Failed Calls due to Other Failures' counter.
Percentage of The percentage of established calls from attempted calls, known as
Successful Calls (ASR) Answer Success Ratio (ASR).
Number of Calls Indicates the number of calls that failed as a result of a busy line. It is
Terminated due to a incremented as a result of the following release reason:
Busy Line GWAPP_USER_BUSY (17)
Number of Calls Indicates the number of calls that weren't answered. It's incremented as
Terminated due to No a result of one of the following release reasons:
Answer GWAPP_NO_USER_RESPONDING (18)
GWAPP_NO_ANSWER_FROM_USER_ALERTED (19)
GWAPP_NORMAL_CALL_CLEAR (16) (when the call duration is
zero)
Number of Calls Indicates the number of calls that were terminated due to a call forward.
Terminated due to The counter is incremented as a result of the following release reason:
Forward RELEASE_BECAUSE_FORWARD
Number of Failed Calls Indicates the number of calls whose destinations weren't found. It is
due to No Route incremented as a result of one of the following release reasons:
GWAPP_UNASSIGNED_NUMBER (1)
GWAPP_NO_ROUTE_TO_DESTINATION (3)
Number of Failed Calls Indicates the number of calls that failed due to mismatched device
due to No Matched capabilities. It is incremented as a result of an internal identification of
Capabilities capability mismatch. This mismatch is reflected to CDR via the value of
the parameter DefaultReleaseReason (default is
GWAPP_NO_ROUTE_TO_DESTINATION (3)) or by the
GWAPP_SERVICE_NOT_IMPLEMENTED_UNSPECIFIED (79) reason.
Number of Failed Calls Indicates the number of calls that failed due to unavailable resources or
due to No Resources a device lock. The counter is incremented as a result of one of the
following release reasons:
GWAPP_RESOURCE_UNAVAILABLE_UNSPECIFIED
RELEASE_BECAUSE_GW_LOCKED
Number of Failed Calls This counter is incremented as a result of calls that failed due to reasons
due to Other Failures not covered by the other counters.
Average Call Duration The average call duration (ACD) in seconds of established calls. The
(ACD) ACD value is refreshed every 15 minutes and therefore, this value
reflects the average duration of all established calls made within a 15
minute period.
Attempted Fax Calls Indicates the number of attempted fax calls.
Counter
Successful Fax Calls Indicates the number of successful fax calls.
Counter
Parameter Description
CLI:
• SBC users:
# show voip register db sbc list
• SBC contacts of a specified AOR:
# show voip register db sbc user <Address Of Record>
Parameter Description
Parameter Description
Failure Count Displays the total number of failed keep-alive messages (by SIP
OPTIONS) sent by the device to the proxy.
Status Displays the status of the Proxy Set and its' proxy servers.
"ONLINE":
Proxy Set ID row: At least one proxy is online as determined
by the device's keep-alive feature. The status is also
"ONLINE" for IP addresses resolved from DNS queries even if
keep-alive is disabled.
Proxy server rows (if multiple addresses): The proxy server is
online as determined by the device's keep-alive feature.
"OFFLINE": The proxy is offline as determined by the device's
keep-alive feature and the Proxy Set is configured for Homing
('Redundancy Mode' parameter) or enabled for load balancing
('Proxy Load Balancing Method' parameter):
Homing: The proxy is the main proxy, but the keep-alive has
failed.
Load balancing: The keep-alive for the proxy has failed.
"NOT RESOLVED": Proxy address is configured as an FQDN, but
the DNS resolution has failed.
Empty field: Keep-alive for the proxy is disabled or the device has
yet to send a keep-alive to the proxy.
Parameter Description
Parameter Description
application.
Accounts Registration Status Displays the status registration per Account, as configured in
the Accounts table (see 'Configuring Registration Accounts'
on page 391).
Group Type: Served Trunk Group or IP Group
Group Name: Name of served Trunk Group or IP Group,
if applicable
Status: "REGISTERED" or "NOT REGISTERED"
IP Address Displays the destination IP address, which can be one of the following:
Destination IP address as configured in the Tel-to-IP Routing table.
Destination IP address resolved from the host name (FQDN) as configured
in the Tel-to-IP Routing table.
Host Name Displays the host name (or IP address) as configured in the Tel-to-IP Routing
table.
Connectivity Displays the method according to which the destination IP address is queried
Method periodically by the device to check keep-alive connectivity status (SIP
OPTIONS request). To configure the keep-alive mechanism, see 'IP
Destinations Connectivity Feature' on page 525.
Note: If the device is reset, all CDRs are deleted from memory and from the table.
CLI:
• All CDR history:
# show voip calls history gw
• CDR history for a specific SIP session ID:
# show voip calls history gw <session ID>
Table 58-6: Gateway CDR History Table
Field Description
Call End Time Displays the time at which the call ended. The time is displayed in the
format, hh:mm:ss, where hh is the hour, mm the minutes and ss the
seconds (e.g., 15:06:36).
End Point Displays the device's endpoint involved in the call, displayed in the
format:
Digital: <interface>-<module>/<Trunk ID>/<B-channel>. For example,
"ISDN-1/2/3" denotes ISDN module 1, Trunk ID 2, B-channel 3.
Caller Displays the phone number (source number) of the party who made the
call.
Callee Displays the phone number (destination number) of the party to whom
the call was made.
Direction Displays the direction of the call with regards to IP and Tel sides:
"Incoming": IP-to-Tel call
"Outgoing": Tel-to-IP call
Remote IP Displays the IP address of the call party. For an "Incoming" call, this is
the source IP address; for an "Outgoing" call, this is the destination IP
address.
Duration Displays the duration of the call, displayed in the format hh:mm:ss,
where hh is hours, mm minutes and ss seconds. For example, 00:01:20
denotes 1 minute and 20 seconds.
Termination Reason Displays the reason for the call being released (ended). For example,
"NORMAL_CALL_CLEAR" indicates a normal off-hook (hang up) of the
call party.
Session ID Displays the SIP session ID of the call.
displays the last 4,096 CDRs. If the table reaches maximum capacity of entries and a new
CDR is added, the last CDR entry is removed from the table.
Note: If the device is reset, all CDRs are deleted from memory and from the table.
CLI:
• All CDR history:
# show voip calls history sbc
• CDR history for a specific SIP session ID:
# show voip calls history sbc <session ID>
Field Description
Call End Time Displays the time at which the call ended. The time is displayed in the
format, hh:mm:ss, where hh is the hour, mm the minutes and ss the
seconds (e.g., 15:06:36).
IP Group Displays the IP Group of the leg for which the CDR was generated.
Caller Displays the phone number (source URI user@host) of the party who
made the call.
Callee Displays the phone number (destination URI user@host) of the party to
whom the call was made.
Direction Displays the direction of the call:
"Incoming"
"Outgoing"
Remote IP Displays the IP address of the call party. For an "Incoming" call, this is
the source IP address; for an "Outgoing" call, this is the destination IP
address.
Duration Displays the duration of the call, displayed in the format hh:mm:ss,
where hh is hours, mm minutes and ss seconds. For example, 00:01:20
denotes 1 minute and 20 seconds.
Termination Reason Displays the reason for the call being released (ended). For example,
"NORMAL_CALL_CLEAR" indicates a normal termination.
Session ID Displays the SIP session ID of the call.
The status of the trunks is depicted by color-coded icons, as described in the table below:
Table 59-1: Description of Color-Coded Icons for Trunk Status
Label
Gray Disabled
Green Active - OK
The status of the channels is depicted by color-coded icons, as described in the table
below:
Table 59-2: Description of Color-Coded Icons for Channel Status
Dark Orange Maintenance B-channel has been intentionally taken out of service
due to maintenance
Red Out Of B-channel is out of service
Service
Note: This page is applicable only to T1 ISDN protocols supporting NFAS, and only if
the NFAS group is configured with two D-channels.
Note: If the device is operating in High-Availability mode, you can also view Ethernet
port information of the redundant device, by opening the Redundant Ethernet Port
Information page (Monitor menu > Monitor tab > Network Status folder > Redundant
Ethernet Port Information).
Parameter Description
Note:
• The RTCP XR feature is available only if the device is installed with a License Key
that includes this feature. For installing a License Key, see 'License Key' on page
781.
• If the RTCP XR feature is unavailable (not licensed or disabled), the R-factor VoIP
metrics are not provided in CDRs (CDR fields, Local R Factor and Remote R
Factor) generated by the device. Instead, these CDR fields are sent with the value
127, meaning that information is unavailable.
You can configure the device to send RTCP XR to a specific IP Group. In addition, you
can configure the stage of the call at which you want the device to send RTCP XR:
End of the call.
Periodically, according to a user-defined interval between consecutive reports.
(Gateway Application Only) End of a media segment. A media segment is a change in
media, for example, when the coder is changed or when the caller toggles between
two called parties (using call hold/retrieve). The RTCP XR sent at the end of a media
segment contains information only of that segment. For call hold, the device sends
RTCP XR each time the call is placed on hold and each time it is retrieved. In addition,
the Start timestamp in the RTCP XR indicates the start of the media segment; the End
timestamp indicates the time of the last sent periodic RTCP XR (typically, up to 5
seconds before reported segment ends).
The device sends RTCP XR in SIP PUBLISH messages. The PUBLISH message contains
the following RTCP XR related header values:
From and To: Telephone extension number of the user
Request-URI: IP Group to where RTCP XR is sent
Event: "vq-rtcpxr"
Content-Type: "application/vq-rtcpxr"
The type of RTCP XR report event (VQReportEvent) supported by the device is
VQSessionReport (SessionReport). The device can include local and remote metrics in the
RTCP XR. Local metrics are generated by the device while remote metrics are provided by
the remote endpoint. The following table lists the supported voice metrics (parameters)
published in the RTCP XR.
Table 61-1: RTCP XR Published VoIP Metrics
ExtROEstAlg Ext. R Out Est. Algorithm - name (string) of the algorithm used to
estimate EXTRO
MOSLQ MOS-LQ - estimated mean opinion score for listening voice quality
on a scale from 1 to 5, in which 5 represents excellent and 1
represents unacceptable
MOSLQEstAlg MOS-LQ Est. Algorithm - name (string) of the algorithm used to
estimate MOSLQ
Below shows an example of a SIP PUBLISH message sent with RTCP XR and QoE
information:
PUBLISH sip:172.17.116.201 SIP/2.0
Via: SIP/2.0/UDP 172.17.116.201:5060;branch=z9hG4bKac2055925925
Max-Forwards: 70
From: <sip:172.17.116.201>;tag=1c2055916574
To: <sip:172.17.116.201>
Call-ID: 20559160721612201520952@172.17.116.201
CSeq: 1 PUBLISH
Contact: <sip:172.17.116.201:5060>
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUB
SCRIBE,UPDATE
Event: vq-rtcpxr
Expires: 3600
User-Agent: device/v.7.20A.000.038
Content-Type: application/vq-rtcpxr
Content-Length: 1066
VQSessionReport
CallID=20328634741612201520943@172.17.116.201
LocalID: <sip:1000@172.17.116.201>
RemoteID: <sip:2000@172.17.116.202;user=phone>
OrigID: <sip:1000@172.17.116.201>
LocalAddr: IP=172.17.116.201 Port=6000 SSRC=0x54c62a13
RemoteAddr: IP=172.17.116.202 Port=6000 SSRC=0x243220dd
LocalGroup:
RemoteGroup:
LocalMAC: 00:90:8f:57:d9:71
LocalMetrics:
Timestamps: START=2015-12-16T20:09:45Z STOP=2015-12-16T20:09:52Z
SessionDesc: PT=8 PD=PCMA SR=8000 FD=20 PLC=3 SSUP=Off
JitterBuffer: JBA=3 JBR=0 JBN=7 JBM=10 JBX=300
PacketLoss: NLR=0.00 JDR=0.00
BurstGapLoss: BLD=0.00 BD=0 GLD=0.00 GD=6325 GMIN=16
Delay: RTD=0 ESD=11
Signal: SL=-34 NL=-67 RERL=17
QualityEst: RLQ=93 MOSLQ=4.1
MOSCQ=4.10
RemoteMetrics:
Timestamps: START=2015-12-16T20:09:45Z STOP=2015-12-16T20:09:52Z
JitterBuffer: JBA=3 JBR=0 JBN=0 JBM=0 JBX=300
PacketLoss: NLR=0.00 JDR=0.00
BurstGapLoss: BLD=0.00 BD=0 GLD=0.00 GD=0 GMIN=16
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Note:
• To view Gateway CDRs stored on the device's memory, see Viewing Gateway
CDR History on page 867.
• To view SBC CDRs stored on the device's memory, see Viewing SBC CDR
History on page 868.
Note: You can customize the default CDR fields if desired. For customizing Gateway-
related CDRs, see Customizing CDRs for Gateway Calls on page 901. For
customizing SBC-related CDRs, see Customizing CDRs for SBC Calls on page 906.
CDRs belonging to the same SBC session (both legs) have the same Session ID
(SessionId CDR field). CDRs belonging to the same SBC leg have the same Leg ID (LegId
CDR field)
For billing applications, the CDR that is sent when the call ends (CALL_END) is usually
sufficient. Billing may be based on the following:
Leg ID (LegId CDR field)
Source URI (SrcURI CDR field)
Destination URI (DstURI CDR field)
Call originator (Orig CDR field) - indicates the call direction (caller)
Call duration (Durat CDR field) - call duration (elapsed time) from call connect
Call time is based on SetupTime, ConnectTime and ReleaseTime CDR fields
Table 61-2: Default CDR Fields for SBC Signaling
Below shows an example of an SBC signaling CDR sent at the end of a call (call was
terminated normally):
[S=40] |SBCReportType |EPTyp |SIPCallId |SessionId |Orig |SourceIp
|SourcePort |DestIp |DestPort |TransportType |SrcURI
|SrcURIBeforeMap |DstURI |DstURIBeforeMap |Durat |TrmSd |TrmReason
|TrmReasonCategory |SetupTime |ConnectTime |ReleaseTime
|RedirectReason |RedirectURINum |RedirectURINumBeforeMap
|TxSigIPDiffServ|IPGroup (description) |SrdId (name)
|SIPInterfaceId |ProxySetId |IpProfileId (name) |MediaRealmId
(name) |DirectMedia |SIPTrmReason |SIPTermDesc |Caller |Callee
[S=41] |CALL_END |SBC |20767593291410201017029@10.33.45.80
|1871197419|LCL |10.33.45.80 |5060 |10.33.45.72 |5060 |UDP
|9001@10.8.8.10 |9001@10.8.8.10 |6001@10.33.45.80
|6001@10.33.45.80 |15 |LCL |GWAPP_NORMAL_CALL_CLEAR
|NORMAL_CALL_CLEAR |17:00:29.954 UTC Thu Oct 14 2014
|17:00:49.052 UTC Thu Oct 14 2014 |17:01:04.953 UTC Thu Oct 14
2014 |-1 | | |40 |1 |0 (SRD_GW) |1 |1 |1 () |0 (MR_1) |no |BYE
|Q.850 ;cause=16 ;text="loc |user 9928019 |
The CDR types and the SIP dialog stages are shown in the following figure:
Figure 61-5: Gateway CDR Report Types
"GWAPP_CALL_REJECTED"
"GWAPP_NUMBER_CHANGED"
"GWAPP_NON_SELECTED_USER_CLEARING"
"GWAPP_INVALID_NUMBER_FORMAT"
"GWAPP_FACILITY_REJECT"
"GWAPP_RESPONSE_TO_STATUS_ENQUIRY"
"GWAPP_NORMAL_UNSPECIFIED"
"GWAPP_CIRCUIT_CONGESTION"
"GWAPP_USER_CONGESTION"
"GWAPP_NO_CIRCUIT_AVAILABLE"
"GWAPP_NETWORK_OUT_OF_ORDER"
"GWAPP_NETWORK_TEMPORARY_FAILURE"
"GWAPP_NETWORK_CONGESTION"
"GWAPP_ACCESS_INFORMATION_DISCARDED"
"GWAPP_REQUESTED_CIRCUIT_NOT_AVAILABLE"
"GWAPP_RESOURCE_UNAVAILABLE_UNSPECIFIED"
"GWAPP_PERM_FR_MODE_CONN_OUT_OF_S"
"GWAPP_PERM_FR_MODE_CONN_OPERATIONAL"
"GWAPP_PRECEDENCE_CALL_BLOCKED"
• "RELEASE_BECAUSE_PREEMPTION_ANALOG_CIRCUIT_RESERVED_FOR_
REUSE"
• "RELEASE_BECAUSE_PRECEDENCE_CALL_BLOCKED"
"GWAPP_QUALITY_OF_SERVICE_UNAVAILABLE"
"GWAPP_REQUESTED_FAC_NOT_SUBSCRIBED"
"GWAPP_BC_NOT_AUTHORIZED"
"GWAPP_BC_NOT_PRESENTLY_AVAILABLE"
"GWAPP_SERVICE_NOT_AVAILABLE"
"GWAPP_CUG_OUT_CALLS_BARRED"
"GWAPP_CUG_INC_CALLS_BARRED"
"GWAPP_ACCES_INFO_SUBS_CLASS_INCONS"
"GWAPP_BC_NOT_IMPLEMENTED"
"GWAPP_CHANNEL_TYPE_NOT_IMPLEMENTED"
"GWAPP_REQUESTED_FAC_NOT_IMPLEMENTED"
"GWAPP_ONLY_RESTRICTED_INFO_BEARER"
"GWAPP_SERVICE_NOT_IMPLEMENTED_UNSPECIFIED"
"GWAPP_INVALID_CALL_REF"
"GWAPP_IDENTIFIED_CHANNEL_NOT_EXIST"
"GWAPP_SUSPENDED_CALL_BUT_CALL_ID_NOT_EXIST"
"GWAPP_CALL_ID_IN_USE"
"GWAPP_NO_CALL_SUSPENDED"
"GWAPP_CALL_HAVING_CALL_ID_CLEARED"
"GWAPP_INCOMPATIBLE_DESTINATION"
"GWAPP_INVALID_TRANSIT_NETWORK_SELECTION"
"GWAPP_INVALID_MESSAGE_UNSPECIFIED"
"GWAPP_NOT_CUG_MEMBER"
"GWAPP_CUG_NON_EXISTENT"
"GWAPP_MANDATORY_IE_MISSING"
"GWAPP_MESSAGE_TYPE_NON_EXISTENT"
"GWAPP_MESSAGE_STATE_INCONSISTENCY"
"GWAPP_NON_EXISTENT_IE"
"GWAPP_INVALID_IE_CONTENT"
"GWAPP_MESSAGE_NOT_COMPATIBLE"
"GWAPP_RECOVERY_ON_TIMER_EXPIRY"
"GWAPP_PROTOCOL_ERROR_UNSPECIFIED"
"GWAPP_INTERWORKING_UNSPECIFIED"
"GWAPP_UKNOWN_ERROR"
"RELEASE_BECAUSE_HELD_TIMEOUT"
Note:
• The following standard RADIUS Attributes cannot be customized: 1 through 6, 18
through 20, 22, 23, 27 through 29, 32, 34 through 39, 41, 44, 52, 53, 55, 60
through 85, 88, 90, and 91.
• If the RTCP XR feature is unavailable (not licensed or disabled), the R-factor VoIP
metrics are not provided in CDRs (CDR fields, Local R Factor and Remote R
Factor) generated by the device. Instead, these CDR fields are sent with the value
127, meaning that information is unavailable.
The following procedure describes how to customize Gateway CDRs through the Web
interface. You can also configure it through ini file (GWCDRFormat) or CLI (configure
troubleshoot > cdr > cdr-format gw-cdr-format).
3. Configure CDR format rules according to the parameters described in the table below.
4. Click Apply.
Index 0: The default CDR field "Call Orig" for Syslog is changed to "Caller".
Index 1: The default CDR field "Destination IP" for Syslog is changed to "Destination
IP Address" (enclosed by apostrophes).
Index 2: The default CDR field "Setup Time" for Syslog is changed to "setup-time=".
Index 2: The default CDR field "Call Duration" for local CDR storage is changed to
"call-duration=".
Table 61-7: Gateway CDR Format Table Parameter Descriptions
Parameter Description
Parameter Description
Plan; [514] Redirect Number Before Manipulation; [515] Redirect
Number; [526] Redirect Number Type; [527] Redirect Number Plan;
[516] Source Host Name Before Manipulation; [517] Source Host
Name; [518] Destination Host Name Before Manipulation; [519]
Destination Host Name; [520] PSTN Termination Reason; [521]
Module And Port; [522] AOC Currency; [523] AOC Amount; [524]
AOC Multiplier; [525] ISDN Line Type; [600] Channel ID; [601] Coder
Type; [602] Packet Interval; [603] Payload Type; [604] Local Input
Packets; [605] Local Output Packets; [606] Local Input Octets; [607]
Local Output Octets; [608] Local Packet Loss; [609] Local Round
Trip Delay; [610] Local Jitter; [611] Local SSRC Sender; [612]
Remote Input Packets; [613] Remote Output Packets; [614] Remote
Input Octets; [615] Remote Output Octets; [616] Remote Packet
Loss; [617] Remote Round Trip Delay; [618] Remote Jitter; [619]
Remote SSRC Sender; [620] Local RTP IP; [621] Local RTP Port;
[622] Remote RTP IP; [623] Remote RTP Port; [624] RTP IP
DiffServ; [625] Local R Factor; [626] Remote R Factor; [627] Local
MOS CQ; [628] Remote MOS CQ; [629] AMD Decision; [630] AMD
Decision Probability; [631] Latched RTP IP; [632] Latched RTP Port;
[633] Latched T38 IP; [634] Latched T38 Port.
Title Defines a new name for the CDR field (for Syslog) or for the RADIUS
title Attribute prefix name (for RADIUS accounting) that you selected in
the 'Column Type' parameter.
[GWCDRFormat_Title]
The valid value is a string of up to 31 characters.
You can configure the name to be enclosed by apostrophes (single
or double). For example, if you want the CDR field name to appear
as 'Phone Duration', you must configure the parameter to 'Phone
Duration'. You can also configure the CDR field name with an equals
(=) sign, for example "call-connect-time=".
Note:
For RADIUS Attributes that do not require a prefix name, leave
the parameter undefined.
The parameter's value is case-sensitive. For example, if you want
the CDR field name to be Phone-Duration, you must configure the
parameter to "Phone-Duration" (i.e., upper case "P" and "D").
RADIUS Attribute Type Defines whether the RADIUS Attribute of the CDR field is a standard
radius-type or vendor-specific attribute.
[GWCDRFormat_RadiusType] [0] Standard = (Default) For standard RADIUS Attributes.
[1] Vendor Specific = For vendor-specific RADIUS Attributes
(VSA).
Note: The parameter is applicable only for RADIUS accounting (i.e.,
'CDR Type' parameter configured to RADIUS Gateway).
RADIUS Attribute ID Defines an ID for the RADIUS Attribute. For vendor-specific
radius-id Attributes, this represents the VSA ID; for standard attributes, this
represents the Attribute ID (first byte of the Attribute).
[GWCDRFormat_RadiusID]
The valid value is 0 to 255 (one byte). The default is 0.
Note:
The parameter is applicable only for RADIUS accounting (i.e.,
'CDR Type' parameter configured to RADIUS Gateway).
For VSA's (i.e., 'RADIUS Attribute Type' parameter configured to
Vendor Specific), the parameter must be configured to any value
other than 0.
Parameter Description
For standard RADIUS Attributes (i.e., 'RADIUS Attribute Type'
parameter configured to Standard), the value must be a "known"
RADIUS ID (per RFC for RADIUS). However, if you configure the
ID to 0 (default) for any of the RADIUS Attributes (configured in
the 'Column Type' parameter) listed below and then apply your
rule (Click Apply), the device automatically replaces the value
with the RADIUS Attribute's ID according to the RFC:
Destination Number: 30
Source Number: 31
Accounting Status Type: 40
Local Input Octets: 42
Local Output Octets: 43
Call Duration: 46
Local Input Packets: 47
Local Output Packets: 48
If you configure the value to 0 and the RADIUS Attribute is not
any of the ones listed above, the configuration is invalid.
Note:
• The following standard RADIUS Attributes cannot be customized: 1 through 6, 18
through 20, 22, 23, 27 through 29, 32, 34 through 39, 41, 44, 52, 53, 55, 60
through 85, 88, 90, and 91.
• If the RTCP XR feature is unavailable (not licensed or disabled), the R-factor VoIP
metrics are not provided in CDRs (CDR fields, Local R Factor and Remote R
Factor) generated by the device. Instead, these CDR fields are sent with the value
127, meaning that information is unavailable.
The following procedure describes how to customize SBC-related CDRs through the Web
interface. You can also configure it through ini file (SBCCDRFormat) or CLI (configure
troubleshoot > cdr > cdr-format sbc-cdr-format).
3. Configure the CDR according to the parameters described in the table below.
4. Click Apply.
Examples of configured CDR customization rules are shown below:
Figure 61-9: Examples of SBC CDR Customization Rules
Parameter Description
Parameter Description
Field Type Defines the CDR field (column) that you want to customize. The
col-type applicable CDR field depends on the settings of the 'CDR Type'
parameter:
[SBCCDRFormat_FieldType]
For all types: [300] CDR Type (default); [301] Call ID; [302]
Session ID; [303] Report Type; [304] Media Type; [305]
Accounting Status Type; [306] H323 ID; [307] RADIUS Call ID;
[308] Blank; [309] Global Session ID; [310] Leg ID.
Syslog SBC, Local Storage SBC, and RADIUS SBC: [400]
Endpoint Type; [401] Call Orig; [402] Source IP; [403] Destination
IP; [404] Remote IP; [405] Source Port; [406] Dest Port; [407]
Remote Port; [408] Call Duration; [409] Termination Side; [410]
Termination Reason; [411] Setup Time; [412] Connect Time;
[413] Release Time; [414] Redirect Reason; [415] Was Call
Started; [416] IP Group ID; [417] IP Group Name; [418] SRD ID;
[419] SRD Name; [420] SIP Interface ID; [421] Transport Type;
[422] Signaling IP DiffServ; [423] Termination Reason Category;
[424] Proxy Set ID; [425] IP Profile ID; [426] IP Profile Name;
[427] Media Realm ID; [428] Media Realm Name; [429] SIP
Termination Reason; [430] SIP Termination Description; [431]
Caller Display ID; [432] Callee Display ID; [433] SIP Interface
Name; [434] Call Orig RADIUS; [435] Termination Side RADIUS;
[436] Termination Side Yes No; [437] Termination Reason Value;
[438] Proxy Set Name; [439] Trigger.
Syslog Media and RADIUS SBC: [600] Channel ID; [601] Coder
Type; [602] Packet Interval; [603] Payload Type; [604] Local
Input Packets; [605] Local Output Packets; [606] Local Input
Octets; [607] Local Output Octets; [608] Local Packet Loss; [609]
Local Round Trip Delay; [610] Local Jitter; [611] Local SSRC
Sender; [612] Remote Input Packets; [613] Remote Output
Packets; [614] Remote Input Octets; [615] Remote Output
Octets; [616] Remote Packet Loss; [617] Remote Round Trip
Delay; [618] Remote Jitter; [619] Remote SSRC Sender; [620]
Local RTP IP; [621] Local RTP Port; [622] Remote RTP IP; [623]
Remote RTP Port; [624] RTP IP DiffServ; [625] Local R Factor;
[626] Remote R Factor; [627] Local MOS CQ; [628] Remote
MOS CQ; [629] AMD Decision; [630] AMD Decision Probability;
[631] Latched RTP IP; [632] Latched RTP Port; [633] Latched
T38 IP; [634] Latched T38 Port.
Syslog SBC, Local Storage SBC, and RADIUS SBC: [800]
Source URI; [801] Destination URI; [802] Source URI Before
Manipulation; [803] Destination URI Before Manipulation; [804]
Redirect URI; [805] Redirect URI Before Manipulation; [806] SIP
Method; [807] Direct Media; [808] Source Username; [809]
Destination Username; [810] Source Username Before
Manipulation; [811] Destination Username Before Manipulation;
[812] Source Host; [813] Destination Host; [814] Source Host
Before Manipulation; [815] Destination Host Before Manipulation;
[816] Source Dial Plan Tags; [817] Destination Dial Plan Tags;
[818] Remote SIP User Agent.
Title Defines a new name for the CDR field (for Syslog or local storage)
title or for the RADIUS Attribute prefix name (for RADIUS accounting)
that you selected in the 'Column Type' parameter.
[SBCCDRFormat_Title]
The valid value is a string of up to 31 characters. You can configure
the name to be enclosed by apostrophes (single or double). For
Parameter Description
example, if you want the CDR field name to appear as 'Phone
Duration', you must configure the parameter to 'Phone Duration'.
You can also configure the CDR field name with an equals (=) sign,
for example "call-connect-time=".
Note:
For VSA's that do not require a prefix name, leave the parameter
undefined.
The parameter's value is case-sensitive. For example, if you
want the CDR field name to be Phone-Duration, you must
configure the parameter to "Phone-Duration" (i.e., upper case "P"
and "D").
RADIUS Attribute Type Defines whether the RADIUS Attribute of the CDR field is a standard
radius-type or vendor-specific attribute.
[SBCCDRFormat_RadiusType] [0] Standard = (Default) For standard RADIUS Attributes.
[1] Vendor Specific = For vendor-specific RADIUS Attributes
(VSA).
Note: The parameter is applicable only for RADIUS accounting (i.e.,
'CDR Type' parameter configured to RADIUS SBC).
RADIUS Attribute ID Defines an ID for the RADIUS Attribute. For VSAs, this represents
radius-id the VSA ID; for standard Attributes, this represents the Attribute ID
(first byte of the Attribute).
[SBCCDRFormat_RadiusID]
The valid value is 0 to 255 (one byte). The default is 0.
Note:
The parameter is applicable only for RADIUS accounting (i.e.,
'CDR Type' parameter configured to RADIUS SBC).
For VSA's (i.e., 'RADIUS Attribute Type' parameter configured to
Vendor Specific), the parameter must be configured to any
value other than 0.
For standard RADIUS Attributes (i.e., 'RADIUS Attribute Type'
parameter configured to Standard), the value must be a
"known" RADIUS ID (per RFC for RADIUS). However, if you
configure the ID to 0 (default) for any of the RADIUS Attributes
(configured in the 'Column Type' parameter) listed below and
then apply your rule (Click Apply), the device automatically
replaces the value with the RADIUS Attribute's ID according to
the RFC:
Destination Username: 30
Source Username: 31
Accounting Status Type: 40
Local Input Octets: 42
Local Output Octets: 43
Call Duration: 46
Local Input Packets: 47
Local Output Packets: 48
If you configure the value to 0 and the RADIUS Attribute is not
any of the ones listed above, the configuration is invalid.
Note:
• If you do not configure an IP address for a CDR server, the device sends CDRs to
the Syslog server, as configured in 'Enabling Syslog' on page 934.
• The device sends CDRs only for dialog-initiating INVITE messages (call start), 200
OK responses (call connect) and BYE messages (call end). For SBC calls only: If
you want to enable the generation of CDRs for non-call SIP dialogs (such as
SUBSCRIBE, OPTIONS, and REGISTER), use the EnableNonCallCdr parameter.
• From the 'CDR Report Level' drop-down list (CDRReportLevel), select the stage
of the call at which you want CDRs to be generated and sent.
• (Applicable only to SBC) From the 'Media CDR Report Level' drop-down list
(MediaCDRReportLevel), select the stage of the call at which you want CDRs to
be generated and sent.
• From the 'CDR Syslog Sequence Number' drop-down list (CDRSyslogSeqNum),
enable or disable the inclusion of the sequence number (S=) in CDR Syslog
messages.
4. Click Apply.
Note: When the device is reset or powered off, locally stored CDRs are deleted.
You can specify the calls (configuration entities) for which you wish to create CDRs and
store locally. This is done using Logging Filter rules in the Logging Filters table. For
example, you can configure a rule to create CDRs for traffic belonging only to IP Group 2
and store the CDRs locally.
The locally stored CDRs are saved in a comma-separated values file (*.csv), where each
CDR is shown on a dedicated row. An example of a CSV file with two CDRs are shown
below:
CSV file viewed in Excel:
To view the CDR column headers corresponding to the CDR data in the CSV file, run the
following CLI command:
SBC CDRs:
(config-system)# cdr
(cdr)# cdr-format show-title local-storage-sbc
session id,report type,call duration, call end time, call
connect time,call start time, call originator, termination
reason, call id, srce uri, dest uri
Gateway CDRs:
(config-system)# cdr
(cdr)# cdr-format show-title local-storage-gw
You can do the following with locally saved CDR files (*.csv), through the CLI (root menu):
View stored CDR files:
• View all stored CDR files:
# show storage-history
• View all stored, unused CDR files:
# show storage-history unused
Delete stored CDR files:
• Delete all stored files:
# clear storage-history cdr-storage-history all
• Delete all stored, unused CDR files:
# clear storage-history cdr-storage-history unused
Save stored CDR files to an external destination:
# copy storage-history cdr-storage-history <filename> to
<protocol://destination>
Where:
• filename: name you want to assign the file. Any file extension name can be used,
but as the file content is in CSV format, it is recommended to use the .csv file
extension.
• protocol: protocol over which the file is sent (tftp, http, or https).
For example:
copy storage-history cdr-storage-history my_cdrs.csv to
tftp://company.com/cdrs
The following procedure describes how to configure local CDR storage through the Web
interface.
Note:
• If you have enabled the CDR storage feature and you later decide to change the
maximum number of files (CDRLocalMaxNomOfFiles) to a lower value (e.g., from
50 to 10), the device stores the remaining files (e.g., 40) in its memory (i.e.,
unused files).
• When the device operates in High-Availability mode, stored CDRs are deleted
upon device switchover.
• For customizing CDR fields for SBC calls, see Customizing CDRs for SBC Calls
on page 906.
• For customizing CDR fields for Gateway calls, see Customizing CDRs for
Gateway Calls on page 901.
There are two types of data that can be sent to the RADIUS server. The first type is the
accounting-related attributes and the second type is the vendor specific attributes (VSA):
Standard RADIUS attributes (per RFC): A typical standard RADIUS attribute is
shown below. The RADIUS attribute ID depends on the attribute.
Figure 61-12: Typical Standard RADIUS Attribute
The following figure shows a standard RADIUS attribute collected by Wireshark. The
bottom pane shows the RADIUS attribute information as sent in the packet; the upper
pane is Wireshark's interpretation of the RADIUS information in a more readable
format. The example shows the attribute in numeric format (32-bit number in 4 bytes).
Figure 61-13: Example of Standard RADIUS Attribute Collected by Wireshark
Note: You can customize the prefix title of the RADIUS attribute name and the ID. For
more information, see Customizing CDRs for Gateway Calls on page 901 and
Customizing CDRs for SBC Calls on page 906.
To configure the address of the RADIUS Accounting server, see 'Configuring RADIUS
Servers' on page 238. For all RADIUS-related configuration, see 'RADIUS-based Services'
on page 238.
For a detailed description of the parameters, see 'RADIUS Parameters' on page 1200.
Figure 61-16: Configuring RADIUS Accounting
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
The table below lists the RADIUS Accounting CDR attributes included in the
communication packets transmitted between the device and a RADIUS server.
Table 61-9: Supported RADIUS Accounting CDR Attributes
Vendor-
Attribute Attribute Specific Value
Description Example AAA
ID Name Attribute Format
(VSA) ID
Request Attributes
1 user-name (Standard) Account number or String 5421385747 Start
calling party up to 15 Acc
number or blank digits Stop
long Acc
4 nas-ip-address (Standard) IP address of the Numeric 192.168.14.43 Start
requesting device Acc
Stop
Acc
6 service-type (Standard) Type of service Numeric 1: login Start
requested Acc
Stop
Acc
26 h323- 1 SIP call identifier Up to h323-incoming- Start
incoming-conf- 32 conf-id=38393530 Acc
id octets Stop
Acc
26 h323-remote- 23 IP address of the Numeric - Stop
address remote gateway Acc
26 h323-conf-id 24 H.323/SIP call Up to Start
identifier 32 Acc
octets Stop
Acc
26 h323-setup- 25 Setup time in NTP String h323-setup- Start
time format 1 time=09:33:26.621 Acc
Mon Dec 2014 Stop
Acc
26 h323-call- 26 Originator of call: String h323-call- Start
origin "answer": Call origin=answer Acc
originated from Stop
Vendor-
Attribute Attribute Specific Value
Description Example AAA
ID Name Attribute Format
(VSA) ID
the IP side Acc
(Gateway) or
incoming leg
(SBC)
"originate": Call
originated from
the Tel side
(Gateway) or
outgoing leg
(SBC)
26 h323-call-type 27 Protocol type or String h323-call- Start
family used on this type=VOIP Acc
leg of the call. The Stop
value is always Acc
"VOIP".
Vendor-
Attribute Attribute Specific Value
Description Example AAA
ID Name Attribute Format
(VSA) ID
(SBC)
26 terminator 37 Terminator of the String terminator=originate Stop
call: Acc
"answer": Call
originated from
the IP side
(Gateway) or
incoming leg
(SBC)
"originate": Call
originated from
the Tel side
(Gateway) or
outgoing leg
(SBC)
30 called-station- (Standard) Called (destination) String 8004567145 Start
id phone number Acc
(Gateway call) or
Destination URI
(SBC call)
31 calling-station- (Standard) Calling Party String 5135672127 Start
id Number (ANI) Acc
(Gateway call) or Stop
Source URI (SBC Acc
call)
40 acct-status- (Standard) Account Request Numeric 1 Start
type Type - start (1) or Acc
stop (2) Stop
Note: ‘start’ isn’t Acc
supported on the
Calling Card
application.
41 acct-delay- (Standard) No. of seconds Numeric 5 Start
time tried in sending a Acc
particular record Stop
Acc
42 acct-input- (Standard) Number of octets Numeric - Stop
octets received for that Acc
call duration (for
SBC calls,
applicable only if
media anchoring)
43 acct-output- (Standard) Number of octets Numeric - Stop
octets sent for that call Acc
duration (for SBC
calls, applicable
only if media
anchoring)
Vendor-
Attribute Attribute Specific Value
Description Example AAA
ID Name Attribute Format
(VSA) ID
Note: You can include Syslog messages in debug recording (see 'Configuring Log
Filter Rules' on page 923).
Note:
• If you want to configure a Log Filter rule that logs Syslog messages to a Syslog
server (i.e., not to a Debug Recording server), you must enable Syslog
functionality, using the 'Enable Syslog' (EnableSyslog) parameter (see 'Enabling
Syslog' on page 934). Enabling Syslog functionality is not required for rules that
include Syslog messages in the debug recording sent to the Debug Recording
server.
• To configure the Syslog server's address, see 'Configuring the Syslog Server
Address' on page 934. To configure additional, global Syslog settings, see
'Configuring Syslog' on page 928.
• To configure the Debug Recording server's address, see 'Configuring the Debug
Recording Server Address' on page 939.
• To configure additional, global CDR settings such as at what stage of the call the
CDR is generated (e.g., start and end of call), see 'Configuring CDR Reporting' on
page 910.
The following procedure describes how to configure Log Filter rules through the Web
interface. You can also configure it through ini file (LoggingFilters) or CLI (configure
troubleshoot > logging logging-filters).
3. Configure a Log Filtering rule according to the parameters described in the table
below.
4. Click Apply.
Table 62-1: Logging Filters Table Parameter Descriptions
Parameter Description
Parameter Description
Parameter Description
"1/[2-4]" (without apostrophes), means module 1, ports 2
through 4
The exclamation (!) wildcard character can be used for excluding
a specific configuration entity from the filter. For example, to
include all IP Groups in the filter except IP Group ID 2, configure
the 'Filter Type' parameter to IP Group and the 'Value'
parameter to "!2" (without apostrophes). Note that for SBC calls,
a Logging Filter rule applies to the entire session, which is both
legs (i.e., not per leg). For example, a call between IP Groups 1
and 2 are logged for both legs even if the 'Value' parameter is
configured to "!2".
Any to indicate all.
Note:
You can use the index number or string name to specify the
configuration entity for the following 'Filter Types': Tel-to-IP, IP-
to-Tel, IP Group, SRD, Classification, IP-to-IP Routing, or SIP
Interface. For example, to specify IP Group at Index 2 with the
name "SIP Trunk", configure the parameter to either "2" or "SIP
Trunk" (without apostrophes).
For IP trace expressions, see 'Filtering IP Network Traces' on
page 928.
Log Destination Defines where the device sends the log file.
log-dest [0] Syslog Server = The device generates Syslog messages
[LoggingFilters_LogDestination] based on the configured log filter and sends them to a user-
defined Syslog server. The Syslog messages can contain one of
the following types of information, depending on the settings of
the 'Log Type' parameter (described later):
Not configured (default): Syslog messages include regular
syslog information.
CDR Only: Syslog messages include only CDRs (no system
information and alerts).
[1] Debug Recording Server = (Default) The device generates
debug recording packets based on the configured log filter and
sends them to a user-defined Debug Recording server.
[2] Local Storage = The device generates CDRs based on the
configured log filter and stores them locally on the device. For
more information on local CDR storage, see Storing CDRs on
the Device on page 910.
[3] Call Flow Server = The device sends SIP messages to a call
flow server (i.e., OVOC) for displaying SIP call dialog sessions
as SIP call flow diagrams. For this functionality, you also need to
configure the 'Log Type' parameter to Call Flow. For enabling
this functionality, see Enabling SIP Call Flow Diagrams in OVOC
on page 947.
Note:
If the 'Filter Type' parameter is configured to IP Trace, you must
configure the parameter to Debug Recording Server.
If you configure the parameter to Local Storage, you must
configure the 'Log Type' parameter to CDR Only.
If you configure the parameter to Syslog Server and the debug
level (GwDebugLevel) is configured to No Debug (see
'Configuring Syslog Debug Level' on page 935), the Syslog
messages include only system Warnings and Errors.
Parameter Description
If you configure the parameter to Debug Recording Server, you
can also include Syslog messages in the debug recording
packets sent to the debug recording server. To include Syslog
messages, configure the 'Log Type' parameter (see below) to
the relevant option.
Log Type Defines the type of messages to include in the log file.
log-type [0] = (Default) Not configured. The option is applicable only for
[LoggingFilters_CaptureType] sending Syslog messages to a Syslog server (i.e., 'Log
Destination' parameter is configured to Syslog Server).
[1] Signaling = The option is applicable only to debug recording
(i.e., 'Log Destination' parameter is configured to Debug
Recording Server). The debug recording includes signaling
information such as SIP signaling messages, Syslog messages,
CDRs, and the device's internal processing messages.
[2] Signaling & Media = The option is applicable only to debug
recording (i.e., 'Log Destination' parameter is configured to
Debug Recording Server). The debug recording includes
signaling, Syslog messages, and media (RTP/RTCP/T.38).
[3] Signaling & Media & PCM = The option is applicable only to
debug recording (i.e., 'Log Destination' parameter is configured
to Debug Recording Server). The debug recording includes
signaling, Syslog messages, media, and PCM (voice signals
from and to TDM).
[4] PSTN Trace = The option is applicable only to debug
recording (i.e., 'Log Destination' parameter is configured to
Debug Recording Server) and if the 'Filter Type' parameter is
configured to Trunk ID. The debug recording includes ISDN and
CAS traces.
[5] CDR Only = Only CDRs are generated. The option is
applicable only if the 'Log Destination' parameter is configured to
Syslog Server or Local Storage. When configured to Syslog
Server, only CDRs are included in the Syslog messages
(excluding all system logs and alerts) sent to the Syslog server.
[6] Call Flow = The device sends SIP messages (in XML format),
as they occur in real-time, to OVOC for displaying SIP call dialog
sessions as call flow diagrams. For this functionality, you also
need to configure the 'Log Destination' parameter to Call Flow
Server. For enabling this functionality, see Enabling SIP Call
Flow Diagrams in OVOC on page 947.
Note:
If you configure the 'Log Destination' parameter to Local
Storage, the 'Log Type' parameter must be configured to CDR
Only.
The parameter is not applicable when the 'Filter Type' parameter
is configured to IP Trace.
To include Syslog messages in debug recording, it is
unnecessary to enable Syslog functionality.
Mode Enables and disables the rule.
mode [0] Disable
[LoggingFilters_Mode] [1] Enable (default)
Expression Description
Note:
• If the 'Value' parameter is undefined, the device records all IP traffic types.
• You cannot use ip.addr or udp/tcp.port together with ip.src/dst or
udp/tcp.srcport/dstport. For example, "ip.addr==1.1.1.1 and ip.src==2.2.2.2" is an
invalid configuration value.
Syslog messages begin with a less-than ("<") character, followed by a number, which is
followed by a greater-than (">") character. This is optionally followed by a single ASCII
space. The number is known as the Priority and represents both the Facility level and the
Severity level. A Syslog message with Facility level 16 is shown below:
Facility: LOCAL0 - reserved for local use (16)
Critical RecoverableMsg
Major RecoverableMsg
Minor RecoverableMsg
Warning Notice
Indeterminate Notice
Cleared Notice
To enable Syslog:
1. Open the Syslog Settings page (Troubleshoot menu > Troubleshoot tab > Logging
folder > Syslog Settings).
2. From the 'Enable Syslog' drop-down list, select Enable.
Figure 62-2: Enabling Syslog
3. Click Apply.
4. Click Apply.
2. From the 'Debug Level' (GwDebugLevel) drop-down list, select the debug level of
Syslog messages:
• No Debug: Disables Syslog and no Syslog messages are sent.
• Basic: Sends debug logs of incoming and outgoing SIP messages.
• Detailed: Sends debug logs of incoming and outgoing SIP message as well as
many other logged processes.
3. From the 'Syslog Optimization' (SyslogOptimization) drop-down list, select whether
you want the device to accumulate and bundle multiple debug messages into a single
UDP packet before sending it to a Syslog server. The benefit of the feature is that it
reduces the number of UDP Syslog packets, thereby improving (optimizing) CPU
utilization. The size of the bundled message is configured by the
MaxBundleSyslogLength parameter.
4. From the 'Syslog CPU Protection' (SyslogCpuProtection) drop-down list, select
whether you want to enable the protection feature for the device's CPU resources
during debug reporting, ensuring voice traffic is unaffected. If CPU resources drop
(i.e., high CPU usage) to a critical level (user-defined threshold), the device
automatically lowers the debug level to free up CPU resources that were required for
the previous debug-level functionality. When CPU resources become available again,
the device increases the debug level to its' previous setting. For example, if you set
the 'Debug Level' to Detailed and CPU resources decrease to the defined threshold,
the device automatically changes the level to Basic, and if that is not enough, it
changes the level to No Debug. Once CPU resources are returned to normal, the
device automatically changes the debug level back to its' original setting (i.e.,
Detailed). The threshold is configured by the DebugLevelHighThreshold parameter.
5. Click Apply.
IP address of the client PC from where the Web user accessed the management
interface
Protocol used for the session (e.g., SSH or HTTP)
The following example shows a Web-user activity log (indicating a login action) with the
above-mentioned information:
14:07:46.300 : 10.15.7.95 : Local 0 :NOTICE : [S=3149]
[BID=3aad56:32] Activity Log: WEB: Successful login at
10.15.7.95:80. User: Admin. Session: HTTP (10.13.22.54)
The device can report the following user activities:
Modifications of individual parameters, for example:
14:33:00.162 : 10.15.7.95 : Local 0 :NOTICE : [S=3403]
[BID=3aad56:32] Activity Log: Max Login Attempts was changed
from '3' to '2'. User: Admin. Session: HTTP (10.13.22.54)
Modifications of table fields, and addition and deletion of table rows, for example:
14:42:48.334 : 10.15.7.95 : NOTICE : [S=3546] [BID=3aad56:32]
Activity Log: Classification - remove line 2. User: Admin.
Session: HTTP (10.13.22.54)
Entered CLI commands (modifications of security-sensitive commands are logged
without the entered value).
Configuration file load (reported without per-parameter notifications).
Auxiliary file load and software update.
Device reset and burn to flash memory.
Access to unauthorized Web pages according to the Web user's access level.
Modifications of "sensitive" parameters.
Login and logout.
Actions that are not related to parameter changes (for example, file uploads, file
delete, lock-unlock maintenance actions, LDAP clear cache, register-unregister, and
start-stop trunk. In the Web, these actions are typically done by clicking a button (e.g.,
the LOCK button).
For more information on each of the above listed options, see 'Syslog, CDR and Debug
Parameters' on page 999.
The following procedure describes how to configure management user activity logging
through the Web interface. You can also configure it through ini file (ActivityListToLog) or
CLI (configure troubleshoot > activity-log).
3. Click Apply.
Note:
• You can also view logged user activities in the Web interface (see 'Viewing Web
User Activity Logs' on page 849).
• Logging of CLI commands can only be configured through CLI or ini file.
• You can configure the device to send an SNMP trap each time a user performs a
Web activity. For more information, see 'Configuring SNMP Community Strings' on
page 93.
Note: When debug recording is enabled and Syslog messages are also included in
the debug recording, to view Syslog messages using Wireshark, you must install
AudioCodes' Wireshark plug-in (acsyslog.dll). Once the plug-in is installed, the Syslog
messages are decoded as "AC SYSLOG" and displayed using the "acsyslog" filter
(instead of the regular "syslog" filter). For more information on debug recording, see
'Debug Recording' on page 938.
Third-party, Syslog Server: Any third-party, Syslog server program that enables
filtering of messages according to parameters such as priority, IP sender address,
time, and date.
Device's CLI Console: The device sends error messages (e.g., Syslog messages) to
the CLI as well as to the configured destination. Use the following commands:
• To start debug recording:
debug log
• To stop debug recording:
no debug log
Note:
• It's not recommended to keep a Message Log session open for a prolonged
period. This may cause the device to overload. For prolonged (and detailed)
debugging, use an external Syslog server.
• You can select the Syslog messages displayed on the page, and copy and paste
them into a text editor such as Notepad. This text file (txt) can then be sent to
AudioCodes Technical Support for diagnosis and troubleshooting.
Note:
• Debug recording is collected only on the device's OAMP interface.
• For a detailed description of the debug recording parameters, see 'Syslog, CDR
and Debug Parameters' on page 999.
Note: You can also save debug recordings to an external USB hard drive that is
connected to the device's USB port. For more information, see USB Storage
Capabilities on page 817.
2. In the 'Debug Recording Destination IP' field, configure the IP address of the debug
capturing server.
3. In the 'Debug Recording Destination Port' field, configure the port of the debug
capturing server.
4. Click Apply.
Note:
• The default debug recording port is 925. You can change the port in Wireshark
(Edit menu > Preferences > Protocols > AC DR).
• The plug-in files are per major software release of Wireshark. For more
information, contact your AudioCodes sales representative.
• The plug-in files are applicable only to Wireshark 32-bit for Windows.
4. Start Wireshark.
5. In the Filter field, type "acdr" (see the figure below) to view the debug recording
messages. Note that the source IP address of the messages is always the OAMP IP
address of the device.
The device adds the header "AUDIOCODES DEBUG RECORDING" to each debug
recording message, as shown below:
The file is saved to the device's memory (not flash) and erased after a device reset.
Marks the captured file (useful for troubleshooting process):
# debug capture VoIP physical insert-pad
Before running this command, the debug capture must be started.
Displays debug status and configured rules:
# debug capture VoIP physical show
Specifies the destination (FTP, TFTP, or USB) where you want the PCAP file sent:
# debug capture VoIP physical target <ftp|tftp|usb>
Stops the debug capture, creates a file named debug-capture-voip-<timestamp>.pcap,
and sends it to the TFTP or FTP server:
# debug capture voip physical stop <TFTP/FTP server IP
address>
If no IP address is defined, the capture is saved on the device for later retrieval.
63 Self-Testing
The device features the following self-testing modes to identify faulty hardware
components:
Detailed Test (Configurable): This test verifies the correct functioning of the different
hardware components on the device. This test is done when the device is taken out of
service (i.e., not in regular service for processing calls). The test is performed on
startup when initialization of the device completes.
To enable this test, set the ini file parameter, EnableDiagnostics to 1 or 2, and then
reset the device. Upon completion of the test and if the test fails, the device sends
information on the test results of each hardware component to the Syslog server.
The following hardware components are tested:
Note:
• To return the device to regular operation and service, disable the test by setting
the ini file parameter, EnableDiagnostics to 0, and then reset the device.
• While the test is enabled, ignore errors sent to the Syslog server.
Startup Test (automatic): This hardware test has minor impact in real-time. While
this test is executed, the regular operation of the device is disabled. If an error is
detected, an error message is sent to the Syslog.
3. Click Apply.
c. Click Apply.
If the Logging Filters table does not include any filtering rule for SIP call flow, the device
sends call flow messages to OVOC for all calls.
Note:
• The feature does not support SIPRec messages and REGISTER messages.
• For HA systems, during a switchover the device stops sending the SIP call flow
messages of current SIP dialogs and continues sending them after the switchover
(even though OVOC does not display the continuation of the call after switchover).
• If the device experiences a CPU overload, it stops sending SIP call flow messages
to OVOC until the CPU returns to normal levels.
You can also delete the core dump file through CLI, as described in the following
procedure:
Note: By default, you can configure up to five test calls. However, this number can
be increased by installing the relevant License Key. For more information, contact
your AudioCodes sales representative.
The following procedure describes how to configure test calls through the Web interface.
You can also configure it through ini file (Test_Call) or CLI (configure troubleshoot > test-
call test-call-table).
3. Configure a test call according to the parameters described in the table below.
4. Click Apply, and then save your settings to flash memory.
Table 67-1: Test Call Rules Table Parameter Descriptions
Parameter Description
Common
Index Defines an index number for the new table row.
Note: Each row must be configured with a unique index.
Endpoint URI Defines the endpoint's URI. This can be defined as a user or
endpoint-uri user@host. The device identifies this endpoint only by the URI's
user part. The URI's host part is used in the SIP From header in
[Test_Call_EndpointURI]
REGISTER requests.
The valid value is a string of up to 150 characters. By default, the
parameter is not configured.
Note: The parameter is mandatory.
Called URI Defines the destination (called) URI (user@host).
called-uri The valid value is a string of up to 150 characters. By default, the
[Test_Call_CalledURI] parameter is not configured.
Route By Defines the type of routing method. This applies to incoming and
Parameter Description
route-by outgoing calls.
[Test_Call_RouteBy] [0] Tel-to-IP = (Default) Calls are matched by a Tel-to-IP routing
rule in the Tel-to-IP Routing table (see Configuring Tel-to-IP
Routing Rules on page 509).
[1] IP Group = Calls are matched by (or routed to) an IP Group.
To specify the IP Group, see the 'IP Group' parameter in the
table.
[2] Dest Address = Calls are matched by (or routed to) a
destination IP address. To configure the address, see the
'Destination Address' parameter in the table.
Note:
If configured to Tel-to-IP or Dest Address, you must assign a
SIP Interface (see the 'SIP Interface' parameter in the table).
For REGISTER messages:
The Tel-to-IP option cannot be used as the routing method.
If configured to IP Group, only Server-type IP Groups can
be used.
IP Group Assigns an IP Group. This is the IP Group that the test call is sent to
ip-group-id or received from.
[Test_Call_IPGroupName] By default, no value is defined.
To configure IP Groups, see 'Configuring IP Groups' on page 359.
Note:
The parameter is applicable only if you configure the 'Route By'
parameter to IP Group.
The IP Group is used for incoming and outgoing calls.
Destination Address Defines the destination host.
dst-address The valid value is an IP address[:port] or DNS name[:port].
[Test_Call_DestAddress] Note: The parameter is applicable only if the 'Route By' parameter
is configured to Dest Address [2].
SIP Interface Assigns a SIP Interface. This is the SIP Interface to which the test
sip-interface-name call is sent and received from.
[Test_Call_SIPInterfaceName] By default, no value is defined.
To configure SIP Interfaces, see Configuring SIP Interfaces on page
351.
Note: The parameter is applicable only if the 'Route By' parameter
is configured to Tel-to-IP or Dest Address.
Application Type Defines the application type for the endpoint. This associates the IP
application-type Group and SRD to a specific SIP interface. For example, assume
two SIP Interfaces are configured in the SIP Interfaces table where
[Test_Call_ApplicationType]
one is set to "GW" and one to "SBC" for the 'Application Type'. If the
parameter is set to "SBC", the device uses the SIP Interface set to
"SBC".
[0] GW (default) = Gateway application
[2] SBC = SBC application
Destination Transport Type Defines the transport type for outgoing calls.
dst-transport [-1] = Not configured (default)
Parameter Description
[Test_Call_DestTransportType] [0] UDP
[1] TCP
[2] TLS
Note: The parameter is applicable only if the 'Route By' parameter
is set to Dest Address.
QoE Profile Assigns a QoE Profile to the test call.
qoe-profile By default, no value is defined.
[Test_Call_QOEProfile] To configure QoE Profiles, see 'Configuring Quality of Experience
Profiles' on page 321.
Bandwidth Profile Assigns a Bandwidth Profile to the test call.
bandwidth-profile By default, no value is defined.
[Test_Call_BWProfile] To configure Bandwidth Profiles, see 'Configuring Bandwidth
Profiles' on page 326.
Authentication
Note: These parameters are applicable only if the 'Call Party' parameter (see below) is configured to
Caller.
Auto Register Enables automatic registration of the endpoint. The endpoint can
auto-register register to the device itself or to the 'Destination Address' or 'IP
Group' parameter settings (see above).
[Test_Call_AutoRegister]
[0] Disable (default)
[1] Enable
Username Defines the authentication username.
user-name By default, no username is defined.
[Test_Call_UserName]
Password Defines the authentication password.
password By default, no password is defined.
[Test_Call_Password]
Test Setting
Call Party Defines whether the test endpoint is the initiator (caller) or receiving
call-party side (called) of the test call.
[Test_Call_CallParty] [0] Caller (default)
[1] Called
Maximum Channels for Defines the maximum number of concurrent channels for the test
Session session. For example, if you have configured an endpoint "101" and
max-channels you configure the parameter to "3", the device automatically creates
three simulated endpoints - "101", "102" and "103" (i.e., consecutive
[Test_Call_MaxChannels]
endpoint URIs are assigned).
The default is 1.
Call Duration Defines the call duration (in seconds).
call-duration The valid value is -1 to 100000. The default is 20. A value of 0
[Test_Call_CallDuration] means infinite. A value of -1 means that the parameter value is
automatically calculated according to the values of the 'Calls per
Second' and 'Maximum Channels for Session' parameters.
Note: The parameter is applicable only if you configure 'Call Party'
to Caller.
Parameter Description
Status Description
Note:
• On the receiving side, when the first call is accepted in "Idle" state, statistics are
reset.
• The device also generates CDRs for test calls if you have enabled CDR
generation (see 'Configuring CDR Reporting' on page 910).
Note:
• You can configure the DTMF signaling type (e.g., out-of-band or in-band) using
the 'DTMF Transport Type' parameter. For more information, see 'Configuring
DTMF Transport Types' on page 200.
• To generate DTMF tones, the device's DSP resources are required.
3. Click Apply.
3. Click Apply.
Note:
• The device can play DTMF tones to the remote endpoint. For more information,
see Configuring DTMF Tones for Test Calls on page 958.
• Test calls are done on all SIP Interfaces.
Batch Test Call Scenario: This example describes the configuration of a batch test
call setup for scheduled and continuous call testing of multiple endpoints. The test call
is done between two AudioCodes devices - Device A and Device B - with simulated
test endpoints. This eliminates the need for phone users, who would otherwise need
to answer and end calls many times for batch testing. The calls are initiated from
Device A, where Device B serves as the remote answering endpoint.
Figure 67-7: Batch Test Call Example
Registration Test Call Scenario: This example describes the configuration for testing
the registration and authentication (i.e., username and pas,sword) process of a
simulated test endpoint on the device with an external proxy/registrar server. This is
useful, for example, for verifying that endpoints located in the LAN can register with an
external proxy and subsequently, communicate with one another.
Figure 67-8: Test Call Registration Example
This example assumes that you have configured your device for communication
between LAN phone users such as IP Groups to represent the device (10.13.4.12)
and the proxy server, and IP-to-IP routing rules to route calls between these IP
Groups.
• Test Call Rules table configuration:
♦ Endpoint URI: "101"
♦ Called URI: "itsp"
♦ Route By: Dest Address
♦ Destination Address: "10.13.4.12" (this is the IP address of the device itself)
♦ SIP Interface: SIPInterface_0
♦ Auto Register: Enable
♦ User Name: "testuser"
♦ Password: "12345"
♦ Call Party: Caller
Note: When configuring phone numbers or prefixes in the Web interface, enter them
only as digits without any other characters. For example, if you wish to enter the
phone number 555-1212, it must be entered as 5551212 without the hyphen (-). If the
hyphen is entered, the entry is invalid.
Notation Description
Notation Description
[5551200-5551300]#
To depict prefix numbers from 123100 to 123200:
123[100-200]#
To depict prefix and suffix numbers together:
03(100): for any number that starts with 03 and ends with 100.
[100-199](100,101,105): for a number that starts with 100 to 199 and
ends with 100, 101 or 105.
03(abc): for any number that starts with 03 and ends with abc.
03(5xx): for any number that starts with 03 and ends with 5xx.
03(400,401,405): for any number that starts with 03 and ends with
400 or 401 or 405.
Note:
The value n must be less than the value m.
Only numerical ranges are supported (not alphabetical letters).
For suffix ranges, the starting (n) and ending (m) numbers in the range
must include the same number of digits. For example, (23-34) is correct,
but (3-12) is not.
[n,m,...] or (n,m,...) Represents multiple numbers. The value can include digits or characters.
Examples:
To depict a one-digit number starting with 2, 3, 4, 5, or 6: [2,3,4,5,6]
To depict a one-digit number ending with 7, 8, or 9: (7,8,9)
Prefix with Suffix: [2,3,4,5,6](7,8,9) - prefix is denoted in square brackets;
suffix in parenthesis
For prefix only, the notations d[n,m]e and d[n-m]e can also be used:
To depict a five-digit number that starts with 11, 22, or 33:
[11,22,33]xxx#
To depict a six-digit number that starts with 111 or 222: [111,222]xxx#
[n1-m1,n2- Represents a mixed notation of single numbers and multiple ranges. For
m2,a,b,c,n3-m3] or example, to depict numbers 123 to 130, 455, 766, and 780 to 790:
(n1-m1,n2- Prefix: [123-130,455,766,780-790]
m2,a,b,c,n3-m3) Suffix: (123-130,455,766,780-790)
Note: The ranges and the single numbers used in the dial plan must have
the same number of digits. For example, each number range and single
number in the dialing plan example above consists of three digits.
Special ASCII The device does not support the use of ASCII characters in manipulation
Characters rules and therefore, for LDAP-based queries, the device can use the
hexadecimal (HEX) format of the ASCII characters for phone numbers
instead. The HEX value must be preceded by a backslash “\”. For example,
you can configure a manipulation rule that changes the received number
+49 (7303) 165-xxxxx to +49 \287303\29 165-xxxxx, where \28 is the
ASCII HEX value for “(“ and \29 is the ASCII HEX value for “)”. The
manipulation rule in this example would denote the parenthesis in the
destination number prefix using "x" wildcards (e.g., xx165xxxxx#); the prefix
to add to the number would include the HEX values (e.g., +49 \287303\29
165-).
Below is a list of common ASCII characters and their corresponding HEX
values:
ASCII Character HEX Value
* \2a
( \28
Notation Description
) \29
\ \5c
/ \2f
Note: Parameters and values enclosed in square brackets [...] represent the ini file
parameters and their enumeration values.
Parameter Description
Parameter Description
WebAccessList_0 = 10.13.2.66
WebAccessList_1 = 10.13.77.7
For a description of the parameter, see 'Configuring Web and
Telnet Access List' on page 85.
Local Users Table
Local Users The table defines management users.
configure system > user The format of the ini file table parameter is as follows:
[WebUsers] [ WebUsers ]
FORMAT WebUsers_Index = WebUsers_Username,
WebUsers_Password, WebUsers_Status,
WebUsers_PwAgeInterval, WebUsers_SessionLimit,
WebUsers_CliSessionLimit, WebUsers_SessionTimeout,
WebUsers_BlockTime, WebUsers_UserLevel,
WebUsers_PwNonce, WebUsers_SSHPublicKey;
[ \WebUsers ]
For more information, see Configuring Management User
Accounts on page 75.
Additional Management Interfaces Table
Additional Management Interfaces The table defines additional management interfaces.
configure system > The format of the ini file table parameter is as follows:
additional-mgmt-if [ AdditionalManagementInterfaces ]
[AdditionalManagementInterfaces] FORMAT AdditionalManagementInterfaces_Index =
AdditionalManagementInterfaces_InterfaceName,
AdditionalManagementInterfaces_TLSContextName,
AdditionalManagementInterfaces_HTTPSOnly;
[ \AdditionalManagementInterfaces ]
For more information, see Configuring Additional Management
Interfaces on page 74.
Parameter Description
Enable web access from all Enables Web access from any of the device's IP network
interfaces interfaces. The feature applies to HTTP and HTTPS protocols.
web-access-from-all-interfaces [0] = (Default) Disable – Web access is only through the
[EnableWebAccessFromAllInterfa OAMP interface.
ces] [1] = Enable - Web access is through any network interface.
Note:
For the parameter to take effect, a device reset is required.
Instead of using this parameter, you can use the Additional
Management Interfaces table to assign specific IP network
interfaces for management interfaces (as well as assign them
TLS Contexts). For more information, see Configuring
Additional Management Interfaces on page 74.
Parameter Description
Password Change Interval Defines the duration (in minutes) of the validity of Web login
[WebUserPassChangeInterval] passwords. When this duration expires, the password of the Web
user must be changed.
The valid value is 0 to 100000, where 0 means that the password
is always valid. The default is 1140.
Note: The parameter is applicable only when using the Local
Users table, where the default value of the 'Password Age'
parameter in the Local Users table inherits the parameter's
value.
User Inactivity Timer Defines the duration (in days) for which a user has not logged in
[UserInactivityTimer] to the Web interface, after which the status of the user becomes
inactive and can no longer access the Web interface. These
users can only log in to the Web interface if their status is
changed (to New or Valid) by a Security Administrator or Master
user.
The valid value is 0 to 10000, where 0 means inactive. The
default is 90.
Note: The parameter is applicable only when using the Local
Users table.
Session Timeout Defines the duration (in minutes) of inactivity of a logged-in user
[WebSessionTimeout] in the Web interface, after which the user is automatically logged
off the Web session. In other words, the session expires when
the user has not performed any operations (activities) in the Web
interface for the configured duration.
The valid value is 0, or 2 to 100000, where 0 means no timeout.
The default is 15.
Note: You can also configure the functionality per user in the
Local Users table (see 'Configuring Management User Accounts'
on page 75), which overrides this global setting.
Deny Access On Fail Count Defines the maximum number of failed login attempts, after
[DenyAccessOnFailCount] which the requesting IP address is blocked.
The valid value range is 0 to 10. The values 0 and 1 mean
immediate block. The default is 3.
Deny Authentication Timer Defines the duration (in seconds) for which login to the Web
[DenyAuthenticationTimer] interface is denied from a specific IP address (for all users) when
the number of failed login attempts has exceeded the maximum.
This maximum is defined by the DenyAccessOnFailCount
parameter. Only after this time expires can users attempt to login
from this same IP address.
The valid value is 0 to 100000, where 0 means that login is not
denied regardless of number of failed login attempts. The default
is 60.
Display Last Login Information Enables display of user's login information on each successful
[DisplayLoginInformation] login attempt.
[0] Disable (default)
[1] Enable
[EnableMgmtTwoFactorAuthentic Enables Web login authentication using a third-party, smart card.
ation] [0] = Disable (default)
Parameter Description
[1] = Enable
When enabled, the device retrieves the Web user’s login
username from the smart card, which is automatically displayed
(read-only) in the Web Login screen; the user is then required to
provide only the login password.
Typically, a TLS connection is established between the smart
card and the device’s Web interface, and a RADIUS server is
implemented to authenticate the password with the username.
Thus, this feature implements a two-factor authentication - what
the user has (the physical card) and what the user knows (i.e.,
the login password).
http-port Defines the LAN HTTP port for Web management. To enable
[HTTPport] Web management from the LAN, configure the desired port.
The default is 80.
Note: For the parameter to take effect, a device reset is required.
[DisableWebConfig] Determines whether the entire Web interface is read-only.
[0] = (Default) Enables modifications of parameters.
[1] = Web interface is read-only.
When in read-only mode, parameters can't be modified and the
following pages can't be accessed: Web User Accounts, TLS
Contexts, Time and Date, Maintenance Actions, Load Auxiliary
Files, Software Upgrade Wizard, and Configuration File.
Note: For the parameter to take effect, a device reset is required.
[ResetWebPassword] Enables the device to restore the default management users:
Security Administrator user (username "Admin"; password
"Admin")
Monitor user (username "User"; password "User")
In addition, all other users that may have been configured (in the
Local Users table) are deleted.
[0] = (Default) Disabled. Currently configured users
(usernames and passwords) are retained.
[1] = Enabled. Default users are restored (see description
above) and all other configured users are deleted.
Note:
For the parameter to take effect, a device reset is required.
In addition to the ini file (see above), you can also restore the
default user accounts through the following management
platforms:
SNMP (restores default users and retains other
configured users):
1) Set acSysGenericINILine to
WEBPasswordControlViaSNMP = 1, and reset the device
with a flash burn (set acSysActionSetResetControl to 1
and acSysActionSetReset to 1).
2) Change the username and password in the
acSysWEBAccessEntry table. Use the following format:
Username acSysWEBAccessUserName: old/pass/new
Password acSysWEBAccessUserCode:
username/old/new
Customizing Web GUI
Parameter Description
Parameter Description
[WebLogoText] Defines the text that is displayed instead of the logo in the Web
interface.
The valid value is a string of up to 15 characters.
For more information, see Replacing the Corporate Logo with
Text on page 70.
Note: The parameter is applicable only when the UseWebLogo
parameter is configured to 1.
[LogoWidth] Defines the width (in pixels) of the logo image that you want
displayed in the Web interface instead of the default logo.
The valid value is 0 to 199. The default is 145.
For more information, see Replacing the Corporate Logo with an
Image on page 69.
Notes:
The optimal setting depends on your screen resolution.
If the width of the loaded image is greater than the maximum
value, the device automatically resizes the image to the
default width size.
The height is limited to 24 pixels.
The parameter is applicable only when the UseWebLogo
parameter is configured to 0.
To define the image file, see the LogoFileName parameter.
[LogoFileName] Defines the name of the image file that you want loaded to the
device. This image is displayed as the logo in the Web interface
(instead of AudioCodes logo).
The file name can be up to 47 characters.
For more information, see Replacing the Corporate Logo with an
Image on page 69.
Notes:
The image file type can be one of the following: GIF, PNG,
JPG, or JPEG.
The size of the image file can be up to 64 Kbytes.
The parameter is applicable only when the UseWebLogo
parameter is configured to 0.
Parameter Description
Embedded Telnet Server Enables the device's embedded Telnet server. Telnet is disabled by
configure system > cli-settings default for security.
> telnet [0] Disable
[TelnetServerEnable] [1] Enable Unsecured (default)
[2] Enable Secured
Note: Only the primary Web User Account (which has Security
Administration access level) can access the device using Telnet
Parameter Description
(see 'Configuring Management User Accounts' on page 75).
Telnet Server TCP Port Defines the port number for the embedded Telnet server.
configure system > cli-settings The valid range is all valid port numbers. The default port is 23.
> telnet-port
[TelnetServerPort]
Telnet Server Idle Timeout Defines the timeout (in minutes) for disconnection of an idle Telnet
configure system > cli-settings session. When set to zero, idle sessions are not disconnected.
> idle-timeout The valid range is any value. The default is 0.
[TelnetServerIdleDisconnect] Note: For the parameter to take effect, a device reset is required.
Maximum Telnet Sessions Defines the maximum number of permitted, concurrent Telnet/SSH
configure system > cli-settings sessions.
> telnet-max-sessions The valid range is 1 to 5 sessions. The default is 2.
[TelnetMaxSessions] Note: Before changing the value, make sure that not more than this
number of sessions are currently active; otherwise, the new setting
will not take effect.
[CLIPrivPass] Defines the password to access the Enable configuration mode in
the CLI.
The valid value is a string of up to 50 characters. The default is
"Admin".
Note: The password is case-sensitive.
Default Terminal Window Defines the number (height) of output lines displayed in the CLI
Height terminal window. This applies to all new CLI sessions and is
configure system > cli- preserved after device resets.
settings > default- The valid value range is -1 (default) and 0-65535:
window-height A value of -1 means that the parameter is disabled and the
[DefaultTerminalWindowHeight] settings of the CLI command window-height is used.
A value of 0 means that all the CLI output is displayed in the
window.
A value of 1 or greater displays that many output lines in the
window and if there is more output, the “—MORE—" prompt is
displayed. For example, if you configure the parameter to 4, up
to four output lines are displayed in the window and if there is
more output, the “—MORE—" prompt is displayed (at which you
can press the spacebar to display the next four output lines).
Note: You can override this parameter for a specific CLI session
and configure a different number of output lines, by using the
window-height CLI command in the currently active CLI session.
Parameter Description
Parameter Description
password> (e.g., $1$S3p+fno=).
[1] = Enable. All passwords are hidden and replaced by an asterisk
(*).
Parameter Description
Parameter Description
Parameter Description
the Active Alarms table.
no-alarm-for-disabled-port Enables the device to not send the SNMP trap
[NoAlarmForDisabledPort] acBoardControllerFailureAlarm, which indicates a "disabled"
(non-configured) telephony port. A disabled port is one that is
not configured at all or that is configured but without a Trunk
Group ID (i.e., Trunk Group ID is 0), in the Trunk Group table.
[0] Disable = (Default) The device sends the SNMP trap
for non-configured ports.
[1] Enable = The device does not send the SNMP trap for
non-configured ports.
Note:
The parameter is applicable to all telephony (digital) port
types.
The parameter is applicable only to the Gateway
application.
configure system > snmp settings > Defines the SNMP engine ID for SNMPv2/SNMPv3 agents.
engine-id This is used for authenticating a user attempting to access the
[SNMPEngineIDString] SNMP agent on the device.
The ID can be a string of up to 36 characters. The default is
00:00:00:00:00:00:00:00:00:00:00:00 (12 Hex octets
characters). The provided key must be set with 12 Hex values
delimited by a colon (":") in the format xx:xx:...:xx. For
example, 00:11:22:33:44:55:66:77:88:99:aa:bb
Note:
For the parameter to take effect, a device reset is required.
Before setting the parameter, all SNMPv3 users must be
deleted; otherwise, the parameter setting is ignored.
If the supplied key does not pass validation of the 12 Hex
values input or it is set with the default value, the engine
ID is generated according to RFC 3411.
SNMP Trap Destination Parameters (configure system > snmp trap destination)
Note: Up to five SNMP trap managers can be defined.
SNMP Manager Determines the validity of the parameters (IP address and
[SNMPManagerIsUsed_x] port number) of the corresponding SNMP Manager used to
receive SNMP traps.
[0] (Check box cleared) = Disabled (default)
[1] (Check box selected) = Enabled
IP Address Defines the IP address of the remote host used as an SNMP
ip-address Manager. The device sends SNMP traps to this IP address.
Enter the IP address in dotted-decimal notation, e.g.,
[SNMPManagerTableIP_x]
108.10.1.255.
Trap Port Defines the port number of the remote SNMP Manager. The
port device sends SNMP traps to this port.
[SNMPManagerTrapPort_x] The valid SNMP trap port range is 100 to 4000. The default
port is 162.
Trap Enable Enables the sending of traps to the corresponding SNMP
send-trap manager.
[SNMPManagerTrapSendingEnable_ [0] Disable = Sending is disabled.
[1] Enable = (Default) Sending is enabled.
Parameter Description
x]
Trap User Defines the SNMPv3 USM user or SNMPv2 user to associate
trap-user with the trap destination. This determines the trap format,
authentication level, and encryption level. By default, it is
[SNMPManagerTrapUser_x]
associated with the SNMPv2 user (SNMP trap community
string).
The valid value is a string.
Trap Manager Host Name Defines an FQDN of the remote host used as an SNMP
manager-host-name manager to receive traps sent by the device. The device
sends the traps to the DNS-resolved IP address.
[SNMPTrapManagerHostName]
The valid range is a string of up to 99 characters.
For more information, see 'Configuring an SNMP Trap
Destination with FQDN' on page 97.
Activity Trap Enables the device to send an SNMP trap to notify of Web
configure troubleshoot > activity-trap user activities in the Web interface. The activities to report are
configured by the ActivityListToLog parameter.
[EnableActivityTrap]
[0] Disable (default)
[1] Enable
SNMP Community String Parameters
Read Only Community Strings Defines a read-only SNMP community string. Up to five read-
configure system > snmp settings > only community strings can be configured.
ro-community-string For more information, see Configuring SNMP Community
[SNMPReadOnlyCommunityString_x] Strings on page 93.
Read/Write Community Strings Defines a read-write SNMP community string. Up to five read-
configure system > snmp settings > write community strings can be configured.
rw-community-string For more information, see Configuring SNMP Community
[SNMPReadWriteCommunityString_x Strings on page 93.
]
Trap Community String Defines the community string for SNMP traps.
configure system > snmp trap > For more information, see Configuring SNMP Community
community-string Strings on page 93.
[SNMPTrapCommunityString]
SNMP Trusted Managers Table
SNMP Trusted Managers The table defines up to five IP addresses of remote trusted
configure system > snmp settings > SNMP managers from which the SNMP agent accepts and
trusted-managers processes SNMP Get and Set requests.
[SNMPTrustedMgr_x] For more information, see 'Configuring SNMP Trusted
Managers' on page 97.
SNMP V3 Users Table
SNMP V3 Users The table defines SNMP v3 users.
configure system > snmp v3-users The format of the ini file table parameter is:
[SNMPUsers] [SNMPUsers]
FORMAT SNMPUsers_Index = SNMPUsers_Username,
SNMPUsers_AuthProtocol, SNMPUsers_PrivProtocol,
SNMPUsers_AuthKey, SNMPUsers_PrivKey,
Parameter Description
SNMPUsers_Group;
[\SNMPUsers]
For example:
SNMPUsers 1 = v3admin1, 1, 0, myauthkey, -, 1;
The example above configures user 'v3admin1' with security
level authNoPriv(2), authentication protocol MD5,
authentication text password 'myauthkey', and
ReadWriteGroup2.
For more information, see 'Configuring SNMP V3 Users' on
page 98.
Parameter Description
Parameter Description
Note: For the parameter to take effect, a device reset is required.
Parameter Description
General Parameters
[SetDefaultOnIniFileProcess] Determines if all the device's parameters are set to their defaults
before processing the updated ini file.
[0] = Disable - parameters not included in the downloaded ini file
are not returned to default settings (i.e., retain their current
settings).
[1] = Enable (default).
Note: The parameter is applicable only for automatic HTTP update or
Web ini file upload (not applicable if the ini file is loaded using BootP).
[SaveConfiguration] Determines if the device's configuration (parameters and files) is
saved to flash (non-volatile memory).
[0] = Configuration isn't saved to flash memory.
[1] = (Default) Configuration is saved to flash memory.
Parameter Description
where 0 is Trunk 1.
Dial Plan File Defines the name of the Dial Plan file. This file should be created
[DialPlanFileName] using AudioCodes DConvert utility (refer to DConvert Utility User's
Guide).
For the ini file, the name must be enclosed by single apostrophes, for
example, 'dial_plan.dat'.
[UserInfoFileName] Defines the name of the file containing the User Information data.
For the ini file, the name must be enclosed by single apostrophes, for
example, 'userinfo_us.dat'.
Parameter Description
Parameter Description
"7.00.200.001"
<CONF>: configuration version, as configured by the ini file
parameter, INIFileVersion or CLI command, configuration-version
The device automatically populates these tag variables with actual
values in the sent header. By default, the device sends the following
in the User-Agent header:
User-Agent: Mozilla/4.0 (compatible; AudioCodes;
<NAME>;<VER>;<MAC>;<CONF>)
For example, if you set AupdHttpUserAgent = MyWorld-
<NAME>;<VER>(<MAC>), the device sends the following User-Agent
header:
User-Agent: MyWorld-
Mediant;7.00.200.001(00908F1DD0D3)
Note:
The variable tags are case-sensitive.
If you configure the parameter with the <CONF> variable tag, you
must reset the device with a save-to-flash for your settings to take
effect.
The tags can be defined in any order.
The tags must be defined adjacent to one another (i.e., no
spaces).
auto-firmware Defines the filename and path (URL) to the provisioning server from
[AutoCmpFileUrl] where the software file (.cmp) can be downloaded, based on
timestamp for the Automatic Updated mechanism.
The valid value is an IP address in dotted-decimal notation or an
FQDN.
aupd-verify-cert Determines whether the Automatic Update mechanism verifies the
[AUPDVerifyCertificates] TLS certificate received from the provisioning server when the
connection is HTTPS.
[0] = Disable (default)
[1] = Enables TLS certificate verification when the connection with
the provisioning server is based on HTTPS. The device verifies
the authentication of the certificate received from the provisioning
server. The device authenticates the certificate against its trusted
root certificate store (see 'Configuring SSL/TLS Certificates' on
page 109) and if ok, allows communication with the provisioning
server. If authentication fails, the device denies communication
(i.e., handshake fails).
[AUPDDigestUsername] Defines the username for digest (MD5 cryptographic hashing) access
authentication with the HTTP server used for the Automatic Update
feature.
The valid value is a string of up to 50 characters. By default, no value
is defined.
[AUPDDigestPassword] Defines the password for digest (MD5 cryptographic hashing) access
authentication with the HTTP server used for the Automatic Update
feature.
The valid value is a string of up to 50 characters. By default, no value
is defined.
crc-check regular Enables the device to perform cyclic redundancy checks (CRC) on
Parameter Description
[AUPDCheckIfIniChanged] downloaded configuration files (ini) during the Automatic Update
process. The CRC checks whether the content (raw data) of the
downloaded file is different to the content of the previously
downloaded file from the previous Automatic Update process. The
device compares the CRC check value (code) result with the check
value of the previously downloaded file. If the check values are
identical, it indicates that the file has no new configuration settings,
and the device discards the file. If the check values are different, the
device installs the downloaded file and applies the new configuration
settings.
[0] = (Default) Disable - the device does not perform CRC and
installs the downloaded file regardless.
[1] = Enable CRC for the entire file, including line order (i.e., same
text must be on the same lines). If there are differences between
the files, the device installs the downloaded file. If there are no
differences, the device discards the newly downloaded file.
[2] = Enable CRC for individual lines only. Same as option [1],
except that the CRC ignores the order of lines (i.e., same text can
be on different lines).
tftp-block-size Defines the size of the TFTP data blocks (packets) when downloading
[AUPDTftpBlockSize] a file from a TFTP server for the Automatic Update mechanism. This
is in accordance to RFC 2348. TFTP block size is the physical packet
size (in bytes) that a network can transmit. When configured to a
value higher than the default (512 bytes), but lower than the client
network’s Maximum Transmission Unit (MTU), the file download
speed can be significantly increased.
The valid value is 512 to 8192. The default is 512.
Note:
A higher value does not necessarily mean better performance.
The block size should be small enough to avoid IP fragmentation
in the client network (i.e., below MTU).
This feature is applicable only to TFTP servers that support this
option.
[ResetNow] Invokes an immediate device reset. This option can be used to
activate offline (i.e., not on-the-fly) parameters that are loaded using
the parameter IniFileUrl.
[0] = (Default) The immediate restart mechanism is disabled.
[1] = The device immediately resets after an ini file with the
parameter set to 1 is loaded.
Note: If you use the parameter in an ini file for periodic automatic
provisioning with non-HTTP (e.g., TFTP) and without CRC, the device
resets upon every file download.
Software/Configuration File URL Path for Automatic Update Parameters
CLI path: configure system > automatic-update
firmware Defines the name of the cmp file and the URL address (IP address or
[CmpFileURL] FQDN) of the server on which the file is located.
For example: http://192.168.0.1/filename
Note:
For the parameter to take effect, a device reset is required.
When the parameter is configured, the device always loads the
Parameter Description
cmp file after it is reset.
The cmp file is validated before it's burned to flash. The checksum
of the cmp file is also compared to the previously burnt checksum
to avoid unnecessary resets.
The maximum length of the URL address is 255 characters.
voice-configuration Defines the name of the ini file and the URL address (IP address or
[IniFileURL] FQDN) of the server on which the file is located.
For example:
http://192.168.0.1/filename
http://192.8.77.13/config_<MAC>.ini
https://<username>:<password>@<IP address>/<file name>
Note:
For the parameter to take effect, a device reset is required.
When using HTTP or HTTPS, the date and time of the ini file are
validated. Only more recently dated ini files are loaded.
The case-sensitive string, "<MAC>" can be used in the file name
for instructing the device to replace it with the device's MAC
address. For more information, see 'MAC Address Placeholder in
Configuration File Name' on page 804. This option allows the
loading of specific configurations for specific devices.
The maximum length of the URL address is 99 characters.
cli-script <URL> Defines the URL of the server where the CLI Script file containing the
[AUPDCliScriptURL] device's configuration is located. This file is used for automatic
provisioning.
Note: The case-sensitive string, "<MAC>" can be used in the file
name for instructing the device to replace it with the device's MAC
address. For more information, see MAC Address Placeholder in
Configuration File Name on page 804.
startup-script <URL> Defines the URL address of the server where the CLI Startup Script
[AUPDStartupScriptURL] file containing the device's configuration is located. This file is used
for automatic provisioning.
Note: The case-sensitive string, "<MAC>" can be used in the file
name for instructing the device to replace it with the device's MAC
address. For more information, see MAC Address Placeholder in
Configuration File Name on page 804.
prerecorded-tones Defines the name of the Prerecorded Tones (PRT) file and the URL
[PrtFileURL] address (IP address or FQDN) of the server on which the file is
located.
For example: http://server_name/file, https://server_name/file
Note: The maximum length of the URL address is 99 characters.
call-progress-tones Defines the name of the CPT file and the URL address (IP address or
[CptFileURL] FQDN) of the server on which the file is located.
For example: http://server_name/file, https://server_name/file
Note: The maximum length of the URL address is 99 characters.
cas-table Defines the name of the CAS file and the URL address (IP address or
[CasFileURL] FQDN) of the server on which the file is located.
For example: http://server_name/file, https://server_name/file
Note: The maximum length of the URL address is 99 characters.
Parameter Description
tls-root-cert Defines the name of the TLS trusted root certificate file and the URL
[TLSRootFileUrl] address of the server on which the file is located.
Note: For the parameter to take effect, a device reset is required.
tls-cert Defines the name of the TLS certificate file and the URL address of
[TLSCertFileUrl] the server on which the file is located.
Note: For the parameter to take effect, a device reset is required.
tls-private-key Defines the URL address of the server on which the TLS private key
[TLSPkeyFileUrl] file is located.
user-info Defines the name of the User Information file and the URL address
[UserInfoFileURL] (IP address or FQDN) of the server on which the file is located.
For example: http://server_name/file, https://server_name/file
Note: The maximum length of the URL address is 99 characters.
feature-key Defines the name of the License Key file and the URL address of the
[FeatureKeyURL] server on which the file is located.
template-url Defines the URL address in the File Template for automatic updates,
[TemplateUrl] of the provisioning server on which the files to download are located.
For more information, see 'File Template for Automatic Provisioning'
on page 804.
template-files-list Defines the list of file types in the File Template for automatic
[AupdFilesList] updates, to download from the provisioning server.
For more information, see 'File Template for Automatic Provisioning'
on page 804.
web-favicon Defines the name of the favicon image file and the URL address of
[WebFaviconFileUrl] the server on which the file is located. This is used for the Automatic
Update feature.
For more information, see Customizing the Favicon on page 72.
Parameter Description
Parameter Description
PhysicalPortsTable_GroupMember, PhysicalPortsTable_GroupStatus;
[ \PhysicalPortsTable ]
For more informationFor more information, see Configuring Physical
Ethernet Ports on page 134.
Ethernet Groups Table
Ethernet Groups Defines the transmit (Tx) and receive (Rx) settings for the Ethernet port
configure network > ether- groups. The format of the ini file table parameter is:
group [EtherGroupTable]
[EtherGroupTable] FORMAT EtherGroupTable_Index = EtherGroupTable_Group,
EtherGroupTable_Mode, EtherGroupTable_Member1,
EtherGroupTable_Member2;
[\EtherGroupTable]
For more informationFor more information, see Configuring Ethernet Port
Groups on page 136.
Note: For the parameter to take effect, a device reset is required.
Ethernet Devices table
Ethernet Devices table Defines Ethernet Devices (VLANs).
configure network > The format of the ini file table parameter is as follows:
network-dev [ DeviceTable ]
[DeviceTable] FORMAT DeviceTable_Index = DeviceTable_VlanID,
DeviceTable_UnderlyingInterface, DeviceTable_DeviceName,
DeviceTable_Tagging; DeviceTable_MTU;
[ \DeviceTable ]
For more informationFor more information, see Configuring Underlying
Ethernet Devices on page 138.
Parameter Description
IP Interfaces Table
IP Interfaces The table configures IP network interfaces.
configure network > interface The format of the ini file table parameter is as follows:
network-if [InterfaceTable]
[InterfaceTable] FORMAT InterfaceTable_Index =
InterfaceTable_ApplicationTypes, InterfaceTable_InterfaceMode,
InterfaceTable_IPAddress, InterfaceTable_PrefixLength,
InterfaceTable_Gateway, InterfaceTable_VlanID,
InterfaceTable_InterfaceName,
InterfaceTable_PrimaryDNSServerIPAddress,
InterfaceTable_SecondaryDNSServerIPAddress,
InterfaceTable_UnderlyingDevice;
[\InterfaceTable]
For more informationFor more information, see 'Configuring IP
Parameter Description
Network Interfaces' on page 141.
VLAN Parameters
[EnableNTPasOAM] Defines the application type for Network Time Protocol (NTP)
services.
[1] = OAMP (default)
[0] = Control
Note: For the parameter to take effect, a device reset is required.
Parameter Description
Parameter Description
For a description of the parameter, see 'Configuring Static IP Routes' on
page 148.
Parameter Description
Parameter Description
Gold QoS Defines the DiffServ value for the Gold CoS content (Streaming
gold-qos applications).
[GoldServiceClassDiffServ] The valid range is 0 to 63. The default is 26.
Bronze QoS Defines the DiffServ value for the Bronze CoS content (OAMP
bronze-qos applications).
[BronzeServiceClassDiffServ The valid range is 0 to 63. The default is 10.
]
Parameter Description
NAT Parameters
NAT Traversal Enables the NAT traversal feature for media when the device
configure voip > media communicates with UAs located behind NAT.
settings > disable-NAT- [0] Enable NAT Option = NAT traversal is performed only if the UA
traversal is located behind NAT:
[NATMode] UA behind NAT: The device sends the media packets to the IP
address:port obtained from the source address of the first
media packet received from the UA.
UA not behind NAT: The device sends the packets to the IP
address:port specified in the SDP 'c=' line (Connection) of the
first received SIP message.
Note: If the SIP session is established (ACK) and the device (not
the UA) sends the first packet, it sends it to the address obtained
from the SIP message and only after the device receives the first
packet from the UA does it determine whether the UA is behind
NAT.
[1] Disable NAT = (Default) The device considers the UA as not
located behind NAT and sends media packets to the UA using the
IP address:port specified in the SDP 'c=' line (Connection) of the
first received SIP message.
[2] Force NAT = The device always considers the UA as behind
NAT and sends the media packets to the IP address:port obtained
from the source address of the first media packet received from the
UA. The device only sends packets to the UA after it receives the
first packet from the UA (to obtain the IP address).
[3] NAT By Signaling = The device identifies whether or not the UA
is located behind NAT based on the SIP signaling. The device
assumes that if signaling is behind NAT that the media is also
behind NAT, and vice versa. If located behind NAT, the device
sends media as described in option [2] Force NAT; if not behind
NAT, the device sends media as described in option [1] Disable
NAT. This option is applicable only to SBC calls. If the parameter is
configured to this option, Gateway calls use option [0] Enable NAT
Option, by default.
For more information on NAT traversal, see 'First Incoming Packet
Parameter Description
Mechanism' on page 156.
[NATBindingDefaultTimeout] The device sends SNMP keep-alive traps periodically - every 9/10 of
the time configured by the parameter (in seconds). Therefore, the
parameter is applicable only if the SendKeepAliveTrap parameter is
set to 1.
The parameter is used to allow SNMP communication with
AudioCodes OVOC management platform, located in the WAN, when
the device is located behind NAT. It is needed to keep the NAT pinhole
open for the SNMP messages sent from OVOC to the device.
Parameter Description
Parameter Description
SRV2IP_TransportType, SRV2IP_Dns1, SRV2IP_Priority1,
SRV2IP_Weight1, SRV2IP_Port1, SRV2IP_Dns2, SRV2IP_Priority2,
SRV2IP_Weight2, SRV2IP_Port2, SRV2IP_Dns3, SRV2IP_Priority3,
SRV2IP_Weight3, SRV2IP_Port3;
[\SRV2IP]
For example:
SRV2IP 0 =
SrvDomain,0,Dnsname1,1,1,500,Dnsname2,2,2,501,$$,0,0,0;
For more informationFor more information, see 'Configuring the Internal
SRV Table' on page 164.
Parameter Description
Parameter Description
Note: For the parameter to take effect, a device reset is required.
DHCP Servers Table
DHCP Servers Table Defines the device's embedded DHCP server.
configure network > dhcp The format of the ini file table parameter is as follows:
server <index> [ DhcpServer ]
[DhcpServer] FORMAT DhcpServer_Index = DhcpServer_InterfaceName,
DhcpServer_StartIPAddress, DhcpServer_EndIPAddress,
DhcpServer_SubnetMask, DhcpServer_LeaseTime,
DhcpServer_DNSServer1, DhcpServer_DNSServer2,
DhcpServer_NetbiosNameServer, DhcpServer_NetbiosNodeType,
DhcpServer_NTPServer1, DhcpServer_NTPServer2,
DhcpServer_TimeOffset, DhcpServer_TftpServer,
DhcpServer_BootFileName, DhcpServer_ExpandBootfileName,
DhcpServer_OverrideRouter, DhcpServer_SipServer,
DhcpServer_SipServerType;
[ \DhcpServer ]
For more informationFor more information, see Configuring the Device's
DHCP Server.
DHCP Vendor Class Table
DHCP Vendor Class table Defines Vendor Class Identifier (VCI) names (DHCP Option 60) for the
configure network > dhcp- device's DHCP server. Only if the DHCPDiscover request message,
server vendor-class received from the DHCP client, contains this value does the device
provide DHCP services.
[DhcpVendorClass]
The format of the ini file table parameter is as follows:
[ DhcpVendorClass ]
FORMAT DhcpVendorClass_Index =
DhcpVendorClass_DhcpServerIndex,
DhcpVendorClass_VendorClassId;
[ \DhcpVendorClass ]
For more informationFor more information, see Configuring the Vendor
Class Identifier on page 222.
DHCP Option Table
DHCP Option table Defines additional DHCP Options that the device's DHCP server can use
configure network > dhcp- to service its DHCP clients.
server option The format of the ini file table parameter is as follows:
[DhcpOption] [ DhcpOption ]
FORMAT DhcpOption_Index = DhcpOption_DhcpServerIndex,
DhcpOption_Option, DhcpOption_Type, DhcpOption_Value,
DhcpOption_ExpandValue;
[ \DhcpOption ]
For more informationFor more information, see Configuring Additional
DHCP Options on page 223.
DHCP Static IP Table
DHCP Static IP table Defines static "reserved" IP addresses that the device's DHCP server
configure network > dhcp- allocates to specific DHCP clients defined by MAC address.
server static-ip <index> The format of the ini file table parameter is as follows:
[DhcpStaticIP] [ DhcpStaticIP ]
FORMAT DhcpStaticIP_Index = DhcpStaticIP_DhcpServerIndex,
Parameter Description
DhcpStaticIP_IPAddress, DhcpStaticIP_MACAddress;
[ \DhcpStaticIP ]
For more informationFor more information, see Configuring Static IP
Addresses for DHCP Clients on page 225.
Parameter Description
NTP Parameters
CLI path: configure system > ntp >
For more information on Network Time Protocol (NTP), see 'Simple Network Time Protocol Support'
on page 125.
Primary NTP Server Address Defines the IP address (in dotted-decimal notation or as an FQDN) of
primary-server the NTP server. The advantage of using an FQDN is that multiple IP
addresses can be resolved from the DNS server, providing NTP
[NTPServerIP]
server redundancy.
The default IP address is 0.0.0.0 (i.e., internal NTP client is disabled).
Secondary NTP Server Defines a second NTP server's address as an FQDN or an IP address
Address (in dotted-decimal notation). This NTP is used for redundancy; if the
secondary-server primary NTP server fails, then this NTP server is used.
[NTPSecondaryServerIP] The default IP address is 0.0.0.0.
NTP Update Interval Defines the time interval (in seconds) that the NTP client requests for
update-interval a time update.
[NTPUpdateInterval] The default interval is 86400 (i.e., 24 hours). The range is 0 to
214783647.
Note: It is not recommend to set the parameter to beyond one month
(i.e., 2592000 seconds).
NTP Authentication Key Defines the NTP authentication key identifier for authenticating NTP
Identifier messages. The identifier must match the value configured on the NTP
auth-key-id server. The NTP server may have several keys configured for different
clients; this number identifies which key is used.
[NtpAuthKeyId]
The valid value is 1 to 65535. The default is 0 (i.e., no authentication is
done).
NTP Authentication Secret Defines the secret authentication key shared between the device
Key (client) and the NTP server, for authenticating NTP messages.
auth-key-md5 The valid value is a string of up to 32 characters. By default, no key is
[ntpAuthMd5Key] defined.
Parameter Description
you configure the parameter at 15:42, the device applies the setting
only at 16:00.
Daylight Saving Time Enables daylight saving time (DST).
configure system > clock > [0] Disable (default)
summer-time > summer-time [1] Enable
[DayLightSavingTimeEnable]
Start Time / Day of Month Defines the date and time when DST begins. This value can be
Start configured using any of the following formats:
configure system > clock > Day of year - mm:dd:hh:mm, where:
summer-time > start mm denotes month
[DayLightSavingTimeStart] dd denotes date of the month
hh denotes hour
mm denotes minutes
For example, "05:01:08:00" denotes daylight saving starting from
May 1 at 8 A.M.
Day of month - mm:day/wk:hh:mm, where:
mm denotes month (e.g., 04)
day denotes day of week (e.g., FRI)
wk denotes week of the month (e.g., 03)
hh denotes hour (e.g., 23)
mm denotes minutes (e.g., 10)
For example, "04:FRI/03:23:00" denotes Friday, the third week of
April, at 11 P.M. The week field can be 1-5, where 5 denotes the
last occurrence of the specified day in the specified month. For
example, "04:FRI/05:23:00" denotes the last Friday of April, at 11
P.M.
End Time / Day of Month Defines the date and time when DST ends. For a description of the
End format of this value, see the DayLightSavingTimeStart parameter.
configure system > clock >
summer-time > end
[DayLightSavingTimeEnd]
Offset Defines the DST offset (in minutes).
configure system > clock > The valid range is 0 to 120. The default is 60.
summer-time > offset Note: The offset setting is applied only on the hour. For example, if
[DayLightSavingTimeOffset] you configure the parameter at 15:42, the device applies the setting
only at 16:00.
Parameter Description
Parameter Description
Test Call DTMF String Defines the DTMF tone that is played for answered test calls (incoming
configure troubleshoot > and outgoing).
test-call settings > testcall- The DTMF string can be up to 15 strings. The default is "3212333". If no
dtmf-string string is defined (empty), DTMF is not played.
[TestCallDtmfString]
Test Call ID Defines the test call prefix number (ID) of the simulated phone on the
configure troubleshoot > device. Incoming calls received with this called prefix number are
test-call settings > testcall- identified as test calls.
id This can be any string of up to 15 characters. By default, no number is
[TestCallID] defined.
Note:
The parameter is only for testing incoming calls destined to this prefix
number.
This feature is applicable to all applications (Gateway and SBC).
Test Call Rules Table
Test Call Rules Defines Test Call rules.
configure troubleshoot [ Test_Call ]
>test-call test-call-table FORMAT Test_Call_Index = Test_Call_EndpointURI,
[Test_Call] Test_Call_CalledURI, Test_Call_RouteBy, Test_Call_IPGroupName,
Test_Call_DestAddress, Test_Call_DestTransportType,
Test_Call_SIPInterfaceName, Test_Call_ApplicationType,
Test_Call_AutoRegister, Test_Call_UserName, Test_Call_Password,
Test_Call_CallParty, Test_Call_MaxChannels, Test_Call_CallDuration,
Test_Call_CallsPerSecond, Test_Call_TestMode,
Test_Call_TestDuration, Test_Call_Play, Test_Call_ScheduleInterval,
Test_Call_QOEProfile, Test_Call_BWProfile;
[ \Test_Call ]
For more information, see 'Configuring Test Call Endpoints' on page
951.
Parameter Description
Enable Syslog Determines whether the device sends logs and error messages (e.g.,
configure troubleshoot > CDRs) generated by the device to a Syslog server.
syslog > syslog [0] Disable (default)
[EnableSyslog] [1] Enable
Note:
If you enable Syslog, you must enter an IP address of the Syslog
server (using the SyslogServerIP parameter).
Syslog messages may increase the network traffic.
To configure Syslog SIP message logging levels, use the
Parameter Description
GwDebugLevel parameter.
Syslog Server IP Defines the IP address (in dotted-decimal notation) of the computer
configure troubleshoot > on which the Syslog server is running. The Syslog server is an
syslog > syslog-ip application designed to collect the logs and error messages
generated by the device.
[SyslogServerIP]
The default IP address is 0.0.0.0.
Syslog Server Port Defines the UDP port of the Syslog server.
configure troubleshoot > The valid range is 0 to 65,535. The default port is 514.
syslog > syslog-port
[SyslogServerPort]
CDR Server IP Address Defines the destination IP address to where CDR logs are sent.
configure troubleshoot > cdr > The default value is a null string, which causes CDR messages to be
cdr-srvr-ip-adrr sent with all Syslog messages to the Syslog server.
[CDRSyslogServerIP] Note:
The CDR messages are sent to UDP port 514 (default Syslog
port).
This mechanism is active only when Syslog is enabled (i.e., the
parameter EnableSyslog is set to 1).
CDR Report Level Enables media and signaling-related CDRs to be sent to a Syslog
configure troubleshoot > cdr > server and defines the call stage at which they are sent.
cdr-report-level [0] None = (Default) CDRs are not used.
[CDRReportLevel] [1] End Call = CDR is sent to the Syslog server at the end of each
call.
[2] Start & End Call = CDR report is sent to Syslog at the start and
end of each call.
[3] Connect & End Call = CDR report is sent to Syslog at
connection and at the end of each call.
[4] Start & End & Connect Call = CDR report is sent to Syslog at
the start, at connection, and at the end of each call.
Note:
For the SBC application, the parameter enables only signaling-
related CDRs. To enable media-related CDRs for SBC calls, use
the MediaCDRReportLevel parameter.
The CDR Syslog message complies with RFC 3164 and is
identified by: Facility = 17 (local1) and Severity = 6
(Informational).
This mechanism is active only when Syslog is enabled (i.e., the
parameter EnableSyslog is set to 1).
Media CDR Report Level Enables media-related CDRs of SBC calls to be sent to a Syslog
configure troubleshoot > cdr > server and defines the call stage at which they are sent.
media-cdr-rprt-level [0] None = (Default) No media-related CDR is sent.
[MediaCDRReportLevel] [1] End Media = Sends a CDR only at the end of the call.
[2] Start & End Media = Sends a CDR once the media starts. In
some calls it may only be after the call is established, but in other
calls the media may start at ringback tone. A CDR is also sent
upon termination (end) of the media in the call.
[3] Update & End Media = Sends a CDR when an update occurs
in the media of the call. For example, a call starts and a ringback
tone occurs, a re-INVITE is sent for a fax call and as a result, a
Parameter Description
CDR with the MediaReportType field set to "Update" is sent, as
the media was changed from voice to T.38. A CDR is also sent
upon termination (end) of the media in the call.
[4] Start & End & Update Media = Sends a CDR at the start of the
media, upon an update in the media (if occurs), and at the end of
the media.
Note:
The parameter is applicable only to the SBC application.
To enable CDR generation as well as enable signaling-related
CDRs, use the CDRReportLevel parameter.
Local Storage Max File Size Defines the size (in kilobytes) of each stored CDR file. Once the file
configure troubleshoot > cdr > size is reached, the device creates a new file for subsequent CDRs,
local-storage-max-file-size and so on.
[CDRLocalMaxFileSize] The valid value is 100 to 1024. The default is 1024.
Local Storage Max Number of Defines the maximum number of stored CDR files. If the maximum
Files number is reached, the device replaces (overwrites) the oldest
configure troubleshoot > cdr > created file with a subsequent new file, and so on.
local-storage-max-files The valid value is 2 to 4096. The default is 5.
[CDRLocalMaxNomOfFiles]
Local Storage File Creation Defines how often (in minutes) the device creates a new CDR file.
Interval For example, if configured to 60, it creates a new file every hour. This
configure troubleshoot > cdr > occurs even if the maximum configured file size has not been
local-storage-interval reached (see the CDRLocalMaxFileSize parameter). However, if the
maximum configured file size has been reached and the interval
[CDRLocalInterval]
configured by the parameter has not been reached, a new CDR file
is created.
The valid value is 2 to 1440. The default is 60.
Debug Level Enables Syslog debug reporting and logging level.
configure troubleshoot > [0] No Debug = (Default) Debug is disabled and Syslog
syslog > debug-level messages are not sent.
[GwDebugLevel] [1] Basic = Sends debug logs of incoming and outgoing SIP
messages.
[5] Detailed = Sends debug logs of incoming and outgoing SIP
message as well as many other logged processes.
configure system > cdr > non- Enables creation of CDR messages for non-call SIP dialogs (such as
call-cdr-rprt SUBSCRIBE, OPTIONS, and REGISTER).
[EnableNonCallCdr] [0] = (Default) Disable
[1] = Enable
Note: The parameter is applicable only to the SBC application.
Syslog Optimization Enables the device to accumulate and bundle multiple debug
configure troubleshoot > messages into a single UDP packet and then send it to a Syslog
syslog > syslog-optimization server. The benefit of this feature is that it reduces the number of
UDP Syslog packets, thereby improving (optimizing) CPU utilization.
[SyslogOptimization]
[0] Disable
[1] Enable (default)
Note: The size of the bundled message is configured by the
MaxBundleSyslogLength parameter.
Parameter Description
mx-syslog-lgth Defines the maximum size (in bytes) threshold of logged Syslog
[MaxBundleSyslogLength] messages bundled into a single UDP packet, after which they are
sent to a Syslog server.
The valid value range is 0 to 1220 (where 0 indicates that no
bundling occurs). The default is 1220.
Note: The parameter is applicable only if the GWDebugLevel
parameter is enabled.
Syslog CPU Protection Enables the protection of the device's CPU resources during debug
configure troubleshoot > reporting, ensuring voice traffic is unaffected. If CPU resources drop
syslog > syslog-cpu-protection (i.e., high CPU usage) to a critical level (threshold), the device
automatically lowers the debug level to free up CPU resources that
[SyslogCpuProtection]
were required for the previous debug-level functionality. When
sufficient CPU resources become available again, the device
increases the debug level. The threshold is configured by the 'Debug
Level High Threshold' parameter (see below).
[0] Disable
[1] Enable (default)
Debug Level High Threshold Defines the threshold (in percentage) for automatically switching to a
configure voip > sip-definition different debug level, depending on CPU usage. The parameter is
settings > debug-level-high- applicable only if the 'Syslog CPU Protection' parameter is enabled.
threshold The valid value is 0 to 100. The default is 90.
[DebugLevelHighThreshold] The debug level is changed upon the following scenarios:
CPU usage equals threshold: Debug level is reduced one level.
CPU usage is at least 5% greater than threshold: Debug level is
reduced another level.
CPU usage is 5 to 19% less than threshold: Debug level is
increased by one level.
CPU usage is at least 20% less than threshold: Debug level is
increased by another level.
For example, assume that the threshold is set to 70% and the Debug
Level to Detailed (5). When CPU usage reaches 70%, the debug
level is reduced to Basic (1). When CPU usage increases by 5% or
more than the threshold (i.e., greater than 75%), the debug level is
disabled - No Debug (0). When the CPU usage decreases to 5% less
than the threshold (e.g., 65%), the debug level is increased to Basic
(1). When the CPU usage decreases to 20% less than the threshold
(e.g., 50%), the debug level changes to Detailed (5).
Note: The device does not increase the debug level to a level that is
higher than what you configured for the 'Debug Level' parameter.
Syslog Facility Number Defines the Facility level (0 through 7) of the device’s Syslog
[SyslogFacility] messages, according to RFC 3164. This allows you to identify Syslog
messages generated by the device. This is useful, for example, if you
collect the device’s and other equipments’ Syslog messages, at one
single server. The device’s Syslog messages can easily be identified
and distinguished from other Syslog messages by its Facility level.
Therefore, in addition to filtering Syslog messages according to IP
address, the messages can be filtered according to Facility level.
[16] = (Default) local use 0 (local0)
[17] = local use 1 (local1)
[18] = local use 2 (local2)
[19] = local use 3 (local3)
Parameter Description
[20] = local use 4 (local4)
[21] = local use 5 (local5)
[22] = local use 6 (local6)
[23] = local use 7 (local7)
CDR Syslog Sequence
Number Enables or disables the inclusion of the sequence number (S=) in
CDR Syslog messages.
configure system > cdr > cdr-
[0] Disable
seq-num
[1] Enable (default)
[CDRSyslogSeqNum]
Activity Types to Report via Defines the operations (activities) performed in the Web interface
Activity Log Messages that are reported to a Syslog server.
configure troubleshoot > [pvc] Parameters Value Change = Changes made on-the-fly to
activity-log parameters and tables, and Configuration file load. Note that the
[ActivityListToLog] ini file parameter, EnableParametersMonitoring can also be used
to set this option.
[afl] Auxiliary Files Loading = Loading of Auxiliary files.
[dr] Device Reset = Resetting of the device through the
Maintenance Actions page.
Note: For this option to take effect, a device reset is required.
[fb] Flash Memory Burning = Saving configuration with burn to
flash (in the Maintenance Actions page).
[swu] Device Software Update = Software updates (i.e., loading of
cmp file) through the Software Upgrade Wizard.
[ard] Access to Restricted Domains = Access to restricted Web
pages:
(1) ini parameters (AdminPage)
(2) General Security Settings
(3) Configuration File
(5) License Key
(7) Access List
(8) Web User Accounts
[naa] Non-Authorized Access = Attempts to log in to the Web
interface with a false or empty username or password.
[spc] Sensitive Parameters Value Change = Changes made to
"sensitive" parameters:
(1) IP Address
(2) Subnet Mask
(3) Default Gateway IP Address
(4) ActivityListToLog
[ll] Login and Logout = Web login and logout attempts.
[cli] = CLI commands entered by the user.
[ae] Action Executed = Logs user actions that are not related to
parameter changes. The actions can include, for example, file
uploads, file delete, lock-unlock maintenance actions, LDAP clear
cache, register-unregister, and start-stop trunk. In the Web, these
actions are typically done by clicking a button (e.g., the LOCK
button).
Note: For the ini file parameter, enclose values in single quotation
marks, for example: ActivityListToLog = 'pvc', 'afl', 'dr', 'fb', 'swu',
Parameter Description
'ard', 'naa', 'spc'.
[EnableParametersMonitoring] Enables the monitoring, through Syslog messages, of parameters
that are modified on-the-fly.
[0] = (Default) Disable
[1] = Enable
isdn-facility-trace Enables ISDN traces of Facility Information Elements (IE) for ISDN
[FacilityTrace] call diagnostics. This allows you to trace all the parameters
contained in the Facility IE and view them in the Syslog.
[0] Disable (default)
[1] Enable
Note: For this feature to be functional, the GWDebugLevel
parameter must be enabled (i.e., set to at least level 1).
Debug Recording Destination Defines the IP address of the server for capturing debug recording.
IP
configure troubleshoot >
logging settings > dbg-rec-
dest-ip
[DebugRecordingDestIP]
Debug Recording Destination Defines the UDP port of the server for capturing debug recording.
Port The default is 925.
configure troubleshoot >
logging settings > dbg-rec-
dest-port
[DebugRecordingDestPort]
Enable Core Dump Enables the automatic generation of a Core Dump file upon a device
[EnableCoreDump] crash.
[0] Disable (default)
[1] Enable
Note: For the parameter to take effect, a device reset is required.
Core Dump Destination IP Defines the IP address of the remote server where you want the
[CoreDumpDestIP] device to send the Core Dump file.
By default, no IP address is defined.
Call Flow Report Mode Enables the device to send SIP call messages to OVOC so that
qoe call-flow-report OVOC can display SIP call dialog sessions as SIP call flow
diagrams.
[CallFlowReportMode]
[0] Disable (Default)
[1] Enable
For more information, see Enabling SIP Call Flow Diagrams in
OVOC on page 947.
Logging Filters Table
Logging Filters Table The table defines log filtering rules for Syslog messages and debug
configure troubleshoot > recordings.
logging logging-filters The format of the ini file table parameter is:
[LoggingFilters] [ LoggingFilters ]
FORMAT LoggingFilters_Index = LoggingFilters_FilterType,
LoggingFilters_Value, LoggingFilters_LogDestination,
Parameter Description
LoggingFilters_CaptureType, LoggingFilters_Mode;
[ \LoggingFilters ]
For more informationFor more information, see 'Configuring Log
Filter Rules' on page 923.
Gateway CDR Format Table
Gateway CDR Format The table defines CDR customization rules for Gateway calls.
configure troubleshoot > cdr > The format of the ini file table parameter is:
cdr-format gw-cdr-format [ GWCDRFormat ]
[GWCDRFormat] FORMAT GWCDRFormat_Index = GWCDRFormat_CDRType,
GWCDRFormat_FieldType, GWCDRFormat_Title,
GWCDRFormat_RadiusType, GWCDRFormat_RadiusID;
[ \GWCDRFormat ]
For more informationFor more information, see Customizing CDRs
for Gateway Calls on page 901.
SBC CDR Format Table
SBC CDR Format Table The table defines CDR customization rules for SBC calls.
configure troubleshoot > cdr > The format of the ini file table parameter is:
cdr-format sbc-cdr-format [ SBCCDRFormat ]
[SBCCDRFormat] FORMAT SBCCDRFormat_Index = SBCCDRFormat_CDRType,
SBCCDRFormat_FieldType, SBCCDRFormat_Title,
SBCCDRFormat_RadiusType, SBCCDRFormat_RadiusID;
[ \SBCCDRFormat ]
For more informationFor more information, see Customizing CDRs
for SBC Calls on page 906.
Parameter Description
Parameter Description
endpoints are defined in the Trunk Group table).
[RAILowThreshold] Defines the low threshold percentage of total calls that are active (busy
endpoints).
When the percentage of the device's busy endpoints falls below this low
threshold, the device sends an SNMP acBoardCallResourcesAlarm
alarm trap with a 'cleared' alarm status.
The range is 0 to 100%. The default is 90%.
[RAILoopTime] Defines the time interval (in seconds) that the device periodically checks
call resource availability.
The valid range is 1 to 200. The default is 10.
Parameter Description
70.4 HA Parameters
The High Availability (HA) parameters are described in the table below.
Table 70-22: HA Parameters
Parameter Description
HA Device Name Defines a name for the active device, which is displayed on the Home
configure network > high- page to indicate the active device.
availability > unit-id-name The valid value is a string of up to 128 characters. The default value is
[HAUnitIdName] "Device 1".
Redundant HA Device Defines a name for the redundant device, which is displayed on the
Name Home page to indicate the redundant device.
configure network > high- The valid value is a string of up to 128 characters. The default value is
availability > redundant- "Device 2".
unit-id-name
HA Remote Address Defines the Maintenance interface address of the redundant device in
configure network > high- the HA system.
availability > remote- By default, no value is defined.
address Note: For the parameter to take effect, a device reset is required.
[HARemoteAddress]
Parameter Description
For the parameter to take effect, a device reset is required.
The parameter is applicable only if you configure the 'Preempt Mode'
parameter to Enable.
You must configure each device in the HA system with different
parameter values (priorities).
HA Network Reachability Parameters
HA Network Reachability Enables the pinging of an active IP network destination in HA mode to
configure network > high- test reachability from one of the device's IP network interfaces. If no
availability > net-mon- reply is received from a ping and the previous ping was successful, a
enable switchover occurs to the redundant device.
[HAPingEnabled] [0] Disable (default)
[1] Enable
Destination Address Defines the IP address of the destination that the device pings.
configure network > high- The default is 0.0.0.0.
availability > net-mon-
destination
[HAPingDestination]
Source Interface Name Defines the device's IP network interface from where the ping is sent.
configure network > high- The valid value is the name of the IP interface as configured in the
availability > net-mon- 'Interface Name' field of the IP Interfaces table. By default, no IP network
source-interface is defined.
[HAPingSourceIfName]
Ping Timeout Defines the timeout (in seconds) for which the ping request waits for a
configure network > high- reply.
availability > net-mon-ping- The valid value is 1 to 60. The default is 1.
timeout
[HAPingTimeout]
Ping Retries Defines the number of ping requests that the device sends after no
configure network > high- response is received from the destination, before the destination is
availability > net-mon-ping- declared unavailable. For example, if you specify 2, the destination is
retries declared as down after three consecutive ping requests fail to evoke a
response from the destination.
[HAPingRetries]
The valid value is 0 to 100. The default 2.
Parameter Description
Firewall Table
Parameter Description
Firewall The table defines the device's access list (firewall), which defines
configure network > access-list network traffic filtering rules.
[AccessList] The format of the ini file table parameter is:
[AccessList]
FORMAT AccessList_Index = AccessList_Source_IP,
AccessList_Source_Port, AccessList_PrefixLen,
AccessList_Source_Port, AccessList_Start_Port,
AccessList_End_Port, AccessList_Protocol,
AccessList_Use_Specific_Interface, AccessList_Interface_ID,
AccessList_Packet_Size, AccessList_Byte_Rate,
AccessList_Byte_Burst, AccessList_Allow_Type;
[\AccessList]
For example:
AccessList 10 = mgmt.customer.com, , , 32, 0, 80, tcp, 1, OAMP,
0, 0, 0, allow;
AccessList 22 = 10.4.0.0, , , 16, 4000, 9000, any, 0, , 0, 0, 0, block;
In the example above, Rule #10 allows traffic from the host
‘mgmt.customer.com’ destined to TCP ports 0 to 80 on interface
OAMP (OAMP). Rule #22 blocks traffic from the subnet
10.4.xxx.yyy destined to ports 4000 to 9000.
For more informationFor more information, see 'Configuring
Firewall Rules' on page 167.
Media Latching
Inbound Media Latch Mode Enables the Media Latching feature.
configure voip > media settings [0] Strict = Device latches onto the first original stream (IP
> inbound-media-latch-mode address:port). It does not latch onto any other stream during the
[InboundMediaLatchMode] session.
[1] Dynamic = (Default) Device latches onto the first stream. If it
receives at least a minimum number of consecutive packets
(configured by New<media type>StreamPackets) from a
different source(s) and the device has not received packets
from the current stream for a user-defined period
(TimeoutToRelatch<media type>Msec), it latches onto the next
packet received from any other stream. If other packets of a
different media type are received from the new stream, based
on IP address and SSRC for RTCP/RTP and based on IP
address only for T.38, the packet is accepted immediately.
Note: If a packet from the original (first latched onto) IP
address:port is received at any time, the device latches onto
this stream.
[2] Dynamic-Strict = Device latches onto the first stream. If it
receives at least a minimum number of consecutive packets
(configured by New<media type>StreamPackets) all from the
same source which is different to the first stream and the device
has not received packets from the current stream for a user-
defined period (TimeoutToRelatch<media type>Msec), it
latches onto the next packet received from any other stream. If
other packets of different media type are received from the new
stream based on IP address and SSRC for RTCP and based on
IP address only for T.38, the packet is accepted immediately.
Note: If a packet from the original (first latched onto) IP
address:port is received at any time, the device latches onto
Parameter Description
this stream.
[3] Strict-On-First = Typically used for NAT, where the correct IP
address:port is initially unknown. The device latches onto the
stream received in the first packet. The device does not change
this stream unless a packet is later received from the original
source.
Note: If you configure the parameter to [0] Strict, the device cannot
perform NAT traversal. In this setup, configure the NATMode
parameter to [1] Disable NAT.
New RTP Stream Packets Defines the minimum number of continuous RTP packets received
[NewRtpStreamPackets] by the device's channel to allow latching onto the new incoming
stream.
The valid range is 0 to 20. The default is 3. If set to 0, the device is
left exposed to attacks against multiple packet streams.
New RTCP Stream Packets Defines the minimum number of continuous RTCP packets
[NewRtcpStreamPackets] received by the device's channel to allow latching onto the new
incoming stream.
The valid range is 0 to 20. The default is 3. If set to 0, the device is
left exposed to attacks against multiple packet streams.
New SRTP Stream Packets Defines the minimum number of continuous SRTP packets
[NewSRTPStreamPackets] received by the device's channel to allow latching onto the new
incoming stream.
The valid range is 0 to 20. The default is 3. If set to 0, the device is
left exposed to attacks against multiple packet streams.
New SRTCP Stream Packets Defines the minimum number of continuous SRTCP packets
[NewSRTCPStreamPackets] received by the device's channel to allow latching onto the new
incoming stream.
The valid range is 0 to 20. The default is 3. If set to 0, the device is
left exposed to attacks against multiple packet streams.
Timeout To Relatch RTP Defines a period (msec) during which if no packets are received
[TimeoutToRelatchRTPMsec] from the current RTP session, the channel can re-latch onto
another stream.
The valid range is any value from 0. The default is 200.
Timeout To Relatch SRTP Defines a period (msec) during which if no packets are received
[TimeoutToRelatchSRTPMsec] from the current SRTP session, the channel can re-latch onto
another stream.
The valid range is any value from 0. The default is 200.
Timeout To Relatch Silence Defines a period (msec) during which if no packets are received
[TimeoutToRelatchSilenceMsec] from the current RTP/SRTP session and the channel is in silence
mode, the channel can re-latch onto another stream.
The valid range is any value from 0. The default is 200.
Timeout To Relatch RTCP Defines a period (msec) during which if no packets are received
[TimeoutToRelatchRTCPMsec] from the current RTCP session, the channel can re-latch onto
another RTCP stream.
The valid range is any value from 0. The default is 10,000.
Fax Relay Rx/Tx Timeout Defines a period (sec) during which if no T.38 packets are received
[FaxRelayTimeoutSec] or sent from the current T.38 fax relay session, the channel can re-
latch onto another stream.
Parameter Description
The valid range is 0 to 255. The default is 10.
Parameter Description
Secured Web Connection Determines the protocol used to access the Web interface.
(HTTPS) [0] HTTP and HTTPS (default).
configure system > web > [1] HTTPs Only = Unencrypted HTTP packets are blocked.
secured-connection Note: For the parameter to take effect, a device reset is required.
[HTTPSOnly]
configure system > web > https- Defines the local Secured HTTPS port of the device. The
port parameter allows secure remote device Web management from
[HTTPSPort] the LAN. To enable secure Web management from the LAN,
configure the desired port.
The valid range is 1 to 65535 (other restrictions may apply within
this range). The default port is 443.
Note: For the parameter to take effect, a device reset is required.
Require Client Certificates for Enables the requirement of client certificates for HTTPS
HTTPS connection connection.
configure system > web > req- [0] Disable = (Default) Client certificates are not required.
client-cert [1] Enable = Client certificates are required. The client
[HTTPSRequireClientCertificate] certificate must be preloaded to the device and its matching
private key must be installed on the managing PC. Time and
date must be correctly set on the device for the client certificate
to be verified.
Note:
For the parameter to take effect, a device reset is required.
For a description on implementing client certificates, see 'TLS
for Remote Device Management' on page 121.
Parameter Description
Parameter Description
[EnableMediaSecurity]
Media Security Behavior Global parameter that defines the handling of SRTP (when the
configure voip > media EnableMediaSecurity parameter is set to 1). You can also configure
security > media-sec-bhvior this functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of the
[MediaSecurityBehaviour]
parameter and for configuring this functionality in the IP Profiles
table, see Configuring IP Profiles on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Note: The parameter is applicable only to the Gateway application.
Master Key Identifier (MKI) Global parameter that defines the size (in bytes) of the Master Key
Size Identifier (MKI) in SRTP Tx packets. You can also configure this
configure voip > media functionality per specific calls, using IP Profiles (IpProfile_MKISize).
security > srtp-tx-packet-mki- For a detailed description of the parameter and for configuring this
size functionality in the IP Profiles table, see 'Configuring IP Profiles' on
page 433.
[SRTPTxPacketMKISize]
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Symmetric MKI Negotiation Global parameter that enables symmetric MKI negotiation. You can
configure voip > media also configure this functionality per specific calls, using IP Profiles
security > symmetric-mki (IpProfile_EnableSymmetricMKI). For a detailed description of the
parameter and for configuring this functionality in the IP Profiles
[EnableSymmetricMKI]
table, see 'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Offered SRTP Cipher Suites Defines the offered crypto suites (cipher encryption algorithms) for
configure voip > media SRTP.
security > offer-srtp-cipher [0] All = (Default) All available crypto suites.
[SRTPofferedSuites] [1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.
[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
[4] ARIA-CM-128-HMAC-SHA1-80 = device uses ARIA encryption
algorithm with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
[8] ARIA-CM-192-HMAC-SHA1-80 = device uses ARIA encryption
algorithm with a 192-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note:
For enabling ARIA encryption, use the AriaProtocolSupport
parameter.
The parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with
two crypto lines containing HMAC_SHA1_80 and
HMAC_SHA_32, it uses the HMAC_SHA_32 key in its SIP 200
OK response if the parameter is set to 2.
Parameter Description
configure voip > sbc settings Defines the maximum transmission unit (MTU) size for the DTLS
> sbc-dtls-mtu handshake. The device does not attempt to send handshake packets
[SbcDtlsMtu] that are larger than the configured value. Adjusting the MTU is useful
when there are network constraints on the size of packets that can be
sent.
The valid value range is 228 to 1500. The default is 1500.
Note: The parameter is applicable only to the SBC application.
Aria Protocol Support Enables ARIA algorithm cipher encryption for SRTP. This is an
configure voip > media alternative option to the existing support for the AES algorithm. ARIA
security > ARIA-protocol- is a symmetric key block cipher algorithm standard developed by the
support Korean National Security Research Institute.
[AriaProtocolSupport] [0] Disable (default)
[1] Enable
Note:
To configure the ARIA bit-key encryption size (128 or 192 bit) with
HMAC SHA-1 cryptographic hash function, use the
SRTPofferedSuites parameter.
The ARIA feature is available only if the device is installed with a
License Key that includes this feature. For installing a License
Key, see License Key on page 781.
Disable Authentication On Enables authentication on transmitted RTP packets in a secured RTP
Transmitted RTP Packets session.
configure voip > media [0] Enable (default)
security > RTP- [1] Disable
authentication-disable-tx
[RTPAuthenticationDisableTx]
Disable Encryption On Enables encryption on transmitted RTP packets in a secured RTP
Transmitted RTP Packets session.
configure voip > media [0] Enable (default)
security > RTP-encryption- [1] Disable
disable-tx
[RTPEncryptionDisableTx]
Disable Encryption On Enables encryption on transmitted RTCP packets in a secured RTP
Transmitted RTCP Packets session.
configure voip > media [0] Enable (default)
security > RTCP-encryption- [1] Disable
disable-tx
[RTCPEncryptionDisableTx]
configure voip > sip-definition Global parameter that enables synchronization of the SRTP state
settings > srtp-state-behavior- between the device and a server when a new SRTP key is generated
mode upon a SIP session expire. You can also configure this functionality
[ResetSRTPStateUponRekey] per specific calls, using IP Profiles
(IpProfile_ResetSRTPStateUponRekey). For a detailed description of
the parameter and for configuring this functionality in the IP Profiles
table, see 'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Parameter Description
Parameter Description
[0] Disable (default).
[1] Server Only = Verify Subject Name only when acting as a
client for the TLS connection.
[2] Server & Client = Verify Subject Name when acting as a
server or client for the TLS connection.
If the device receives a certificate from a SIP entity (IP Group)
and the parameter is configured to Server Only or Server &
Client, it attempts to authenticate the certificate based on the
certificate's address.
The device searches for a Proxy Set that contains the same
address (IP address or FQDN) as that specified in the certificate's
SubjectAltName (Subject Alternative Names). For Proxy Sets with
an FQDN, the device checks the FQDN itself and not the DNS-
resolved IP addresses. If a Proxy Set is found with a matching
address, the device establishes a TLS connection.
If a matching Proxy Set is not found, one of the following occurs:
If the certificate's SubjectAltName is marked as "critical", the
device rejects the call.
If the SubjectAltName is not marked as "critical", the device
checks if the FQDN in the certificate's Common Name (CN) of
the SubjectName is the same as that configured for the
TLSRemoteSubjectName parameter or for the Proxy Set. If
they are the same, the device establishes a TLS connection;
otherwise, the device rejects the call.
Note:
If you configure the parameter to Server & Client, you also
need to configure the SIPSRequireClientCertificate parameter
to Enable.
For FQDN, the certificate may use wildcards (*) to replace
parts of the domain name.
TLS Client Verify Server Determines whether the device, when acting as a client for TLS
Certificate connections, verifies the Server certificate. The certificate is
configure network/security- verified with the Root CA information.
settings/tls-vrfy-srvr-cert [0] Disable (default)
[VerifyServerCertificate] [1] Enable
Note: If Subject Name verification is necessary, the parameter
PeerHostNameVerificationMode must be used as well.
TLS Remote Subject Name Defines the Subject Name that is compared with the name
configure network/security- defined in the remote side certificate when establishing TLS
settings/tls-rmt-subs-name connections.
If the SubjectAltName of the received certificate is not equal to
[TLSRemoteSubjectName]
any of the defined Proxies Host names/IP addresses and is not
marked as 'critical', the Common Name (CN) of the Subject field is
compared with this value. If not equal, the TLS connection is not
established. If the CN uses a domain name, the certificate can
also use wildcards (‘*’) to replace parts of the domain name.
The valid range is a string of up to 49 characters.
Note: The parameter is applicable only if the parameter
PeerHostNameVerificationMode is set to 1 or 2.
TLS Expiry Check Start Defines the number of days before the installed TLS server
Parameter Description
expiry-check-start certificate is to expire at which the device must send a trap
[TLSExpiryCheckStart] (acCertificateExpiryNotification) to notify of this.
The valid value is 0 to 3650. The default is 60.
TLS Expiry Check Period Defines the periodical interval (in days) for checking the TLS
expiry-check-period server certificate expiry date.
[TLSExpiryCheckPeriod] The valid value is 1 to 3650. The default is 7.
Parameter Description
Max Binary Packet Size Defines the maximum packet size (in bytes) for SSH packets.
configure system > cli-settings The valid value is 582 to 35000. The default is 35000.
> ssh-max-binary-packet-size
[SSHMaxBinaryPacketSize]
Maximum SSH Sessions Defines the maximum number of simultaneous SSH sessions.
configure system > cli-settings The valid range is 1 to 5. The default is 5.
> ssh-max-sessions
[SSHMaxSessions]
Parameter Description
Enable Last Login Message Enables message display in SSH sessions of the time and date of
configure system > cli-settings the last SSH login. The SSH login message displays the number of
> ssh-last-login-message unsuccessful login attempts since the last successful login.
[SSHEnableLastLoginMessage] [0] Disable
[1] Enable (default)
Note: The last SSH login information is cleared when the device is
reset.
Max Login Attempts Defines the maximum SSH login attempts allowed for entering an
configure system > cli-settings incorrect password by an administrator before the SSH session is
> ssh-max-login-attempts rejected.
[SSHMaxLoginAttempts] The valid range is 1 to 5. The default is 3.
Note: The new setting takes effect only for new subsequent SSH
connections.
Parameter Description
Parameter Description
IDSRule_ThresholdWindow, IDSRule_MinorAlarmThreshold,
IDSRule_MajorAlarmThreshold, IDSRule_CriticalAlarmThreshold,
IDSRule_DenyThreshold, IDSRule_DenyPeriod;
[ \IDSRule ]
For more informationFor more information, see 'Configuring IDS Policies'
on page 174.
IDS Match Table
IDS Match Table Defines target rules per IDS Policy.
[IDSMatch] The format of the ini file parameter is:
[ IDSMatch ]
FORMAT IDSMatch_Index = IDSMatch_SIPInterface,
IDSMatch_ProxySet, IDSMatch_Subnet, IDSMatch_Policy;
[ \IDSMatch ]
For more informationFor more information, see 'Assigning IDS Policies'
on page 178.
Parameter Description
Parameter Description
OVOC Parameters
Server IP Defines the IP address of the primary One Voice Operations Center
configure voip > qoe (OVOC) server to where the quality experience reports are sent.
settings > server-ip Note: For the parameter to take effect, a device reset is required.
[QOEServerIP]
Redundant Server IP Defines the IP address of the secondary OVOC server to where the
configure voip > qoe quality experience reports are sent. This is applicable when the OVOC
settings > redundant- server is in Geographical Redundancy HA mode.
server-ip Note: For the parameter to take effect, a device reset is required.
[QOESecondaryServerIp]
QoE Port Defines the port of the OVOC server.
configure voip > qoe The valid value range is 0 to 65534. The default is 5000.
settings > port
[QOEPort]
Interface Name Defines the IP network interface on which the quality experience reports
configure voip > qoe are sent.
settings > interface-name The default is the OAMP interface.
[QOEInterfaceName] Note: For the parameter to take effect, a device reset is required.
QoE Connection by TLS Enables a TLS connection with the OVOC server.
configure voip > qoe [0] Disable (default)
settings > tls-enable [1] Enable
[QOEEnableTLS] Note: For the parameter to take effect, a device reset is required.
QoE TLS Context Name Selects a TLS Context (configured in the TLS Contexts table) for the TLS
configure voip > qoe connection with the OVOC server.
settings > tls-context- The valid value is a string representing the name of the TLS Context as
name configured in the 'Name' field of the TLS Contexts table. The default is
[QoETLSContextName] the default TLS Context (ID 0).
QoE Report Mode Defines at what stage of the call the device sends the QoE data of the
report-mode call to the OVOC server.
[QoeReportMode] [0] Report QoE During Call (default)
[1] Report QoE at End of Call
Note: If a QoE traffic overflow between OVOC and the device occurs,
the device sends the QoE data only at the end of the call, regardless of
the settings of the parameter.
Quality of Experience Profile Table
Parameter Description
Parameter Description
Parameter Description
IP Groups Table
IP Groups This table configures IP Groups.
configure voip > ip-group The format of the ini file table parameter is:
[IPGroup] [ IPGroup ]
FORMAT IPGroup_Index = IPGroup_Type, IPGroup_Name,
IPGroup_ProxySetName, IPGroup_SIPGroupName,
IPGroup_ContactUser, IPGroup_SipReRoutingMode,
IPGroup_AlwaysUseRouteTable, IPGroup_SRDName,
IPGroup_MediaRealm, IPGroup_ClassifyByProxySet,
IPGroup_ProfileName, IPGroup_MaxNumOfRegUsers,
IPGroup_InboundManSet, IPGroup_OutboundManSet,
IPGroup_RegistrationMode, IPGroup_AuthenticationMode,
IPGroup_MethodList, IPGroup_EnableSBCClientForking,
IPGroup_SourceUriInput, IPGroup_DestUriInput,
IPGroup_ContactName, IPGroup_Username,
IPGroup_Password, IPGroup_UUIFormat, IPGroup_QOEProfile,
IPGroup_BWProfile, IPGroup_AlwaysUseSourceAddr,
IPGroup_MsgManUserDef1, IPGroup_MsgManUserDef2,
IPGroup_SIPConnect, IPGroup_SBCPSAPMode,
IPGroup_DTLSContext, IPGroup_CreatedByRoutingServer,
IPGroup_UsedByRoutingServer, IPGroup_SBCOperationMode,
IPGroup_SBCRouteUsingRequestURIPort,
IPGroup_SBCKeepOriginalCallID, IPGroup_TopologyLocation,
IPGroup_SBCDialPlanName, IPGroup_CallSetupRulesSetId,
IPGroup_Tags, IPGroup_SBCUserStickiness,
IPGroup_UserUDPPortAssignment;
Parameter Description
[/IPGroup]
For more information, see 'Configuring IP Groups' on page 359.
Note: For the parameter to take effect, a device reset is required.
Accounts Table
Accounts Defines user accounts for registering and/or authenticating
configure voip > sip-definition (digest) Trunk Groups or IP Groups (e.g., an IP-PBX) with a
account Serving IP Group (e.g., a registrar server).
[Account] The format of the ini file table parameter is as follows:
[Account]
FORMAT Account_Index = Account_ServedTrunkGroup,
Account_ServedIPGroupName, Account_ServingIPGroupName,
Account_Username, Account_Password, Account_HostName,
Account_ContactUser, Account_Register,
Account_RegistrarStickiness, Account_RegistrarSearchMode,
Account_RegEventPackageSubscription,
Account_ApplicationType;
[\Account]
For more informationFor more information, see 'Configuring
Registration Accounts' on page 391.
Proxy Registration Parameters
Use Default Proxy Enables the use of Proxy Set ID 0 (for backward compatibility).
configure voip > sip-definition [0] No = (Default) Proxy Set 0 is not used.
settings > enable-proxy [1] Yes = Proxy Set ID 0 is used.
[IsProxyUsed] Note:
The parameter must be used only for backward compatibility.
If not required for backward compatibility, make sure that the
parameter is disabled and use the Proxy Sets table for
configuring all your Proxy Sets (except for Proxy Set ID 0).
If you are not using a proxy server, you must configure routing
rules to route the call.
The parameter is applicable only to the Gateway application.
Proxy Name Defines the Home Proxy domain name. If specified, this name is
configure voip > sip-definition used as the Request-URI in REGISTER, INVITE and other SIP
proxy-and-registration > proxy- messages, and as the host part of the To header in INVITE
name messages. If not specified, the Proxy IP address is used instead.
[ProxyName] The valid value is a string of up to 49 characters.
Note: The parameter functions together with the
UseProxyIPasHost parameter.
Use Proxy IP as Host Enables the use of the proxy server's IP address (in dotted-
configure voip > sip-definition decimal notation) as the host name in SIP From and To headers
settings > use-proxy-ip-as-host in REGISTER requests.
Parameter Description
[UseProxyIPasHost] [0] Disable (default)
[1] Enable
If the parameter is disabled and the device registers to an IP
Group (i.e., proxy server), it uses the string configured by the
ProxyName parameter as the host name in the REGISTER's
Request-URI and uses the string configured by the IP Groups
table parameter, SIPGroupName as the host name in the To and
From headers. If the IP Group is configured with a Proxy Set that
has multiple IP addresses, all the REGISTER messages sent to
these proxies are sent with the same host name.
Note: If the parameter is disabled and the ProxyName parameter
is not configured, the proxy's IP address is used as the host name
in the REGISTER Request-URI.
Redundancy Mode Determines whether the device switches back to the primary
configure voip > sip-definition Proxy after using a redundant Proxy.
settings > redundancy-mode [0] Parking = (Default) The device continues working with a
[ProxyRedundancyMode] redundant (now active) Proxy until the next failure, after which
it works with the next redundant Proxy.
[1] Homing = The device always tries to work with the primary
Proxy server (i.e., switches back to the primary Proxy
whenever it's available).
Note: To use this Proxy Redundancy mechanism, you need to
enable the keep-alive with Proxy option, by setting the parameter
EnableProxyKeepAlive to 1 or 2.
Proxy IP List Refresh Time Defines the periodic rate (in seconds) at which the device
configure voip > sip-definition performs DNS queries to resolve FQDNs (host names) into IP
settings > proxy-ip-lst-rfrsh-time addresses. For example, if a Proxy Set is configured with an
FQDN and the parameter is configured to 60, the device queries
[ProxyIPListRefreshTime]
the DNS server every 60 seconds, which refreshes the Proxy
Set’s list of DNS-resolved IP addresses.
The valid value is 0, or 5 to 2,000,000. The default is 60. The
value 0 disables periodic DNS queries and DNS resolution is
done only once - upon device reset, device power up, or new and
modified configuration.
Enable Fallback to Routing Table Determines whether the device falls back to the Tel-to-IP Routing
configure voip > sip-definition table for call routing when Proxy servers are unavailable.
settings > fallback-to-routing [0] Disable = (Default) Fallback is not used.
[IsFallbackUsed] [1] Enable = The Tel-to-IP Routing table is used when Proxy
servers are unavailable.
When the device falls back to the Tel-to-IP Routing table, it
continues scanning for a Proxy. When the device locates an
active Proxy, it switches from internal routing back to Proxy
routing.
Note: To enable the redundant Proxies mechanism, set the
parameter EnableProxyKeepAlive to 1 or 2.
Prefer Routing Table Determines whether the device's routing table takes precedence
configure voip > sip-definition over a Proxy for routing calls.
proxy-and-registration > prefer- [0] No = (Default) Only a Proxy server is used to route calls.
routing-table [1] Yes = The device checks the routing rules in the Tel-to-IP
[PreferRouteTable] Routing table for a match with the Tel-to-IP call. Only if a
Parameter Description
match is not found is a Proxy used.
Always Use Proxy Determines whether the device sends SIP messages and
configure voip > sip-definition responses through a Proxy server.
proxy-and-registration > always- [0] Disable = (Default) Use standard SIP routing rules.
use-proxy [1] Enable = All SIP messages and responses are sent to the
[AlwaysSendToProxy] Proxy server.
Note: The parameter is applicable only if a Proxy server is used
(i.e., the parameter IsProxyUsed is set to 1).
SIP ReRouting Mode Determines the routing mode after a call redirection (i.e., a 3xx
configure voip > sip-definition SIP response is received) or transfer (i.e., a SIP REFER request
settings > sip-rerouting-mode is received).
[SIPReroutingMode] [0] Standard = (Default) INVITE messages that are generated
as a result of Transfer or Redirect are sent directly to the URI,
according to the Refer-To header in the REFER message, or
Contact header in the 3xx response.
[1] Proxy = Sends a new INVITE to the Proxy.
Note: This option is applicable only if a Proxy server is used
and the parameter AlwaysSendtoProxy is set to 0.
[2] Routing Table = Uses the Routing table to locate the
destination and then sends a new INVITE to this destination.
Note:
The parameter is applicable only to the Gateway application.
When the parameter is set to [1] and the INVITE sent to the
Proxy fails, the device re-routes the call according to the
Standard mode [0].
When the parameter is set to [2] and the INVITE fails, the
device re-routes the call according to the Standard mode [0]. If
DNS resolution fails, the device attempts to route the call to
the Proxy. If routing to the Proxy also fails, the
Redirect/Transfer request is rejected.
When the parameter is set to [2], the XferPrefix parameter can
be used to define different routing rules for redirect calls.
The parameter is disregarded if the parameter
AlwaysSendToProxy is set to 1.
DNS Query Type Enables the use of DNS Naming Authority Pointer (NAPTR) and
configure voip > sip-definition Service Record (SRV) queries to resolve Proxy and Registrar
settings > dns-query servers and to resolve all domain names that appear in the SIP
Contact and Record-Route headers.
[DNSQueryType]
[0] A-Record = (Default) No NAPTR or SRV queries are
performed.
[1] SRV = If the Proxy/Registrar IP address parameter,
Contact/Record-Route headers, or IP address configured in
the routing tables contain a domain name, an SRV query is
performed. The device uses the first host name received from
the SRV query. The device then performs a DNS A-record
query for the host name to locate an IP address.
[2] NAPTR = An NAPTR query is performed. If it is successful,
an SRV query is sent according to the information received in
the NAPTR response. If the NAPTR query fails, an SRV query
is performed according to the configured transport type.
Note:
Parameter Description
If the Proxy/Registrar IP address parameter, the domain name
in the Contact/Record-Route headers, or the IP address
configured in the routing tables contain a domain name with a
port definition, the device performs a regular DNS A-record
query.
If a specific Transport Type is configured, a NAPTR query is
not performed.
To enable NAPTR/SRV queries for Proxy servers only, use
the global parameter ProxyDNSQueryType, or use the Proxy
Sets table.
Proxy DNS Query Type Global parameter that defines the DNS query record type for
configure voip > sip-definition resolving the Proxy server's configured domain name (FQDN)
proxy-and-registration > proxy- into an IP address.
dns-query [0] A-Record (default) = A-record DNS query.
[ProxyDNSQueryType] [1] SRV = If the Proxy IP address parameter contains a
domain name without port definition (e.g., ProxyIP =
domain.com), an SRV query is performed. The SRV query
returns up to four Proxy host names and their weights. The
device then performs DNS A-record queries for each Proxy
host name (according to the received weights) to locate up to
four Proxy IP addresses. Thus, if the first SRV query returns
two domain names and the A-record queries return two IP
addresses each, no additional searches are performed.
[2] NAPTR = NAPTR query is done. If successful, an SRV
query is sent according to the information received in the
NAPTR response. If the NAPTR query fails, an SRV query is
done according to the configured transport type. If the Proxy
IP address parameter contains a domain name with port
definition (e.g., ProxyIP = domain.com:5080), the device
performs a regular DNS A-record query. If a specific Transport
Type is defined, a NAPTR query is not performed.
Note:
This functionality can be configured per Proxy Set in the Proxy
Sets table (see 'Configuring Proxy Sets' on page 375).
When enabled, NAPTR/SRV queries are used to discover
Proxy servers even if the parameter DNSQueryType is
disabled.
Use Gateway Name for Determines whether the device uses its IP address or string
OPTIONS name ("gateway name") in keep-alive SIP OPTIONS messages
configure voip > sip-definition (host part of the Request-URI). To configure the "gateway name",
settings > use-gw-name-for-opt use the SIPGatewayName parameter. The device uses the
OPTIONS request as a keep-alive message with its primary and
[UseGatewayNameForOptions]
redundant SIP proxy servers (i.e., the EnableProxyKeepAlive
parameter is set to 1).
[0] No = (Default) Device's IP address is used in keep-alive
OPTIONS messages.
[1] Yes = Device's "gateway name" is used in keep-alive
OPTIONS messages.
[2] Server = Device's IP address is used in the From and To
headers in keep-alive OPTIONS messages.
User Name Defines the username for registration and Basic/Digest
Parameter Description
configure voip > sip-definition authentication with a Proxy/Registrar server.
proxy-and-registration > user- By default, no value is defined.
name-4-auth
Note:
[UserName]
The parameter is applicable only to the Gateway application.
The parameter is applicable only if single device registration is
used (i.e., the parameter AuthenticationMode is set to
authentication per gateway).
Password Defines the password for Basic/Digest authentication with a
configure voip > sip-definition Proxy/Registrar server. A single password is used for all device
proxy-and-registration > ports.
password-4-auth The default is 'Default_Passwd'.
[Password]
Cnonce Defines the Cnonce string used by the SIP server and client to
configure voip > sip-definition provide mutual authentication.
proxy-and-registration > cnonce- The value is free format, i.e., 'Cnonce = 0a4f113b'. The default is
4-auth 'Default_Cnonce'.
[Cnonce]
Challenge Caching Mode Enables local caching of SIP message authorization challenges
configure voip > sip- from Proxy servers.
definition settings > The device sends the first request to the Proxy without
challenge-caching authorization. The Proxy sends a 401/407 response with a
[SIPChallengeCachingMode] challenge for credentials. The device saves (caches) the
response for further uses. The device sends a new request with
the appropriate credentials. Subsequent requests to the Proxy
are automatically sent with credentials (calculated from the saved
challenge). If the Proxy doesn't accept the new request and
sends another challenge, the old challenge is replaced with the
new one. One of the benefits of the feature is that it may reduce
the number of SIP messages transmitted through the network.
[0] None = (Default) Challenges are not cached. Every new
request is sent without preliminary authorization. If the request
is challenged, a new request with authorization data is sent.
[1] INVITE Only = Challenges issued for INVITE requests are
cached. This prevents a mixture of REGISTER and INVITE
authorizations.
[2] Full = Caches all challenges from the proxies.
Note:
Challenge caching is used with all proxies and not only with
the active one.
For the Gateway application: The challenge can be cached
per endpoint or per Account.
For the SBC application: The challenge can be cached per
Account or per user whose credentials are known through the
User Info table.
Proxy Address Table
Proxy IP Table The table defines proxy addresses per Proxy Set.
configure voip > proxy-ip The format of the ini file table parameter is as follows:
[ProxyIP] [ProxyIP]
FORMAT ProxyIp_Index = ProxyIp_ProxySetId,
Parameter Description
ProxyIp_ProxyIpIndex, ProxyIp_IpAddress,
ProxyIp_TransportType;
[\ProxyIP]
For more information, see 'Configuring Proxy Sets' on page 375.
Proxy Sets Table
Proxy Sets Defines the Proxy Sets.
configure voip > proxy-set The format of the ini file table parameter is as follows:
[ProxySet] [ ProxySet ]
FORMAT ProxySet_Index = ProxySet_ProxyName,
ProxySet_EnableProxyKeepAlive,
ProxySet_ProxyKeepAliveTime,
ProxySet_ProxyLoadBalancingMethod,
ProxySet_IsProxyHotSwap, ProxySet_SRDName,
ProxySet_ClassificationInput, ProxySet_TLSContextName,
ProxySet_ProxyRedundancyMode,
ProxySet_DNSResolveMethod, ProxySet_KeepAliveFailureResp,
ProxySet_GWIPv4SIPInterfaceName,
ProxySet_SBCIPv4SIPInterfaceName,
ProxySet_GWIPv6SIPInterfaceName,
ProxySet_SBCIPv6SIPInterfaceName,
ProxySet_MinActiveServersLB,
ProxySet_SuccessDetectionRetries,
ProxySet_SuccessDetectionInterval,
ProxySet_FailureDetectionRetransmissions;
[ \ProxySet ]
For more information, see 'Configuring Proxy Sets' on page 375.
Registrar Parameters
Enable Registration Enables the device to register to a Proxy/Registrar server.
configure voip > sip-definition [0] Disable = (Default) The device doesn't register to
settings > enable-registration Proxy/Registrar server.
[IsRegisterNeeded] [1] Enable = The device registers to Proxy/Registrar server
when the device is powered up and at every user-defined
interval (configured by the parameter RegistrationTime).
Note:
The parameter is applicable only to the Gateway application.
The device sends a REGISTER request for each channel or
for the entire device (according to the AuthenticationMode
parameter).
Registrar Name Defines the Registrar domain name. If specified, the name is
configure voip > sip-definition used as the Request-URI in REGISTER messages. If it isn't
proxy-and-registration > registrar- specified (default), the Registrar IP address, or Proxy name or IP
name address is used instead.
[RegistrarName] The valid range is up to 100 characters.
Note: The parameter is applicable only to the Gateway
application.
Registrar IP Address Defines the IP address (or FQDN) and port number (optional) of
configure voip > sip-definition the Registrar server. The IP address is in dotted-decimal notation,
proxy-and-registration > ip-addrr- e.g., 201.10.8.1:<5080>.
Parameter Description
rgstrr Note:
[RegistrarIP] The parameter is applicable only to the Gateway application.
If not specified, the REGISTER request is sent to the primary
Proxy server.
When a port number is specified, DNS NAPTR/SRV queries
aren't performed, even if the parameter DNSQueryType is set
to 1 or 2.
If the parameter RegistrarIP is set to an FQDN and is resolved
to multiple addresses, the device also provides real-time
switching (hotswap mode) between different Registrar IP
addresses (the parameter IsProxyHotSwap is set to 1). If the
first Registrar doesn't respond to the REGISTER message,
the same REGISTER message is sent immediately to the next
Proxy. To allow this mechanism, the parameter
EnableProxyKeepAlive must be set to 0.
When a specific transport type is defined using the parameter
RegistrarTransportType, a DNS NAPTR query is not
performed even if the parameter DNSQueryType is set to 2.
Registrar Transport Type Determines the transport layer used for outgoing SIP dialogs
configure voip > sip-definition initiated by the device to the Registrar.
settings > registrar-transport [-1] Not Configured (default)
[RegistrarTransportType] [0] UDP
[1] TCP
[2] TLS
Note:
The parameter is applicable only to the Gateway application.
When set to ‘Not Configured’, the value of the parameter
SIPTransportType is used.
Registration Time Defines the time interval (in seconds) for registering to a Proxy
configure voip > sip-definition server. The value is used in the SIP Expires header. The
proxy-and-registration > parameter also defines the time interval between Keep-Alive
registration-time messages when the parameter EnableProxyKeepAlive is set to 2
(REGISTER).
[RegistrationTime]
Typically, the device registers every 3,600 sec (i.e., one hour).
The device resumes registration according to the parameter
RegistrationTimeDivider.
The valid range is 10 to 2,000,000. The default is 180.
Re-registration Timing [%] Defines the re-registration timing (in percentage). The timing is a
configure voip > sip-definition percentage of the re-register timing set by the Registrar server.
settings > re-registration-timing The valid range is 50 to 100. The default is 50.
[RegistrationTimeDivider] For example: If the parameter is set to 70% and the Registration
Expires time is 3600, the device re-sends its registration request
after 3600 x 70% (i.e., 2520 sec).
Note:
The parameter may be overridden if the parameter
RegistrationTimeThreshold is greater than 0.
Registration Retry Time Defines the time interval (in seconds) after which a registration
configure voip > sip-definition request is re-sent if registration fails with a 4xx response or if
settings > registration-retry-time there is no response from the Proxy/Registrar server.
[RegistrationRetryTime] The default is 30 seconds. The range is 10 to 3600.
Parameter Description
Note: Registration retry time can also be configured with the
MaxRegistrationBackoffTime parameter.
Max Registration Backoff Time Defines a dynamic time-to-wait interval before the device
configure voip > sip- attempts to register the SIP entity again after a registration failure.
definition proxy-and- The parameter is applicable only to registrations initiated by the
registration > max- device on behalf of SIP entities (for example, User Info, Accounts,
registration-backoff-time Endpoints or the device itself) with a SIP proxy server (registrar).
[MaxRegistrationBackoffTime] The valid value is 0 to 3000000 (i.e., 3 million seconds). The
default is 0 (i.e., disabled).
In contrast to the RegistrationRetryTime parameter, which defines
a fixed time to wait between registration attempts due to
registration failure, this parameter configures the device to
increase the time-to-wait interval for each subsequent registration
attempt (per RFC 5626, Section 4.5) for a specific registration
flow. In other words, the interval changes between registration
attempts.
The parameter operates together with the RegistrationRetryTime
parameter. When the MaxRegistrationBackoffTime parameter is
configured, the wait-time before another registration attempt
increases after each failed registration (until it reaches the
maximum value specified by the parameter).
The device uses the following algorithm to calculate the
incremental augmented wait-time between each registration
attempt:
Wait Time = min (max-time, (base-time * (2 ^
consecutive-failures)))
Where:
max-time is the value configured by
MaxRegistrationBackoffTime
base-time is the value configured by RegistrationRetryTime
For example, if max-time is 1800 seconds and base-time is 30
seconds, and there were three consecutive registration failures,
then the upper-bound wait time is the minimum of (1800,
30*(2^3)), which is (1800, 240) and thus, the minimum of the two
values is 240 (seconds). The actual time the device waits before
retrying registration is computed by a uniform random time
between 50% and 100% of the upper-bound wait time (e.g., for
an upper-bound wait-time of 240, the actual wait-time is between
120 and 240 seconds). As can be seen from the algorithm, the
upper-bound wait time can never exceed the value of the
MaxRegistrationBackoffTime parameter.
Registration Time Threshold Defines a threshold (in seconds) for re-registration timing. If the
configure voip > sip-definition parameter is greater than 0, but lower than the computed re-
proxy-and-registration > registration timing (according to the parameter
registration-time-thres RegistrationTimeDivider), the re-registration timing is set to the
following: timing set by the Registration server in the SIP Expires
[RegistrationTimeThreshold]
header minus the value of the parameter
RegistrationTimeThreshold.
The valid range is 0 to 2,000,000. The default is 0.
Re-register On INVITE Failure Enables immediate re-registration if no response is received for
configure voip > sip-definition an INVITE request sent by the device.
Parameter Description
proxy-and-registration > reg-on- [0] Disable (default)
invite-fail [1] Enable = The device immediately expires its re-registration
[RegisterOnInviteFailure] timer and commences re-registration to the same Proxy upon
any of the following scenarios:
The response to an INVITE request is 407 (Proxy
Authentication Required) without an authentication header
included.
The remote SIP UA abandons a call before the device has
received any provisional response (indicative of an
outbound proxy server failure).
The remote SIP UA abandons a call and the only
provisional response the device has received for the call
is 100 Trying (indicative of a home proxy server failure,
i.e., the failure of a proxy in the route after the outbound
proxy).
The device terminates a call due to the expiration of RFC
3261 Timer B or due to the receipt of a 408 (Request
Timeout) response and the device has not received any
provisional response for the call (indicative of an outbound
proxy server failure).
The device terminates a call due to the receipt of a 408
(Request Timeout) response and the only provisional
response the device has received for the call is the 100
Trying provisional response (indicative of a home proxy
server failure).
Note: The parameter is applicable only to the Gateway
application.
ReRegister On Connection Enables the device to perform SIP re-registration upon TCP/TLS
Failure connection failure.
configure voip > sip-definition [0] Disable (default)
settings > reg-on-conn-failure [1] Enable
[ReRegisterOnConnectionFailure]
Gateway Registration Name Defines the user name that is used in the From and To headers in
configure voip > sip-definition SIP REGISTER messages. If no value is specified (default) for
settings > gw-registration-name the parameter, the UserName parameter is used instead.
[GWRegistrationName] Note:
The parameter is applicable only to the Gateway application.
The parameter is applicable only for single registration per
device (i.e., AuthenticationMode is set to 1). When the device
registers each channel separately (i.e., AuthenticationMode is
set to 0), the user name is set to the channel's phone number.
Registration Mode Determines the device's registration and authentication method.
configure voip > sip-definition [0] Per Endpoint = Registration and authentication is
settings > authentication-mode performed separately for each B-channel.
[AuthenticationMode] [1] Per Gateway = (Default) Single registration and
authentication for the entire device. This is typically used for
digital modules.
Note: The parameter is applicable only to the Gateway
application.
Parameter Description
Set Out-Of-Service On Enables setting the trunk, or entire device (i.e., all endpoints) to
Registration Failure out-of-service if registration fails.
configure voip > sip-definition [0] Disable (default)
proxy-and-registration > set-oos- [1] Enable
on-reg-failure
If the registration is per endpoint (i.e., AuthenticationMode is set
[OOSOnRegistrationFail] to 0) or per Account (see Configuring Trunk Group Settings on
page 503) and a specific endpoint/Account registration fails (SIP
4xx or no response), then that endpoint is set to out-of-service
until a success response is received in a subsequent registration
request. When the registration is per the entire device (i.e.,
AuthenticationMode is set to 1) and registration fails, all endpoints
are set to out-of-service. If all the Accounts of a specific Trunk
Group fail registration and if the Trunk Group comprises a
complete trunk, then the entire trunk is set to out-of-service.
Note: The parameter is applicable only to the Gateway
application.
configure voip > sip-definition Enables the device to perform explicit unregisters.
settings > expl-un-reg [0] Disable (default)
[UnregistrationMode] [1] Enable = The device sends an asterisk ("*") value in the
SIP Contact header, instructing the Registrar server to remove
all previous registration bindings. The device removes SIP
User Agent (UA) registration bindings in a Registrar, according
to RFC 3261. Registrations are soft state and expire unless
refreshed, but they can also be explicitly removed. A client can
attempt to influence the expiration interval selected by the
Registrar. A UA requests the immediate removal of a binding
by specifying an expiration interval of "0" for that contact
address in a REGISTER request. UA's should support this
mechanism so that bindings can be removed before their
expiration interval has passed. Use of the "*" Contact header
field value allows a registering UA to remove all bindings
associated with an address-of-record (AOR) without knowing
their precise values.
Note: The REGISTER-specific Contact header field value of "*"
applies to all registrations, but it can only be used if the Expires
header field is present with a value of "0".
Add Empty Authorization Header Enables the inclusion of the SIP Authorization header in initial
configure voip > sip-definition registration (REGISTER) requests sent by the device.
settings > add-empty-author-hdr [0] Disable (default)
[EmptyAuthorizationHeader] [1] Enable
The Authorization header carries the credentials of a user agent
(UA) in a request to a server. The sent REGISTER message
populates the Authorization header with the following parameters:
username - set to the value of the private user identity
realm - set to the domain name of the home network
uri - set to the SIP URI of the domain name of the home
network
nonce - set to an empty value
response - set to an empty value
For example:
Parameter Description
Authorization: Digest
username=alice_private@home1.net,
realm=”home1.net”, nonce=””,
response=”e56131d19580cd833064787ecc”
Note: This registration header is according to the IMS 3GPP
TS24.229 and PKT-SP-24.220 specifications.
Add initial Route Header Enables the inclusion of the SIP Route header in initial
configure voip > sip-definition registration or re-registration (REGISTER) requests sent by the
proxy-and-registration > add-init- device.
rte-hdr [0] Disable (default)
[InitialRouteHeader] [1] Enable
When the device sends a REGISTER message, the Route
header includes either the Proxy's FQDN, or IP address and port
according to the configured Proxy Set, for example:
Route: <sip:10.10.10.10;lr;transport=udp>
or
Route: <sip: pcscf-
gm.ims.rr.com;lr;transport=udp>
configure voip > sip-definition Enables the use of the carriage-return and line-feed sequences
settings > ping-pong-keep-alive (CRLF) Keep-Alive mechanism, according to RFC 5626
[UsePingPongKeepAlive] “Managing Client-Initiated Connections in the Session Initiation
Protocol (SIP)” for reliable, connection-orientated transport types
such as TCP.
[0] Disable (default)
[1] Enable
The SIP user agent/client (i.e., device) uses a simple periodic
message as a keep-alive mechanism to keep their flow to the
proxy or registrar alive (used for example, to keep NAT bindings
open). For connection-oriented transports such as TCP/TLS this
is based on CRLF. This mechanism uses a client-to-server "ping"
keep-alive and a corresponding server-to-client "pong" message.
This ping-pong sequence allows the client, and optionally the
server, to tell if its flow is still active and useful for SIP traffic. If
the client does not receive a pong in response to its ping, it
declares the flow “dead” and opens a new flow in its place. In the
CRLF Keep-Alive mechanism the client periodically (defined by
the PingPongKeepAliveTime parameter) sends a double-CRLF
(the "ping") then waits to receive a single CRLF (the "pong"). If
the client does not receive a "pong" within an appropriate amount
of time, it considers the flow failed.
Note: The device sends a CRLF message to the Proxy Set only if
the Proxy Keep-Alive feature (EnableProxyKeepAlive parameter)
is enabled and its transport type is set to TCP or TLS. The device
first sends a SIP OPTION message to establish the TCP/TLS
connection and if it receives any SIP response, it continues
sending the CRLF keep-alive sequences.
configure voip > sip-definition Defines the periodic interval (in seconds) after which a “ping”
settings > ping-pong-keep-alive- (double-CRLF) keep-alive is sent to a proxy/registrar, using the
time CRLF Keep-Alive mechanism.
[PingPongKeepAliveTime] The default range is 5 to 2,000,000. The default is 120.
The device uses the range of 80-100% of this user-defined value
Parameter Description
as the actual interval. For example, if the parameter value is set
to 200 sec, the interval used is any random time between 160 to
200 seconds. This prevents an “avalanche” of keep-alive by
multiple SIP UAs to a specific server.
Max Generated Register Rate Defines the maximum number of user register requests
configure voip > sip-definition (REGISTER messages) that the device sends (to a proxy or
settings > max-gen-reg-rate registrar server) at a user-defined rate configured by the
GeneratedRegistersInterval parameter. The parameter is useful
[MaxGeneratedRegistersRate]
in that it may be used to prevent an overload on the device's CPU
caused by sending many registration requests at a given time.
The valid value is 30 to 300 register requests per second. The
default is 150.
For configuration examples, see the description of the
GeneratedRegistersInterval parameter.
Generated Register Interval Defines the rate (in seconds) at which the device sends user
gen-reg-int register requests (REGISTER messages). The parameter is
based on the maximum number of REGISTER messages that
[GeneratedRegistersInterval]
can be sent at this rate, configured by the
MaxGeneratedRegistersRate parameter.
The valid value is 1 to 5. The default is 1.
Configuration examples:
If you configure the MaxGeneratedRegistersRate parameter to
100 and the GeneratedRegistersInterval to 5, the device
sends a maximum of 20 REGISTER messages per second
(i.e., 100 messages divided by 5 sec; 100 per 5 seconds).
If you configure the MaxGeneratedRegistersRate parameter to
100 and the GeneratedRegistersInterval to 1, the device
sends a maximum of a 100 REGISTER messages per second.
Parameter Description
SRDs Table
SRDs Defines Signaling Routing Domains (SRD).
configure voip > srd The format of the ini file table parameter is as follows:
[SRD] [ SRD ]
FORMAT SRD_Index = SRD_Name, SRD_IntraSRDMediaAnchoring,
SRD_BlockUnRegUsers, SRD_MaxNumOfRegUsers,
SRD_EnableUnAuthenticatedRegistrations, SRD_SharingPolicy,
SRD_UsedByRoutingServer, SRD_SBCOperationMode,
SRD_SBCRoutingPolicyName;
[ \SRD ]
For more informationFor more information, see 'Configuring SRDs' on
page 341.
Parameter Description
Parameter Description
[ \NATTranslation ]
For more informationFor more information, see 'Configuring NAT
Translation per IP Interface' on page 153.
Media Realms table
Media Realms Defines Media Realms.
configure voip > realm The format of the ini file table parameter is as follows:
[CpMediaRealm] [ CpMediaRealm ]
FORMAT CpMediaRealm_Index = CpMediaRealm_MediaRealmName,
CpMediaRealm_IPv4IF, CpMediaRealm_IPv6IF,
CpMediaRealm_PortRangeStart, CpMediaRealm_MediaSessionLeg,
CpMediaRealm_PortRangeEnd, CpMediaRealm_IsDefault,
CpMediaRealm_QoeProfile, CpMediaRealm_BWProfile,
CpMediaRealm_TopologyLocation;
[ \CpMediaRealm ]
For more informationFor more information, see 'Configuring Media
Realms' on page 333.
Remote Media Subnet Table
Remote Media Subnet Defines Remote Media Subnets.
configure voip > remote- The format of the ini file table parameter is as follows:
media-subnet [RemoteMediaSubnet]
[SubRealm] FORMAT RemoteMediaSubnet_Index = RemoteMediaSubnet_Realm,
RemoteMediaSubnet_RemoteMediaSubnetIndex,
RemoteMediaSubnet_RemoteMediaSubnetName,
RemoteMediaSubnet_PrefixLength,
RemoteMediaSubnet_AddressFamily,
RemoteMediaSubnet_DstIPAddress,
RemoteMediaSubnet_QOEProfileName,
RemoteMediaSubnet_BWProfileName;
[\RemoteMediaSubnet]
For more informationFor more information, see 'Configuring Remote
Media Subnets' on page 336.
Media Realm Extension Table
Media Realm Extension Defines Media Realm Extensions.
configure voip > realm- The format of the ini file table parameter is as follows:
extension [ MediaRealmExtension ]
[MediaRealmExtension] FORMAT MediaRealmExtension_Index =
MediaRealmExtension_MediaRealmIndex,
MediaRealmExtension_ExtensionIndex, MediaRealmExtension_IPv4IF,
MediaRealmExtension_IPv6IF, MediaRealmExtension_PortRangeStart,
MediaRealmExtension_PortRangeEnd,
MediaRealmExtension_MediaSessionLeg;
[ \MediaRealmExtension ]
For more information, see 'Configuring Media Realm Extensions' on
page 339.
Parameter Description
[MaxSDPSessionVersionId] Defines the maximum number of characters allowed in the SDP body's
"o=" (originator and session identifier) field for the session ID and
session version values. An example of an "o=" line with session ID
and session version values (in bold) is shown below:
o=jdoe 2890844526 2890842807 IN IP4 10.47.16.5
The valid value range is 1,000 to 214,748,3647 (default).
[UseRandomUser] Enables the device to assign a random string value to the user part of
the SIP Contact header for new user Account registrations with the
device. The assigned user part is unique to each Account. An example
of a randomly assigned user part is shown (in bold) below:
Contact: <sip:HRaNEmZnfX6xZl4@pc33.atlanta.com>
When enabled, each Account registers with its unique user part, and
all INVITE messages for this new Account are sent with this unique
user part. These assigned user parts are also used for registration
refreshes and for un-registering these Accounts. The assigned user
parts are used until the parameter is disabled. When enabled again,
new random user parts are assigned to the Accounts.
[0] = (Default) Disable
[1] = Enable
To configure Accounts, see Configuring Registration Accounts on
page 391.
[UnregisterOnStartup] Enables the device to unregister all user Accounts that were
registered with the device, upon a device reset. During device start-up,
each Account sends a REGISTER message (containing "Contact: *")
to unregister all contact URIs belonging to its Address-of-Record
(AOR). A second after they are unregistered, the device re-registers
the Account.
[0] = (Default) Disable
[1] = Enable
To configure Accounts, see Configuring Registration Accounts on
page 391.
Send reject on overload Disables the sending of SIP 503 (Service Unavailable) responses
configure voip > sip- upon receipt of new SIP dialog-initiating requests when the device's
definition settings > reject- CPU is overloaded and thus, unable to accept and process new SIP
on-ovrld messages.
[SendRejectOnOverload] [0] Disable = No SIP 503 response is sent when CPU overloaded.
[1] Enable (default) = SIP 503 response is sent when CPU
overloaded.
Note: Even if the parameter is disabled (i.e., 503 is not sent), the
device still discards the new SIP dialog-initiating requests when the
CPU is overloaded.
SIP 408 Response upon Enables the device to send SIP 408 responses (Request Timeout)
non-INVITE upon receipt of non-INVITE transactions. Disabling this response
configure voip > sip- complies with RFC 4320/4321. By default, and in certain
definition settings > enbl- circumstances such as a timeout expiry, the device sends a SIP 408
Request Timeout in response to non-INVITE requests (e.g.,
Parameter Description
non-inv-408 REGISTER).
[EnableNonInvite408Reply] [0] Disable = SIP 408 response is not sent upon receipt of non-
INVITE messages (to comply with RFC 4320).
[1] Enable = (Default) SIP 408 response is sent upon receipt of
non-INVITE messages, if necessary.
Remote Management by SIP Enables a specific device action upon the receipt of a SIP NOTIFY
Notify request, where the action depends on the value received in the Event
configure voip > sip- header.
definition settings > sip- [0] Disable (default)
remote-reset [1] Enable
[EnableSIPRemoteReset] The action depends on the Event header value:
'check-sync;reboot=false': triggers the regular Automatic Update
feature (if Automatic Update has been enabled on the device)
'check-sync;reboot=true': triggers a device reset
Note: The Event header value is proprietary to AudioCodes.
Max SIP Message Length Defines the maximum size (in Kbytes) for each SIP message that can
[KB] be sent over the network. The device rejects messages exceeding this
[MaxSIPMessageLength] user-defined size.
The valid value range is 1 to 100. The default is 100.
[SIPForceRport] Determines whether the device sends SIP responses to the UDP port
from where SIP requests are received even if the 'rport' parameter is
not present in the SIP Via header.
[0] = (Default) Disabled. The device sends the SIP response to the
UDP port defined in the Via header. If the Via header contains the
'rport' parameter, the response is sent to the UDP port from where
the SIP request is received.
[1] = Enabled. SIP responses are sent to the UDP port from where
SIP requests are received even if the 'rport' parameter is not
present in the Via header.
Reject Cancel after Connect Enables or disables the device to accept or reject SIP CANCEL
configure voip > sip- requests received after the receipt of a 200 OK in response to an
definition settings > reject- INVITE (i.e., call established). According to the SIP standard, a
cancel-after-connect CANCEL can be sent only during the INVITE transaction (before 200
OK), and once a 200 OK response is received the call can be rejected
[RejectCancelAfterConnect]
only by a BYE request.
[0] Disable = (Default) Accepts a CANCEL request received during
the INVITE transaction by sending a 200 OK response and
terminates the call session.
[1] Enable = Rejects a CANCEL request received during the
INVITE transaction by sending a SIP 481 (Call/Transaction Does
Not Exist) response and maintains the call session.
Verify Received RequestURI Enables the device to reject SIP requests (such as ACK, BYE, or re-
configure voip > sip- INVITE) whose user part in the Request-URI is different from the user
definition settings > verify- part received in the Contact header of the last sent SIP request.
rcvd-requri [0] Disable = (Default) Even if the user is different, the device
[VerifyReceevedRequestUri] accepts the SIP request.
[1] Enable = If the user is different, the device rejects the SIP
request (BYE is responded with 481; re-INVITE is responded with
404; ACK is ignored).
Parameter Description
Max Number of Active Calls Defines the maximum number of simultaneous active calls supported
configure voip > sip- by the device. If the maximum number of calls is reached, new calls
definition settings > max-nb- are not established.
of--act-calls The valid range is 1 to the maximum number of supported channels.
[MaxActiveCalls] The default value is the maximum available channels (i.e., no
restriction on the maximum number of calls).
QoS statistics in SIP Enables the device to include call quality of service (QoS) statistics in
Release Call SIP BYE and SIP 200 OK response to BYE, using the proprietary SIP
configure voip > sip- header X-RTP-Stat.
definition settings > [0] = Disable (default)
qos-statistics-in- [1] = Enable
release-msg
The X-RTP-Stat header provides the following statistics:
[QoSStatistics]
Number of received and sent voice packets
Number of received and sent voice octets
Received packet loss, jitter (in ms), and latency (in ms)
The X-RTP-Stat header contains the following fields:
PS=<voice packets sent>
OS=<voice octets sent>
PR=<voice packets received>
OR=<voice octets received>
PL=<receive packet loss>
JI=<jitter in ms>
LA=<latency in ms>
Below is an example of the X-RTP-Stat header in a SIP BYE
message:
BYE sip:302@10.33.4.125 SIP/2.0
Via: SIP/2.0/UDP
10.33.4.126;branch=z9hG4bKac2127550866
Max-Forwards: 70
From:
<sip:401@10.33.4.126;user=phone>;tag=1c2113553324
To: <sip:302@company.com>;tag=1c991751121
Call-ID: 991750671245200001912@10.33.4.125
CSeq: 1 BYE
X-RTP-Stat:
PS=207;OS=49680;;PR=314;OR=50240;PL=0;JI=600;LA=40
;
Supported: em,timer,replaces,path,resource-
priority
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRAC
K,REFER,INFO,SUBSCRIBE,UPDATE
User-Agent: Sip-Gateway-/v.7.20A.000.038
Reason: Q.850 ;cause=16 ;text="local"
Content-Length: 0
PRACK Mode Determines the PRACK (Provisional Acknowledgment) mechanism
prack-mode mode for SIP 1xx reliable responses.
[PrackMode] [0] Disable
[1] Supported (default)
Parameter Description
[2] Required
Note:
The Supported and Required headers contain the '100rel' tag.
The device sends PRACK messages if 180/183 responses are
received with '100rel' in the Supported or Required headers.
The parameter is applicable only to the Gateway application.
Enable Early Media Global parameter enabling the Early Media feature for sending media
early-media (e.g., ringing) before the call is established.
[EnableEarlyMedia] You can also configure this functionality per specific calls, using IP
Profiles (IpProfile_EnableEarlyMedia) or Tel
Profiles(TelProfile_EnableEarlyMedia). For a detailed description of
the parameter and for configuring the functionality, see 'Configuring IP
Profiles' on page 433 or Configuring Tel Profiles on page 467.
Note:
If the functionality is configured for a specific profile, the settings of
the global parameter is ignored for calls associated with the profile.
The parameter is applicable only to the Gateway application.
Enable Early 183 Global parameter that enables the device to send SIP 183 responses
early-183 with SDP to the IP upon receipt of INVITE messages. You can also
configure this functionality per specific calls, using IP Profiles
[EnableEarly183]
(IpProfile_EnableEarly183). For a detailed description of the
parameter and for configuring this functionality in the IP Profiles table,
see Configuring IP Profiles on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
[IgnoreAlertAfterEarlyMedia] Defines the device's interworking of Alerting messages for IP-to-Tel
calls (ISDN). It determines whether the device sends a 180 Ringing
response to the caller after the device sends a 183 Session Progress
response to the caller. The 180 Ringing response indicates that the
INVITE has been received by the ISDN side and that alerting is taking
place (i.e., ISDN Progress message), indicating to the IP PBX to play
a ringback tone. The 183 Session Progress response allows an early
media session to be established prior to the call being answered, for
example, to hear a ring tone, busy tone or recorded announcement.
[0] = (Default) Disable. If the device sends a 183 response with
SDP (due to a received ISDN Progress or Proceeding with PI
messages, i.e., a ring tone, busy tone or recorded announcement
played to the ISDN side) and an Alerting message is then received
from the ISDN side (with or without Progress Indicator), the device
also sends a 180 Ringing response to the caller. Therefore, in this
case, early media is played to the ISDN side and then the ringback
tone is played by the IP PBX.
[1] = Enable. If the device sends a 183 response with SDP (due to
a received ISDN Progress or Proceeding with PI messages) and an
Alerting message is then received from the ISDN side (with or
without Progress Indicator), the device does not send a 180
Ringing response to the caller and the voice channel remains open.
Therefore, in this case, early media is played to the ISDN side and
a ringback tone is not played by the IP PBX.
Note: The parameter is applicable only if the EnableEarlyMedia
Parameter Description
parameter is set to 1 (i.e., enabled).
183 Message Behavior Defines the ISDN message that is sent when the 183 Session
configure voip > sip- Progress message is received for IP-to-Tel calls.
definition settings > 183- [0] Progress = (Default)
msg-behavior The device sends a Progress message.
[SIP183Behaviour] [1] Alert =
The device sends an Alerting message (upon receipt of a 183
response) instead of an ISDN Progress message.
Note: The parameter is applicable only to the Gateway application.
[ReleaseIP2ISDNCallOnPro Typically, if an Q.931 Progress message with a Cause is received
gressWithCause] from the PSTN for an outgoing IP-to-ISDN call and the
EnableEarlyMedia parameter is set to 1 (i.e., the Early Media feature
is enabled), the device interworks the Progress to 183 + SDP to
enable the originating party to hear the PSTN announcement about
the call failure. Conversely, if EnableEarlyMedia is set to 0, the device
disconnects the call by sending a SIP 4xx response to the originating
party. However, if the ReleaseIP2ISDNCallOnProgressWithCause
parameter is set to 1, then the device sends a SIP 4xx response even
if the EnableEarlyMedia parameter is set to 1.
[0] = (Default) If a Progress with Cause message is received from
the PSTN for an outgoing IP-to-ISDN call, the device does not
disconnect the call by sending a SIP 4xx response to the
originating party.
[1] = The device sends a SIP 4xx response when the
EnableEarlyMedia parameter is set to 0.
[2] = The device always sends a SIP 4xx response, even if he
EnableEarlyMedia parameter is set to 1.
Session-Expires Time Defines the numerical value sent in the Session-Expires header in the
configure voip > sbc settings first SIP INVITE request or response (if the call is answered).
> session-expires-time The valid range is 1 to 86,400 sec. The default is 0 (i.e., the Session-
[SIPSessionExpires] Expires header is disabled).
Note: The parameter is applicable only to the Gateway application.
Minimum Session-Expires Defines the time (in seconds) in the SIP Min-SE header. The header
configure voip > sbc settings defines the minimum time that the user agent refreshes the session.
> min-session-expires The valid range is 10 to 100,000. The default is 90.
[MinSE] Note: The parameter is applicable only to the Gateway application.
Session Expires Disconnect Defines a session expiry timeout.
Time The new session expiry timeout is calculated by subtracting the
[SessionExpiresDisconnectT configured value from the original timeout as specified in the Session-
ime] Expires header. However, the new timeout must be greater than or
equal to one-third (1/3) of the Session-Expires value. If the refresher
does not send a refresh request within the new timeout, the device
disconnects the session (i.e., sends a SIP BYE).
For example, if you configure the parameter to 32 seconds and the
Session-Expires value is 180 seconds, the session timeout occurs 148
seconds (i.e., 180 minus 32) after the last session refresh. If the
Session-Expires header value is 90 seconds, the timeout occurs 60
seconds after the last refresh. This is because 90 minus 32 is 58
seconds, which is less than one third of the Session-Expires value
(i.e., 60/3 is 30, and 90 minus 30 is 60).
Parameter Description
The valid range is 0 to 32 (in seconds). The default is 32.
Session Expires Method Defines the SIP method used for session-timer updates.
configure voip > gateway [0] Re-INVITE = (Default) Uses re-INVITE messages for session-
settings > session-exp- timer updates.
method [1] UPDATE = Uses UPDATE messages.
[SessionExpiresMethod] Note:
The parameter is applicable only to the Gateway application.
The device can receive session-timer refreshes using both
methods.
The UPDATE message used for session-timer is excluded from the
SDP body.
[RemoveToTagInFailureRes Determines whether the device removes the ‘to’ header tag from final
ponse] SIP failure responses to INVITE transactions.
[0] = (Default) Do not remove tag.
[1] = Remove tag.
[EnableRTCPAttribute] Enables the use of the 'rtcp' attribute in the outgoing SDP.
[0] = Disable (default)
[1] = Enable
Note: The parameter is applicable only to the Gateway application.
[OPTIONSUserPart] Defines the user part value of the Request-URI for outgoing SIP
OPTIONS requests. If no value is configured, the configuration
parameter ‘Username’ valueis used.
A special value is ‘empty’, indicating that no user part in the Request-
URI (host part only) is used.
The valid range is a 30-character string. By default, this value is not
defined.
Trunk Status Reporting Enables the device to not respond to received SIP OPTIONS
Mode messages from, and/or not to send keep-alive messages to, a proxy
configure voip > gw digitalgw server associated with Trunk Group ID 1 if all its member trunks are
digital-gw-parameters > down.
trunk-status-reporting [0] Disable (default) = Device responds to SIP OPTIONS
[TrunkStatusReportingMode] messages from, and sends keep-alive messages to, a proxy server
associated with Trunk Group ID 1 if all its member trunks are down.
[1] Don’t reply OPTIONS = The device does not respond to SIP
OPTIONS received from the proxy associated with Trunk Group 1
when all its trunks are down.
[2] Don’t send Keep-Alive = The device does not send keep-alive
messages to the proxy associated with Trunk Group 1 when all its
trunks are down.
[3] Don’t Reply and Send = Both options [1] and [2] are applied.
Note:
When the parameter is set to not respond to SIP OPTIONS
received from the proxy, it is applicable only if the OPTIONS
message does not include a user part in the Request-URI.
The proxy server is determined by the Proxy Set that is associated
with the Serving IP Group defined for the Trunk Group in the Trunk
Group Settings table.
TDM Over IP Minimum Calls Defines the minimal number of SIP dialogs that must be established
Parameter Description
For Trunk Activation when using TDM Tunneling, for the specific trunk to be considered
[TDMOverIPMinCallsForTru active.
nkActivation] When using TDM Tunneling, if calls from this defined number of B-
channels pertaining to a specific Trunk fail (i.e., SIP dialogs are not
correctly set up), an AIS alarm is sent on this trunk toward the PSTN
and all current calls are dropped. The originator gateway continues the
INVITE attempts. When this number of calls succeed (i.e., SIP dialogs
are correctly set up), the AIS alarm is cleared.
The valid range is 0 to 31. The default is 0 (i.e., don't send AIS
alarms).
[TDMoIPInitiateInviteTime] Defines the time (in msec) between the first INVITE issued within the
same trunk when implementing the TDM tunneling application.
The valid value range is 500 to 1000. The default is 500.
[TDMoIPInviteRetryTime] Defines the time (in msec) between call release and a new INVITE
when implementing the TDM tunneling application.
The valid value range is 10,000 to 20,000. The default is 10,000.
Fax Signaling Method Global parameter defining the SIP signaling method for establishing
fax-sig-method and transmitting a fax session when the device detects a fax.
[IsFaxUsed] You can also configure this functionality per specific calls, using IP
Profiles (IpProfile_IsFaxUsed) and Tel Profiles
(TelProfile_IsFaxUsed). For a detailed description of the parameter,
see 'Configuring IP Profiles' on page 433 and Configuring Tel Profiles
on page 467.
Note: If this functionality is configured for a specific IP Profile or Tel
Profile, the settings of this global parameter is ignored for calls
associated with the IP Profile or Tel Profile.
fax-vbd-behvr Determines the device's fax transport behavior when G.711 VBD
[FaxVBDBehavior] coder is negotiated at call start.
[0] = (Default) If the device is configured with a VBD coder (see the
CodersGroup parameter) and is negotiated OK at call start, then
both fax and modem signals are sent over RTP using the bypass
payload type (and no mid-call VBD or T.38 Re-INVITEs occur).
[1] = If the IsFaxUsed parameter is set to 1, the channel opens with
the FaxTransportMode parameter set to 1 (relay). This is required
to detect mid-call fax tones and to send T.38 Re-INVITE messages
upon fax detection. If the remote party supports T.38, the fax is
relayed over T.38.
Note:
If VBD coder negotiation fails at call start and if the IsFaxUsed
parameter is set to 1 (or 3), then the channel opens with the
FaxTransportMode parameter set to 1 (relay) to allow future
detection of fax tones and sending of T.38 Re-INVITES. In such a
scenario, the FaxVBDBehavior parameter has no effect.
This feature can be used only if the remote party supports T.38 fax
relay; otherwise, the fax fails.
[NoAudioPayloadType] Defines the payload type of the outgoing SDP offer.
The valid value range is 96 to 127 (dynamic payload type). The default
Parameter Description
is 0 (i.e. NoAudio is not supported). For example, if set to 120, the
following is added to the INVITE SDP:
a=rtpmap:120 NoAudio/8000\r\n
Note: For incoming SDP offers, NoAudio is always supported.
SIP Transport Type Determines the default transport layer for outgoing SIP calls initiated
configure voip > sip- by the device.
definition settings > app-sip- [0] UDP (default)
transport-type [1] TCP
[SIPTransportType] [2] TLS (SIPS)
Note:
It's recommended to use TLS for communication with a SIP Proxy
and not for direct device-to-device communication.
For received calls (i.e., incoming), the device accepts all these
protocols.
Display Default SIP Port Enables the device to add the default SIP port 5060 (UDP/TCP) or
configure voip > sip- 5061 (TLS) to outgoing messages that are received without a port.
definition settings > display- This condition also applies to manipulated messages where the
default-sip-port resulting message has no port number. The device adds the default
port number to the following SIP headers: Request-Uri, To, From, P-
[DisplayDefaultSIPPort]
Asserted-Identity, P-Preferred-Identity, and P-Called-Party-ID. If the
message is received with a port number other than the default, for
example, 5070, the port number is not changed.
An example of a SIP From header with the default port is shown
below:
From:
<sip:+4000@10.8.4.105:5060;user=phone>;tag=f25419a
96a;epid=009FAB8F3E
[0] Disable (default)
[1] Enable
Enable SIPS Enables secured SIP (SIPS URI) connections over multiple hops.
configure voip > sip- [0] Disable (default)
definition settings > enable- [1] Enable
sips When the SIPTransportType parameter is set to 2 (i.e., TLS) and the
[EnableSIPS] parameter EnableSIPS is disabled, TLS is used for the next network
hop only. When the parameter SIPTransportType is set to 2 or 1 (i.e.,
TCP or TLS) and EnableSIPS is enabled, TLS is used through the
entire connection (over multiple hops).
Note: If the parameter is enabled and the parameter
SIPTransportType is set to 0 (i.e., UDP), the connection fails.
TCP/TLS Connection Reuse Enables the reuse of an established TCP or TLS connection between
tcp-conn-reuse the device and a SIP user agent (UA) for subsequent SIP requests
sent to the UA. Any new out-of-dialog requests (e.g., INVITE or
[EnableTCPConnectionReus
REGISTER) use the same secured connection. One of the benefits of
e]
enabling the parameter is that it may improve performance by
eliminating the need for additional TCP/TLS handshakes with the UA,
allowing sessions to be established rapidly.
[0] Disable = The device uses a new TCP or TLS connection with
the UA.
[1] Enable = (Default) The device uses the same TCP or TLS
Parameter Description
connection for all SIP requests with the UA.
Note: For SIP responses, the device always uses the same TCP/TLS
connection, regardless of the parameter settings.
Fake TCP alias Enables the re-use of the same TCP/TLS connection for sessions with
configure voip > sip- the same user, even if the "alias" parameter is not present in the SIP
definition settings > fake-tcp- Via header of the first INVITE.
alias [0] Disable = (Default) TCP/TLS connection reuse is done only if
[FakeTCPalias] the "alias" parameter is present in the Via header of the first
INVITE.
[1] Enable
Note: To enable TCP/TLS connection re-use, set the
EnableTCPConnectionReuse parameter to 1.
Reliable Connection Enables setting of all TCP/TLS connections as persistent and
Persistent Mode therefore, not released.
configure voip > sip- [0] = (Default) Disable. All TCP connections (except those that are
definition settings > reliable- set to a proxy IP) are released if not used by any SIP
conn-persistent dialog\transaction.
[ReliableConnectionPersiste [1] = Enable - TCP connections to all destinations are persistent
ntMode] and not released unless the device reaches 70% of its maximum
TCP resources.
While trying to send a SIP message connection, reuse policy
determines whether live connections to the specific destination are re-
used.
Persistent TCP connection ensures less network traffic due to fewer
setting up and tearing down of TCP connections and reduced latency
on subsequent requests due to avoidance of initial TCP handshake.
For TLS, persistent connection may reduce the number of costly TLS
handshakes to establish security associations, in addition to the initial
TCP connection set up.
Note: If the destination is a Proxy server, the TCP/TLS connection is
persistent regardless of the settings of the parameter.
TCP Timeout Defines the Timer B (INVITE transaction timeout timer) and Timer F
configure voip > sip- (non-INVITE transaction timeout timer), as defined in RFC 3261, when
definition settings > tcp- the SIP transport type is TCP.
timeout The valid range is 0 to 40 sec. The default is 64 * SipT1Rtx parameter
[SIPTCPTimeout] value. For example, if SipT1Rtx is set to 500 msec, then the default of
SIPTCPTimeout is 32 sec.
SIP Destination Port Defines the SIP destination port for sending initial SIP requests.
configure voip > sip- The valid range is 1 to 65534. The default port is 5060.
definition settings > sip-dst- Note: SIP responses are sent to the port specified in the Via header.
port
[SIPDestinationPort]
Use user=phone in SIP URL Determines whether the 'user=phone' string is added to the SIP URI
configure voip > sip- and SIP To header.
definition settings > [0] No = 'user=phone' string is not added.
user=phone-in-url [1] Yes = (Default) 'user=phone' string is part of the SIP URI and
[IsUserPhone] SIP To header.
Use user=phone in From Determines whether the 'user=phone' string is added to the From and
Header Contact SIP headers.
Parameter Description
configure voip > sip- [0] No = (Default) Doesn't add 'user=phone' string.
definition settings > phone- [1] Yes = 'user=phone' string is part of the From and Contact
in-from-hdr headers.
[IsUserPhoneInFrom]
Use Tel URI for Asserted Determines the format of the URI in the P-Asserted-Identity and P-
Identity Preferred-Identity headers.
configure voip > sip- [0] Disable = (Default) 'sip:'
definition settings > uri-for- [1] Enable = 'tel:'
assert-id
[UseTelURIForAssertedID]
Tel to IP No Answer Timeout Defines the time (in seconds) that the device waits for a 200 OK
configure voip > gateway response from the called party (IP side) after sending an INVITE
advanced > tel2ip-no-ans- message, for Tel-to-IP calls. If the timer expires, the call is released.
timeout The valid range is 0 to 3600. The default is 180.
[IPAlertTimeout]
Enable Remote Party ID Enables Remote-Party-Identity headers for calling and called numbers
configure voip > sip- for Tel-to-IP calls.
definition settings > remote- [0] Disable (default).
party-id [1] Enable = Remote-Party-Identity headers are generated in SIP
[EnableRPIheader] INVITE messages for both called and calling numbers.
Enable History-Info Header Enables usage of the SIP History-Info header.
configure voip > sip- [0] Disable (default)
definition settings > hist-info- [1] Enable
hdr
User Agent Client (UAC) Behavior:
[EnableHistoryInfo] Initial request: The History-Info header is equal to the Request-URI.
If a PSTN Redirect number is received, it is added as an additional
History-Info header with an appropriate reason.
Upon receiving the final failure response, the device copies the
History-Info as is, adds the reason of the failure response to the
last entry, and concatenates a new destination to it (if an additional
request is sent). The order of the reasons is as follows:
a. Q.850 Reason
b. SIP Reason
c. SIP Response code
Upon receiving the final response (success or failure), the device
searches for a Redirect reason in the History-Info (i.e., 3xx/4xx SIP
reason). If found, it is passed to ISDN according to the following
table:
SIP Reason Code ISDN Redirecting Reason
302 - Moved Temporarily Call Forward Universal (CFU)
408 - Request Timeout Call Forward No Answer (CFNA)
Parameter Description
reason (according to the SIP-ISDN tables) and then to ISDN
Redirect reason according to the table above.
User Agent Server (UAS) Behavior:
The History-Info header is sent only in the final response.
Upon receiving a request with History-Info, the UAS checks the
policy in the request. If a 'session', 'header', or 'history' policy tag is
found, the (final) response is sent without History-Info; otherwise, it
is copied from the request.
Use Tgrp Information Enables the use of the SIP 'tgrp' parameter. This parameter specifies
configure voip > sip- the Trunk Group to which the call belongs (according to RFC 4904).
definition settings > use-tgrp- For example, the SIP message below indicates that the call belongs to
inf Trunk Group ID 1:
[UseSIPTgrp] INVITE sip::+16305550100;tgrp=1;trunk-
context=example.com@10.1.0.3;user=phone SIP/2.0
[0] Disable = (Default) The 'tgrp' parameter isn't used.
[1] Send Only = The Trunk Group number or name (configured in
the Trunk Group Settings table) is added to the 'tgrp' parameter
value in the Contact header of outgoing SIP messages. If a Trunk
Group number / name is not associated with the call, the 'tgrp'
parameter isn't included. If a 'tgrp' value is specified in incoming
messages, it is ignored.
[2] Send and Receive = The functionality of outgoing SIP
messages is identical to the functionality described for option [1]. In
addition, for incoming SIP INVITEs (IP-to-Tel), if the Request-URI
includes a 'tgrp' parameter, the device routes the call according to
that value (if possible). The Contact header in the outgoing SIP
INVITE (Tel-to-IP call) contains "tgrp=<source trunk group
ID>;trunk-context=<gateway IP address>”. The <source trunk
group ID> is the Trunk Group ID where incoming calls from Tel is
received. For IP-to-Tel calls, the SIP 200 OK device's response
contains “tgrp=<destination trunk group ID>;trunk-
context=<gateway IP address>”. The <destination trunk group ID>
is the Trunk Group ID used for outgoing Tel calls. The <gateway IP
address> in “trunk-context” can be configured using the
SIPGatewayName parameter.
[3] Hotline = Interworks the hotline "Off Hook Indicator" parameter
between SIP and ISDN.
IP-to-ISDN calls:
- The device interworks the SIP tgrp=hotline parameter
(received in INVITE) to ISDN Setup with the Off Hook Indicator
IE of “Voice”, and “Speech” Bearer Capability IE. Note that the
Off Hook Indicator IE is described in UCR 2008 specifications.
- The device interworks the SIP tgrp=hotline-ccdata parameter
(received in INVITE) to ISDN Setup with an Off Hook Indicator
IE of “Data”, and with “Unrestricted 64k” Bearer Capability IE.
The following is an example of the INVITE with tgrp=hotline-
ccdata:
INVITE sip:1234567;tgrp=hotline-ccdata;trunk-
context=dsn.mil@example.com
ISDN-to-IP calls:
- The device interworks ISDN Setup with an Off Hook Indicator
of “Voice” to SIP INVITE with “tgrp=hotline;trunk-
context=dsn.mil” in the Contact header.
- The device interworks ISDN Setup with an Off Hook indicator
Parameter Description
of “Data” to SIP INVITE with “tgrp=hotline-ccdata;trunk-
context=dsn.mil” in the Contact header.
- If ISDN Setup does not contain an Off Hook Indicator IE and
the Bearer Capability IE contains “Unrestricted 64k”, the
outgoing INVITE includes “tgrp=ccdata;trunk-context=dsn.mil”.
If the Bearer Capability IE contains “Speech”, the INVITE in
this case does not contain tgrp and trunk-context parameters.
[4] Hotline Extended = Interworks the ISDN Setup message’s
hotline "OffHook Indicator" Information Element (IE) to SIP
INVITE’s Request-URI and Contact headers. (Note: For IP-to-ISDN
calls, the device handles the call as described in option [3].)
The device interworks ISDN Setup with an Off Hook Indicator
of “Voice” to SIP INVITE Request-URI and Contact header with
“tgrp=hotline;trunk-context=dsn.mil”.
The device interworks ISDN Setup with an Off Hook indicator
of “Data” to SIP INVITE Request-URI and Contact header with
“tgrp=hotline-ccdata;trunk-context=dsn.mil”.
If ISDN Setup does not contain an Off Hook Indicator IE and
the Bearer Capability IE contains “Unrestricted 64k”, the
outgoing INVITE Request-URI and Contact header includes
“tgrp=ccdata;trunk-context=dsn.mil”. If the Bearer Capability IE
contains “Speech”, the INVITE in this case does not contain
tgrp and trunk-context parameters.
Note: IP-to-Tel configuration (using the PSTNPrefix parameter)
overrides the 'tgrp' parameter in incoming INVITE messages.
TGRP Routing Precedence Determines the precedence method for routing IP-to-Tel calls -
configure voip > gateway according to the IP-to-Tel Routing table or according to the SIP 'tgrp'
routing settings > tgrp- parameter.
routing-prec [0] = (Default) IP-to-Tel routing is determined by the IP-to-Tel
[TGRProutingPrecedence] Routing table (PSTNPrefix parameter). If a matching rule is not
found in this table, the device uses the Trunk Group parameters for
routing the call.
[1] = The device first places precedence on the 'tgrp' parameter for
IP-to-Tel routing. If the received INVITE Request-URI does not
contain the 'tgrp' parameter or if the Trunk Group number is not
defined, the IP-to-Tel Routing table is used for routing the call.
Below is an example of an INVITE Request-URI with the 'tgrp'
parameter, indicating that the IP call should be routed to Trunk Group
7:
INVITE sip:200;tgrp=7;trunk-
context=example.com@10.33.2.68;user=phone SIP/2.0
Note:
For enabling routing based on the 'tgrp' parameter, the UseSIPTgrp
parameter must be set to 2.
For IP-to-Tel routing based on the 'dtg' parameter (instead of the
'tgrp' parameter), use the parameter UseBroadsoftDTG.
configure voip > sip- Determines whether the device uses the 'dtg' parameter for routing IP-
definition settings > use-dtg to-Tel calls to a specific Trunk Group.
[UseBroadsoftDTG] [0] Disable (default)
[1] Enable
When the parameter is enabled, if the Request-URI in the received
Parameter Description
SIP INVITE includes the 'dtg' parameter, the device routes the call to
the Trunk Group according to its value. The parameter is used instead
of the 'tgrp/trunk-context' parameters. The 'dtg' parameter appears in
the INVITE Request-URI (and in the To header).
For example, the received SIP message below routes the call to Trunk
Group ID 56:
INVITE sip:123456@192.168.1.2;dtg=56;user=phone SIP/2.0
Note: If the Trunk Group is not found based on the 'dtg' parameter,
the IP-to-Tel Routing table is used instead for routing the call to the
appropriate Trunk Group.
Enable GRUU Determines whether the Globally Routable User Agent URIs (GRUU)
configure voip > sbc settings mechanism is used, according to RFC 5627. This is used for obtaining
> enable-gruu a GRUU from a registrar and for communicating a GRUU to a peer
within a dialog.
[EnableGRUU]
[0] Disable (default)
[1] Enable
A GRUU is a SIP URI that routes to an instance-specific UA and can
be reachable from anywhere. There are a number of contexts in which
it is desirable to have an identifier that addresses a single UA (using
GRUU) rather than the group of UA’s indicated by an Address of
Record (AOR). For example, in call transfer where user A is talking to
user B, and user A wants to transfer the call to user C. User A sends a
REFER to user C:
REFER sip:C@domain.com SIP/2.0
From: sip:A@domain.com;tag=99asd
To: sip:C@domain.com
Refer-To: (URI that identifies B's UA)
The Refer-To header needs to contain a URI that user C can use to
place a call to user B. This call needs to route to the specific UA
instance that user B is using to talk to user A. User B should provide
user A with a URI that has to be usable by anyone. It needs to be a
GRUU.
Obtaining a GRUU: The mechanism for obtaining a GRUU is
through registrations. A UA can obtain a GRUU by generating a
REGISTER request containing a Supported header field with the
value “gruu”. The UA includes a “+sip.instance” Contact header
parameter of each contact for which the GRUU is desired. This
Contact parameter contains a globally unique ID that identifies the
UA instance. The global unique ID is created from one of the
following:
If the REGISTER is per the device’s client (endpoint), it is the
MAC address concatenated with the phone number of the
client.
If the REGISTER is per device, it is the MAC address only.
When using TP, “User Info” can be used for registering per
endpoint. Thus, each endpoint can get a unique id – its phone
number. The globally unique ID in TP is the MAC address
concatenated with the phone number of the endpoint.
If the remote server doesn’t support GRUU, it ignores the parameters
of the GRUU. Otherwise, if the remote side also supports GRUU, the
REGISTER responses contain the “gruu” parameter in each Contact
header. The parameter contains a SIP or SIPS URI that represents a
GRUU corresponding to the UA instance that registered the contact.
Parameter Description
The server provides the same GRUU for the same AOR and instance-
id when sending REGISTER again after registration expiration. RFC
5627 specifies that the remote target is a GRUU target if its’ Contact
URL has the "gr" parameter with or without a value.
Using GRUU: The UA can place the GRUU in any header field that
can contain a URI. It must use the GRUU in the following
messages: INVITE request, its 2xx response, SUBSCRIBE
request, its 2xx response, NOTIFY request, REFER request and its
2xx response.
[IsCiscoSCEMode] Determines whether a Cisco gateway exists at the remote side.
[0] = (Default) No Cisco gateway exists at the remote side.
[1] = A Cisco gateway exists at the remote side.
When a Cisco gateway exists at the remote side, the device must set
the value of the 'annexb' parameter of the fmtp attribute in the SDP to
'no'. This logic is used if the Silence Suppression is set to 2 (enable
without adaptation). In this case, Silence Suppression is used on the
channel but not declared in the SDP.
Note: The IsCiscoSCEMode parameter is applicable only when the
selected coder is G.729.
User-Agent Information Defines the string that is used in the SIP User-Agent and Server
configure voip > sip- response headers. When configured, the string
definition settings > user- <UserAgentDisplayInfo value>/software version' is used, for example:
agent-info User-Agent: myproduct/v.7.20A.000.038
[UserAgentDisplayInfo] If not configured, the default string, <AudioCodes product-
name>/software version' is used, for example:
User-Agent: Audiocodes-Sip-Gateway-Mediant 500 E-
SBC/v.7.20A.000.038
The maximum string length is 50 characters.
Note: The software version number and preceding forward slash (/)
cannot be modified. Therefore, it is recommended not to include a
forward slash in the parameter's value (to avoid two forward slashes in
the SIP header, which may cause problems).
SDP Session Owner Defines the value of the Owner line ('o' field) in outgoing SDP
configure voip > sip- messages.
definition settings > sdp- The valid range is a string of up to 39 characters. The default is
session-owner "AudiocodesGW".
[SIPSDPSessionOwner] For example:
o=AudiocodesGW 1145023829 1145023705 IN IP4
10.33.4.126
Note: For the SBC application, the parameter is applicable only when
the device creates a new SIP message (and SDP) such as when the
device plays a ringback tone. The parameter is not applicable to SIP
messages that the device receives from one end and sends to another
(i.e., does not modify the SDP's 'o' field).
configure voip > sip- Enables the device to ignore new SDP re-offers (from the media
definition settings > sdp-ver- negotiation perspective) in certain scenarios (such as session
nego expires). According to RFC 3264, once an SDP session is established,
[EnableSDPVersionNegotiati a new SDP offer is considered a new offer only when the SDP origin
on] value is incremented. In scenarios such as session expires, SDP
Parameter Description
negotiation is irrelevant and thus, the origin field is not changed.
Even though some SIP devices don’t follow this behavior and don’t
increment the origin value even in scenarios where they want to re-
negotiate, the device can assume that the remote party operates
according to RFC 3264, and in cases where the origin field is not
incremented, the device does not re-negotiate SDP capabilities.
[0] Disable = (Default) The device negotiates any new SDP re-
offer, regardless of the origin field.
[1] Enable = The device negotiates only an SDP re-offer with an
incremented origin field.
Subject Defines the Subject header value in outgoing INVITE messages. If not
configure voip > sip- specified, the Subject header isn't included (default).
definition settings > usr-def- The maximum length is up to 50 characters.
subject
[SIPSubject]
configure voip > sip- Defines the priority for coder negotiation in the incoming SDP offer,
definition settings > coder- between the device's or remote UA's coder list.
priority-nego [0] = (Default) Coder negotiation is given higher priority to the
[CoderPriorityNegotiation] remote UA's list of supported coders.
[1] = Coder negotiation is given higher priority to the device's (local)
supported coders list.
Note: The parameter is applicable only to the Gateway application.
Send All Coders on Retrieve Enables coder re-negotiation in the sent re-INVITE for retrieving an
configure voip > gateway on-hold call.
dtmf-supp-service supp- [0] Disable = (Default) Sends only the initially chosen coder when
service-settings > send-all- the call was first established and then put on-hold.
cdrs-on-rtrv [1] Enable = Includes all supported coders in the SDP of the re-
[SendAllCodersOnRetrieve] INVITE sent to the call made un-hold (retrieved). The used coder is
therefore, re-negotiated.
The parameter is useful in the following call scenario example:
1 Party A calls party B and coder G.711 is chosen.
2 Party B is put on-hold while Party A blind transfers Party B to Party
C.
3 Party C answers and Party B is made un-hold. However, as Party
C supports only G.729 coder, re-negotiation of the supported coder
is required.
Note: The parameter is applicable only to the Gateway application.
Multiple Packetization Time Determines whether the 'mptime' attribute is included in the outgoing
Format SDP.
configure voip > sip- [0] None = (Default) Disabled.
definition settings > mult- [1] PacketCable = Includes the 'mptime' attribute in the outgoing
ptime-format SDP - PacketCable-defined format.
[MultiPtimeFormat] The mptime' attribute enables the device to define a separate
packetization period for each negotiated coder in the SDP. The
'mptime' attribute is only included if the parameter is enabled even if
the remote side includes it in the SDP offer. Upon receipt, each coder
receives its 'ptime' value in the following precedence: from 'mptime'
attribute, from 'ptime' attribute, and then from default value.
configure voip > sip- Determines whether the 'ptime' attribute is included in the SDP.
Parameter Description
definition settings > enable- [0] = Remove the 'ptime' attribute from SDP.
ptime [1] = (Default) Include the 'ptime' attribute in SDP.
[EnablePtime]
3xx Behavior Determines the device's behavior regarding call identifiers when a 3xx
3xx-behavior response is received for an outgoing INVITE request. The device can
use the same call identifiers (Call-ID, To, and From tags) or change
[3xxBehavior]
them in the new initiated INVITE.
[0] Forward = (Default) Use different call identifiers for a redirected
INVITE message.
[1] Redirect = Use the same call identifiers in the new INVITE as
the original call.
Enable P-Charging Vector Enables the inclusion of the P-Charging-Vector header to all outgoing
p-charging-vector INVITE messages.
[EnablePChargingVector] [0] Disable (default)
[1] Enable
Note: The parameter is applicable only to the Gateway application.
Retry-After Time Defines the time (in seconds) used in the Retry-After header when a
configure voip > sip- 503 (Service Unavailable) response is generated by the device.
definition settings > retry- The time range is 0 to 3,600. The default is 0.
aftr-time
[RetryAfterTime]
Fake Retry After Determines whether the device, upon receipt of a SIP 503 response
fake-retry-after without a Retry-After header, behaves as if the 503 response included
a Retry-After header and with the period (in seconds) specified by the
[FakeRetryAfter]
parameter.
[0] Disable (default)
Any positive value (in seconds) for defining the period
When enabled, this feature allows the device to operate with Proxy
servers that do not include the Retry-After SIP header in SIP 503
(Service Unavailable) responses to indicate an unavailable service.
The Retry-After header is used with the 503 (Service Unavailable)
response to indicate how long the service is expected to be
unavailable to the requesting SIP client. The device maintains a list of
available proxies, by using the Keep-Alive mechanism. The device
checks the availability of proxies by sending SIP OPTIONS every
keep-alive timeout to all proxies.
If the device receives a SIP 503 response to an INVITE, it also marks
that the proxy is out of service for the defined "Retry-After" period.
Enable P-Associated-URI Determines the device usage of the P-Associated-URI header. This
Header header can be received in 200 OK responses to REGISTER requests.
p-associated-uri-hdr When enabled, the first URI in the P-Associated-URI header is used in
subsequent requests as the From/P-Asserted-Identity headers value.
[EnablePAssociatedURIHea
der] [0] Disable (default)
[1] Enable
Note: P-Associated-URIs in registration responses is handled only if
the device is registered per endpoint (using the User Information file).
Source Number Preference Determines from which SIP header the source (calling) number is
configure voip > sip- obtained in incoming INVITE messages.
Parameter Description
definition settings > src-nb- If not configured or if any string other than "From" or "Pai2" is
preference configured, the calling number is obtained from a specific header
[SourceNumberPreference] using the following logic:
a. P-Preferred-Identity header.
b. If the above header is not present, then the first P-Asserted-
Identity header is used.
c. If the above header is not present, then the Remote-Party-ID
header is used.
d. If the above header is not present, then the From header is
used.
"From" = The calling number is obtained from the From header.
"Pai2" = The calling number is obtained using the following logic:
a. If a P-Preferred-Identity header is present, the number is
obtained from it.
b. If no P-Preferred-Identity header is present and two P-
Asserted-Identity headers are present, the number is obtained
from the second P-Asserted-Identity header.
c. If only one P-Asserted-Identity header is present, the calling
number is obtained from it.
Note:
The "From" and "Pai2" values are not case-sensitive.
Once a URL is selected, all the calling party parameters are set
from this header. If P-Asserted-Identity is selected and the Privacy
header is set to 'id', the calling number is assumed restricted.
configure voip > sip- Determines the SIP header used for obtaining the called number
definition settings > src-hdr- (destination) for IP-to-Tel calls.
4-called-nb [0] Request-URI header = (Default) Obtains the destination number
[SelectSourceHeaderForCall from the user part of the Request-URI.
edNumber] [1] To header = Obtains the destination number from the user part
of the To header.
[2] P-Called-Party-ID header = Obtains the destination number
from the P-Called-Party-ID header.
Enable Reason Header Enables the usage of the SIP Reason header.
configure voip > sip- [0] Disable
definition settings > reason- [1] Enable (default)
header
[EnableReasonHeader]
Gateway Name Defines a name for the device (e.g., device123.com). This name is
configure voip > sip- used as the host part of the SIP URI in the From header. If not
definition settings > gw- specified, the device's IP address is used instead (default).
name Note:
[SIPGatewayName] Ensure that the parameter value is the one with which the Proxy
has been configured with to identify the device.
The parameter can also be configured for an IP Group (in the IP
Groups table).
configure voip > sip- Determines the device's response to an incoming SDP that includes
definition settings > zero- an IP address of 0.0.0.0 in the SDP's Connection Information field
sdp-behavior (i.e., "c=IN IP4 0.0.0.0").
[ZeroSDPHandling] [0] = (Default) Sets the IP address of the outgoing SDP's c= field to
0.0.0.0.
[1] = Sets the IP address of the outgoing SDP c= field to the IP
Parameter Description
address of the device. If the incoming SDP doesn’t contain the
"a=inactive" line, the returned SDP contains the "a=recvonly" line.
Enable Delayed Offer Determines whether the device sends the initial INVITE message with
configure voip > sip- or without an SDP. Sending the first INVITE without SDP is typically
definition settings > delayed- done by clients for obtaining the far-end's full list of capabilities before
offer sending their own offer. (An alternative method for obtaining the list of
supported capabilities is by using SIP OPTIONS, which is not
[EnableDelayedOffer]
supported by every SIP agent.)
[0] Disable = (Default) The device sends the initial INVITE
message with an SDP.
[1] Enable = The device sends the initial INVITE message without
an SDP.
configure voip > sip- Enables the device to send "a=crypto" lines without the lifetime
definition settings > parameter in the SDP. For example, if the SDP contains "a=crypto:12
crypto-life-time-in- AES_CM_128_HMAC_SHA1_80
sdp inline:hhQe10yZRcRcpIFPkH5xYY9R1de37ogh9G1MpvNp|2^31", it
[DisableCryptoLifeTimeInSD removes the lifetime parameter "2^31".
P] [0] Disable (default)
[1] Enable
Enable Contact Restriction Determines whether the device sets the Contact header of outgoing
contact-restriction INVITE requests to ‘anonymous’ for restricted calls.
[EnableContactRestriction] [0] Disable (default)
[1] Enable
configure voip > sip- Determines whether the device's IP address is used as the URI host
definition settings > part instead of "anonymous.invalid" in the INVITE's From header for
anonymous-mode Tel-to-IP calls.
[AnonymousMode] [0] = (Default) If the device receives a call from the Tel with blocked
caller ID, it sends an INVITE with
From: “anonymous”<anonymous@anonymous.invalid>
[1] = The device's IP address is used as the URI host part instead
of "anonymous.invalid".
The parameter may be useful, for example, for service providers who
identify their SIP Trunking customers by their source phone number or
IP address, reflected in the From header of the SIP INVITE. Therefore,
even customers blocking their Caller ID can be identified by the
service provider. Typically, if the device receives a call with blocked
Caller ID from the PSTN side (e.g., Trunk connected to a PBX), it
sends an INVITE to the IP with a From header as follows: From:
“anonymous” <anonymous@anonymous.invalid>. This is in
accordance with RFC 3325. However, when the parameter is set to 1,
the device replaces the "anonymous.invalid" with its IP address.
configure voip > sip- Defines a 'representative number' (up to 50 characters) that is used as
definition settings > p-assrtd- the user part of the Request-URI in the P-Asserted-Identity header of
usr-name an outgoing INVITE for Tel-to-IP calls.
[PAssertedUserName] The default is null.
configure voip > sip- Defines the source for the SIP URI set in the Refer-To header of
definition settings > outgoing REFER messages.
use-aor-in-refer-to- [0] = (Default) Use SIP URI from Contact header of the initial call.
header
[1] = Use SIP URI from To/From header of the initial call.
Parameter Description
[UseAORInReferToHeader]
Enable User-Information Enables the usage of the User Information, which is loaded to the
Usage device in the User Information Auxiliary file. For more information on
configure voip > sip- User Information, see 'User Information File' on page 771.
definition settings > user-inf- [0] Disable (default)
usage [1] Enable
[EnableUserInfoUsage] Note: For the parameter to take effect, a device reset is required.
configure voip > sip- Determines whether the device uses the value of the incoming SIP
definition settings > Reason header for Release Reason mapping.
handle-reason-header [0] = Disregard Reason header in incoming SIP messages.
[HandleReasonHeader] [1] = (Default) Use the Reason header value for Release Reason
mapping.
[EnableSilenceSuppInSDP] Determines the device's behavior upon receipt of SIP Re-INVITE
messages that include the SDP's 'silencesupp:off' attribute.
[0] = (Default) Disregard the 'silecesupp' attribute.
[1] = Handle incoming Re-INVITE messages that include the
'silencesupp:off' attribute in the SDP as a request to switch to the
Voice-Band-Data (VBD) mode. In addition, the device includes the
attribute 'a=silencesupp:off' in its SDP offer.
Note: The parameter is applicable only if the G.711 coder is used.
configure voip > sip- Enables the usage of the 'rport' parameter in the Via header.
definition settings > [0] = Disabled (default)
rport-support
[1] = Enabled
[EnableRport]
The device adds an 'rport' parameter to the Via header of each
outgoing SIP message. The first Proxy that receives this message
sets the 'rport' value of the response to the actual port from where the
request was received. This method is used, for example, to enable the
device to identify its port mapping outside a NAT.
If the Via header doesn't include the 'rport' parameter, the destination
port of the response is obtained from the host part of the Via header.
If the Via header includes the 'rport' parameter without a port value,
the destination port of the response is the source port of the incoming
request.
If the Via header includes 'rport' with a port value (e.g., rport=1001),
the destination port of the response is the port indicated in the 'rport'
parmeter.
Enable X-Channel Header Enables the device to add the SIP X-Channel header to outgoing SIP
configure voip > sip- messages. The header provides information on the physical Trunk/B-
definition settings > x- channel on which the call is received or sent.
channel-header [0] Disable = (Default) X-Channel header is not used.
[XChannelHeader] [1] Enable = X-Channel header is generated by the device and sent
in SIP INVITE requests and 180, 183, and 200 OK responses. The
header includes the Trunk number, Bchannel and the device's IP
address, using the following syntax:
x-channel: ds/ds1-<Trunk number>/<B-
channel>;IP=<device's IP address>
For example, the below shows a call on Trunk 1, channel 4 of the
device with IP address 192.168.13.1:
x-channel: ds/ds1-1/4;IP=192.168.13.1
Parameter Description
Progress Indicator to IP Global parameter defining the progress indicator (PI) sent to the IP.
configure voip > sip- You can also configure the functionality per specific calls, using IP
definition settings > prog-ind- Profiles (IpProfile_ProgressIndicator2IP) or Tel Profiles
2ip (TelProfile_ProgressIndicator2IP). For a detailed description of the
[ProgressIndicator2IP] parameter and for configuring the functionality, see Configuring IP
Profiles on page 433 or Configuring Tel Profiles on page 467.
Note: If this functionality is configured for a specific profile, the
settings of this global parameter is ignored for calls associated with
the profile.
[EnableRekeyAfter181] Enables the device to send a re-INVITE with a new (different) SRTP
key (in the SDP) if a SIP 181 response is received ("call is being
forwarded"). The re-INVITE is sent immediately upon receipt of the
200 OK (when the call is answered).
[0] = Disable (default)
[1] = Enable
Note: The parameter is applicable only if SRTP is used.
configure voip > sip- Defines the maximum number of concurrent, outgoing SIP REGISTER
definition settings > dialogs. The parameter is used to control the registration rate.
number-of-active- The valid range is 1 to 20. The default is 20.
dialogs
Note:
[NumberOfActiveDialogs]
Once a 200 OK is received in response to a REGISTER message,
the REGISTER message is not considered in this maximum count
limit.
The parameter applies only to outgoing REGISTER messages (i.e.,
incoming is unlimited).
[TransparentCoderOnDataC [0] = (Default) Only use coders from the coder list.
all] [1] = Use Transparent coder for data calls (according to RFC
4040).
The Transparent coder can be used on data calls. When the device
receives a Setup message from the ISDN with 'TransferCapabilities =
data', it can initiate a call using the coder 'Transparent' (even if the
coder is not included in the coder list).
The initiated INVITE includes the following SDP attribute:
a=rtpmap:97 CLEARMODE/8000
The default payload type is set according to the CodersGroup
parameter. If the Transparent coder is not defined, the default is set to
56. The payload type is negotiated with the remote side, i.e., the
selected payload type is according to the remote side selection. The
receiving device must include the 'Transparent' coder in its coder list.
Network Node ID Defines the Network Node Identifier of the device for Avaya UCID.
configure voip > sip- The valid value range is1 to 0x7FFF. The default is 0.
definition settings > net- Note:
node-id
To use this feature, you must set the parameter to any value other
[NetworkNodeId] than 0.
To enable the generation by the device of the Avaya UCID value
and adding it to the outgoing INVITE sent to the IP Group (Avaya
entity), use the IP Groups table's parameter 'UUI Format'.
Parameter Description
Default Release Cause Defines the default Release Cause (sent to IP) for IP-to-Tel calls when
configure voip > sip- the device initiates a call release and an explicit matching cause for
definition settings > dflt- this release is not found.
release-cse The default release cause is NO_ROUTE_TO_DESTINATION (3).
[DefaultReleaseCause] Other common values include NO_CIRCUIT_AVAILABLE (34),
DESTINATION_OUT_OF_ORDER (27), etc.
Note:
The default release cause is described in the Q.931 notation and is
translated to corresponding SIP 40x or 50x values (e.g., 3 to SIP
404, and 34 to SIP 503).
When the Trunk is disconnected or is not synchronized, the internal
cause is 27. This cause is mapped, by default, to SIP 502.
For mapping SIP-to-Q.931 and Q.931-to-SIP release causes, see
Configuring Release Cause Mapping on page 555.
For a list of SIP responses-Q.931 release cause mapping, see
Alternative Routing to Trunk upon Q.931 Call Release Cause Code
on page 532.
Enable Microsoft Extension Enables the modification of the called and calling number for numbers
configure voip > sip- received with Microsoft's proprietary "ext=xxx" parameter in the SIP
definition settings > INVITE URI user part. Microsoft Office Communications Server
microsoft-ext sometimes uses this proprietary parameter to indicate the extension
number of the called or calling party.
[EnableMicrosoftExt]
[0] Disable (default)
[1] Enable
For example, if a calling party makes a call to telephone number
622125519100 Ext. 104, the device receives the SIP INVITE (from
Microsoft's application) with the URI user part as INVITE
sip:622125519100;ext=104@10.1.1.10 (or INVITE
tel:622125519100;ext=104). If the parameter EnableMicrosofExt is
enabled, the device modifies the called number by adding an "e" as
the prefix, removing the "ext=" parameter, and adding the extension
number as the suffix (e.g., e622125519100104). Once modified, the
device can then manipulate the number further, using the Number
Manipulation tables to leave only the last 3 digits (for example) for
sending to a PBX.
configure voip > sip- Defines the URI format in the SIP Diversion header.
definition settings > [0] = 'tel:' (default)
sip-uri-for-
[1] = 'sip:'
diversion-header
[UseSIPURIForDiversionHea
der]
configure voip > sip- Defines the timeout (in msec) between receiving a 100 Trying
definition settings > response and a subsequent 18x response. If a 18x response is not
100-to-18x-timeout received within this timeout period, the call is disconnected.
[TimeoutBetween100And18x The valid range is 0 to 180,000 (i.e., 3 minutes). The default is 32000
] (i.e., 32 sec).
configure voip > sip- Determines if and when the device sends a 100 Trying in response to
definition settings > an incoming INVITE request.
immediate-trying [0] = 100 Trying response is sent upon receipt of a Proceeding
[EnableImmediateTrying] message from the PSTN
[1] = (Default) 100 Trying response is sent immediately upon
Parameter Description
receipt of INVITE request.
configure voip > sip- Determines the format of the Transparent coder representation in the
definition settings > trans- SDP.
coder-present [0] = clearmode (default)
[TransparentCoderPresentat [1] = X-CCD
ion]
configure voip > sip- Determines whether the device ignores the Master Key Identifier (MKI)
definition settings > if present in the SDP received from the remote side.
ignore-remote-sdp-mki [0] Disable (default)
[IgnoreRemoteSDPMKI] [1] Enable
Comfort Noise Generation Enables negotiation and usage of Comfort Noise (CN) for Gateway
Negotiation calls.
configure voip > media rtp- [0] Disable
rtcp > com-noise-gen-nego [1] Enable (default)
[ComfortNoiseNegotiation] The use of CN is indicated by including a payload type for CN on the
media description line of the SDP. The device can use CN with a
codec whose RTP time stamp clock rate is 8,000 Hz (G.711/G.726).
The static payload type 13 is used. The use of CN is negotiated
between sides. Therefore, if the remote side doesn't support CN, it is
not used. Regardless of the device's settings, it always attempts to
adapt to the remote SIP UA's request for CNG, as described below.
To determine CNG support, the device uses the
ComfortNoiseNegotiation parameter and the codec’s SCE (silence
suppression setting) using the CodersGroup parameter.
If the ComfortNoiseNegotiation parameter is enabled, then the
following occurs:
If the device is the initiator, it sends a “CN” in the SDP only if the
SCE of the codec is enabled. If the remote UA responds with a
“CN” in the SDP, then CNG occurs; otherwise, CNG does not
occur.
If the device is the receiver and the remote SIP UA does not send a
“CN” in the SDP, then no CNG occurs. If the remote side sends a
“CN”, the device attempts to be compatible with the remote side
and even if the codec’s SCE is disabled, CNG occurs.
If the ComfortNoiseNegotiation parameter is disabled, then the device
does not send “CN” in the SDP. However, if the codec’s SCE is
enabled, then CNG occurs.
Note: The parameter is applicable only to the Gateway application.
configure voip > sip- Defines the echo canceller format in the outgoing SDP. The 'ecan'
definition settings > sdp- attribute is used in the SDP to indicate the use of echo cancellation.
ecan-frmt [0] = (Default) The 'ecan' attribute appears on the 'a=gpmd' line.
[SDPEcanFormat] [1] = The 'ecan' attribute appears as a separate attribute.
[2] = The 'ecan' attribute is not included in the SDP.
[3] = The 'ecan' attribute and the 'vbd' parameter are not included
in the SDP.
Note: The parameter is applicable only when the IsFaxUsed
parameter is set to 2, and for re-INVITE messages generated by the
device as result of modem or fax tone detection.
Parameter Description
First Call Ringback Tone ID Defines the index of the first ringback tone in the CPT file. This option
configure voip > sip- enables an Application server to request the device to play a
definition settings > 1st-call- distinctive ringback tone to the calling party according to the
rbt-id destination of the call. The tone is played according to the Alert-Info
header received in the 180 Ringing SIP response (the value of the
[FirstCallRBTId]
Alert-Info header is added to the value of the parameter).
The valid range is -1 to 1,000. The default is -1 (i.e., play standard
ringback tone).
Note:
It is assumed that all ringback tones are defined in sequence in the
CPT file.
In case of an MLPP call, the device uses the value of the
parameter plus 1 as the index of the ringback tone in the CPT file
(e.g., if this value is set to 1, then the index is 2, i.e., 1 + 1).
Enable Reanswering Info The parameter is used for private wire services (see Configuring
configure voip > gateway Private Wiring Interworking on page 489).
advanced > reans-info-enbl [0] Disable (default)
[EnableReansweringINFO] [1] Enable
Note: The parameter is applicable only to E1/T1 CAS.
Reanswer Time Defines the time period the device waits for an MFC R2 Resume
configure voip > sip- (Reanswer) signal once a Suspend (Clear back) signal is received
definition settings > from the PBX. If this timer expires, the call is released. Note that this is
reanswer-time applicable only to the MFC-R2 CAS Brazil variant.
[RegretTime] The valid range is 0 to 255 (in seconds). The default is 0.
Presence Publish IP Group Assigns the IP Group (by ID) configured for the Skype for Business
ID Server (presence server). This is where the device sends SIP
[PresencePublishIPGroupId] PUBLISH messages to notify of changes in presence status of Skype
for Business users when making and receiving calls using third-party
endpoint devices.
For more information on integration with Microsoft presence, see
Microsoft Skype for Business Presence of Third-Party Endpoints on
page 313.
Enable MsPresence Enables the device to notify (using SIP PUBLISH messages) Skype
message for Business Server (presence server) of changes in presence status
[EnableMSPresence] of Skype for Business users when making and receiving calls using
third-party endpoint devices.
[0] Disable (default)
[1] Enable
For more information on integration with Microsoft presence, see
Microsoft Skype for Business Presence of Third-Party Endpoints on
page 313.
PSTN Alert Timeout Defines the Alert Timeout (in seconds) for calls sent to the PSTN. This
configure voip > sip- timer is used between the time a Setup message is sent to the Tel
definition settings > pstn- side (IP-to-Tel call establishment) and a Connect message is
alert-timeout received. If an Alerting message is received, the timer is restarted. If
the timer expires before the call is answered, the device disconnects
[PSTNAlertTimeout]
the call and sends a SIP 408 request timeout response to the SIP
party that initiated the call.
Parameter Description
The valid value range is 1 to 600 (in seconds). The default is 180.
Note: If per trunk configuration (using TrunkPSTNAlertTimeout) is set
to other than default, the PSTNAlertTimeout parameter value is
overridden.
RTP Only Mode Enables the device to send and receive RTP packets to and from
configure voip > sip- remote endpoints without the need to establish a SIP session. The
definition settings > rtp-only- remote IP address is determined according to the Tel-to-IP Routing
mode table (Prefix parameter). The port is the same port as the local RTP
port (configured by the BaseUDPPort parameter and the channel on
[RTPOnlyMode]
which the call is received).
[0] Disable (default)
[1] Transmit & Receive = Send and receive RTP packets.
[2] Transmit Only= Send RTP packets only.
[3] Receive Only= Receive RTP packets only.
Note:
To activate the RTP Only feature without using ISDN / CAS
signaling, you must do the following:
Configure E1/T1 Transparent protocol type (set the
ProtocoType parameter to 5 or 6).
Enable the TDM-over-IP feature (set the EnableTDMoverIP
parameter to 1).
To configure the RTP Only mode per trunk, use the
RTPOnlyModeForTrunk_x parameter.
If per trunk configuration (using the RTPOnlyModeForTrunk_ID
parameter) is set to a value other than the default, the
RTPOnlyMode parameter value is ignored.
[RTPOnlyModeForTrunk_x] Enables the RTP Only feature per trunk. The x in the parameter name
denotes the trunk number, where 0 is Trunk 1. For a description of the
parameter, see the RTPOnlyMode parameter.
Note: For using the global parameter (i.e., setting the RTP Only
feature for all trunks), set the parameter to -1 (default).
Media IP Version Preference Global parameter that defines the preferred RTP media IP addressing
media-ip-ver-pref version (IPv4 or IPv6) for outgoing SIP calls. You can also configure
this functionality per specific calls, using IP Profiles
[MediaIPVersionPreference]
(IpProfile_MediaIPVersionPreference). For a detailed description of
the parameter and for configuring this functionality in the IP Profiles
table, see Configuring IP Profiles on page 433.
SIT Q850 Cause Defines the Q.850 cause value specified in the SIP Reason header
configure voip > sip- that is included in a 4xx response when a Special Information Tone
definition settings > sit-q850- (SIT) is detected on an IP-to-Tel call.
cause The valid range is 0 to 127. The default is 34.
[SITQ850Cause] Note: For mapping specific SIT tones, you can use the
SITQ850CauseForNC, SITQ850CauseForIC, SITQ850CauseForVC,
and SITQ850CauseForRO parameters.
SIT Q850 Cause For NC Defines the Q.850 cause value specified in the SIP Reason header
configure voip > sip- that is included in a 4xx response when SIT-NC (No Circuit Found
definition settings > release- Special Information Tone) is detected from the Tel side for IP-to-Tel
cause-for-sit-nc calls.
[SITQ850CauseForNC] The valid range is 0 to 127. The default is 34.
Parameter Description
Note: When not configured (i.e., default), the SITQ850Cause
parameter is used.
SIT Q850 Cause For IC Defines the Q.850 cause value specified in the SIP Reason header
configure voip > sip- that is included in a 4xx response when SIT-IC (Operator Intercept
definition settings > q850- Special Information Tone) is detected from the Tel for IP-to-Tel calls.
cause-for-sit-ic The valid range is 0 to 127. The default is -1 (not configured).
[SITQ850CauseForIC] Note: When not configured (i.e., default), the SITQ850Cause
parameter is used.
SIT Q850 Cause For VC Defines the Q.850 cause value specified in the SIP Reason header
configure voip > sip- that is included in a 4xx response when SIT-VC (Vacant Circuit - non-
definition settings > q850- registered number Special Information Tone) is detected from the Tel
cause-for-sit-vc for IP-to-Tel calls.
[SITQ850CauseForVC] The valid range is 0 to 127. The default is -1 (not configured).
Note: When not configured (i.e., default), the SITQ850Cause
parameter is used.
SIT Q850 Cause For RO Defines the Q.850 cause value specified in the SIP Reason header
configure voip > sip- that is included in a 4xx response when SIT-RO (Reorder - System
definition settings > q850- Busy Special Information Tone) is detected from the Tel for IP-to-Tel
cause-for-sit-ro calls.
[SITQ850CauseForRO] The valid range is 0 to 127. The default is -1 (not configured).
Note: When not configured (i.e., default), the SITQ850Cause
parameter is used.
configure voip > gateway Selects the Manipulation Set ID for manipulating all inbound INVITE
manipulation settings > messages. The Manipulation Set is defined using the
inbound-map-set MessageManipulations parameter. By default, no manipulation is done
[GWInboundManipulationSet (i.e. Manipulation Set ID is set to -1).
] Note: The parameter is applicable only to the Gateway application.
configure voip > gateway Selects the Manipulation Set ID for manipulating all outbound INVITE
manipulation settings > messages. The Manipulation Set is defined using the
outbound-map-set MessageManipulations parameter. By default, no manipulation is done
[GWOutboundManipulationS (i.e. Manipulation Set ID is set to -1).
et] Note:
The parameter is used only if the Outbound Message Manipulation
Set parameter of the destination IP Group is not set.
The parameter is applicable only to the Gateway application.
WebSocket Keep-Alive Defines how often (in seconds) the device sends ping messages
Period (keep alive) to check whether the WebSocket session with the Web
configure voip > sip- client is still connected.
definition settings > The valid value is 5 to 2000000. The default is 0 (i.e., ping messages
websocket-keepalive are not sent).
[WebSocketProtocolKeepAli Note:
vePeriod] The device always replies to WebSocket ping control messages
with pong messages.
The parameter is applicable only to the SBC application.
Out-of-Service (Busy Out) Parameters
Enable Busy Out Enables the Busy Out feature.
configure voip > sip- [0] Disable (Default)
definition settings > busy-out [1] Enable
Parameter Description
[EnableBusyOut] When enabled and certain scenarios exist, the device does the
following:
All trunks (E1/T1) are automatically taken out-of-service by taking
down the D-Channel, or for T1 PRI trunks, by sending a Service
Out message supporting these messages (NI-2, 4/5-ESS, DMS-
100, and Meridian).
The above behavior is done upon one of the following scenarios:
The device is physically disconnected from the network (i.e.,
Ethernet cable is disconnected).
The Ethernet cable is connected, but the device is unable to
communicate with any host. For this scenario, the LAN Watchdog
feature must be activated (i.e., set the EnableLANWatchDog
parameter to 1).
The device can't communicate with the Proxy Sets (according to
the Proxy Keep-Alive mechanism) associated with the destination
IP Groups for matching routing rules in the Tel-to-IP Routing table,
and no other alternative route exists to send the call.
The IP Connectivity mechanism is enabled (see the
AltRoutingTel2IPEnable parameter) and there is no connectivity to
any destination IP address configured for matching routing rules in
the Tel-to-IP Routing table.
Note:
If the AltRoutingTel2IPEnable parameter is enabled, the Busy Out
feature does not function with the Proxy Set keep-alive mechanism.
To use the Busy Out feature with the Proxy Set keep-alive
mechanism (for IP Groups), disable the AltRoutingTel2IPEnable
parameter.
The Busy Out behavior depends on the PSTN protocol type.
The Busy Out condition is also applied per Trunk Group. This
occurs if there is no connectivity to the Serving IP Group of a
specific Trunk Group (configured in the Trunk Group Settings
table). In such a scenario, all the physical trunks of the Trunk
Group are set to the Busy Out condition. Each trunk uses the out-
of-service method according to the ISDN/CAS variant.
To configure the method for taking trunks/channels out-of-service,
see the DigitalOOSBehaviorForTrunk_x parameter for per trunk or
the DigitalOOSBehavior parameter for all trunks.
Graceful Busy Out Timeout Defines the timeout interval (in seconds) for out-of-service graceful
configure voip > sip- shutdown mode for busy trunks (per trunk) if communication fails with
definition settings > graceful- a Proxy server (or Proxy Set). In such a scenario, the device rejects
bsy-out-t-out new calls from the PSTN (i.e., Serving Trunk Group), but maintains
currently active calls for this user-defined timeout. Once this timeout
[GracefulBusyOutTimeout]
elapses and there are still active calls, the device terminates the calls
and takes the trunk out-of-service (sending the PSTN busy-out signal).
Trunks without any active calls are immediately taken out-of-service
regardless of the timeout.
The parameter is applicable to the locking of Trunk Groups feature
(see Locking and Unlocking Trunk Groups on page 749) and the Busy
Out feature (see the EnableBusyOut parameter), where
trunks/channels are taken out-of-service.
The range is 0 to 3,600. The default is 0.
Parameter Description
Note:
The parameter is applicable only to digital interfaces.
To configure the method for taking trunks/channels out-of-service,
see the DigitalOOSBehaviorForTrunk_x parameter for per trunk or
the DigitalOOSBehavior parameter for all trunks.
Digital Out-Of-Service Defines the method for setting digital trunks to out-of-service state.
Behavior The parameter is defined per trunk. The parameter is applicable to the
configure voip > interface Busy Out feature (see the EnableBusyOut parameter) and the
e1-t1 > dig-oos-behavior Lock/Unlock per Trunk Group feature performed in the Trunk Group
Settings table of the Web interface.
[DigitalOOSBehaviorForTrun
k_x] [-1] Not Configured = (Default) Use the settings of the
DigitalOOSBehavior parameter ("global" parameter that applies to
all trunks).
[0] Default =
ISDN: Sends ISDN Service messages to indicate out-of-
service or in-service state for ISDN variants that support
Service messages. For ISDN variants that do not support
Service messages, the device sends an Alarm Indication
Signal (AIS) alarm.
CAS: Sends an Alarm Indication Signal (AIS) alarm.
[1] Service = (Applicable only to T1 ISDN variants that support this
method) Sends ISDN Service messages indicating out-of-service
or in-service state.
Graceful out-of-service disabled: The device rejects new
incoming calls and immediately takes all channels (idle and
busy) out-of-service, by sending Service messages on the B-
channels. The device disconnects busy channels before it
sends out-of-service Service messages on them.
Graceful out-of-service enabled: The device rejects new
incoming calls. If at least one busy channel exists during the
graceful period, the device immediately takes all idle channels
out-of-service and sends out-of-service Service messages to
the other B-channels as soon as they become idle. When
graceful period ends, the device disconnects all non-idle
channels and then sends out-of-service Service messages to
them.
When connectivity is restored for the Busy Out feature or the Trunk
Group is unlocked, the device brings all the trunks back into service
by sending in-service Service messages to all their B-channels.
[2] D-Channel = (Applicable only to ISDN and fully configured
trunks) Takes the D-channel down or brings it up.
Graceful out-of-service disabled: The device rejects new
incoming calls and immediately takes the D-channel down.
Graceful out-of-service enabled: The device rejects new
incoming calls. Only when all channels are idle (when graceful
period ends or when all channels become idle before graceful
period ends, whichever occurs first), does the device take the
D-channel down.
When connectivity is restored for the Busy Out feature or the Trunk
Group is unlocked, the device brings the D-channels up again.
Note: For partially configured trunks (only some channels
configured), this option only rejects new calls for the trunk; the D-
channel remains up.
Parameter Description
[3] Alarm = Sends or clears a PSTN Alarm Indication Signal (AIS)
alarm.
Graceful out-of-service disabled: The device rejects new
incoming calls and immediately sends an AIS alarm.
Graceful out-of-service enabled: The device rejects new
incoming calls and only when all channels are idle (when
graceful period ends or when all channels become idle before
graceful period ends, whichever occurs first), does the device
send an alarm on the trunk.
When connectivity is restored for the Busy Out feature or the Trunk
Group is unlocked, the device clears the alarm.
Note: For partially configured trunks (only some channels
configured), this option only rejects new calls for the trunk; no
alarm is sent.
[4] Block = (Applicable only to CAS) Blocks the B-channels.
Graceful out-of-service disabled: The device rejects new
incoming calls and immediately blocks all channels (idle and
busy). The device disconnects busy channels before blocking
them.
Graceful out-of-service enabled: The device rejects new
incoming calls. If at least one busy channel exists during the
graceful period, the device immediately blocks all idle
channels, and blocks the other B-channels as soon as they
become idle. When graceful period ends, the device
disconnects all non-idle channels and then blocks them.
When connectivity is restored for the Busy Out feature or the Trunk
Group is unlocked, the device unblocks all the B-channels.
[5] Service and D-Channel = (Applicable only to T1 ISDN variants
that support this method) Sends ISDN Service messages to
indicate out-of-service or in-service state and takes the D-channel
down or brings it up.
Graceful out-of-service disabled:
- Fully configured trunk (all channels): The device rejects new
incoming calls, disconnects busy channels, and takes the D-
channel down.
- Partially configured trunk (only some channels configured):
The device rejects new incoming calls, disconnects busy
channels, and sends out-of-service Service messages to all
the configured channels (D-channel remains up).
Graceful out-of-service enabled: The device rejects new
incoming calls and does the following:
- Fully configured trunk (all channels):
> If all channels are idle when the graceful period begins, the
device immediately takes the channels out-of-service without
sending out-of-service Service messages and instead, only
takes the D-channel down.
> If at least one channel is busy during the graceful period, the
device immediately takes all idle channels out-of-service and
sends out-of-service Service messages to these B-channels.
Thus, the PSTN/PBX side can detect that these calls are in
out-of-service state and does not send new calls to these out-
of-service channels, eliminating the scenario of loss of calls
due to rejection.
Parameter Description
> If a channel is released (call ends) during the graceful period
and there are still other busy channels, the device sends an
out-of-service Service message to the idle channel.
> When the last channel is released in the trunk (or Trunk
Group), the device takes all the channels out-of-service (locks
the Trunk Group) without sending an out-of-service Service
message; instead, it only takes the D-channel down. The
device disconnects busy channels before it takes the D-
channel down.
When connectivity is restored for the Busy Out feature or the
Trunk Group is unlocked, the device brings the D-channel up
again without sending any Service messages to the B-
channels.
- Partially configured trunk (only some channels configured):
Same as above, but the D-channel remains up and out-of-
service Service message is sent to remaining busy channels.
Note:
The parameter is applicable only to digital interfaces.
When configuring out-of-service behavior per trunk
(DigitalOOSBehaviorForTrunk_x), you must stop the trunk (Stop
Trunk button in the Trunk Settings page), configure the parameter,
and then restart the trunk (Apply Trunk Settings button in the Trunk
Settings page) for the settings to take effect.
To define out-of-service behavior for all trunks (globally), see the
DigitalOOSBehavior parameter.
For locking/unlocking Trunk Groups in the Trunk Group Settings
table, see Configuring Trunk Group Settings on page 503.
For a description of the Busy Out feature and for enabling the
feature, see the EnableBusyOut parameter.
To configure the graceful out-of-service period, see the
GracefulBusyOutTimeout parameter.
If the ISDN variant does not support the configured out-of-service
option of the parameter, the device sets the parameter to Default
[0].
The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
Digital Out-Of-Service Defines the method for setting all digital trunks to out-of-service state.
Behavior To configure the out-of-service method per trunk, see the
dig-oos-behavior DigitalOOSBehaviorForTrunk_x parameter.
[DigitalOOSBehavior] [0] Default = (Default) For a detailed description, see option [0] of
the DigitalOOSBehaviorForTrunk_x parameter (per trunk setting).
[1] Service = Sends an ISDN Service message indicating out-of-
service state (or in-service). For a detailed description, see option
[1] of the DigitalOOSBehaviorForTrunk_x parameter (per trunk
setting).
[2] D-Channel = Takes the D-Channel down or brings it up. For a
detailed description, see option [2] of the
DigitalOOSBehaviorForTrunk_x parameter (per trunk setting).
[3] Alarm = Sends or clears a PSTN Alarm Indication Signal (AIS)
alarm. For a detailed description, see option [3] of the
DigitalOOSBehaviorForTrunk_x parameter (per trunk setting).
[4] Block = Blocks the trunk. For a detailed description, see option
[4] of the DigitalOOSBehaviorForTrunk_x parameter (per trunk
Parameter Description
setting).
[5] Service and D-Channel = Sends ISDN Service messages to
indicate out-of-service or in-service state and takes the D-channel
down or brings it up. For a detailed description, see option [5] of
the DigitalOOSBehaviorForTrunk_x parameter (per trunk setting).
Note:
The parameter is applicable only to digital interfaces.
When using the parameter to configure out-of-service behavior for
all trunks, you must reset the device for the settings to take effect.
If the ISDN variant does not support the configured out-of-service
option of the parameter, the device sets the parameter to Default
[0].
Retransmission Parameters
SIP T1 Retransmission Defines the time interval (in msec) between the first transmission of a
Timer SIP message and the first retransmission of the same message.
configure voip > sip- The default is 500.
definition settings > t1-re-tx- Note: The time interval between subsequent retransmissions of the
time same SIP message starts with SipT1Rtx. For INVITE requests, it is
[SipT1Rtx] multiplied by two for each new retransmitted message. For all other
SIP messages, it is multiplied by two until SipT2Rtx. For example,
assuming SipT1Rtx = 500 and SipT2Rtx = 4000:
The first retransmission is sent after 500 msec.
The second retransmission is sent after 1000 (2*500) msec.
The third retransmission is sent after 2000 (2*1000) msec.
The fourth retransmission and subsequent retransmissions until
SIPMaxRtx are sent after 4000 (2*2000) msec.
SIP T2 Retransmission Defines the maximum interval (in msec) between retransmissions of
Timer SIP messages (except for INVITE requests).
configure voip > sip- The default is 4000.
definition settings > t2-re-tx- Note: The time interval between subsequent retransmissions of the
time same SIP message starts with SipT1Rtx and is multiplied by two until
[SipT2Rtx] SipT2Rtx.
SIP Maximum RTX Defines the maximum number of UDP transmissions of SIP messages
configure voip > sip- (first transmission plus retransmissions).
definition settings > sip-max- The range is 1 to 30. The default is 7.
rtx
[SIPMaxRtx]
Number of RTX Before Hot- Defines the number of retransmitted INVITE/REGISTER messages
Swap before the call is routed (hot swap) to another Proxy/Registrar.
configure voip > sip- The valid range is 1 to 30. The default is 3.
definition proxy-and- For example, if configured to 3 and no response is received from an IP
registration > nb-of-rtx-b4- destination, the device attempts another three times to send the call to
hot-swap the IP destination. If still unsuccessful, it attempts to redirect the call to
[HotSwapRtx] another IP destination.
Note: The parameter is also used for alternative routing (see
'Alternative Routing Based on IP Connectivity' on page 526.
SIP Message Manipulations Table
Parameter Description
Parameter Description
Parameter Description
IP Profiles Table
IP Profiles Defines the IP Profiles table. The format of the ini file table parameter is
configure voip > coders- as follows:
and-profiles ip-profile [IPProfile]
[IPProfile] FORMAT IpProfile_Index = IpProfile_ProfileName,
IpProfile_IpPreference, IpProfile_CodersGroupName,
IpProfile_IsFaxUsed, IpProfile_JitterBufMinDelay,
IpProfile_JitterBufOptFactor, IpProfile_IPDiffServ,
IpProfile_SigIPDiffServ, IpProfile_RTPRedundancyDepth,
IpProfile_CNGmode, IpProfile_VxxTransportType, IpProfile_NSEMode,
IpProfile_IsDTMFUsed, IpProfile_PlayRBTone2IP,
IpProfile_EnableEarlyMedia, IpProfile_ProgressIndicator2IP,
IpProfile_EnableEchoCanceller, IpProfile_CopyDest2RedirectNumber,
IpProfile_MediaSecurityBehaviour, IpProfile_CallLimit,
IpProfile_DisconnectOnBrokenConnection, IpProfile_FirstTxDtmfOption,
IpProfile_SecondTxDtmfOption, IpProfile_RxDTMFOption,
IpProfile_EnableHold, IpProfile_InputGain, IpProfile_VoiceVolume,
IpProfile_AddIEInSetup, IpProfile_SBCExtensionCodersGroupName,
IpProfile_MediaIPVersionPreference, IpProfile_TranscodingMode,
IpProfile_SBCAllowedMediaTypes,
Parameter Description
IpProfile_SBCAllowedAudioCodersGroupName,
IpProfile_SBCAllowedVideoCodersGroupName,
IpProfile_SBCAllowedCodersMode,
IpProfile_SBCMediaSecurityBehaviour,
IpProfile_SBCRFC2833Behavior, IpProfile_SBCAlternativeDTMFMethod,
IpProfile_SBCSendMultipleDTMFMethods, IpProfile_SBCAssertIdentity,
IpProfile_AMDSensitivityParameterSuit, IpProfile_AMDSensitivityLevel,
IpProfile_AMDMaxGreetingTime,
IpProfile_AMDMaxPostSilenceGreetingTime,
IpProfile_SBCDiversionMode, IpProfile_SBCHistoryInfoMode,
IpProfile_EnableQSIGTunneling, IpProfile_SBCFaxCodersGroupName,
IpProfile_SBCFaxBehavior, IpProfile_SBCFaxOfferMode,
IpProfile_SBCFaxAnswerMode, IpProfile_SbcPrackMode,
IpProfile_SBCSessionExpiresMode,
IpProfile_SBCRemoteUpdateSupport,
IpProfile_SBCRemoteReinviteSupport,
IpProfile_SBCRemoteDelayedOfferSupport,
IpProfile_SBCRemoteReferBehavior, IpProfile_SBCRemote3xxBehavior,
IpProfile_SBCRemoteMultiple18xSupport,
IpProfile_SBCRemoteEarlyMediaResponseType,
IpProfile_SBCRemoteEarlyMediaSupport,
IpProfile_EnableSymmetricMKI, IpProfile_MKISize,
IpProfile_SBCEnforceMKISize, IpProfile_SBCRemoteEarlyMediaRTP,
IpProfile_SBCRemoteSupportsRFC3960,
IpProfile_SBCRemoteCanPlayRingback, IpProfile_EnableEarly183,
IpProfile_EarlyAnswerTimeout, IpProfile_SBC2833DTMFPayloadType,
IpProfile_SBCUserRegistrationTime,
IpProfile_ResetSRTPStateUponRekey, IpProfile_AmdMode,
IpProfile_SBCReliableHeldToneSource, IpProfile_GenerateSRTPKeys,
IpProfile_SBCPlayHeldTone, IpProfile_SBCRemoteHoldFormat,
IpProfile_SBCRemoteReplacesBehavior,
IpProfile_SBCSDPPtimeAnswer, IpProfile_SBCPreferredPTime,
IpProfile_SBCUseSilenceSupp, IpProfile_SBCRTPRedundancyBehavior,
IpProfile_SBCPlayRBTToTransferee, IpProfile_SBCRTCPMode,
IpProfile_SBCJitterCompensation,
IpProfile_SBCRemoteRenegotiateOnFaxDetection,
IpProfile_JitterBufMaxDelay,
IpProfile_SBCUserBehindUdpNATRegistrationTime,
IpProfile_SBCUserBehindTcpNATRegistrationTime,
IpProfile_SBCSDPHandleRTCPAttribute,
IpProfile_SBCRemoveCryptoLifetimeInSDP, IpProfile_SBCIceMode,
IpProfile_SBCRTCPMux, IpProfile_SBCMediaSecurityMethod,
IpProfile_SBCHandleXDetect, IpProfile_SBCRTCPFeedback,
IpProfile_SBCRemoteRepresentationMode,
IpProfile_SBCKeepVIAHeaders, IpProfile_SBCKeepRoutingHeaders,
IpProfile_SBCKeepUserAgentHeader,
IpProfile_SBCRemoteMultipleEarlyDialogs,
IpProfile_SBCRemoteMultipleAnswersMode,
IpProfile_SBCDirectMediaTag,
IpProfile_SBCAdaptRFC2833BWToVoiceCoderBW,
IpProfile_CreatedByRoutingServer, IpProfile_SBCFaxReroutingMode,
IpProfile_SBCMaxCallDuration, IpProfile_SBCGenerateRTP,
IpProfile_SBCISUPBodyHandling, IpProfile_SBCISUPVariant,
IpProfile_SBCVoiceQualityEnhancement, IpProfile_SBCMaxOpusBW,
IpProfile_LocalRingbackTone, IpProfile_LocalHeldTone;
[\IPProfile]
Parameter Description
For more informationFor more information, see 'Configuring IP Profiles'
on page 433.
Tel Profiles Table
Tel Profiles Defines the Tel Profile table. Each Tel Profile ID includes a set of
configure voip > coders- parameters (which are typically configured separately using their
and-profiles tel-profile individual, "global" parameters). You can later assign these Tel Profile
IDs to other elements such as in the Trunk Group table (TrunkGroup
[TelProfile]
parameter). Therefore, Tel Profiles allow you to apply the same settings
of a group of parameters to multiple channels, or apply specific settings
to different channels.
The format of the ini file table parameter is as follows:
[TelProfile]
FORMAT TelProfile_Index = TelProfile_ProfileName,
TelProfile_TelPreference, TelProfile_CodersGroupName,
TelProfile_IsFaxUsed, TelProfile_JitterBufMinDelay,
TelProfile_JitterBufOptFactor, TelProfile_IPDiffServ,
TelProfile_SigIPDiffServ, TelProfile_DtmfVolume, TelProfile_InputGain,
TelProfile_VoiceVolume, TelProfile_EnableReversePolarity,
TelProfile_EnableCurrentDisconnect, TelProfile_EnableDigitDelivery,
TelProfile_EnableEC, TelProfile_MWIAnalog, TelProfile_MWIDisplay,
TelProfile_FlashHookPeriod, TelProfile_EnableEarlyMedia,
TelProfile_ProgressIndicator2IP, TelProfile_TimeForReorderTone,
TelProfile_EnableDIDWink, TelProfile_IsTwoStageDial,
TelProfile_DisconnectOnBusyTone, TelProfile_EnableVoiceMailDelay,
TelProfile_DialPlanIndex, TelProfile_Enable911PSAP,
TelProfile_SwapTelToIpPhoneNumbers, TelProfile_EnableAGC,
TelProfile_ECNlpMode, TelProfile_DigitalCutThrough,
TelProfile_EnableFXODoubleAnswer, TelProfile_CallPriorityMode,
TelProfile_FXORingTimeout, TelProfile_JitterBufMaxDelay,
TelProfile_PlayBusyTone2Isdn;
[\TelProfile]
For a description of the parameter, see Configuring Tel Profiles on page
467.
Parameter Description
Parameter Description
Input Gain Global parameter defining the pulse-code modulation (PCM) input
configure voip > media voice > (received) gain control level (in decibels).
input-gain You can also configure the functionality per specific calls, using IP
[InputGain] Profiles (IpProfile_InputGain) or Tel Profiles
(TelProfile_InputGain). For a detailed description of the parameter
and for configuring the functionality, see 'Configuring IP Profiles'
on page 433 or Configuring Tel Profiles on page 467.
Note: If the functionality is configured for a specific profile, the
settings of the global parameter is ignored for calls associated with
the profile.
Voice Volume Global parameter defining the voice gain control (in decibels). This
configure voip > media voice > defines the level of the transmitted (IP-to-Tel) signal.
voice-volume You can also configure the functionality per specific calls, using IP
[VoiceVolume] Profiles (IpProfile_VoiceVolume) or Tel Profiles
(TelProfile_VoiceVolume). For a detailed description of the
parameter and for configuring the functionality, see 'Configuring IP
Profiles' on page 433 or Configuring Tel Profiles on page 467.
Note: If the functionality is configured for a specific profile, the
settings of the global parameter is ignored for calls associated with
the profile.
configure voip > media voice Determines the bit ordering of the G.726 voice payload format.
codecs > G726-voice-payload- [0] = (Default) Little Endian
format [1] = Big Endian
[VoicePayloadFormat] Note: To ensure high voice quality when using G.726, both
communicating ends should use the same endianness format.
Therefore, when the device communicates with a third-party entity
that uses the G.726 voice coder and voice quality is poor, change
the settings of the parameter (between Big Endian and Little
Endian).
MF Transport Type Currently, not supported.
configure voip > media voice >
MF-transport-type
[MFTransportType]
Echo Canceler Global parameter enabling echo cancellation (i.e., echo from voice
configure voip > media voice > calls is removed).
echo-canceller-enable You can also configure this functionality per specific calls, using IP
[EnableEchoCanceller] Profiles (IpProfile_EnableEchoCanceller) or Tel Profiles
(TelProfile_EnableEC). For a detailed description of the parameter
and for configuring the functionality, see 'Configuring IP Profiles'
on page 433 or Configuring Tel Profiles on page 467.
Note: If the functionality is configured for a specific profile, the
settings of this global parameter is ignored for calls associated
with the profile.
configure voip > media voice > Defines the four-wire to two-wire worst-case Hybrid loss, the ratio
echo-canceller-hybrid-loss between the signal level sent to the hybrid and the echo level
[ECHybridLoss] returning from the hybrid.
[0] = (Default) 6 dB
[1] = N/A
[2] = 0 dB
Parameter Description
[3] = 3 dB
configure voip > media voice > Global parameter enabling Non-Linear Processing (NLP) mode for
echo-canceller-NLP-mode the echo cancellation.
[ECNLPMode] You can also configure the functionality per specific calls, using
Tel Profiles (TelProfile_ECNlpMode). For a detailed description of
the parameter and for configuring the functionality in the Tel
Profiles table, see Configuring Tel Profiles on page 467.
Note: If the functionality is configured for a specific Tel Profile, the
settings of the global parameter is ignored for calls associated with
the Tel Profile.
configure voip > media voice > Enables the Aggressive NLP at the first 0.5 second of the call.
echo-canceller-aggressive-NLP [0] = Disable
[EchoCancellerAggressiveNLP] [1] = (Default) Enable. The echo is removed only in the first half
of a second of the incoming IP signal.
Note: For the parameter to take effect, a device reset is required.
configure voip > media RTP- Defines the number of spectral coefficients added to an SID
RTCP > number-of-SID- packet being sent according to RFC 3389.
coefficients The valid values are [0] (default), [4], [6], [8] and [10].
[RTPSIDCoeffNum]
Parameter Description
Parameter Description
Silk Tx Inband FEC Enables forward error correction (FEC) for the SILK coder.
configure voip > media settings [0] Disable (default)
> silk-tx-inband-fec [1] Enable
[SilkTxInbandFEC]
Silk Max Average Bit Rate Defines the maximum average bit rate for the SILK coder.
configure voip > media settings The valid value range is 6,000 to 50,000. The default is 50,000.
> silk-max-average-bitrate The SILK coder is Skype's default audio codec used for Skype-to-
[SilkMaxAverageBitRate] Skype calls.
configure voip > media settings Determines the format of the RTP header for VBR coders.
> vbr-coder-header-format [0] = (Default) Payload only (no header, TOC, or m-factor) -
[VBRCoderHeaderFormat] similar to RFC 3558 Header Free format.
[1] = Supports RFC 2658 - 1 byte for interleaving header (always
0), TOC, no m-factor.
[2] = Payload including TOC only, allow m-factor.
[3] = RFC 3558 Interleave/Bundled format.
configure voip > media settings Defines the required number of silence frames at the beginning of
> vbr-coder-hangover each silence period when using the VBR coder silence
[VBRCoderHangover] suppression.
The range is 0 to 255. The default is 1.
AMR Payload Format Defines the AMR payload format type.
[AmrOctetAlignedEnable] [0] Bandwidth Efficient
[1] Octet Aligned (default)
Note: The AMR payload type can also be configured per Coder
Group (see Configuring Coder Groups on page 423). The Coder
Group configuration overrides the parameter.
configure voip > media settings Determines the payload format of the AMR header.
> amr-header-format [0] = Non-standard multiple frames packing in a single RTP
[AMRCoderHeaderFormat] frame. Each frame has a CMR and TOC header.
[1] = AMR frame according to RFC 3267 bundling.
[2] = AMR frame according to RFC 3267 interleaving.
[3] = AMR is passed using the AMR IF2 format.
Note: Bandwidth Efficient mode is not supported; the mode is
always Octet-aligned.
Parameter Description
Parameter Description
stream.
[3] RFC 2833 Relay DTMF = (Default) DTMF digits are removed
from the voice stream and are relayed to remote side according
to RFC 2833.
[7] RFC 2833 Relay Decoder Mute = DTMF digits are sent
according to RFC 2833 and muted when received.
Note: The parameter is automatically updated if the parameters
FirstTxDTMFOption or RxDTMFOption are configured.
DTMF Volume (-31 to 0 dB) Global parameter defining the DTMF gain control value (in decibels)
configure voip > media voice > to the Tel side.
DTMF-volume You can also configure the functionality per specific calls, using Tel
[DTMFVolume] Profiles (TelProfile_DtmfVolume). For a detailed description of the
parameter and for configuring the functionality in the Tel Profiles
table, see Configuring Tel Profiles on page 467.
Note: If the functionality is configured for a specific Tel Profile, the
settings of the global parameter is ignored for calls associated with
the Tel Profile.
DTMF Generation Twist Defines the range (in decibels) between the high and low frequency
configure voip > media voice > components in the DTMF signal. Positive decibel values cause the
DTMF-generation-twist higher frequency component to be stronger than the lower one.
Negative values cause the opposite effect. For any parameter
[DTMFGenerationTwist]
value, both components change so that their average is constant.
The valid range is -10 to 10 dB. The default is 0 dB.
Note: For the parameter to take effect, a device reset is required.
inter-digit-interval Defines the time (in msec) between generated DTMF digits to the
[DTMFInterDigitInterval] Tel side (if FirstTxDTMFOption = 1, 2 or 3).
The valid range is 0 to 32767. The default is 100.
[DTMFDigitLength] Defines the time (in msec) for generating DTMF tones to the Tel
side (if FirstTxDTMFOption = 1, 2 or 3). It also configures the
duration that is sent in INFO (Cisco) messages.
The valid range is 0 to 32767. The default is 100.
configure voip > media Defines the Voice Silence time (in msec) after playing DTMF or MF
voice > digit-hangover- digits to the Tel side that arrive as Relay from the IP side.
time-rx Valid range is 0 to 2,000 msec. The default is 1,000 msec.
[RxDTMFHangOverTime]
configure voip > media voice > Defines the Voice Silence time (in msec) after detecting the end of
digit-hangover-time-tx DTMF or MF digits at the Tel side when the DTMF Transport Type
[TxDTMFHangOverTime] is either Relay or Mute.
Valid range is 0 to 2,000 msec. The default is 1,000 msec.
NTE Max Duration Defines the maximum time for sending Named Telephony Events /
configure voip > media voice > NTEs (RFC 4733/2833 DTMF relay) to the IP side, regardless of
telephony-events-max-duration the DTMF signal duration on the other (TDM) side.
[NTEMaxDuration] The range is -1 to 200,000,000 msec. The default is -1 (i.e., NTE
stops only upon detection of an End event).
Parameter Description
Dynamic Jitter Buffer Minimum Global parameter defining the minimum delay (in msec) of the
Delay device's dynamic Jitter Buffer.
configure voip > media rtp-rtcp > You can also configure the functionality per specific calls,
jitter-buffer-minimum-delay using IP Profiles (IpProfile_JitterBufMinDelay) or Tel Profiles
[DJBufMinDelay] (TelProfile_JitterBufMinDelay). For a detailed description of
the parameter and for configuring the functionality, see
Configuring IP Profiles on page 433, or Configuring Tel
Profiles on page 467.
Note: If the functionality is configured for a specific profile, the
settings of the global parameter is ignored for calls associated
with the profile.
Dynamic Jitter Buffer Optimization Global parameter defining the Dynamic Jitter Buffer frame
Factor error/delay optimization factor.
configure voip > media rtp-rtcp > You can also configure the functionality per specific calls,
jitter-buffer-optimization-factor using IP Profiles (IpProfile_JitterBufOptFactor) or Tel Profiles
[DJBufOptFactor] (TelProfile_JitterBufOptFactor). For a detailed description of
the parameter and for configuring the functionality, see
Configuring IP Profiles on page 433 or Configuring Tel Profiles
on page 467.
Note: If the functionality is configured for a specific profile, the
settings of the global parameter is ignored for calls associated
with the profile.
RTP Redundancy Depth Global parameter that enables the device to generate RFC
configure voip > media rtp-rtcp > 2198 redundant packets. You can also configure this
RTP-redundancy-depth functionality per specific calls, using IP Profiles
(IpProfile_RTPRedundancyDepth). For a detailed description
[RTPRedundancyDepth]
of the parameter and for configuring this functionality in the IP
Profiles table, see 'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile,
the settings of this global parameter is ignored for calls
associated with the IP Profile.
Enable RTP Redundancy Enables the device to include the RTP redundancy dynamic
Negotiation payload type in the SDP (according to RFC 2198).
configure voip > sip-definition [0] Disable (default)
settings > rtp-rdcy-nego-enbl [1] Enable = The device includes in the SDP message the
[EnableRTPRedundancyNegotiation] RTP payload type "RED" and the payload type configured
by the parameter RFC2198PayloadType.
a=rtpmap:<PT> RED/8000
Where <PT> is the payload type as defined by
RFC2198PayloadType. The device sends the INVITE
message with "a=rtpmap:<PT> RED/8000" and responds
with a 18x/200 OK and "a=rtpmap:<PT> RED/8000" in the
SDP.
Note:
The parameter is applicable only to the Gateway
application.
Parameter Description
For this feature to be functional, you must also set the
parameter RTPRedundancyDepth to 1 (i.e., enabled).
Currently, the negotiation of “RED” payload type is not
supported and therefore, it should be configured to the
same PT value for both parties.
RFC 2198 Payload Type Defines the RTP redundancy packet payload type (according
configure voip > media rtp-rtcp > to RFC 2198).
RTP-redundancy-payload-type The valid value is 96 to 127. The default is 104.
[RFC2198PayloadType] Note: The parameter is applicable only if the
RTPRedundancyDepth parameter is set to 1.
Packing Factor N/A. Controlled internally by the device according to the
[RTPPackingFactor] selected coder.
RFC 2833 TX Payload Type Defines the Tx RFC 2833 DTMF relay dynamic payload type
configure voip > gateway dtmf-supp- for outbound calls.
service dtmf-and-dialing > The valid range is 96 to 127. The default is 96.
telephony-events-payload-type-tx Note: When RFC 2833 payload type negotiation is used (i.e.,
[RFC2833TxPayloadType] the parameter FirstTxDTMFOption is set to 4), this payload
type is used for the received DTMF packets. If negotiation isn't
used, this payload type is used for receive and for transmit.
RFC 2833 RX Payload Type Defines the Rx RFC 2833 DTMF relay dynamic payload type
telephony-events-payload-type-rx for inbound calls.
[RFC2833RxPayloadType] The valid range is 96 to 127. The default is 96.
Note: When RFC 2833 payload type negotiation is used (i.e.,
the parameter FirstTxDTMFOption is set to 4), this payload
type is used for the received DTMF packets. If negotiation isn't
used, this payload type is used for receive and for transmit.
[EnableDetectRemoteMACChange] Determines whether the device changes the RTP packets
according to the MAC address of received RTP packets and
according to Gratuitous Address Resolution Protocol (GARP)
messages.
[0] = Nothing is changed.
[1] = If the device receives RTP packets with a different
source MAC address (than the MAC address of the
transmitted RTP packets), then it sends RTP packets to
this MAC address and removes this IP entry from the
device's ARP cache table.
[2] = (Default) The device uses the received GARP packets
to change the MAC address of the transmitted RTP
packets.
[3] = Options 1 and 2 are used.
Note:
For the parameter to take effect, a device reset is required.
If the device is located in a network subnet which is
connected to other gateways using a router that uses
Virtual Router Redundancy Protocol (VRRP) for
redundancy, then set the parameter to 0 or 2.
RTP Base UDP Port Global parameter that defines the lower boundary of the UDP
Parameter Description
configure voip > media rtp- port used for RTP, RTCP (RTP port + 1) and T.38 (RTP port +
rtcp > base-udp-port 2). For more information on configuring the UDP port range,
[BaseUDPport] see 'Configuring RTP Base UDP Port' on page 201.
The range of possible UDP ports is 6,000 to 65,535. The
default base UDP port is 6000.
Note: For the parameter to take effect, a device reset is
required.
rtcp-act-mode Disables RTCP traffic when there is no RTP traffic. This
[RTCPActivationMode] feature is useful, for example, to stop RTCP traffic that is
typically sent when calls are put on hold (by an INVITE with
'a=inactive' in the SDP).
[0] Active Always = (Default) RTCP is active even during
inactive RTP periods, i.e., when the media is in 'recvonly' or
'inactive' mode.
[1] Inactive Only If RTP Inactive = No RTCP is sent when
RTP is inactive.
Note: The parameter is applicable only to the Gateway
application.
No-Op Packets Parameters
no-operation-enable Enables the transmission of RTP or T.38 No-Op packets.
[NoOpEnable] [0] = Disable (default)
[1] = Enable
This mechanism ensures that the NAT binding remains open
during RTP or T.38 silence periods.
[NoOpInterval] Defines the time interval in which RTP or T.38 No-Op packets
are sent in the case of silence (no RTP/T.38 traffic) when No-
Op packet transmission is enabled.
The valid range is 20 to 65,000 msec. The default is 10,000.
Note: To enable No-Op packet transmission, use the
NoOpEnable parameter.
no-operation-interval Defines the payload type of No-Op packets.
[RTPNoOpPayloadType] The valid range is 96 to 127 (for the range of Dynamic RTP
Payload Type for all types of non hard-coded RTP Payload
types, refer to RFC 3551). The default is 120.
Note: When defining the parameter, ensure that it doesn't
cause collision with other payload types.
RTP Control Protocol Extended Reports (RTCP XR) Parameters
For more information on RTCP XR, see 'Configuring RTCP XR' on page 877.
Enable RTCP XR Enables voice quality monitoring and RTCP XR, according to
configure voip > media rtp-rtcp > RFC 3611.
voice-quality-monitoring-enable [0] Disable (default)
[VQMonEnable] [1] Enable Fully = Calculates voice quality metrics, uses
them for QoE calculations, reports them to OVOC (if
configured), and sends them to remote side using RTCP
XR.
[2] Enable Calculation Only = Calculates voice quality
metrics, uses them for QoE calculations, reports them to
OVOC (if configured), but does not send them to remote
Parameter Description
side using RTCP XR.
Note: For the parameter to take effect, a device reset is
required.
Minimum Gap Size Defines the voice quality monitoring - minimum gap size
[VQMonGMin] (number of frames).
The default is 16.
Burst Threshold Defines the voice quality monitoring - excessive burst alert
[VQMonBurstHR] threshold.
The default is -1 (i.e., no alerts are issued).
Delay Threshold Defines the voice quality monitoring - excessive delay alert
[VQMonDelayTHR] threshold.
The default is -1 (i.e., no alerts are issued).
R-Value Delay Threshold Defines the voice quality monitoring - end of call low quality
[VQMonEOCRValTHR] alert threshold.
The default is -1 (i.e., no alerts are issued).
RTCP XR Packet Interval Defines the time interval (in msec) between adjacent RTCP
configure voip > media rtp-rtcp > XR reports. This interval starts from call establishment. Thus,
rtcp-interval the device can send RTCP XR reports during the call, in
addition to at the end of the call. If the duration of the call is
[RTCPInterval]
shorter than this interval, RTCP XR is sent only at the end of
the call.
The valid value range is 0 to 65,535. The default is 5,000.
Disable RTCP XR Interval Determines whether RTCP report intervals are randomized or
Randomization whether each report interval accords exactly to the parameter
configure voip > media rtp-rtcp > RTCPInterval.
disable-RTCP-randomization [0] Disable = (Default) Randomize
[DisableRTCPRandomize] [1] Enable = No Randomize
Gateway RTCP XR Report Mode Enables the device to send RTCP XR in SIP PUBLISH
configure voip > sip-definition messages and defines the interval at which they are sent.
settings > rtcp-xr-rep-mode [0] Disable = (Default) RTCP XR is not sent.
[RTCPXRReportMode] [1] End Call = RTCP XR is sent at the end of the call.
[2] End Call & Periodic = RTCP XR is sent at the end of the
call and periodically according to the RTCPInterval
parameter.
[3] End Call & End Segment = RTCP XR is sent at the end
of the call and at the end of each media segment of the
call. A media segment is a change in media, for example,
when the coder is changed or when the caller toggles
between two called parties (using call hold/retrieve). The
RTCP XR sent at the end of a media segment contains
information only of that segment. If the segment does not
contain RTP/RTCP content, the RTCP XR is not sent. For
call hold, the device sends an RTCP XR each time the call
is placed on hold and each time it is retrieved. In addition,
the Start timestamp in the RTCP XR indicates the start of
the media segment; the End timestamp indicates the time
of the last sent periodic RTCP XR (typically, up to 5
seconds before reported segment ends).
Parameter Description
Note: The parameter is applicable only to the Gateway
application.
Publication IP Group ID Defines the IP Group to where the device sends RTCP XR
publication-ip-group-id reports.
[PublicationIPGroupID] By default, no value is defined.
SBC RTCP XR Report Mode Enables the sending of RTCP XR reports of QoE metrics at
configure voip > sip-definition the end of each call session (i.e., after a SIP BYE). The RTCP
settings > sbc-rtcpxr-report-mode XR is sent in the SIP PUBLISH message.
[SBCRtcpXrReportMode] [0] Disable (default)
[1] End of Call
Note: The parameter is applicable only to the SBC application.
Parameter Description
Fax Transport Mode Determines the fax transport mode used by the
configure voip > media fax-modem > fax- device.
transport-mode [0] Disable = transparent mode
[FaxTransportMode] [1] T.38 Relay (default)
[2] Bypass
[3] Events Only
Note: The parameter is overridden by the
parameter IsFaxUsed. If the parameter
IsFaxUsed is set to 1 (T.38 Relay) or 3 (Fax
Fallback), then FaxTransportMode is always set
to 1 (T.38 relay).
V34-fax-transport-type Determines the V.34 fax transport method
[V34FaxTransportType] (whether V34 fax falls back to T.30 or pass over
Bypass).
[0] = Transparent
[1] = (Default) Relay
[2] = Bypass
[3] = Transparent with Events
Note: To configure V34FaxTransportType to 1
(i.e., fax relay), you also need to configure
FaxTransportMode to 1 (fax relay).
V.21 Modem Transport Type Determines the V.21 modem transport type.
configure voip > media fax-modem > V21- [0] Disable = (Default) Transparent.
modem-transport-type [2] Enable Bypass
[V21ModemTransportType] [3] Events Only = Transparent with Events.
Note: You can also configure this functionality
per specific calls, using IP Profiles
(IpProfile_VxxTransportType). For more
information, see 'Configuring IP Profiles' on page
433.
V.22 Modem Transport Type Determines the V.22 modem transport type.
configure voip > media fax-modem > V22- [0] Disable = Transparent.
modem-transport-type [2] Enable Bypass (default)
[V22ModemTransportType] [3] Events Only = Transparent with Events.
Note: You can also configure this functionality
per specific calls, using IP Profiles
(IpProfile_VxxTransportType). For more
information, see 'Configuring IP Profiles' on page
433.
Parameter Description
V.23 Modem Transport Type Determines the V.23 modem transport type.
configure voip > media fax-modem > V23- [0] Disable = Transparent.
modem-transport-type [2] Enable Bypass (default)
[V23ModemTransportType] [3] Events Only = Transparent with Events.
Note: You can also configure this functionality
per specific calls, using IP Profiles
(IpProfile_VxxTransportType). For more
information, see 'Configuring IP Profiles' on page
433.
V.32 Modem Transport Type Determines the V.32 modem transport type.
configure voip > media fax-modem > V32- [0] Disable = Transparent.
modem-transport-type [2] Enable Bypass (default)
[V32ModemTransportType] [3] Events Only = Transparent with Events.
Note:
The parameter applies only to V.32 and
V.32bis modems.
You can also configure this functionality per
specific calls, using IP Profiles
(IpProfile_VxxTransportType). For more
information, see 'Configuring IP Profiles' on
page 433.
V.34 Modem Transport Type Determines the V.90/V.34 modem transport type.
configure voip > media fax-modem > V34- [0] Disable = Transparent.
modem-transport-type [2] Enable Bypass (default)
[V34ModemTransportType] [3] Events Only = Transparent with Events.
Note: You can also configure this functionality
per specific calls, using IP Profiles
(IpProfile_VxxTransportType). For more
information, see 'Configuring IP Profiles' on page
433.
bell-modem-transport-type Determines the Bell modem transport method.
[BellModemTransportType] [0] = Transparent (default)
[2] = Bypass
[3] = Transparent with events
Fax CNG Mode Determines the device's handling of fax relay
configure voip > media fax-modem > upon detection of a fax CNG tone or a
fax_cng_mode V.34/Super G3 V8-CM (Call Menu) signal from
originating faxes.
[FaxCNGMode]
[0] Doesn't send T.38 Re-INVITE = (Default)
SIP re-INVITE is not sent.
[1] Sends on CNG tone = Sends a SIP re-
INVITE with T.38 parameters in SDP to the
terminating fax upon detection of a fax CNG
tone, if the CNGDetectorMode parameter is
set to 1.
[2] Sends on CNG or v8-cn = Sends a SIP re-
INVITE with T.38 parameters in SDP to the
terminating fax upon detection of a fax CNG
tone (if the CNGDetectorMode parameter is
Parameter Description
set to 1) or upon detection of a V8-CM signal.
Note:
If the parameter is set to [2] and the
CNGDetectorMode parameter is set to [0], the
device sends a re-INVITE only if it detects a
V8-CM signal from the originating fax.
This feature is applicable only if the
IsFaxUsed parameter is set to [1] or [3].
The device also sends T.38 re-INVITE if the
CNGDetectorMode parameter is set to [2],
regardless of the FaxCNGMode parameter
settings.
CNG Detector Mode Global parameter that enables the detection of
configure voip > media fax-modem > coder the fax calling tone (CNG) and defines the
detection method. You can also configure this
[CNGDetectorMode]
functionality per specific calls, using IP Profiles
(IpProfile_CNGmode). For a detailed description
of the parameter and for configuring this
functionality in the IP Profiles table, see
'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a
specific IP Profile, the settings of this global
parameter is ignored for calls associated with the
IP Profile.
Fax Detect Timeout Since Connect Defines a timeout (in msec) for detecting fax from
fax-detect-timeout-since-connect the Tel side during an established voice call. The
interval starts from when the voice call is
[FaxDetectTimeoutSinceConnect]
established. If the device detects a fax tone within
the interval, it ends the voice session and sends
a T.38 or VBD re-INVITE message to the IP side
and processes the fax. If the interval expires
without any received fax event, the device
ignores all subsequent fax events during the
voice session.
The valid value is 0 to 120000. The default is 0. If
set to 0, the device can detect fax during the
entire voice call.
SIP T.38 Version Determines the T.38 fax relay version.
configure voip > sip-definition settings > sip-t38- [-1] Not Configured = (Default) No T.38
ver [0] Version 0
[SIPT38Version] [3] Version 3 = T.38 Version 3 (V.34 over
T.38)
Note:
Interworking of T.38 Version 3 is supported
only for Gateway calls. For SBC calls, the
device forwards T.38 Version 3 transparently
(as is) to the other leg (i.e., no transcoding).
For a description on V.34 over T.38 fax relay,
see V.34 Fax Support on page 192.
Parameter Description
Fax Relay Enhanced Redundancy Depth Defines the number of times that control packets
configure voip > media fax-modem > enhanced- are retransmitted when using the T.38 standard.
redundancy-depth The valid range is 0 to 4. The default is .
[FaxRelayEnhancedRedundancyDepth]
Fax Relay Redundancy Depth Defines the number of times that each fax relay
configure voip > media fax-modem > redundancy- payload is retransmitted to the network.
depth [0] = (Default) No redundancy
[FaxRelayRedundancyDepth] [1] = One packet redundancy
[2] = Two packet redundancy
Note: The parameter is applicable only to non-
V.21 packets.
Fax Relay Max Rate (bps) Defines the maximum rate (in bps) at which fax
configure voip > media fax-modem > max-rate relay messages are transmitted (outgoing calls).
[FaxRelayMaxRate] [0] 2400 = 2.4 kbps
[1] 4800 = 4.8 kbps
[2] 7200 = 7.2 kbps
[3] 9600 = 9.6 kbps
[4] 12000 = 12.0 kbps
[5] 14400 = 14.4 kbps (default)
[6] 16800bps = 16.8 kbps
[7] 19200bps = 19.2 kbps
[8] 21600bps = 21.6 kbps
[9] 24000bps = 24 kbps
[10] 26400bps = 26.4 kbps
[11] 28800bps = 28.8 kbps
[12] 31200bps = 31.2 kbps
[13] 33600bps = 33.6 kbps
Note:
The rate is negotiated between both sides
(i.e., the device adapts to the capabilities of
the remote side). Negotiation of the T.38
maximum supported fax data rate is provided
in SIP’s SDP T38MaxBitRate parameter. The
negotiated T38MaxBitRate is the minimum
rate supported between the local and remote
endpoints.
Fax relay rates greater than 14.4 kbps are
applicable only to V.34 / T.38 fax relay. For
non-T.38 V.34 supporting devices,
configuration greater than 14.4 kbps is
truncated to 14.4 kbps.
Fax Relay ECM Enable Enables Error Correction Mode (ECM) mode
configure voip > media fax-modem > ecm-mode during fax relay.
[FaxRelayECMEnable] [0] Disable
[1] Enable (default)
Fax/Modem Bypass Coder Type Determines the coder used by the device when
[FaxModemBypassCoderType] performing fax/modem bypass. Typically, high-
bit-rate coders such as G.711 should be used.
Parameter Description
[0] G.711Alaw= (Default) G.711 A-law 64
[1] G.711Mulaw = G.711 µ-law
Fax/Modem Bypass Packing Factor Defines the number (20 msec) of coder payloads
configure voip > media fax-modem > packing- used to generate a fax/modem bypass packet.
factor The valid range is 1, 2, or 3 coder payloads. The
[FaxModemBypassM] default is 1 coder payload.
configure voip > media fax-modem > fax-modem- Determines whether the device sends RFC 2833
telephony-events-mode ANS/ANSam events upon detection of fax and/or
[FaxModemNTEMode] modem Answer tones (i.e., CED tone).
[0] = Disabled (default)
[1] = Enabled
Note: The parameter is applicable only when the
fax or modem transport type is set to bypass or
Transparent-with-Events.
Fax Bypass Payload Type Defines the fax bypass RTP dynamic payload
configure voip > media rtp-rtcp > fax-bypass- type.
payload-type The valid range is 0 to 127. The default is 102.
[FaxBypassPayloadType]
configure voip > media rtp-rtcp > modem-bypass- Defines the modem bypass dynamic payload
payload-type type.
[ModemBypassPayloadType] The range is 0 to 127. The default is 103.
volume Defines the fax gain control.
[FaxModemRelayVolume] The range is -18 to -3, corresponding to -18 dBm
to -3 dBm in 1-dB steps. The default is -6 dBm
fax gain control.
Fax Bypass Output Gain Defines the fax bypass output gain control.
configure voip > media fax-modem > fax-bypass- The range is -31 to +31 dB, in 1-dB steps. The
output-gain default is 0 (i.e., no gain).
[FaxBypassOutputGain]
Modem Bypass Output Gain Defines the modem bypass output gain control.
configure voip > media fax-modem > modem- The range is -31 dB to +31 dB, in 1-dB steps. The
bypass-output-gain default is 0 (i.e., no gain).
[ModemBypassOutputGain]
modem-bypass-output-gain Defines the basic frame size used during
[FaxModemBypassBasicRTPPacketInterval] fax/modem bypass sessions.
[0] = (Default) Determined internally
[1] = 5 msec (not recommended)
[2] = 10 msec
[3] = 20 msec
Note: When set to 5 msec (1), the maximum
number of simultaneous channels supported is
120.
jitter-buffer-minimum-delay Defines the Jitter Buffer delay (in milliseconds)
[FaxModemBypasDJBufMinDelay] during fax and modem bypass session.
The range is 0 to 150 msec. The default is 40.
Parameter Description
Parameter Description
datagram-sz in the outgoing SDP when T.38 is used.
[T38MaxDatagramSize] The valid range is 120 to 600. The default is 560.
T38 Fax Max Buffer Defines the maximum size (in bytes) of the
configure voip > sip-definition settings > t38-fax- device's T.38 buffer. This value is included in the
mx-buff outgoing SDP when T.38 is used for fax relay
over IP.
[T38FaxMaxBufferSize]
The valid range is 500 to 3000. The default is
3000.
Detect Fax on Answer Tone Determines when the device initiates a T.38
det-fax-on-ans-tone session for fax transmission.
[DetFaxOnAnswerTone] [0] Initiate T.38 on Preamble = (Default) The
device to which the called fax is connected
initiates a T.38 session on receiving
Preamble signal from the fax.
[1] Initiate T.38 on CED = The device to which
the called fax is connected initiates a T.38
session on receiving a CED answer tone from
the fax. This option can only be used to relay
fax signals, as the device sends T.38 Re-
INVITE on detection of any fax/modem
Answer tone (2100 Hz, amplitude modulated
2100 Hz, or 2100 Hz with phase reversals).
The modem signal fails when using T.38 for
fax relay.
Note: The parameters is applicable only if the
IsFaxUsed parameter is set to 1 (T.38 Relay) or 3
(Fax Fallback).
CED Transfer Mode Defines the method for sending fax/modem CED
configure voip > media fax-modem > ced- (answering) tones.
transfer-mode [0] Fax Relay or VBD = (Default) The device
[CEDTransferMode] transfers the CED tone in Relay mode and
starts the fax session immediately.
[1] Voice Mode or VBD = The device transfers
the CED tone in either Voice or Bypass mode
and starts the fax session on V21 preamble.
[2] RFC 4733 Blocking RTP VBD = The
device transfers the CED tone in RFC 2833.
This is applicable only to V.150.1 modem
relay and fax bypass.
[3] RFC 4733 Along with RTP VBD = The
device transfers the CED tone in RFC 2833
and bypass, in parallel. For combined V.150.1
modem relay and fax relay, use this option.
Note: The parameter is applicable only to the
Gateway application.
T.38 Fax Session Enables fax transmission of T.38 "no-signal"
configure voip > sip-definition settings > t38-sess- packets to the terminating fax machine.
imm-strt [0] Disable (default)
[T38FaxSessionImmediateStart] [1] Immediate Start on Fax = Device activates
T.38 fax relay upon receipt of a re-INVITE with
Parameter Description
T.38 only in the SDP.
[2] Immediate Start on Fax & Voice = Device
activates T.38 fax relay upon receipt of a re-
INVITE with T.38 and audio media in the SDP.
The parameter is used for transmission from fax
machines connected to the device and located
inside a NAT. Generally, the firewall blocks T.38
(and other) packets received from the WAN,
unless the device behind NAT sends at least one
IP packet from the LAN to the WAN through the
firewall. If the firewall blocks T.38 packets sent
from the termination IP fax, the fax fails.
To overcome this, the device sends No-Op (“no-
signal”) packets to open a pinhole in the NAT for
the answering fax machine. The originating fax
does not wait for an answer, but immediately
starts sending T.38 packets to the terminating fax
machine.
Note: To enable No-Op packet transmission, use
the NoOpEnable and NoOpInterval parameters.
V.150.1 Modem over IP
Note: These parameters are applicable only to the Gateway application.
Profile Number Defines the V.150.1 profile, which determines
[V1501AllocationProfile] how many DSP channels support V.150.1.
The value range is 0 to 20. The default is 0.
Note: For the parameter to take effect, a device
reset is required.
SSE Payload Type Rx Defines the V.150.1 (modem relay protocol) State
configure voip > media fax-modem > V1501-SSE- Signaling Event (SSE) payload type Rx.
payload-type-rx The value range is 96 to 127. The default is 105.
[V1501SSEPayloadTypeRx]
SSE Redundancy Depth Defines the SSE redundancy depth.
configure voip > media fax-modem > SSE- The value range is 1-6. The default is 3.
redundancy-depth
[V1501SSERedundancyDepth]
SPRT Transport Ch.0 Max Payload Size Defines the maximum payload size for V.150.1
configure voip > media fax-modem > SPRT- SPRT Transport Channel 0.
transport-channel0-max-payload-size The range is 140 to 256. The default is 140.
[V1501SPRTTransportChannel0MaxPayloadSize]
SPRT Transport Ch.2 Max Payload Size Defines the maximum payload size for V.150.1
configure voip > media fax-modem > SPRT- SPRT Transport Channel 2.
transport-channel2-max-payload-size The range is 132 to 256. The default is 132.
[V1501SPRTTransportChannel2MaxPayloadSize]
SPRT Transport Ch.2 Max Window Size Defines the maximum window size of SPRT
configure voip > media fax-modem > SPRT- transport channel 2.
transport-channel2-max-window-size The value range is 8 to 32. The default is 8.
[V1501SPRTTransportChannel2MaxWindowSize]
Parameter Description
SPRT Transport Ch.3 Max Payload Size Defines the maximum payload size for V.150.1
configure voip > media fax-modem > SPRT- SPRT Transport Channel 3.
transport-channel3-max-payload-size The range is 140 to 256. The default is 140.
[V1501SPRTTransportChannel3MaxPayloadSize]
Parameter Description
Hook-Flash Parameters
Hook-Flash Code Defines the digit pattern used by the PBX to indicate a Hook Flash
configure voip > gateway event. When this pattern is detected from the Tel side, the device
dtmf-supp-service supp- responds as if a Hook Flash event has occurred and sends a SIP
service-settings > hook- INFO message if the HookFlashOption parameter is set to 1, 5, 6, or 7
flash-code (indicating a Hook Flash). If configured and a Hook Flash indication is
received from the IP side, the device generates this pattern to the Tel
[HookFlashCode]
side.
The valid range is a 25-character string. The default is a null string.
Note: The parameter can also be configured in a Tel Profile.
Hook-Flash Option Defines the hook-flash transport type (i.e., method by which hook-flash
configure voip > gateway is sent and received).The feature is applicable only if the
dtmf-supp-service dtmf-and- HookFlashCode parameter is configured.
dialing > hook-flash-option [0] Not Supported = (Default) Hook-Flash indication is not sent.
[HookFlashOption] [1] INFO = Sends proprietary INFO message (Broadsoft) with
Hook-Flash indication. The device sends the INFO message as
follows:
Content-Type: application/broadsoft; version=1.0
Content-Length: 17
event flashhook
[4] RFC 2833 = This option is currently not supported.
[5] INFO (Lucent) = Sends proprietary SIP INFO message with
Hook-Flash indication. The device sends the INFO message as
follows:
Content-Type: application/hook-flash
Content-Length: 11
signal=hf
[6] INFO (NetCentrex) = Sends proprietary SIP INFO message with
Hook-Flash indication. The device sends the INFO message as
follows:
Content-Type: application/dtmf-relay
Signal=16
Where 16 is the DTMF code for hook flash.
Parameter Description
[7] INFO (HUAWEI) = Sends a SIP INFO message with Hook-
Flash indication. The device sends the INFO message as follows:
Content-Length: 17
Content-Type: application/sscc
event=flashhook
Note: The device can interwork DTMF HookFlashCode to SIP INFO
messages with Hook Flash indication.
configure voip > gw Defines the device’s handling of hook-flash telephony events that are
dtmf-and-suppl > gw received in the media (RTP) from the IP side (typically, RFC 2833) and
digitalgw digital-gw- then sent to the PSTN CAS side.
parameters > flash- [0] = (Default) The device ignores incoming hook-flash events from
from-media-ip the media IP.
[HookFlashFromMediaIP] [1] = The device generates a wink to the CAS side when it receives
a hook-flash event from the media IP.
Note: The parameter is applicable only to E1/T1 CAS interfaces.
DTMF Parameters
notify-on-sig-end Determines when the detection of DTMF events is notified.
[MGCPDTMFDetectionPoint] [0] = DTMF event is reported at the end of a detected DTMF digit.
[1] = (Default) DTMF event is reported at the start of a detected
DTMF digit.
Declare RFC 2833 in SDP Global parameter that enables the device to declare the RFC 2833
configure voip > gateway 'telephony-event' parameter in the SDP. You can also configure this
dtmf-supp-service dtmf-and- functionality per specific calls, using IP Profiles
dialing > rfc-2833-in-sdp (IpProfile_RxDTMFOption). For a detailed description of the parameter
and for configuring this functionality in the IP Profiles table, see
[RxDTMFOption]
'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with the
IP Profile.
First Tx DTMF Option Defines the first preferred transmit (Tx) DTMF negotiation method.
configure voip > gateway [0] Not Supported = (Default) No negotiation. DTMF digits are sent
dtmf-supp-service dtmf-and- according to the parameters DTMFTransportType and
dialing > first-dtmf-option- RFC2833PayloadType. The RFC 2833 payload type is according
type to the RFC2833PayloadType parameter for transmit and receive.
[FirstTxDTMFOption] [1] Info NORTEL = Sends DTMF digits according to IETF Internet-
Draft draft-choudhuri-sip-info-digit-00.
[2] NOTIFY = Sends DTMF digits according to IETF Internet-Draft
draft-mahy-sipping-signaled-digits-01.
[3] Info Cisco = Sends DTMF digits according to Cisco format.
[4] RFC 2833 = The device handles DTMF as follows:
Negotiates RFC 2833 payload type using local and remote
SDPs.
Sends DTMF packets using RFC 2833 payload type according
to the payload type in the received SDP.
Expects to receive RFC 2833 packets with the same payload
type according to the RFC2833PayloadType parameter.
Removes DTMF digits in transparent mode (as part of the
voice stream).
[5] Info KOREA = Sends DTMF digits according to Korea Telecom
format.
Parameter Description
Note:
When out-of-band DTMF transfer is used ([1], [2], [3], or [5]), the
DTMFTransportType parameter is automatically set to [0] (DTMF
digits are erased from the RTP stream).
For more information on DTMF transport, see 'Configuring DTMF
Transport Types' on page 200.
You can also configure the parameter per specific calls, using IP
Profiles (IpProfile_FirstTxDtmfOption). To configure IP Profiles, see
'Configuring IP Profiles' on page 433.
Second Tx DTMF Option Defines the second preferred transmit (Tx) DTMF negotiation method.
configure voip > gateway The first preferred method is configured by the FirstTxDTMFOption
dtmf-supp-service dtmf-and- parameter. For a description of the optional values for the parameter,
dialing > second-dtmf- see the FirstTxDTMFOption parameter above.
option-type Note: You can also configure the parameter per specific calls, using IP
[SecondTxDTMFOption] Profiles (IpProfile_SecondTxDtmfOption). To configure IP Profiles, see
'Configuring IP Profiles' on page 433.
configure voip > gateway Enables the automatic muting of DTMF digits when out-of-band DTMF
dtmf-supp-service dtmf-and- transmission is used.
dialing > auto-dtmf-mute [0] = (Default) Automatic mute is used.
[DisableAutoDTMFMute] [1] = No automatic mute of in-band DTMF.
When the parameter is set to 1, the DTMF transport type is set
according to the parameter DTMFTransportType and the DTMF digits
aren't muted if out-of-band DTMF mode is selected
(FirstTxDTMFOption set to 1, 2 or 3). This enables the sending of
DTMF digits in-band (transparent of RFC 2833) in addition to out-of-
band DTMF messages.
Note: Usually this mode is not recommended.
Enable Digit Delivery to IP Enables the Digit Delivery feature whereby DTMF digits are sent to the
configure voip > sip- destination IP address after the Tel-to-IP call is answered.
definition settings > digit- [0] Disable (default).
delivery-2ip [1] Enable = Enable digit delivery to IP.
[EnableDigitDelivery2IP] To enable this feature, modify the called number to include at least
one 'p' character. The device uses the digits before the 'p' character in
the initial INVITE message. After the call is answered, the device waits
for the required time (number of 'p' multiplied by 1.5 seconds), and
then sends the rest of the DTMF digits using the method chosen (in-
band or out-of-band).
Note:
For the parameter to take effect, a device reset is required.
The called number can include several 'p' characters (1.5 seconds
pause), for example, 1001pp699, 8888p9p300.
Enable Digit Delivery to Tel Global parameter enabling the Digit Delivery feature, which sends
configure voip > sip- DTMF digits of the called number to the device's B-channel (phone
definition settings > digit- line) after the call is answered for IP-to-Tel calls.
delivery-2tel You can also configure the functionality per specific calls, using Tel
[EnableDigitDelivery] Profiles (TelProfile_EnableDigitDelivery). For a detailed description of
the parameter and To configure the functionality in the Tel Profiles
table, see 'Configuring Tel Profiles' on page 467.
Parameter Description
Note: If the functionality is configured for a specific Tel Profile, the
settings of the global parameter is ignored for calls associated with the
Tel Profile.
Special Digit Representation Defines the representation for ‘special’ digits (‘*’ and ‘#’) that are used
configure voip > gateway for out-of-band DTMF signaling (using SIP INFO/NOTIFY).
dtmf-supp-service dtmf-and- [0] Special = (Default) Uses the strings ‘*’ and ‘#’.
dialing > special-digit-rep [1] Numeric = Uses the numerical values 10 and 11.
[UseDigitForSpecialDTMF]
isdn-keypad-mode Enables the device to send DTMF digits received in the called party
[ISDNKeypadMode] number from the IP side, as Keypad facility IE in ISDN INFORMATION
messages to PSTN.
[0] Don’t send = (Default) All digits are sent as DTMF to PSTN (i.e.,
not sent as Keypad).
[1] During Call Establishment = DTMF digits after * or # (inclusive)
are sent as Keypad only during call establishment and call
disconnect. During an established call, all digits are sent as DTMF.
[2] Always = DTMF digits after * or # (inclusive) are always sent as
Keypad (call establishment, connect, and disconnect).
For more information, see Interworking Keypad DTMFs for SIP-to-
ISDN Calls on page 566.
Note: This feature is not applicable to re-INVITE messages.
Parameter Description
Dial Plan Index Defines the Dial Plan index to use in the external Dial Plan file.
configure voip > gateway dtmf- The Dial Plan file is loaded to the device as a .dat file (converted
supp-service dtmf-and-dialing > using the DConvert utility). The Dial Plan index can be defined
dial-plan-index globally or per Tel Profile.
[DialPlanIndex] The valid value range is 0 to 7, where 0 denotes PLAN1, 1
denotes PLAN2, and so on. The default is -1, indicating that no
Dial Plan file is used.
Note:
If the parameter is configured to select a Dial Plan index, the
settings of the parameter DigitMapping are ignored.
If the parameter is configured to select a Dial Plan index from
an external Dial Plan file, the device first attempts to locate a
matching digit pattern in the Dial Plan file, and if not found,
then attempts to locate a matching digit pattern in the Digit
Map rules configured by the DigitMapping parameter.
The parameter is also applicable to ISDN with overlap dialing.
For E1 CAS MFC-R2 variants (which don't support terminating
digit for the called party number, usually I-15), the parameter
and the DigitMapping parameter are ignored. Instead, you can
define a Dial Plan template per trunk using the parameter
CasTrunkDialPlanName_x (or in the Trunk Settings page).
Parameter Description
The parameter can also be configured in a Tel Profile.
For more information on the Dial Plan file, see 'Dialing Plans
for Digit Collection' on page 764.
configure voip > gateway Defines the Dial Plan index in the external Dial Plan file for the
manipulation settings > tel2ip-src- Tel-to-IP Source Number Mapping feature.
nb-map-dial-index The valid value range is 0 to 7, defining the Dial Plan index [Plan
[Tel2IPSourceNumberMappingDi x] in the Dial Plan file. The default is -1 (disabled).
alPlanIndex] For more information on this feature, see 'Modifying ISDN-to-IP
Calling Party Number using Dial Plan File' on page 769.
Digit Mapping Rules Defines the digit map pattern (used to reduce the dialing period
configure voip > gateway dtmf- when ISDN overlap dialing). If the digit string (i.e., dialed number)
supp-service dtmf-and-dialing > matches one of the patterns in the digit map, the device stops
digitmapping collecting digits and establishes a call with the collected number.
[DigitMapping] The digit map pattern can contain up to 52 options (rules), each
separated by a vertical bar (|). The maximum length of the entire
digit pattern is 152 characters. The available notations include the
following:
[n-m]: Range of numbers (not letters).
. (single dot): Repeat digits until next notation (e.g., T).
x: Any single digit.
T: Dial timeout (configured by the TimeBetweenDigits
parameter).
S: Short timer (configured by the TimeBetweenDigits
parameter; default is two seconds) that can be used when a
specific rule is defined after a more general rule. For example,
if the digit map is 99|998, then the digit collection is terminated
after the first two 9 digits are received. Therefore, the second
rule of 998 can never be matched. But when the digit map is
99s|998, then after dialing the first two 9 digits, the device
waits another two seconds within which the caller can enter
the digit 8.
An example of a digit map is shown below:
11xS|00T|[1-7]xxx|8xxxxxxx|#xxxxxxx|*xx|91xxxxxxxxxx|9011x.T
In the example above, the last rule can apply to International
numbers: 9 for dialing tone, 011 Country Code, and then any
number of digits for the local number ('x.').
Note:
For ISDN interfaces, the digit map mechanism is applicable
only when ISDN overlap dialing is used (ISDNRxOverlap is set
to 1).
If the DialPlanIndex parameter is configured (to select a Dial
Plan index), then the device first attempts to locate a matching
digit pattern in the Dial Plan file, and if not found, then
attempts to locate a matching digit pattern in the Digit Map
rules configured by the DigitMapping parameter.
For more information on digit mapping, see 'Digit Mapping' on
page 565.
Max Digits in Phone Num Defines the maximum number of collected destination number
configure voip > gateway dtmf- digits that can be received from the Tel side when ISDN Tel-to-IP
supp-service dtmf-and-dialing > overlap dialing is performed. When the number of collected digits
reaches this maximum, the device uses these digits for the called
Parameter Description
mxdig-b4-dialing destination number.
[MaxDigits] The valid range is 1 to 49. The default is 30 .
Note: Instead of using the parameter, Digit Mapping rules can be
configured.
Inter Digit Timeout for Overlap
Dialing Defines the time (in seconds) that the device waits between digits
configure voip > gateway dtmf- that are received from the PSTN or IP during overlap dialing.
supp-service dtmf-and-dialing > When this inter-digit timeout expires, the device uses the
time-btwn-dial-digs collected digits to dial the called destination number.
[TimeBetweenDigits] The valid range is 1 to 10. The default is 4.
Parameter Description
Voice Mail Interface Enables the device's Voice Mail application and determines the
configure voip > gateway communication method between the device and PBX.
voice-mail-setting > vm- [0] None (default)
interface [1] DTMF
[VoiceMailInterface] [2] SMDI
[3] QSIG
[4] SETUP Only = Applicable only to ISDN.
[5] MATRA/AASTRA QSIG
[6] QSIG SIEMENS = QSIG MWI activate and deactivate
messages include Siemens Manufacturer Specific Information
(MSI)
[8] ETSI = Euro ISDN, according to ETS 300 745-1 V1.2.4,
section 9.5.1.1. Enables MWI interworking from IP to Tel, typically
used for BRI phones.
[9] NI2= ISDN PRI trunks set to NI-2. This is used for interworking
the SIP Message Waiting Indication (MWI) NOTIFY message to
ISDN PRI NI-2 Message Waiting Notification (MWN) that is sent
in the ISDN Facility IE message. This option is applicable when
the device is connected to a PBX through an ISDN PRI trunk
configured to NI-2.
Note: To disable voice mail per Trunk Group, you can use a Tel
Profile with the EnableVoiceMailDelay parameter set to disabled (0).
This eliminates the phenomenon of call delay on Trunks not
implementing voice mail when voice mail is enabled using this global
parameter.
Enable VoiceMail URI Enables the interworking of target and cause for redirection from Tel
voicemail-uri to IP and vice versa, according to RFC 4468.
[EnableVMURI] [0] Disable (default)
[1] Enable
Upon receipt of an ISDN Setup message with Redirect values, the
Parameter Description
device maps the Redirect phone number to the SIP 'target'
parameter and the Redirect number reason to the SIP 'cause'
parameter in the Request-URI.
Redirecting Reason >> SIP Response Code
Unknown >> 404
User busy >> 486
No reply >> 408
Deflection >> 487/480
Unconditional >> 302
Others >> 302
If the device receives a Request-URI that includes a 'target' and
'cause' parameter, the 'target' is mapped to the Redirect phone
number and the 'cause' is mapped to the Redirect number reason.
[WaitForBusyTime] Defines the time (in msec) that the device waits to detect busy and/or
reorder tones. This feature is used for semi-supervised PBX call
transfers (i.e., the LineTransferMode parameter is set to 2).
The valid value range is 0 to 20000 (i.e., 20 sec). The default is 2000
(i.e., 2 sec).
Line Transfer Mode Defines the call transfer method used by the device. The parameter
configure voip > gateway is applicable to and E1/T1 CAS call transfer if the
voice-mail-setting > line- TrunkTransferMode_x parameter is set to 3 (CAS Normal) or 1 (CAS
transfer-mode NFA).
[LineTransferMode] [0] None = (Default) IP.
[1] Blind = PBX blind transfer:
E1/T1 CAS: When a SIP REFER message is received, the
device performs a blind transfer, by performing a CAS wink,
waiting a user-defined time (configured by the
WaitForDialTime parameter), dialing the Refer-To number,
and then releasing the call. The PBX performs the transfer
internally.
[2] Semi Supervised = PBX semi-supervised transfer:
(within the user-defined interval set by the WaitForBusyTime
parameter),
E1/T1 CAS: The device performs a CAS wink, waits a user-
defined time (configured by the WaitForDialTime parameter),
and then dials the Refer-To number. If during the user-
defined interval set by the WaitForBusyTime parameter, no
busy or reorder tones are detected, the device completes the
call transfer by releasing the line. If during this interval, the
device detects these tones, the transfer operation is
cancelled, the device sends a SIP NOTIFY message with a
failure reason (e.g., 486 if a busy tone is detected), and then
generates an additional wink toward the CAS line to restore
connection with the original call.
[3] Supervised = PBX Supervised transfer:
E1/T1 CAS: The device performs a supervised transfer to the
PBX. The device performs a CAS wink, waits a user-defined
time (configured by the WaitForDialTime parameter), and
then dials the Refer-To number. The device completes the
call transfer by releasing the line only after detection of the
Parameter Description
transferred party answer. To enable answer supervision, you
also need to do the following:
1) Enable voice detection (i.e., set the EnableVoiceDetection
parameter to 1).
2) Set the EnableDSPIPMDetectors parameter to 1.
3) Install the IPMDetector DSP option Feature License Key.
SMDI Parameters
Enable SMDI Enables Simplified Message Desk Interface (SMDI) interface on the
configure voip > gateway device.
voice-mail-setting > enable- [0] Disable = (Default) Normal serial
smdi [1] Enable (Bellcore)
[SMDI] [2] Ericsson MD-110
[3] NEC (ICS)
Note:
For the parameter to take effect, a device reset is required.
When the RS-232 connection is used for SMDI messages (Serial
SMDI), it cannot be used for other applications, for example, to
access the Command Line Interface (CLI).
SMDI Timeout Defines the time (in msec) that the device waits for an SMDI Call
configure voip > gateway Status message before or after a Setup message is received. The
voice-mail-setting > smdi- parameter synchronizes the SMDI and analog CAS interfaces.
timeout-[msec] If the timeout expires and only an SMDI message is received, the
[SMDITimeOut] SMDI message is dropped. If the timeout expires and only a Setup
message is received, the call is established.
The valid range is 0 to 10000 (i.e., 10 seconds). The default is 2000.
Message Waiting Indication (MWI) Parameters
MWI Off Digit Pattern Defines the digit code used by the device to notify the PBX that there
configure voip > gateway are no messages waiting for a specific extension. This code is added
voice-mail-setting > mwi-off- as prefix to the dialed number.
dig-ptrn The valid range is a 25-character string.
[MWIOffCode]
MWI On Digit Pattern Defines the digit code used by the device to notify the PBX of
configure voip > gateway messages waiting for a specific extension. This code is added as
voice-mail-setting > mwi-on- prefix to the dialed number.
dig-ptrn The valid range is a 25-character string.
[MWIOnCode]
MWI Suffix Pattern Defines the digit code used by the device as a suffix for 'MWI On
configure voip > gateway Digit Pattern' and 'MWI Off Digit Pattern'. This suffix is added to the
voice-mail-setting > mwi- generated DTMF string after the extension number.
suffix-pattern The valid range is a 25-character string.
[MWISuffixCode]
MWI Source Number Defines the calling party's phone number used in the Q.931 MWI
configure voip > gateway Setup message to PSTN. If not configured, the channel's phone
voice-mail-setting > mwi- number is used as the calling number.
source-number
[MWISourceNumber]
Parameter Description
configure voip > gateway Defines the IP Group ID used when subscribing to an MWI server.
dtmf-supp-service supp- The 'The SIP Group Name' field value of the IP Groups table is used
service-settings > mwi-subs- as the Request-URI host name in the outgoing MWI SIP
ipgrpid SUBSCRIBE message. The request is sent to the IP address defined
[MWISubscribeIPGroupID] for the Proxy Set that is associated with the IP Group. The Proxy
Set's capabilities such as proxy redundancy and load balancing are
also applied to the message.
For example, if the 'SIP Group Name' field of the IP Group is set to
"company.com", the device sends the following SUBSCRIBE
message:
SUBSCRIBE sip:company.com...
Instead of:
SUBSCRIBE sip:10.33.10.10...
Note: If the parameter is not configured, the MWI SUBSCRIBE
message is sent to the MWI server as defined by the MWIServerIP
parameter.
[NotificationIPGroupID] Defines the IP Group ID to which the device sends SIP NOTIFY MWI
messages.
Note:
This is used for MWI Interrogation. For more information on the
interworking of QSIG MWI to IP, see Message Waiting Indication
on page 572.
To determine the handling method of MWI Interrogation
messages, use the TrunkGroupSettings_MWIInterrogationType,
parameter (in the Trunk Group Settings table).
configure voip > gateway Defines the Message Centred ID party number used for QSIG MWI
dtmf-supp-service supp- messages. If not configured (default), the parameter is not included
service-settings > mwi-qsig- in MWI (activate and deactivate) QSIG messages.
party-num The valid value is a string.
[MWIQsigMsgCentreldIDParty
Number]
Digit Patterns The following digit pattern parameters apply only to voice mail applications that use
the DTMF communication method. For available pattern syntaxes, refer to the CPE Configuration
Guide for Voice Mail.
Forward on Busy Digit Pattern Defines the digit pattern used by the PBX to indicate 'call forward on
(Internal) busy' when the original call is received from an internal extension.
configure voip > gateway The valid range is a 120-character string.
voice-mail-setting > fwd-bsy-
dig-ptrn-int
[DigitPatternForwardOnBusy]
Forward on No Answer Digit Defines the digit pattern used by the PBX to indicate 'call forward on
Pattern (Internal) no answer' when the original call is received from an internal
configure voip > gateway extension.
voice-mail-setting > fwd-no- The valid range is a 120-character string.
ans-dig-pat-int
[DigitPatternForwardOnNoAns
wer]
Parameter Description
Forward on Do Not Disturb Defines the digit pattern used by the PBX to indicate 'call forward on
Digit Pattern (Internal) do not disturb' when the original call is received from an internal
configure voip > gateway extension.
voice-mail-setting > fwd-dnd- The valid range is a 120-character string.
dig-ptrn-int
[DigitPatternForwardOnDND]
Forward on No Reason Digit Defines the digit pattern used by the PBX to indicate 'call forward
Pattern (Internal) with no reason' when the original call is received from an internal
configure voip > gateway extension.
voice-mail-setting > fwd-no- The valid range is a 120-character string.
rsn-dig-ptrn-int
[DigitPatternForwardNoReaso
n]
Forward on Busy Digit Pattern Defines the digit pattern used by the PBX to indicate 'call forward on
(External) busy' when the original call is received from an external line (not an
configure voip > gateway internal extension).
voice-mail-setting > fwd-bsy- The valid range is a 120-character string.
dig-ptrn-ext
[DigitPatternForwardOnBusyE
xt]
Forward on No Answer Digit Defines the digit pattern used by the PBX to indicate 'call forward on
Pattern (External) no answer' when the original call is received from an external line
configure voip > gateway (not an internal extension).
voice-mail-setting > fwd-no- The valid range is a 120-character string.
ans-dig-pat-ext
[DigitPatternForwardOnNoAns
werExt]
Forward on Do Not Disturb Defines the digit pattern used by the PBX to indicate 'call forward on
Digit Pattern (External) do not disturb' when the original call is received from an external line
configure voip > gateway (not an internal extension).
voice-mail-setting > fwd-dnd- The valid range is a 120-character string.
dig-ptrn-ext
[DigitPatternForwardOnDNDE
xt]
Forward on No Reason Digit Defines the digit pattern used by the PBX to indicate 'call forward
Pattern (External) with no reason' when the original call is received from an external
configure voip > gateway line (not an internal extension).
voice-mail-setting > fwd-no- The valid range is a 120-character string.
rsn-dig-ptrn-ext
[DigitPatternForwardNoReaso
nExt]
Internal Call Digit Pattern Defines the digit pattern used by the PBX to indicate an internal call.
configure voip > gateway The valid range is a 120-character string.
voice-mail-setting > int-call-
dig-ptrn
[DigitPatternInternalCall]
External Call Digit Pattern Defines the digit pattern used by the PBX to indicate an external call.
configure voip > gateway The valid range is a 120-character string.
Parameter Description
voice-mail-setting > ext-call-
dig-ptrn
[DigitPatternExternalCall]
Disconnect Call Digit Pattern Defines a digit pattern that when received from the Tel side,
configure voip > gateway indicates the device to disconnect the call.
voice-mail-setting > disc-call- The valid range is a 25-character string.
dig-ptrn
[TelDisconnectCode]
Digit To Ignore Digit Pattern Defines a digit pattern that if received as Src (S) or Redirect (R)
configure voip > gateway numbers is ignored and not added to that number.
voice-mail-setting > dig-to- The valid range is a 25-character string.
ignore-dig-pattern
[DigitPatternDigitToIgnore]
Parameter Description
Parameter Description
Connected Number and Connected Name. For example, if the call
is answered by the device, the 200 OK response includes the P-
Asserted-Identity with Caller ID. The device interworks (in some
ISDN variants), the Connected Party number and name from Q.931
Connect message to SIP 200 OK with the P-Asserted-Identity
header. In the opposite direction, if the ISDN device receives a 200
OK with P-Asserted-Identity header, it interworks it to the
Connected party number and name in the Q.931 Connect
message, including its privacy.
Use Destination As Connected Enables the device to include the Called Party Number, from
Number outgoing Tel calls (after number manipulation), in the SIP P-
configure voip > sip-definition Asserted-Identity header. The device includes the SIP P-Asserted-
settings > use-dst-as- Identity header in 180 Ringing and 200 OK responses for IP-to-Tel
connected-num calls.
[UseDestinationAsConnectedN [0] Disable (default)
umber] [1] Enable
Note:
For this feature to function, you also need to enable the device
to include the P-Asserted-Identity header in 180/200 OK
responses, by setting the AssertedIDMode parameter to Add P-
Asserted-Identity.
If the received Q.931 Connect message contains a Connected
Party Number, this number is used in the P-Asserted-Identity
header in 200 OK response.
The parameter is applicable to ISDN and CAS interfaces.
Caller ID Transport Type Determines the device's behavior for Caller ID detection.
configure voip > media fax- [0] Disable = The caller ID signal is not detected - DTMF digits
modem > caller-ID-transport- remain in the voice stream.
type [1] Relay = (Currently not applicable.)
[CallerIDTransportType] [3] Mute = (Default) The caller ID signal is detected from the Tel
side and then erased from the voice stream.
Parameter Description
Parameter Description
180-for-call-waiting [0] = (Default) Use 182 Queued response to indicate call waiting.
[Send180ForCallWaiting] [1] = Use 180 Ringing response to indicate call waiting.
Parameter Description
Parameter Description
Enable Hold Global parameter that enables the interworking of the Hold/Retrieve
configure voip > gateway supplementary service from ISDN to SIP. You can also configure this
dtmf-supp-service supp- functionality per specific calls, using IP Profiles (IpProfile_EnableHold).
service-settings > hold For a detailed description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring IP Profiles' on page
[EnableHold]
433.
Note: If this functionality is configured for a specific IP Profile, the settings
of this global parameter is ignored for calls associated with the IP Profile.
Hold Format Defines the format of the SDP in the sent re-INVITE hold request.
configure voip > gateway [0] 0.0.0.0 = (Default) The SDP "c=" field contains the IP address
dtmf-supp-service supp- "0.0.0.0" and the "a=inactive" attribute.
service-settings > hold- [1] Send Only = The SDP "c=" field contains the device's IP address
format and the "a=sendonly" attribute.
[HoldFormat] [2] x.y.z.t = The SDP "c=" field contains the device's IP address and
the "a=inactive" attribute.
Note:
The device does not send any RTP packets when it is in hold state.
The parameter is applicable only to QSIG and Euro ISDN protocols.
Parameter Description
Held Timeout Defines the time interval that the device allows for a call to remain on
configure voip > gateway hold. If a Resume (un-hold Re-INVITE) message is received before the
dtmf-supp-service supp- timer expires, the call is renewed. If this timer expires, the call is released
service-settings > held- (terminated).
timeout [-1] = (Default) The call is placed on hold indefinitely until the initiator
[HeldTimeout] of the on hold retrieves the call again.
[0 - 2400] = Time to wait (in seconds) after which the call is released.
configure voip > gateway Determines whether the device sends DTMF signals (or DTMF SIP INFO
dtmf-supp-service supp- message) when a call is on hold.
service-settings > dtmf- [0] = (Default) Disable.
during-hold
[1] = Enable - If the call is on hold, the device stops playing the Held
[PlayDTMFduringHold] tone (if it is played) and sends DTMF:
To Tel side: plays DTMF digits according to the received SIP
INFO message(s). (The stopped held tone is not played again.)
To IP side: sends DTMF SIP INFO messages to an IP destination
if it detects DTMF digits from the Tel side.
Parameter Description
Parameter Description
value is defined.
Note: The parameter is also applicable to ISDN Blind Transfer,
according to AT&T Toll Free Transfer Connect Service (TR
50075) “Courtesy Transfer-Human-No Data”. To support this
transfer mode, you need to configure the parameter
XferPrefixIP2Tel to "*8" and the parameter TrunkTransferMode
to 5.
Enable Semi-Attended Transfer Determines the device behavior when Transfer is initiated while
semi-att-transfer in Alerting state.
[EnableSemiAttendedTransfer] [0] Disable = (Default) Send REFER with the Replaces
header.
[1] Enable = Send CANCEL, and after a 487 response is
received, send REFER without the Replaces header.
Blind Defines the keypad sequence to activate blind transfer for
configure voip > gateway analog established Tel-to-IP calls. The Tel user can perform blind
keypad-features > blind-transfer transfer by dialing the KeyBlindTransfer digits, followed by a
transferee destination number.
[KeyBlindTransfer]
After the KeyBlindTransfer DTMF digits sequence is dialed, the
current call is put on hold (using a Re-INVITE message), a dial
tone is played to the channel, and then the phone number
collection starts.
After the destination phone number is collected, it is sent to the
transferee in a SIP REFER request in a Refer-To header. The
call is then terminated and a confirmation tone is played to the
channel. If the phone number collection fails due to a mismatch,
a reorder tone is played to the channel.
blind-xfer-disc-tmo Defines the duration (in milliseconds) for which the device waits
[BlindTransferDisconnectTimeout] for a disconnection from the Tel side after the Blind Transfer
Code (KeyBlindTransfer) has been identified. When this timer
expires, a SIP REFER message is sent toward the IP side. If
the parameter is set to 0, the REFER message is immediately
sent.
The valid value range is 0 to 1,000,000. The default is 0.
QSIG Path Replacement Mode Enables QSIG transfer for IP-to-Tel and Tel-to-IP calls.
qsig-path-replacement-md [0] IP2QSIGTransfer = (Default) Enables IP-to-QSIG
[QSIGPathReplacementMode] transfer.
[1] QSIG2IPTransfer = Enables QSIG-to-IP transfer.
replace-tel2ip-calnum-to Defines the maximum duration (timeout) to wait between call
[ReplaceTel2IPCallingNumTimeout] Setup and Facility with Redirecting Number for replacing the
calling number (for Tel-to-IP calls).
The valid value range is 0 to 10,000 msec. The default is 0.
The interworking of the received Setup message to a SIP
INVITE is suspended when the parameter is set to any value
greater than 0. This means that the redirecting number in the
Setup message is not checked. When a subsequent Facility
with Call Transfer Complete/Update is received with a non-
empty Redirection Number, the Calling Number is replaced with
the received redirect number in the sent INVITE message.
If the timeout expires, the device sends the INVITE without
changing the calling number.
Parameter Description
Note:
The suspension of the INVITE message occurs for all calls.
The parameter is applicable only to QSIG.
Parameter Description
Parameter Description
Parameter Description
INVITE sent by the device, uses only the ConferenceID as the
Request-URI. The Conference server sets the Contact header of
the 200 OK response to the actual unique identifier (Conference
URI) to be used by the participants. This Conference URI is then
included by the device in the Refer-To header value in the REFER
messages sent by the device to the remote parties. The remote
parties join the conference by sending INVITE messages to the
conference using this conference URI.
[2] On Board = On-board, three-way conference. The conference
is established on the device without the need of an external
Conference server. You can limit the number of simultaneous, on-
board 3-way conference calls, by using the
MaxInBoardConferenceCalls parameter.
[3] Huawei Media Server = The conference is managed by an
external, third-party Conferencing server. The conference-initiating
INVITE sent by the device, uses only the ConferenceID as the
Request-URI. The Conferencing server sets the Contact header of
the 200 OK response to the actual unique identifier (Conference
URI) to be used by the participants. The Conference URI is
included in the URI of the REFER with a Replaces header sent by
the device to the Conferencing server. The Conferencing server
then sends an INVITE with a Replaces header to the remote
participants.
Note:
The parameter is applicable only to interfaces.
When using an external Conferencing server, a conference call
with up to six participants can be established.
Max. 3-Way Conference Defines the maximum number of simultaneous, on-board three-way
configure voip > gateway conference calls.
dtmf-supp-service supp- The valid range is 0 to . The default is 2.
service-settings > mx-3w- Note:
conf-onboard
For enabling on-board, three-way conferencing, use the
[MaxInBoardConferenceCalls] 3WayConferenceMode parameter.
The parameter is applicable only to interfaces.
Establish Conference Code Defines the DTMF digit pattern, which upon detection generates the
configure voip > gateway conference call when three-way conferencing is enabled
dtmf-supp-service supp- (Enable3WayConference is set to 1).
service-settings > estb-conf- The valid range is a 25-character string. The default is “!” (Hook-
code Flash).
[ConferenceCode] Note: If the FlashKeysSequenceStyle parameter is set to 1 or 2, the
setting of the ConferenceCode parameter is overridden.
Parameter Description
Parameter Description
Parameter Description
application (digital interfaces).
Emergency Special Release Enables the device to send a SIP 503 "Service Unavailable"
Cause response if an emergency call cannot be established (i.e.,
configure voip > sip-definition rejected). This can occur, for example, due to the PSTN (for
settings > emrg-spcl-rel-cse example, the destination is busy or not found) or ELIN Gateway
(for example, lack of resources or an internal error).
[EmergencySpecialReleaseCause]
[0] Disable (default)
[1] Enable
Note: The parameter is applicable only to the Gateway
application (digital interfaces).
Emergency Number Defines a list of “emergency” numbers.
configure voip > sip-
definition settings > For ISDN and CAS: These emergency numbers are used for the
emerg-nbs preemption of E911 IP-to-Tel calls when there are unavailable or
[EmergencyNumbers] busy channels. In this scenario, the device terminates one of the
busy channels and sends the emergency call to this channel.
This feature is enabled by setting the CallPriorityMode
parameter to 2 (“Emergency”). For a description of this feature,
see 'Pre-empting Existing Call for E911 IP-to-Tel Call' on page
574.
The list can include up to four different numbers, where each
number can be up to four digits long.
Example: EmergencyNumbers = ‘100’,’911’,’112’
Multilevel Precedence and Preemption (MLPP) Parameters
MLPP Default Namespace Determines the namespace used for MLPP calls received from
mlpp-dflt-namespace the ISDN side without a Precedence IE and destined for an
Application server. This value is used in the Resource-Priority
[MLPPDefaultNamespace]
header of the outgoing SIP INVITE request.
[1] DSN (default)
[2] DOD
[3] DRSN
[5] UC
[7] CUC
Note: If the ISDN message contains a Precedence IE, the
device automatically interworks the "network identity" digits in
the IE to the network domain subfield in the Resource-Priority
header. For more information, see Multilevel Precedence and
Preemption on page 576.
[ResourcePriorityNetworkDomains] Defines up to 32 user-defined MLPP network domain names
(namespaces). This value is used in the AS-SIP Resource-
Priority header of the outgoing SIP INVITE request. The
parameter is used in combination with the
MLPPDefaultNamespace parameter, where you need to enter
the table row index as its value.
The parameter is also used for mapping the Resource-Priority
field value of the SIP Resource-Priority header to the ISDN
Precedence Level IE. The mapping is configured by the field,
EnableIp2TelInterworking:
Disabled: The network-domain field in the Resource-Priority
Parameter Description
header is set to "0 1 0 0" (i.e., "routine") in the Precedence
Level field.
Enabled: The network-domain field in the Resource-Priority
header is set in the Precedence Level field according to
Table 5.3.2.12-4 (Mapping of RPH r-priority Field to ISDN
Precedence Level Value).
The domain name can be a string of up to 10 characters.
The format of this table ini file parameter is as follows:
FORMAT ResourcePriorityNetworkDomains_Index =
ResourcePriorityNetworkDomains_Name,
ResourcePriorityNetworkDomains_EnableIp2TelInterworking;
ResourcePriorityNetworkDomains 1 = dsn, 0;
ResourcePriorityNetworkDomains 2 = dod, 0;
ResourcePriorityNetworkDomains 3 = drsn, 0;
ResourcePriorityNetworkDomains 5 = uc, 1;
ResourcePriorityNetworkDomains 7 = cuc, 0;
[ \ResourcePriorityNetworkDomains ]
Note:
Indices 1, 2, 3, 5, and 7 cannot be modified and are defined
for DSN, DOD, DRSN, UC, and CUC, respectively.
If the MLPPDefaultNamespace parameter is set to -1,
interworking from PSTN NI digits is done automatically.
Default Call Priority Determines the default call priority for MLPP calls.
dflt-call-prio [0] 0 = (Default) ROUTINE
[SIPDefaultCallPriority] [2] 2 = PRIORITY
[4] 4 = IMMEDIATE
[6] 6 = FLASH
[8] 8 = FLASH-OVERRIDE
[9] 9 = FLASH-OVERRIDE-OVERRIDE
If the incoming SIP INVITE request doesn't contain a valid
priority value in the SIP Resource-Priority header, the default
value is used in the Precedence IE (after translation to the
relevant ISDN Precedence value) of the outgoing ISDN Setup
message.
If the incoming Setup message doesn't contain a valid
Precedence Level value, the default value is used in the
Resource-Priority header of the outgoing SIP INVITE request. In
this scenario, the character string is sent without translation to a
numerical value.
MLPP DiffServ Defines the DiffServ value (differentiated services code
configure voip/gateway point/DSCP) used in IP packets containing SIP messages that
dtmf-supp-service supp- are related to MLPP calls. The parameter defines DiffServ for
service-settings/mlpp- incoming and outgoing MLPP calls with the Resource-Priority
diffserv header.
[MLPPDiffserv] The valid range is 0 to 63. The default is 50.
Preemption Tone Duration Defines the duration (in seconds) in which the device plays a
preemption tone to the Tel and IP sides if a call is preempted.
Parameter Description
preemp-tone-dur The valid range is 0 to 60. The default is 3.
[PreemptionToneDuration] Note:If set to 0, no preemption tone is played.
MLPP Normalized Service Domain Defines the MLPP normalized service domain string. If the
mlpp-norm-ser-dmn device receives an MLPP ISDN incoming call, it uses the
parameter (if different from ‘FFFFFF’) as a Service domain in
[MLPPNormalizedServiceDomain]
the SIP Resource-Priority header in outgoing INVITE messages.
If the parameter is configured to ‘FFFFFF’, the Resource-Priority
header is set to the MLPP Service Domain obtained from the
Precedence IE.
The valid value is 6 hexadecimal digits. The default is ‘000000’.
Note: The parameter is applicable only to the MLPP NI-2 ISDN
variant with CallPriorityMode set to 1.
mlpp-nwrk-id Defines the MLPP network identifier (i.e., International prefix or
[MLPPNetworkIdentifier] Telephone Country Code/TCC) for IP-to-ISDN calls, according
to the UCR 2008 and ITU Q.955 specifications.
The valid range is 1 to 999. The default is 1 (i.e., USA).
The MLPP network identifier is sent in the Facility IE of the ISDN
Setup message. For example:
MLPPNetworkIdentifier set to default (i.e., USA, 1):
PlaceCall- MLPPNetworkID:0100
MlppServiceDomain:123abc, MlppPrecLevel:5
Fac(1c): 91 a1 15 02 01 05 02 01 19 30 0d 0a 01 05 0a 01 01
04 05 01 00 12 3a bc
MLPPNetworkIdentifier set to 490:
PlaceCall- MLPPNetworkID:9004
MlppServiceDomain:123abc, MlppPrecLevel:5
Fac(1c): 91 a1 15 02 01 0a 02 01 19 30 0d 0a 01 05 0a 01 01
04 05 90 04 12 3a bc
MLPP Default Service Domain Defines the MLPP default service domain string. If the device
mlpp-dflt-srv-domain receives a non-MLPP ISDN incoming call (without a Precedence
IE), it uses the parameter (if different than “FFFFFF”) as a
[MLPPDefaultServiceDomain]
Service domain in the SIP Resource-Priority header in outgoing
(Tel-to-IP calls) INVITE messages. The parameter is used in
conjunction with the parameter SIPDefaultCallPriority.
If MLPPDefaultServiceDomain is set to 'FFFFFF', the device
interworks the non-MLPP ISDN call to non-MLPP SIP call, and
the outgoing INVITE does not contain the Resource-Priority
header.
The valid value is a 6 hexadecimal digits. The default is
"000000".
Note: The parameter is applicable only to the MLPP NI-2 ISDN
variant with CallPriorityMode set to 1.
Parameter Description
Note: The parameter is applicable only to MLPP priority call
handling (i.e., only when the CallPriorityMode parameter is set
to 1).
Multiple Differentiated Services Code Points (DSCP) per MLPP Call Priority Level (Precedence)
Parameters
The MLPP service allows placement of priority calls, where properly validated users can preempt
(terminate) lower-priority phone calls with higher-priority calls. For each MLPP call priority level, the
DSCP can be set to a value from 0 to 63. The Resource Priority value in the Resource-Priority SIP
header can be one of the following:
MLPP Precedence Level Precedence Level in Resource-Priority SIP Header
0 (lowest) routine
2 priority
4 immediate
6 flash
8 flash-override
9 (highest) flash-override-override
RTP DSCP for MLPP Routine Defines the RTP DSCP for MLPP Routine precedence call level.
dscp-4-mlpp-rtn The valid range is -1 to 63. The default is -1.
[MLPPRoutineRTPDSCP] Note: If set to -1, the DiffServ value is taken from the global
parameter PremiumServiceClassMediaDiffServ or as defined in
IP Profiles per call.
RTP DSCP for MLPP Priority Defines the RTP DSCP for MLPP Priority precedence call level.
dscp-4-mlpp-prio The valid range is -1 to 63. The default is -1.
[MLPPPriorityRTPDSCP] Note: If set to -1, the DiffServ value is taken from the global
parameter PremiumServiceClassMediaDiffServ or as defined in
IP Profiles per call.
RTP DSCP for MLPP Immediate Defines the RTP DSCP for MLPP Immediate precedence call
dscp-4-mlpp-immed level.
[MLPPImmediateRTPDSCP] The valid range is -1 to 63. The default is -1.
Note: If set to -1, the DiffServ value is taken from the global
parameter PremiumServiceClassMediaDiffServ or as defined in
IP Profiles per call.
RTP DSCP for MLPP Flash Defines the RTP DSCP for MLPP Flash precedence call level.
dscp-4-mlpp-flsh The valid range is -1 to 63. The default is -1.
[MLPPFlashRTPDSCP] Note: If set to -1, the DiffServ value is taken from the global
parameter PremiumServiceClassMediaDiffServ or as defined in
IP Profiles per call.
RTP DSCP for MLPP Flash Defines the RTP DSCP for MLPP Flash-Override precedence
Override call level.
dscp-4-mlpp-flsh-ov The valid range is -1 to 63. The default is -1.
[MLPPFlashOverRTPDSCP] Note: If set to -1, the DiffServ value is taken from the global
parameter PremiumServiceClassMediaDiffServ or as defined in
IP Profiles per call.
RTP DSCP for MLPP Flash- Defines the RTP DSCP for MLPP Flash-Override-Override
Override-Override precedence call level.
Parameter Description
dscp-4-mlpp-flsh-ov-ov The valid range is -1 to 63. The default is -1.
[MLPPFlashOverOverRTPDSCP] Note: If set to -1, the DiffServ value is taken from the global
parameter PremiumServiceClassMediaDiffServ or as defined in
IP Profiles per call.
Parameter Description
Parameter Description
Trunk Name Defines an arbitrary name for a trunk (where x denotes the trunk
config-voip > interface number for the ini file parameter). This can be used to help you
<e1|t1|bri> name easily identify the trunk.
[DigitalPortInfo_x] The valid value is a string of up to 40 characters. The following
special characters can be used (without the quotes):
" " (space)
"." (period)
"=" (equal sign)
"-" (hyphen)
"_" (underscore)
"#" (pound sign)
By default, the value is undefined.
Protocol Type Defines the PSTN protocol for all the Trunks. To configure the
configure voip > interface e1- protocol type for a specific Trunk, use the ini file parameter
t1|bri > protocol ProtocolType_x:
[ProtocolType] [0] NONE
[1] E1 EURO ISDN = ISDN PRI Pan-European (CTR4)
protocol
[2] T1 CAS = Common T1 robbed bits protocols including E&M
wink start, E&M immediate start, E&M delay dial/start and loop-
start and ground start.
[3] T1 RAW CAS
[4] T1 TRANSPARENT = Transparent protocol, where no
signaling is provided by the device. Timeslots 1 to 24 of all
trunks are mapped to DSP channels.
[5] E1 TRANSPARENT 31 = Transparent protocol, where no
signaling is provided by the device. Timeslots 1 to 31 of each
trunk are mapped to DSP channels.
[6] E1 TRANSPARENT 30 = Transparent protocol, where no
signaling is provided by the device. Timeslots 1 to 31,
excluding time slot 16 of all trunks are mapped to DSP
channels.
[7] E1 MFCR2 = Common E1 MFC/R2 CAS protocols
(including line signaling and compelled register signaling).
[8] E1 CAS = Common E1 CAS protocols (including line
signaling and MF/DTMF address transfer).
[9] E1 RAW CAS
[10] T1 NI2 ISDN = National ISDN 2 PRI protocol
[11] T1 4ESS ISDN = ISDN PRI protocol for the
Lucent™/AT&T™ 4ESS switch.
[12] T1 5ESS 9 ISDN = ISDN PRI protocol for the
Lucent™/AT&T™ 5ESS-9 switch.
[13] T1 5ESS 10 ISDN = ISDN PRI protocol for the
Lucent™/AT&T™ 5ESS-10 switch.
[14] T1 DMS100 ISDN = ISDN PRI protocol for the Nortel™
DMS switch.
[15] J1 TRANSPARENT
[16] T1 NTT ISDN = ISDN PRI protocol for the Japan - Nippon
Telegraph Telephone (known also as INS 1500).
configure voip > interface e1-t1 > [0] Extended Super Frame = (Default) Depends on protocol
framing type:
[FramingMethod] E1: E1 CRC4 MultiFrame Format extended G.706B (same
as c)
T1: T1 Extended Super Frame with CRC6 (same as D)
[1] Super Frame = T1 SuperFrame Format (as B).
[a] E1 FRAMING DDF = E1 DoubleFrame Format - CRC4 is
forced to off
[b] E1 FRAMING MFF CRC4 = E1 CRC4 MultiFrame Format -
CRC4 is always on
[c] E1 FRAMING MFF CRC4 EXT = E1 CRC4 MultiFrame
Format extended G.706B - auto negotiation is on. If the
negotiation fails, it changes automatically to CRC4 off (ddf)
[A] T1 FRAMING F4 = T1 4-Frame multiframe.
[B] T1 FRAMING F12 = T1 12-Frame multiframe (D4).
[C] T1 FRAMING ESF = T1 Extended SuperFrame without
CRC6
[D] T1 FRAMING ESF CRC6 = T1 Extended SuperFrame with
CRC6
[E] T1 FRAMING F72 = T1 72-Frame multiframe (SLC96)
[F] T1 FRAMING ESF CRC6 J2 = J1 Extended SuperFrame
with CRC6 (Japan)
[FramingMethod_x] Same as the description for parameter FramingMethod, but for a
specific trunk ID (where x denotes the Trunk ID and 0 is the first
Trunk).
Clock Master Determines the Tx clock source of the E1/T1 line.
configure voip > interface e1-t1 > [0] Recovered = (Default) Generate the clock according to the
clock-masterclock-master Rx of the E1/T1 line.
[ClockMaster] [1] Generated = Generate the clock according to the internal
TDM bus.
Note:
The source of the internal TDM bus clock is determined by the
parameter TDMBusClockSource.
The parameter is applicable only to E1/T1 interfaces.
[ClockMaster_x] Same as the description for parameter ClockMaster, but for a
specific Trunk ID (where x denotes the Trunk ID and 0 is the first
Trunk).
Note: The parameter is applicable only to E1/T1 interfaces.
Line Code Selects B8ZS or AMI for T1 spans, and HDB3 or AMI for E1
configure voip > interface e1-t1 > spans.
line-code [0] B8ZS = (Default) B8ZS line code (for T1 trunks only).
[LineCode] [1] AMI = AMI line code.
[2] HDB3 = HDB3 line code (for E1 trunks only).
[LineCode_x] Same as the description for parameter LineCode, but for a
specific trunk ID (where 0 denotes the first trunk).
[AdminState] Defines the administrative state for all trunks.
[0] = Lock the trunk; stops trunk traffic to configure the trunk
protocol type.
[1] = Shutting down (read only).
Parameter Description
Idle PCM Pattern Defines the PCM Pattern that is applied to the PSTN timeslot (B-
configure voip > media tdm channel) when the channel is idle.
> idle-pcm-pattern The range is 0 to 255. The default is set internally according to the
[IdlePCMPattern] Law select 1 (0xFF for Mu-Law; 0x55 for A-law).
Note: For the parameter to take effect, a device reset is required.
Idle ABCD Pattern Defines the ABCD (CAS) Pattern that is applied to the CAS signaling
configure voip > media tdm bus when the channel is idle.
> idle-abcd-pattern The valid range is 0x0 to 0xF. The default is -1 (i.e., default pattern is
[IdleABCDPattern] 0000).
Note:
For the parameter to take effect, a device reset is required.
The parameter is applicable only when using PSTN interface with
PRI CAS protocols.
TDM Bus Clock Source Defines the clock source to which the device synchronizes.
[TDMBusClockSource] [1] Internal = (Default) Generate clock from local source.
Parameter Description
[4] Network = Recover clock from PSTN line.
Note: For the parameter to take effect, a device reset is required.
TDM Bus Local Reference Defines the physical Trunk ID from which the device recovers
configure voip > media tdm (receives) its clock synchronization.
> tdm-bus-local-reference The range is 0 to the maximum number of Trunks. The default is 0.
[TDMBusLocalReference] Note: The parameter is applicable only if the parameter
TDMBusClockSource is set to 4 and the parameter
TDMBusPSTNAutoClockEnable is set to 0.
TDM Bus Enable Fallback Defines the automatic fallback of the clock.
[TDMBusEnableFallback] [0] Manual (default)
[1] Auto Non-Revertive
[2] Auto Revertive
TDM Bus Fallback Clock Determines the fallback clock source on which the device
Source synchronizes in the event of a clock failure.
[TDMBusFallbackClock] [4] Network (default)
[8] H.110_A
[9] H.110_B
[10] NetReference1
[11] NetReference2
TDM Bus Net Reference Defines the NetRef frequency (for both generation and
Speed synchronization).
[TDMBusNetrefSpeed] [0] 8 kHz (default)
[1] 1.544 MHz
[2] 2.048 MHz
TDM Bus PSTN Auto Enables the PSTN trunk Auto-Fallback Clock feature.
FallBack Clock [0] Disable = (Default) Recovers the clock from the trunk line
configure voip > media tdm defined by the parameter TDMBusLocalReference.
> pstn-bus-auto-clock [1] Enable = Recovers the clock from any connected synchronized
[TDMBusPSTNAutoClockEn slave trunk line. If this trunk loses its synchronization, the device
able] attempts to recover the clock from the next trunk. Note that initially,
the device attempts to recover the clock from the trunk defined by
the parameter TDMBusLocalReference.
Note:
For the parameter to take effect, a device reset is required.
The parameter is applicable only if the TDMBusClockSource
parameter is set to 4.
TDM Bus PSTN Auto Clock Enables the PSTN trunk Auto-Fallback Reverting feature. If enabled
Reverting and a trunk returning to service has an AutoClockTrunkPriority
configure voip > media tdm parameter value that is higher than the priority of the local reference
> pstn-bus-auto-clock- trunk (set in the TDMBusLocalReference parameter), the local
reverting reference reverts to the trunk with the higher priority that has returned
to service for the device's clock source.
[TDMBusPSTNAutoClockRe
vertingEnable] [0] Disable (default)
[1] Enable
Note:
For the parameter to take effect, a device reset is required.
The parameter is applicable only when the
TDMBusPSTNAutoClockEnable parameter is set to 1.
Parameter Description
Auto Clock Trunk Priority Defines the trunk priority for auto-clock fallback (per trunk parameter).
configure voip > interface The valid range is 0 to 100, where 0 (default) is the highest priority and
e1-t1|bri > clock-priority 100 indicates that the device does not perform a fallback to the trunk
clock-priority (typically, used to mark untrusted source of clock).
[AutoClockTrunkPriority] Note: Fallback is enabled when the TDMBusPSTNAutoClockEnable
parameter is set to 1.
Parameter Description
Parameter Description
CASFileName_0 = 'E_M_WinkTable.dat'
CASFileName_1 = 'E_M_ImmediateTable.dat'
CASTableIndex_0 = 0
CASTableIndex_1 = 0
CASTableIndex_2 = 1
CASTableIndex_3 = 1
Note:
You can define CAS tables per B-channel using the parameter
CASChannelIndex.
The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
Dial Plan Defines the CAS Dial Plan name per trunk.
configure voip > interface e1-t1 The range is up to 11 characters.
> cas-dial-plan-name For example, the below configures E1_MFCR2 trunk with a single
[CASTrunkDialPlanName_x] protocol (Trunk 5):
ProtocolType_5 = 7
CASFileName_0='R2_Korea_CP_ANI.dat'
CASTableIndex_5 = 0
DialPlanFileName = 'DialPlan_USA.dat'
CASTrunkDialPlanName_5 = 'AT_T'
Note: The x in the ini file parameter name
denotes the trunk number, where 0 is Trunk 1.
[CASFileName_x] Defines the CAS file name (e.g., 'E_M_WinkTable.dat') that defines
the CAS protocol, where x denotes the CAS file ID (0-7). It is
possible to define up to eight different CAS files by repeating the
parameter. Each CAS file can be associated with one or more of
the device's trunks, using the parameter CASTableIndex_x.
Note: For the parameter to take effect, a device reset is required.
CAS Table per Channel Defines the loaded CAS protocol table index per B-channel
configure voip > interface e1-t1 pertaining to a CAS trunk. The parameter is assigned a string value
> cas-channel-index and can be set in one of the following two formats:
[CASChannelIndex] CAS table per channel: Each channel is separated by a
comma and the value entered denotes the CAS table index
used for that channel. The syntax is <CAS index>,<CAS index>
(e.g., "1,2,1,2…"). For this format, 31 indices must be defined
for E1 trunks (including dummy for B-channel 16), or 24 indices
for T1 trunks. Below is an example for configuring a T1 CAS
trunk (Trunk 5) with several CAS variants:
ProtocolType_5 = 7
CASFILENAME_0='E_M_FGBWinkTable.dat'
CASFILENAME_1='E_M_FGDWinkTable.dat'
CASFILENAME_2='E_M_WinkTable.txt'
CasChannelIndex_5 =
‘0,0,0,1,1,1,2,2,2,0,0,0,1,1,1,0,1,2,0,2,1,2,2,
2’
CASDelimitersPaddingUsage_5 = 1
CAS table per channel group: Each channel group is
separated by a colon and each channel is separated by a
comma. The syntax is <x-y channel range>:<CAS table index>,
(e.g., "1-10:1,11-31:3"). Every B-channel (including 16 for E1)
must belong to a channel group. Below is an example for
configuring an E1 CAS trunk (Trunk 5) with several CAS
Parameter Description
variants:
ProtocolType_5 = 8
CASFILENAME_2='E1_R2D'
CASFILENAME_7= E_M_ImmediateTable_A-Bit.txt'
CasChannelIndex_5 = ‘1-10:2,11-20:7,21-31:2’
Note:
To configure the parameter, the trunk must first be stopped.
Only one of these formats can be implemented; not both.
When the parameter is not configured, a single CAS table for
the entire trunk is used, configured by the parameter
CASTableIndex.
[CASTablesNum] Defines how many CAS protocol configurations files are loaded.
The valid range is 1 to 8.
Note: For the parameter to take effect, a device reset is required.
CAS State Machines Parameters
Note: To configure the CAS State Machine table using the Web interface, see 'Configuring CAS State
Machines' on page 483. The CAS state machine can be configured only through the Web-based
management tool.
Generate Digit On Time Generates digit on-time (in msec).
[CASStateMachineGenerateDig The value must be a positive value. The default is -1.
itOnTime]
Generate Inter Digit Time Generates digit off-time (in msec).
[CASStateMachineGenerateInt The value must be a positive value. The default is -1.
erDigitTime]
DTMF Max Detection Time Detects digit maximum on time (according to DSP detection
[CASStateMachineDTMFMaxO information event) in msec units.
nDetectionTime] The value must be a positive value. The default is -1.
DTMF Min Detection Time Detects digit minimum on time (according to DSP detection
[CASStateMachineDTMFMinOn information event) in msec units. The digit time length must be
DetectionTime] longer than this value to receive a detection. Any number may be
used, but the value must be less than
CasStateMachineDTMFMaxOnDetectionTime.
The value must be a positive value. The default is -1.
MAX Incoming Address Digits Defines the limitation for the maximum address digits that need to
[CASStateMachineMaxNumOfI be collected. After reaching this number of digits, the collection of
ncomingAddressDigits] address digits is stopped.
The value must be an integer. The default is -1.
MAX Incoming ANI Digits Defines the limitation for the maximum ANI digits that need to be
[CASStateMachineMaxNumOfI collected. After reaching this number of digits, the collection of ANI
ncomingANIDigits] digits is stopped.
The value must be an integer. The default is -1.
Collect ANI In some cases, when the state machine handles the ANI collection
[CASStateMachineCollectANI] (not related to MFCR2), you can enable the state machine to
collect ANI or discard ANI.
[0] No = Don't collect ANI.
[1] Yes = Collect ANI.
Parameter Description
[-1] Default = Default value.
Digit Signaling System Defines which Signaling System to use in both directions
[CASStateMachineDigitSignalin (detection\generation).
gSystem] [0] DTMF = DTMF signaling.
[1] MF = (Default) MF signaling.
[-1] Default = Default value.
Parameter Description
Parameter Description
conditions are met:
The parameter TerminationSide is set to 0 ('User side').
The PSTN protocol type (ProtocolType) is configured
as Euro ISDN.
ISDN Flexible Behavior Parameters
ISDN protocol is implemented in different switches/PBXs by different vendors. Several
implementations may vary slightly from the specification. Therefore, to provide a flexible interface that
supports these ISDN variants, the ISDN behavior parameters can be used.
Incoming Calls Behavior Determines the bit-field used to determine several behavior
configure voip > interface e1-t1|bri > options that influence how the ISDN Stack INCOMING calls
isdn-bits-incoming-calls-behavior behave.
[ISDNInCallsBehavior] [32] DATA CONN RS = The device automatically sends a
Q.931 Connect (answer) message on incoming Tel calls
(Q.931 Setup).
[64] VOICE CONN RS = The device sends a Connect
(answer) message on incoming Tel calls.
[2048] CHAN ID IN FIRST RS = The device sends Channel
ID in the first response to an incoming Q.931 Call Setup
message. Otherwise, the Channel ID is sent only if the
device requires changing the proposed Channel ID.
[4096] USER SETUP ACK = (Default) The Setup Ack
message is sent by the SIP Gateway application layer and
not automatically by the PSTN stack.
[8192] CHAN ID IN CALL PROC = The device sends
Channel ID in a Q.931 Call Proceeding message.
[65536] PROGR IND IN SETUP ACK = (Default) The
device includes Progress Indicator (PI=8) in Setup Ack
message if an empty called number is received in an
incoming Setup message. This option is applicable to the
overlap dialing mode. The device also plays a dial tone (for
TimeForDialTone) until the next called number digits are
received.
[2147483648] USER SCREEN INDICATOR = When the
device receives two Calling Number IE's in the Setup
message, the device, by default, uses only one of the
numbers according to the following:
Network provided, Network provided - the first calling
number is used
Network provided, User provided: the first one is used
User provided, Network provided: the second one is
used
User provided, user provided: the first one is used
When this bit is configured, the device behaves as follows:
Network provided, Network provided: the first calling
number is used
Network provided, User provided: the second one is
used
User provided, Network provided: the first one is used
User provided, user provided: the first one is used
Note:
In the Web interface, the parameter displays the summation
of the enabled optional bit values, in hex format. For
Parameter Description
example, the default value is 0x11000 (69632 in decimal),
which is the summation of the two bit options, USER
SETUP ACK (0x01000 or 4096 in decimal) and PROGR
IND IN SETUP ACK (0x10000 or 65536 in decimal) that are
enabled by default (i.e., 4096 + 65536 = 69632).
When using the ini file to configure the device to support
several ISDNInCallsBehavior features, enter a summation
of the individual feature values. For example, to support
both [2048] and [65536] features, set ISDNInCallsBehavior
= 67584 (i.e., 2048 + 65536).
[ISDNInCallsBehavior_x] Same as the description for the parameter
ISDNInCallsBehavior, but per trunk (i.e., where x denotes the
Trunk ID).
Q.931 Layer Response Behavior Bit-field used to determine several behavior options that
configure voip > interface e1-t1|bri > influence the behaviour of the Q.931 protocol.
isdn-bits-ns-behavior [0] = Disable (default).
[ISDNIBehavior] [1] NO STATUS ON UNKNOWN IE = Q.931 Status
message isn't sent if Q.931 received message contains an
unknown/unrecognized IE. By default, the Status message
is sent.
Note: This value is applicable only to ISDN variants in
which sending of Status message is optional.
[2] NO STATUS ON INV OP IE = Q.931 Status message
isn't sent if an optional IE with invalid content is received.
By default, the Status message is sent.
Note: This option is applicable only to ISDN variants in
which sending of Status message is optional.
[4] ACCEPT UNKNOWN FAC IE = Accepts
unknown/unrecognized Facility IE. Otherwise, the Q.931
message that contains the unknown Facility IE is rejected
(default).
Note: This option is applicable only to ISDN variants where
a complete ASN1 decoding is performed on Facility IE.
[128] SEND USER CONNECT ACK = The Connect ACK
message is sent in response to received Q.931 Connect;
otherwise, the Connect ACK is not sent.
Note: This option is applicable only to Euro ISDN User side
outgoing calls.
[512] EXPLICIT INTERFACE ID = Enables configuration of
T1 NFAS Interface ID (refer to the parameter
ISDNNFASInterfaceID_x).
Note: This value is applicable only to 4/5ESS, DMS, NI-2
and HKT variants.
[2048] ALWAYS EXPLICIT = Always set the Channel
Identification IE to explicit Interface ID, even if the B-
channel is on the same trunk as the D-channel.
Note: This value is applicable only to 4/5ESS, DMS and NI-
2 variants.
[32768] ACCEPT MU LAW =Mu-Law is also accepted in
ETSI.
[65536] EXPLICIT PRES SCREENING = The calling party
number (octet 3a) is always present even when
presentation and screening are at their default.
Parameter Description
Note: This option is applicable only to ETSI, NI-2, and
5ESS.
[131072] STATUS INCOMPATIBLE STATE = Clears the
call on receipt of Q.931 Status with incompatible state.
Otherwise, no action is taken (default).
[262144] STATUS ERROR CAUSE = Clear call on receipt
of Status according to cause value.
[524288] ACCEPT A LAW =A-Law is also accepted in
5ESS.
[2097152] RESTART INDICATION = Upon receipt of a
Restart message, acEV_PSTN_RESTART_CONFIRM is
generated.
[4194304] FORCED RESTART = On data link
(re)initialization, send RESTART if there is no call.
[67108864] NS ACCEPT ANY CAUSE = Accept any Q.850
Cause IE from ISDN.
Note: This option is applicable only to Euro ISDN.
[536870912] = Alcatel coding for redirect number and
display name is accepted by the device.
Note: This option is applicable only to QSIG (and relevant
for specific Alcatel PBXs such as OXE).
[1073741824] QSI ENCODE INTEGER = If this bit is set,
INTEGER ASN.1 type is used in operator coding (compliant
to new ECMA standards); otherwise, OBJECT IDENTIFIER
ASN.1 type is used.
Note: This option is applicable only to QSIG.
[2147483648] 5ESS National Mode For Bch Maintenance =
Use the National mode of AT&T 5ESS for B-channel
maintenance.
Note:
To configure the device to support several ISDNIBehavior
features, enter a summation of the individual feature values.
For example, to support both [512] and [2048] features, set
the parameter ISDNIBehavior is set to 2560 (i.e., 512 +
2048).
When configuring through the Web interface, to select the
options click the arrow button and then for each required
option select 1 to enable.
[ISDNIBehavior_x] Same as the description for parameter ISDNIBehavior, but for
a specific trunk ID.
General Call Control Behavior Bit-field for determining several general CC behavior options.
configure voip > interface e1-t1|bri > To select the options, click the arrow button, and then for each
isdn-bits-cc-behavior required option, select 1 to enable. The default is 0 (i.e.,
disable).
[ISDNGeneralCCBehavior]
[2] = Data calls with interworking indication use 64 kbps B-
channels (physical only).
[8] REVERSE CHAN ALLOC ALGO = Channel ID
allocation algorithm.
[16] = The device clears down the call if it receives a
NOTIFY message specifying 'User-Suspended'. A NOTIFY
(User-Suspended) message is used by some networks
Parameter Description
(e.g., in Italy or Denmark) to indicate that the remote user
has cleared the call, especially in the case of a long
distance voice call.
[32] CHAN ID 16 ALLOWED = Applies only to ETSI E1
lines (30B+D). Enables handling the differences between
the newer QSIG standard (ETS 300-172) and other ETSI-
based standards (ETS 300-102 and ETS 300-403) in the
conversion of B-channel ID values into timeslot values:
In 'regular ETSI' standards, the timeslot is identical to
the B-channel ID value, and the range for both is 1 to
15 and 17 to 31. The D-channel is identified as
channel-id #16 and carried into the timeslot #16.
In newer QSIG standards, the channel-id range is 1 to
30, but the timeslot range is still 1 to 15 and 17 to 31.
The D-channel is not identified as channel-id #16, but
is still carried into the timeslot #16.
When this bit is set, the channel ID #16 is considered
as a valid B-channel ID, but timeslot values are
converted to reflect the range 1 to 15 and 17 to 31.
This is the new QSIG mode of operation. When this bit
is not set (default), the channel_id #16 is not allowed,
as for all ETSI-like standards.
[64] USE T1 PRI = PRI interface type is forced to T1.
[128] USE E1 PRI = PRI interface type is forced to E1.
[256] START WITH B CHAN OOS = B-channels start in the
Out-Of-Service state (OOS).
[512] CHAN ALLOC LOWEST = CC allocates B-channels
starting from the lowest available B-channel id.
[1024] CHAN ALLOC HIGHEST = CC allocates B-channels
starting from the highest available B-channel id.
[16384] CC_TRANSPARENT_UUI bit: The UUI-protocol
implementation of CC is disabled allowing the application to
freely send UUI elements in any primitive, regardless of the
UUI-protocol requirements (UUI Implicit Service 1). This
allows more flexible application control on the UUI. When
this bit is not set (default behavior), CC implements the
UUI-protocol as specified in the ETS 300-403 standards for
Implicit Service 1.
[65536] GTD5 TBCT = CC implements the VERIZON-GTD-
5 Switch variant of the TBCT Supplementary Service, as
specified in FSD 01-02-40AG Feature Specification
Document from Verizon. Otherwise, TBCT is implemented
as specified in GR-2865-CORE specification (default
behavior).
Note: When using the ini file to configure the device to support
several ISDNGeneralCCBehavior features, add the individual
feature values. For example, to support both [16] and [32]
features, set ISDNGeneralCCBehavior = 48 (i.e., 16 + 32).
Outgoing Calls Behavior Determines several behaviour options (bit fields) that influence
configure voip > interface e1-t1 the behaviour of the ISDN Stack outgoing calls. To select
bri > isdn-bits-outgoing-calls- options, click the arrow button, and then for each required
behavior option, select 1 to enable. The default is 0 (i.e., disable).
[ISDNOutCallsBehavior] [2] USER SENDING COMPLETE =The default behavior of
the device (when this bit is not set) is to automatically
Parameter Description
generate the Sending-Complete IE in the Setup message.
This behavior is used when overlap dialing is not needed.
When overlap dialing is needed, set this bit and the
behavior is changed to suit the scenario, i.e., Sending-
Complete IE is added when required in the Setup message
for Enblock mode or in the last Digit with Overlap mode.
[16] USE MU LAW = The device sends G.711-m-Law in
outgoing voice calls. When disabled, the device sends
G.711-A-Law in outgoing voice calls.
Note: This option is applicable only to the Korean variant.
[128] DIAL WITH KEYPAD = The device uses the Keypad
IE to store the called number digits instead of the
CALLED_NB IE.
Note: This option is applicable only to the Korean variant
(Korean network). This is useful for Korean switches that
don't accept the CALLED_NB IE.
[256] STORE CHAN ID IN SETUP = The device forces the
sending of a Channel-Id IE in an outgoing Setup message
even if it's not required by the standard (i.e., optional) and
no Channel-Id has been specified in the establishment
request. This is useful for improving required compatibility
with switches. On PRI lines it indicates an unused channel
ID, preferred only.
[512] USE A LAW = The device sends G.711 A-Law in
outgoing voice calls. When disabled, the device sends the
default G.711-Law in outgoing voice calls.
Note: The option is applicable only to the E10 variant (T1
ISDN).
[1024] = Numbering plan/type for T1 IP-to-Tel calling
numbers are defined according to the manipulation tables
or according to the RPID header (default). Otherwise, the
plan/type for T1 calls are set according to the length of the
calling number.
Note: The option is applicable only to T1 ISDN.
[2048] = The device accepts any IA5 character in the
called_nb and calling_nb strings and sends any IA5
character in the called_nb, and is not restricted to extended
digits only (i.e., 0-9,*,#).
[16384] DLCI REVERSED OPTION = Behavior bit used in
the IUA interface groups to indicate that the reversed format
of the DLCI field must be used.
Note: When using the ini file to configure the device to support
several ISDNOutCallsBehavior features, add the individual
feature values. For example, to support both [2] and [16]
features, set ISDNOutCallsBehavior = 18 (i.e., 2 + 16).
[ISDNOutCallsBehavior_x] Same as the description for parameter ISDNOutCallsBehavior,
but for a specific trunk ID.
ISDN NS Behaviour 2 Bit-field to determine several behavior options that influence
configure voip > interface e1-t1|bri > the behavior of the Q.931 protocol.
isdn-bits-ns-extension-behavior [8] NS BEHAVIOUR2 ANY UUI = Any User to User
[ISDNNSBehaviour2] Information Element (UUIE) is accepted for any protocol
discriminator. This is useful for interoperability with non-
Parameter Description
standard switches.
[16] NS BEHAVIOUR2 DISPLAY = The Display IE is
accepted even if it is not defined in the QSIG ISDN protocol
standard. This is applicable only when configuration is QSI.
[64] NS BEHAVIOUR2 FAC REJECT = When this bit is set,
the device answers with a Facility IE message with the
Reject component on receipt of Facility IE with
unknown/invalid Invoke component. This bit is implemented
in QSIG and ETSI variants.
[PSTNExtendedParams] Determines the bit map for special PSTN behavior parameters:
[0] = (Default) Applicable for NI-2 ISDN and QSIG
"Networking Extensions". This bit (i.e., bit #0) is responsible
for the Invoke ID size:
If this bit is not set (default), then the Invoke ID size is
always one byte, with a value of 01 to 7f.
If this bit is set, then the Invoke ID size is one or two
bytes according to the Invoke ID value.
[2] = Applicable to the ROSE format (according to the old
QSIG specifications). This bit (i.e., bit #1) is responsible for
the QSIG octet 3. According to the ECMA-165 new version,
octet 3 in all QSIG supplementary services Facility
messages should be 0x9F = Networking Extensions.
However, according to the old version, the value should be
0x91 = ROSE:
If this bit is not set (default): 0x9F = Networking
Extensions.
If this bit is set: 0x91 = ROSE.
[3] = Use options [0] and [2] above.
Note: For the parameter to take effect, a device reset is
required.
NFAS Parameters
(Note: The parameters are applicable only to PRI interfaces.)
NFAS Group Number Defines the ISDN Non-Facility Associated Signaling (NFAS)
configure voip > interface e1-t1 > group number (NFAS member), per trunk.
isdn-nfas-group-number [0] = (Default) Non-NFAS trunk.
[NFASGroupNumber_x] [1] to [12] = NFAS group number.
Trunks that belong to the same NFAS group have the same
number. With NFAS, you can use a single D-channel to control
multiple PRI interfaces.
Note:
For the parameter to take effect, a device reset is required.
The parameter is applicable only to T1 ISDN protocols.
The x in the ini file parameter name denotes the trunk
number, where 0 is Trunk 1.
For more information on NFAS, see ISDN Non-Facility
Associated Signaling (NFAS) on page 495.
D-channel Configuration Defines primary, backup (optional), and B-channels only, per
configure voip > interface e1-t1 > trunk.
isdn-nfas-dchannel-type [0] PRIMARY= (Default) Primary Trunk - contains a D-
[DChConfig_x] channel that is used for signaling.
Parameter Description
[1] BACKUP = Backup Trunk - contains a backup D-
channel that is used if the primary D-channel fails.
[2] NFAS = NFAS Trunk - contains only 24 B-channels,
without a signaling D-channel.
Note:
The parameter is applicable only to T1 ISDN protocols.
The x in the ini file parameter name denotes the trunk
number, where 0 is Trunk 1.
NFAS Interface ID Defines a different Interface ID per T1 trunk.
configure voip > interface e1-t1 > The valid range is 0 to 100. The default interface ID equals the
isdn-nfas-interface-id trunk's ID.
[ISDNNFASInterfaceID_x] Note:
To set the NFAS interface ID, configure ISDNIBehavior_x to
include '512' feature per T1 trunk.
The x in the ini file parameter name denotes the trunk
number, where 0 is Trunk 1.
For more information on NFAS, see ISDN Non-Facility
Associated Signaling (NFAS) on page 495.
Parameter Description
ISDN Parameters
Send Local Time To ISDN Determines the device's handling of the date and time sent in the
Connect ISDN Connect message (Date / Time IE) upon receipt of SIP 200 OK
[SendLocalTimeToISDNConn messages.
ect] [0] Disable = (Default) If the SIP 200 OK includes the Date
header, the device sends its value in the ISDN Connect Date /
Time IE. If the 200 OK does not include this header, it does not
add the Date / Time IE to the sent ISDN Connect message.
[1] Enable = If the SIP 200 OK includes the Date header, the
device sends its value (i.e. date and time) in the ISDN Connect
Date / Time IE. If the 200 OK does not include this header, the
device uses its internal, local date and time for the Date / Time IE,
which it adds to the sent ISDN Connect message.
[2] Always Send Local Date and Time = The device always sends
its local date and time (obtained from its internal clock) to PBXs in
ISDN Q.931 Connect messages (Date / Time IE). It does this
regardless of whether or not the incoming SIP 200 OK includes
the Date header. If the SIP 200 OK includes the Date header, the
device ignores its value.
Note:
This feature is applicable only to Tel-to-IP calls.
For IP-to-Tel calls, the parameter is not applicable. Only if the
incoming ISDN Connect message contains the Date / Time IE
Parameter Description
does the device add the Date header to the sent SIP 200 OK
message.
Min Routing Overlap Digits Defines the minimum number of overlap digits to collect (for ISDN
configure voip > gateway overlap dialing) before sending the first SIP message for routing Tel-
dtmf-supp-service dtmf-and- to-IP calls.
dialing > min-dg-b4-routing The valid value range is 0 to 49. The default is 1.
[MinOverlapDigitsForRouting] Note: The parameter is applicable when the ISDNRxOverlap
parameter is set to [2] or [3].
ISDN Overlap IP to Tel Enables ISDN overlap dialing for IP-to-Tel calls. This feature is part of
Dialing ISDN-to-SIP overlap dialing according to RFC 3578.
configure voip > gateway [0] Disable (default)
dtmf-supp-service dtmf-and- [1] Through SIP = The device sends the first received digits from
dialing > isdn-tx-overlap the initial INVITE to the Tel side in an ISDN Setup message. For
[ISDNTxOverlap] each subsequently received re-INVITE message of the same
dialog session, the device sends the collected digits to the Tel
side in ISDN Info Q.931 messages. For each received re-INVITE,
the device sends a SIP 484 Address Incomplete response to
maintain the current dialog session and to receive additional digits
from subsequent re-INVITEs.
[2] Through SIP INFO = The device sends the first received digits
from the initial INVITE to the Tel side in an ISDN Setup message
and then responds to the IP side with a SIP 183. For each
subsequently received SIP INFO message with additional digits of
the same dialog session, the device sends the collected digits to
the Tel side in ISDN Info Q.931 messages. For each received SIP
INFO, the device sends a SIP 200 OK response to maintain the
current dialog session and to receive additional digits from
subsequent INFOs.
Note: When IP-to-Tel overlap dialing is enabled, to send ISDN Setup
messages without the Sending Complete IE, the
ISDNOutCallsBehavior parameter must be set to USER SENDING
COMPLETE (2).
Select type of Overlap Determines the receiving (Rx) type of ISDN overlap dialing for Tel-to-
Receiving IP calls, per trunk.
configure voip > interface e1- [0] None = (Default) Disabled.
t1|bri > ovrlp-rcving-type [1] Local receiving = ISDN Overlap Dialing - the complete number
[ISDNRxOverlap_x] is sent in the INVITE Request-URI user part. The device receives
ISDN called number that is sent in the 'Overlap' mode. The ISDN
Setup message is sent to IP only after the number (including the
Sending Complete IE) is fully received (via Setup and/or
subsequent Info Q.931 messages). In other words, the device
waits until it has received all the ISDN signaling messages
containing parts of the called number, and only then it sends a SIP
INVITE with the entire called number in the Request-URI.
[2] Through SIP = Interworking of ISDN Overlap Dialing to SIP
according to RFC 3578. The device sends the first received digits
from the ISDN Setup message to the IP side in the initial INVITE
message. For each subsequently received ISDN Info Q.931
message, the device sends the collected digits to the IP side in re-
INVITE messages.
[3] Through SIP INFO =Interworking of ISDN Overlap Dialing to
SIP according to RFC 3578. The device sends the first received
Parameter Description
digits from the ISDN Setup message to the IP side in the initial
INVITE message. For each subsequently received ISDN Info
Q.931 message, the device sends the collected digits to the IP
side in INFO messages.
Note:
When option [2] or [3] is configured, you can define the minimum
number of overlap digits to collect before sending the first SIP
message for routing the call, using the
MinOverlapDigitsForRouting parameter.
When option [2] or [3] is configured, even if SIP 4xx responses are
received during this ISDN overlap receiving, the device does not
release the call.
The MaxDigits parameter can be used to limit the length of the
collected number for ISDN overlap dialing (if Sending Complete is
not received).
If a digit map pattern is defined (using the DigitMapping or
DialPlanIndex parameters), the device collects digits until a match
is found (e.g., for closed numbering schemes) or until a timer
expires (e.g., for open numbering schemes). If a match is found
(or the timer expires), the digit collection process is terminated
even if Sending Complete is not received.
For enabling ISDN overlap dialing for IP-to-Tel calls, use the
ISDNTxOverlap parameter.
The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
For more information on ISDN overlap dialing, see 'ISDN Overlap
Dialing' on page 498.
ovrlp-rcving-type Same as the description for parameter ISDNRxOverlap_x, but for all
[ISDNRxOverlap] trunks.
Mute DTMF In Overlap Enables the muting of in-band DTMF detection until the device
configure voip > gateway receives the complete destination number from the ISDN (for Tel-to-
dtmf-supp-service supp- IP calls). In other words, the device does not accept DTMF digits
service-settings > mute-dtmf- received in the voice stream from the PSTN, but only accepts digits
in-overlap from ISDN Info messages.
[MuteDTMFInOverlap] [0] Don't Mute (default).
[1] Mute DTMF in Overlap Dialing = The device ignores in-band
DTMF digits received during ISDN overlap dialing (disables the
DTMF in-band detector).
Note: The parameter is applicable to ISDN Overlap mode only when
dialed numbers are sent using Q.931 Information messages.
[ConnectedNumberType] Defines the Numbering Type of the ISDN Q.931 Connected Number
IE that the device sends in the Connect message to the ISDN (for
Tel-to-IP calls). This is interworked from the P-Asserted-Identity
header in SIP 200 OK.
The default is [0] (i.e., unknown).
configure voip > gateway Defines the Numbering Plan of the ISDN Q.931 Connected Number
dtmf-supp-service supp- IE that the device sends in the Connect message to the ISDN (for
service-settings > connected- Tel-to-IP calls). This is interworked from the P-Asserted-Identity
number-type header in SIP 200 OK.
[ConnectedNumberPlan] The default is [0] (i.e., unknown).
Parameter Description
Parameter Description
message MIME body.
[0] = (Default) ASCII presentation of Q.931 QSIG message.
[1] = Binary encoding of Q.931 QSIG message (according to
ECMA-355, RFC 3204, and RFC 2025).
Note: The parameter is applicable only if the QSIG Tunneling feature
is enabled (using the EnableQSIGTunneling parameter).
Enable Hold to ISDN Enables SIP-to-ISDN interworking of the Hold/Retrieve
configure voip > gateway supplementary service.
dtmf-supp-service supp- [0] Disable (default)
service-settings > hold-to- [1] Enable
isdn
Note:
[EnableHold2ISDN]
The parameter is applicable to Euro ISDN variants - from TE
(user) to NT (network).
If the parameter is disabled, the device plays a held tone to the
Tel side when a SIP request with 0.0.0.0 or "inactive" in SDP is
received. An appropriate CPT file with the held tone should be
used.
[ISDNDuplicateQ931BuffMod Determines the activation/deactivation of delivering raw Q.931
e] messages.
[0] = (Default) ISDN messages aren't duplicated.
[128] = All ISDN messages are duplicated.
Note: For the parameter to take effect, a device reset is required.
ISDN SubAddress Format Determines the encoding format of the SIP Tel URI parameter 'isub',
isdn-subaddr-frmt which carries the encoding type of ISDN subaddresses. This is used
to identify different remote ISDN entities under the same phone
[ISDNSubAddressFormat]
number (ISDN Calling and Called numbers) for interworking between
ISDN and SIP networks.
[0] = (Default) ASCII - IA5 format that allows up to 20 digits.
Indicates that the 'isub' parameter value needs to be encoded
using ASCII characters.
[1] = BCD (Binary Coded Decimal) - allows up to 40 characters
(digits and letters). Indicates that the 'isub' parameter value needs
to be encoded using BCD when translated to an ISDN message.
[2] = User Specified
For IP-to-Tel calls, if the incoming SIP INVITE message includes
subaddress values in the 'isub' parameter for the Called Number (in
the Request-URI) and/or the Calling Number (in the From header),
these values are mapped to the outgoing ISDN Setup message.
If the incoming ISDN Setup message includes 'subaddress' values for
the Called Number and/or the Calling Number, these values are
mapped to the outgoing SIP INVITE message's ‘isub’ parameter in
accordance with RFC 4715.
configure voip > gateway Determines whether the device ignores the Subaddress from the
dtmf-supp-service supp- incoming ISDN Called and Calling numbers when sending to IP.
service-settings > ignore- [0] = (Default) If an incoming ISDN Q.931 Setup message
isdn-subaddress contains a Called/Calling Number Subaddress, the Subaddress is
[IgnoreISDNSubaddress] interworked to the SIP 'isub' parameter according to RFC.
[1] = The device removes the ISDN Subaddress and does not
include the 'isub' parameter in the Request-URI and does not
Parameter Description
process INVITEs with the parameter.
[ISUBNumberOfDigits] Defines the number of digits (from the end) that the device takes from
the called number (received from the IP) for the isub number (in the
sent ISDN Setup message). This feature is applicable only for IP-to-
ISDN calls.
The valid value range is 0 to 36. The default is 0.
This feature operates as follows:
1 If an isub parameter is received in the Request-URI, for example,
INVITE sip:9565645;isub=1234@host.domain:user=phone
SIP/2.0
then the isub value is sent in the ISDN Setup message as the
destination subaddress.
2 If the isub parameter is not received in the user part of the
Request-URI, the device searches for it in the URI parameters of
the To header, for example,
To: "Alex" <sip: 9565645@host.domain;isub=1234>
If present, the isub value is sent in the ISDN Setup message as
the destination subaddress.
3 If the isub parameter is not present in the Request-URI header nor
To header, the device does the following:
If the called number (that appears in the user part of the
Request-URI) starts with zero (0), for example,
INVITE sip:05694564@host.domain:user=phone SIP/2.0
then the device maps this called number to the destination
number of the ISDN Setup message, and the destination
subaddress in this ISDN Setup message remains empty.
If the called number (that appears in the user part of the
Request-URI) does not start with zero, for example,
INVITE sip:5694564@host.domain:user=phone SIP/2.0
then the device maps this called number to the destination
number of the ISDN Setup message, and the destination
subaddress in this ISDN Setup message then contains y
digits from the end of the called number. The y number of
digits can be configured using the ISUBNumberOfDigits
parameter. The default value of ISUBNumberOfDigits is 0,
thus, if the parameter is not configured, and 1) and 2)
scenarios (described above) have not provided an isub value,
the subaddress remains empty.
Default Cause Mapping From Defines a single default ISDN release cause that is used (in ISDN-to-
ISDN to SIP IP calls) instead of all received release causes, except when the
dflt-cse-map-isdn2sip following Q.931 cause values are received: Normal Call Clearing
(16), User Busy (17), No User Responding (18), or No Answer from
[DefaultCauseMapISDN2IP]
User (19).
The range is any valid Q.931 release cause (0 to 127). The default is
0 (i.e., not configured - static mapping is used).
Enable Calling Party Enables the mapping of the calling party category (CPC) between the
Category incoming PSTN message and outgoing SIP message, and vice versa
ni2-cpc (i.e., for IP-to-Tel and Tel-to-IP calls). The CPC characterizes the
station used to originate a call (e.g., a payphone or an operator).
[EnableCallingPartyCategory]
[0] Disable = (Default) CPC is not relayed between SIP and PSTN.
[1] Enable
The CPC is denoted in the PSTN message as follows:
Parameter Description
ISDN PRI NI-2: In the Originating Line Information (OLI)
Information Element (IE) of the ISDN Setup message.
MFC-R2: ANI II digits. The device supports the Brazilian and
Argentinian variants. This regional support is configured using the
CallingPartyCategoryMode.
The CPC is denoted in the SIP INVITE message using the 'cpc='
parameter in the From or P-Asserted-Identity headers. For example,
the 'cpc=' parameter in the below INVITE message is set to
"payphone":
INVITE sip:bob@biloxi.example.com SIP/2.0
To: "Bob" <sip:bob@biloxi.example.com>
From: <tel:+17005554141;cpc=payphone>;tag=1928301774
The table below shows the mapping of CPC between SIP and PSTN:
SIP CPC NI-2 PRI MFC-R2
Argentina Brazil
ordinary 23 II-1 II-1
Calling Party Category Mode Defines the regional Calling Party Category (CPC) mapping variant
cpc-mode between SIP and PSTN for MFC-R2.
[CallingPartyCategoryMode] [0] None (default)
[1] Brazil R2
[2] Argentina R2
Note:
Parameter Description
To enable CPC mapping, set the EnableCallingPartyCategory
parameter to 1.
The parameter is applicable only to the E1 MFC-R2 variant.
usr2usr-hdr-frmt Defines the interworking between the SIP INVITE's User-to-User
[UserToUserHeaderFormat] header and the ISDN User-to-User (UU) IE data.
[0] = (Default) SIP header format: X-UserToUser.
[1] = SIP header format: User-to-User with Protocol Discriminator
(pd) attribute (according to IETF Internet-Draft draft-johnston-
sipping-cc-uui-04). For example:
User-to-
User=3030373435313734313635353b313233343b3834;pd=
4
[2] = SIP header format: User-to-User with encoding=hex at the
end and pd embedded as the first byte (according to IETF
Internet-Draft draft-johnston-sipping-cc-uui-03). For example:
User-to-
User=043030373435313734313635353b313233343b3834;
encoding=hex
where "04" at the beginning of this message is the pd.
[3] = Interworks the SIP User-to-User header containing text
format to ISDN UUIE in hexadecimal format, and vice versa. For
example:
SIP Header in text format:
User-to-User=01800213027b712a;NULL;4582166;
Translated to hexadecimal in the ISDN UUIE:
303138303032313330323762373132613b4e554c4c3b34353
8323136363b
The Protocol Discriminator (pd) used in UUIE is "04" (IUA
characters).
Note: The parameter is applicable for Tel-to-IP and IP-to-Tel calls.
Remove CLI when Restricted Determines (for IP-to-Tel calls) whether the Calling Number and
rmv-cli-when-restr Calling Name IEs are removed from the ISDN Setup message if the
presentation is set to Restricted.
[RemoveCLIWhenRestricted]
[0] No = (Default) IE's are not removed.
[1] Yes = IE's are removed.
Remove Calling Name Enables the device to remove the Calling Name from SIP-to-ISDN
rmv-calling-name calls for all trunks.
[RemoveCallingName] [0] Disable = (Default) Does not remove Calling Name.
[1] Enable = Removes Calling Name.
Note: Some PSTN switches / PBXs may not be configured to support
the receipt of the “Calling Name” information. These switches might
respond to an ISDN Setup message (including the Calling Name)
with an ISDN "REQUESTED_FAC_NOT_SUBSCRIBED" failure. The
parameter can be set to Enable (1) to remove the “Calling Name”
from SIP-to-ISDN calls and allow the call to proceed.
Remove Calling Name Enables the device to remove the Calling Name for SIP-to-ISDN
configure voip > interface bri calls, per trunk.
> rmv-calling-name [-1] Use Global Parameter = (Default) Settings of the global
[RemoveCallingNameForTrun parameter RemoveCallingName are used.
Parameter Description
k_x] [0] Disable = Does not remove Calling Name.
[1] Enable = Remove Calling Name.
Note: The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
Progress Indicator to ISDN Determines the Progress Indicator (PI) to ISDN per trunk.
configure voip > interface e1- [-1] Not Configured = (Default) The PI in ISDN messages is set
t1|bri > pi-to-isdn according to the parameter PlayRBTone2Tel.
[ProgressIndicator2ISDN_x] [0] No PI = PI is not sent to ISDN.
[1] PI = 1; [8] PI = 8: The PI value is sent to PSTN in
Q.931/Proceeding and Alerting messages. Typically, the
PSTN/PBX cuts through the audio channel without playing local
ringback tone, enabling the originating party to hear remote Call
Progress Tones or network announcements.
Note: The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
Set PI in Rx Disconnect Defines the device's behavior per trunk when a Disconnect message
Message is received from the ISDN before a Connect message is received.
configure voip > interface e1- [-1] Not Configured = (Default) Sends a 183 SIP response
t1|bri > pi-in-rx-disc-msg according to the received progress indicator (PI) in the ISDN
[PIForDisconnectMsg_x] Disconnect message. If PI = 1 or 8, the device sends a 183
response, enabling the PSTN to play a voice announcement to the
IP side. If there isn't a PI in the Disconnect message, the call is
released.
[0] No PI = Doesn't send a 183 response to IP. The call is
released.
[1] PI = 1; [8] PI = 8: Sends a 183 response to IP.
Note: The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
[ConnectOnProgressInd] Enables the play of announcements from IP to Tel without the need
to answer the Tel-to-IP call. It can be used with PSTN networks that
don't support the opening of a TDM channel before an ISDN Connect
message is received.
[0] = (Default) Connect message isn't sent after SIP 183 Session
Progress message is received.
[1] = Connect message is sent after SIP 183 Session Progress
message is received.
Local ISDN Ringback Tone Determines whether the ringback tone is played to the ISDN by the
Source PBX/PSTN or by the device, per trunk.
configure voip > interface e1- [0] PBX = (Default) PBX/PSTN plays the ringback tone.
t1|bri > local-isdn-rbt-src [1] Gateway = The device plays the ringback tone.
[LocalISDNRBSource_x] Note:
The parameter is used together with the PlayRBTone2Trunk
parameter.
The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
PSTN Alert Timeout Defines the Alert Timeout (ISDN T301 timer) in seconds for outgoing
configure voip > interface e1- calls to PSTN, per trunk. This timer is used between the time that an
t1|bri > pstn-alrt-timeout ISDN Setup message is sent to the Tel side (IP-to-Tel call
establishment) and a Connect message is received. If Alerting is
Parameter Description
[TrunkPSTNAlertTimeout_x] received, the timer is restarted.
The range is 1 to 600. The default is 180.
Note: The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
B-Channel Negotiation Determines the ISDN B-channel negotiation mode, per trunk.
configure voip > interface e1- [-1] Not Configured = (Default) Use per device configuration of the
t1 > b-channel-nego-for-trunk BChannelNegotiation parameter.
[BChannelNegotiationForTrun [0] Preferred.
k_x] [1] Exclusive.
[2] Any.
Note:
The option Any is applicable only if TerminationSide is set to 0
(i.e., User side).
The x in the ini file parameter name denotes the trunk number,
where 0 is Trunk 1.
configure voip > gateway Enables the device to send an ISDN SERVice message per trunk
dtmf-supp-service supp- upon device reset. The messsage (transmitted on the trunk's D-
service-settings > snd-isdn- channel) indicates the availability of the trunk's B-channels (i.e., trunk
ser-aftr-restart in service).
[SendISDNServiceAfterResta [0] = Disable (default)
rt] [0] = Enable
configure voip > sip-definition Determines whether the Redirect Number is retrieved from the
proxy-and-registration > Facility IE.
redirect-in-facility [0] = (Default) Not supported.
[SupportRedirectInFacility] [1] = Supports partial retrieval of Redirect Number (number only)
from the Facility IE in ISDN Setup messages. This is applicable to
Redirect Number according to ECMA-173 Call Diversion
Supplementary Services.
Note: To enable this feature, the parameter
ISDNDuplicateQ931BuffMode must be set to 1.
configure voip > interface e1- Determines whether ISDN call rerouting (call forward) is performed by
t1|bri > call-re-rte-mode the PSTN instead of by the SIP side. This call forwarding is based on
[CallReroutingMode] Call Deflection for Euro ISDN (ETS-300-207-1) and QSIG (ETSI TS
102 393).
[0] Disable (default).
[1] Enable = Enables ISDN call rerouting. When the device sends
the INVITE message to the remote SIP entity and receives a SIP
302 response with a Contact header containing a URI host name
that is the same as the device's IP address, the device sends a
Facility message with a Call Rerouting invoke method to the ISDN
and waits for the PSTN side to disconnect the call.
Note: When the parameter is enabled, ensure that you configure in
the IP-to-Tel Routing table (PSTNPrefix ini file parameter) a rule to
route the redirected call (using the user part from the 302 Contact
header) to the same Trunk Group from where the incoming Tel-to-IP
call was received.
[EnableCIC] Enables the relay of the Carrier Identification Code (CIC) to the ISDN.
[0] = (Default) Disabled - CIC is not relayed to the ISDN.
[1] = Enabled - CIC (received in the INVITE Request-URI) is
Parameter Description
relayed to the ISDN in the Transit Network Selection (TNS) IE of
the Setup message. For example: INVITE
sip:555666;cic=2345@100.2.3.4 sip/2.0.
Note:
This feature is supported only for SIP-to-ISDN calls.
The parameter AddCicAsPrefix can be used to add the CIC as a
prefix to the destination phone number for routing IP-to-Tel calls.
AoC Support Enables the interworking of ISDN Advice of Charge (AOC) messages
configure voip > gateway to SIP.
dtmf-supp-service supp- [0] Disable (default)
service-settings > aoc- [1] Enable
support For more information on AOC, see 'Advice of Charge Services for
[EnableAOC] Euro ISDN' on page 582.
Add IE in SETUP Global parameter that defines an optional Information Element (IE)
add-ie-in-setup data (in hex format) to add to ISDN Setup messages. You can also
configure this functionality per specific calls, using IP Profiles
[AddIEinSetup]
(IpProfile_AddIEInSetup). For a detailed description of the parameter
and for configuring this functionality in the IP Profiles table, see
'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Trunk Groups to Send IE Defines Trunk Group IDs (up to 50 characters) from where the
trkgrps-to-snd-ie optional ISDN IE (defined by the parameter AddIEinSetup) is sent.
For example: '1,2,4,10,12,6'.
[SendIEonTG]
Note:
You can configure different IE data for Trunk Groups by defining
the parameter for different IP Profile IDs (using the parameter
IPProfile), and then assigning the required IP Profile ID in the IP-
to-Tel Routing table (PSTNPrefix).
When IP Profiles are used for configuring different IE data for
Trunk Groups, the parameter is ignored.
Enable User-to-User IE for Enables transfer of User-to-User (UU) IE from ISDN to SIP.
Tel to IP [0] Disable (default)
uui-ie-for-tel2ip [1] Enable
[EnableUUITel2IP] The device supports the following ISDN-to-SIP interworking: Setup to
SIP INVITE, Connect to SIP 200 OK, User Information to SIP INFO,
Alerting to SIP 18x response, and Disconnect to SIP BYE response
messages.
Note: The interworking of ISDN User-to-User IE to SIP INFO is
applicable only to the Euro ISDN, QSIG, and 4ESS ISDN variants.
Enable User-to-User IE for IP Enables interworking of SIP user-to-user information (UUI) to User-to-
to Tel User IE in ISDN Q.931 messages.
uui-ie-for-ip2tel [0] Disable = (Default) Received UUI is not sent in ISDN message.
[EnableUUIIP2Tel] [1] Enable = The device interworks UUI from SIP to ISDN
messages. The device supports the following SIP-to-ISDN
interworking of UUI:
SIP INVITE to Q.931 Setup
SIP REFER to Q.931 Setup
Parameter Description
SIP 200 OK to Q.931 Connect
SIP INFO to Q.931 User Information
SIP 18x to Q.931 Alerting
SIP BYE to Q.931 Disconnect
Note:
The interworking of ISDN User-to-User IE to SIP INFO is
applicable only to the Euro ISDN, QSIG, and 4ESS ISDN variants.
To interwork the UUIE header from SIP-to-ISDN messages with
the 4ESS ISDN variant, the ISDNGeneralCCBehavior parameter
must be set to 16384.
[Enable911LocationIdIP2Tel] Enables interworking of Emergency Location Identification from SIP
to PRI.
[0] = Disabled (default)
[1] = Enabled
When enabled, the From header received in the SIP INVITE is
translated into the following ISDN IE's:
Emergency Call Control.
Generic Information - to carry the Location Identification Number
information.
Generic Information - to carry the Calling Geodetic Location
information.
Note: The parameter is applicable only to the NI-2 ISDN variant.
early-answer-timeout Global parameter that defines the duration (in seconds) that the
[EarlyAnswerTimeout] device waits for an ISDN Connect message from the called party (Tel
side), started from when it sends a Setup message. You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_EarlyAnswerTimeout). For a detailed description of the
parameter and for configuring this functionality in the IP Profiles table,
see 'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Trunk Transfer Mode Determines the trunk transfer method (for all trunks) when a SIP
configure voip > interface e1- REFER message is received. The transfer method depends on the
t1|bri > trk-xfer-mode-type Trunk's PSTN protocol (configured by the parameter ProtocolType)
and is applicable only when one of these protocols are used:
[TrunkTransferMode]
PSTN Protocol Transfer Method (Described Below)
E1 Euro ISDN [1] ECT [2] or InBand [5]
E1 QSIG [21], Single Step Transfer [4], Path
T1 QSIG [23] Replacement Transfer [2], or InBand [5]
T1 NI2 ISDN [10], TBCT [2] or InBand [5]
T1 4ESS ISDN [11],
T1 5ESS 9 ISDN [12]
T1 DMS-100 ISDN [14] RTL [2] or InBand [5]
T1 RAW CAS [3], T1 [1] CAS NFA DMS-100 or [3] CAS
CAS [2], E1 CAS [8], E1 Normal transfer
RAW CAS [9]
Parameter Description
Parameter Description
sip:URI userpart.
If the hostpart of the Refer-To sip:URI contains the device's IP
address, and if the Trunk Group selected according to the IP to
Tel Routing table is the same Trunk Group as the original call,
then the device performs the in-band DTMF transfer; otherwise,
the device sends the INVITE according to regular transfer rules.
After completing the in-band transfer, the device waits for the
ISDN Disconnect message. If the Disconnect message is received
during the first 5 seconds, the device sends a SIP NOTIFY with
200 OK message; otherwise, the device sends a NOTIFY with 4xx
message.
[6] = Supports AT&T toll free out-of-band blind transfer for trunks
configured with the 4ESS ISDN protocol. AT&T courtesy transfer
is a supplementary service which enables a user (e.g., user "A") to
transform an established call between it and user "B" into a new
call between users "B" and "C", whereby user "A" does not have a
call established with user "C" prior to call transfer. The device
handles this feature as follows:
IP-to-Tel (user side): When a SIP REFER message is
received, the device initiates a transfer by sending a Facility
message to the PBX.
Tel-to-IP (network side): When a Facility message initiating an
out-of-band blind transfer is received from the PBX, the
device sends a SIP REFER message to the IP side (if the
EnableNetworkISDNTransfer parameter is set to 1).
Note: To configure trunk transfer mode per trunk, use the parameter
TrunkTransferMode_x.
[TrunkTransferMode_x] Determines the trunk transfer mode per trunk (where x denotes the
Trunk number). To configure trunk transfer mode for all trunks and for
a description of the parameter options, refer to the parameter
TrunkTransferMode.
[EnableTransferAcrossTrunk Determines whether the device allows ISDN ECT, RLT or TBCT IP-
Groups] to-Tel call transfers between B-channels of different Trunk Groups.
[0] = (Default) Disable - ISDN call transfer is only between B-
channels of the same Trunk Group.
[1] = Enable - the device performs ISDN transfer between any two
PSTN calls (between any Trunk Group) handled by the device.
Note: The ISDN transfer also requires that you configure the
parameter TrunkTransferMode_x to 2.
ISDN Transfer Capabilities Defines the IP-to-ISDN Transfer Capability of the Bearer Capability IE
configure voip > interface e1- in ISDN Setup messages, per trunk (where the x in the ini file
t1|bri > isdn-xfer-cab parameter name denotes the trunk number and where 0 is Trunk 1).
[ISDNTransferCapability_x] [-1] Not Configured
[0] Audio 3.1 (default)
[1] Speech
[2] Data
[3] Audio 7
Note: If the parameter is not configured or set to -1, Audio 3.1
capability is used.
[TransferCapabilityForDataCa Defines the ISDN Transfer Capability for data calls.
lls] [0] = (Default) ISDN Transfer Capability for data calls is 64k
Parameter Description
unrestricted (data).
[1] = ISDN Transfer Capability for data calls is determined
according to the ISDNTransferCapability parameter.
ISDN Transfer On Connect The parameter is used for the ECT/TBCT/RLT/Path Replacement
isdn-trsfr-on-conn ISDN transfer methods. Usually, the device requests the PBX to
connect an incoming and outgoing call. The parameter determines if
[SendISDNTransferOnConne
the outgoing call (from the device to the PBX) must be connected
ct]
before the transfer is initiated.
[0] Alert = (Default) Enables ISDN Transfer if the outgoing call is in
Alerting or Connect state.
[1] Connect = Enables ISDN Transfer only if the outgoing call is in
Connect state.
Note: For RLT ISDN transfer (TrunkTransferMode = 2 and
ProtocolType = 14 DMS-100), the parameter must be set to 1.
configure voip > gateway Defines the timeout (in seconds) for determining ISDN call transfer
dtmf-supp-service supp- (ECT, RLT, or TBCT) failure. If the device does not receive any
service-settings > isdn-xfer- response to an ISDN transfer attempt within this user-defined time,
complete-timeout the device identifies this as an ISDN transfer failure and subsequently
[ISDNTransferCompleteTime performs a hairpin TDM connection or sends a SIP NOTIFY message
out] with a SIP 603 response (depending whether hairpin is enabled or
disabled, using the parameter DisableFallbackTransferToTDM).
The valid range is 1 to 10. The default is 4.
Enable Network ISDN Determines whether the device allows interworking of network-side
Transfer received ECT/TBCT Facility messages (NI-2 TBCT - Two B-channel
configure voip > sip-definition Transfer and ETSI ECT - Explicit Call Transfer) to SIP REFER.
settings > network-isdn-xfer [0] Disable = Rejects ISDN transfer requests.
[EnableNetworkISDNTransfer [1] Enable = (Default) The device sends a SIP REFER message
] to the remote call party if ECT/TBCT Facility messages are
received from the ISDN side (e.g., from a PBX).
[DisableFallbackTransferToT Enables "hairpin" TDM transfer upon ISDN (ECT, RLT, or TBCT) call
DM] transfer failure. When this feature is enabled and an ISDN call
transfer failure occurs, the device sends a SIP NOTIFY message with
a SIP 603 Decline response.
[0] = (Default) The device performs a hairpin TDM transfer upon
ISDN call transfer.
[1] = Hairpin TDM transfer is disabled.
Enable QSIG Transfer Determines whether the device interworks QSIG Facility messages
Update with CallTranferComplete or CallTransferUpdate invoke application
qsig-xfer-update protocol data units (APDU) to SIP UPDATE messages with P-
Asserted-Identity and optional Privacy headers. This feature is
[EnableQSIGTransferUpdate]
supported for IP-to-Tel and Tel-to-IP calls.
[0] Disable = (Default) Ignores QSIG Facility messages with
CallTranferComplete or CallTransferUpdate invokes.
[1] Enable
For example, assume A and C are PBX call parties and B is the SIP
IP phone:
1 A calls B; B answers the call.
2 A places B on hold and calls C; C answers the call.
3 A performs a call transfer (the transfer is done internally by the
Parameter Description
PBX); B and C are connected to one another.
In the above example, the PBX updates B that it is now talking with
C. The PBX updates this by sending a QSIG Facility message with
CallTranferComplete invoke APDU. The device interworks this
message to a SIP UPDATE message containing a P-Asserted-
Identity header with the number and name derived from the QSIG
CallTranferComplete RedirectionNumber and RedirectionName.
Note:
For IP-to-Tel calls, the RedirectionNumber and RedirectionName
in the CallTRansferComplete invoke is derived from the P-
Asserted-Identity and Privacy headers in the received SIP INFO
message.
To include the P-Asserted-Identity header in outgoing SIP
UPDATE messages, set the AssertedIDMode parameter to Add
P-Asserted-Identity.
is-cas-sndhook-flsh Enables sending Wink signal toward CAS trunks.
[CASSendHookFlash] [0] = Disable (default)
[1] = Enable
If the device receives a mid-call SIP INFO message with flashhook
event body (as shown below) and the parameter is set to 1, the
device generates a wink signal toward the CAS trunk. The CAS wink
signal is done by changing the A bit from 1 to 0, and then back to 1
for 450 msec.
INFO sip:4505656002@192.168.13.40:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.13.2:5060
From: <sip:06@192.168.13.2:5060>
To: <sip:4505656002@192.168.13.40:5060>;tag=132878796-
1040067870294
Call-ID: 0010-0016-D69A7DA8-1@192.168.13.2
CSeq:2 INFO
Content-Type: application/broadsoft
Content-Length: 17
event flashhook
Note: The parameter is applicable only to T1 CAS protocols.
Release Cause Mapping from ISDN to SIP Table
Release Cause Mapping This table parameter maps ISDN Q.850 Release Causes to SIP
Table responses. The format of the ini file table parameter is as follows:
configure voip > gateway [CauseMapISDN2SIP]
manipulation FORMAT CauseMapISDN2SIP_Index =
CauseMapIsdn2Sip CauseMapISDN2SIP_IsdnReleaseCause,
[CauseMapISDN2SIP] CauseMapISDN2SIP_SipResponse;
[\CauseMapISDN2SIP]
Release Cause Mapping from SIP to ISDN Table
Release Cause Mapping This table parameter maps SIP responses to Q.850 Release Causes.
Table The format of the ini file table parameter is as follows:
configure voip > gateway [CauseMapSIP2ISDN]
manipulation FORMAT CauseMapSIP2ISDN_Index =
CauseMapSip2Isdn CauseMapSIP2ISDN_SipResponse,
[CauseMapSIP2ISDN] CauseMapSIP2ISDN_IsdnReleaseCause;
[\CauseMapSIP2ISDN]
Parameter Description
Parameter Description
Wait before PSTN Release-Ack Defines a timeout (in milliseconds) that the device waits for
wait-befor-pstn-rel-ack the receipt of an ISDN Q.931 Release message from the
PSTN side before releasing the channel. The Release ACK is
[TimeToWaitForPstnReleaseAck]
typically sent by the PSTN in response to the device's
Disconnect message to end the call. If the timeout expires and
a Release message has not yet been received, the device
releases the call channel.
The valid value is 1 to 360,000. The default is 6,000.
Note: The parameter is applicable only to digital interfaces.
Answer Supervision Enables the sending of SIP 200 OK upon detection of speech,
configure voip > gateway analog fxo- fax, or modem.
setting > answer-supervision [1] Yes = The device sends a SIP 200 OK (in response to
[EnableVoiceDetection] an INVITE message) when speech, fax, or modem is
detected.
[0] No = (Default) The device sends a SIP 200 OK only
after it completes dialing.
Typically, this feature is used only when early media (enabled
using the EnableEarlyMedia parameter) is used to establish
the voice path before the call is answered.
Note:
To activate the feature, set the EnableDSPIPMDetectors
parameter to 1.
The parameter is applicable only when the protocol type is
CAS.
GW Max Call Duration Defines the maximum duration (in minutes) per Gateway call.
configure voip > sip-definition If this duration is reached, the device terminates the call. This
settings > gw-mx-call-duration feature is useful for ensuring available resources for new calls,
by ensuring calls are properly terminated.
[GWMaxCallDuration]
The valid range is 0 to 35,791, where 0 is unlimited duration.
The default is 0.
Parameter Description
configure voip > sip-definition Defines the minimum call duration (in seconds) for the Tel
settings > mn-call-duration side. If an established call is terminated by the IP side before
[MinCallDuration] this duration expires, the device terminates the call with the IP
side, but delays the termination toward the Tel side until this
timeout expires.
The valid value range is 0 to 10 seconds, where 0 (default)
disables this feature.
For example: assume the minimum call duration is set to 10
seconds and an IP phone hangs up a call established with a
BRI phone after 2 seconds. As the call duration is less than
the minimum call duration, the device does not disconnect the
call on the Tel side. However, it sends a SIP 200 OK
immediately upon receipt of the BYE to disconnect from the IP
phone. The call is disconnected from the Tel side only when
the call duration is greater than or equal to the minimum call
duration.
Note:
The parameter is applicable to IP-to-Tel and Tel-to-IP calls.
The parameter is applicable only to ISDN and CAS
protocols.
Send Digit Pattern on Connect Defines a digit pattern to send to the Tel side after a SIP 200
configure voip > sip-definition OK is received from the IP side. The digit pattern is a user-
settings > digit-pttrn-on-conn defined DTMF sequence that is used to indicate an answer
signal (e.g., for billing).
[TelConnectCode]
The valid range is 1 to 8 characters.
Note: The parameter is applicable only to CAS.
Broken Connection Mode Global parameter that defines the device's handling of calls if
configure voip > sip-definition RTP packets are not received within a user-defined timeout
settings > disc-broken-conn (configured by the BrokenConnectionEventTimeout
parameter). You can also configure this functionality per
[DisconnectOnBrokenConnection]
specific calls, using IP Profiles
(IpProfile_DisconnectOnBrokenConnection). For a detailed
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring IP
Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile,
the settings of this global parameter is ignored for calls
associated with the IP Profile.
Broken Connection Timeout Defines the timeout interval (in 100-msec units) after which a
configure voip > sip-definition call is disconnected if an RTP packet is not received during an
settings > broken-connection-event- established call (i.e., RTP flow suddenly stops during the call).
timeout The valid range is from 3 (i.e., 300 msec) to approx. 2684354
[BrokenConnectionEventTimeout] (i.e., 74.5 hours). The default is 100 (i.e., 10000 msec or 10
seconds).
Note:
The parameter is applicable only if the
DisconnectOnBrokenConnection parameter is configured
to 1.
Currently, this feature functions only if Silence Suppression
is disabled.
configure voip > sbc settings > no- Defines the timeout interval (in msec) after which a call is
Parameter Description
rtp-detection-timeout disconnected if RTP packets are not received. The timer
[NoRTPDetectionTimeout] begins from call setup and if no packets have been received
when the timer expires, the device disconnects the call.
The valid range is 0-50000. The default is 0 (i.e., disconnects
the call immediately).
Note: If a call is established and RTP flow occurs, if at any
stage during the call RTP packets are not detected for a user-
defined interval (configured by
BrokenConnectionEventTimeout), the device disconnects the
call (or routes it to an alternative destination, configured by the
IpProfile_DisconnectOnBrokenConnection).
Trunk Alarm Call Disconnect Defines the duration (in seconds) to wait after a E1/T1 trunk
Timeout "Red" alarm (LOS / LOF) is raised, before the device
trk-alrm-call-disc-to disconnects the SIP call. If this timeout expires and the alarm
is still raised, the device sends a SIP BYE message to
[TrunkAlarmCallDisconnectTimeout]
terminate the call. If the alarm is cleared before this timeout
expires, the call is not terminated, but continues as normal.
The range is 1 to 3600. The default is 0 ( 20 for E1 and 40 for
T1).
Disconnect Call on Busy Tone Determines whether a call is disconnected upon detection of a
Detection (ISDN) busy tone (for ISDN).
disc-on-bsy-tone-i [0] Disable = (Default) Do not disconnect call upon
[ISDNDisconnectOnBusyTone] detection of busy tone.
[1] Enable = Disconnect call upon detection of busy tone.
Note:
The parameter is applicable only to ISDN protocols.
IP-to-ISDN calls are disconnected on detection of SIT
tones only in call alert state. If the call is in connected
state, the SIT does not disconnect the calls. Detection of
busy or reorder tones disconnects the IP-to-ISDN calls also
in call connected state.
For IP-to-CAS calls, detection of busy, reorder, or SIT
tones disconnect the calls in any call state.
Disconnect Call on Busy Tone Global parameter enabling call disconnection upon detection
Detection of a busy tone.
configure voip > gateway analog fxo- You can also configure the functionality per specific calls,
setting > disc-on-bsy-tone-c using Tel Profiles (TelProfile_DisconnectOnBusyTone). For a
[DisconnectOnBusyTone] detailed description of the parameter and for configuring the
functionality in the Tel Profiles table, see Configuring Tel
Profiles on page 467.
Note: If the functionality is configured for a specific Tel Profile,
the settings of the global parameter is ignored for calls
associated with the Tel Profile.
Parameter Description
Dial Tone Duration Defines the duration (in seconds) that the dial tone is played to
configure voip > gateway dtmf- an ISDN terminal.
supp-service dtmf-and-dialing > dt- The parameter is applicable for overlap dialing when
duration ISDNInCallsBehavior is set to 65536. The dial tone is played if
[TimeForDialTone] the ISDN Setup message doesn't include the called number.
The valid range is 0 to 60. The default is 5.
Reorder Tone Duration Global parameter defining the duration (in seconds) that the
configure voip > gateway analog device plays a busy or reorder tone before releasing the line.
fxo-setting > reorder-tone-duration You can also configure the functionality per specific calls, using
[TimeForReorderTone] Tel Profiles (TelProfile_TimeForReorderTone). For a detailed
description of the parameter and for configuring the functionality
in the Tel Profiles table, see 'Configuring Tel Profiles' on page
467.
Note: If the functionality is configured for a specific Tel Profile,
the settings of the global parameter is ignored for calls
associated with the Tel Profile.
Cut Through Reorder Tone Defines the duration (in seconds) of the reorder tone played to
Duration the Tel side after the IP call party releases the call, for the Cut-
cut-thru-reord-dur Through feature. After the tone stops playing, an incoming call
is immediately answered if the PSTN is connected.
[CutThroughTimeForReOrderTone]
The valid values are 0 to 30. The default is 0 (i.e., no reorder
tone is played).
Note: To enable the Cut-Through feature, use the
DigitalCutThrough (for CAS channels) parameter.
Play Busy Tone to Tel Enables the device to play a busy or reorder tone to the PSTN
configure voip > sip-definition after a Tel-to-IP call is released.
settings > play-bsy-tone-2tel [0] Don't Play = (Default) Immediately sends an ISDN
[PlayBusyTone2ISDN] Disconnect message.
[1] Play when Disconnecting = Sends an ISDN Disconnect
message with PI = 8 and plays a busy or reorder tone to the
PSTN (depending on the release cause).
[2] Play before Disconnect = Delays the sending of an ISDN
Disconnect message for a user-defined time (configured by
the TimeForReorderTone parameter) and plays a busy or
reorder tone to the PSTN. This is applicable only if the call is
released from the IP [Busy Here (486) or Not Found (404)]
before it reaches the Connect state; otherwise, the
Disconnect message is sent immediately and no tones are
played.
q850-reason-code-2play-user-tone Defines an ISDN Q.8931 release cause code(s), which if
[Q850ReasonCode2PlayUserTone] mapped to the SIP release reason received from the IP side,
causes the device to play a user-defined tone from the installed
PRT file to the Tel side. For example, if the the received SIP
release cause is 480 Temporarily Unavailable and you
configure the parameter with Q.931 release code 18 (No User
Responding), the device plays the user-defined tone to the Tel
side.
Parameter Description
The user-defined tone is configured when creating the PRT file,
using AudioCodes DConvert utility. The tone must be assigned
to the "acSpecialConditionTone" (Tone Type 21) option in
DConvert.
The parameter can be configured with up to 10 release codes.
When configuring multiple codes, separate the codes by
commas (without spaces). For example:
Q850ReasonCode2PlayUserTone = 1,18,24
If the SIP release reason received from the IP side is mapped to
the Q.931 release code specified by the parameter, the device
plays the user-defined tone. Otherwise, if not specified and the
release code is 17 (User Busy), the device plays the busy tone
and for all other release codes, the device plays the reorder
tone.
Note: To enable the feature, the 'Play Busy Tone to Tel'
(PlayBusyTone2ISDN) parameter must be enabled (set to 1 or
2).
Play Ringback Tone to Tel Determines the playing method of the ringback tone to the
configure voip > sip-definition Trunk side.The parameter applies to all trunks that are not
settings > play-rbt2tel configured by the PlayRBTone2Trunk parameter (which defines
ringback tone per Trunk).
[PlayRBTone2Tel]
[0] Don't Play =
The device doesn't play a ringback tone. No PI is sent to
the PSTN unless the ProgressIndicator2ISDN_x
parameter is configured differently.
[1] Play on Local =
CAS: The device plays a local ringback tone to the
PSTN upon receipt of a SIP 180 Ringing response (with
or without SDP). Note that the receipt of a 183 response
does not cause the device to play a ringback tone
(unless the SIP183Behaviour parameter is set to 1).
ISDN: The device operates according to the
LocalISDNRBSource parameter:
1) If the device receives a 180 Ringing response (with
or without SDP) and the LocalISDNRBSource parameter
is set to 1, it plays a ringback tone and sends an ISDN
Alert with PI = 8 (unless the ProgressIndicator2ISDN_x
parameter is configured differently).
2) If the LocalISDNRBSource parameter is set to 0, the
device doesn't play a ringback tone and an Alert
message without PI is sent to the ISDN. In this case, the
PBX / PSTN plays the ringback tone to the originating
terminal. Note that the receipt of a 183 response does
not cause the device configured for ISDN to play a
ringback tone; the device issues a Progress message
(unless SIP183Behaviour is set to 1). If the
SIP183Behaviour parameter is set to 1, the 183
response is handled the same way as a 180 Ringing
response.
[2] Prefer IP = (Default):
Plays according to 'Early Media'. If a SIP 180 response
is received and the voice channel is already open (due
to a previous 183 early media response or due to an
Parameter Description
SDP in the current 180 response), the device doesn't
play the ringback tone; PI = 8 is sent in an ISDN Alert
message (unless the ProgressIndicator2ISDN_x
parameter is configured differently).
CAS: If a 180 response is received, but the 'early media'
voice channel is not opened, the device plays a ringback
tone to the PSTN.
ISDN: The device operates according to the
LocalISDNRBSource parameter:
1) If LocalISDNRBSource is set to 1, the device plays a
ringback tone and sends an ISDN Alert with PI = 8 to the
ISDN (unless the ProgressIndicator2ISDN_x parameter
is configured differently).
2) If LocalISDNRBSource is set to 0, the device doesn't
play a ringback tone. No PI is sent in the ISDN Alert
message (unless the ProgressIndicator2ISDN_x
parameter is configured differently). In this case, the
PBX / PSTN plays a ringback tone to the originating
terminal. Note that the receipt of a 183 response results
in an ISDN Progress message (unless SIP183Behaviour
is set to 1). If SIP183Behaviour is set to 1 (183 is
handled the same way as a 180 + SDP), the device
sends an Alert message with PI = 8, without playing a
ringback tone.
[3] Play Local Until Remote Media Arrive = Plays a ringback
tone according to received media. The behaviour is similar to
[2]. If a SIP 180 response is received and the voice channel
is already open (due to a previous 183 early media response
or due to an SDP in the current 180 response), the device
plays a local ringback tone if there are no prior received RTP
packets. The device stops playing the local ringback tone as
soon as it starts receiving RTP packets. At this stage, if the
device receives additional 18x responses, it does not
resume playing the local ringback tone. Note that for ISDN
trunks, this option is applicable only if the
LocalISDNRBSource parameter is set to 1.
Note: The parameter is applicable only to the Gateway
application.
Play Ringback Tone to Trunk Determines the playing method of the ringback tone to the trunk
configure voip > interface e1-t1|bri side, per trunk.
> play-rbt-to-trk [-1] Not configured = (Default) The settings of the
[PlayRBTone2Trunk_x] PlayRBTone2Tel parameter is used.
[0] Don't Play = When the device is configured for ISDN /
CAS, it doesn't play a ringback tone. No Progress Indicator
(PI) is sent to the ISDN unless the
ProgressIndicator2ISDN_x parameter is configured
differently.
[1] Play on Local = When the device is configured for CAS, it
plays a local ringback tone to the PSTN upon receipt of a
SIP 180 Ringing response (with or without SDP). Note that
the receipt of a SIP 183 response does not cause the device
configured for CAS to play a ringback tone (unless the
SIP183Behaviour parameter is set to 1).
When the device is configured for ISDN, it operates
Parameter Description
according to the LocalISDNRBSource parameter, as follows:
If the device receives a SIP 180 Ringing response (with
or without SDP) and the LocalISDNRBSource parameter
is set to 1, it plays a ringback tone and sends an ISDN
Alert with PI = 8 (unless the ProgressIndicator2ISDN_x
parameter is configured differently).
If the LocalISDNRBSource parameter is set to 0, the
device doesn't play a ringback tone and an Alert
message without PI is sent to the ISDN. In this case, the
PBX / PSTN plays the ringback tone to the originating
terminal. Note that the receipt of a 183 response does
not cause the device to play a ringback tone; the device
sends a Progress message (unless SIP183Behaviour is
set to 1). If the SIP183Behaviour parameter is set to 1,
the 183 response is handled the same way as a 180
Ringing response.
[2] Prefer IP = Plays according to 'Early Media'. If a SIP 180
response is received and the voice channel is already open
(due to a previous 183 early media response or due to an
SDP in the current 180 response), the device configured for
ISDN / CAS doesn't play the ringback tone; PI = 8 is sent in
an ISDN Alert message (unless the
ProgressIndicator2ISDN_x parameter is configured
differently).
If a 180 response is received, but the 'early media' voice
channel is not opened, the device configured for CAS plays
a ringback tone to the PSTN. The device configured for
ISDN operates according to the LocalISDNRBSource
parameter:
If LocalISDNRBSource is set to 1, the device plays a
ringback tone and sends an ISDN Alert with PI = 8 to the
ISDN (unless the ProgressIndicator2ISDN_x parameter
is configured differently).
If LocalISDNRBSource is set to 0, the device doesn't
play a ringback tone. No PI is sent in the ISDN Alert
message (unless the ProgressIndicator2ISDN_x
parameter is configured differently). In this case, the
PBX / PSTN plays a ringback tone to the originating
terminal. Note that the receipt of a 183 response results
in an ISDN Progress message (unless SIP183Behaviour
is set to 1). If SIP183Behaviour is set to 1 (183 is
handled the same way as a 180 with SDP), the device
sends an Alert message with PI = 8 without playing a
ringback tone.
[3] Play Local Until Remote Media Arrive = Plays tone
according to received media. The behaviour is similar to
option [2]. If a SIP 180 response is received and the voice
channel is already open (due to a previous 183 early media
response or due to an SDP in the current 180 response), the
device plays a local ringback tone if there are no prior
received RTP packets. The device stops playing the local
ringback tone as soon as it starts receiving RTP packets. At
this stage, if the device receives additional 18x responses, it
does not resume playing the local ringback tone. Note that
for ISDN trunks, this option is applicable only if
Parameter Description
LocalISDNRBSource is set to 1.
Note:
The parameter is applicable only to the Gateway (GW)
application.
The x in the ini file parameter name denotes the trunk
number, where 0 is Trunk 1.
Play Ringback Tone to IP Global parameter that enables the device to play a ringback
configure voip > sip-definition tone to the IP side for IP-to-Tel calls. You can also configure
settings > play-rbt-2ip this functionality per specific calls, using IP Profiles
(IpProfile_PlayRBTone2IP). For a detailed description of the
[PlayRBTone2IP]
parameter and for configuring this functionality in the IP Profiles
table, see 'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile,
the settings of this global parameter is ignored for calls
associated with the IP Profile.
Play Local RBT on ISDN Transfer Determines whether the device plays a local ringback tone for
play-l-rbt-isdn-trsfr ISDN's Two B Channel Transfer (TBCT), Release Line Trunk
(RLT), or Explicit Call Transfer (ECT) call transfers to the
[PlayRBTOnISDNTransfer]
originator when the second leg receives an ISDN Alerting or
Progress message.
[0] Don't Play (default)
[1] Play
Note:
For Blind transfer, the local ringback tone is played to first
call PSTN party when the second leg receives the ISDN
Alerting or Progress message.
For Consulted transfer, the local ringback tone is played
when the second leg receives ISDN Alerting or Progress
message if the Progress message is received after a SIP
REFER.
The parameter is applicable only if the parameter
SendISDNTransferOnConnect is set to 1.
MFC R2 Category Defines the tone for MFC R2 calling party category (CPC). The
mfcr2-category parameter provides information on the calling party such as
National or International call, Operator or Subscriber and
[R2Category]
Subscriber priority.
The value range is 1 to 15 (defining one of the MFC R2 tones).
The default is 1.
Parameter Description
Parameter Description
Parameter Description
cpt-detector-frequency-deviation Defines the deviation (in Hz) allowed for the detection of each
[CPTDetectorFrequencyDeviation] CPT signal frequency.
The valid range is 1 to 30. The default is 10.
Note: For the parameter to take effect, a device reset is required.
Parameter Description
Generate Metering Tones Defines the method for configuring metering tones that are generated to
configure voip > gateway the Tel side.
analog metering-tones > [0] Disable = (Default) Metering tones are not generated.
gen-mtr-tones [1] Table Code Table = Metering tones are generated by the device
[PayPhoneMeteringMode] according to the Charge Code table and sent to the Tel side.
[2] SIP Interval Provided = (Proprietary method of TELES
Communications Corporation) Advice-of-Charge service toward the
PSTN. Periodic generation of AOC-D and AOC-E toward the PSTN.
Calculation is based on seconds. The time interval is calculated
according to the scale and tariff provided in the proprietary formatted
file included in SIP INFO messages, which is always sent before 200
0K. The device ignores tariffs sent after the call is established.
[3] SIP RAW Data Provided = (Proprietary method of Cirpack) Advice-
of-Charge service toward the PSTN. The received AOC-D messages
contain a subtotal. When receiving AOC-D in raw format, provided in
the header of SIP INFO messages, the device parses AOC-D raw
data to obtain the number of units. This number is sent in the Facility
message with AOC-D. In addition, the device stores the latest number
of units in order to send them in AOC-E IE when the call is
disconnected.
[4] SIP RAW Data Incremental Provided = (Proprietary method of
Cirpack) Advice-of-Charge service toward the PSTN. The AOC-D
message in the payload is an increment. When receiving AOC-D in
raw format, provided in the header of SIP INFO messages, the device
parses AOC-D raw data to obtain the number of units. This number is
sent in the Facility message with AOC-D. The device generates the
AOC-E. Parsing every AOC-D received and summing the values is
required to obtain the total sum (that is placed in the AOC-E).
[5] SIP-to-Tel Interworking = Enables IP-to-Tel AOC, using
AudioCodes' proprietary SIP header, AOC.
Note: The parameter is applicable only to ISDN Euro trunks for sending
AOC Facility messages (see Advice of Charge Services for Euro ISDN on
page 582).
Charge Codes Table
Defines metering tones and their time intervals that the Euro ISDN trunk
configure voip > gateway sends in AOC Facility messages to the PSTN (i.e., PBX).
analog charge-code The format of the ini file table parameter is as follows:
[ChargeCode] [ChargeCode]
FORMAT ChargeCode_Index = ChargeCode_EndTime1,
Parameter Description
ChargeCode_PulseInterval1, ChargeCode_PulsesOnAnswer1,
ChargeCode_EndTime2, ChargeCode_PulseInterval2,
ChargeCode_PulsesOnAnswer2, ChargeCode_EndTime3,
ChargeCode_PulseInterval3, ChargeCode_PulsesOnAnswer3,
ChargeCode_EndTime4, ChargeCode_PulseInterval4,
ChargeCode_PulsesOnAnswer4;
[\ChargeCode]
Note: To associate a configured Charge Code to an outgoing Tel-to-IP
call, use the Tel-to-IP Routing table.
Parameter Description
Parameter Description
ch-select-mode All Trunk Groups configured without a channel select mode
[ChannelSelectMode] in the Trunk Group Settings table (see 'Configuring Trunk
Group Settings' on page 503).
All channels and trunks configured without a Trunk Group
ID.
for all Trunk Groups channels that are configured without a
Trunk Group ID,.
[0] By Dest Phone Number
[1] Cyclic Ascending (default)
[2] Ascending
[3] Cyclic Descending
[4] Descending
[5] Dest Number + Cyclic Ascending.
[6] By Source Phone Number
[7] Trunk Cyclic Ascending
[8] Trunk & Channel Cyclic Ascending
[11] Dest Number + Ascending
For a detailed description of the parameter's options, see
'Configuring Trunk Group Settings' on page 503.
Default Destination Number Defines the default destination phone number, which is used if
configure voip > gateway dtmf-supp- the received message doesn't contain a called party number
service dtmf-and-dialing > ddflt-dest- and no phone number is configured in the Trunk Group table
nb (see Configuring the Trunk Groups on page 501). The
parameter is used as a starting number for the list of channels
[DefaultNumber]
comprising all the device's Trunk Groups.
The default is 1000.
Source IP Address Input Determines which IP address the device uses to determine the
configure voip > gateway routing source of incoming INVITE messages for IP-to-Tel routing.
settings > src-ip-addr-input [-1] = (Default) Auto Decision - the parameter is
[SourceIPAddressInput] automatically set to SIP Contact Header (1).
[0] SIP Contact Header = The IP address in the Contact
header of the incoming INVITE message is used.
[1] Layer 3 Source IP = The actual IP address (Layer 3)
from where the SIP packet was received is used.
Use Source Number As Display Determines the use of Tel Source Number and Display Name
Name for Tel-to-IP calls.
configure voip > sip-definition [0] No = (Default) If a Tel Display Name is received, the Tel
settings > src-nb-as-disp-name Source Number is used as the IP Source Number and the
[UseSourceNumberAsDisplayName] Tel Display Name is used as the IP Display Name. If no
Display Name is received from the Tel side, the IP Display
Name remains empty.
[1] Yes = If a Tel Display Name is received, the Tel Source
Number is used as the IP Source Number and the Tel
Display Name is used as the IP Display Name. If no
Display Name is received from the Tel side, the Tel Source
Number is used as the IP Source Number and also as the
IP Display Name.
[2] Overwrite = The Tel Source Number is used as the IP
Source Number and also as the IP Display Name (even if
the received Tel Display Name is not empty).
Parameter Description
[3] Original = Similar to option [2], except that the operation
is done before regular calling number manipulation.
Use Display Name as Source Defines how the display name (caller ID) received from the IP
Number side (in the SIP From header) effects the source number sent
configure voip > sip-definition to the Tel side, for IP-to-Tel calls.
settings > disp-name-as-src-nb [0] No = (Default) If a display name is received from the IP
[UseDisplayNameAsSourceNumber] side, the source number of the IP side is used as the Tel
source number.
[1] Yes = If a display name is received from the IP side, the
display name of the IP side is used as the Tel source
number and Presentation is set to Allowed (0). If no display
name is received from the IP side, the source number of
the IP side is used as the Tel source number and
Presentation is set to Restricted (1). For example:
If 'From: 100 <sip:200@201.202.203.204>' is received
from the IP side, the outgoing source number (and
display name) are set to "100" and Presentation is set
to Allowed (0).
If 'From: <sip:400@101.102.103.104>' is received from
the IP side, the outgoing source number is set to "400"
and Presentation is set to Restricted (1).
[2] Preferred = If a display name is received from the IP
side, the display name of the IP side is used as the Tel
source number. If no display name is received from the IP
side, this setting does not affect the Tel source number.
ENUM Resolution Defines the ENUM service for translating telephone numbers
configure voip > sip-definition to IP addresses or domain names (FQDN), for example,
settings > enum-service-domain e164.arpa, e164.customer.net, or NRENum.net.
[EnumService] The valid value is a string of up to 50 characters. The default
is "e164.arpa".
Note: ENUM-based routing is configured in the Tel-to-IP
Routing table using the "ENUM" string value as the destination
address to denote the parameter's value.
Parameter Description
Use Routing Table for Host Names Determines whether to use the device's routing table to obtain
and Profiles the URI host name and optionally, an IP profile (per call) even
configure voip > sip-definition if a Proxy server is used.
settings > rte-tbl-4-host-names [0] Disable = (Default) Don't use the Tel-to-IP Routing
[AlwaysUseRouteTable] table.
[1] Enable = Use the Tel-to-IP Routing table.
Note:
The parameter appears only if the 'Use Default Proxy'
parameter is enabled.
The domain name is used instead of a Proxy name or IP
address in the INVITE SIP URI.
Tel to IP Routing Mode Determines whether to route Tel calls to an IP destination
configure voip > gateway routing before or after manipulation of the destination number. This
settings > tel2ip-rte-mode applies to Tel-to-IP routing rules configured in the Tel-to-IP
Routing table.
[RouteModeTel2IP]
[0] Route calls before manipulation = Calls are routed
before the number manipulation rules are applied (default).
[1] Route calls after manipulation = Calls are routed after
the number manipulation rules are applied.
Note:
The parameter is not applicable if outbound proxy routing is
used.
For number manipulation, see 'Configuring
Source/Destination Number Manipulation' on page 537.
To configure Tel-to-IP routing rules, see 'Configuring Tel-
to-IP Routing Rules' on page 509.
Tel-to-IP Routing table
Tel-to-IP Routing Defines Tel-to-IP routing rules for routing Tel-to-IP calls.
configure voip > gateway routing The format of the ini file table parameter is:
tel2ip-routing [PREFIX]
[Prefix] FORMAT PREFIX_Index = PREFIX_RouteName,
PREFIX_DestinationPrefix, PREFIX_DestAddress,
PREFIX_SourcePrefix, PREFIX_ProfileName,
PREFIX_MeteringCode, PREFIX_DestPort,
PREFIX_DestIPGroupName, PREFIX_TransportType,
PREFIX_SrcTrunkGroupID, PREFIX_DestSIPInterfaceName,
PREFIX_CostGroup, PREFIX_ForkingGroup,
PREFIX_CallSetupRulesSetId, PREFIX_ConnectivityStatus;
[\PREFIX]
For more information, see 'Configuring Tel-to-IP Routing
Rules' on page 509.
IP-to-Tel Routing Table
IP-to-Tel Routing Defines the routing of IP-to-Tel routing rules.
configure voip > gateway routing The format of the ini file table parameter is as follows:
ip2tel-routing [PSTNPrefix]
[PSTNPrefix] FORMAT PstnPrefix_Index = PstnPrefix_RouteName,
PstnPrefix_DestPrefix, PstnPrefix_TrunkGroupId,
PstnPrefix_SourcePrefix, PstnPrefix_SourceAddress,
PstnPrefix_ProfileName, PstnPrefix_SrcIPGroupName,
PstnPrefix_DestHostPrefix, PstnPrefix_SrcHostPrefix,
Parameter Description
PstnPrefix_SrcSIPInterfaceName, PstnPrefix_TrunkId,
PstnPrefix_CallSetupRulesSetId, PstnPrefix_DestType;
[\PSTNPrefix]
For more information, see 'Configuring IP-to-Tel Routing
Rules' on page 518.
IP to Tel Routing Mode Determines whether to route IP calls to the Trunk Group
configure voip > gateway routing before or after manipulation of the destination number
settings > ip2tel-rte-mode (configured in 'Configuring Source/Destination Number
Manipulation Rules' on page 537).
[RouteModeIP2Tel]
[0] Route calls before manipulation = (Default) Calls are
routed before the number manipulation rules are applied.
[1] Route calls after manipulation = Calls are routed after
the number manipulation rules are applied.
IP Security Defines the device's policy on accepting or blocking SIP (IP)
configure voip > sip-definition calls (IP-to-Tel calls). This is useful in preventing unwanted
settings > ip-security SIP calls, SIP messages, and/or VoIP spam.
[SecureCallsFromIP] [0] Disable = (Default) The device accepts all SIP calls.
[1] Secure Incoming calls = The device accepts SIP calls
only from IP addresses that are configured in the Tel-to-IP
Routing table or Proxy Sets table, or IP addresses resolved
by DNS servers from FQDN values configured in the Proxy
Sets table. All other incoming calls are rejected.
[2] Secure All calls = The device accepts SIP calls only
from IP addresses (in dotted-decimal notation format) that
are configured in the Tel-to-IP Routing table and rejects all
other incoming calls. In addition, if an FQDN is configured
in the Tel-to-IP Routing table or Proxy Sets table, the call is
allowed to be sent only if the resolved DNS IP address
appears in one of these tables; otherwise, the call is
rejected. Therefore, the difference between this option and
option [1] is that this option is concerned only about
numerical IP addresses that are defined in the tables.
Note: If the parameter is set to [0] or [1], when using Proxies
or Proxy Sets, it is unnecessary to configure the Proxy IP
addresses in the routing table. The device allows SIP calls
received from the Proxy IP addresses even if these addresses
are not configured in the routing table.
Filter Calls to IP Enables filtering of Tel-to-IP calls when a Proxy Set is used.
configure voip > sip-definition [0] Don't Filter = (Default) The device doesn't filter calls
settings > filter-calls-to-ip when using a proxy.
[FilterCalls2IP] [1] Filter = Filtering is enabled.
When the parameter is enabled and a proxy is used, the
device first checks the Tel-to-IP Routing table before making a
call through the proxy. If the number is not allowed (i.e.,
number isn't listed in the table or a call restriction routing rule
of IP address 0.0.0.0 is applied), the call is released.
Note: When no proxy is used, the parameter must be disabled
and filtering is according to the Tel-to-IP Routing table.
IP-to-Tel Tagging Destination Dial Defines the Dial Plan index in the Dial Plan file for called prefix
Plan Index tags for representing called number prefixes in Inbound
Parameter Description
configure voip > gateway routing Routing rules.
settings > ip2tel-tagging-dst The valid values are 0 to 7, where 0 denotes PLAN1, 1
[IP2TelTaggingDestDialPlanIndex] denotes PLAN2, and so on. The default is -1 (i.e., no dial plan
file used).
For more information on this feature, see Dial Plan Prefix Tags
for IP-to-Tel Routing on page 766.
IP to Tel Tagging Source Dial Plan Defines the Dial Plan index in the Dial Plan file for calling
Index prefix tags for representing calling number prefixes in Inbound
cconfigure voip > gateway routing Routing rules.
settings > ip-to-tel-tagging-src The valid values are 0 to 7, where 0 denotes PLAN1, 1
[IP2TelTaggingSourceDialPlanIndex] denotes PLAN2, and so on. The default is -1 (i.e., no dial plan
file used).
For more information on this feature, see Dial Plan Prefix Tags
for IP-to-Tel Routing on page 766.
Parameter Description
identified as fax calls. If a CNG tone is detected on the Tel
side of a Tel-to-IP call, the device adds the string, "FAX" as a
prefix to the destination number before routing and
manipulation. A routing rule in the Tel-to-IP Routing table
having the value "FAX" (case-sensitive) as the destination
number is then used to re-route the call to a fax destination
and the destination number manipulation mechanism is used
to remove the "FAX" prefix before sending the fax, if required.
If the initial INVITE used to establish the voice call (not fax)
was already sent, a CANCEL (if not connected yet) or a BYE
(if already connected) is sent to release the voice call.
[0] Disable (default)
[1] Rerouting without Delay = Upon detection of a CNG
tone, the device immediately releases the call of the initial
INVITE and then sends a new INVITE to a specific IP
Group or fax server according to the Tel-to-IP Routing
table. To enable this feature, set the CNGDetectorMode
parameter to 2 and the IsFaxUsed parameter to 1, 2, or 3.
[2] Progress and Delay = Incoming ISDN calls are delayed
until a CNG tone detection or timeout, set by the
FaxReroutingDelay parameter. If the EnableComfortTone
parameter is set to 1, a Q.931 Progress message with
Protocol Discriminator set to 1 is sent to the PSTN and a
comfort tone is played accordingly to the PSTN. When the
timeout expires, the device sends an INVITE to a specific
IP Group or to a fax server, according to the Tel-to-IP
Routing table rules.
[3] Connect and Delay = Incoming ISDN calls are delayed
until a CNG tone detection or timeout, set by the
FaxReroutingDelay parameter. A Q.931 Connect message
is sent to the PSTN. If the EnableComfortTone parameter
is set to 1, a comfort tone is played to the PSTN. When the
timeout expires, the device sends an INVITE to a specific
IP Group or to a fax server according to the Tel-to-IP
Routing table rules.
Note: The parameter has replaced the EnableFaxRerouting
parameter. For backward compatibility, the
EnableFaxRerouting parameter set to 1 is equivalent to the
FaxReroutingMode parameter set to 1.
[FaxReroutingDelay] Defines the maximum time interval (in seconds) that the
device waits for CNG detection before re-routing calls
identified as fax calls to fax destinations (terminating fax
machine).
The valid value range is 1-10. The default is 5.
Call Forking Parameters
Forking Handling Mode Determines how the device handles the receipt of multiple SIP
forking-handling 18x forking responses for Tel-to-IP calls. The forking 18x
response is the response with a different SIP to-tag than the
[ForkingHandlingMode]
previous 18x response. These responses are typically
generated (initiated) by Proxy / Application servers that
perform call forking, sending the device's originating INVITE
(received from SIP clients) to several destinations, using the
Parameter Description
same Call ID.
[0] Parallel handling = (Default) If SIP 18x with SDP is
received, the device opens a voice stream according to the
received SDP and disregards any subsequently received
18x forking responses (with or without SDP). If the first
response is 180 without SDP, the device responds
according to the PlayRBTone2TEL parameter and
disregards the subsequent forking 18x responses.
[1] Sequential handling = If 18x with SDP is received, the
device opens a voice stream according to the received
SDP. The device re-opens the stream according to
subsequently received 18x responses with SDP, or plays a
ringback tone if 180 response without SDP is received. If
the first received response is 180 without SDP, the device
responds according to the PlayRBTone2TEL parameter
and processes the subsequent 18x forking responses.
Note: Regardless of the parameter setting, once a SIP 200
OK response is received, the device uses the RTP information
and re-opens the voice stream, if necessary.
Forking Timeout Defines the timeout (in seconds) that is started after the first
configure voip > gateway advanced SIP 2xx response has been received for a User Agent when a
> forking-timeout Proxy server performs call forking (Proxy server forwards the
INVITE to multiple SIP User Agents). The device sends a SIP
[ForkingTimeOut]
ACK and BYE in response to any additional SIP 2xx received
from the Proxy within this timeout. Once this timeout elapses,
the device ignores any subsequent SIP 2xx.
The number of supported forking calls per channel is 20. In
other words, for an INVITE message, the device can receive
up to 20 forking responses from the Proxy server.
The valid range is 0 to 30. The default is 30.
Tel2IP Call Forking Mode Enables Tel-to-IP call forking, whereby a Tel call can be
configure voip > sip-definition routed to multiple IP destinations.
settings > tel2ip-call-forking-mode [0] Disable (default)
[Tel2IPCallForkingMode] [1] Enable
Note: Once enabled, routing rules must be assigned Forking
Groups in the Tel-to-IP Routing table.
configure voip > sip-definition Defines the interval (in seconds) to wait before sending
settings > forking-delay-time-invite INVITE messages to the other members of the forking group.
[ForkingDelayTimeForInvite] The INVITE is immediately sent to the first member.
The valid value range is 0 to 40. The default is 0 (i.e., sends
immediately).
Routing Policies Table
Routing Policies Edits the Routing Policy.
cconfigure voip > gateway routing The format of the ini file table parameter is as follows:
gw-routing-policy [ GwRoutingPolicy ]
[GWRoutingPolicy] FORMAT GwRoutingPolicy_Index = GwRoutingPolicy_Name,
GwRoutingPolicy_LCREnable,
GwRoutingPolicy_LCRAverageCallLength,
GwRoutingPolicy_LCRDefaultCost,
GwRoutingPolicy_LdapServersGroupName;
Parameter Description
[ \GwRoutingPolicy ]
For more information, see 'Configuring a Gateway Routing
Policy Rule' on page 523.
Parameter Description
Enable Alt Routing Tel to IP Enables the Alternative Routing feature for Tel-to-IP calls.
configure voip > gateway routing [0] Disable = (Default) Disables the Alternative Routing
settings > alt-routing-tel2ip feature.
[AltRoutingTel2IPEnable] [1] Enable = Enables the Alternative Routing feature.
[2] Status Only = The Alternative Routing feature is disabled,
but read-only information on the QoS of the destination IP
addresses is provided.
Note: If the parameter is enabled, the Busy Out feature (see
EnableBusyOut parameter) does not function with the Proxy Set
keep-alive mechanism. To use the Busy Out feature with the
Proxy Set keep-alive mechanism (for IP Groups), disable the
parameter.
Alt Routing Tel to IP Mode Determines the IP Connectivity event(s) reason for triggering
configure voip > gateway routing Alternative Routing.
settings > alt-rte-tel2ip-mode [0] None = Alternative routing is not used.
[AltRoutingTel2IPMode] [1] Connectivity = Alternative routing is performed if SIP
OPTIONS message to the initial destination fails (determined
according to the AltRoutingTel2IPConnMethod parameter).
[2] QoS = Alternative routing is performed if poor QoS is
detected.
[3] Both = (Default) Alternative routing is performed if either
SIP OPTIONS to initial destination fails, poor QoS is detected,
or the DNS host name is not resolved.
Note:
QoS is quantified according to delay and packet loss
calculated according to previous calls. QoS statistics are reset
if no new data is received within two minutes.
To receive quality information (displayed in the 'Quality Status'
and 'Quality Info.' fields in 'Viewing IP Connectivity' on page
866) per destination, the parameter must be set to 2 or 3.
Parameter Description
Alt Routing Tel to IP Connectivity Determines the method used by the device for periodically
Method querying the connectivity status of a destination IP address.
configure voip > gateway routing [0] ICMP Ping = (Default) Internet Control Message Protocol
settings > alt-rte-tel2ip-method (ICMP) ping messages.
[AltRoutingTel2IPConnMethod] [1] SIP OPTIONS = The remote destination is considered
offline if the latest OPTIONS transaction timed out. Any
response to an OPTIONS request, even if indicating an error,
brings the connectivity status to online.
Note: ICMP Ping is currently not supported for the IP Connectivity
feature.
Alt Routing Tel to IP Keep Alive Defines the time interval (in seconds) between SIP OPTIONS
Time Keep-Alive messages used for the IP Connectivity application.
configure voip > gateway routing The valid range is 5 to 2,000,000. The default is 60.
settings > alt-rte-tel2ip-keep-alive
[AltRoutingTel2IPKeepAliveTime]
Max Allowed Packet Loss for Alt Defines the packet loss (in percentage) at which the IP connection
Routing [%] is considered a failure and Alternative Routing mechanism is
configure voip > gateway routing activated.
settings > mx-pkt-loss-4-alt-rte The default is 20%.
[IPConnQoSMaxAllowedPL]
Max Allowed Delay for Alt Defines the transmission delay (in msec) at which the IP
Routing connection is considered a failure and the Alternative Routing
configure voip > gateway routing mechanism is activated.
settings > mx-all-dly-4-alt-rte The range is 100 to 10,000. The default is 250.
[IPConnQoSMaxAllowedDelay]
Parameter Description
3xx Use Alt Route Reasons Defines the handling of received SIP 3xx responses regarding call
configure voip > sip-definition redirection to listed contacts in the Contact header.
settings > 3xx-use-alt-route [0] No = (Default) Upon receipt of a 3xx response, the device tries
[UseAltRouteReasonsFor3xx] each contact, one by one, listed in the Contact headers, until a
successful destination is found. However, if a contact responds
with a 486 or 600, the device does not try to redirect the call to
next contact, and drops the call.
[1] No if 6xx = Upon receipt of a 3xx response, the device tries
each contact, one by one, listed in the Contact headers. However,
if a 6xx Global Failure response is received during this process
(e.g., 600 Busy Everywhere) the device does not try to redirect the
call to the next contact, and drops the call.
[2] Yes = Upon receipt of a 3xx response, the device redirects the
call to the first contact listed in the Contact header. If the contact
responds with a SIP response that is defined in the Reasons for
Tel-to-IP Alternative Routing table, the device tries to redirect the
Parameter Description
call to the next contact, and so on. If a contact responds with a
response that is not configured in the table, the device does not try
to redirect the call to the next contact, and drops the call.
Redundant Routing Mode Determines the type of redundant routing mechanism when a call
configure voip > sip-definition can’t be completed using the main route.
settings > redundant-routing- [0] Disable = No redundant routing is used. If the call can’t be
m completed using the main route (using the active Proxy or the first
[RedundantRoutingMode] matching rule in the Routing table), the call is disconnected.
[1] Routing Table = (Default) Internal routing table is used to
locate a redundant route.
[2] Proxy = Proxy list is used to locate a redundant route.
Note: To implement the Redundant Routing Mode mechanism, you
first need to configure the parameter AltRouteCauseTEL2IP
(Reasons for Alternative Routing table).
Disconnect Call With PI If Alt Defines when the device sends the IP-to-Tel call to an alternative
[DisconnectCallwithPIifAlt] route (if configured) when it receives an ISDN Q.931 Disconnect
message from the Tel side.
[0] Disable = (Default) The device forwards early media to the IP
side if Disconnect includes PI, and disconnects the call when a
Release message is received. Only after the call is disconnected
does the device send the call to an alternative route.
[1] Enable = The device immediately sends the call to the
alternative route.
For more information, see Alternative Routing upon ISDN Disconnect
on page 536.
configure voip > gateway Enables different Tel-to-IP destination number manipulation rules per
manipulation settings > alt- routing rule when several (up to three) Tel-to-IP routing rules are
map-tel-to-ip defined and if alternative routing using release causes is used. For
[EnableAltMapTel2IP] example, if an INVITE message for a Tel-to-IP call is returned with a
SIP 404 Not Found response, the call can be re-sent to a different
destination number (as defined using the parameter
NumberMapTel2IP).
[0] = Disable (default)
[1] = Enable
Reasons for Alternative Tel-to-IP Routing Table
Reasons for Alternative Defines SIP call failure reason values received from the IP side. If an
Routing IP call is released as a result of one of these reasons, the device
configure voip > gateway attempts to locate an alternative IP route for the call in the Tel-to-IP
routing alt-route-cause-tel2ip Routing table (if a Proxy is not used) or used as a redundant Proxy
(you need to set the parameter RedundantRoutingMode to 2). The
[AltRouteCauseTel2IP]
release reason for Tel-to-IP calls is provided in SIP 4xx, 5xx, and 6xx
response codes.
The format of the ini file table parameter is as follows:
[AltRouteCauseTel2IP]
FORMAT AltRouteCauseTel2IP_Index =
AltRouteCauseTel2IP_ReleaseCause;
[\AltRouteCauseTel2IP]
For example:
AltRouteCauseTel2IP 0 = 486; (Busy Here)
AltRouteCauseTel2IP 1 = 480; (Temporarily Unavailable)
Parameter Description
AltRouteCauseTel2IP 2 = 408; (No Response)
For more information, see 'Alternative Routing Based on SIP
Responses' on page 528.
Reasons for Alternative IP-to-Tel Routing Table
Reasons for Alternative IP-to- Defines call failure reason values received from the Tel side (in Q.931
Tel Routing presentation). If a call is released as a result of one of these reasons,
configure voip > gateway the device attempts to locate an alternative Trunk Group for the call in
routing alt-route-cause-ip2tel the IP-to-Tel Routing table.
[AltRouteCauseIP2Tel] The format of the ini file table parameter is as follows:
[AltRouteCauseIP2Tel]
FORMAT AltRouteCauseIP2Tel_Index =
AltRouteCauseIP2Tel_ReleaseCause;
[\AltRouteCauseIP2Tel]
For example:
AltRouteCauseIP2Tel 0 = 3 (No Route to Destination)
AltRouteCauseIP2Tel 1 = 1 (Unallocated Number)
AltRouteCauseIP2Tel 2 = 17 (Busy Here)
AltRouteCauseIP2Tel 2 = 27 (Destination Out of Order)
For more information, see 'Alternative Routing to Trunk upon Q.931
Call Release Cause Code' on page 532.
Forward On Busy Trunk Destination Table
Forward On Busy Trunk Defines the Forward On Busy Trunk Destination table. This table
Destination allows you to define an alternative IP destination if a trunk is busy for
configure voip > gateway IP-to-Tel calls.
routing fwd-on-bsy-trk-dest The format of the ini file table parameter is as follows:
[ForwardOnBusyTrunkDest] [ForwardOnBusyTrunkDest]
FORMAT ForwardOnBusyTrunkDest_Index =
ForwardOnBusyTrunkDest_TrunkGroupId,
ForwardOnBusyTrunkDest_ForwardDestination;
[\ForwardOnBusyTrunkDest]
For example, the below configuration forwards IP-to-Tel calls to
destination user “112” at host IP address 10.13.4.12, port 5060, using
transport protocol TCP, if Trunk Group ID 2 is unavailable:
ForwardOnBusyTrunkDest 1 = 2,
112@10.13.4.12:5060;transport=tcp;
For more information, see 'Alternative Routing to IP Destination upon
Busy Trunk' on page 534.
Parameter Description
configure voip > gateway Enables the manipulation of the called party (destination) number
manipulation settings > map-ip- according to the SIP Refer-To header received by the device for
to-pstn-refer-to TDM (PSTN) blind transfer. The number in the SIP Refer-To
[ManipulateIP2PSTNReferTo] header is manipulated for all types of blind transfers to the PSTN
Parameter Description
(TBCT, ECT, RLT, QSIG, FXO, and CAS).
[0] Disable (default)
[1] Enable
During the blind transfer, the device initiates a new call to the
PSTN and the destination number of this call can be manipulated
if the parameter is enabled. When enabled, the manipulation is
done as follows:
1 If you configure a value for the xferPrefix parameter, the value
(string) is added as a prefix to the number in the Refer-To
header.
2 This called party number is then manipulated using the
Destination Phone Number Manipulation for IP-to-Tel Calls
table. The source number of the transferred call is taken from
the original call, according to its initial direction:
Source number of the original call if it is a Tel-to-IP call
Destination number of the original call if it is an IP-to-Tel
call
This source number can also be used as the value for the
'Source Prefix' field in the Destination Phone Number
Manipulation for IP-to-Tel Calls table. The local IP address is
used as the value for the 'Source IP Address' field.
Note: This manipulation does not affect IP-to-Trunk Group
routing rules.
Use EndPoint Number As Calling Enables the use of the B-channel number as the calling number
Number Tel2IP (sent in the From field of the INVITE) instead of the number
epn-as-cpn-tel2ip received in the Q.931 Setup message, for Tel-to-IP calls.
[UseEPNumAsCallingNumTel2IP] [0] Disable (default)
[1] Enable
For example, if the incoming calling party number in the Q.931
Setup message is "12345" and the B-channel number is 17, then
the outgoing INVITE From header is set to "17" instead of
"12345".
Note: When enabled, this feature is applied before routing and
manipulation on the source number.
Use EndPoint Number As Calling Enables the use of the B-channel number as the calling party
Number IP2Tel number (sent in the Q.931 Setup message) instead of the number
epn-as-cpn-ip2tel received in the From header of the INVITE, for IP-to-Tel calls.
[UseEPNumAsCallingNumIP2Tel] [0] Disable (default)
[1] Enable
For example, if the incoming INVITE From header contains
"12345" and the destined B-channel number is 17, then the
outgoing calling party number in the Q.931 Setup message is set
to "17" instead of "12345".
Note: When enabled, this feature is applied after routing and
manipulation on the source number (i.e., just before sending to
the Tel side).
Tel2IP Default Redirect Reason Determines the default redirect reason for Tel-to-IP calls when no
configure voip > gateway redirect reason (or “unknown”) exists in the received Q931 ISDN
manipulation settings > tel-to-ip- Setup message. The device includes this default redirect reason
Parameter Description
dflt-redir-rsn in the SIP History-Info header of the outgoing INVITE.
[Tel2IPDefaultRedirectReason] If a redirect reason exists in the received Setup message, the
parameter is ignored and the device sends the INVITE message
with the reason according to the received Setup message. If the
parameter is not configured (-1), the outgoing INVITE is sent with
the redirect reason as received in the Setup message (if none or
“unknown” reason, then without a reason).
[-1] Not Configured = (Default) Received redirect reason is not
changed
[1] Busy = Call forwarding busy
[2] No Reply = Call forwarding no reply
[9] DTE Out of Order = Call forwarding DTE out of order
[10] Deflection = Call deflection
[15] Systematic/Unconditional = Call forward unconditional
Redirect Number IP to Tel Defines the value of the Redirect Number screening indicator in
configure voip > gateway routing ISDN Setup messages.
settings > redir-nb-si-2tel [-1] Not Configured (default)
[SetIp2TelRedirectScreeningInd] [0] User Provided
[1] User Passed
[2] User Failed
[3] Network Provided
Set IP-to-Tel Redirect Reason Defines the redirect reason for IP-to-Tel calls. If redirect
configure voip > gateway (diversion) information is received from the IP, the redirect reason
manipulation settings > ip2tel- is set to the value of the parameter before the device sends it on
redir-reason to the Tel.
[SetIp2TelRedirectReason] [-1] Not Configured (default)
[0] Unkown
[1] Busy
[2] No Reply
[3] Network Busy
[4] Deflection
[9] DTE out of Order
[10] Forwarding DTE
[13] Transfer
[14] PickUp
[15] Systematic/Unconditional
Set Tel-to-IP Redirect Reason Defines the redirect reason for Tel-to-IP calls. If redirect
configure voip > gateway (diversion) information is received from the Tel, the redirect
manipulation settings > tel2ip- reason is set to the value of the parameter before the device
redir-reason sends it on to the IP.
[SetTel2IpRedirectReason] [-1] Not Configured (default)
[0] Unkown
[1] Busy
[2] No Reply
[3] Network Busy
[4] Deflection
[9] DTE out of Order
Parameter Description
[10] Forwarding DTE
[13] Transfer
[14] PickUp
[15] Systematic/Unconditional
Send Screening Indicator to IP Overrides the calling party's number (CPN) screening indication
[ScreeningInd2IP] in the received ISDN SETUP message for Tel-to-IP calls.
[-1] Not Configured = (Default) Not configured (interworking
from ISDN to IP) or set to 0 for CAS.
[0] User Provided = CPN set by user, but not screened
(verified).
[1] User Passed = CPN set by user, verified and passed.
[2] User Failed = CPN set by user, and verification failed.
[3] Network Provided = CPN set by network.
Note: The parameter is applicable only if the Remote Party ID
(RPID) header is enabled.
Send Screening Indicator to Overrides the screening indicator of the calling party's number for
ISDN IP-to-Tel ISDN calls.
[ScreeningInd2ISDN] [-1] Not Configured = (Default) Not configured (interworking
from IP to ISDN).
[0] User Provided = user provided, not screened.
[1] User Passed = user provided, verified and passed.
[2] User Failed = user provided, verified and failed.
[3] Network Provided = network provided
Copy Destination Number to Enables the device to copy the received ISDN called number to
Redirect Number the outgoing SIP Diversion header for Tel-to-IP calls (even if a
cp-dst-nb-2-redir-nb Redirecting Number IE is not received in the ISDN Setup
message). Therefore, the called number is used as a redirect
[CopyDest2RedirectNumber]
number. Call redirection information is typically used for Unified
Messaging and voice mail services to identify the recipient of a
message.
[0] Don't copy = (Default) Disable.
[1] Copy after phone number manipulation = Copies the called
number after manipulation. The device first performs Tel-to-IP
destination phone number manipulation (i.e., on the SIP To
header), and only then copies the manipulated called number
to the SIP Diversion header for the Tel-to-IP call. Therefore,
with this option, the called and redirect numbers are identical.
[2] Copy before phone number manipulation = Copies the
called number before manipulation. The device first copies the
original called number to the SIP Diversion header, and then
performs Tel-to-IP destination phone number manipulation.
Therefore, this allows you to have different numbers for the
called (i.e., SIP To header) and redirect (i.e., SIP Diversion
header) numbers.
Note:
If the incoming ISDN-to-IP call includes a Redirect Number,
this number is overridden by the new called number if the
parameter is set to [1] or [2].
You can also use this feature for IP-to-Tel calls, by configuring
the parameter per IP Profile
Parameter Description
(IpProfile_CopyDest2RedirectNum). For more information, see
Configuring IP Profiles on page 433.
configure voip > sip-definition Enables the replacement of the calling number with the redirect
settings > rep-calling-w-redir number for ISDN-to-IP calls.
[ReplaceCallingWithRedirectNum [0] = Disable (default)
ber] [1] = The calling name is removed and left blank. The outgoing
INVITE message excludes the redirect number that was used
to replace the calling number. The replacement is done only if
a redirect number is present in the incoming Tel call.
[2] = Manipulation is done on the new calling party number
(after manipulation of the original calling party number, using
the Tel2IPSourceNumberMappingDialPlanIndex parameter),
but before the regular calling or redirect number manipulation:
If a redirect number exists, it replaces the calling party
number. If there is no redirect number, the calling number
is left unchanged.
If there is a calling “display” name, it remains unchanged.
The redirect number remains unchanged and is included
in the SIP Diversion header.
Add Trunk Group ID as Prefix Determines whether the Trunk Group ID is added as a prefix to
configure voip > gateway routing the destination phone number (i.e., called number) for Tel-to-IP
settings > trkgrpid-prefix calls.
[AddTrunkGroupAsPrefix] [0] No = (Default) Don't add Trunk Group ID as prefix.
[1] Yes = Add Trunk Group ID as prefix to called number.
Note:
This option can be used to define various routing rules.
To use this feature, you must configure the Trunk Group IDs
(see Configuring Trunk Groups on page 501).
Add Trunk ID as Prefix Defines if the port number/Trunk ID is added as a prefix to the
configure voip > gateway routing called (destination) number for Tel-to-IP calls.
settings > trk-id-as-prefix [0] No (Default)
[AddPortAsPrefix] [1] Yes
If enabled, the device adds the following prefix to the called
phone number: port number/Trunk ID (single digit in the range 1
to 8).
This option can be used to define various routing rules.
Add Trunk Group ID as Prefix to Determines whether the device adds the Trunk Group ID (from
Source where the call originated) as the prefix to the calling number (i.e.
trkgrpid-pref2source source number).
[AddTrunkGroupAsPrefixToSourc [0] No (default)
e] [1] Yes
Replace Empty Destination with Determines whether the internal channel number is used as the
B-channel Phone Number destination number if the called number is missing.
configure voip > gateway routing [0] No (default)
settings > empty-dst-w-bch-nb [1] Yes
[ReplaceEmptyDstWithPortNumb Note: The parameter is applicable only to Tel-to-IP calls and if
er] the called number is missing.
Parameter Description
IP to Tel Remove Routing Table Determines whether or not the device removes the prefix, as
Prefix configured in the IP-to-Tel Routing table (see 'Configuring IP-to-
configure voip > gateway routing Tel Routing Rules' on page 518) from the destination number for
settings > ip2tel-rmv-rte-tbl IP-to-Tel calls, before sending it to the Tel.
[RemovePrefix] [0] No (default)
[1] Yes
For example: To route an incoming IP-to-Tel call with destination
number "21100", the IP-to-Tel Routing table is scanned for a
matching prefix. If such a prefix is found (e.g., "21"), then before
the call is routed to the corresponding Trunk Group, the prefix
"21" is removed from the original number, and therefore, only
"100" remains.
Note:
The parameter is applicable only if number manipulation is
performed after call routing for IP-to-Tel calls (i.e.,
RouteModeIP2Tel parameter is set to 0).
Similar operation (of removing the prefix) is also achieved by
using the usual number manipulation rules.
Swap Redirect and Called [0] No = (Default) Don't change numbers.
Numbers [1] Yes = Incoming ISDN call that includes a redirect number
swap-rdr-n-called-nb (sometimes referred to as 'original called number') uses the
Parameter Description
[SwapRedirectNumber] redirect number instead of the called number.
configure voip > gateway Determines whether the device uses the number from the URI in
manipulation settings > use-refer- the SIP Referred-By header as the calling number in the outgoing
by-for-calling-num Q.931 Setup message, when SIP REFER messages are
[UseReferredByForCallingNumbe received.
r] [0] = (Default) No
[1] = Yes
Note:
The parameter is applicable to all ISDN (TBCT, RLT, ECT)
and CAS blind call transfers (except for in-band) and when the
device receives SIP REFER messages with a Referred-By
header.
This manipulation is done before regular IP-to-Tel source
number manipulation.
configure voip > gateway Global parameter enabling the device to swap the calling and
manipulation settings > swap-tel- called numbers received from the Tel side (for Tel-to-IP calls).
to-ip-phone-num You can also configure the functionality per specific calls, using
[SwapTel2IPCalled&CallingNumb Tel Profiles (TelProfile_SwapTelToIpPhoneNumbers). For a
ers] detailed description of the parameter and for configuring the
functionality in the Tel Profiles table, see 'Configuring Tel Profiles'
on page 467.
Note: If the functionality is configured for a specific Tel Profile,
the settings of the global parameter is ignored for calls associated
with the Tel Profile.
Add Prefix to Redirect Number Defines a string prefix that is added to the Redirect number
add-pref-to-redir-nb received from the Tel side. This prefix is added to the Redirect
Number in the SIP Diversion header.
[Prefix2RedirectNumber]
The valid range is an 8-character string. By default, no value is
defined.
Add Number Plan and Type to Determines whether the TON/PLAN parameters are included in
RPI Header the Remote-Party-ID (RPID) header.
np-n-type-to-rpi-hdr [0] No
[AddTON2RPI] [1] Yes (default)
If the Remote-Party-ID header is enabled (EnableRPIHeader = 1)
and AddTON2RPI = 1, it's possible to configure the calling and
called number type and number plan using the Number
Manipulation tables for Tel-to-IP calls.
Source Manipulation Mode Determines the SIP headers containing the source number after
configure voip > gateway routing manipulation:
settings > src-manipulation [0] = (Default) The SIP From and P-Asserted-Identity headers
[SourceManipulationMode] contain the source number after manipulation.
[1] = Only SIP From header contains the source number after
manipulation, while the P-Asserted-Identity header contains
the source number before manipulation.
Calling Name Manipulations IP-to-Tel Table
configure voip > gateway Configures rules for manipulating the calling name (caller ID) in
Parameter Description
manipulation calling-name-map- the received SIP message for IP-to-Tel calls. This can include
ip2tel modifying or removing the calling name. The format of this table
[CallingNameMapIp2Tel] ini file parameter is as follows:
[ CallingNameMapIp2Tel ]
FORMAT CallingNameMapIp2Tel_Index =
CallingNameMapIp2Tel_ManipulationName,
CallingNameMapIp2Tel_DestinationPrefix,
CallingNameMapIp2Tel_SourcePrefix,
CallingNameMapIp2Tel_CallingNamePrefix,
CallingNameMapIp2Tel_SourceAddress,
CallingNameMapIp2Tel_RemoveFromLeft,
CallingNameMapIp2Tel_RemoveFromRight,
CallingNameMapIp2Tel_LeaveFromRight,
CallingNameMapIp2Tel_Prefix2Add,
CallingNameMapIp2Tel_Suffix2Add;
[ \CallingNameMapIp2Tel ]
For more information, see 'Configuring SIP Calling Name
Manipulation' on page 544.
Calling Name Manipulations Tel-to-IP Table
configure voip > gateway Defines rules for manipulating the calling name (caller ID) for Tel-
manipulation calling-name-map- to-IP calls. This can include modifying or removing the calling
tel2ip name.
[CallingNameMapTel2Ip] [ CallingNameMapTel2Ip ]
FORMAT CallingNameMapTel2Ip_Index =
CallingNameMapTel2Ip_ManipulationName,
CallingNameMapTel2Ip_DestinationPrefix,
CallingNameMapTel2Ip_SourcePrefix,
CallingNameMapTel2Ip_CallingNamePrefix,
CallingNameMapTel2Ip_SrcTrunkGroupID,
CallingNameMapTel2Ip_RemoveFromLeft,
CallingNameMapTel2Ip_RemoveFromRight,
CallingNameMapTel2Ip_LeaveFromRight,
CallingNameMapTel2Ip_Prefix2Add,
CallingNameMapTel2Ip_Suffix2Add;
[ \CallingNameMapTel2Ip ]
For more information, see 'Configuring SIP Calling Name
Manipulation' on page 544.
Destination Phone Number Manipulation for IP-to-Tel Calls Table
Destination Phone Number This table parameter manipulates the destination number of IP-to-
Manipulation for IP-to-Tel Calls Tel calls. The format of the ini file table parameter is as follows:
configure voip > gateway [NumberMapIp2Tel]
manipulation NumberMapIp2Tel2 FORMAT NumberMapIp2Tel_Index =
[NumberMapIP2Tel] NumberMapIp2Tel_ManipulationName,
NumberMapIp2Tel_DestinationPrefix,
NumberMapIp2Tel_SourcePrefix,
NumberMapIp2Tel_SourceAddress,
NumberMapIp2Tel_NumberType,
NumberMapIp2Tel_NumberPlan,
NumberMapIp2Tel_RemoveFromLeft,
NumberMapIp2Tel_RemoveFromRight,
NumberMapIp2Tel_LeaveFromRight,
NumberMapIp2Tel_Prefix2Add, NumberMapIp2Tel_Suffix2Add,
Parameter Description
NumberMapIp2Tel_IsPresentationRestricted;
[\NumberMapIp2Tel]
For more information, see 'Configuring Source/Destination
Number Manipulation' on page 537.
configure voip > gateway Enables additional destination number manipulation for IP-to-Tel
manipulation settings > prfm-ip- calls. The additional manipulation is done on the initially
to-tel-dst-map manipulated destination number, and this additional rule is also
[PerformAdditionalIP2TELDestina configured in the manipulation table (NumberMapIP2Tel
tionManipulation] parameter). This enables you to configure only a few
manipulation rules for complex number manipulation
requirements (that generally require many rules).
[0] = Disable (default)
[1] = Enable
Destination Phone Number Manipulation for Tel-to-IP Calls Table
Destination Phone Number This table parameter manipulates the destination number of Tel-
Manipulation for Tel-to-IP Calls to-IP calls. The format of the ini file table parameter is as follows:
configure voip > gateway [NumberMapTel2Ip]
manipulation NumberMapTel2Ip FORMAT NumberMapTel2Ip_Index =
[NumberMapTel2IP] NumberMapTel2Ip_ManipulationName,
NumberMapTel2Ip_DestinationPrefix,
NumberMapTel2Ip_SourcePrefix,
NumberMapTel2Ip_SourceAddress,
NumberMapTel2Ip_NumberType,
NumberMapTel2Ip_NumberPlan,
NumberMapTel2Ip_RemoveFromLeft,
NumberMapTel2Ip_RemoveFromRight,
NumberMapTel2Ip_LeaveFromRight,
NumberMapTel2Ip_Prefix2Add, NumberMapTel2Ip_Suffix2Add,
NumberMapTel2Ip_IsPresentationRestricted,
NumberMapTel2Ip_SrcTrunkGroupID, NumberMapTel2Ip_
SrcIPGroupID;
[\NumberMapTel2Ip]
For more information, see 'Configuring Source/Destination
Number Manipulation' on page 537.
Source Phone Number Manipulation for IP-to-Tel Calls Table
Source Phone Number The parameter table manipulates the source number for IP-to-Tel
Manipulation for IP-to-Tel Calls calls. The format of the ini file table parameter is as follows:
configure voip > gateway [SourceNumberMapIp2Tel]
manipulation FORMAT SourceNumberMapIp2Tel_Index =
SourceNumberMapIp2Tel SourceNumberMapIp2Tel_ManipulationName,
[SourceNumberMapIP2Tel] SourceNumberMapIp2Tel_DestinationPrefix,
SourceNumberMapIp2Tel_SourcePrefix,
SourceNumberMapIp2Tel_SourceAddress,
SourceNumberMapIp2Tel_NumberType,
SourceNumberMapIp2Tel_NumberPlan,
SourceNumberMapIp2Tel_RemoveFromLeft,
SourceNumberMapIp2Tel_RemoveFromRight,
SourceNumberMapIp2Tel_LeaveFromRight,
SourceNumberMapIp2Tel_Prefix2Add,
SourceNumberMapIp2Tel_Suffix2Add,
SourceNumberMapIp2Tel_IsPresentationRestricted;
[\SourceNumberMapIp2Tel]
Parameter Description
For more information, see 'Configuring Source/Destination
Number Manipulation' on page 537.
configure voip > gateway Enables additional source number manipulation for IP-to-Tel
manipulation settings > prfm-ip- calls. The additional manipulation is done on the initially
to-tel-src-map manipulated source number, and this additional rule is also
[PerformAdditionalIP2TELSource configured in the manipulation table (SourceNumberMapIP2Tel
Manipulation] parameter). This enables you to configure only a few
manipulation rules for complex number manipulation
requirements (that generally require many rules).
[0] = Disable (default)
[1] = Enable
Source Phone Number Manipulation for Tel-to-IP Calls Table
Source Phone Number This table parameter manipulates the source phone number for
Manipulation for Tel-to-IP Calls Tel-to-IP calls. The format of the ini file table parameter is as
configure voip > gateway follows:
manipulation [SourceNumberMapTel2Ip]
SourceNumberMapTel2Ip FORMAT SourceNumberMapTel2Ip_Index =
[SourceNumberMapTel2IP] SourceNumberMapTel2Ip_ManipulationName,
SourceNumberMapTel2Ip_DestinationPrefix,
SourceNumberMapTel2Ip_SourcePrefix,
SourceNumberMapTel2Ip_NumberType,
SourceNumberMapTel2Ip_NumberPlan,
SourceNumberMapTel2Ip_RemoveFromLeft,
SourceNumberMapTel2Ip_RemoveFromRight,
SourceNumberMapTel2Ip_LeaveFromRight,
SourceNumberMapTel2Ip_Prefix2Add,
SourceNumberMapTel2Ip_Suffix2Add,
SourceNumberMapTel2Ip_IsPresentationRestricted,
SourceNumberMapTel2Ip_SrcTrunkGroupID;
[\SourceNumberMapTel2Ip]
For more information, see 'Configuring Source/Destination
Number Manipulation' on page 537.
Redirect Number IP-to-Tel Table
Redirect Number IP -> Tel This table parameter manipulates the redirect number for IP-to-
configure voip > gateway Tel calls.
manipulation redirect-number- The format of the ini file table parameter is as follows:
map-ip2tel [RedirectNumberMapIp2Tel]
[RedirectNumberMapIp2Tel] FORMAT RedirectNumberMapIp2Tel_Index =
RedirectNumberMapIp2Tel_ManipulationName,
RedirectNumberMapIp2Tel_DestinationPrefix,
RedirectNumberMapIp2Tel_RedirectPrefix,
RedirectNumberMapIp2Tel_SourceAddress,
RedirectNumberMapIp2Tel_SrcHost,
RedirectNumberMapIp2Tel_DestHost,
RedirectNumberMapIp2Tel_NumberType,
RedirectNumberMapIp2Tel_NumberPlan,
RedirectNumberMapIp2Tel_RemoveFromLeft,
RedirectNumberMapIp2Tel_RemoveFromRight,
RedirectNumberMapIp2Tel_LeaveFromRight,
RedirectNumberMapIp2Tel_Prefix2Add,
RedirectNumberMapIp2Tel_Suffix2Add,
Parameter Description
RedirectNumberMapIp2Tel_IsPresentationRestricted;
[\RedirectNumberMapIp2Tel]
For more information, see Configuring Redirect Number
Manipulation on page 547.
Redirect Number Tel-to-IP Table
Redirect Number Tel -> IP This table parameter manipulates the Redirect Number for Tel-to-
configure voip > gateway IP calls. The format of the ini file table parameter is as follows:
manipulation redirect-number- [RedirectNumberMapTel2Ip]
map-tel2ip FORMAT RedirectNumberMapTel2Ip_Index =
[RedirectNumberMapTel2IP] RedirectNumberMapTel2Ip_ManipulationName,
RedirectNumberMapTel2Ip_DestinationPrefix,
RedirectNumberMapTel2Ip_RedirectPrefix,
RedirectNumberMapTel2Ip_NumberType,
RedirectNumberMapTel2Ip_NumberPlan,
RedirectNumberMapTel2Ip_RemoveFromLeft,
RedirectNumberMapTel2Ip_RemoveFromRight,
RedirectNumberMapTel2Ip_LeaveFromRight,
RedirectNumberMapTel2Ip_Prefix2Add,
RedirectNumberMapTel2Ip_Suffix2Add,
RedirectNumberMapTel2Ip_IsPresentationRestricted,
RedirectNumberMapTel2Ip_SrcTrunkGroupID;
[\RedirectNumberMapTel2Ip]
For more information, see 'Configuring Redirect Number
Manipulation' on page 547.
Phone Contexts Table
Phone Contexts Defines the Phone Context table. The parameter maps NPI and
configure voip > gateway TON to the SIP 'phone-context' parameter, and vice versa.
manipulation phone-context-table The format for the parameter is as follows:
[PhoneContext] [PhoneContext]
FORMAT PhoneContext_Index = PhoneContext_Npi,
PhoneContext_Ton, PhoneContext_Context;
[\PhoneContext]
For example:
PhoneContext 0 = 0,0,unknown.com
PhoneContext 1 = 1,1,host.com
PhoneContext 2 = 9,1,na.e164.host.com
For more information, see 'Configuring NPI/TON-SIP Phone-
Context Mapping Rules' on page 553.
Add Phone Context As Prefix Determines whether the received Phone-Context parameter is
configure voip > gateway added as a prefix to the outgoing ISDN Setup message with
manipulation settings > add-ph- Called and Calling numbers.
cntxt-as-pref [0] Disable (default)
[AddPhoneContextAsPrefix] [1] Enable
Parameter Description
CRP-specific Parameters
CRP Application Enables the CRP application.
configure voip > application > enable-crp [0] Disable (default)
[EnableCRPApplication] [1] Enable
Note: For the parameter to take effect, a device reset
is required.
CRP Survivability Mode Defines the CRP mode.
configure voip > sbc settings > crp- [0] Standard Mode (default)
survivability-mode [1] Always Emergency Mode
[CRPSurvivabilityMode] [2] Auto-answer REGISTER
configure voip > sbc settings > crp-gw- Enables fallback routing from the proxy server to the
fallback Gateway (PSTN).
[CRPGatewayFallback] [0] = Disable (default)
[1] = Enable
SBC-specific Parameters
Enable SBC Enables the Session Border Control (SBC)
configure voip > application > enable-sbc application.
[EnableSBCApplication] [0] Disable
[1] Enable (default)
Note:
For the parameter to take effect, a device reset is
required.
The parameter is enabled by default only if the
License Key contains at least one of the SBC-
related capacity features (e.g., "SBC-Signaling");
otherwise, the parameter is disabled.
SBC and CRP Parameters
Unclassified Calls Determines whether incoming calls that cannot be
configure voip > sbc settings > unclassified- classified (i.e. classification process fails) to a Source
calls IP Group are rejected or processed.
[AllowUnclassifiedCalls] [0] Reject = (Default) Call is rejected if
classification fails.
[1] Allow = If classification fails, the incoming
packet is assigned to a source IP Group (and
subsequently processed) as follows:
The source SRD is determined according to
the SIP Interface to where the SIP-initiating
dialog request is sent. The source IP Group is
set to the default IP Group associated with this
SRD.
If the source SRD is ID 0, then source IP
Group ID 0 is chosen. In case of any other
SRD, then the first IP Group associated with
this SRD is chosen as the source IP Group or
the call. If no IP Group is associated with this
SRD, the call is rejected.
Parameter Description
SBC Max Call Duration Defines the maximum duration (in minutes) per SBC
configure voip > sbc settings > sbc-mx-call- call (global). If the duration is reached, the device
duration terminates the call.
[SBCMaxCallDuration] The valid range is 0 to 35,791, where 0 is unlimited
duration. The default is 0.
Note: You can also configure this functionality per
specific calls, using IP Profiles
(IpProfile_SBCMaxCallDuration). For a detailed
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring
IP Profiles' on page 433. If this functionality is
configured for a specific IP Profile, the settings of this
global parameter is ignored for calls associated with
the IP Profile.
SBC No Answer Timeout Defines the timeout (in seconds) for SBC outgoing
configure voip > sbc settings > sbc-no-arelt- (outbound IP routing) SIP INVITE messages. If the
timeout called IP party does not answer the call within this
user-defined interval, the device disconnects the
[SBCAlertTimeout]
session. The device starts the timeout count upon
receipt of a SIP 180 Ringing response from the called
party. If no other SIP response (for example, 200 OK)
is received thereafter within this timeout, the call is
released.
The valid range is 0 to 3600 seconds. the default is
600.
configure voip > sbc settings > num-of- Defines the maximum number of concurrent SIP
subscribes SUBSCRIBE sessions permitted on the device.
[NumOfSubscribes] The valid value is any value between 0 and the
maximum supported SUBSCRIBE sessions. When set
to -1, the device uses the default value. For more
information, contact your AudioCodes sales
representative.
Note:
For the parameter to take effect, a device reset is
required.
The maximum number of SUBSCRIBE sessions
can be increased by reducing the maximum
number of SBC channels in the License Key. For
every reduced SBC session, the device gains two
SUBSCRIBE sessions.
configure voip > sbc settings > sbc-dialog- Enables the device to route in-dialog, refresh SIP
subsc-route-mode SUBSCRIBE requests to the "working" (has
[SBCInDialogSubscribeRouteMode] connectivity) proxy.
[0] = (Default) Disable – the device sends in-
dialog, refresh SUBSCRIBES according to the
address in the Contact header of the 200 OK
response received from the proxy to which the
initial SUBSCRIBE was sent (as per the SIP
standard).
[1] = Enable – the device routes in-dialog, refresh
SUBSCRIBES to the "working" proxy (regardless
of the Contact header). The "working" proxy
Parameter Description
(address) is determined by the device's keep-alive
mechanism for the Proxy Set that was used to
route the initial SUBSCRIBE.
Note: For this feature to be functional, ensure the
following:
Keep-alive mechanism is enabled for the Proxy
Set ('Proxy Keep-Alive' parameter is set to any
value other than Disable).
Load-balancing between proxies is disabled
('Proxy Load Balancing Method' parameter is set to
Disable).
configure voip > sbc settings > sbc-max-fwd- Defines the Max-Forwards SIP header value. The
limit Max-Forwards header is used to limit the number of
[SBCMaxForwardsLimit] servers (such as proxies) that can forward the SIP
request. The Max-Forwards value indicates the
remaining number of times this request message is
allowed to be forwarded. This count is decremented
by each server that forwards the request.
The parameter affects the Max-Forwards header in
the received message as follows:
If the received header’s original value is 0, the
message is not passed on and is rejected.
If the received header’s original value is less than
the parameter's value, the header’s value is
decremented before being sent on.
If the received header’s original value is greater
than the parameter's value, the header’s value is
replaced by the user-defined parameter’s value.
The valid value range is 1-70. The default is 10.
SBC Session-Expires Defines the SBC session refresh timer (in seconds) in
configure voip > sbc settings > sbc-sess-exp- the Session-Expires header of outgoing INVITE
time messages.
[SBCSessionExpires] The valid value range is 90 (according to RFC 4028)
to 86400. The default is 180.
Minimum Session-Expires Defines the minimum amount of time (in seconds)
configure voip > sbc settings > min-session- between session refresh requests in a dialog before
expires the session is considered timed out. This value is
conveyed in the SIP Min-SE header.
[SBCMinSE]
The valid range is 0 (default) to 1,000,000, where 0
means that the device does not limit Session-Expires.
configure voip > sbc settings > sbc-session- Defines the SIP user agent responsible for
refresh-policy periodically sending refresh requests for established
[SBCSessionRefreshingPolicy] sessions (active calls). The session refresh allows SIP
UAs or proxies to determine the status of the SIP
session. When a session expires, the session is
considered terminated by the UAs, regardless of
whether a SIP BYE was sent by one of the UAs.
The SIP Session-Expires header conveys the lifetime
of the session, which is sent in re-INVITE or UPDATE
requests (session refresh requests). The 'refresher='
Parameter Description
parameter in the Session-Expires header (sent in the
initial INVITE or subsequent 2xx response) indicates
who sends the session refresh requests. If the
parameter contains the value 'uac', the device
performs the refreshes; if the parameter contains the
value 'uas', the remote proxy performs the refreshes.
An example of the Session-Expires header is shown
below:
Session-Expires: 4000;refresher=uac
Thus, the parameter is useful when a UA does not
support session refresh requests or does not support
the indication of who performs session refresh
requests. In such a scenario, the device can be
configured to perform the session refresh requests.
[0] Remote Refresher = (Default) The UA (proxy)
performs the session refresh requests. The device
indicates this to the UA by sending the SIP
message with the 'refresher=' parameter in the
Session-Expires header set to 'uas'.
[1] SBC Refresher = The device performs the
session refresh requests. The device indicates this
to the UA by sending the SIP message with the
'refresher=' parameter in the Session-Expires
header set to 'uac'.
Note: The time values of the Session-Expires
(session refresh interval) and Min-SE (minimum
session refresh interval) headers can be configured
using the SBCSessionExpires and SBCMinSE
parameters, respectively.
User Registration Grace Time Defines additional time (in seconds) to add to the
configure voip > sbc settings > sbc-usr-reg- registration expiry time of users that are registered
grace-time with the device.
[SBCUserRegistrationGraceTime] The valid value is 0 to 2,000,000. The default is 0.
For more information, see 'Registration Refreshes' on
page 599.
DB Routing Search Mode Defines the method for searching a registered user in
configure voip > sbc settings > sbc-db-route- the device's User Registration database when a SIP
mode INVITE message is received for routing to a user. If
the registered user is found (i.e., destination URI in
[SBCDBRoutingSearchMode]
INVITE), the device routes the call to the user's
corresponding contact address specified in the
database.
[0] All permutations = (Default)
To User: Device searches for the user in the
database using the entire Request-URI
(user@host). If not found, it searches for the
user part of the Request-URI. For example, it
first searches for "4709@joe.company.com"
and if not found, it searches for "4709".
From User: Device searches for the user in
the database using the entire From header
AOR (user@host). If not found, it searches for
the user part of the From header AOR. For
Parameter Description
example, it first searches for
"4709@domain.com" and if not found, it
searches for "4709".
[1] Dest URI dependant =
To User: Device searches for the user in the
database using the entire Request-URI
(user@host) only. For example, it searches for
"4709@joe.company.com".
From User: Device searches for the user in
the database using the entire From header
AOR (user@host) only. For example, for
“From: <sip:4709@domain.com>", the device
searches for “4709@domain.com”.
Note: If the Request-URI contains the "tel:" URI or
"user=phone" parameter, the device searches only for
the user part.
Handle P-Asserted-Identity Global parameter that defines the handling of the SIP
configure voip > sbc settings > p-assert-id P-Asserted-Identity header. You can also configure
this functionality per specific calls, using IP Profiles
[SBCAssertIdentity]
(IpProfile_SBCAssertIdentity). For a detailed
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring
IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP
Profile, the settings of this global parameter is ignored
for calls associated with the IP Profile.
Keep original user in Register Defines the device's handling of the SIP Contact
configure voip > sbc settings > header in REGISTER requests which it forwards as
keep-contact-user-in-reg the outgoing message.
[SBCKeepContactUserinRegister] [0] Do not keep user; override with unique identifier
= (Default) The device replaces the user part of the
Contact header with a unique value, for example:
Incoming Contact Header:
<sip:123@domain.com>
Outgoing Contact Header: <sip:FEU1-7-1-
3@SBC>
[1] keep user without unique identifier = The device
retains the original user part value of the Contact
header in the outgoing REGISTER request.
[2] Keep user; add unique identifier as URI
parameter = The device retains the original user
part value of the Contact header in the outgoing
REGISTER request. In addition, it adds the special
URI parameter "ac-feu=<identifier>" to the Contact
header, which is used to differentiate between two
SIP entities with the same user part. The identifier
value is generated by the device.
Incoming Contact Header:
<sip:123@domain.com>
Outgoing Contact Header: <sip:123@SBC;ac-
feu=1-7-1-3>
Note:
Parameter Description
The parameter is applicable only to REGISTER
messages received from User-type IP Groups
which are sent to Server-type IP Groups.
Depending on the 'Remote Representation Mode'
parameter of the IP Profiles table
(IpProfile_SBCRemoteRepresentationMode), the
host part in the SIP Contact header can replaced
by the device’s IP address or by the value of the
'SIP Group Name' parameter (configured in the IP
Groups table).
SBC Remote Refer Behavior Global parameter that defines the handling of SIP
configure voip > sbc settings > sbc-refer-bhvr REFER requests. You can also configure this
functionality per specific calls, using IP Profiles
[SBCReferBehavior]
(IpProfile_SBCRemoteReferBehavior). For a detailed
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring
IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP
Profile, the settings of this global parameter is ignored
for calls associated with the IP Profile.
configure voip > sbc settings > sbc-xfer- When the SBCReferBehavior is set to 1, the device,
prefix while interworking the SIP REFER message, adds the
[SBCXferPrefix] prefix "T~&R-" to the user part of the URI in the Refer-
To header. After this, the device can receive an
INVITE with such a prefix (the INVITE is sent by the
UA that receives the REFER message or 302
response). If the device receives an INVITE with such
a prefix, it replaces the prefix with the value defined
for the SBCXferPrefix parameter.
By default, no value is defined.
Note: This feature is also applicable to 3xx redirect
responses. The device adds the prefix "T~&R-" to the
URI user part in the Contact header if the
SBC3xxBehavior parameter is set to 1.
configure voip > sbc settings > sbc-3xx-bhvt Global parameter that defines the handling of SIP 3xx
[SBC3xxBehavior] redirect responses. You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_SBCRemote3xxBehavior). For a detailed
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring
IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP
Profile, the settings of this global parameter is ignored
for calls associated with the IP Profile.
configure voip > sbc settings > Enables the device to include all previously negotiated
enforce-media-order media lines within the current session ('m=' line) in the
[SBCEnforceMediaOrder] SDP offer-answer exchange (RFC 3264).
[0] Disable (default)
[1] Enable
For example, assume a call (audio) has been
established between two endpoints and one endpoint
wants to subsequently send an image in the same call
Parameter Description
session. If the parameter is enabled, the endpoint
includes the previously negotiated media type (i.e.,
audio) with the new negotiated media type (i.e.,
image) in its SDP offer:
v=0
o=bob 2890844730 2890844731 IN IP4
host.example.com
s=
c=IN IP4 host.example.com
t=0 0
m=audio 0 RTP/AVP 0
m=image 12345 udptl t38
If the parameter is disabled, the only ‘m=’ line
included in the SDP is the newly negotiated media
(i.e., image).
SBC Diversion URI Type Defines the URI type to use in the SIP Diversion
configure voip > sbc settings > sbc-diversion- header of the outgoing SIP message.
uri-type [0] Transparent = (Default) The device does not
[SBCDiversionUriType] change the URI and leaves it as is.
[1] Sip = The "sip" URI is used.
[2] Tel = The "tel" URI is used.
Note: The parameter is applicable only if the
Diversion header is used. The SBCDiversionMode
and SBCHistoryInfoMode parameters in the IP
Profiles table determine the call redirection (diversion)
SIP header to use - History-Info or Diversion.
SBC Server Auth Mode Defines whether authentication of the SIP client is
configure voip > sbc settings > sbc-server- done locally (by the device) or by a RADIUS server.
auth-mode [0] (default) = Authentication is done by the device
[SBCServerAuthMode] (locally).
[1] = Authentication is done by the RFC 5090
compliant RADIUS server.
[2] = Authentication is done according to the Draft
Sterman-aaa-sip-01 method.
Note: Currently, option [1] is not supported.
Lifetime of the nonce in seconds Defines the lifetime (in seconds) that the current
configure voip > sbc settings > lifetime-of- nonce is valid for server-based authentication. The
nonce device challenges a message that attempts to use a
server nonce beyond this period. The parameter is
[AuthNonceDuration]
used to provide replay protection (i.e., ensures that
old communication streams are not used in replay
attacks).
The valid value range is 30 to 600. The default is 300.
Authentication Challenge Method Defines the type of server-based authentication
configure voip > sbc settings > auth-chlng- challenge.
mthd [0] 0 = (Default) Send SIP 401 "Unauthorized" with
[AuthChallengeMethod] a WWW-Authenticate header as the authentication
challenge response.
[1] 1 = Send SIP 407 "Proxy Authentication
Required" with a Proxy-Authenticate header as the
Parameter Description
authentication challenge response.
Authentication Quality of Protection Defines the authentication and integrity level of quality
configure voip > sbc settings > auth-qop of protection (QoP) for digest authentication offered to
the client. When the device challenges a SIP request
[AuthQOP]
(e.g., INVITE), it sends a SIP 401 response with the
Proxy-Authenticate header or WWW-Authenticate
header containing the 'qop' parameter. The QoP
offered in the 401 response can be 'auth', 'auth-int',
both 'auth' and 'auth-int', or the 'qop' parameter can be
omitted from the 401 response. In response to the
401, the client needs to send the device another
INVITE with the MD5 hash of the INVITE message
and indicate the selected auth type.
[0] 0 = The device sends 'qop=auth' in the SIP
response, requesting authentication (i.e., validates
user by checking user name and password). This
option does not authenticate the message body
(i.e., SDP).
[1] 1 = The device sends 'qop=auth-int' in the SIP
response, indicating required authentication and
authentication with integrity (e.g., checksum). This
option restricts the client to authenticating the
entire SIP message, including the body, if present.
[2] 2 = (Default) The device sends 'qop=auth,
auth-int' in the SIP response, indicating either
authentication or integrity. This enables the client
to choose 'auth' or 'auth-int'. If the client chooses
'auth-int', then the body is included in the
authentication. If the client chooses 'auth', then the
body is not authenticated.
[3] 3 = No 'qop' parameter is offered in the SIP 401
challenge message.
SBC User Registration Time Global parameter that defines the duration (in
configure voip > sbc settings > sbc-usr-rgstr- seconds) of the periodic registrations that occur
time between the user and the device (the device responds
with this value to the user). You can also configure
[SBCUserRegistrationTime]
this functionality per specific calls, using IP Profiles
(IpProfile_SBCUserRegistrationTime). For a detailed
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring
IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP
Profile, the settings of this global parameter is ignored
for calls associated with the IP Profile.
SBC Proxy Registration Time Defines the duration (in seconds) for which the user is
configure voip > sbc settings > sbc-prxy- registered in the proxy database (after the device
rgstr-time forwards the REGISTER message). This value is sent
in the Expires header. When set to 0, the device
[SBCProxyRegistrationTime]
sends the Expires header's value as received from the
user to the proxy.
The valid range is 0 to 2,000,000 seconds. The
default is 0.
configure voip > sbc settings > sbc-rand- Defines a value (in seconds) that is used to calculate
Parameter Description
expire a new value for the expiry time in the Expires header
[SBCRandomizeExpires] of SIP 200 OK responses for user registration and
subscription requests from users.
The expiry time value appears in the Expires header
in REGISTER and SUBSCRIBE SIP messages. When
the device receives such a request from a user, it
forwards it to the proxy or registrar server. Upon a
successful registration or subscription, the server
sends a SIP 200 OK response. If the expiry time was
unchanged by the server, the device applies this
feature and changes the expiry time in the SIP 200
OK response before forwarding it to the user;
otherwise, the device does not change the expiry
time.
This feature is useful in scenarios where multiple
users may refresh their registration or subscription
simultaneously, thereby causing the device to handle
many such sessions at a given time. This may result
in an overload of the device (reaching maximum
session capacity), thereby preventing the
establishment of new calls or preventing the handling
of some user registration or subscription requests.
When this feature is enabled, the device assigns a
random expiry time to each user registration or
subscription and thus, ensuring future user
registration and subscription requests are more
distributed over time (i.e., do not all occur
simultaneously).
The device takes any random number between 0 and
the value configured by the parameter, and then
subtracts this random number from the original expiry
time value. For example, assume that the original
expiry time is 120 and the parameter is set to 10. If
the device randomly chooses the number 5 (i.e.,
between 0 and 10), the resultant expiry time will be
115 (120 minus 5).
The valid value is 0 to 20. The default is 10. If set to 0,
the device does not change the expiry time.
Note:
The lowest expiry time that the device sends in the
200 OK, regardless of the resultant calculation, is
10 seconds. For example, if the original expiry time
is 12 seconds and the parameter is set to 5,
theoretically, the new expiry time can be less than
10 (e.g., 12 – 4 = 8). However, the expiry time will
be set to 10.
The expiry time received from the user can be
changed by the device before forwarding it to the
proxy. This is configured by the
SBCUserRegistrationTime parameter.
SBC Survivability Registration Time Defines the duration of the periodic registrations
configure voip > sbc settings > sbc-surv- between the user and the device, when the device is
rgstr-time in survivability state (i.e., when REGISTER requests
Parameter Description
[SBCSurvivabilityRegistrationTime] cannot be forwarded to the proxy and are terminated
by the device). When set to 0, the device uses the
value set by the SBCUserRegistrationTime parameter
for the device's response.
The valid range is 0 to 2,000,000 seconds. The
default is 0.
configure voip > sbc settings > Enables the device to notify Aastra IP phones that the
sas-notice device is currently operating in Survivability mode.
[SBCEnableSurvivabilityNotice] [0] = Disable
[1] = Enable
For more information, see 'Enabling Survivability
Display on Aastra IP Phones' on page 712.
SBC Dialog-Info Interworking Enables the interworking of dialog information
configure voip > sbc settings > sbc-dialog- (parsing of call identifiers in XML body) in SIP
info-interwork NOTIFY messages received from a remote
application server.
[EnableSBCDialogInfoInterworking]
[0] Disable (default)
[1] Enable
For more information, see 'Interworking Dialog
Information in SIP NOTIFY Messages' on page 621.
configure voip > sbc settings > sbc-keep-call- Global parameter that enables the device to use the
id same call identification (SIP Call-ID header value)
[SBCKeepOriginalCallId] received in incoming messages for the call
identification in outgoing messages. The call
identification value is contained in the SIP Call-ID
header.
You can also configure the functionality per specific
calls, using IP Profiles. For a detailed description of
the parameter and for configuring the functionality in
the IP Profiles table, see Configuring IP Profiles on
page 433.
SBC GRUU Mode Determines the Globally Routable User Agent (UA)
configure voip > sbc settings > sbc-gruu- URI (GRUU) support, according to RFC 5627.
mode [0] None = No GRUU is supplied to users.
[SBCGruuMode] [1] As Proxy = (Default) The device provides same
GRUU types as the proxy provided the device’s
GRUU clients.
[2] Temporary only = Supply only temporary
GRUU to users. (Currently not supported.)
[3] Public only = The device provides only public
GRUU to users.
[4] Both = The device provides temporary and
public GRUU to users. (Currently not supported.)
The parameter allows the device to act as a GRUU
server for its SIP UA clients, providing them with
public GRUU’s, according to RFC 5627. The public
GRUU provided to the client is denoted in the SIP
Contact header parameters, "pub-gruu". Public GRUU
remains the same over registration expirations. On
the other SBC leg communicating with the
Proxy/Registrar, the device acts as a GRUU client.
Parameter Description
The device creates a GRUU value for each of its
registered clients, which is mapped to the GRUU
value received from the Proxy server. In other words,
the created GRUU value is only used between the
device and its clients (endpoints).
Public-GRUU:
sip:userA@domain.com;gr=unique-id
Bye Authentication Enables authenticating a SIP BYE request before
configure voip > sbc settings > sbc-bye-auth disconnecting the call. This feature prevents, for
example, a scenario in which the SBC SIP client
[SBCEnableByeAuthentication]
receives a BYE request from a third-party imposer
assuming the identity of a participant in the call and as
a consequence, the call between the first and second
parties is inappropriately disconnected.
[0] Disable (default)
[1] Enable = The device forwards the SIP
authentication response (for the BYE request) to
the request sender and waits for the user to
authenticate it. The call is disconnected only if the
authenticating server responds with a 200 OK.
SBC Enable Subscribe Trying Enables the device to send SIP 100 Trying responses
configure voip > sbc settings > sbc-subs-try upon receipt of SUBSCRIBE or NOTIFY messages.
[SBCSendTryingToSubscribe] [0] Disable (Default)
[1] Enable
BroadWorks Survivability Feature Enables SBC user registration for interoperability with
configure voip > sbc settings > sbc- BroadSoft's BroadWorks server, to provide call
broadworks-survivability survivability in case of connectivity failure with the
BroadWorks server.
[SBCExtensionsProvisioningMode]
[0] Disable = (Default) Normal processing of
REGISTER messages.
[1] Enable = Registration method for BroadWorks
server. In a failure scenario with BroadWorks, the
device acts as a backup SIP proxy server,
maintaining call continuity between the enterprise
LAN users (subscribers) and between the
subscribers and the PSTN (if provided).
Note: For a detailed description of this feature, see
'Enabling Auto-Provisioning of Subscriber-Specific
Information of BroadWorks Server for Survivability' on
page 707.
SBC Direct Media Enables the Direct Media feature (i.e., no Media
configure voip > sip-interface > sbc-direct- Anchoring) for all SBC calls, whereby SIP signaling is
media handled by the device without handling the
RTP/SRTP (media) flow between the user agents
[SBCDirectMedia]
(UA). The RTP packets do not traverse the device.
Instead, the two SIP UAs establish a direct
RTP/SRTP flow between one another. Signaling
continues to traverse the device with minimal
intermediation and involvement to enable certain SBC
abilities such as routing
[0] Disable = (Default) All calls traverse the device
Parameter Description
(i.e., no direct media).
[1] Enable = Direct media flow between endpoints
for all SBC calls.
Note:
The setting of direct media in the SIP Interfaces
table overrides this global parameter. In other
words, even if the parameter is disabled for direct
media (i.e., Media Anchoring is enabled), if direct
media is enabled for a SIP Interface (in the SIP
Interfaces table), calls between endpoints
belonging to the SIP Interface employ direct
media.
For more information on No Media Anchoring, see
'Direct Media' on page 602.
SBC RTCP Mode Global parameter that defines the handling of RTCP
configure voip > sbc settings > sbc-rtcp- packets. You can also configure this functionality per
mode specific calls, using IP Profiles
(IPProfile_SBCRTCPMode). For a detailed
[SBCRTCPMode]
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring
IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP
Profile, the settings of this global parameter is ignored
for calls associated with the IP Profile.
SBC Send Invite To All Contacts Enables call forking of INVITE message received with
configure voip > sbc settings > sbc-send- a Request-URI of a specific contact registered in the
invite-to-all-contacts device's database, to all users under the same AOR
as the contact.
[SBCSendInviteToAllContacts]
[0] Disable (default) = Sends the INVITE only to
the contact of the received Request-URI.
[1] Enable
To configure call forking initiated by the device, see
'Initiating SIP Call Forking' on page 705.
SBC Shared Line Registration Mode Enables the termination on the device of SIP
configure voip > sbc settings > sbc-shared- REGISTER messages from secondary lines that
line-reg-mode belong to the Shared Line feature.
[SBCSharedLineRegMode] [0] Disable = (Default) Device forwards the
REGISTER messages as is (i.e., not terminated on
the device).
[1] Enable = REGISTER messages of secondary
lines are terminated on the device.
Note: The device always forwards REGISTER
messages of the primary line.
SBC Forking Handling Mode Defines the handling of SIP 18x responses that are
configure voip > sbc settings > sbc-forking- received due to call forking of an INVITE.
handling-mode [0] Latch On First = (Default) Only the first 18x is
[SBCForkingHandlingMode] forwarded to the INVITE-initiating UA. If SIP 18x
with SDP is received, the device opens a voice
stream according to the received SDP and
disregards any subsequent 18x forking responses
(with or without SDP). If the first response is 180
Parameter Description
without SDP, the device sends it to the other side.
[1] Sequential = All 18x responses are forwarded,
one at a time (sequentially) to the INVITE-initiating
UA. If a 18x arrives with an offer only, then only the
first offer is forwarded to the INVITE-initiating UA
and subsequent 18x responses are discarded.
Gateway Direct Route Prefix Defines the prefix destination Request-URI user part
configure voip > sbc settings > gw-direct- that is appended to the original user part for
route-prefix alternative IP-to-IP call routing from SBC to Gateway
(Tel) interfaces.
[GWDirectRoutePrefix]
The valid value is a string of up to 16 characters. The
default is "acgateway-<original prefix destination
number>". For example, "acgateway-200".
For more information, see Configuring SBC IP-to-IP
Routing Rules on page 635.
configure voip > sbc settings > sbc-media- Enables synchronization of media between two SIP
sync user agents when a call is established between them.
[EnableSBCMediaSync] Media synchronization means that the media is
properly negotiated (SDP offer/answer) between the
user agents. In some scenarios, the call is established
despite the media not being synchronized. This may
occur, for example, in call transfer (SIP REFER)
where the media between the transfer target and
transferee are not synchronized. The device performs
media synchronization by sending a re-INVITE
immediately after the call is established in order for
the user agents to negotiate the media (SDP
offer/answer).
[0] Disable = (Default) Media synchronization is
performed only if the RTP mode (e.g., a=sendrecv,
a=sendrecv, a=sendonly, a=recvonly, and
a=inactive) between the user agents are different
and synchronization is required.
[1] Enable = Media synchronization is performed if
the media, including RTP mode or any other media
such as coders, is different and has not been
negotiated between the user agents.
[2] Never = Media synchronization is never
performed.
[SBCRemoveSIPSFromNonSecuredTranspo Defines the SIP headers for which the device replaces
rt] “sips:” with “sip:” in the outgoing SIP-initiating dialog
configure voip > sbc settings > request (e.g., INVITE) when the destination transport
sbc-remove-sips-non-sec-transp type is unsecured (e.g., UDP). (The “sips:” URI
scheme indicates secured transport, for example,
TLS.)
[0] = (Default) The device replaces “sips:” with
“sip:” for the Request-URI and Contact headers
only (and retains “sips:” for all other headers).
[1] = The device replaces “sips:” with “sip:” for the
Request-URI, Contact, From, To, P-Asserted, P-
Preferred, and Route headers.
Parameter Description
Parameter Description
AllowedVideoCodersGroups_Name;
[ \AllowedVideoCodersGroups
For more information, see 'Configuring Allowed Video
Coder Groups' on page 430.
Allowed Video Coders Table
Allowed Video Coders Defines video coders for the Allowed Video Coders
coders-and-profiles allowed-video-coders Group.
<group index > coder index> The format of the ini file table parameter is as follows:
[AllowedVideoCoders] [ AllowedVideoCoders ]
FORMAT AllowedVideoCoders_Index =
AllowedVideoCoders_AllowedVideoCodersGroupNam
e, AllowedVideoCoders_AllowedVideoCodersIndex,
AllowedVideoCoders_UserDefineCoder;
[ \AllowedVideoCoders ]
For more information, see 'Configuring Allowed Audio
Coder Groups' on page 428.
Classification Table
Classification Table Defines call Classification rules.
configure voip > sbc classification The format of the ini file table parameter is as follows:
[Classification] [ Classification ]
FORMAT Classification_Index =
Classification_ClassificationName,
Classification_MessageConditionName,
Classification_SRDName,
Classification_SrcSIPInterfaceName,
Classification_SrcAddress, Classification_SrcPort,
Classification_SrcTransportType,
Classification_SrcUsernamePrefix,
Classification_SrcHost,
Classification_DestUsernamePrefix,
Classification_DestHost, Classification_ActionType,
Classification_SrcIPGroupName,
Classification_DestRoutingPolicy,
Classification_IpProfileName;
[ \Classification ]
For more information, see 'Configuring Classification
Rules' on page 627.
Condition Table
Condition Table Defines SIP Message Condition rules.
configure voip > sbc routing condition-table [ ConditionTable ]
[ConditionTable] FORMAT ConditionTable_Index =
ConditionTable_Condition,
ConditionTable_Description;
[ \ConditionTable ]
For more information, see 'Configuring Message
Condition Rules' on page 415.
SBC IP-to-IP Routing Table
IP-to-IP Routing Table Defines SBC IP-to-IP routing rules.
Parameter Description
configure voip > sbc routing ip2ip-routing The format of the ini file table parameter is as follows:
[IP2IPRouting] [ IP2IPRouting ]
FORMAT IP2IPRouting_Index =
IP2IPRouting_RouteName,
IP2IPRouting_RoutingPolicyName,
IP2IPRouting_SrcIPGroupName,
IP2IPRouting_SrcUsernamePrefix,
IP2IPRouting_SrcHost,
IP2IPRouting_DestUsernamePrefix,
IP2IPRouting_DestHost, IP2IPRouting_RequestType,
IP2IPRouting_MessageConditionName,
IP2IPRouting_ReRouteIPGroupName,
IP2IPRouting_Trigger,
IP2IPRouting_CallSetupRulesSetId,
IP2IPRouting_DestType,
IP2IPRouting_DestIPGroupName,
IP2IPRouting_DestSIPInterfaceName,
IP2IPRouting_DestAddress, IP2IPRouting_DestPort,
IP2IPRouting_DestTransportType,
IP2IPRouting_AltRouteOptions,
IP2IPRouting_GroupPolicy, IP2IPRouting_CostGroup,
IP2IPRouting_DestTags, IP2IPRouting_SrcTags,
IP2IPRouting_IPGroupSetName,
IP2IPRouting_RoutingTagName,
IP2IPRouting_InternalAction;
[ \IP2IPRouting ]
For more information, see 'Configuring SBC IP-to-IP
Routing Rules' on page 635.
Alternative Routing Reasons Table
Alternative Routing Reasons Defines SBC alternative routing reason rules.
configure voip > sbc routing sbc-alternative- The format of the ini file table parameter is as follows:
routing-reasons [ SBCAlternativeRoutingReasons ]
[SBCAlternativeRoutingReasons] FORMAT SBCAlternativeRoutingReasons_Index =
SBCAlternativeRoutingReasons_ReleaseCause;
[ \SBCAlternativeRoutingReasons ]
For more information, see 'Configuring SIP Response
Codes for Alternative Routing Reasons' on page 654.
IP Group Set Table
IP Group Set Defines IP Group Sets for call load-balancing.
configure voip > sbc routing ip- The format of the ini file table parameter is as follows:
group-set [ IPGroupSet ]
[IPGroupSet] FORMAT IPGroupSet_Index = IPGroupSet_Name,
IPGroupSet_Policy, IPGroupSet_Tags;
[ \IPGroupSet ]
For more information, see Configuring IP Group Sets
on page 660.
IP Group Set Member Table
IP Group Set Member Defines IP Groups for IP Group Sets for call load-
configure voip > sbc routing ip- balancing.
group-set-member The format of the ini file table parameter is as follows:
Parameter Description
[IPGroupSetMember] [ IPGroupSetMember ]
FORMAT IPGroupSetMember_Index =
IPGroupSetMember_IPGroupSetId,
IPGroupSetMember_IPGroupSetMemberIndex,
IPGroupSetMember_IPGroupName,
IPGroupSetMember_Weight;
[ \IPGroupSetMember ]
For more information, see Configuring IP Group Sets
on page 660.
Inbound Manipulations Table
Inbound Manipulations Defines Inbound Manipulation rules.
configure voip > sbc manipulation The format of the ini file table parameter is as follows:
ip-inbound-manipulation [IPInboundManipulation]
[IPInboundManipulation] FORMAT IPInboundManipulation_Index =
IPInboundManipulation_ManipulationName
IPInboundManipulation_IsAdditionalManipulation,
IPInboundManipulation_ManipulatedURI,
IPInboundManipulation_ManipulationPurpose,
IPInboundManipulation_SrcIPGroupName,
IPInboundManipulation_SrcUsernamePrefix,
IPInboundManipulation_SrcHost,
IPInboundManipulation_DestUsernamePrefix,
IPInboundManipulation_DestHost,
IPInboundManipulation_RequestType,
IPInboundManipulation_RemoveFromLeft,
IPInboundManipulation_RemoveFromRight,
IPInboundManipulation_LeaveFromRight,
IPInboundManipulation_Prefix2Add,
IPInboundManipulation_Suffix2Add;
[\IPInboundManipulation]
For more information, see 'Configuring IP-to-IP
Inbound Manipulations' on page 667.
Outbound Manipulations Table
Outbound Manipulations Defines outbound manipulation rules.
configure voip > sbc manipulation ip- The format of the ini file table parameter is as follows:
outbound-manipulation [IPOutboundManipulation]
[IPOutboundManipulation] FORMAT IPOutboundManipulation_Index =
IPOutboundManipulation_ManipulationName,
IPOutboundManipulation_RoutingPolicyName,
IPOutboundManipulation_IsAdditionalManipulation,
IPOutboundManipulation_SrcIPGroupName,
IPOutboundManipulation_DestIPGroupName,
IPOutboundManipulation_SrcUsernamePrefix,
IPOutboundManipulation_SrcHost,
IPOutboundManipulation_DestUsernamePrefix,
IPOutboundManipulation_DestHost,
IPOutboundManipulation_CallingNamePrefix,
IPOutboundManipulation_MessageConditionName,
IPOutboundManipulation_RequestType,
IPOutboundManipulation_ReRouteIPGroupName,
IPOutboundManipulation_Trigger,
Parameter Description
IPOutboundManipulation_ManipulatedURI,
IPOutboundManipulation_RemoveFromLeft,
IPOutboundManipulation_RemoveFromRight,
IPOutboundManipulation_LeaveFromRight,
IPOutboundManipulation_Prefix2Add,
IPOutboundManipulation_Suffix2Add,
IPOutboundManipulation_PrivacyRestrictionMode,
IPOutboundManipulation_DestTags,
IPOutboundManipulation_SrcTags;
[\IPOutboundManipulation]
For more information, see 'Configuring IP-to-IP
Outbound Manipulations' on page 671.
Routing Policies Table
Routing Policies Defines Routing Policies.
configure voip > sbc routing sbc-routing- The format of the ini file table parameter is as follows:
policy [SBCRoutingPolicy]
[SBCRoutingPolicy] FORMAT SBCRoutingPolicy_Index =
SBCRoutingPolicy_Name,
SBCRoutingPolicy_LCREnable,
SBCRoutingPolicy_LCRAverageCallLength,
SBCRoutingPolicy_LCRDefaultCost,
SBCRoutingPolicy_LdapServerGroupName;
[\SBCRoutingPolicy]
For more information, see 'Configuring SBC Routing
Policy Rules' on page 656.
Dial Plan Table
Dial Plan Defines the name of the Dial Plan.
configure voip > sbc dial-plan The format of the ini file table parameter is as follows:
[DialPlan] [ DialPlan ]
FORMAT DialPlan_Index = DialPlan_Name;
[ \DialPlan ]
For more information, see 'Configuring Dial Plans' on
page 678.
Dial Plan Rule Table
Dial Plan Rule Defines the dial plan rules per Dial Plan.
configure voip > sbc dial-plan- For more information, see 'Configuring Dial Plans' on
rule page 678.
[DialPlanRule] Note:
The table is hidden in the ini file.
To configure Dial Plan rules from a file, see
'Importing and Exporting Dial Plans' on page 683.
Malicious Signature Table
Malicious Signature Defines the malicious signature patterns
configure voip > sbc malicious- The format of the ini file table parameter is as follows:
signature-database [ MaliciousSignatureDB ]
[MaliciousSignatureDB] FORMAT MaliciousSignatureDB_Index =
MaliciousSignatureDB_Name,
MaliciousSignatureDB_Pattern;
Parameter Description
[ \MaliciousSignatureDB ]
For more information, see 'Configuring Malicious
Signatures' on page 695.
Parameter Description
Emergency RTP DiffServ Defines DiffServ bits sent in the RTP for SBC emergency calls.
configure voip > sbc settings > The valid value is 0 to 63. The default is 46.
sbc-emerg-rtp-diffserv
[SBCEmergencyRTPDiffServ]
Emergency Signaling DiffServ Defines DiffServ bits sent in SIP signaling messages for SBC
configure voip > sbc settings > emergency calls. This is included in the SIP Resource-Priority
sbc-emerg-sig-diffserv header.
[SBCEmergencySignalingDiffServ] The valid value is 0 to 63. The default is 40.
Parameter Description
IPMedia Detectors Enables the device's DSP detectors for detection features such
configure voip > media ipmedia > as AMD.
ipm-detectors-enable [0] Disable (default)
[EnableDSPIPMDetectors] [1] Enable
Note:
For the parameter to take effect, a device reset is required.
The DSP Detectors feature is available only if the device is
Parameter Description
installed with a License Key that includes this feature. For
installing a License Key, see 'License Key' on page 781.
When enabled (1), the number of available channels is
reduced.
Automatic Gain Control (AGC) Parameters
Enable AGC Global parameter enabling the AGC feature.
configure voip > media ipmedia > You can also configure the functionality per specific calls, using
agc-enable Tel Profiles (TelProfile_EnableAGC). For a detailed description
[EnableAGC] of the parameter and for configuring the functionality in the Tel
Profiles table, see Configuring Tel Profiles on page 467.
Note: If the functionality is configured for a specific Tel Profile,
the settings of the global parameter is ignored for calls
associated with the Tel Profile.
For a description of AGC, see Automatic Gain Control (AGC)
on page 212.
AGC Slope Determines the AGC convergence rate:
configure voip > media ipmedia > [0] 0 = 0.25 dB/sec
agc-gain-slope [1] 1 = 0.50 dB/sec
[AGCGainSlope] [2] 2 = 0.75 dB/sec
[3] 3 = 1.00 dB/sec (default)
[4] 4 = 1.25 dB/sec
[5] 5 = 1.50 dB/sec
[6] 6 = 1.75 dB/sec
[7] 7 = 2.00 dB/sec
[8] 8 = 2.50 dB/sec
[9] 9 = 3.00 dB/sec
[10] 10 = 3.50 dB/sec
[11] 11 = 4.00 dB/sec
[12] 12 = 4.50 dB/sec
[13] 13 = 5.00 dB/sec
[14] 14 = 5.50 dB/sec
[15] 15 = 6.00 dB/sec
[16] 16 = 7.00 dB/sec
[17] 17 = 8.00 dB/sec
[18] 18 = 9.00 dB/sec
[19] 19 = 10.00 dB/sec
[20] 20 = 11.00 dB/sec
[21] 21 = 12.00 dB/sec
[22] 22 = 13.00 dB/sec
[23] 23 = 14.00 dB/sec
[24] 24 = 15.00 dB/sec
[25] 25 = 20.00 dB/sec
[26] 26 = 25.00 dB/sec
[27] 27 = 30.00 dB/sec
[28] 28 = 35.00 dB/sec
[29] 29 = 40.00 dB/sec
[30] 30 = 50.00 dB/sec
[31] 31 = 70.00 dB/sec
Parameter Description
Parameter Description
to .dat.
You can load this file using the Web interface (see 'Loading
Auxiliary Files' on page 757).
[AMDSensitivityFileUrl] Defines the URL path to the AMD Sensitivity file for
downloading from a remote server.
[AMDMinimumVoiceLength] Defines the AMD minimum voice activity detection duration (in
5-ms units). Voice activity duration below this threshold is
ignored and considered as non-voice.
The valid value range is 10 to 100. The default is 42 (i.e., 210
ms).
[AMDMaxGreetingTime] Global parameter that defines the maximum duration that the
device can take to detect a greeting message. You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_AMDMaxGreetingTime). For a detailed description of
the parameter and for configuring this functionality in the IP
Profiles table, see 'Configuring IP Profiles' on page 433.
Note: If this functionality is configured for a specific IP Profile,
the settings of this global parameter is ignored for calls
associated with the IP Profile.
[AMDMaxPostGreetingSilenceTime] Global parameter that defines the maximum duration of silence
from after the greeting time is over (defined by
AMDMaxGreetingTime) until the device's AMD decision. You
can also configure this functionality per specific calls, using IP
Profiles (IpProfile_AMDMaxPostSilenceGreetingTime). For a
detailed description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring IP Profiles'
on page 433.
Note: If this functionality is configured for a specific IP Profile,
the settings of this global parameter is ignored for calls
associated with the IP Profile.
[AMDTimeout] Defines the timeout (in msec) between receiving Connect
messages from the Tel side and sending AMD results.
The valid range is 1 to 30,000. The default is 2,000 (i.e., 2
seconds).
AMD Beep Detection Mode Determines the AMD beep detection mode. This mode detects
configure voip > sip-definition the beeps played at the end of an answering machine
settings > amd-beep-detection message, by using the X-Detect header extension. The device
sends a SIP INFO message containing the field values
[AMDBeepDetectionMode]
Type=AMD and SubType=Beep. This feature allows users of
certain third-party, Application server to leave a voice message
after an answering machine plays the “beep”.
[0] Disabled (default)
[1] Start After AMD
[2] Start Immediately
Parameter Description
Answer Machine Detector Beep Defines the AMD beep detection timeout (i.e., the duration that
Detection Timeout the beep detector functions from when detection is initiated).
configure voip > media ipmedia > This is used for detecting beeps at the end of an answering
amd-beep-detection-timeout machine message.
[AMDBeepDetectionTimeout] The valid value is in units of 100 milliseconds, from 0 to 1638.
The default is 200 (i.e., 20 seconds).
Answer Machine Detector Beep Defines the AMD beep detection sensitivity for detecting beeps
Detection Sensitivity at the end of an answering machine message.
configure voip > media ipmedia > The valid value is 0 to 3, where 0 (default) is the least sensitive.
amd-beep-detection-sensitivity
[AMDBeepDetectionSensitivity]
early-amd Enables AMD detection to be activated upon receipt of an
[EnableEarlyAMD] ISDN Alerting or Connect message.
[0] = (Default) Disable - AMD is activated upon receipt of
ISDN Connect message.
[1] = Enable - AMD is activated upon receipt of ISDN
Alerting message.
AMD Mode Global parameter that enables the device to disconnect the IP-
configure voip > sip-definition to-Tel call upon detection of an answering machine on the Tel
settings > amd-mode side. You can also configure this functionality per specific calls,
using IP Profiles (IpProfile_AmdMode). For a detailed
[AMDmode]
description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring IP Profiles'
on page 433.
Note: If this functionality is configured for a specific IP Profile,
the settings of this global parameter is ignored for calls
associated with the IP Profile.
Energy Detector Parameters
Enable Energy Detector Enables the Energy Detector feature. This feature generates
configure voip > media ipmedia > events (notifications) when the signal received from the PSTN
energy-detector-enable is higher or lower than a user-defined threshold (defined by the
EnergyDetectorThreshold parameter).
[EnableEnergyDetector]
[0] Disable (default)
[1] Enable
Energy Detector Quality Factor Defines the Energy Detector's sensitivity level.
configure voip > media ipmedia > The valid range is 0 to 10, where 0 is the lowest sensitivity and
energy-detector-sensitivity 10 the highest sensitivity. The default is 4.
[EnergyDetectorQualityFactor]
Energy Detector Threshold Defines the Energy Detector's threshold. A signal below or
configure voip > media ipmedia > above this threshold invokes an 'Above' or 'Below' event.
energy-detector-threshold The threshold is calculated as follows:
[EnergyDetectorThreshold] Actual Threshold = -44 dBm + (EnergyDetectorThreshold * 6)
The valid value range is 0 to 7. The default is 3 (i.e., -26 dBm).
Pattern Detection Parameters
Note: For an overview on the pattern detector feature for TDM tunneling, see DSP Pattern Detector
Parameter Description
on page 489.
Enable Pattern Detector Enables the Pattern Detector (PD) feature.
[EnablePatternDetector] [0] Disable (default)
[1] Enable
70.14 Services
70.14.1 SIP-based Media Recording Parameters
The SIP-based media recording parameters are described in the table below.
Table 70-69: SIP-based Media Recording Parameters
Parameter Description
Parameter Description
SIP Recording Rules Defines SIP Recording Routing rules (for siprec).
configure voip > sip-definition The format of the ini file table parameter is as follows:
sip-recording sip-rec-routing [ SIPRecRouting ]
[SIPRecRouting] FORMAT SIPRecRouting_Index =
SIPRecRouting_RecordedIPGroupName,
SIPRecRouting_RecordedSourcePrefix,
SIPRecRouting_RecordedDestinationPrefix,
SIPRecRouting_ConditionName,
SIPRecRouting_PeerIPGroupName,
SIPRecRouting_PeerTrunkGroupID, SIPRecRouting_Caller,
SIPRecRouting_SRSIPGroupName,
SIPRecRouting_SRSRedundantIPGroupName;
[ \SIPRecRouting ]
For more information, see 'Configuring SIP Recording Rules' on
page 233.
Parameter Description
Use Local Users Database Defines when the device uses the Local Users table or an
configure system > mgmt-auth LDAP/RADIUS server for authenticating the login credentials
> use-local-users-db (username-password) of users when logging into the device's
management interface (e.g., Web or CLI).
[MgmtUseLocalUsersDatabase]
[0] When No Auth Server Defined = (Default) The device
authenticates the users using the Local Users table in the
following scenarios:
If no LDAP/RADIUS server is configured.
If an LDAP/RADIUS server is configured, but connectivity
with the server is down. If there is connectivity with the
server, the device uses the server to authenticate the user.
[1] Always = The device first attempts to authenticate the user
using the Local Users table. If no user is found (based on the
username-password combination), it attempts to authenticate
the user using the LDAP/RADIUS server.
Behavior upon Authentication Defines the device's response when a connection timeout occurs
Server Timeout with the LDAP/RADIUS server.
configure system > mgmt-auth [0] Deny Access = User is denied access to the management
> timeout-behavior platform.
[MgmtBehaviorOnTimeout] [1] Verify Access Locally = (Default) Device verifies the user's
credentials in its Local Users table (local database).
Note: The parameter is applicable to LDAP- and RADIUS-based
management-user login authentication.
Parameter Description
Default Access Level Defines the default access level for the device when the
configure system > mgmt-auth LDAP/RADIUS response doesn't include an access level attribute
> default-access-level for determining the user's management access level.
[DefaultAccessLevel] The valid range is 0 to 255. The default is 200 (i.e., Security
Administrator).
Note: The parameter is applicable to LDAP- or RADIUS-based
management-user login authentication and authorization.
Parameter Description
Parameter Description
definition settings > radius- [0] At Call Release = (Default) Sent at call release only.
accounting [1] At Connect & Release = Sent at call connect and release.
[RADIUSAccountingType] [2] At Setup & Release = Sent at call setup and release.
AAA Indications Enables the Authentication, Authorization and Accounting (AAA)
configure system > cdr > indications.
aaa-indications [0] None = (Default) No indications.
[AAAIndications] [3] Accounting Only = Only accounting indications are used.
Parameter Description
configure system > The format of the ini file table parameter is as follows:
radius servers [ RadiusServers ]
[RadiusServers] FORMAT RadiusServers_Index = RadiusServers_ServerGroup,
RadiusServers_IPAddress, RadiusServers_AuthenticationPort,
RadiusServers_AccountingPort, RadiusServers_SharedSecret;
[ \RadiusServers ]
For a detailed description of this table, see 'Configuring RADIUS
Servers' on page 238.
Parameter Description
Parameter Description
> ldap-ocs-nm-attr is "msRTCSIP-Line".
[MSLDAPOCSNumAttributeName]
MS LDAP PBX Number attribute Defines the name of the attribute that represents the user
name PBX number in the Microsoft AD database.
configure voip > sip-definition settings The valid value is a string of up to 49 characters. The default
> ldap-pbx-nm-attr is "telephoneNumber".
[MSLDAPPBXNumAttributeName]
MS LDAP MOBILE Number attribute Defines the name of the attribute that represents the user
name Mobile number in the Microsoft AD database.
configure voip > sip-definition settings The valid value is a string of up to 49 characters. The default
> ldap-mobile-nm-attr is "mobile".
[MSLDAPMobileNumAttributeName]
configure voip > sip-definition settings Defines the name of the attribute that represents the user's
> ldap-private-nm-attr private number in the AD. If this value equals the value of the
[MSLDAPPrivateNumAttributeName] MSLDAPPrimaryKey or MSLDAPSecondaryKey parameter,
then the device queries the AD for the destination number in
this private attribute name; otherwise, the parameter is not
used as a search key.
The default is "msRTCSIP-PrivateLine".
MS LDAP DISPLAY Name Attribute Defines the attribute name that represents the Calling Name
Name in the AD for LDAP queries based on calling number.
configure voip > sip-definition settings The valid value is a string of up to 49 characters. The default
> ldap-display-nm-attr is "displayName".
[MSLDAPDisplayNameAttributeName]
configure voip > sip-definition settings Defines the name of the attribute used as a query search key
> ldap-primary-key for the destination number in the AD. This is used instead of
[MSLDAPPrimaryKey] the "PBX" attribute name (configured by the
MSLDAPPBXNumAttributeName parameter).
The default is not configured.
configure voip > sip-definition settings Defines the name of the attribute used as the second query
> ldap-secondary-key search key for the destination number in the AD, if the
[MSLDAPSecondaryKey] primary search key or PBX search is not found.
Parameter Description
LdapConfiguration_LdapConfServerIp,
LdapConfiguration_LdapConfServerPort,
LdapConfiguration_LdapConfServerMaxRespondTime,
LdapConfiguration_LdapConfServerDomainName,
LdapConfiguration_LdapConfPassword,
LdapConfiguration_LdapConfBindDn,
LdapConfiguration_Interface,
LdapConfiguration_MngmAuthAtt,
LdapConfiguration_useTLS,
LdapConfiguration_ConnectionStatus;
[ \LdapConfiguration ]
For more information, see 'Configuring LDAP Servers' on
page 251.
LDAP Server Search Base DN Table
LDAP Server Search Base DN Table Defines the full base path (i.e., distinguished name / DN) to
configure system > ldap ldap-servers- the objects in the AD where the query is done, per LDAP
search-dns server.
[LdapServersSearchDNs] The format of the ini file table parameter is as follows:
[ LdapServersSearchDNs ]
FORMAT LdapServersSearchDNs_Index =
LdapServersSearchDNs_Base_Path,
LdapServersSearchDNs_LdapConfigurationIndex,
LdapServersSearchDNs_SearchDnInternalIndex;
[ \LdapServersSearchDNs ]
For more information, see 'Configuring LDAP DNs (Base
Paths) per LDAP Server' on page 254.
Management LDAP Groups Table
Management LDAP Groups Table Defines the users group attribute in the AD and
configure system > ldap mgmt-ldap- corresponding management access level.
groups The format of the ini file table parameter is as follows:
[MgmntLDAPGroups] [ MgmntLDAPGroups ]
FORMAT MgmntLDAPGroups_Index =
MgmntLDAPGroups_LdapConfigurationIndex,
MgmntLDAPGroups_GroupIndex,
MgmntLDAPGroups_Level, MgmntLDAPGroups_Group;
[ \MgmntLDAPGroups ]
For more information, see 'Configuring Access Level per
Management Groups Attributes' on page 256.
LDAP Server Groups Table
LDAP Server Groups Table Defines LDAP Server Groups.
configure system > ldap ldap-server- The format of the ini file table parameter is as follows:
groups [ LdapServerGroups ]
[LDAPServerGroups] FORMAT LdapServerGroups_Index =
LdapServerGroups_Name, LdapServerGroups_ServerType,
LdapServerGroups_SearchMethod,
LdapServerGroups_CacheEntryTimeout,
LdapServerGroups_CacheEntryRemovalTimeout,
LdapServerGroups_SearchDnsMethod;
[ \LdapServerGroups ]
For more information, see 'Configuring LDAP Server Groups'
Parameter Description
on page 248.
Parameter Description
Cost Groups Table Defines the Cost Groups for LCR, where each Cost Group is
configure voip > sip- configured with a name, fixed call connection charge, and a call rate
definition least-cost-routing (charge per minute).
cost-group [ CostGroupTable ]
[CostGroupTable] FORMAT CostGroupTable_Index =
CostGroupTable_CostGroupName,
CostGroupTable_DefaultConnectionCost,
CostGroupTable_DefaultMinuteCost;
[ \CostGroupTable ]
For example: CostGroupTable 2 = "Local Calls", 2, 1;
For more information, see 'Configuring Cost Groups' on page 277.
Cost Groups > Time Band Defines time bands and associates them with Cost Groups.
Table [CostGroupTimebands]
configure voip > sip- FORMAT CostGroupTimebands_TimebandIndex =
definition least-cost-routing CostGroupTimebands_StartTime, CostGroupTimebands_EndTime,
cost-group-time-bands CostGroupTimebands_ConnectionCost,
[CostGroupTimebands] CostGroupTimebands_MinuteCost;
[\CostGroupTimebands]
For more information, see 'Configuring Time Bands for Cost Groups' on
page 278.
Parameter Description
Call Setup Rules Defines Call Setup Rules that the device runs at call setup for LDAP-
configure voip > message based routing and other advanced routing logic requirements including
call-setup-rules manipulation.
[CallSetupRules] [ CallSetupRules ]
FORMAT CallSetupRules_Index = CallSetupRules_RulesSetID,
CallSetupRules_QueryType, CallSetupRules_QueryTarget,
CallSetupRules_AttributesToQuery, CallSetupRules_AttributesToGet,
CallSetupRules_RowRole, CallSetupRules_Condition,
CallSetupRules_ActionSubject, CallSetupRules_ActionType,
CallSetupRules_ActionValue;
[ \CallSetupRules ]
Parameter Description
For more information, see 'Configuring Call Setup Rules' on page 422.
Parameter Description
Parameter Description
HTTPRemoteServices_TimeOut,
HTTPRemoteServices_KeepAliveTimeOut,
HTTPRemoteServices_ServiceStatus;
[\HTTPRemoteServices]
For more information, see 'Configuring Remote Web Services' on
page 280.
HTTP Remote Hosts Table
HTTP Remote Hosts Defines remote HTTP hosts per remote Web service.
configure system > http-services The format of the ini file table parameter is as follows:
> http-remote-hosts [HTTPRemoteHosts]
[HTTPRemoteHosts] FORMAT HTTPRemoteHosts_Index =
HTTPRemoteHosts_HTTPRemoteServiceIndex,
HTTPRemoteHosts_RemoteHostIndex,
HTTPRemoteHosts_Name, HTTPRemoteHosts_Address,
HTTPRemoteHosts_Port, HTTPRemoteHosts_Interface,
HTTPRemoteHosts_HTTPTransportType,
HTTPRemoteHosts_HostStatus;
[\HTTPRemoteHosts]
For more information, see 'Configuring Remote HTTP Hosts' on
page 284.
Parameter Description
Parameter Description
[ \HTTPInterface ]
For more information, see 'Configuring HTTP Interfaces' on page
292.
HTTP Proxy Services Table
HTTP Proxy Services Defines HTTP Proxy based services.
configure network > The format of the ini file table parameter is as follows:
http-proxy http-proxy- [ HTTPProxyService ]
serv FORMAT HTTPProxyService_Index =
[HTTPProxyService] HTTPProxyService_ServiceName,
HTTPProxyService_ListeningInterface,
HTTPProxyService_URLPrefix,
HTTPProxyService_KeepAliveMode;
[ \HTTPProxyService ]
For more information, see 'Configuring HTTP Proxy Services' on
page 294.
HTTP Proxy Hosts Table
HTTP Proxy Hosts Defines HTTP Proxy hosts. The table is a "child" of the HTTP Proxy
configure network > Services table (HTTPProxyService). An HTTP Proxy Host
http-proxy http-proxy- represents the HTTP-based managed equipment (e.g., IP Phone).
host The format of the ini file table parameter is as follows:
[HTTPProxyHost] [ HTTPProxyHost ]
FORMAT HTTPProxyHost_Index =
HTTPProxyHost_HTTPProxyServiceId,
HTTPProxyHost_HTTPProxyHostId,
HTTPProxyHost_NetworkInterface, HTTPProxyHost_IpAddress,
HTTPProxyHost_Protocol, HTTPProxyHost_Port,
HTTPProxyHost_TLSContext, HTTPProxyHost_VerifyCert;
[ \HTTPProxyHost ]
For more information, see 'Configuring HTTP Proxy Hosts' on page
296.
OVOC Services Table
OVOC Services Defines an HTTP-based OVOC Service so that the device can act
configure network > as an HTTP Proxy that enables AudioCodes OVOC to manage
http-proxy ems-serv AudioCodes equipment (such as IP Phones) over HTTP when the
equipment is located behind NAT (e.g., in the LAN) and OVOC is
[EMSService]
located in a public domain (e.g., in the WAN).
The format of the ini file table parameter is as follows:
[ EMSService ]
FORMAT EMSService_Index = EMSService_ServiceName,
EMSService_PrimaryServer, EMSService_SecondaryServer,
EMSService_DeviceLoginInterface, EMSService_EMSInterface;
[ \EMSService ]
For more information, see 'Configuring an HTTP-based OVOC
Service' on page 298.
71 Channel Capacity
The following below lists the maximum concurrent SIP signaling sessions, concurrent
media sessions, and registered users.
Table 71-1: Maximum Signaling, Media Sessions and Registered Users
Signaling Capacity Media Sessions
Product SIP Registered Session RTP Sessions SRTP Sessions Detailed Media
Sessions Users Type Capabilities
Mediant 500 250 1,500 Hybrid 250 200 Transcoding: n/a
Gateway & E-SBC GW-Only 30 30 GW: Table 71-3
Notes:
• The figures listed in the table are accurate at the time of publication of this document.
However, these figures may change due to a later software update. For the latest
figures, please contact your AudioCodes sales representative.
• "GW" refers to Gateway functionality.
• The "SIP Sessions" column displays the maximum concurrent signaling sessions for
both SBC and Gateway (when applicable). Whenever signaling sessions is above the
maximum media sessions, the rest of the signaling sessions can be used for Direct
Media.
• The "Session Type" column refers to Gateway-only sessions, SBC-only sessions, or
Hybrid sessions which is any mixture of SBC and Gateway sessions under the
limitations of Gateway-only or SBC-only maximum values.
• The "RTP Sessions" column displays the maximum concurrent RTP sessions when
all sessions are RTP-RTP (for SBC sessions) or TDM-RTP (for Gateway sessions).
• The "SRTP Sessions" column displays the maximum concurrent SRTP sessions
when all sessions are RTP-SRTP (for SBC sessions) or TDM-SRTP (for Gateway
sessions).
• The "Registered Users" column displays the maximum number of users that can be
registered with the device. This applies to the supported application (SBC or CRP).
• Regarding signaling, media, and transcoding session resources:
√ A signaling session is a SIP dialog session between two SIP entities, traversing
the SBC and using one signaling session resource.
√ A media session is an audio (RTP or SRTP), fax (T.38), or video session
between two SIP entities, traversing the SBC and using one media session
resource.
√ A gateway session (i.e. TDM-RTP or TDM-SRTP) is also considered as a
media session for the calculation of media sessions. In other words, the
maximum Media Sessions specified in the table refer to the sum of Gateway
and SBC sessions.
√ In case of direct media (i.e., Anti-tromboning / Non-Media Anchoring), where
only SIP signaling traverses the SBC and media flows directly between the SIP
entities, only a signaling session resource is used. Thus, for products with a
greater signaling session capacity than media, even when media session
resources have been exhausted, additional signaling sessions can still be
handled for direct-media calls.
√ For call sessions requiring transcoding, one transcoding session resource is
also used. For example, for a non-direct media call in which one leg uses
G.711 and the other leg G.729, one signaling resource, one media session
resource, and one transcoding session resource is used.
Table 71-3: Mediant 500 Hybrid E-SBC (with Gateway) Media & SBC Capacity
30/24 √ - - 220/226
26/24 √ √ √ 224/226
72 Technical Specifications
The device's technical specifications are listed in the table below.
Note:
• All specifications in this document are subject to change without prior notice.
• The compliance and regulatory information can be downloaded from AudioCodes
Web site at http://www.audiocodes.com/library.
Function Specification
Networking Interfaces
Digital Single E1/T1 interface
Clock Source 5 ppm High Precision
Digital PSTN Protocols Supporting various ISDN PRI protocols such as EuroISDN, North
American NI-2, Lucent™ 4/5ESS, Nortel™ DMS-100 and others. It
also supports different variants of CAS protocols, including MFC R2,
E&M immediate start, E&M delay dial / start and others
Networking Interfaces
Ethernet 4 GE interfaces configured in 1+1 redundancy or as individual ports
Security
Access Control DoS/DDoS line rate protection, bandwidth throttling, dynamic
blacklisting
VoIP Firewall RTP pinhole management, rogue RTP detection and prevention, SIP
message policy, advanced RTP latching
Encryption and TLS, SRTP, HTTPS, SSH, client/server SIP Digest authentication,
Authentication RADIUS Digest
Privacy Topology hiding, user privacy
Traffic Separation VLAN/physical interface separation for multiple media, control and
OAMP interfaces
Intrusion Detection System Detection and prevention of VoIP attacks, theft of service and
unauthorized access
Interoperability
SIP B2BUA Full SIP transparency, mature & broadly deployed SIP stack, stateful
proxy mode
SIP Interworking 3xx redirect, REFER, PRACK, session timer, early media, call hold,
delayed offer
Registration and User registration restriction control, registration and authentication on
Authentication behalf of users, SIP authentication server for SBC users
Transport Mediation SIP over UDP/TCP/TLS, IPv4-IPv6, RTP-SRTP (SDES)
Message Manipulation Ability to add/modify/delete SIP headers and message body using
Function Specification
advanced regular expressions (regex)
URI and Number URI user and host name manipulations, ingress and egress digit
Manipulations manipulation
Vocoders Coder normalization including transcoding, coder enforcement and
re-prioritization, extensive vocoder support: G.711, G.723.1, G.726,
G.729, GSM-FR, AMR-NB, AMR-WB (G.722.2), SILK-NB/WB, Opus-
NB/WB
Signal Conversion DTMF/RFC 2833/SIP, T.38 fax, V.34, packet-time conversion
NAT Local and far-end NAT traversal for support of remote workers
Voice Quality and SLA
Call Admission Control Based on bandwidth, session establishment rate, number of
connections/registrations
Packet Marking 802.1p/Q VLAN tagging, DiffServ, TOS
Standalone Survivability Maintain local calls in the event of WAN failure, Outbound calls can
use PSTN fallback for external connectivity (including E911)
Impairment Mitigation Packet Loss Concealment, Dynamic Programmable Jitter Buffer,
Silence Suppression/Comfort Noise Generation, RTP redundancy,
broken connection detection
Voice Enhancement Transrating, RTCP-XR, acoustic echo cancellation, replacing voice
profile due to impairment detection, fixed and dynamic voice gain
control
Direct Media (No Media Hair-pinning of local calls to avoid unnecessary media delays and
Anchoring) bandwidth consumption
Voice Quality Monitoring RTCP-XR, AudioCodes One Voice Operations Center (OVOC)
High Availability SBC high availability with two-box redundancy, active calls preserved
(Redundancy)
Quality of Experience Access control and media quality enhancements based on QoE and
bandwidth utilization
Test Agent Ability to remotely verify connectivity, voice quality and SIP message
flow between SIP UAs
SIP Routing
Routing Methods Request URL, IP Address, FQDN, ENUM, advanced LDAP, third-
party routing control through REST API
Advanced Routing Criteria QoE, bandwidth, SIP message (SIP request, coder type, etc.), Layer-
3 parameters
Routing Features Least-cost routing, call forking, load balancing, E911 gateway
support, emergency call detection and prioritization
SIPRec IETF standard SIP recording interface
Management
OAM&P Browser-based GUI, CLI, SNMP, OVOC, INI Configuration file,
REST API
Hardware Specifications
Function Specification
AudioCodes Inc.
27 World’s Fair Drive,
Somerset, NJ 08873
Tel: +1-732-469-0880
Fax: +1-732-469-2298
©2017 AudioCodes Ltd. All rights reserved. AudioCodes, AC, HD VoIP, HD VoIP Sounds Better, IPmedia, Mediant,
MediaPack, What’s Inside Matters, OSN, SmartTAP, User Management Pack, VMAS, VoIPerfect, VoIPerfectHD, Your
Gateway To VoIP, 3GX, VocaNom, AudioCodes One Voice and CloudBond are trademarks or registered trademarks of
AudioCodes Limited. All other products or trademarks are property of their respective owners. Product specifications
are subject to change without notice.
Document #: LTRT-10650