product data sheet
www.thomson.net
Cirpack Session Border Controllera comprehensive solution for a complete trunking and access control application
the cirpack session Border controller from thomson is the carrier class sip-based solution managing the critical control functions needed to deliver trusted voice, video and real-time interactive communication sessions across ip networks.
Today many service providers deploy managed IP networks with Softswitches, and Media gateways both to reduce operational costs and also to connect these Softswitch-Gateway “islands” to expand the reach of their networks.
While VoIP technology is a cost-effective solution for transporting long-distance traffic and supporting PBX connections, an ability to provide native VoIP peering between networks which delivers high level of security and quality of service (QoS), is also required by service providers.
The Cirpack Session Border Controller provides a demarcation point between
two services providers’ networks allowing them to manage signalling and media flow, and to control the routing of traffic.
Services and facilities-based providers who offer IP interactive communication services - such as voice, video, unified messaging, conferencing, presence, gaming and multimedia collaboration - have to manage critical security and service assurance issues at the borders of their network to support residential and business customers.
The Cirpack Session Border Controller therefore offers the security mechanisms that service providers need today for their hosted IP-based
services platform and for their local loop access applications including: protection from Denial of Service (DoS) attacks, topology hiding, secured call control and media streams, and Quality of Service.
The Cirpack Session Border Controller solution delivers carrier-class availability and manageability in terms of routing and control functions for signalling protocol and media management.
It secures the subscriber’s access and IP interconnection borders and enables the interoperability of heterogeneous IP network domains to maximize user service levels by controlling admission, overload, and IP session routing.
VoIP IMS
FIxed-MobIle
conVergence
Main FunCtionS and BeneFitS
The Cirpack Session Border Controller solution offers a host of benefits for service providers:
• FlexiblesolutioncapableofsupportingNGNandIMSarchitecturefor investment optimisation
• Deploymentflexibilitybothasanaccessandasabordersolutionconnectedtomultipleplatforms:Next-GenSoftswitch,coreIMS,value-added application servers, etc…
• AccessandBordercontrollerforlocalloopandbusinessapplications including residential services, IP Trunking and IPBX-connection
• RobustsecurityandNAT/PATtraversalfunctionsaccordingtoVoIPand multimedia constraints
• Cost-effectivesolutionforCAPEXoptimisationwithacompletesolution including signalling , media service and transcoding
• HighavailabilityandpackagedsolutionforOPEXoptimisationwith a simplified network operations, provisioning and management interface, and inter-network billing
• Future-proofedsolutionwithaneasymigrationpathtotheIMS3GPP/TISPANstandards
Utilizing IBM Blade and IP-based technologies, the Cirpack Session BorderControllersolutioniscompliantwithNGNandalsowithIMSarchitecturesdefinedby3GPPIMS,ETSI/TISPANandPacketCable.
Based on Cirpack’s VoIP solution expertise, the Cirpack Session Border Controller is designed according to telecom network requirements and is composed of the following components:
•Signallingpart:CirpackAccessController(P-CSCF)andCirpackBorderSwitch(BGCF-IBCF).
•Mediastreampart:CirpackMediaProxy(C-BGF,I-BGF)whichcanbe coupled with the Cirpack Media Transcoding Gateway.
ngn
www.thomson.net
product data sheet
CiRPaCK SeSSion BoRdeR ContRoLLeR aPPLiCationS
• Robustsecurityfeatures—DoS/DDoSandinfrastructureprotection—Useraccesscontrol—Networktopologyhiding&privacy—Monitoringandreporting
• Richlevelofservices—NAT/PATmanagement— IPAddressmanagement—E.164Phonenumber&SIPURImanagement—Protocolinter-workingmanagement
• ServiceLevelAgreement—Admissioncontrol—Trafficcontrolandfailuredetection—Transportcontrol
• RoutingandBilling—CDRaccounting—Trafficrouting—Emergencycallrouting
• Multipleapplications—Useraccesscontrolandmanagement—VoiceandMultimediatrunkingmanagement
• MultipleNetworkintegrations—NGNIP-basednetwork— IMSnetwork
• Openinterfaces—CLF(ConnectivitySessionLocationandRepositoryFunction)interface—Billingsysteminterface—VirtualSBCinterface
• FullycompliantwithIMS3GPP/TISPANstandard
KeY FeatuReS
IP trunkingNetworks
Cirpack AccessController P-CSCF
Cirpack Border SwitchBGCF-IBCF
Cirpack MediaProxy C-BGF
Access Control Application Border trunking Application
Cirpack MediaProxy I-BGF
NGN & IMSCore Networks
Voice&
Mutlimedia
Cirpack Session Border Controlller
Access Controller / P-CSCF Border Switch / BGCF-IBCF
Media Proxy / C-BGF Media Proxy / I-BGF- NAT traversal management- Media topology hiding- Media Transcoding
- SIP Registration Control- Location Server
- SIP Routing- Number Portability Server
- NAT traversal management- Security mechanisms- Core network topology hiding
IP trunkingNetworks
Cirpack AccessController P-CSCF
Cirpack Border SwitchBGCF-IBCF
Cirpack MediaProxy C-BGF
Access Control Application Border trunking Application
Cirpack MediaProxy I-BGF
NGN & IMSCore Networks
Voice&
Mutlimedia
Cirpack Session Border Controlller
Access Controller / P-CSCF Border Switch / BGCF-IBCF
Media Proxy / C-BGF Media Proxy / I-BGF- NAT traversal management- Media topology hiding- Media Transcoding
- SIP Registration Control- Location Server
- SIP Routing- Number Portability Server
- NAT traversal management- Security mechanisms- Core network topology hiding
product data sheet
FunCtionS - FeatuReS
Cirpack Access Controller: P-CSCF Cirpack Border Switch: BGCF-IBCF
SeCuRitY – doS/ddoS and inFRaStRuCtuRe PRoteCtion
Protect Core Network from DoS/DDoS attack Yes Yes
Protect Core Network from non-malicious overloads Yes Yes
Ensure convergence of registration after a long network unavailability period Yes NA
Allow Authenticated/Registered users access while under DoS attack Yes Yes
Detect and prevent single user attack, blocking only that user Yes Yes
Protect Core Network from overloads by limiting the rate of requests that can reach the core network Yes Yes
SeCuRitY – uSeR aCCeSS ContRoL
Codec control, with codec authorization List Yes Yes *
Permit access to known devices or networks Yes Yes
Permit access to/from authenticated/registered users; Deny access to anonymous users Yes NA
Dynamically accept or reject traffic per-user based on user behaviours Yes Yes
SeCuRitY – netwoRK toPoLogY Hiding & PRivaCY
Hide core topology to prevent directed attacks to the core network and preserve core confidentiality Yes Yes
Mask user information for privacy and confidentiality Yes Yes
IPSec/TLS and sRTP Yes * Yes *
SeCuRitY - MonitoRing and RePoRting
SNMP traps and log generation Yes Yes
Access management is protected from unauthorized personnel Yes Yes
SeRviCeS - nat / Pat ManageMent
Enable calls to traverse NAT by discovering public/external IP addresses for signalling and media or keeping NAT pinholes open for signalling
Yes Yes
SeRviCeS – iP addReSS ManageMent
Bridge IP address spaces - private-public, private-private, public-public Yes Yes
ALG IPV4 to IPV6 translation Yes * Yes *
SeRviCeS – e.164 PHone nuMBeR & SiP uRi ManageMent
Enable prefix, suffix, wildcard and other telephone number manipulations to enhance/control session routing NA Yes
SeRviCeS - PRotoCoL inteR-woRKing ManageMent
Signalling – provides protocol normalization and inter-working for SIP to SIP, SIP to H.323 Yes Yes
Encryption – provides support and inter-working for none, TLS, MTLS, IPSec, SRTP Yes * Yes *
Transcoding – translation for wireline and wireless codec Yes Yes
SeRviCe LeveL agReeMentS - adMiSSion ContRoL
Admit sessions based upon signalling criteria Yes Yes
Interface to policy and bandwidth manager (Gq’ to RACS, Rx to PCRF, PacketCable Application Manager) Yes * Yes *
SeRviCe LeveL agReeMentS - tRaFFiC ContRoL and FaiLuRe deteCtion
Load balancing of traffic Yes Yes
Reject or divert traffic based upon destination NA Yes
Manage avalanche of SIP REGISTER messages resulting from power or network failure and ensure convergence of registration
Yes NA
SeRviCe LeveL agReeMentS - tRanSPoRt ContRoL
Assign QoS marking / VLAN mapping Yes Yes
Release media between UE based on session timeout. Yes Yes
Release media between UE based on inactivity detection NA Yes *
Measure QoS per session (packet loss) Report QoS information to CDR Yes Yes
Routing and BiLLing- CdR aCCounting
Generate CDRs for billing or network planning Yes Yes
Add ISUP information contained in SIP-I NA Yes
Routing and BiLLing – tRaFFiC Routing
Interface to Cirpack least-cost routing to enable policy-based session control based on route cost, margin, preferences, … NA Yes *
ENUM-based routing interface NA Yes
Carrier code-based routing NA Yes
Interface to Cirpack Number Portability Database NA Yes
Large local route tables for static, localized routing decisions Yes Yes
Reselection mechanism in case of failure NA Yes
Load balancing across multiple networks Yes Yes
Specific routing/rejection mechanism for specific SIP METHOD Yes Yes
DNS RFC3263 routing Yes Yes
Routing based on ISUP information contained in on SIP-I NA Yes
Routing and BiLLing – eMeRgenCY CaLL Routing
Specific routing mechanism for emergency numbers Yes Yes
Retrieve location information for emergency sessions Yes NA
oPen inteRFaCeS
Interface to external location servers (CLF) - e2 Yes NA
Rf (Diameter) interface to billing system Yes Yes
Virtual SBC: offer to each trunking operator a different interface NA Yes
Interface to external Number Portability server (ENUM) NA Yes
Yes *: Feature planned in coming Product Roadmaps. NA: Not Applicable.
product data sheet
Our professional services offerings ensure optimal system performance and maximize uptime. These services include call centers staffed around the clock; system planning, design, and commissioning; professional training courses; and technical maintenance programs and service agreements.
www.thomson.net/support
PRoFeSSionaL SeRviCeS
Thomson Worldwide Headquarters46 Quai A. Le Gallo 92648 Boulogne Cedex FRANCE Tel. : 33 (0) 1 41 86 50 00 Fax : 33 (0) 1 41 86 56 59
HeadquaRteRS
©Copyright2009Thomson,Inc.Allrightsreserved.Alltradenamesreferencedareservicemarks,trademarks,orregisteredtrademarksoftheirrespectivecompanies.Specificationssubjecttochangewithoutnotice. CDT-4099D
oRdeRing inFoRMation
The Cirpack Border Switch Controller exists in a myriad of configurations. Please contact your usual Thomson representative for more infiormation.
SPeCiFiCationS
HardwareAccess controller and border Switch Hardware
• Active-StandbyclusterofredundantserverswithmultipleCPU,Hot-swapable,andredundantharddrive
• Carrier grade IBM Blade Center T chassis with redundant components: back plane, power supply, cooling, GigabitEthernetswitchmodules,managementmodules,hotswap
• 105-250VACor48VDC,1300W
Media Proxy and Transcoding gW Hardware
• 19’’ server with multiple CPU and redundant hard drive
• N+1redundancyusingloadsharingmechanism
• 105-250VACor48VDC
CapacityAccess controller (P-cScF)
• Upto256,000simultaneousregisteredusers(SIPURI)
border Switch (bgcF-IbcF)
• Up to 10,000 peers (interconnections)
• Upto300CAPS(CallAttemptsPerSecond)
Media Proxy
• Upto5NICS(NetworkInterfaceCard)and4096simultaneous call sessions
Transcoding gW
• Up to 1,500 simultaneous sessions based on G.711, G.723, G.729codecforAccessandTrunkingapplications
• Upto400simultaneoussessionsbasedonWB-AMR,G.722codec for high definition sound applications
IP Signalling Protocols• SIP,SIP-T(LatestRFCsupport)
• SIP-I according to ITU Q.1912.5
• H.323
• RTP
Codec Management• Transcoding:AMR-WB,G.722,G.711,G.729,G.723
• AccessandTrunking:G.711,G.729,G.723,G.726,G.722,ILBC,AMR-WB,ClearMode,SPEEX,GSM,H.261,H.263,H.264
IP Network Interface• Redundant100-1000MbpsEthernetinterfaces
• SNMPSupervisionLogsandTrapsinterfaces
Standard Compliancy• 3GPPTS23.228IPMultimediaSubsystem(IMS)-Stage2
• 3GPPTS24.229InternetProtocol(IP)multimediacallcontrolprotocol based on Session Initiation Protocol (SIP) and Session Description Protocol (SDP) -Stage 3
• 3GPPTS32.240chargingarchitectureandprinciples
• 3GPP TS 32.260 IP Multimedia Subsystem (IMS) charging
• 3GPPTS32.298Telecommunicationmanagement;Chargingmanagement;ChargingDataRecord(CDR)parameterdescription
• 3GPPTS32.299DiameterChargingApplications
• TISPAN180.001NGNRelease1-Releasedefinition
• TISPAN181.001VideoTelephonyoverNGN
• TISPAN182.006IPMultimediaSubsystem(IMS)-Stage2description
• TISPANES282.001NGNFunctionalArchitectureRelease1
• TISPANES282.007IPMultimediaSubsystem(IMS)-Functionalarchitecture
• TISPAN282.010Charging
• TISPANES283.003IPMultimediaCallControlProtocolbased on Session Initiation Protocol (SIP) and Session Description Protocol (SDP) - Stage 3
• TISPANTS182025BusinessTrunking
• PKT-SP-24-229-I05-090528IMSDeltaSpecificationsSessionInitiation Protocol and Session Description Protocol
• PKT-SP-29.228-I03-080425IMSDeltaSpecificationsIPMultimedia(IM)SubsystemCxandDxInterfaces;SignallingFlowsandMessageContentsSpecification3GPP29.228
• PKT-SP-29.229-I03-080425IMSDeltaSpecificationsCx/Dx Interfaces based on the Diameter Protocol Specification 3GPP TS 29.229
• PKT-TR-ARCH-FRM-V06-090528ArchitectureFrameworkTechnicalReport
• PKT-TR-SIP-V04-071106SIPSignallingReport
• PKT-SP-QOS-I02-080425QualityofServiceSpecification
Quante Netzwerke GmbH Ahrensburger Str. 8, D-30659 Hannover Tel: +49 (0)511 / 74 01 92 - 0 Fax: +49 (0)511 / 74 01 92 - 100 www.quante-netzwerke.de
www.quante-netzwerke.de/Service/