Cube

© 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential

BRKVVT-2305

13662_05_2007_c1 1


BRKVVT-2305

13662_05_2007_c1 2

Interconnecting Voice and Video over IP Networks Using the Cisco Unified Border Element

BRKVVT-2305


BRKVVT-2305

13662_05_2007_c1 3

Agenda

Evolution of VoIP networks and Challenges interconnecting them

Cisco Unified Border Element (CUBE) Overview

Resolve VoIP Interconnect Challenges using Cisco Unified Border Element

Common Deployments using Cisco Unified Border Element

Summary


BRKVVT-2305

13662_05_2007_c1 4

Evolution of VoIP Networks and Challenges Interconnecting Them


BRKVVT-2305

13662_05_2007_c1 5

IP PBX vs. TDM PBX

IP PBXs have gained acceptance and are widely deployed in today’s networks

IP

TDM

IP Became the

Investment Choice

of Majority in 2005

0

20

40

60

80

100

2001 2002 2003 2004 2005 2006 2007 2008 2009

Source: Synergy

IP PBX sales overtook TDM PBX sales in 2005

Businesses require

converged communications

to remain competitive


BRKVVT-2305

13662_05_2007_c1 6

Why Buy an IP PBX to Connect via TDM to PSTN?

Confidence in IP network SLAs

Migration from TDM to IP based voice networks

Cost savings - OPEX

No dependency on physical IP interconnect

No 1:1 mapping between DID & physical TDM trunks

Add on services such as video, presence, web based conferencing & fixed mobile convergence

Enterprise IP PBX

A

TDM-based PSTN

Class 4/5

Switch

voicedata+

Service

ProviderSBC

PSTN

Internet

The move to IP Trunking to the PSTN is based on:

CUBE


BRKVVT-2305

13662_05_2007_c1 7

Changing Landscapes: VoIP Islands to VoIP Interconnects

Voice networks are constantly evolving towards IP from the traditional TDM connections

As part of the evolution, disparate VoIP networks need to be interconnected

There are challenges when interconnecting these islands of VoIP

Network A

A

Network B

IP

SBC SBC

IP

PSTN


BRKVVT-2305

13662_05_2007_c1 8

Challenges Faced Interconnecting Voice and Video Networks

Topology Hiding and NAT/FW traversal

Security

Protocol Support and Interworking

DTMF Interworking

Codec Support and Filtering

Media Transcoding

Call Admission Control

Voice Call Statistics

Redundancy and Backup


BRKVVT-2305

13662_05_2007_c1 9

VoIP SP 1

Enterprise

Rich Media Enterprise

VoIP PSTN Hop-Off

Residential

VPN Interconnect, QoS, Hosted NAT traversal

Protocol IWF, Topology Hiding, CAC, QoS, Security, Transcoding, CUCM

Interworking, RSVP Proxy, SLA

Protocol IWF, Transcoding, Topology Hiding, Security,

Billing, CAC, SLA, QoS

Common VoIP Network Interconnects

CUBE

CUBE

VoIP SP

2

PSTN

A

CUBE

CUBE

CUBE CUBE

CUBE

SMB

Residential

SP–SP

Protocol IWF, Topology Hiding, CAC, QoS,

Security, Transcoding

ACUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 10

Enterprise Interconnects

Benefits

Convergence of Data and Voice

Lower Cost for Long Distance and International Calls

Increase in Worker Productivity because of application convergence

Challenges

Topology Hiding

Security

Protocol interoperability and interworking

Redundancy and backup

Dial plan Management

Enterprise CUCM

A

PST

N

SP NetworkSIPH.323 / SIP

CUBE

CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 11

Service Provider Interconnects

Benefits

Peer with other SPs without using TDM Trunks or DSPs

Provide services using standards based VoIP protocols like H.323 or SIP

SPs can have VoIP peering with topology hiding

Challenges

Security

Call Admission Control and QoS

Voice call statistics and billing

Codec filtering and support

NAT / Firewall traversal

Carrier B

VoIP Network

Carrier A

VoIP Network

IP

CUBE CUBE


BRKVVT-2305

13662_05_2007_c1 12

―Two SIP entities should be able to talk to each other, but often this isn’t the case.‖

John Guillaume, New Global Telecom Senior VP, Sales and Marketing.

From Nov 13, 2006 IP Business, “The Ever-Changing Demarc”


BRKVVT-2305

13662_05_2007_c1 13

Cisco Unified Border Element (CUBE) Overview


BRKVVT-2305

13662_05_2007_c1 14

What is a Session Border Controller?

SBC is a tool kit of functions

Depending on the application and deployment scenario, a different set of functions can be turned on/off

SBC enables IP to IP interconnect between multiple administrative domains for session based services

SignalingIWF

CAC and BWManagement

NAT/FW Traversal

SecuritySignaling/DOS

Billing and CDRNormalization

Media IWF(DTMF, Codec)

+

+ +

++ =

Rich Signaling(TCL, Rotary)

SBC


BRKVVT-2305

13662_05_2007_c1 15

SBC

The Cisco Unified Border Element (CUBE)

Previously the ―Multiservice IP-to-IP Gateway‖ or Cisco IOS SBC

CUBE Enables IP-to-IP Interconnect Between Multiple Administrative Domains for Real-Time Interactive Sessions

SignalingIWF

CAC & BWManagement

NAT/FW Traversal


CDR & BillingNormalization


Rich Signaling(TCL, Rotary)

NW element Interoperability

(CUCM)

TDM GW support

PHY I/F Portfolio

CUBE

IOS Feature Set =

Cisco UBE is a tool kit of functions

Depending on the application and deployment scenario, a different set of functions can be turned on/off


BRKVVT-2305

13662_05_2007_c1 16

Cisco Session Border Controller PortfolioPlatform Support

• Cisco Unified Border Element (CUBE) is integrated in Cisco IOS®

• Cisco IOS XR SBC is a provided via ablade on the GSR12000

Capacity

Pe

rfo

rma

nc

e

Cisco 2600XM

2691

Cisco 2800 ISR

Cisco 3700

Cisco 3800 ISR

Cisco 7200 VXR

Cisco 7301

Cisco XR12000

CUBE supports1. IP-to-IP Calls2. TDM Voice Calls3. Gatekeeper4. Routing

AS5000XM


BRKVVT-2305

13662_05_2007_c1 17

Performance Capacity Recommendations forCUBE Gateway Platforms

PlatformCUBE GW Only

(VAD ON)

Multiple Features*CUBE GW

(VAD OFF)

CUBE GW with

Software MTP

AS5000XM 1000 600 n/a

3845 750 525 250

3825 600 420 200

2851 600 280 125

2821 400 225 106

2811 200 112 53

* Basic H.323-to-SIP Voice calls with and G.711 20ms Codec


BRKVVT-2305

13662_05_2007_c1 18

Cisco Unified Border Element IOS Images

PlatformINT VOICE/VIDEO, IPIP

GW, TDMIP GWINT VOICE/VIDEO, IPIPGW,

TDMIP GW AES

Cisco 2600XM c2600-ipvoice_ivs-mz c2600-adventerprisek9_ivs-mz

Cisco 2691 c2691-ipvoice_ivs-mz c2691-adventerprisek9_ivs-mz


Cisco 2811,2821,2851 c2800nm-ipvoice_ivs-mz c2800nm-adventerprisek9_ivs-mz





Cisco AS5350XM c5350-js_ivs-mz c5350-jk9su2_ivs-mz

Cisco AS5400XM c5400-js_ivs-mz c5400-jk9su2_ivs-mz

PlatformADV ENTERPRISE

SERVICESADV IP SERVICES W/LAWFUL

INTERCEPT

Cisco 7200 c7200-adventerprisek9-mz c7200-adipservicesk9li-mz

Cisco 7301 c7301-adventerprisek9-mz c7301-adipservicesk9li-mz

NB: A Feature license is required for all platforms. (ie FL-INTVVSRV-3745=)


BRKVVT-2305

13662_05_2007_c1 19

Cisco Unified Border Element Architecture

Actively involved in the call treatment – for signaling and media packets

Signaling is terminated, interpreted and then re-originated.

Media is handled in 2 different modes

Media Flow-Through

Media Flow-Around

Digital Signal Processors (DSPs) are only required for calls with dissimilar codecs

Back-to-Back User Agent or Back-to-Back H.323 Gateway


BRKVVT-2305

13662_05_2007_c1 20

Cisco Unified Border Element Media Handling Models

CUBE

IP

CUBE

IP

Media Flow-Around

• Signaling terminated by CUBE• Media bypasses the CUBE

Media Flow-Through

• Signaling and media terminated by CUBE

• Transcoding and complete IP address hiding require this model


BRKVVT-2305

13662_05_2007_c1 21

Call Flow on the Cisco Unified Border Element

1. Incoming VoIP setup message from OGW to CUBE

2. This matches an inbound VoIP dial peer 1 for characteristics such as codec, VAD, DTMF method, protocol etc

3. CUBE then looks up called number in setup and matches outbound VoIP dial peer 2

4. Outgoing VoIP setup message from CUBE to TGW

Incoming VoIP Call Outgoing VoIP Call

dial-peer voice 1 voipdestination-pattern 1000incoming called-number .Tsession target ipv4:192.168.10.50codec g711ulaw

dial-peer voice 2 voipdestination-pattern 2000session protocol sipv2session target ipv4:192.168.12.25codec g711ulaw

Originating Endpoint (OGW)

TerminatingEndpoint (TGW)CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 22

Resolve VoIP Interconnect Challenges Using Cisco Unified Border Element


BRKVVT-2305

13662_05_2007_c1 23


Topology Hiding and NAT / FW traversal

Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 24

Topology Hiding and NAT/FW Traversal

Requirements

Maintain connectivity without exposing the IP network details

Interconnect networks which have overlapping IP Address space

Solution

CUBE in B2BUA mode can achieve complete topology hiding for both the signaling and media streams

This helps maintain the security and operational independence of both networks

This also allows for NAT and Firewall (FW) traversal as CUBE changes the addresses to be outside addresses

Topology Hiding


BRKVVT-2305

13662_05_2007_c1 25

Address Hiding

Ensures Site A and Site B never see each other’s CUCM cluster IP address

Within the same company - Between departments having overlapping addresses

Integrating new acquisition into the existing voice network..

IP WAN Third PartyApplication Server

IP WAN

10.10.10.0/27

CUCM Cluster A

Site ACUBE

Site A - 192.168.10.x/24

192.168.10.10 192.168.10.50

CUBE

10.10.10.610.10.10.5


BRKVVT-2305

13662_05_2007_c1 26

Address Hiding: Configuration Options

CUBE

(H.323-SIP)

SIP

SIP Proxy

SBC

A

H.323

Both sides of the network talk only to CUBE

192.168.10.10 192.168.10.25 172.16.149.138 172.16.149.150

CUBE

(H.323-SIP)

SIP

SIP Proxy

SBC

A

H.323

192.168.10.10 172.16.149.138 172.16.149.150

Single Physical Interface

Two Physical Interfaces

CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 27

CUBE

CUBE

Address Hiding: Configuration Options

CUBE

(H.323-SIP)

SIP

SIP Proxy

A

H.323

192.168.10.10 192.168.10.25

172.16.149.138

172.16.149.150

CUBE

(H.323-SIP)

SIP

SIP ProxyA

H.323

192.168.10.10

172.16.149.138

172.16.149.150

Single Loopback Interface

Single Physical and Loopback Interface


BRKVVT-2305

13662_05_2007_c1 28



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 29

Security

Requirements

Authentication for calls and end point registrations

Signaling and Media Encryption for VoIP calls

Solution

CUBE can provide encryption on both call legs

CUBE supports the standard form of authentication on SIP and H.323 protocols

IOS voice stack on CUBE inherently protects against ―rogue‖ RTP packets and malformed signaling (SIP / H.323) packets

CUBE supports hostname validation for SIP end points



BRKVVT-2305

13662_05_2007_c1 30

Secure VoIP Calls

H.323 Environment

IPSec - Signaling Authentication and Encryption

SRTP - Media authentication and encryption

Keys are senttransparently across

SIP Environment

TLS - Signaling Authentication and Encryption

Media in clear (sRTP support is on the roadmap)

Non TLS <-> TLS interworking supported

Encrypted call using SRTP

IPSec

RTP

TLS

You could also have IPSec tunnels terminating on CUBE for both signaling and media on both sides for encryption

CUBE CUBE


BRKVVT-2305

13662_05_2007_c1 31

Digest Authentication for SIP

SIP Proxy can challenge INVITEs from CUBE by sending 401 Unauthorized to check if endpoint is valid

CUBE responds by resending the INVITE with appropriate credentials

CUBE can also send SIP REGISTER messages with credentials to the SIP proxy

Invite[From< [email protected]>]

100 Trying

401 Unauthorized

Invite[Authorization: DigestUsername, Password]

100 Trying

200 OK

sip-ua

authentication username xxx password xxx

CUBE


BRKVVT-2305

13662_05_2007_c1 32



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 33


Requirement

Large installed base of H.323 and increasing number of SIP installations protocol interworking is required.

Interoperability within the same protocol might be required to resolve product incompatibilities.

Solution

CUBE supports H.323 and SIP protocols as well as interworking between H.323 and SIP.

Basic Interworking support between H.323 Fast Start and Slow Start Calls.

ProtocolInterworking


BRKVVT-2305

13662_05_2007_c1 34

Signaling Interworking

In Leg Out Leg Support

Fast Start Fast Start Bi-Directional

Slow Start Slow Start Bi-Directional

Fast Start Slow Start Bi-Directional

H.323-H.323


Early Offer Early Offer Bi-Directional

Delayed Offer Delayed Offer Bi-Directional

Delayed Offer Early Offer Uni-Directional

H.323-SIPInterworking

SIP-SIP


Fast Start Early Offer Bi-Directional

Slow Start Delayed Offer Bi-Directional

FUTURE


BRKVVT-2305

13662_05_2007_c1 35

Enabling Protocol Support

Enabling the IP-to-IP Calls

CUBE#config t

CUBE(config)# voice service voip

CUBE(conf-voi-serv)#allow-connections h323 to h323

CUBE(conf-voi-serv)#allow-connections h323 to sip

CUBE(conf-voi-serv)#allow-connections sip to h323

CUBE(conf-voi-serv)#allow-connections sip to sip

It is mandatory to have Incoming and Outgoing VoIP Dial-peers with required parameters like Protocol, Transport, Codec, CAC, QoS, etc


BRKVVT-2305

13662_05_2007_c1 36

H.323 / SIP H.323 / SIP

Fax and Modem Calls

ITU T.38

Switch over using standard signaling

Request Mode in H323 and ReINVITE in SIP

Fax Pass-Through

Switch over using standard signaling

Request Mode in H323 and ReINVITE in SIP

Cisco Fax Relay

Switch over using RTP based NSE events

Modem Pass-through

Switch over using RTP based NSE events

Fallback support

CUBE


BRKVVT-2305

13662_05_2007_c1 37



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 38

DTMF Interworking

Requirements

DTMF incompatibility between different devices

DTMF Interworking for different protocols is required

Solution

CUBE supports 7 commonly used DTMF methods and 22 DTMF Interworkings

DSPs only required for the voice inband to RFC 2833 DTMF conversion

The appropriate DTMF type must be configured at the incoming and outgoing dialpeers



BRKVVT-2305

13662_05_2007_c1 39

Rich DTMF Support

H.323 <-> H.323

• Bullet text 1

• Bullet text 2

• Bullet text 3

• Bullet text 4

• Bullet text 5

• Bullet text 6

H.323 <-> SIP SIP <-> SIP

H.323 SIP

H.245-Alphanumeric

NOTIFY

H.245-Signal NOTIFY

RFC2833 NOTIFY

H.245-Alphanumeric

RFC2833

H.245-Signal RFC2833

RFC2833 RFC2833

H.245-alphanumeric

KPML

H.245-Signal KPML

Voice In-Band*

RFC2833

H.323 H.323

H.245-Alphanumeric

H.245-Alphanumeric

H.245-Signal H.245-Signal

RFC2833 RFC2833

H.245-Alphanumeric

RFC2833

H.245-Signal RFC2833

Voice In-Band*

RFC2833

* Requires Transcoder => DSP

SIP SIP

NOTIFY NOTIFY

RFC2833 NOTIFY

RFC2833 RFC2833

NOTIFY KPML

RFC2833 KPML

KPML KPML

Voice In-Band*

RFC2833All DTMF interworking is Bi-Directional


BRKVVT-2305

13662_05_2007_c1 40



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 41


Requirement

Support multiple Voice and Video codecs

Filter codecs on either call leg to influence negotiation based on network requirements

Solution

CUBE can either allow end points to negotiate the codec(s) or influence the codec negotiation

For a H.323 – H.323 call, all the codecs are passed through as is by CUBE assuming H.245 pass-thru is enabled OR the Bearer Capability in H.323 Setup message is ―Video‖

Voice Video*

G.711, G.729, G.726, G.728, G.723, G.722, iLBC, Transparent

H.261 H.263 H.264

* Video codec support for H.323-H.323 calls



BRKVVT-2305

13662_05_2007_c1 42

CUBE

1st Call Leg

(H.323/SIP)2nd Call Leg

(H.323/SIP)

OGWCodecs:

g711ulaw, g726r32,

g7xx-non-std

TGWCodecs:

g711ulaw, g726r32

g711ulaw

g711ulaw

g711ulaw, g726r32

g711ulaw

Filter

Cisco Unified Border Element Filters the Codecs Being Passed

CUBE influences the choice of codec in this call

Only Codecs supported and configured on the Dial Peer are sent through

Incoming Dial-Peer

dial-peer voice 919 voip

incoming called-number 919....

session target ras

codec transparent

Outgoing Dial-Peer


destination-pattern 919....

session target ras

codec g711ulaw


BRKVVT-2305

13662_05_2007_c1 43

1st Call Leg

(H.323)2nd Call Leg

(H.323)

OGWCodecs:

g711ulaw, g726r32,

g7xx-non-std

TGWCodecs:

g711ulaw, g728

g711ulaw, g726r32

Codec Transparent is a virtual codec – allows for ease of configurationCUBE does not influence selection of supported codecs

g711ulaw, g728

Cisco Unified Border Element Passes Only Supported Codecs

CUBE

Incoming Dial-Peer



session target ras

codec transparent

Outgoing Dial-Peer



session target ras

codec transparent


BRKVVT-2305

13662_05_2007_c1 44

1st Call Leg

(H.323)2nd Call Leg

(H.323)

OGWCodecs:

g711ulaw, g726r32,

g7xx-non-std,

h26x-non-std

TGWCodecs:

g711ulaw, g728,

g7xx-non-std,

h26x-non-std

g711ulaw, g726r32, g7xx-non-std, h26x-non-std

CUBE sends through all codecs it receives* CUBE does not influence codec selection

Cisco Unified Border Element Passes All Codecs Through

g711ulaw, g728, g7xx-non-std, h26x-non-std

CUBE

Global

voice service voip

h323

h245 passthru all

Outgoing Dial-Peer



session target ras

codec transparent

Incoming Dial-Peer



session target ras

codec transparent

* Also sent if Bearer Capability is VIDEO in H.323 Setup message


BRKVVT-2305

13662_05_2007_c1 45



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 46

Media Transcoding

Requirements

Bandwidth constraints at the edge of the network introduces transcoding requirements

In case of VoIP interconnects, devices in the VoIP networks might be running different codec types

Conversion between different codec types becomes a necessity

Solution

CUBE uses Digital Signal Processors (DSPs) for converting one codec type to another

DSPs can be on the same platform or on external router

CUBE can support up to 400 transcoding sessions on a single device using transcoder optimization*

CUBE also supports Universal transcoding


*Need IOS 12.4(11)XW


BRKVVT-2305

13662_05_2007_c1 47

Cisco Unified Border Element Supports Universal Transcoding

CUBE supports universal transcoding (any to any voice codec)*

e.g. iLBC to G.711 or iLBC to G.729

IP Phones:

G.711, G.729SP VoIP

Network

Enterprise

Network

iLBC, iSAC,

Speex

AG.711,

G.729

802.11 Phones:

G.711, G.729, G.722, GW/SBC: G.711, G.723.1, G.726,

G.728, G.729/a, iLBC, G.722

Same Codec (Transcoder Free Operation)

Transcoding Required

List of codecs supported

g711alaw 64Kbps

g711ulaw 64Kbps

g723r53 5.3Kbps

g723r63 6.3Kbps

g729 (all variants) 8Kbps

ilbc

Internet

Telephony

*Need IOS 12.4(11)XW

CUBECUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 48

Voice GW

CUCM Cluster

DSP

Farm

G.711

Transcoding Call Flow with Cisco Unified Border Element

CUCM setups up a H.323 G.711ulaw Call to CUBE

CUBE setups a SIP call and negotiates G.729r8 on the second leg

CUBE detects that the codecs on the 2 call legs are mismatched

Transcoding is NOT supported for same codec, different packetization

G.729

SCCP

H.323

RTP(G.711)

RTP(G.729)

SIP

CUBE


BRKVVT-2305

13662_05_2007_c1 49



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 50

Call Admission Control (CAC)

Requirements

Control number of calls based on resources and bandwidth

Proactively reserve resources for good quality video calls

Ensure traffic adheres to QoS policies within each network

Solution

CUBE can provide six different CAC mechanisms

Total calls, CPU, Memory, IP call capacity, Max-connections, RSVP

CAC mechanisms ensure good QoS for video and voice calls and help meet the SLA

CUBE allows remarking and setting of QoS parameters based on network requirements

CAC and QoS


BRKVVT-2305

13662_05_2007_c1 51

Global Commandcall threshold global [total-calls | cpu-5sec | cpu-avg | total-mem | low <low-threshold> high <high-threshold>

call treatment on

call treatment cause-code ?busy Insert cause code indicating the GW is busy (17)no-QoS Insert cause code indicating the GW can't provide QOS (49)no-resource Insert cause code indicating the GW has no resource (47)

High Water Mark

Low Water Mark

CAC Based on Total Calls, CPU or Memory

Call threshold values for total concurrent calls or CPU or memory to be handled by CUBE can be defined

Call treatment can be turned on to handle the call once the CAC limit is reached

CUBE


BRKVVT-2305

13662_05_2007_c1 52

gatekeeper

endpoint circuit-id h323id CUBE1 AA max-calls 500

voice service voip

allow-connections h323 to h323

h323

ip circuit max-calls 1500

ip circuit carrier-id AA reserved-calls 1000

Number Is Twice Because of Two Call Legs

CAC Based on IP Call Capacity

IP call capacity on CUBE works in conjunction with the Cisco Gatekeeper (GK)

Call counting mechanism does not take into account the codec type used –this is taken into account by enabling bandwidth management on the Cisco GK

This only works if at least 1 call leg on CUBE is using H.323

GK

CUBE


BRKVVT-2305

13662_05_2007_c1 53

CUBE


max-conn 2

CAC Based on Max Connections

Restricting the number of concurrent calls that can be active on a VoIP dial peer

Max-Conn works on individual dial-peers, does not provide CAC for the entire gateway

PBX Call #1

Call #2

Call #3Rejected by CUBE

Call #3

A

CUCM cluster A

A

CUCM cluster B


BRKVVT-2305

13662_05_2007_c1 54

Site ACUCMCluster

Site ACUBE Site B

CUCMCluster

Site BCUBE

IP WAN

Site A Site B

interface FastEthernet0/0

ip rsvp bandwidth 1000 1000


destination-pattern 2...

session target ras

req-qos guaranteed-delay audio

req-qos guaranteed-delay video

acc-qos guaranteed-delay audio

acc-qos guaranteed-delay video

CAC Based on RSVP

Synchronization of RSVP with H.323 signaling to ensure that the bandwidth reservation is established

RSVP ensures that bandwidth is reserved before the far end phone rings

RSVP

CUBE CUBE


BRKVVT-2305

13662_05_2007_c1 55

Quality of Service (QoS)

Re-mapping of ToS bits and DSCP between networks for QoS enforcement

The signaling as well as media packets could be re-marked appropriately before sending out the traffic into the network


ip qos dscp ef media

ip qos dscp af31 signaling

Police Mark

Classify

Police

Police

Mark

Mark

Mark

Police

Queue

Input Interface Output Interface

Queue

Queue

Shape


BRKVVT-2305

13662_05_2007_c1 56



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 57

Call Detail Records and Billing

Requirements

Need for getting call detail records for IP-to-IP calls

Require this for appropriate billing as well as ensure SLAs are met

Solution

CUBE can generate billing records via Radius VSAs or syslog just like standard IOS voice GWs

CUBE will provide voice quality statistics and call statistics



BRKVVT-2305

13662_05_2007_c1 58

Call Detail Records and Billing

Conference ID is unique on both call legs

Conference ID can be used to correlate the billing records

Call-ID is also included in the CDR

Voice quality statistics based on RFC3550

Packet loss

Jitter

Delay

SP

Network

Enterprise B

Enterprise A

AAA

A

SP Management Domain

Collect VoIP PerformanceStatistics here

NetworkDemarc

NetworkDemarc

ADCB

CUBE

CUBECUBE CUBE


BRKVVT-2305

13662_05_2007_c1 59



Security


DTMF Interworking


Media Transcoding





BRKVVT-2305

13662_05_2007_c1 60


Requirements

Ensure high availability in case primary interconnect between the VoIP Networks is down

Provide methods for back up if SBC is out of resources as well as scaling mechanims

Solution

CUBE can use network resiliency techniques such as HSRP for redundancy

CUBE also leverages the standard Voice GW functions for backup such as SRST

Uses different types of scaling methods in SIP and H.323 such as DNS SRV or Gatekeeper

Redundancy &Backup


BRKVVT-2305

13662_05_2007_c1 61

Redundancy with HSRP

Endpoints point towards the Virtual HSRP IP Address

Calls would normally be handled by the Primary CUBE

If the Primary CUBE fails, the Secondary CUBE handles the new calls

Primary

10.1.1.2

interface FastEthernet0/0ip address 10.1.1.2 255.255.255.0standby ip 10.1.1.1standby priority 200standby preempt

Secondary

10.1.1.3

interface FastEthernet0/0ip address 10.1.1.3 255.255.255.0standby ip 10.1.1.1standby priority 100

HSRP 10.1.1.1

CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 62

Co-located Cisco Unified Border Element, TDM GW and SRST GW

TDM connections (FXO, PRI) to provide backup to the PSTN in case IP link goes down – this is achieved via dial-peer rotary function on CUBE

CUBE also acts as the SRST (Survivable Remote Site Telephony) router in case connection to HQ CUCM goes down – all IP phones at that site rehome to CUBE as their backup ―CUCM‖

CUCM

BranchHQ

IP

TDM

PSTN

BACKUP to PSTN

WAN

CUBE Can Be Run on the same router that has TDM Interfaces and is the Survivable Remote Site Telephony (SRST) Router

CUBE

CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 63

Scaling in SIP Networks

1. Define CAC using total calls or max-conn

2. When number of calls exceed, server error 500 is sent back

3. SIP Proxy chooses the next IP Address provided by the DNS SRV record

4. Call is now sent to the next CUBE in the DNS SRV record

DNS Server

SBC

SBC

A

PSTN

CUCM Cluster

CUBE Pool

Media GWs

500 Internal Server ErrorQ.850=44

_sip._udp.cube IN SRV 10 1 5060 cube1. comIN SRV 10 2 5060 cube2.com

cube1 IN A 10.10.10.5cube2 IN A 10.10.10.6

Invite

CAC limit reached

Invite

10.10.10.6

10.10.10.5CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 64

Scaling in H.323 Networks

Round Robin algorithm

Percentage Based algorithm

A

GK

CUCM Cluster CUBE

Clustered Gatekeepers

GK GK

PSTN

VoIP

Media GWs

Load-Balancing across the CUBEs can be done

CUBE CUBE


BRKVVT-2305

13662_05_2007_c1 65

Common Deployment Scenarios with Cisco Unified Border Element


BRKVVT-2305

13662_05_2007_c1 66

Common Deployment Scenarios for Cisco Unified Border Element

1. Interconnecting IP PBXs (CUCM, CCME)

2. Interconnecting Cisco Unified CM to a SIP trunk

3. Interconnecting Video end points

4. Hosted NAT traversal for SIP

The most common scenarios where CUBE is deployed are as below:


BRKVVT-2305

13662_05_2007_c1 67

Interconnecting IP PBXs (CUCM, CCME)


BRKVVT-2305

13662_05_2007_c1 68

Interconnect CUCM Clusters Using Cisco Unified Border Element

CUBE does H.323 <-> H.323 call signaling between clusters

CUBE registers to CUCM as a H.323 GW or H.225 trunk

CUBE provides address hiding and CAC

CUCM Cluster San Jose CUCM cluster RTP

SBCH.323

SJCUBE

RTPCUBE

IP WAN

H.323H.323

CUBECUBE


BRKVVT-2305

13662_05_2007_c1 69

Configuration for Cisco Unified Border Element & CUCM

MTP is not required if the CUCM version is higher than 4.1(3) and CUBE IOS is higher than 12.4(6)T

CUCM cluster RTP

SBCH.323

SJCUBE

RTPCUBE

IP WAN

H.323

Route Pattern: 2XXXRoute List: RTP_RLRoute Group: RTP_RGGW – H.323 GatewayWait for H.245 Capability Exchange unchecked

CUCM Cluster San Jose

H.323

voice service voipallow-connections h323 to h323h323emptycapabilityh225 id-passthruh245 passthru tcsnonstd-passthru

!interface FastEthernet0/1ip address 10.10.1.10 255.255.255.0!dial-peer voice 10 voipdestination-pattern 2...session target ipv4:10.1.1.1codec transparentdtmf-relay h245-alphanumeric!dial-peer voice 11 voipdestination-pattern 1...session target ipv4:10.2.2.1codec transparentdtmf-relay h245-alphanumeric

CUBE CUBE


BRKVVT-2305

13662_05_2007_c1 70

CCME Site 2

CCME Site 1

Cisco Unified Border Element as H.450 Tandem Gateway

CCM uses EmptyCapabilitySet (ECS) and CCME uses H.450 for supplementary services

CUBE acts as a Tandem Gateway to enable supplementary calls like call hold, transfer, forward, etc.

The reference below covers the necessary configuration:

http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_implementation_design_guide_chapter09186a00805f083a.html#wp1071815

CUCM ClusterCUBE

HQ Site

IP WAN

H.323

H.323

H.323

CUBE

http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_implementation_design_guide_chapter09186a00805f083a.html

http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_implementation_design_guide_chapter09186a00805f083a.html


BRKVVT-2305

13662_05_2007_c1 71

Interconnecting Cisco Unified CM to a SIP Trunk


BRKVVT-2305

13662_05_2007_c1 72

Interconnecting CUCM to SIP Trunk

SIP trunking provides a cost effective solution for PSTN access

When connecting to a SIP trunk – there are specific UNI requirements that must be met to ensure connectivity

The recommended method of connecting SIP trunks to CUCM is with CUBE

This is discussed in detail in the BRKVVT-2006 session

Enterprise CUCM

A

PST

N

SP NetworkSIPH.323 / SIP

CUBE

/MTP

CUBE

CUBE


BRKVVT-2305

13662_05_2007_c1 73

Why Cisco Unified Border Element as CPE?

Service Provider Benefits:

Security via topology / address hiding for the SP network

Act as the demarc point to allow operational independence of both the SP & CUCM network

Allow SP to ensure appropriate QoS marking

Normalize SIP headers in messages into SP network

Call security by SIP digest authentication for SP

Enterprise Benefits:

Topology hiding to provide security for Enterprise network

Meet SP UNI requirements via SIP message normalization & protocol interworking

Redundancy via HSRP & CUCM route list / route group redundancy

DTMF interworking & transcoder

Co-resident on same physical device as TDM GW, SRST GW and / or MTP

Failover or backup via TDM trunks & SRST


BRKVVT-2305

13662_05_2007_c1 74

Cisco IOS SBC Config for SIP Trunking

H.323 Gateway, MTP required, H.323 Faststart enabled for Inbound & Outbound calls

voice service voipallow-connections h323 to sipallow-connections sip to h323!interface GigabitEthernet0/0ip address 200.1.1.3 255.255.255.0!Interface GigabitEthernet 0/1ip address 192.168.1.1 255.255.255.0

sip-uaauthentication username cisco password cisco realm cisco.com! dial-peer voice 1 voipdestination-pattern 9Tsession protocol sipv2session target dns:cisco..comcodec g711ulaw!dial-peer voice 4 voipdestination-pattern 3…session target ipv4:192.168.1.10incoming called-number .Tcodec g711ulaw

Enterprise CUCM

A

PSTN

SP NetworkSIPH.323

CUBE

/ MTP

CUBECUBE


BRKVVT-2305

13662_05_2007_c1 75

Interconnection Video Deployments via Cisco Unified Border Element


BRKVVT-2305

13662_05_2007_c1 76

CUBE

Interconnecting Video Endpoints with Cisco Unified Border Element

CUBE acts as the H.323 video proxy for NAT / Firewall (FW) traversal

CUBE provides appropriate QoS by packet marking & uses various CAC methods to ensure video call quality

IOS Gatekeeper can be co-resident on the same router platform

Firewall only opens pinholes for CUBE – protecting the rest of the network

CUCM

Cluster

Video Endpoint Video Endpoint

Video Endpoint

Public

GK

DMZ

Video Endpoint

GK1

A


BRKVVT-2305

13662_05_2007_c1 77

Difference Between MCM Proxy and Cisco Unified Border Element

CUBE implements most of the functionality within the Cisco MCM and also includes:

H.323 V4 Support

RSVP call synchronization

Support for additional codecs for voice and video (H.264, for example)

Ability to register multiple CUBEs to a single Cisco IOS GK and load balance across them

The CUBE is the recommended solution for new H.323 video network deployments

MCM ProxySupported on 2500,

2600, 3600, 7200 and

MC3810

(H.323 v3 only)


BRKVVT-2305

13662_05_2007_c1 78

CUBECUBE

CUBE

InternetVideo Endpoint

Video Endpoint

RAS

GK2 - public GK

RAS

GK2

Video Deployment Scenarios

GK1

RAS

Scenario #1

Internet

Pin Holes Open for GK2 UDP 1719 & TCP 1720

RAS

Video Endpoint

Video

Endpoint


GK1 GK2

RAS

RAS

Scenario #2



BRKVVT-2305

13662_05_2007_c1 79

CUBE

CUBE

Video Deployment Scenarios

Internet

Video Endpoint

Video Endpoint


RASRAS

GK1

Scenario #3

Pin Holes Open for GK2 TCP 1720

H.323

RAS

DMZVideo Endpoint

Scenario #4

GK2Internet Video Endpoint


BRKVVT-2305

13662_05_2007_c1 80

Hosted NAT Traversal for SIP


BRKVVT-2305

13662_05_2007_c1 81

NAT Traversal for SIP

Requirements

For Service Providers that have residential VoIP services – they need to maintain topology hiding for security reasons

Home SIP endpoints will have overlapping IP Address subnets

Home routers will not translate the IP Addresses within SIP messages — non-SIP ALG aware

Solution

CUBE in NAT traversal mode solves the translation of the embedded IP Addresses untranslated by the non-SIP aware router

CUBE acts as the proxy and forwards SIP messages between home router and SP network.


BRKVVT-2305

13662_05_2007_c1 82

SIP NAT Traversal: Typical Deployment

Inside to Inside Calls

Media Flow around

Media Flow through

Inside to/from Outside Calls

Media Flow-Through

SIP Proxy Server

Data Router

CUBE looks into the SIP Messages and translates the private embedded SIP IP Address to the configured Outside IP Address.

Data Router does L3 PATing only, will not change the embedded SIP IP Address

Inside Outside

Phone

Linksys ATA

Outbound Proxy=20.20.20.5

Home User SP Network

CUBE


BRKVVT-2305

13662_05_2007_c1 83

ip nat sip-sbcproxy 20.20.20.5 5060 192.168.10.10 5060 protocol udpsession-timeout 7200mode allow-flow-aroundoverride port

SIP Phones Supporting Symmetric

Signaling and Media (e.g. Linksys ATA)

Can Be Used Behind the Home Router

SIP Phones Not Supporting Symmetric

Signaling and Media, PAT Should Be

Disabled and Traffic for Port 5060 Should

Be Allowed to Pass

Note:

1. SIP phones cannot have same IP Address

2. SIP phones must send NAT Keepalives to keep the home router’s pin holes open

Outbound Proxy=20.20.20.5 SIP Proxy Server

Data Router

Inside Outside

Linksys ATA

SIP NAT Traversal: Configuration

Phone Home User

SP Network

CUBE


BRKVVT-2305

13662_05_2007_c1 84

Summary


BRKVVT-2305

13662_05_2007_c1 85

Value of the Cisco Unified Border Element

Integrated, Secure, Reliable Communications

• Integrated Routing/Switching/Security

• Cisco Unified Border Element functionality is embedded in Cisco IOS

• Integrated Transcoding and Media Termination Point for CUCM installs

Advanced Features

• Universal Transcoding – Any Codec to Any Codec Transcoding

• Voice XML and TCL Support

• Protocol Interworking

• Stateful NAT Traversal support

Smooth Integration of TDM and IP Trunking

• Cisco Unified Border Element can support variety of TDM interfaces providing a smooth integration of both PSTN and IP Trunking

• Minimal learning curve for customers familiar with existing voice gateways

• Same SIP stack across all Cisco voice entities


BRKVVT-2305

13662_05_2007_c1 86

What is on the Horizon?

Video

Enabling Business to Business Cisco TelePresence

Support for H.235 and H.239 protocols

Support for video on SIP – SIP calls

IP Trunking

Early Offer to Delayed Offer interworking for SIP - SIP

Enhance supplementary service support for SIP – SIP and SIP – H.323

Enabling SIP trunk interconnects for CVP (Call Center deployments)

Support for IPv6 for SIP and H.323

Security

Enhance integration of IOS security features (firewall, CBAC) with CUBE

Cisco Unified Border Element continues to add more features to help seamlessly interconnect VoIP Networks


BRKVVT-2305

13662_05_2007_c1 87

Final Thoughts – GOT CUBE?

CUBE is not a standalone device – it runs on integrated network routers that perform other functions such as routing, QoS, WAN termination etc.

Voice networks are constantly evolving – CUBE helps interconnect these networks that are in various stages of evolution

CUBE helps solve the more common VoIP interconnect problems without enhancing the core networks themselves

Cisco Unified Border Element is part of Cisco’s Session Border Controller portfolio


BRKVVT-2305

13662_05_2007_c1 88

Resources


BRKVVT-2305

13662_05_2007_c1 89

Online References

Cisco Unified Border Element (IPIPGW) General Information (Datasheet, Q&A)

http://www.cisco.com/en/US/products/sw/voicesw/ps5640/index.html

Cisco Unified Border Element (IPIPGW) Configuration Guide

http://www.cisco.com/en/US/products/sw/voicesw/ps5640/products_installation_and_configuration_guides_list.html






BRKVVT-2305

13662_05_2007_c1 90

Related Sessions

BRKVVT-2010: Designing Voice Gateways and Media Resources in Enterprise Networks

BRKVVT-2006: SIP Trunks for PSTN Access

BRKVVT-1013: Cisco Unified Customer Voice Portal 4.0 and Roadmap


BRKVVT-2305

13662_05_2007_c1 91

Recommended Reading

Continue your Networkers at Cisco Live learning experience withfurther reading from Cisco Press

Suggested books:

Cisco Voice Gateways and Gatekeepers[1-58705-258-X]

Cisco IP Communications Express:CallManager Express with Cisco Unity Express[1-58705-180-X]

Available Onsite at the

Cisco Company Store


BRKVVT-2305

13662_05_2007_c1 92

Q and A

Q & A


BRKVVT-2305

13662_05_2007_c1 93

Complete Your Online Session Evaluation

Win fabulous prizes; give us your feedback

Receive ten Passport Points for each session evaluation you complete

Go to the Internet stations located throughout the Convention Center to complete your session evaluation

Winners will be announced daily at the Internet stations


BRKVVT-2305

13662_05_2007_c1 94

Date post:	22-Nov-2014
Category:	Documents
Upload:	michael-niotis
View:	16 times
Download:	2 times

Cube

Documents