The IX78 for SMB Deployments both for Hosted SIP Services and SIP Trunking Intertex Data AB, March...

The IX78 for SMB Deployments

both for Hosted SIP Services and SIP Trunking

Intertex Data AB, March 2012

© 2012 Intertex Data AB 1

© 2012 Intertex Data and Ingate Systems 2

What’s in the IX78?

ADSL2+ modem with Annex A/B/M (24 Mbps DS, 3 Mbps US), or Ethernet WAN (VLAN capable) Triple play and various routing configuration possibilities Router with any port, any service capability and 4-5 port Ethernet Switch Wireless 802.11b/g as Access Point (3 SSID for separate WLANs) Business Firewall Advanced QoS for voice, IP-TV etc. VPN (IPsec with certificate handling) TR-069 and proprietary flexible provision system

Let’s have closer look what can be achieved!

there are outstanding features enabling new applications and services Unique support for standard SIP phones and soft clients on the LAN and WLAN SIP Trunking of PBXs – unequalled interoperability list SIP Proxy, Registrar and PBX-like functionality

and more…

and in addition to VoIP things like 2 FXS ports for analog telephones and FAX with T.38 support FXO port: Real SIP/PSTN gateway + Fallback on WAN loss

© 2012 Intertex Data and Ingate Systems

SIP is the Most Important Protocol, but…

LAN

LAN

FW FW

FWFW

InternetInternet

A common Network and common Protocols changed our lives:

SMTP gave us global email! HTTP gave us the WEB!

email web

SIP is the Internet standard for Live IP Communication: The next step of Internet usage!

Find each other and do something in real time. Telephony being just one application.

IMS

(SIP based)

IMS

(SIP based)

However, SIP does not traverse the common NATs and firewalls* separating the LANs from the Internet .

* Live IP Communication Requires: - Locate the person - Set up a session - Open real time media streams


We Need a Future of Live All IP Connectivity!

In the world of Unified Communication and global IP-communication, SIP must be used as general as SMTP for email and HTTP for the Web!

VoIP++

Global IP Connectivity

All SIP Services

IMSIMS


The Intertex & Ingate SIP Architecture

To get general NAT/Firewall SIP traversal:

SIPProxy

SIP Proxy Server, capable of routing to/from various address spaces (NAT)

The routing SIP Proxy Server controls the media through the NAT & Firewall

UserLocation

SIP Registrar for user location information

Firewall & NAT Router

Dynamic NAT & Firewall EngineUsed for NAT/Firewall traversal and also as: - Outbound proxy- Inbound proxy - SIP Server - PBX (The SIP Switch)

Most of these elements used when SIP Trunking

B2BUA invoked in addition when required

UA |UA |


The Many Faces of the IX78

In addition to being a router, a firewall, a wireless access point, an ADSL modem etc., the IX78 has several SIP and Telephony related functions:

SIP ATA device (2 FXS ports, 1 FXO port)

SIP E-SBC Gateway for hosted services – LAN and WLAN SIP devices have global SIP connectivity

SIP Trunking E-SBC – Connecting IP PBXs directly to operator’s SIP Telephony Services

Unique SIP support including proxy and registrar, various VoIP network architectures supported, advanced SIP and Telephony routing, built in PBX

All these functions can be used together and at the same time!

IX78 for Hosted SIP Services


Ordinary Voice IADs – Good for Telephony Replication…

InternetInternet

The 5060 SIP-port is just grabbed on the outside to the FXS ports!

Lower level SIP ALGs often cause problems and do not handle more than basic scenarios.

• SIP to the LAN or WiFi• Calls between SIP clients on LAN • Calls between internal ATA ports and LAN clients• Call transfers, 3-party calls, etc.• Using SIP generally over the Internet (Operator “took all the SIP”) (Users must not be deprived of general SIP-functionality!)

Often problems with, or total lack of:

Telephone ports (FXS) on the CPE is a popular way to deploy IP telephony. By logically placing the SIP clients on the outside of the NAT/Firewall, unreliable work-around methods like STUN, TURN and ICE become unnecessary. However, this only gives POTS replication, often even stopping general SIP based services!


No battery draining of WiFi mobile phones, otherwise caused by keep-alive packets* inhibiting sleep mode.* Work-around methods for SIP NAT-traversal like STUN, TURN, ICE and Far End NAT Traversal use frequent keep-alive packets to keep holes in the NAT/Firewall open.

8

Intertex’ IADs are SIP Capable NAT/Router/Firewalls

InternetInternet

Problems solved where they occur

Wired or wireless SIP clients (phones, soft clients, PDAs)

No special requirements on the SIP Client – Just standard SIP

SIP

All Intertex CPEs have a SIP Proxy based SIP aware Firewall/NAT

General, can handle complex call scenarios and all SIP services

Additional functionality available (SIP server, PBX functionality etc.)

IMSIMS


Full Support for all SIP Applications

Go beyond POTS replacement!

SIP offers so much more than just telephony









IX78 for SIP Trunking

SIP-Trunking for the IX78 Connecting IP PBXs to Operators’ SIP Services

The era of replacing T1/E1/PRI lines for IP connections to operators’ SIP telephony services has begun.

Most IP PBXs require SIP traversal of the enterprise firewall and some special additions.

Intertex’ sister company Ingate has taken the SIP-Trunking lead. http://www.ingate.com/SIP_Trunk_UC_Summit_LA_2010.php

IX78 can enable E-SBC (Enterprise Session Border Controller) functions for SIP Trunking

IX78 includes the same SIP Trunking functionality as the Ingate Enterprise line of E-SBCs!

12

IX78 E-SBC Enterprise Line of E-SBCs

*) Calls = Concurrent RTP Sessions = SIP Trunks

150/400/1000 Calls*500/700/900 Mbit/s

40 000/80 000/160 000 Packets/s

50 Calls*200 Mbit/s

30 000 Packets/s

1800/3000/8000 Calls*4 500/ 4 500/ 5 000 Mbit/s

300 000/500 000/900 000 Packets/s

Software Firewall/SIParator ®

25 - 10 000 Calls*

Can be installed on a virtual machine or

natively x86 Linux Servers (industry-standard PC architecture)

50 Calls*90 Mbit/s

10 000 Packets/s

Ingate Firewalls and SIParators® – E-SBC From 50 to 3 000 simultaneous calls (with media)

Used in a wide variety of SIP Trunking installations

NAT/Firewall traversal

Superior SIP Normalization

Multi level security, incl. SIP IDS/IPS

QoS (Quality of Service)

Failover configurations

Ingate IX78 for operator volume deployments


Confirmed Interoperability: Ingate & IntertexSIP Trunk Providers IP-PBXs

SIP Trunk

Compliant with

Aastra Aastra/Ericsson MX One

Adtran UC Server Digium/Asterisk

Avaya Aura Avaya IP Office Avaya SES/CM

Avaya QE Brekeke Broadsoft

Cisco Fonality

HP/3Com -VCX Innovaphone

Interactive Intelligence Iwatsu

LG Nortel Microsoft OCS

Mitel NEC / Sphere Nortel BCM Nortel SCS Objectworld Panasonic Samsung

SER Shoretel Siemens SIP-Gear

SwyxMore in pipeline....

360 Networks

Airespring AT&T

BandTel Bandwidth.com

Broadvox BT (British Telecom)

Cablevision Cbeyond

Cellip Comm Partners

Cordia Corporation Deltacom

Excel Switching Gamma Telecom

GEOS Global Crossing

IP-Only Nectar Level 3 Netlogic

Netsolutions

Nexvortex Nuvox O1

One Communications Paetec Primus RNK Telecom

Skype TDC

Telavox Tele2

Tele Pacific Teletek

TeliaSonera Toplink

Tritel VoEX

Voice Flex VoIP Unlimited

Voxbone Voxitas XeloQ

More in pipeline...

Carrier Equipment Acme Packet

Broadsoft Genband Sonus

Sylantro SER NSN

More in pipeline…

The IP-PBX Trunk Must Meet Service Provider Trunk

Data LAN only

PBX with PBX with system system phonesphones

PBX Type 1.5

VoIP & Data LAN

PBX Type 2

IPIP-- PBXPBX

Few PBXs are of this type. Asterisk with firewall (IPtables /NETfilter) can be compiled and configured this way, but requires a lot.

Why may an IX78 be required to connect a PBX?1) NAT/Firewall Traversal – Must NAT to same address space!

2) Basic SIP and Network Interoperability - E.g. Authentication, Registrations, UDP/TLS/TCP, Dynamic IP address, etc.

3) SIP Repair - E.g. Call Transfer, Fragmented packets, Bugs, etc. 4) Features - E.g. Remote Users, Administration (remote and local)

5) Security - E.g. Will LAN be opened? Is the PBX designed to be public?

VoIP & Data LAN

IPIP-- PBXPBX

PBX Type 1

Modern IP-PBXs are of this type. Media goes directly between phone and SIP Trunk.

SIP Trunk Interface

Signaling:Media:

SIP Trunk

PSTNSIP Trunking

Provider NetworkGW

SIP System

2) 3) 4) 5)2) 3) 4) 5)IX78

1)1) 2) 3) 4) 5)2) 3) 4) 5) 2) 3) 4) 5)2) 3) 4) 5)


PSTNPublic

Internet

SIP Trunking Provider

GWSIP System

Data & VoIP LAN

IP-PBX

Demarcation point of service and bringing SIP communication to the LAN

Soft Clients and Multimedia Terminals

Intertex IX78

Intertex IX78 Simply Presents the SIP Trunking Service on the Customer’s Protected Combined VoIP & Data LAN, Ready for any PBX to Use

Firewall

Remote Users


PSTNPublic

Internet


GWSIP System

Data & VoIP LAN

IP-PBX



Intertex IX78

… or from an Extra IP Connection, still in Parallel with an Existing, non SIP Aware Firewall

Firewall

Remote Users


PSTNPublic

Internet


GWSIP System

Data & VoIP LAN

IP-PBX



Intertex IX78

Remote Users

… or the Intertex IX78 can be the Company Firewall, presenting the Customer with a Protected Combined VoIP & Data LAN, Ready to use!


…and the IX78 can Support Many WAN Layer 2 and Layer 3 Architectures with QoS Separated WAN Interfaces (inherited from it’s triple play capabilities)

The Intertex IX78 Supports All of these Architectures!

Private Virtual Circuits

E.g. Telia

InternetInternet

ADSL

PVC1

IP-TV

VoD

IP-TV

VoD

IMS

VoIP

IMS

VoIP

PVC2 PVC3

E.g. Telia

InternetInternet

Ethernet

VLAN1

IP-TV

VoD

IP-TV

VoD

IMS

VoIP

IMS

VoIP

VLAN2 VLAN3

Virtual LANs (VLAN)

E.g. B2

InternetInternet

Ethernet

WAN1

IP-TV

VoD

IP-TV

VoD

IMS

VoIP

IMS

VoIP

WAN2 WAN3

IP QoS Separated Subnets IP Level QoS

E.g. BT

InternetInternet

ADSL or Ethernet

Priority3Priority2 Priority1

IMSVoIP

IP-TVVoD

Proposed Setup for the DOCSIS Network

PSTN

Public Internet

SIP Trunk Provider GW

SIP System

IP- PBX

NAT/ Firewall

CMTS

Bridge for Existing NAT/ Firewall (non SIP aware)

Cable Modem

IX78 E-SBC

Plug in existing firewall to Ethernet port 4 on the IX78 (bridged connection to the WAN)

IX78 WAN SIParator will handle QoS (backing off firewall’s data traffic if required)

WAN SIParator 2 – requires two IP addresses, one for the firewall, another for the IX78

WAN SIParator 1 – requires only one IP address, shared between the IX78 and the firewall

DHCP or fixed WAN IP address(es)

Data & VoIP LAN

Easy and advantageous installation using advanced WAN SIParator mode


Installation Wizard

SIP Trunking Made Easy


SIP Trunking in Proxy Mode or B2BUA Mode

Proxy Mode IP-PBX talks to Service

Registration/Authentication model must match

Little configuration in the IX78

Service credentials in the PBX

B2BUA Mode (Proxy still doing the basics) IP-PBX only talks to the IX78

Wider separation between PBX and Service

Service Credentials only in the IX78

More SIP Normalization possibilities (e.g. REFER)

Any new operator service platform only requires IX78 reconfiguration (the PBX configuration can remain)

IP- PBX

IP- PBX


Trunk-side Parameters (B2BUA Mode)


PBX-side Parameters (B2BUA Mode)


Registration, Call Routing, CallerID (B2BUA Mode)

PBX with PBX with non-SIP non-SIP phonesphones

There are many PBXs out there that do not allow Soft Clients, Remote Users or Standard SIP Phones.

Add SIP Clients, Use as Basic PBX, Move on to Full PBX

Registrar

Soft Client WiFi Mobile

Remote UsersNumbers integrated

PBX

Retire the old PBX…


The PBX – Simple and Capable

Administrator’s Overview and Configuration

The PBX – The things you need

Personal Settings


Ready and In Use!

IX78 E-SBC used in volume by Sweden’s incumbant TeliaSonera

in SIP Trunking Services: Over ADSL (built-in ADSL modem, multiple PVC) Over Managed Internet ”Prolane” service (IP QoS) Over Fiber LAN (multiple VLANs)

Others in progress

Ingate products are used in a wide variety of SIP Trunking installations

Ready and used for more than POTS Replacement VoIP++ = Global IP Connectivity & All types of SIP services Multimedia and Unified Communications

Element Managemen System - iEMS (more later) Basics available now – Continously extended – Adaptions to operator requests iEMS will later also be used for Ingate’s larger products More managed services via the iEMS (SIP Trunking, PBX, Firewall, VPN)


Performance and Call Handling Capacity

Over 50 simultaneous calls (20 ms voice packets) carrying media

Call rate of 8 calls/s in proxy mode and 3 calls/s in B2BUA mode. (way above the requirement to support 24 or 50 simultaneous calls)

Up to 255 registrations. SIP end-points can be more.

CPU Usage:

50 calls, 5 min/call, 20 ms packets

Free CPU32%

Media62%

Signaling6%

24 calls, 5 min/call, 20 ms packets

Free CPU67%

Media30%

Signaling3%


New terminals (PCs, Mobile Phones etc) will handle everything and must get all the accesses with Reliability and Quality.

It’s time to get it together and add more!

Internet

Telephony

From Conventional Services Over New Wires

TV

to The Multimedia LAN


Advanced Triple Play Architecture IMS and VoIP Services for ALL Terminals over ALL Pipes!

TR-069TR-069InternetInternet

IP-TV

VoD

IP-TV

VoD

IMS

VoIP

IMS

VoIP

PDA

All services must be available to multimedia terminals! – Over controlled high QoS pipes as well as the Internet.

Lots of new CPE requirements to meet

VLANs or ADSL Virtual Circuits

The Multimedia LAN

The Multimedia LAN

WLAN

InternetInternet

Application Innovation Requires it!

TelepresenceTelepresence


IX78 Architecture and Functionality

All services on different WAN-pipes made available to all terminals on a single LAN / WLAN• All QoS advantages preserved from the conventional port the based architecture• Network clouds may be NATed or in the public address space• Firewall protection on all WAN pipes (PVCs, VLANs etc.)• QoS based routing, in addition to traditional address based routing

Special IP TV requirements • IGMP proxy for multicast IP-TV, with fast leave and multi- to unicast conversion• RTSP proxy for VoD (Video on Demand)• Horsepower and intelligent packet dropping to maintain priority on critical video streams

Full SIP Based Live IP Communication Support • Much more than POTS replication via FXS ports• Full support for SIP on LAN and globally, without unreliable work-around methods• QoS applied to all SIP signaling and media – No client setup required• SIP clients can use either Quality Assured operator service or the Internet. SIP communication can be separated and routed

universally, with best QoS on each network• Support for all SIP services (not just telephony)• Equal treatment and full connectivity between telephony ports (FXS), LAN or WLAN connected clients as well as outside clients• SIP and IMS supported over the VoIP and IMS pipe as well as over the Internet and routed globally

A user attractive architecture for multimedia services and terminals.Plug-in compatible CPE, without changed network architecture!

Many want to

, but o

nly a few re

ally do it!

Only Interte

x has this unique SIP fu

nctionality

!


Initial automated configuration to get up and running

Powerful Provisioning Systems

THEREAFTER:

Continued Configuring – New or updated settings easily distributed

Firmware Upgrade – The CPE can look for new firmware releases and upgrade itself

SIP Switch

Cable, etc. Customer Purchases – Software options, licenses and

even hardware accessories, can be ordered and delivered from IG Shop. Provisioner sells to his customer as usual. Unlocking

of subsidized CPE can also be sold this way.

Use standardized TR-069 and TR-104 or Intertex’ provisioning - easy to integrate with existing customer handling system

The SIP Trunking Installation Wizard

jkjjk


Element Management System – The iEMS Functions for Provisioning, Monitoring, Reporting, Diagnostics, Logging, Debugging,

Support, Configuration and Upgrade. Available now with basic functionality.

Will handle both Ingate and Intertex Firewalls and SIParators.

Highly scalable, runs on PC servers under the Linux OS.

HTTPS/SOAP interface to the IX78. Can read and write all configuration parameters, as well as asynchronous reporting by the device (like SNMP traps).

Web based secure access to the iEMS. Customized portals for operators, installers and customers, for the purpose of administration, management and usage.

The iEMS has northbound interfaces for integrating with the operator’s OSS and Fault Management systems, using XML-RPC and/or SOAP.


iEMS – CDRs with Call Quality Metrics


Billing – CDRs for Efficient Processing

Now also with Video Call Metrics and Pipe Used!

CDRs with Call Quality Metrics – View from iEMS (our TR-69 management system)


iEMS Interfaces <?xml version="1.0"?><methodCall>

<methodName>setTrunk</methodName>

<params><param><struct>

<member><name>version</name><value>1.0</value></member>

<member><name>ems</name><value><struct>

<member><name>username</name><value>installer</value> <member><name>password</name><value>foobar123</value></

</struct></value></member>

<member><name>service</name><value><struct>

<member><name>registrar</name><value>sip.intertex.se</ <member><name>proxy</name><value>proxy.intertex.se</value </struct></value></member>

<member><name>trunk</name><value>

<array><data>

<value><struct>

<member><name>identity</name><value>5162809890</val <member><name>password</name><value>foobar</value></membe

</struct></value>

<value><struct>

<member><name>identity</name><value>5162809895</val

<member><name>password</name><value>barfoo</value>

</struct></value>

</data></array>

</value></member>

</struct></param></params>

</methodCall>

CPE

WAN

OSS, Fault Management, etc.

Northbound API

CPE

CPECPE

CPECPE

CPE

Southbound API

WEB GUI DB DB DB

XML-RPC (or SOAP) (GET/SET/EVENTS)


"Intertex specialises in the development of communication and security products.“

"Extensive experience of real-time and application programming as well as analogue and digital hardware design."

Anders

Business Awards: Challenger of the Year 1995 Rookie of the Year 1996 The Award of Electronics 1997 The Golden Mouse 1998 Trippel A (AAA) 1999 and 2000 Editor's Choice Networking EXHardware 2002 World of ADSL Golden Award 2002 Internet Telephony Product of the Year 2002 Internet Telephony Product of the Year 2003 Communication Solutions – P. of the Year 2003 European IST Prize 2004 Internet Telephony Product of the Year 2004 Pulver 100, numerous Internet Telephony Editors’ Choice Award 2006 Best in Test Mikrodatorn 2006 Internet Telephony Product of the Year 2007, 2008

Technology and Competence


SIP Capable Firewalls and SIParators®

Intertex Data ABwww.intertex.seContact: Karl [email protected]:[email protected]: +46 8 12205629Mob: +46 70 7254532

Ingate Systems Inc.www.ingate.comContact: Steve [email protected]:[email protected]: +1 603 883 6569Mob: +1603 557 7918

Thank You!


Making the E-SBC do it – WAN Quality IP Network

Connects to High Quality OVCC Network and the Internet (If you wish)

Handles Multimedia and Data (If you wish) with advanced QoS

Connects via DSL (IX78 only) or Ethernet (VLAN tagged or not)

Classified traffic (Teleprecense, Voice…) takes the fine pipe

Extra High Quality WAN Interface over PVC or VLAN

Ethernet

Or hook it into a separate Ethernet Interface


Outgoing calls shall take the right pipe (Incoming – signaling and media - stays where it came in)

Classifying in the E-SBC Outbound Proxy is a good way

Classified traffic (Telepresence, Voice…) takes the quality pipe

Can also classify based on other criteria, e.g. IP address, DSCP bits, protocol from device

Making the E-SBC do it – Classify Traffic

Devices registered to Internet connected ITSP

OVCC MSP1 Registered Devices

Devices Registered to own registrar/PBX


Quality of Service setup can be easy (default in the IX78)

Or detailed as in the Ingate line

Making the E-SBC do it – QoS, Prioritization

The IX78 for SMB Deployments both for Hosted SIP Services and SIP Trunking Intertex Data AB, March...

Documents

Transcript of The IX78 for SMB Deployments both for Hosted SIP Services and SIP Trunking Intertex Data AB, March...