AudioCodes Mediant 2600 User manual

User's Manual
AudioCodes Mediant™ Family of Session Border Controllers (SBC)
Mediant 2600
Enterprise Session Border (E-SBC)
Version 6.8

Version 6.8 3 Mediant 2600 E-SBC
User's Manual Contents
Table of Contents
1Overview ............................................................................................................19
Getting Started with Initial Connectivity................................................................21
2Introduction .......................................................................................................23
3Default OAMP IP Address.................................................................................25
4Configuring VoIP LAN Interface for OAMP .....................................................27
4.1 Web Interface.........................................................................................................27
4.2 CLI..........................................................................................................................29
Management Tools..................................................................................................31
5Introduction .......................................................................................................33
6Web-Based Management..................................................................................35
6.1 Getting Acquainted with the Web Interface............................................................35
6.1.1 Computer Requirements..........................................................................................35
6.1.2 Accessing the Web Interface...................................................................................36
6.1.3 Areas of the GUI......................................................................................................37
6.1.4 Toolbar Description..................................................................................................38
6.1.5 Navigation Tree .......................................................................................................39
6.1.5.1 Displaying Navigation Tree in Basic and Full View..................................39
6.1.5.2 Showing / Hiding the Navigation Pane.....................................................40
6.1.6 Working with Configuration Pages ..........................................................................41
6.1.6.1 Accessing Pages......................................................................................41
6.1.6.2 Viewing Parameters.................................................................................41
6.1.6.3 Modifying and Saving Parameters...........................................................43
6.1.6.4 Working with Tables.................................................................................44
6.1.7 Searching for Configuration Parameters.................................................................45
6.1.8 Creating a Login Welcome Message.......................................................................47
6.1.9 Getting Help.............................................................................................................48
6.1.10 Logging Off the Web Interface.................................................................................48
6.2 Viewing the Home Page.........................................................................................49
6.3 Configuring Web User Accounts............................................................................51
6.3.1 Basic User Accounts Configuration.........................................................................53
6.3.2 Advanced User Accounts Configuration..................................................................54
6.4 Displaying Login Information upon Login...............................................................58
6.5 Configuring Web Security Settings ........................................................................58
6.6 Web Login Authentication using Smart Cards .......................................................59
6.7 Configuring Web and Telnet Access List...............................................................60
7CLI-Based Management....................................................................................61
7.1 Getting Familiar with CLI........................................................................................61
7.1.1 Understanding Configuration Modes.......................................................................61
7.1.2 Using CLI Shortcuts.................................................................................................62
7.1.3 Common CLI Commands........................................................................................63
7.1.4 Configuring Tables in CLI........................................................................................64
7.1.5 Understanding CLI Error Messages........................................................................65
7.2 Enabling CLI...........................................................................................................65

User's Manual 4 Document #: LTRT-42060
Mediant 2600 E-SBC
7.2.1 Enabling Telnet for CLI............................................................................................65
7.2.2 Enabling SSH with RSA Public Key for CLI.............................................................66
7.3 Establishing a CLI Session ....................................................................................68
7.4 Configuring Maximum Telnet/SSH Sessions.........................................................68
7.5 Viewing and Terminating Current CLI Sessions ....................................................69
7.6 Configuring Displayed Output Lines in CLI Terminal Window ...............................70
8SNMP-Based Management...............................................................................71
8.1 Enabling SNMP and Configuring SNMP Community Strings.................................71
8.2 Configuring SNMP Trap Destinations....................................................................73
8.3 Configuring SNMP Trusted Managers...................................................................75
8.4 Configuring SNMP V3 Users..................................................................................76
9INI File-Based Management..............................................................................79
9.1 INI File Format .......................................................................................................79
9.1.1 Configuring Individual ini File Parameters...............................................................79
9.1.2 Configuring Table ini File Parameters.....................................................................79
9.1.3 General ini File Formatting Rules............................................................................81
9.2 Configuring an ini File ............................................................................................81
9.3 Loading an ini File to the Device............................................................................82
9.4 Secured Encoded ini File.......................................................................................82
9.5 Configuring Password Display in ini File................................................................83
9.6 INI Viewer and Editor Utility ...................................................................................83
General System Settings ........................................................................................85
10 Configuring SSL/TLS Certificates....................................................................87
10.1.1 Configuring TLS Certificate Contexts......................................................................87
10.1.2 Assigning CSR-based Certificates to TLS Contexts ...............................................91
10.1.3 Assigning Externally Created Private Keys to TLS Contexts..................................92
10.1.4 Generating Private Keys for TLS Contexts..............................................................93
10.1.5 Creating Self-Signed Certificates for TLS Contexts................................................94
10.1.6 Importing Certificates and Certificate Chain into Trusted Certificate Store.............95
10.1.7 Configuring Mutual TLS Authentication...................................................................96
10.1.7.1 TLS for SIP Clients...................................................................................96
10.1.7.2 TLS for Remote Device Management......................................................97
10.1.8 Configuring TLS Server Certificate Expiry Check ...................................................98
11 Date and Time....................................................................................................99
11.1 Configuring Date and Time Manually.....................................................................99
11.2 Configuring Automatic Date and Time using SNTP...............................................99
11.3 Configuring Daylight Saving Time........................................................................101
General VoIP Configuration..................................................................................103
12 Network............................................................................................................105
12.1 Configuring Physical Ethernet Ports ....................................................................105
12.2 Configuring Ethernet Port Groups........................................................................107
12.3 Configuring Underlying Ethernet Devices............................................................110
12.4 Configuring IP Network Interfaces .......................................................................112

Version 6.8 5 Mediant 2600 E-SBC
User's Manual Contents
12.4.1 Assigning NTP Services to Application Types ......................................................115
12.4.2 Multiple Interface Table Configuration Summary and Guidelines.........................115
12.4.3 Networking Configuration Examples .....................................................................116
12.4.3.1 One VoIP Interface for All Applications................................................. 116
12.4.3.2 VoIP Interface per Application Type...................................................... 117
12.4.3.3 VoIP Interfaces for Combined Application Types ................................. 117
12.4.3.4 VoIP Interfaces with Multiple Default Gateways................................... 119
12.5 Configuring Static IP Routes................................................................................119
12.5.1 Configuration Example of Static IP Routes ...........................................................121
12.5.2 Troubleshooting the Routing Table .......................................................................122
12.6 Configuring Quality of Service..............................................................................123
12.7 Configuring ICMP Messages ...............................................................................125
12.8 DNS......................................................................................................................126
12.8.1 Configuring the Internal DNS Table.......................................................................126
12.8.2 Configuring the Internal SRV Table.......................................................................127
12.9 Network Address Translation Support .................................................................129
12.9.1 Device Located behind NAT..................................................................................129
12.9.1.1 Configuring a Static NAT IP Address for All Interfaces......................... 130
12.9.1.2 Configuring NAT Translation per IP Interface....................................... 130
12.9.2 Remote UA behind NAT........................................................................................132
12.9.2.1 SIP Signaling Messages....................................................................... 132
12.9.2.2 Media (RTP/RTCP/T.38)....................................................................... 132
12.10Robust Receipt of Media Streams by Media Latching.........................................135
12.11Multiple Routers Support......................................................................................137
13 Security............................................................................................................139
13.1 Configuring Firewall Settings ...............................................................................139
13.2 Configuring General Security Settings.................................................................143
13.3 Intrusion Detection System..................................................................................144
13.3.1 Enabling IDS..........................................................................................................145
13.3.2 Configuring IDS Policies........................................................................................145
13.3.3 Assigning IDS Policies...........................................................................................149
13.3.4 Viewing IDS Alarms...............................................................................................150
14 Media................................................................................................................153
14.1 Configuring Voice Settings...................................................................................153
14.1.1 Configuring Voice Gain (Volume) Control .............................................................153
14.1.2 Echo Cancellation..................................................................................................153
14.2 Fax and Modem Capabilities................................................................................156
14.2.1 Fax/Modem Operating Modes...............................................................................157
14.2.2 Fax/Modem Transport Modes ...............................................................................157
14.2.2.1 T.38 Fax Relay Mode............................................................................ 157
14.2.2.2 G.711 Fax / Modem Transport Mode.................................................... 160
14.2.2.3 Fax Fallback.......................................................................................... 160
14.2.2.4 Fax/Modem Bypass Mode .................................................................... 161
14.2.2.5 Fax / Modem NSE Mode....................................................................... 162
14.2.2.6 Fax / Modem Transparent with Events Mode....................................... 163
14.2.2.7 Fax / Modem Transparent Mode........................................................... 164
14.2.2.8 RFC 2833 ANS Report upon Fax/Modem Detection............................ 164
14.2.3 V.34 Fax Support...................................................................................................165
14.2.3.1 Bypass Mechanism for V.34 Fax Transmission.................................... 165
14.2.3.2 Relay Mode for T.30 and V.34 Faxes................................................... 165
14.2.4 V.152 Support........................................................................................................166
14.3 Configuring RTP/RTCP Settings..........................................................................168

User's Manual 6 Document #: LTRT-42060
Mediant 2600 E-SBC
14.3.1 Configuring the Dynamic Jitter Buffer....................................................................168
14.3.2 Dual-Tone Multi-Frequency Signaling...................................................................169
14.3.2.1 Configuring DTMF Transport Types...................................................... 169
14.3.2.2 Configuring RFC 2833 Payload ............................................................ 171
14.3.3 Configuring RTP Base UDP Port...........................................................................171
14.3.4 Automatic Gain Control (AGC)..............................................................................172
14.4 Configuring Various Codec Attributes..................................................................174
14.5 Configuring Media (SRTP) Security.....................................................................174
15 Services ...........................................................................................................177
15.1 DHCP Server Functionality..................................................................................177
15.1.1 Configuring the DHCP Server ...............................................................................177
15.1.2 Configuring the Vendor Class Identifier.................................................................181
15.1.3 Configuring Additional DHCP Options...................................................................182
15.1.4 Configuring Static IP Addresses for DHCP Clients...............................................184
15.1.5 Viewing and Deleting DHCP Clients......................................................................185
15.2 SIP-based Media Recording................................................................................187
15.2.1 Enabling SIP-based Media Recording...................................................................190
15.2.2 Configuring SIP Recording Routing Rules............................................................190
15.2.3 Configuring SIP User Part for SRS........................................................................193
15.2.4 Interworking SIP-based Media Recording with Third-Party Vendors....................193
15.2.4.1 Genesys................................................................................................ 193
15.2.4.2 Avaya UCID........................................................................................... 193
15.3 RADIUS Authentication........................................................................................195
15.3.1 Setting Up a Third-Party RADIUS Server..............................................................196
15.3.2 Configuring RADIUS Authentication......................................................................197
15.3.3 Securing RADIUS Communication........................................................................198
15.3.4 Authenticating RADIUS in the URL.......................................................................198
15.4 LDAP-based Management and SIP Services......................................................199
15.4.1 Enabling the LDAP Service...................................................................................200
15.4.2 Enabling LDAP-based Web/CLI User Login Authentication and Authorization.....201
15.4.3 Configuring LDAP Servers.....................................................................................201
15.4.4 Configuring LDAP DNs (Base Paths) per LDAP Server........................................204
15.4.5 Configuring the LDAP Search Filter Attribute........................................................205
15.4.6 Configuring Access Level per Management Groups Attributes ............................206
15.4.7 Configuring LDAP Search Methods.......................................................................208
15.4.8 Configuring the Device's LDAP Cache..................................................................209
15.4.9 Configuring Local Database for Management User Authentication......................211
15.4.10LDAP-based Login Authentication Example..........................................................213
15.4.11Active Directory-based Routing for Microsoft Lync ...............................................217
15.4.11.1Querying the AD and Routing Priority................................................... 217
15.4.11.2Configuring AD-Based Routing Rules................................................... 220
15.5 Least Cost Routing...............................................................................................222
15.5.1 Overview................................................................................................................222
15.5.2 Configuring LCR....................................................................................................224
15.5.2.1 Enabling the LCR Feature..................................................................... 224
15.5.2.2 Configuring Cost Groups....................................................................... 226
15.5.2.3 Configuring Time Bands for Cost Groups............................................. 227
15.5.2.4 Assigning Cost Groups to Routing Rules.............................................. 228
15.6 Configuring Call Setup Rules...............................................................................229
15.6.1 Call Setup Rule Examples.....................................................................................233
16 Quality of Experience......................................................................................235
16.1 Reporting Voice Quality of Experience to SEM....................................................235
16.1.1 Configuring the SEM Server..................................................................................235
16.1.2 Configuring Clock Synchronization between Device and SEM.............................236

Version 6.8 7 Mediant 2600 E-SBC
User's Manual Contents
16.1.3 Enabling RTCP XR Reporting to SEM ..................................................................236
16.2 Configuring Quality of Experience Profiles...........................................................236
16.3 Configuring Bandwidth Profiles............................................................................241
16.4 Configuring Media Enhancement Profiles............................................................244
17 Control Network ..............................................................................................247
17.1 Configuring Media Realms...................................................................................247
17.2 Configuring Remote Media Subnets....................................................................251
17.3 Configuring SRDs ................................................................................................253
17.4 Configuring SIP Interfaces...................................................................................256
17.5 Configuring IP Groups..........................................................................................260
17.6 Configuring Proxy Sets ........................................................................................269
18 SIP Definitions.................................................................................................277
18.1 Configuring SIP Parameters ................................................................................277
18.2 Configuring Registration Accounts.......................................................................277
18.2.1 Regular Registration Mode....................................................................................279
18.2.2 Single Registration for Multiple Phone Numbers using GIN..................................279
18.3 Configuring Proxy and Registration Parameters..................................................281
18.3.1 SIP Message Authentication Example ..................................................................282
18.4 Configuring SIP Message Manipulation...............................................................284
18.5 Configuring SIP Message Policy Rules................................................................289
19 Coders and Profiles ........................................................................................293
19.1 Configuring Default Coders..................................................................................293
19.2 Configuring Coder Groups...................................................................................296
19.3 Configuring IP Profiles .........................................................................................297
Session Border Controller Application................................................................317
20 SBC Overview..................................................................................................319
20.1 SIP Network Definitions .......................................................................................320
20.2 SIP Dialog Initiation Process................................................................................321
20.3 User Registration .................................................................................................323
20.3.1 Initial Registration Request Processing.................................................................323
20.3.2 SBC Users Registration Database........................................................................324
20.3.3 Routing using Users Registration Database..........................................................324
20.3.4 Registration Refreshes..........................................................................................324
20.3.5 Registration Restriction Control.............................................................................325
20.4 SBC Media Handling............................................................................................326
20.4.1 Media Anchoring without Transcoding (Transparent) ...........................................327
20.4.2 Media Anchoring with Transcoding .......................................................................327
20.4.3 No Media Anchoring..............................................................................................329
20.4.4 Transcoding Modes...............................................................................................330
20.4.5 Restricting Coders.................................................................................................331
20.4.6 Coder Transcoding................................................................................................331
20.4.7 Prioritizing Coder List in SDP Offer.......................................................................333
20.4.8 SRTP-RTP and SRTP-SRTP Transcoding ...........................................................333
20.4.9 Multiple RTP Media Streams per Call Session .....................................................334
20.4.10Interworking DTMF Methods.................................................................................334

User's Manual 8 Document #: LTRT-42060
Mediant 2600 E-SBC
20.5 Fax Negotiation and Transcoding........................................................................335
20.6 Limiting SBC Call Duration...................................................................................335
20.7 SBC Authentication..............................................................................................336
20.7.1 SIP Authentication Server Functionality................................................................336
20.7.2 User Authentication based on RADIUS.................................................................337
20.8 Interworking SIP Signaling...................................................................................337
20.8.1 Interworking SIP 3xx Redirect Responses............................................................337
20.8.1.1 Resultant INVITE Traversing Device .................................................... 337
20.8.1.2 Local Handling of SIP 3xx..................................................................... 339
20.8.2 Interworking SIP Diversion and History-Info Headers...........................................339
20.8.3 Interworking SIP REFER Messages......................................................................340
20.8.4 Interworking SIP PRACK Messages .....................................................................340
20.8.5 Interworking SIP Session Timer............................................................................341
20.8.6 Interworking SIP Early Media................................................................................341
20.8.7 Interworking SIP re-INVITE Messages..................................................................343
20.8.8 Interworking SIP UPDATE Messages...................................................................343
20.8.9 Interworking SIP re-INVITE to UPDATE................................................................343
20.8.10Interworking Delayed Offer....................................................................................343
20.8.11Interworking Call Hold............................................................................................344
20.9 Call Survivability...................................................................................................345
20.9.1 Auto-Provisioning of Subscriber-Specific Information for BroadWorks Server for
Survivability.........................................................................................................................345
20.9.2 BroadSoft's Shared Phone Line Call Appearance for SBC Survivability...............346
20.9.3 Call Survivability for Call Centers..........................................................................347
20.9.4 Survivability Mode Display on Aastra IP Phones ..................................................349
20.10Call Forking..........................................................................................................350
20.10.1Initiating SIP Call Forking ......................................................................................350
20.10.2SIP Forking Initiated by SIP Proxy Server.............................................................350
20.10.3Call Forking-based IP-to-IP Routing Rules............................................................351
20.11Alternative Routing on Detection of Failed SIP Response...................................351
21 SBC Configuration..........................................................................................353
21.1 Configuring General Settings...............................................................................353
21.1.1 Interworking Dialog Information in SIP NOTIFY Messages ..................................353
21.2 Configuring Admission Control.............................................................................355
21.3 Configuring Allowed Audio Coder Groups ...........................................................359
21.4 Configuring Allowed Video Coder Groups ...........................................................360
21.5 Routing SBC ........................................................................................................361
21.5.1 Configuring Classification Rules............................................................................361
21.5.1.1 Classification Based on URI of Selected Header Example................... 366
21.5.2 Configuring Message Condition Rules..................................................................367
21.5.3 Configuring SBC IP-to-IP Routing .........................................................................368
21.5.4 Configuring SIP Response Codes for Alternative Routing Reasons.....................378
21.6 SBC Manipulations...............................................................................................380
21.6.1 Configuring IP-to-IP Inbound Manipulations..........................................................382
21.6.2 Configuring IP-to-IP Outbound Manipulations.......................................................385
Cloud Resilience Package....................................................................................391
22 CRP Overview..................................................................................................393
23 CRP Configuration..........................................................................................395
23.1 Enabling the CRP Application..............................................................................395

Version 6.8 9 Mediant 2600 E-SBC
User's Manual Contents
23.2 Configuring Call Survivability Mode .....................................................................396
23.3 Pre-Configured IP Groups....................................................................................397
23.4 Pre-Configured IP-to-IP Routing Rules................................................................398
23.4.1 Normal Mode.........................................................................................................398
23.4.2 Emergency Mode...................................................................................................399
23.4.3 Auto Answer to Registrations................................................................................399
23.5 Configuring PSTN Fallback..................................................................................400
High Availability System.......................................................................................401
24 HA Overview....................................................................................................403
24.1 Connectivity and Synchronization between Devices............................................403
24.2 Device Switchover upon Failure...........................................................................404
24.3 HA Status on the Home Page..............................................................................405
25 HA Configuration.............................................................................................407
25.1 Initial HA Configuration ........................................................................................407
25.1.1 Network Topology Types and Rx/Tx Ethernet Port Group Settings......................407
25.1.2 Configuring the HA Devices ..................................................................................408
25.1.2.1 Step 1: Configure the First Device........................................................ 409
25.1.2.2 Step 2: Configure the Second Device................................................... 411
25.1.2.3 Step 3: Initialize HA on the Devices...................................................... 412
25.2 Configuration while HA is Operational .................................................................413
25.3 Configuring Firewall Allowed Rules......................................................................413
25.4 Monitoring IP Entity and HA Switchover upon Ping Failure.................................415
26 HA Maintenance ..............................................................................................417
26.1 Maintenance of Redundant Device......................................................................417
26.2 Replacing a Failed Device ...................................................................................417
26.3 Forcing a Switchover............................................................................................417
26.4 Software Upgrade................................................................................................417
Maintenance...........................................................................................................419
27 Basic Maintenance..........................................................................................421
27.1 Resetting the Device............................................................................................421
27.2 Remotely Resetting Device using SIP NOTIFY...................................................423
27.3 Locking and Unlocking the Device.......................................................................423
27.4 Saving Configuration............................................................................................424
28 High Availability Maintenance........................................................................425
28.1 Initiating an HA Switchover..................................................................................425
28.2 Resetting the Redundant Unit..............................................................................426
29 Disconnecting Active Calls ............................................................................427
30 Software Upgrade............................................................................................429
30.1 Loading Auxiliary Files.........................................................................................429
30.1.1 Call Progress Tones File .......................................................................................430
30.1.2 Prerecorded Tones File.........................................................................................433

User's Manual 10 Document #: LTRT-42060
Mediant 2600 E-SBC
30.1.3 Dial Plan File..........................................................................................................433
30.1.3.1 Creating a Dial Plan File........................................................................ 433
30.1.3.2 Dial Plan Prefix Tags for Routing.......................................................... 434
30.1.3.3 Obtaining IP Destination from Dial Plan File......................................... 436
30.1.4 User Information File .............................................................................................436
30.1.4.1 Enabling the User Info Table................................................................. 436
30.1.4.2 User Information File for SBC User Database...................................... 436
30.2 Software License Key ..........................................................................................440
30.2.1 Obtaining the Software License Key File...............................................................440
30.2.2 Installing the Software License Key.......................................................................441
30.2.2.1 Installing Software License Key using Web Interface........................... 441
30.2.2.2 Installing Software License Key using CLI............................................ 443
30.3 Software Upgrade Wizard....................................................................................444
30.4 Backing Up and Loading Configuration File.........................................................449
31 Automatic Update Mechanism.......................................................................451
31.1 Automatic Configuration Methods........................................................................451
31.1.1 DHCP-based Provisioning.....................................................................................451
31.1.2 Provisioning from HTTP Server using DHCP Option 67.......................................452
31.1.3 Provisioning from TFTP Server using DHCP Option 66........................................453
31.1.4 HTTP-based Provisioning......................................................................................453
31.1.5 FTP-based Provisioning ........................................................................................454
31.1.6 Provisioning using AudioCodes EMS....................................................................454
31.2 HTTP/S-Based Provisioning using the Automatic Update Feature......................455
31.2.1 Files Provisioned by Automatic Update.................................................................455
31.2.2 File Location for Automatic Update .......................................................................455
31.2.3 Triggers for Automatic Update...............................................................................456
31.2.4 Access Authentication with HTTP Server..............................................................457
31.2.5 Querying Provisioning Server for Updated Files...................................................457
31.2.6 File Download Sequence.......................................................................................459
31.2.7 Cyclic Redundancy Check on Downloaded Configuration Files...........................460
31.2.8 MAC Address Automatically Inserted in Configuration File Name........................461
31.2.9 Automatic Update Configuration Examples...........................................................461
31.2.9.1 Automatic Update for Single Device ..................................................... 461
31.2.9.2 Automatic Update from Remote Servers .............................................. 462
31.2.9.3 Automatic Update for Mass Deployment............................................... 465
32 Restoring Factory Defaults ............................................................................467
32.1 Restoring Defaults using CLI ...............................................................................467
32.2 Restoring Defaults using an ini File......................................................................468
33 Saving Current Configuration to a File and Sending it to Remote
Destination.............................................................................................................469
Status, Performance Monitoring and Reporting.................................................471
34 System Status .................................................................................................473
34.1 Viewing Device Information..................................................................................473
34.2 Viewing Ethernet Port Information .......................................................................474
35 Performance Monitoring.................................................................................475
35.1 Viewing MOS per Media Realm...........................................................................475
35.2 Viewing Quality of Experience .............................................................................476
35.3 Viewing Average Call Duration ............................................................................477

Version 6.8 11 Mediant 2600 E-SBC
User's Manual Contents
36 Carrier-Grade Alarms......................................................................................479
36.1 Viewing Active Alarms..........................................................................................479
36.2 Viewing Alarm History..........................................................................................479
37 VoIP Status ......................................................................................................481
37.1 Viewing Active IP Interfaces.................................................................................481
37.2 Viewing Ethernet Device Status...........................................................................481
37.3 Viewing Static Routes Status...............................................................................481
37.4 Viewing Registered Users....................................................................................482
37.5 Viewing Registration Status.................................................................................483
37.6 Viewing Proxy Set Status.....................................................................................483
38 Reporting Information to External Party .......................................................485
38.1 Configuring RTCP XR..........................................................................................485
38.2 Generating Call Detail Records............................................................................489
38.2.1 Configuring CDR Reporting...................................................................................489
38.2.2 CDR Field Description...........................................................................................489
38.2.2.1 CDR Fields for SBC Signaling .............................................................. 490
38.2.2.2 CDR Fields for SBC Media ................................................................... 493
38.3 Configuring RADIUS Accounting .........................................................................494
Diagnostics............................................................................................................499
39 Syslog and Debug Recordings ......................................................................501
39.1 Syslog Message Format ......................................................................................501
39.1.1 Event Representation in Syslog Messages...........................................................502
39.1.2 Identifying AudioCodes Syslog Messages using Facility Levels...........................504
39.1.3 SNMP Alarms in Syslog Messages.......................................................................504
39.2 Enabling Syslog ...................................................................................................505
39.3 Configuring Web Operations to Report to Syslog................................................506
39.4 Configuring Debug Recording..............................................................................507
39.5 Filtering Syslog Messages and Debug Recordings .............................................507
39.5.1 Filtering IP Network Traces ...................................................................................509
39.6 Viewing Syslog Messages ...................................................................................510
39.7 Collecting Debug Recording Messages...............................................................512
39.8 Debug Capturing on Physical VoIP Interfaces.....................................................513
40 Creating Core Dump and Debug Files upon Device Crash .........................515
41 Testing SIP Signaling Calls............................................................................517
41.1 Configuring Test Call Endpoints...........................................................................517
41.2 Starting and Stopping Test Calls..........................................................................521
41.3 Viewing Test Call Statistics..................................................................................521
41.4 Configuring DTMF Tones for Test Calls...............................................................523
41.5 Configuring SBC Test Call with External Proxy ...................................................524
41.6 Test Call Configuration Examples........................................................................525
Appendix................................................................................................................529

User's Manual 12 Document #: LTRT-42060
Mediant 2600 E-SBC
42 Dialing Plan Notation for Routing and Manipulation....................................531
43 Configuration Parameters Reference............................................................533
43.1 Management Parameters.....................................................................................533
43.1.1 General Parameters ..............................................................................................533
43.1.2 Web Parameters....................................................................................................533
43.1.3 Telnet Parameters.................................................................................................536
43.1.4 ini File Parameters.................................................................................................537
43.1.5 SNMP Parameters.................................................................................................537
43.1.6 Serial Parameters..................................................................................................542
43.1.7 Auxiliary and Configuration File Name Parameters ..............................................543
43.1.8 Automatic Update Parameters ..............................................................................544
43.2 Networking Parameters........................................................................................548
43.2.1 Ethernet Parameters..............................................................................................548
43.2.2 Multiple VoIP Network Interfaces and VLAN Parameters.....................................549
43.2.3 Routing Parameters...............................................................................................549
43.2.4 Quality of Service Parameters...............................................................................550
43.2.5 NAT Parameters....................................................................................................551
43.2.6 DNS Parameters....................................................................................................553
43.2.7 DHCP Parameters.................................................................................................554
43.2.8 NTP and Daylight Saving Time Parameters..........................................................556
43.3 Debugging and Diagnostics Parameters..............................................................558
43.3.1 General Parameters ..............................................................................................558
43.3.2 SIP Test Call Parameters......................................................................................559
43.3.3 Syslog, CDR and Debug Parameters....................................................................560
43.3.4 Resource Allocation Indication Parameters...........................................................564
43.3.5 HA Ping Parameters..............................................................................................565
43.4 Security Parameters.............................................................................................567
43.4.1 General Security Parameters................................................................................567
43.4.2 HTTPS Parameters ...............................................................................................569
43.4.3 SRTP Parameters..................................................................................................570
43.4.4 TLS Parameters.....................................................................................................572
43.4.5 SSH Parameters....................................................................................................575
43.4.6 IDS Parameters.....................................................................................................576
43.5 Quality of Experience Parameters .......................................................................577
43.6 Control Network Parameters................................................................................579
43.6.1 IP Group, Proxy, Registration and Authentication Parameters.............................579
43.6.2 Network Application Parameters...........................................................................587
43.7 General SIP Parameters......................................................................................589
43.8 Coders and Profile Parameters............................................................................605
43.9 Channel Parameters............................................................................................607
43.9.1 Voice Parameters..................................................................................................607
43.9.2 Coder Parameters .................................................................................................609
43.9.3 DTMF Parameters.................................................................................................610
43.9.4 RTP, RTCP and T.38 Parameters.........................................................................611
43.10SBC Parameters..................................................................................................615
43.11IP Media Parameters ...........................................................................................628
43.12Services ...............................................................................................................630
43.12.1SIP-based Media Recording Parameters..............................................................630
43.12.2RADIUS and LDAP Parameters............................................................................631
43.12.2.1General Parameters.............................................................................. 631
43.12.2.2RADIUS Parameters............................................................................. 631
43.12.2.3LDAP Parameters ................................................................................. 633
43.12.3Least Cost Routing Parameters ............................................................................636
43.12.4Call Setup Rules Parameters................................................................................637

Version 6.8 13 Mediant 2600 E-SBC
User's Manual Contents
44 SBC Channel Capacity....................................................................................639
44.1 Signaling-Media Sessions & User Registrations..................................................639
44.2 Channel Capacity and Capabilities......................................................................641
45 Technical Specifications ................................................................................643

User's Manual 14 Document #: LTRT-42060
Mediant 2600 E-SBC
This page is intentionally left blank.

Version 6.8 15 Mediant 2600 E-SBC
User's Manual Notices
Notice
Information contained in this document is believed to be accurate and reliable at the time of
printing. However, due to ongoing product improvements and revisions, AudioCodes cannot
guarantee accuracy of printed material after the Date Published nor can it accept responsibility
for errors or omissions. Updates to this document can be downloaded from
https://www.audiocodes.com/library/technical-documents.
This document is subject to change without notice.
Date Published: December-31-2017
WEEE EU Directive
Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed
of with unsorted waste. Please contact your local recycling authority for disposal of this
product.
Customer Support
Customer technical support and services are provided by AudioCodes or by an authorized
AudioCodes Service Partner. For more information on how to buy technical support for
AudioCodes products and for contact information, please visit our Web site at
https://www.audiocodes.com/services-support/maintenance-and-support.
Abbreviations and Terminology
Each abbreviation, unless widely used, is spelled out in full when first used.
Related Documentation
Manual Name
SIP CPE Release Notes
Mediant 2600 E-SBC Hardware Installation Manual
Complementary Guides
CLI Reference Guide
SNMP Reference Guide
SBC Design Guide
Recommended Security Guidelines Configuration Note
SIP Message Manipulations Quick Reference Guide
SAS Application Configuration Guide
Utility Guides
INI Viewer & Editor Utility User's Guide

User's Manual 16 Document #: LTRT-42060
Mediant 2600 E-SBC
Manual Name
AcBootP Utility User's Guide
CLI Wizard User's Guide
Note and Warnings
Note: This device is considered an INDOOR unit and therefore, must be installed only
indoors. In addition, Ethernet port interface cabling must be routed only indoors and
must not exit the building.
Note: The scope of this document does not fully cover security aspects for deploying
the device in your environment. Security measures should be done in accordance
with your organization’s security policies. For basic security guidelines, refer to
AudioCodes Recommended Security Guidelines document.
Note: Throughout this manual, unless otherwise specified, the term device refers to
your AudioCodes products.
Note: Before configuring the device, ensure that it is installed correctly as instructed
in the Hardware Installation Manual.
Notes:
•This device includes software developed by the OpenSSL Project for use in the
OpenSSL Toolkit (http://www.openssl.org/).
•This device includes cryptographic software written by Eric Young
([e-mail]).
Note: Some of the features listed in this document are available only if the relevant
Software License Key has been purchased from AudioCodes and installed on the
device. For a list of Software License Keys that can be purchased, please consult
your AudioCodes sales representative.
Note: OPEN SOURCE SOFTWARE. Portions of the software may be open source
software and may be governed by and distributed under open source licenses, such
as the terms of the GNU General Public License (GPL), the terms of the Lesser
General Public License (LGPL), BSD and LDAP, which terms are located
https://www.audiocodes.com/services-support/open-source/ and all are incorporated
herein by reference. If any open source software is provided in object code, and its
accompanying license requires that it be provided in source code as well, Buyer may
receive such source code by contacting AudioCodes, by following the instructions
available on AudioCodes website.

Version 6.8 17 Mediant 2600 E-SBC
User's Manual Notices
Document Revision Record
LTRT Description
41599 Previous document release for Version 6.8.
41781 Screenshot updated for example of SIP message manipulation rules; available video
coders not based on license key; AupdHttpUserAgent parameter updated; RFC
updated for CDR Syslog message (RFC 3164); core dump procedure updated; HA
Settings page screenshot updated for configuring HA; CRP Normal mode routing rules
updated; software reset for DHCP trigger (not hardware reset); Feature Key not
required for IPv6; description for write-and-backup command revised;
mapping of logical
string names to physical ports (MAC address).
41782 PM_EnableThresholdAlarms parameter added; max. entries of TLS Contexts table;
Web Users table CLI commands updated; Web Users table parameter descriptions of
Session Limit and Session Timeout updated; IPv6 Feature Key removed; Internal DNS
table supports up to 3 (not 4) IP addresses per host name; remote UA behind NAT for
media section updated; MgmntLDAPGroups_Level parameter values updated; CRP
Normal mode preconfiguration updated; write-and-backup CLI command updated;
Ethernet Group section updated; PhysicalPortsTable_GroupStatus parameter updated;
EtherGroupTable_Mode (1RX/1TX removed and default changed); SIPR
ec note bulletin
for France added; IPGroup_SIPConnect parameter added;
SBCEnableAASTRASurvivabilityNotice replaced by SBCEnableSurvivabilityNotice; R-
factor note added; CDR terminator for RADIUS accounting added; WAN parameters
removed; dimensions corrected; descriptions of the following parameters were updated
- WebSessionTimeout; SRD_EnableUnAuthenticatedRegistrations;
DigitalOOSBehaviorForTrunk; DigitalOOSBehavior;
IpProfile_SBCRemoteReplacesBehavior; EnableSBCMediaSync
41786 The following parameters were updated: Version; Action Type; Port Range Start;
Number of Media Session Legs; Port Range End; UDP Port; SIP Group Name; UUI
Format; Classify By Proxy Set; Inbound Message Manipulation Set;
Outbound Message
Manipulation Set; Row Role; Disconnect on Broken Connection; Rate; Source IP
Address; Call Trigger; Group Policy; Max Generated Register Rate; RTP Base UDP
Port.
The following parameters were added: Generated Registers Interval; Network Node ID.
The following sub-sections were modified: Configuring RTP Base UDP Port; Avaya
UCID; Configuring IP Groups; Configuring SIP Message Manipulation; Configuring
Classification Rules; Configuring SBC IP-to-IP Routing; Automatic Configuration
Methods; FTP-based Provisioning; Automatic Update from Remote Servers; HA Ping
Parameters.
The following sub-sections were deleted: Configuring NFS Settings; NFS Parameters.
41792 Updated sections: Configuring VoIP LAN Interface for OAMP (CLI); CLI-Based
Management (privileges); Understanding Configuration Modes (note); Configuring
Web User Accounts (typo); Configuring TLS Certificate Contexts (IPSec removed);
Assigning CSR-based Certificates to TLS Contexts (SHA); Generating Private Keys
for TLS Contexts (4096); Configuring the SEM Server (port removed, TLS added);
Configuring Proxy Sets (keep-alive); Configuring SBC IP-to-IP Routing; Configuring
SIP Response Codes for Alternative Routing Reasons; MAC Address Automatically
Inserted in Configuration File Name; Viewing Call Routing Status (removed);
Creating Core Dump and Debug Files upon Device Crash (reset)
New sections: Viewing Proxy Set Status
Updated parameters: NATTranslation_SourceStartPort;
NATTranslation_SourceEndPort; NATTranslation_TargetStartPort;
NATTranslation_TargetEndPort; IpProfile_SBCUseSilenceSupp; DisableSNMP;

User's Manual 18 Document #: LTRT-42060
Mediant 2600 E-SBC
LTRT Description
EnableCoreDump; PrackMode; IgnoreAlertAfterEarlyMedia;
SessionExpiresDisconnectTime; BrokenConnectionEventTimeout;
TLSContexts_TLSVersion; TLSContexts_ServerCipherString;
TLSContexts_ClientCipherString; EnableWebAccessFromAllInterfaces;
ECNLPMode; SSHMaxLoginAttempts; ResetWebPassword;
IPOutboundManipulation_PrivacyRestrictionMode; CLIPrivPass; QOEPort
(removed); PrackMode (removed); DTMFVolume
New parameters: ProxySet_SuccessDetectionRetries;
ProxySet_SuccessDetectionInterval; ProxySet_FailureDetectionRetransmissions;
TLSContexts_DTLSVersion; TLSContexts_DHKeySize; EnableNonCallCdr;
QOEEnableTLS
41795 Updated sections: Configuring Firewall Settings
Updated parameters: AccessList_Source_IP; AccessList_Source_Port;
AccessList_Start_Port; AccessList_End_Port; ProxySet_EnableProxyKeepAlive;
ProxySet_IsProxyHotSwap; IpProfile_SBCPlayHeldTone;
PstnPrefix_SourceAddress; ResetWebPassword; KeepAliveTrapPort;
SSHMaxLoginAttempts; EnablePChargingVector (removed)
New parameters: CustomerSN
42060 Updated sections: Configuring NAT Translation per IP Interface; Silence
Suppression (removed); Comfort Noise Generation; SIP-based Media Recording
(France URL); DHCP-based Provisioning (note); Viewing Active Alarms (note)
Updated parameters: IpProfile_SCE (removed); IpProfile_SBCSDPPtimeAnswer
(Preferred Value); IpProfile_SBCPreferredPTime; SyslogOptimization (default):
IsCiscoSCEMode; EnableBusyOut; EnableSilenceCompression (removed);
UseDisplayNameAsSourceNumber
New parameters: IpProfile_SBCAdaptRFC2833BWToVoiceCoderBW;
ActiveAlarmTableMaxSize; NoAlarmForDisabledPort;
SBCRemoveSIPSFromNonSecuredTransport
Documentation Feedback
AudioCodes continually strives to produce high quality documentation. If you have any
comments (suggestions or errors) regarding this document, please fill out the
Documentation Feedback form on our Web site at
https://online.audiocodes.com/documentation-feedback.

Version 6.8 19 Mediant 2600 E-SBC
User's Manual 1. Overview
1 Overview
AudioCodes' Mediant 2600 E-SBC (hereafter referred to as device) is a member of
AudioCodes family of Enterprise Session Border Controllers (E-SBC), enabling connectivity
and security between small medium businesses (SMB) and service providers' VoIP
networks. The device is a fully featured enterprise-class SBC provides a secured voice
network deployment based on a Back-to-Back User Agent (B2BUA) implementation. The
SBC functionality provides perimeter defense for protecting the enterprise from malicious
VoIP attacks; mediation for allowing the connection of any IP PBX to any service provider;
and service assurance for service quality and manageability.
The device also offers call "survivability" solutions using its Stand Alone Survivability (SAS)
or Cloud Resilience Package applications, ensuring service continuity to enterprises served
by a centralized SIP-based IP-Centrex server or branch offices of distributed enterprises.
Call survivability enables internal office communication between SIP clients in the case of
disconnection from the centralized SIP IP-Centrex server or IP-PBX.
The device is a single full-height (FH) AMC module running the session border controller
application, consisting of the following:

1.25 GHz multi-core CPU

Eight Ethernet 10/100/1000Base-T ports, grouped into pairs where one port is active
while the other is standby (1+1), auto-negotiation, half- and full-duplex modes, and
straight-through and crossover cable detection

1+1 power load-sharing and redundancy by providing two Power Supply modules

1+1 High Availability by deploying two Mediant 2600 devices, each connected to a
different network (in the same subnet). In case of a network failure in one network, a
switch over of traffic to the standby Mediant 2600 occurs.
The device supports an optional Media Processing Module (MPM), providing resources for
additional IP-to-IP transcoding sessions.
The device allows full management through its HTTP/S-based embedded Web server. This
user-friendly Web interface allows remote configuration using any standard Web browser
(such as Microsoft™ Internet Explorer™). The device can also be managed through
AudioCodes Element Management System (EMS), and SNMP v2/v3.
Note: For maximum call capacity figures, see ''SBC Channel Capacity'' on page 639.

User's Manual 20 Document #: LTRT-42060
Mediant 2600 E-SBC
This page is intentionally left blank.