AudioCodes Mediant E-SBC Quick start guide

Configuration Note
AudioCodes Professional Services – Interoperability Lab
Mediant™ E-SBC for Mediant CCE Appliance
and ITSP SIP Trunk
Version 7.2

Configuration Note Contents
Version 7.2 3 AudioCodes Mediant E-SBC
Table of Contents
1Introduction .........................................................................................................7
1.1 Intended Audience .................................................................................................7
1.2 About AudioCodes E-SBC Product Series..............................................................7
2Component Information......................................................................................9
2.1 AudioCodes E-SBC Version...................................................................................9
2.2 Microsoft Skype for Business CCE Version............................................................9
2.3 Deploying the SBC...............................................................................................10
2.3.1 Example Environment..............................................................................................10
2.3.2 Environment Setup ..................................................................................................11
3Configuring Skype for Business CCE.............................................................13
3.1 Setting the SBC Certificate on the CCE................................................................13
4Configuring AudioCodes E-SBC......................................................................15
4.1 Step 1: IP Network Interfaces Configuration.........................................................16
4.1.1 Step 1a: Configure VLANs.......................................................................................17
4.1.2 Step 1b: Configure IP Network Interfaces for LAN and WAN .................................18
4.2 Step 2: Enable the SBC Application .....................................................................19
4.3 Step 3: Configure Media Realms..........................................................................20
4.4 Step 4: Configure SIP Signaling Interfaces...........................................................23
4.5 Step 5: Configure Proxy Sets ...............................................................................25
4.6 Step 6: Configure Coders.....................................................................................28
4.7 Step 7: Configure IP Profiles ................................................................................31
4.8 Step 8: Configure IP Groups.................................................................................35
4.9 Step 9: SIP TLS Connection Configuration...........................................................37
4.9.1 Step 9a: Configure the NTP Server Address...........................................................37
4.9.2 Step 9b: Configure the TLS version ........................................................................38
4.9.3 Step 9c: Configure a Certificate...............................................................................39
4.10 Step 10: Configure SRTP.....................................................................................40
4.11 Step 11: Configure Maximum IP Media Channels ................................................41
4.12 Step 12: Configure IP-to-IP Call Routing Rules ....................................................42
4.13 Step 13: Configure IP-to-IP Manipulation Rules....................................................47
4.14 Step 14: Configure Message Manipulation Rules .................................................49
4.15 Step 15: Configure Registration Accounts............................................................51
4.16 Step 16: Miscellaneous Configuration...................................................................52
4.16.1 Step 16a: Configure Call Forking Mode ..................................................................52
4.16.2 Step 16b: Configure SBC Alternative Routing Reasons .........................................53
4.17 Step 17: Reset the E-SBC....................................................................................54

AudioCodes Mediant E-SBC 4 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
This page is intentionally left blank.

Configuration Note Notices
Version 7.2 5 AudioCodes Mediant E-SBC
Notice
Information contained in this document is believed to be accurate and reliable at the time of
printing. However, due to ongoing product improvements and revisions, AudioCodes cannot
guarantee accuracy of printed material after the Date Published, nor can it accept
responsibility for errors or omissions. Updates to this document and other documents as well
as software files
can be viewed by registered customers at
http://www.audiocodes.com/downloads.
This document is subject to change without notice.
Date Published: April-09-2017
WEEE EU Directive
Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed
of with unsorted waste. Please contact your local recycling authority for disposal of this
product.
Customer Support
Customer technical support and services are provided by AudioCodes or by an authorized
AudioCodes Service Partner. For more information on how to buy technical support for
AudioCodes products and for contact information, please visit our Web site at
www.audiocodes.com/support.
Document Revision Record
LTRT Description
28160 Initial document release for Version 7.2.
Documentation Feedback
AudioCodes continually strives to produce high quality documentation. If you have any
comments (suggestions or errors) regarding this document, please fill out the
Documentation Feedback form on our Web site at http://www.audiocodes.com/downloads.

AudioCodes Mediant E-SBC 6 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
This page is intentionally left blank.

Configuration Note 1. Introduction
Version 7.2 7 AudioCodes Mediant E-SBC
1 Introduction
This Configuration Note describes how to set up AudioCodes Enterprise Session Border
Controller (hereafter, referred to as E-SBC) for interworking between ITSP's SIP Trunk and
AudioCodes Mediant CCE Appliance.
You can also use AudioCodes' SBC Wizard tool to automatically configure the E-SBC
based on this interoperability setup. However, it is recommended to read through this
document in order to better understand the various configuration options. For more
information on AudioCodes' SBC Wizard including download option, visit AudioCodes Web
site at http://www.audiocodes.com/sbc-wizard (login required).
1.1 Intended Audience
The document is intended for engineers, or AudioCodes and ITSP Partners who are
responsible for installing and configuring ITSP's SIP Trunk and Microsoft's Skype for
Business CCE for enabling VoIP calls using AudioCodes E-SBC.
1.2 About AudioCodes E-SBC Product Series
AudioCodes' family of E-SBC devices enables reliable connectivity and security between
the Enterprise's and the service provider's VoIP networks.
The E-SBC provides perimeter defense as a way of protecting Enterprises from malicious
VoIP attacks; mediation for allowing the connection of any PBX and/or IP-PBX to any
service provider; and Service Assurance for service quality and manageability.
Designed as a cost-effective appliance, the E-SBC is based on field-proven VoIP and
network services with a native host processor, allowing the creation of purpose-built
multiservice appliances, providing smooth connectivity to cloud services, with integrated
quality of service, SLA monitoring, security and manageability. The native implementation
of SBC provides a host of additional capabilities that are not possible with standalone SBC
appliances such as VoIP mediation, PSTN access survivability, and third-party value-
added services applications. This enables Enterprises to utilize the advantages of
converged networks and eliminate the need for standalone appliances.
AudioCodes E-SBC is available as an integrated solution running on top of its field-proven
Mediant Media Gateway and Multi-Service Business Router platforms, or as a
software-only solution for deployment with third-party hardware.

AudioCodes Mediant E-SBC 8 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
This page is intentionally left blank.

Configuration Note 2. Component Information
Version 7.2 9 AudioCodes Mediant E-SBC
2 Component Information
2.1 AudioCodes E-SBC Version
Table 2-1: AudioCodes E-SBC Version
SBC Vendor AudioCodes
Models Mediant 800B Gateway & E-SBC
Mediant Software SBC (VE)
Software Version SIP_7.20A or later
Protocol SIP/UDP (to the ITSP SIP Trunk)
SIP/TCP or TLS (to the S4B Mediation Server)
Additional Notes The Mediant CCE appliance is delivered with M800 SBC or
SSBC in HP server.
2.2 Mediant CCE Appliance Version
Table 2-2: Microsoft Skype for Business CCE Version
Vendor AudioCodes
Model Mediant CCE Appliance
Software Version Release 2.0.2
Protocol SIP
Additional Notes None
2.3 Microsoft Skype for Business Cloud Connector
Edition Version
Table 2-3: Microsoft Skype for Business CCE Version
Vendor Microsoft
Model Cloud Connector Edition
Software Version Release 1.4.2

AudioCodes Mediant E-SBC 10 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
2.4 Deploying the SBC
2.4.1 Example Environment
The example scenario below is referred to throughout this document in order to show how
to deploy the SBC.
In the example environment:
Enterprise deployed the Mediant CCE Appliance in its network for enhanced
communication within the Cloud PBX.
Enterprise wishes to offer its employees to connect the Enterprise to the Local PSTN
network using ITSP's SIP Trunking service.
AudioCodes E-SBC is implemented to interconnect between the CCE and the SIP
Trunk.
•Session:Real-time voice session using the IP-based Session Initiation Protocol
(SIP).
•Border:IP-to-IP network border between Mediant CCE network in the Enterprise
LAN and ITSP's SIP Trunk located in the public network.
The figure below illustrates this interoperability test topology:
Figure 2-1: Example Environment Topology between E-SBC and Mediant CCE with ITSP SIP
Trunk

Configuration Note 2. Component Information
Version 7.2 11 AudioCodes Mediant E-SBC
2.4.2 Environment Setup
The interoperability test topology includes the following environment setup:
Table 2-4: Environment Setup
Area Setup
Network CCE Mediation is located on the Corporate DMZ
ITSP SIP Trunk is located on the Internet DMZ
Signaling
Transcoding
CCE operates with SIP-over-TLS transport type
ITSP SIP Trunk operates with SIP-over-UDP transport type
Codecs
Transcoding
CCE supports G.711A-law and G.711U-law coders
ITSP SIP Trunk supports G.711A-law, G.711U-law, and G.729
coder
Media Transcoding CCE operates with SRTP media type
ITSP SIP Trunk operates with RTP media type

AudioCodes Mediant E-SBC 12 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
This page is intentionally left blank.

Configuration Note 3. Configuring Skype for Business CCE
Version 7.2 13 AudioCodes Mediant E-SBC
3 Configuring Skype for Business CCE
This chapter describes how to configure Mediant CCE Appliance to assign certificate to the
AudioCodes E-SBC.
Note: Other Settings on Cloud Connector Edition (CCE) are beyond the scope of this
document. Refer to LTRT-28086 Mediant Appliance for Microsoft Skype for Business
CCE Installation Manual Ver. 2.0.2.
3.1 Setting the SBC Certificate on the CCE
This procedure describes how to set the collocated SBC certificate. This certificate is
required in case TLS is used to secure the connection between the Gateway/SBC and the
CCE Mediation server.
The new certificate will be signed by the CCE internal CA automatically and be uploaded to
the Gateway/SBC under Context index 0 (note: the new certificate will override any other
certificate in context 0).
To set the SBC certificate:
1. Select the correct SBC FQDN from the Common Name field. as shown below:
Figure 3-1: setting the SBC certificate
2. Click the Next button to continue.
Note: To deploy the certificate, ensure that the CCE has access to the SBC OSN
IP (i.e., 169.254.100.1). The SBC is set with the parameter
OSNINTERNALVLAN=1.

AudioCodes Mediant E-SBC 14 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
This page is intentionally left blank.

Configuration Note 4. Configuring AudioCodes E-SBC
Version 7.2 15 AudioCodes Mediant E-SBC
4 Configuring AudioCodes E-SBC
This chapter provides step-by-step procedures on how to configure AudioCodes E-SBC for
interworking between Mediant CCE Appliance and the ITSP SIP Trunk. These
configuration procedures are based on the interoperability test topology described in
Section 2.4.
This configuration is done using the E-SBC's embedded Web server (hereafter, referred to
as Web interface).
Notes:
•For implementing Microsoft Skype for Business and ITSP SIP Trunk based on the
configuration described in this section, AudioCodes E-SBC must be installed with a
License Key that includes the following software features:
√Microsoft
√SBC
√Security
√DSP
√RTP
√SIP
For more information about the License Key, contact your AudioCodes sales
representative.
•The scope of this interoperability test and document does not cover all security
aspects for connecting the SIP Trunk to the Microsoft Skype for Business
environment. Comprehensive security measures should be implemented per your
organization's security policies. For security recommendations on AudioCodes’
products, refer to the Recommended Security Guidelines document.

AudioCodes Mediant E-SBC 16 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
4.1 Step 1: IP Network Interfaces Configuration
This step describes how to configure the E-SBC's IP network interfaces. There are several
ways to deploy the E-SBC; however, scenario exemplified in this document employs the
following deployment method:
E-SBC interfaces with the following IP entities:
•CCE Mediation server, located on the Corporate DMZ
•ITSP SIP Trunk, located on the Internet DMZ
Physical connection: The type of physical connection to the Corporate depends on the
method used to connect to the Enterprise's network. In this example, E-SBC connects
to the Corporate DMZ and Internet DMZ using dedicated LAN ports
(i.e., two ports and two network cables are used).
E-SBC also uses two logical network interfaces:
•Corporate DMZ (VLAN ID 1)
•Internet DMZ (VLAN ID 2)
Figure 4-1: Network Interfaces in Interoperability Test Topology
Management
Station (OAMP)
Edge/FW ITSP
WAN
Internet DMZ
195.189.192.140
LAN Port LAN Port
Vlan ID 1Vlan ID 2
Mediation Server
10.15.70.83
DC Server
10.15.70.81
Corporate DMZ
10.15.70.88
CMS Server
10.15.70.82

Configuration Note 4. Configuring AudioCodes E-SBC
Version 7.2 17 AudioCodes Mediant E-SBC
4.1.1 Step 1a: Configure VLANs
This step describes how to define VLANs for each of the following interfaces:

Corporate DMZ VoIP (assigned the name "vlan 1")

Internet DMZ VoIP (assigned the name "vlan 2")
To configure the VLANs:
1. Open the Ethernet Device table (Setup menu > IP Network tab > Core Entities folder
> Ethernet Devices).
2. There will be one existing row for VLAN ID 1 and underlying interface GROUP_1.
3. Add another VLAN ID 2 for the WAN side as follows:
Parameter Value
Index 1
VLAN ID 2
Underlying Interface GROUP_2 (Ethernet port group)
Name vlan 2
Tagging Untagged
Figure 4-2: Configured VLAN IDs in Ethernet Device

AudioCodes Mediant E-SBC 18 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
4.1.2 Step 1b: Configure IP Network Interfaces for LAN and WAN
This step describes how to configure the IP network interfaces for each of the following
interfaces:
Corporate DMZ VoIP (assigned the name "LAN_IF")
Internet DMZ VoIP (assigned the name "WAN_IF")
To configure the IP network interfaces:
1. Open the IP Interfaces table (Setup menu > IP Network tab > Core Entities folder >
IP Interfaces).
2. Configure the interface as follows:
IP Interface Specific Configuration
Name
Application Type
IP Address
Prefix
Length
Default
Gateway
Primary
DNS
Ethernet
Device
Interfacing with
Corporate DMZ LAN_IF
OAMP + Media +
Control 10.15.70.88 16 10.15.0.1 10.15.28.1 vlan 1
Interfacing with
Internet DMZ
WAN_IF
Media + Control
195.189.192.141
25
195.189.192.129
8.8.8.8 vlan 2
3. Click Apply. The configured IP network interfaces are shown below:
Figure 4-3: Configured Network Interfaces in IP Interfaces Table

Configuration Note 4. Configuring AudioCodes E-SBC
Version 7.2 19 AudioCodes Mediant E-SBC
4.2 Step 2: Enable the SBC Application
This step describes how to enable the SBC application.
To enable the SBC application:
1. Open the Applications Enabling page (Setup menu > Signaling & Media tab > Core
Entities folder > Applications Enabling).
Figure 4-4: Enabling SBC Application
2. From the 'SBC Application' drop-down list, select Enable.
3. Click Apply.
4. Reset the E-SBC with a burn to flash for this setting to take effect (see Section 4.17 on
page 54).

AudioCodes Mediant E-SBC 20 Document #: LTRT-28160
Mediant CCE Appliance & Mediant SBC
4.3 Step 3: Configure Media Realms
This step describes how to configure Media Realms. The simplest configuration is to create
two Media Realms - one for internal (LAN) traffic and one for external (WAN) traffic.
To configure Media Realms:
1. Open the Media Realms table (Setup menu > Signaling & Media tab > Core Entities
folder > Media Realms).
2. Add a Media Realm for the LAN interface. You can use the default Media Realm
(Index 0), however modify it as shown below:
Parameter Value
Index 0
Name MRLan (descriptive name)
IPv4 Interface Name LAN_IF
Port Range Start 6000 (represents lowest UDP port number used for
media on LAN)
Number of Media Session Legs 100 (media sessions assigned with port range)
Figure 4-5: Configuring Media Realm for LAN