AudioCodes E-SBC User manual

User's Manual
AudioCodes Series of Gateways & Session Border Controllers
Mediant 1000B Gateway
and E-SBC
Version 7.2

Notice Mediant 1000 Gateway & E-SBC | User's Manual
Notice
Information contained in this document is believed to be accurate and reliable at the time of
printing. However, due to ongoing product improvements and revisions, AudioCodes can-
not guarantee accuracy of printed material after the Date Published nor can it accept
responsibility for errors or omissions. Updates to this document can be downloaded from
https://www.audiocodes.com/library/technical-documents.
This document is subject to change without notice.
Date Published: April-29-2019
WEEE EU Directive
Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed of with
unsorted waste. Please contact your local recycling authority for disposal of this product.
Customer Support
Customer technical support and services are provided by AudioCodes or by an authorized
AudioCodes Service Partner. For more information on how to buy technical support for AudioCodes
products and for contact information, please visit our website at
https://www.audiocodes.com/services-support/maintenance-and-support.
Documentation Feedback
AudioCodes continually strives to produce high quality documentation. If you have any comments
(suggestions or errors) regarding this document, please fill out the Documentation Feedback form
on our website at https://online.audiocodes.com/documentation-feedback.
Stay in the Loop with AudioCodes
Notes and Warnings
The device is an indoor unit and therefore, must be installed only INDOORS.
The scope of this document does not fully cover security aspects for deploying the
device in your environment. Security measures should be done in accordance with your
organization’s security policies. For basic security guidelines, refer to the
Recommended Security Guidelines document.
- ii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
Throughout this manual, unless otherwise specified, the term device refers to your
AudioCodes product.
Before configuring the device, ensure that it is installed correctly as instructed in the
Hardware Installation Manual.
OPEN SOURCE SOFTWARE. Portions of the software may be open source software
and may be governed by and distributed under open source licenses, such as the terms
of the GNU General Public License (GPL), the terms of the Lesser General Public
License (LGPL), BSD and LDAP , which terms are located at
https://www.audiocodes.com/services-support/open-source and all are incorporated
herein by reference. If any open source software is provided in object code, and its
accompanying license requires that it be provided in source code as well, Buyer may
receive such source code by contacting AudioCodes, by following the instructions
available on AudioCodes website.
●Some of the features described in this document are licensed features and are
available only if the installed License Key contains these features.
●This device includes software developed by the OpenSSL Project for use in the
OpenSSL Toolkit (http://www.openssl.org/ ).
●This device includes cryptographic software written by Eric Young
([e-mail]).
Related Documentation
Document Name
SBC-Gateway-MSBR Series Release Notes
Mediant 1000B Gateway and E-SBC Hardware Installation Manual
Complementary Guides
CLI Reference Guide
IP-based Voice Mail Configuration Note
SNMP User's Guide
SBC Design Guide
Recommended Security Guidelines Configuration Note
Syntax for SIP Message Manipulation Reference Guide
CAS Protocol Table Configuration Note
- iii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
Document Name
Utility Guides
INI Viewer & Editor Utility User's Guide
DConvert User's Guide
CLI Wizard User's Guide
Document Revision Record
LTRT Description
27041 Initial document release for Version 7.2.
27043 ■Updated to path version 7.20A.001.
■Updated sections: Computer Requirements (browser support);
Accessing the Web Interface (autocompletion); Areas of the GUI
(illustration); Searching for Configuration Parameters (IP address
removed); CLI-Based Management (permissible user levels);
Configuring TLS Certificate Contexts (TLS version); Configuring
Physical Ethernet Ports (show command); Configuring Underlying
Ethernet Devices (max. VLANs); InterfaceTable_InterfaceName; SIP
Signaling Messages; First Incoming Packet Mechanism (by Signaling);
Viewing IDS Alarms (show command); Viewing and Deleting DHCP
Clients (show command); Configuring the Device's LDAP Cache;
Centralized Third-Party Routing Server (SIP messages, credentials for
authentication); Configuring the SEM Server (port removed);
Configuring Call Setup Rules (dial plan query); Call Setup Rule
Examples; Three-Way Conferencing; Registration Refreshes; Enabling
Interworking of SIP and SIP-I Endpoints (SPIROU, SIP header X-AC-
Action); Configuring BroadSoft's Shared Phone Line Call Appearance
for Survivability (procedure); User Information File; Automatic
Provisioning (CLI Script file); Configuring RTCP XR (media segment,
publication IP Group); Enabling Same Call Session ID over Multiple
Devices (removed); FXS Line Testing (removed).
■New sections: Utilizing Gateway Channel Resources for SBC; Using
Dial Plan Tags for IP-to-IP Routing (procedure); Using Dial Plan Tags
for Call Setup Rules; Using Dial Plan Tags for Message Manipulation.
■Updated parameters: Web password; TLSContexts_TLSVersion;
IPGroup_MediaRealm (Web name); CallSetupRules_
AttributesToQuery (Web name); IPProfile_SBCRTCPFeedback;
IpProfile_MediaIPVersionPreference; ForwardOnBusyTrunkDest_
ForwardDestination; ConditionTable_Name (max. chars); Test_Call_
RouteBy (default); CLIPrivPass; NATMode (NAT by Signaling);
SendAcSessionIDHeader (removed); QOEPort (removed);
MaxGeneratedRegistersRate; EnableTCPConnectionReuse (Web
name); RTCPXRESCTransportType (removed); RTCPXREscIP
(removed); RTCPXRReportMode; PublicationIPGroupID;
SBCUserRegistrationGraceTime; SBCKeepOriginalCallId.
- iv -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■New parameters: IPGroup_SBCKeepOriginalCallID; IPGroup_
SBCDialPlanName; IPGroup_CallSetupRulesSetId;
CallSetupRules_QueryType; CallSetupRules_QueryTarget; IpProfile_
SBCISUPVariant; WebLoginBlockAutoComplete;
EnforcePasswordComplexity; AUPDCliScriptURL;
GeneratedRegistersInterval.
27045 ■Updated sections: Changing Index Position of Table Rows; Changing
Index Position of Table Rows (IPSec removed); Enabling the HTTP
Proxy Application (license); FXS/FXO Coefficient Types (REN); Direct
Media; Configuring SBC IP-to-IP Routing (IP Group load balancing);
MAC Address Placeholder in Configuration File Name; Technical
Specifications (AMR-WB removed).
■New sections: Configuring IP Group Sets.
■Updated parameters: SIPInterface_SBCDirectMedia; IPProfile_
SBCDirectMediaTag; IpProfile_DisconnectOnBrokenConnection;
IP2IPRouting_DestType; IPOutboundManipulation_
PrivacyRestrictionMode; BrokenConnectionEventTimeout.
■New parameters: IP2IPRouting_IPGroupSetName; EnableNonCallCdr;
PGroupSet; IPGroupSetMember; NoRTPDetectionTimeout.
27047 ■Patch version 7.20A.100.
■Updated sections: CLI (telnet removed); Areas of the GUI (SBC
Wizard); Assigning Rows from Other Tables (search, add new, and
view); Invalid Value Indications; Creating a Login Welcome Message;
Configuring Management User Accounts (CLI); Enabling SSH with
RSA Public Key for CLI (public key); Configuring TLS Certificate
Contexts (DTLS); Assigning CSR-based Certificates to TLS Contexts;
Generating Private Keys for TLS Contexts; SRTP using DTLS
Protocol; Building and Viewing your Network Topology; Enabling SIP-
based Media Recording; Configuring SIP Recording Rules; Configuring
Proxy Sets (keep-alive); FXS/FXO Coefficient Types; DID Wink; Pre-
Configured IP Groups; Normal Mode (CRP); Emergency Mode (CRP);
Auto Answer to Registrations (CRP); License Key; Viewing the License
Key; Obtaining License Key for Feature Upgrade (removed); Installing
the a New License Key; Installing License Key through Web Interface;
Upgrading SBC Capacity Licenses by OVOC License Pool; Viewing
Device Information; Viewing Call Routing Status (removed);
Configuring RTCP XR (IP Group); Configuring RADIUS Accounting
(typo for Accounting-Request); Configuring Multi-Line Extensions and
Supplementary Services; Automatic Provisioning (Startup CLI Script
File).
■New sections: Customizing the Web Interface; Replacing the
Corporate Logo; Replacing the Corporate Logo with an Image;
Replacing the Corporate Logo with Text; Customizing the Product
Name; Customizing the Favicon; SRTP using DTLS Protocol; SBC
Wizard; Viewing the Device's Product Key; Saving Configuration to a
File; Loading a Configuration File; Viewing Proxy Set Status; Local
Handling of BRI Call Forwarding.
- v -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated parameters: TLSContexts_ServerCipherString; TLSContexts_
ClientCipherString; NATTranslation_SourceStartPort; NATTranslation_
SourceEndPort; NATTranslation_TargetStartPort; NATTranslation_
TargetEndPort; SNMPSysOid; SNMPTrapEnterpriseOid;
EnableCoreDump (typo); HTTPSCipherString (removed);
SSHAdminKey; SessionExpiresDisconnectTime;
ISDNJapanNTTTimerT3JA; BrokenConnectionEventTimeout;
RADIUSRetransmission (default); RadiusTO (default).
■New parameters: WebUsers_SSHPublicKey; TLSContexts_
DTLSVersion; TLSContexts_DHKeySize; ProxySet_
SuccessDetectionRetries; ProxySet_SuccessDetectionInterval;
ProxySet_FailureDetectionRetransmissions; ProxySet_
MinActiveServersLB; WebUsers; WebFaviconFileUrl;
ISDNSuppServ_CFB2PhoneNumber; ISDNSuppServ_
CFNR2PhoneNumber; ISDNSuppServ_CFU2PhoneNumber;
ISDNSuppServ_NoReplyTime; AUPDStartupScriptURL;
BRICallForwardHandling.
27050 ■Updated sections: Configuring VoIP LAN Interface for OAMP
(Web/CLI); Configuring Management User Accounts (typo); Enabling
SNMP; Configuring Physical Ethernet Ports (ports); Configuring
Ethernet Port Groups (0/3); Configuring IP Network Interfaces;
Configuring LDAP Servers (max. and cache); Configuring Call Setup
Rules; Alternative Routing Based on IP Connectivity (Busy Out);
Alternative Routing Based on SIP Responses (Busy Out); Fixed
Mapping of SIP Response to ISDN Release Reason; Fixed Mapping of
ISDN Release Reason to SIP Response; Configuring SBC IP-to-IP
Routing (note); Configuring SIP Response Codes for Alternative
Routing Reasons; Configuring Charge Codes; SBC Wizard (screens);
Auxiliary Files (SBC Wizard); Viewing IP Connectivity (typo); Creating
Core Dump and Debug Files upon Device Crash (reset); Technical
Specifications (Eth interfaces)
■New sections: Debugging Remote HTTP Services
- vi -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated parameters: IpProfile_SBCUseSilenceSupp (removed):
SIPRecRouting_SRSIPGroupName; SIPInterface_InterfaceName
(max. char); ProxySet_ProxyName (max. char);
MessageManipulations_ManipulationName (max. char);
MessagePolicy_Name (max. char); AllowedAudioCodersGroups_
Name (max. char); AllowedVideoCodersGroups_Name (max. char);
TelProfile_ProfileName (max. char); PREFIX_RouteName (max. char);
GWRoutingPolicy_Name; PstnPrefix_RouteName (max. char); _
ManipulationName (max. char); SBCAdmissionControl_
AdmissionControlName (max. char); Classification_
ClassificationName (max. char); IP2IPRouting_RouteName (max.
char); SBCRoutingPolicy_Name (max. char); IPGroupSet_Name (max.
char); IPInboundManipulation_ManipulationName (max. char);
IPOutboundManipulation_ManipulationName (max. char); TelProfile_
ECNlpMode (2 removed); SBCAdmissionControl_Rate; EnableWe-
bAccessFromAllInterfaces; ResetWebPassword; DisableSNMP;
EnableCoreDump; SSHMaxLoginAttempts;
IgnoreAlertAfterEarlyMedia; EnableBusyOut; ECNLPMode;
ISDNInCallsBehavior (defaults); SecureCallsFromIP (note);
AltRoutingTel2IPEnable (note); ProtocolType (BRI removed);
EnablePulseDialDetection (removed)
■New parameters: HTTPProxySyslogDebugLevel; ChargeCode_
ChargeCodeName
27052 ■Updated with patch version 7.20A.150.
■Updated sections: Areas of the GUI (Configuration Wizard button);
Enabling Disabling SNMP; Viewing Certificate Information (screen);
Assigning Externally Created Private Keys to TLS Contexts (pass-
phrase); Generating Private Keys for TLS Contexts (pass-phrase);
Importing Certificates into Trusted Certificate Store (bulk import);
Configuring Underlying Ethernet Devices (MTU); Configuring Firewall
Settings (note); SIP-based Media Recording (max.); Configuring
Remote Web Services (QoS routing); Centralized Third-Party Routing
Server (QoS); Configuring Proxy Sets; Configuring CAS State
Machines (note); Alternative Routing Based on IP Connectivity;
Configuring SBC IP-to-IP Routing; Configuring IP Group Sets (dial plan
tags); Configuring Dial Plans; Software Upgrade; Installing License Key
through Web Interface; Upgrading SBC Capacity Licenses by OVOC
License Pool; WizardSBC Configuration Wizard; Configuring RADIUS
Accounting (typo); Configuring DTMF Tones for Test Calls; Configuring
Basic Test Calls; Configuring SBC Test Call with External Proxy
(removed); Channel Capacity.
■New sections: Configuring QoS-Based Routing by Routing Server;
Microsoft Skype for Business Presence of Third-Party Endpoints;
Registrar Stickiness; Configuring Pre-Parsing Manipulation Rules;
Configuring Private Wire Interworking; Configuring Rerouting of Calls to
Fax Destinations; Using Dial Plan Tags for Routing Destinations; FXS
Line Testing; Disconnecting and Reconnecting HA; Viewing the
License Key; Viewing the Device's Product Key; Debugging Web
Services.
- vii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated parameters: AccessList_Source_IP; AccessList_Source_
Port; AccessList_Start_Port; AccessList_End_Port;
HTTPRemoteServices_HTTPType (option 5); IPGroup_
SBCDialPlanName (note); ProxySet_IsProxyHotSwap; ProxyIp_
IpAddress; IpProfile_SBCRemoteReferBehavior (4); IpProfile_
SBCPlayHeldTone; IP2IPRouting_Trigger (6); IP2IPRouting_DestType
(12); DialPlanRule_Tag; SBCCDRFormat_FieldType (818); Test_Call_
RouteBy; Test_Call_Play (tone); KeepAliveTrapPort (default);
SBCtestID (removed); ProxyIPListRefreshTime;
RegistrationRetryTime (note); EnableReansweringINFO;
EnablePChargingVector (note); EnableTDMoverIP (2);
EnableSBCApplication (default).
■New parameters: DeviceTable_MTU; SRD_SBCDialPlanName;
SIPInterface_PreParsingManSetName; IPGroup_Tags; Account_
RegistrarStickiness; Account_RegistrarSearchMode; Account_
RegEventPackageSubscription; IpProfile_SBCFaxReroutingMode;
IP2IPRouting_RoutingTagName; IP2IPRouting_InternalAction;
IPGroupSet_Tags; CustomerSN; MaxRegistrationBackoffTime;
MaxSDPSessionVersionId; UseRandomUser; UnregisterOnStartup;
PresencePublishIPGroupId; EnableMSPresence;
PreParsingManipulationSets; PreParsingManipulationRules;
HookFlashFromMediaIP; MWINotificationTimeout;
EnableTDMOverIPforTrunk; CASOrientedBoard;
RoutingServerQualityStatus; RoutingServerQualityStatusRate;
TelProfile_MWINotificationTimeout.
27053 ■Updated with patch Version 7.20A.152.
■Updated sections: Configuring the LDAP Search Filter Attribute (Web
path); Enabling LDAP Searches for Numbers with Characters;
Microsoft Skype for Business Presence of Third-Party Endpoints;
Configuring the Device for Skype for Business Presence (example);
Configuring Media Realm Extensions; Configuring SBC IP-to-IP
Routing (back to the sender); Prerecorded Tones File; Loading a
Configuration File (note)
■Updated parameters: SNMPReadOnlyCommunityString (max. chars);
SNMPReadWriteCommunityString (max. chars);
SNMPTrapCommunityString (max. chars); MediaRealmExtension_
IPv4IF; MediaRealmExtension_IPv6IF; ProxySet_
EnableProxyKeepAlive; PstnPrefix_SourceAddress;
SIPSDPSessionOwner; AddPrefix2ExtLine
■New parameters: IPGroup_SBCUserStickiness; IPProfile_
LocalRingbackTone; IPProfile_LocalHeldTone
27055 ■Updated with patch Version 7.20A.154.007
■Updated sections: Silence Suppression (removed); Fax / Modem
Transparent Mode (silnce suppression removed); Configuring SIP
Recording Rules (view sessions in CLI); Centralized Third-Party
Routing Server (call preemption added); Pre-empting Existing Calls for
E911 IP-to-Tel Calls; Locking and Unlocking the Device (typos);
Viewing Active Alarms (max display); Technical Specifications (FXS)
- viii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■New sections: Configuring Additional Management Interfaces;
Configuring Specific UDP Ports using Tag-based Routing
■Updated parameters: WebUsers_Password (note); InterfaceTable_
ApplicationTypes; ProxySet_SuccessDetectionRetries (max);
ProxySet_SuccessDetectionInterval (max); Account_
RegistrarSearchMode (phys link); AudioCoders_Sce (global parameter
removed); IpProfile_SCE (removed); IpProfile_
SBCRemoteReferBehavior (new option 5); IPProfile_
SBCRemoteHoldFormat (new option 6); IP2IPRouting_InternalAction;
SBCCDRFormat_Title (max. char.); WebUsers (CLI name); EnableWe-
bAccessFromAllInterfaces; FaxBypassPayloadType;
ModemBypassPayloadType; EnableSilenceCompression (removed)
■New parameters: SIPInterface_AdditionalUDPPorts; IPProfile_
SBCSupportMultipleDTMFMethods; AdditionalManagementInterfaces;
EnableWebAccessFromAllInterfaces; DefaultTerminalWindowHeight;
ActiveAlarmTableMaxSize; SBCRe-
moveSIPSFromNonSecuredTransport
27056 ■Updated with patch Version 7.20A.156.009
■Updated sections: Configuring Management User Accounts; Device
Located behind NAT; Configuring a Static NAT IP Address for All
Interfaces (removed); Configuring an HTTP-based OVOC Service;
Configuring the OVOC Server (note re report mode); Configuring Call
Setup Rules (ENUM); Call Setup Rule Examples (e.g., 5); Interworking
SIP Early Media (figure); Prerecorded Tones File; Automatic
Configuration Methods; DHCP-based Provisioning (note re resets);
Viewing Device Status on Monitor Page (analog status)
■New sections: Using the Proprietary SIP X-AC-Action Header;
Provisioning the Device using DHCP Option 160; Enabling SIP Call
Flow Diagrams in OVOC
■Updated parameters: WebUsers_SessionLimit; WebUsers_
SessionTimeout; SRD_BlockUnRegUsers (option 2 updated);
SIPInterface_AdditionalUDPPorts; SIPInterface_
BlockUnRegUsers; IPGroup_SIPConnect; CallSetupRules_
QueryType (OPTION 3); CallSetupRules_QueryTarget;
CallSetupRules_AttributesToQuery; CallSetupRules_Condition;
IpProfile_SBCSDPPtimeAnswer; IpProfile_SBCPreferredPTime;
IpProfile_SBCRemoteRepresentationMode (0 updated);
DialPlanRule_Tag; LoggingFilters_LogDestination (new option 3);
LoggingFilters_CaptureType (new option 6); WebSessionTimeout
(range); StaticNatIP (removed); BriTEIAssignTrigger;
BriTEIRemoveTrigger; EnableSilenceDisconnect;
FarEndDisconnectSilencePeriod; FarEndDisconnectSilenceMethod;
FarEndDisconnectSilenceThreshold; BrokenConnectionDuringSilence;
UseDisplayNameAsSourceNumber; SecureCallsFromIP;
SBCDBRoutingSearchMode; SBCKeepContactUserinRegister
■New parameters: WebUsers_CliSessionLimit; IPGroup_
UserUDPPortAssignment; NoAlarmForDisabledPort;
CallFlowReportMode; DhcpOption160Support
■Miscellaneous: EMS/SEM replaced with One Voice Operations Center
(OVOC) – text and screenshots
- ix -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
27059 ■Updated with Patch Version 7.20A.158
■Updated sections: Replacing the Corporate Logo with an Image (logo
width removed); Replacing the Corporate Logo with Text; Customizing
the Favicon (default); Creating a Login Welcome Message (no reset);
Configuring Secured (HTTPS) Web; Disabling SNMP (reset);
Configuring Underlying Ethernet Devices (Ethernet Output Device
field); Configuring NAT Translation per IP Interface; Configuring Media
(SRTP) Security (validation, no reset); Configuring Invalid RTP Packet
Handling; LDAP-based Management and SIP Services (managed
services); Configuring LDAP Server Groups (managed services);
Configuring Registration Accounts; Configuring Rerouting of Calls to
Fax Destinations; Configuring Call Preemption for SBC Emergency
Calls (note removed); Configuring Call Survivability Mode (path);
Configuring PSTN Fallback; Automatic Update from Remote Servers
(AutoUpdatePredefinedTime); Viewing Gateway CDR History; Viewing
SBC CDR History; CDR Field Description; CDR Fields for SBC
Signaling (removed); Customizing CDRs for Gateway Calls;
Configuring CDR Reporting; Storing CDRs on the Device; Enabling
SIP Call Flow Diagrams in OVOC (note)
■New sections: Restoring the Default Corporate Logo Image;
Customizing the Browser Tab Label; Configuring SNMP for OVOC;
Enabling Same Call Session ID over Multiple Devices
■Updated parameters: LdapServerGroups_ServerType (2);
SIPInterface_AdditionalUDPPorts; IPGroup_AuthenticationMode;
ProxySet_ProxyName (forward slash); IpProfile_TranscodingMode ;
IP2IPRouting_DestType (note); IP2IPRouting_DestIPGroupName
(note); GWCDRFormat_FieldType (442); SBCCDRFormat_FieldType
(442, 635); TelnetServerEnable; DisableSNMP; EnableLanWatchDog
(removed); CDRLocalMaxFileSize (name change, max.);
CDRLocalMaxNumOfFiles (name change); CDRLocalInterval (name
change); SyslogOptimization (def); EnableMediaSecurity (no reset);
EnableBusyOut (cable disconnect removed); TrunkLifeLineType
(description); LifeLineType
■New parameters: Account_RegByServedIPG; Account_
UDPPortAssignment; IpProfile_SBCAd-
aptRFC2833BWToVoiceCoderBW; TimeZoneFormat;
CallDurationUnits; SendAcSessionIDHeader; SRTPTun-
nelingValidateRTPRxAuthentication; SRTPTun-
nelingValidateRTCPRxAuthentication; RTPFWInvalidPacketHandling;
RtpFWNonConfiguredPTHandling
■Miscellaneous: New AudioCodes logo; '.content' removed fom
manipulation syntax
27061 ■Updated to Patch Version 7.20A.200.019
- x -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated Sections: Default OAMP IP Address; Configuring
Management User Accounts (max.); Assigning CSR-based Certificates
to TLS Contexts (SAN); Creating Self-Signed Certificates for TLS
Contexts (SAN); DNS; Configuring Remote Web Services (Capture
removed); HTTP-based Proxy Services; Debugging Remote HTTP
Services; Configuring an HTTP-based OVOC Service; Configuring
User Information; Configuring SBC User Info Table from a Loadable
File; Configuring SIP Message Manipulation (max.); Configuring Tel-to-
IP Routing Rules (dial plan tags); Configuring IP-to-Tel Routing Rules
(sorce IP Group); Interworking Media Security Protocols; Utilizing
Gateway Channel Resources for SBC; Enabling the SBC Application
(removed); Configuring Admission Control; Enabling the CRP
Application (removed); Auxiliary Files (User Info): User Information File;
Viewing the License Key; Upgrading SBC Capacity Licenses by OVOC
License Pool; Restoring Factory Defaults through CLI (keep-network);
Viewing Active Alarms (refresh and order); Viewing History Alarms
(refresh and order); Viewing Proxy Set Status (name); Configuring
RTCP XR (note); Configuring Reporting of Management User Activities
(select all); Configuring Test Call Endpoints (max.)
■New Sections: Configuring Default DNS Servers; Configuring a DNS
Server for HTTP Services; Configuring HTTP Proxy Servers;
Configuring HTTP Locations; Configuring TCP/UDP Proxy Servers;
Configuring Upstream Groups; Configuring Upstream Hosts;
Configuring HTTP Directive Sets; Configuring HTTP Directives;
Troubleshooting NGINX; Using Dial Plans for IP-to-Tel or Tel-to-IP Call
Routing; Configuring MoH from External Audio Source; Configuring
SBC MoH from External Media Source; Saving and Loading an ini
Configuration to a File; Viewing IDS Active Blacklist; Saving and
Loading a Configuration Package File
■Updated Parameters: WebUsers_SessionLimit (max/def);
HTTPRemoteServices_HTTPType (Capture removed);
CallSetupRules_AttributesToQuery; CallSetupRules_Condition;
CallSetupRules_ActionSubject; CallSetupRules_ActionValue;
MessageManipulations_MessageType; MessageManipulations_
Condition; MessageManipulations_ActionValue; ConditionTable_
Condition; PreParsingManipulationRules_MessageType;
PreParsingManipulationRules_ReplaceWith; AudioCoders_Sce;
IpProfile_SBCMediaSecurityMethod (2 removed); IPProfile_
SBCRemoteHoldFormat; IPProfile_ReliableHoldToneSource;
IpProfile_SBCPlayHeldTone; IP2IPRouting_InternalAction; TelProfile_
IP2TelCutThroughCallBehavior (3); MaliciousSignatureDB_Pattern;
SSHServerEnable (def); IsCiscoSCEMode (Gateway);
NoRTPDetectionTimeout; SBCAdmissionControl (removed);
DialPlanRule; HTTPProxySyslogDebugLevel (options);
MediaChannels
- xi -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■New Parameters: SRD_AdmissionProfile; MessageManipulations_
ActionSubject SIPInterface_AdmissionProfile; IPGroup_
AdmissionProfile; PREFIX_DestTags; PREFIX_SrcTags; PstnPrefix_
SrcTags; PstnPrefix_DestTags; SBCAdmissionRule_
MaxBurstPerUser; Rate Per User; GWUserInfoFileUrl;
SBCUserInfoFileUrl; UserInfoFileURL; ConfPackageURL;
DefaultPrimaryDnsServerIp; DefaultSecondaryDnsServerIp;
MaxStreamingCalls; GWUserInfoTable; Tel2IPDialPlanName;
IP2TelDialPlanName; SBCAdmissionProfile; SBCAdmissionRule;
SBCUserInfoTable; ExternalMediaSource; HTTPPrimaryDNS;
HTTPSecondaryDNS; HTTPServer; HTTPLocation; TcpUdpServer;
UpstreamGroup; UpstreamHost; HTTPDirectiveSets;
HTTPDirectives; OVOCService; MaxStreamingCalls
27062 ■Updated to Patch Version 7.20A.200.112
■Updated Sections: Accessing the Web Interface (remember me);
Configuring Additional Management Interfaces (CLI removed);
Configuring TLS Server Certificate Expiry Check
(acCertificateExpiryAlarm); Fax / Modem NSE Mode (Gateway only);
Building and Viewing SIP Entities in Topology View (access via logo);
Remotely Resetting Device using SIP NOTIFY (SBC also); Locking
and Unlocking the Device (cancel); License Key (floating); Viewing the
License Key (floating / Device Type / License Server Status / Remote
License Server Status – deleted / Remote License Server IP – deleted);
Local License Key; SBC Capacity Licenses from Fixed License Pool;
Saving and Loading an ini File (License Key of Redundant); Saving and
Loading a Configuration Package File (SFTP); Triggers for Automatic
Update (NOTIFY for SBC also); Viewing Active Alarms (format);
Viewing History Alarms (format); CDR Field Description (Alerting Time
[443]); Patterns for Denoting Phone Numbers and SIP URIs
■New Sections: Remotely Disconnecting Calls using SIP NOTIFY; SBC
Capacity Licenses from Floating License; Applying Downloaded ini File
after Graceful Timeout; Debug Recording on VoIP Interfaces
- xii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated Parameters: SNMPUsers_PrivProtocol (4 and 5 removed);
InterfaceTable_InterfaceName (default); "Prefix" replaced with
"Pattern" for Web parameters and CLI commands and descriptions
updated; CpMediaRealm_MediaRealmName (range); CpMediaRealm_
PortRangeStart (note); MediaRealmExtension_PortRangeStart (note);
SIPInterface_UDPPort (note); SIPInterface_TCPPort (note);
SIPInterface_TLSPort (note); SIPInterface_AdditionalUDPPorts (note);
IPGroup_ContactUser (val); IPGroup_Username (max. val); Account_
ContactUser (max. val); GWUserInfoTable_Username (max. val);
SBCUserInfoTable_LocalUser (max value); SBCUserInfoTable_
Username (max. val); IpProfile_SBCMediaSecurityMethod (Both value
added); IpProfile_SBCRemoteUpdateSupport (option 3 added);
TrunkGroupSettings_ContactUser (max. val); PstnPrefix_
SourceAddress (asterisk); ISDNSuppServ_UserId (max val);
SBCAdmissionRule_RequestType; IP2IPRouting_DestType (Internal
rules); GWCDRFormat_FieldType (443); SBCCDRFormat_FieldType
(443); Test_Call_UserName (max. values); Test_Call_Play (note
removed); UserName (max. val); EnableForward; UseRandomUser
(description); MgmtUseLocalUsersDatabase (description);
EnableSIPRemoteReset; SBCRandomizeExpires (description);
TLSExpiryCheckStart; MediaChannels
■New Parameters: IpProfile_SBCRemoveUnKnownCrypto;
DisableDualImageFeature; AdminStateLockControl;
EnableFloatingLicense; AllocationProfile; AllocationRegisteredUsers;
AllocationMediaSessions; AllocationSignalingSessions;
LimitRegisteredUsers; LimitMediaSessions; LimitSignalingSessions;
LimitTranscodingSessions; AupdGracefulShutdown; RetryAfterMode;
SIPDigestAuthorizationURIMode
27063 ■Updated to Patch Version 7.20A.204.015
■Updated Sections: TLS for SIP Clients (no reset); First Incoming
Packet Mechanism; Configuring TLS for SIP; Enabling IDS (no reset);
Configuring Proxy Sets; Configuring Call Setup Rules (max.);
Supported Audio Coders (G.722); Alternative Routing Based on SIP
Responses; Advice of Charge Services for Euro ISDN; Configuring
Charge Codes; Classification and Routing of Registered Users;
Configuring Call Preemption for SBC Emergency Calls; Configuring
Firewall Allowed Rules; Locking and Unlocking the Device (TLS
sockets); SBC Capacity Licenses from Floating License; Viewing
Average Call Duration; Event Representation in Syslog Messages;
Creating Core Dump and Debug Files upon Device Crash
■New Sections: Configuring CSRF Protection; Configuring Firewall
Rules to Allow Incoming OVOC Traffic; Configuring an HTTP GET Web
Service; Configuring Classification Based on Tags; Viewing Floating
License Reports; Configuring CDR Reporting to REST Server
- xiii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated Parameters: EtherGroupTable_Mode; HTTPRemoteServices_
HTTPType (8); HTTPRemoteServices_Policy;
HTTPRemoteServices_PersistentConnection;
HTTPRemoteServices_NumOfSockets (removed);
HTTPRemoteServices_LoginNeeded (removed); IPGroup_Tags;
ProxySet_EnableProxyKeepAlive; ProxySet_ProxyRedundancyMode;
ProxySet_IsProxyHotSwap; ProxySet_ProxyLoadBalancingMethod;
ProxySet_DNSResolveMethod; CallSetupRules_RulesSetID;
CallSetupRules_QueryType (4); CallSetupRules_QueryTarget;
TelProfile_EnableDigitDelivery (no reset); IPGroupSet_Tags;
IPOutboundManipulation_SrcTags; TelnetServerIdleDisconnect;
SNMPEngineIDString; NATMode (4); SIPSRequireClientCertificate (no
reset); EnableIDS (no reset); EnableDigitDelivery2IP (no reset);
IdleABCDPattern; EnableSIPRec (removed); IpProfile_
SBCRFC2833Behavior; IpProfile_SBCAlternativeDTMFMethod
■New Parameters: HTTPRemoteServices_BetweenGroupsPolicy;
AdditionalUDPPortsMode; SIPInterface_CallSetupRulesSetId;
ProxyKeepAliveUsingIPG; ProxyIp_Priority; ProxyIp_Weight;
ChargeCode_Currency; ChargeCode_Multiplier; Classification_
IPGroupSelection; Classification_IpGroupTagName; AdminState;
AdminStateRestrictConnections; CSRFProtection;
RestCdrReportLevel; RestCdrHttpServer; SSHRedundantProxyPort;
AdditionalOutOfBandDtmfFormat; ISDNAoCAmountPerInterval;
ISDNAoCMinIntervalGeneration; SBCURICom-
parisonExcludedParams; SbcRoutingTimeout; HTTPRemoteHosts_
GroupID; HTTPRemoteHosts_PriorityInGroup
27064 ■Updated to Patch Version 7.20A.204.108
■Updated Sections: Enabling SSH with RSA Public Key for CLI (Admin
key removed); Interfaces Table Configuration Guidelines (31); Device
Located behind NAT; Configuring Firewall Rules to Allow Incoming
OVOC Traffic (note); Enabling the User Info Table; Configuring SBC
User Information (note); Call Setup Rule Examples (ENUM); Using the
Proprietary SIP X-AC-Action Header (REFER); Configuring Voice Mail;
Call Processing of SIP Dialog Requests; RADIUS-based Management
User Authentication (CLI); Enabling LDAP-based Web/CLI User Login
Authentication and Authorization; Media Cluster (time); Collecting
Debug Recording Messages; Viewing SBC Registered Users;
Interworking SIP Diversion and History-Info Headers
■New Sections: Configuring a Static NAT IP Address for All Interfaces
(returned)
- xiv -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated Parameters: WebUsers_Password (\); WebUsers_
SSHPublicKey; InterfaceTable_PrefixLength (31); InterfaceTable_
Gateway; IPGroup_AuthenticationMode; IPGroup_Username;
IPGroup_Password; ProxySet_ProxyRedundancyMode (note);
CallSetupRules_QueryType (ENUM address); CallSetupRules_
QueryTarget (ENUM); IpProfile_SBCRemoteReferBehavior;
IP2IPRouting_DestType (note); SSHAdminKey (removed);
SSHRequirePublicKey; BriTEIConfigP2P_x; BriLayer2Mode;
BriTEIConfigP2MP_x; BriTEIAssignTrigger_x; BriTEIRemoveTrigger_
x; DisableICMPUnreachable; IpProfile_SBCISUPBodyHandling (new
value); LogoWidth (removed); GWInboundManipulationSet;
GWOutboundManipulationSet
■New Parameters: StaticNatIP; ISDNIgnore18xWithoutSDP;
ISDNSendProgressForTE; ForceGenerateToTag; LdapConfiguration_
NoOpTimeout
27066 Updated for software update Version 7.20A.250.
■Updated sections: Alternative Routing Based on SIP Responses (806
updated); CDR Field Description (SIP Local/Remote Tag); CLI-Based
Management (user levels); Configuring Charge Codes (CLI command);
Accessing Web (Log In button name); Configuring Management User
Accounts (user level descriptions); Configuring Media (SRTP) Security
(AES-256); Configuring Media Realms (max); Configuring SIP
Recording Rules (note for SRTP-SRTP recording); Configuring the
Internal DNS Table (note); Configuring the Internal SRV Table (max);
Configuring Default DNS Servers; Configuring the Trunk Group
Settings Table (max); Event Detection and Notification using X-Detect
Header (note re CPT); HTTP Proxy Parameters (CLI); Prerecorded
Tones File ("acUserDefine" and description); Restoring Factory
Defaults through Web Interface (check box name); Three-Way
Conferencing (3WayConfNoneAllocateablePorts added); Viewing
Device Information (device uptime format);WebRTC (sessions);
Configuring Trunk Groups (max); Configuring HTTP Directive Sets
(values changed of limit_conn and limit_rate); File Location for
Automatic Update (username-password); Configuring Source-
Destination Number Manipulation Rules (TON-NPI)
■New sections: onfiguring a Public IP Address for NGINX NAT
Traversal; Configuring SIP Response Codes to Exclude from IDS;
Configuring the Best Impedance Level; Debugging PSTN Calls through
CLI; Displaying Line Impedance Test Results; FXO Line Impedance
Matching Testing; Running the Line Impedance Test
- xv -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■Updated parameters: CliScriptURL (typo); CLIStartupScriptUrl (typo);
AccessList_Protocol ("sip" removed); IDSRule_Reason (CAC,
exclusion of SIP cause codes); IPGroup_SIPConnect (options and
descriptions); IPGroup_MethodList ("setup-invite"); IpProfile_
SBCRemote3xxBehavior (new options 3 and 4); IPProfile_
LocalRingbackTone (PRT userdefine); IPProfile_LocalHeldTone (PRT
userdefine); LoggingFilters_CaptureType (option 7 added, note added
for option 4); WebUsers_PwAgeInterval (description and note);
ProxySet_ClassificationInput (note); ProxySet_ClassificationInput
(note and example); ProxySet_DNSResolveMethod (max. hostnames);
ProxyIp_IpAddress (note for IP addresses); HTTPRemoteServices_
KeepAliveTimeOut (description and note removed); RTCPInterval (Web
name changed); SIPInterface_PreClassificationManipulationSet (note if
classification fails); GWCDRFormat_FieldType (445 and 446 added);
SBCCDRFormat_FieldType (445 and 446 added);
GWInboundManipulationSet (CLI); GWOutboundManipulationSet (CLI);
NTPServerUTCOffset (range); UdpPortSpacing (default);
T38FaxMaxBufferSize (default); VQMonEnable (reset M1K);
NumOfSubscribes (note removed); SBCServerAuthMode (note re
IPGroup_TypeSBCServerAuthType); SRTPofferedSuites (AES-256);
TDMBusFallbackClock (removed); TelnetServerEnable (note);
AUPDDigestUsername (removed); AUPDDigestPassword (removed);
EnablePulseDialGeneration (removed); PulseDialGenerationBreakTime
(removed); PulseDialGenerationMakeTime (removed); PulseDi-
alGenerationInterDigitTime (removed); Account_RegistrarStickiness;
IP2IPRouting_RequestType (note); ActivityListToLog (ard removed)
■New parameters: CallSetupRules_RulesSetName; IPGroup_
TypeSBCServerAuthType; IPGroup_OAuthHTTPService; Account_
AccountName; SBCAlternativeRoutingReasons_AltReasonName;
PPreferredIdListMode; HttpProxyGlobalAddress; NoSdpForIsdnPi;
3WayConfNoneAllocateablePorts (old); DialPlanCSVFileUrl; Account_
ReRegisterOnInviteFailure; AccountInviteFailureTriggerCodes
- xvi -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
27067 ■Updated sections: Areas of the GUI (password on toolbar and
hostname); Assigning CSR-based Certificates to TLS Contexts;
Assigning Externally Created Private Keys to TLS Contexts (Status
field); Assigning IDS Policies (fields renamed); CDR Field Description
(Media List and Call Success added); Centralized Third-Party Routing
Server (Call Forking added); Configuring Call Admission Control (note);
Configuring Basic Test Calls (note); Configuring Call Setup Rules
(HTTP Post Notification); Configuring CDR Filters and Report Level
(CDR End parameters); Configuring Classification Rules (capacity);
Configuring Coder Groups (note re G.729ab); Configuring Dial Plans
(capacity and range); Configuring Ethernet Port Groups (device reset);
Configuring Physical Ethernet Ports (device reset); Configuring
Gateway User Information Table through Web Interface (table name);
Configuring ICMP Messages (parameter names); Configuring IDS
Policies (editable defaults/WebSocket failures); Configuring IP Groups
(capacity); Configuring Management User Accounts; Configuring Media
Realm Extensions (removed); Configuring Password Display in ini File;
Configuring Proxy Sets (edit and capacity); Configuring SBC Routing
Policy Rules (capacity); Configuring SIP Interfaces (capacity);
Configuring SIP Response Codes for Alternative Routing Reasons;
Configuring SNMP Trap Destinations with IP Addresses; Configuring
SRDs (capacity); Configuring Static IP Routes (reset removed);
Configuring Syslog Debug Level (typo); Configuring Test Call
Endpoints; Configuring the Device's LDAP Cache (typo); Configuring
the OVOC Server for QoE (table renamed); Configuring the Syslog
Server Address (path); Configuring TLS Certificate Contexts;
Configuring Trunk Settings; Creating Core Dump and Debug Files upon
Device Crash (note); Creating Self-Signed Certificates for TLS
Contexts (CN); CRP Configuration (note); Customizing CDRs for
Gateway Calls (JSON); Customizing CDRs for SBC Calls and Test
Calls (JSON); Dial Plan (backward compatibility sections removed);
Enabling SIP Call Flow Diagrams in OVOC; Enabling Syslog (path);
Initial Registration Request Processing; Installing a License Key String;
No-Op Packets (DSP note removed); Saving and Loading CLI Script
Files (optional reset); Saving and Loading a Configuration Package File;
Saving and Loading an ini Configuration File; SBC Capacity Licenses
from Floating License (note on ignore licenses); Viewing Gateway CDR
History (test calls removed); Viewing IDS Alarms (WebSocket failures);
Viewing Logged-In User Information; Changing OAMP Address through
Web Interface
■New sections: Changing Login Password by All User Levels;
Configuring a Hostname for the Device; Configuring Password Display
in CLI; Configuring User-Defined Performance Monitoring MIBs;
Configuring Syslog Message Severity Level; Customizing Access
Levels per Web Page; Customizing SNMP Alarm Severity; Exporting
Dial Plans; Idle CLI Session Timeout for RS-232 Connections;
Importing Dial Plans; Miscellaneous CDR Configuration; Syslog
Message Description for CPU Overload; Viewing CDR History of SBC
and Test Calls
- xvii -

Notice Mediant 1000 Gateway & E-SBC | User's Manual
LTRT Description
■New parameters: MatrixCsvFileUrl; IpProfile_
CreatedByRoutingServer; HTTPRemoteServices_LoginNeeded;
HTTPRemoteServices_VerifyCertificateSubjectName; Test_Call_
OfferedCodersGroupName; Test_Call_
AllowedAudioCodersGroupName; Test_Call_AllowedCodersMode;
Test_Call_MediaSecurityMode; Test_Call_PlayDTMFMethod; Test_
Call_MediaSecurityMode; QOESettings_
VerifyCertificateSubjectName; Hostname; ShortCallSeconds;
FXSOffhookTimeoutAlarm; SyslogLogLevel;
CallEndCDRSIPReasonsFilter; CallEndCDRZeroDurationFilter;
KeyPortConfigure; CLIEnableModePassword; CliObscuredPassword
■Updated parameters: CallSetupRules_QueryType (HTTP POST Query
/ HTTP POST Notification); CallSetupRules_QueryTarget (Web name
changed); CallSetupRules_AttributesToQuery (Web name changed);
CallSetupRules_ActionType (None value added); InterfaceTable_
PrefixLength (values); IpProfile_SBCRemoteReferBehavior (Keep URI
(user@host)); IpProfile_AMDMaxPostSilenceGreetingTime (default);
LoggingFilters_Value (Any removed); LoggingFilters_CaptureType
(note added to 2 and 4); WebUsers_Password (note); IP2IPRouting_
DestTyp (Gateway value update); SNMPTrapCom-
munityStringPassword (name change); SNMPReadWriteCom-
munityStringsPassword (name change);
SNMPReadOnlyCommunityStringsPassword (name change); Test_
Call_RouteBy (Tel-to-IP removed); Test_Call_DestTransportType
(SCTP added); Test_Call_PlayDTMFMethod (In Band value); Test_
Call_Play (PRT and NetAnn); QOESettings (parameters renamed);
TLSContexts_ServerCipherString (default); TLSContexts_
ClientCipherString (default); ProgressIndicator2ISDN (2 added);
GWCDRFormat_CDRType (JSON Gateway added); GWCDRFormat_
FieldType (447);GracefulBusyOutTimeout (range);
ntpAuthMd5KeyPassword (renamed); PM_EnableThresholdAlarms
- xviii -

Content Mediant 1000 Gateway & E-SBC | User's Manual
Table of Contents
1 Introduction 1
Product Overview 1
Typographical Conventions 2
Getting Familiar with Configuration Concepts and Terminology 2
SBC Application 2
Gateway Application 6
Part I 9
Getting Started with Initial Connectivity 9
2 Introduction 10
3 Default IP Address 11
4 Configuring VoIP LAN Interface for OAMP 12
Changing OAMP Address through Web Interface 12
Changing OAMP Address through CLI 13
Changing OAMP Address through ini File 15
Part II 16
Management Tools 16
5 Introduction 17
6 Web-Based Management 18
Getting Acquainted with the Web Interface 18
Computer Requirements 18
Accessing the Web Interface 18
Areas of the GUI 19
Accessing Configuration Pages from Navigation Tree 22
Configuring Stand-alone Parameters 24
Configuring Table Parameters 25
Adding Table Rows 26
Assigning Rows from Other Tables 27
Modifying Table Rows 28
Deleting Table Rows 28
Invalid Value Indications 29
Viewing Table Rows 31
Sorting Tables by Column 31
Changing Index Position of Table Rows 32
Searching Table Entries 32
Searching for Configuration Parameters 33
Getting Help 34
Logging Off the Web Interface 34
Customizing the Web Interface 35
Replacing the Corporate Logo 35
Replacing the Corporate Logo with an Image 36
- xix -

Content Mediant 1000 Gateway & E-SBC | User's Manual
Replacing the Corporate Logo with Text 36
Restoring the Default Corporate Logo Image 37
Customizing the Browser Tab Label 37
Customizing the Product Name 38
Customizing the Favicon 39
Creating a Login Welcome Message 40
Configuring Additional Management Interfaces 41
Configuring Management User Accounts 42
Customizing Access Levels per Web Page 48
Displaying Login Information upon Login 50
Viewing Logged-In User Information 51
Configuring Web Session and Access Settings 51
Changing Login Password by All User Levels 52
Configuring Secured (HTTPS) Web 53
Configuring CSRF Protection 54
Web Login Authentication using Smart Cards 54
Configuring Web and Telnet Access List 55
7 CLI-Based Management 56
Enabling CLI 56
Enabling Telnet for CLI 56
Enabling SSH with RSA Public Key for CLI 57
Configuring Maximum Telnet/SSH Sessions 58
Establishing a CLI Session 59
Viewing Current CLI Sessions 60
Terminating a User's CLI Session 60
Configuring Displayed Output Lines in CLI Terminal Window 61
Idle CLI Session Timeout for RS-232 Connections 61
Configuring Password Display in CLI 62
8 SNMP-Based Management 63
Disabling SNMP 63
Configuring SNMP Community Strings 63
Configuring SNMP Trap Destinations with IP Addresses 65
Configuring an SNMP Trap Destination with FQDN 67
Configuring SNMP Trusted Managers 67
Enabling SNMP Traps for Web Activity 68
Configuring SNMP V3 Users 68
Customizing SNMP Alarm Severity 70
9 INI File-Based Management 74
INI File Format 74
Configuring Individual ini File Parameters 74
Configuring Table ini File Parameters 74
General ini File Formatting Rules 76
Configuring an ini File 76
- xx -