AudioCodes Mediant 4000 SBC User manual

User's Manual
AudioCodes Mediant™ Family of Session Border Controllers (SBC)
Mediant 4000 SBC
Version 7.2

Version 7.2 3 Mediant 4000 SBC
User's Manual Contents
Table of Contents
1Introduction .......................................................................................................21
1.1 Product Overview...................................................................................................21
1.2 Typographical Conventions....................................................................................22
1.3 Getting Familiar with Configuration Concepts and Terminology............................23
1.3.1 SBC Application.......................................................................................................23
Getting Started with Initial Connectivity................................................................27
2Introduction .......................................................................................................29
3Default OAMP IP Address.................................................................................31
4Configuring VoIP LAN Interface for OAMP .....................................................33
4.1 Web Interface.........................................................................................................33
4.2 CLI..........................................................................................................................35
Management Tools..................................................................................................37
5Introduction .......................................................................................................39
6Web-Based Management..................................................................................41
6.1 Getting Acquainted with the Web Interface............................................................41
6.1.1 Computer Requirements..........................................................................................41
6.1.2 Accessing the Web Interface...................................................................................42
6.1.3 Areas of the GUI......................................................................................................43
6.1.4 Accessing Configuration Pages from Navigation Tree............................................45
6.1.5 Configuring Stand-alone Parameters......................................................................47
6.1.6 Configuring Table Parameters.................................................................................48
6.1.6.1 Adding Table Rows..................................................................................49
6.1.6.2 Modifying Table Rows..............................................................................50
6.1.6.3 Deleting Table Rows................................................................................51
6.1.6.4 Invalid Value Indications ..........................................................................51
6.1.6.5 Viewing Table Rows.................................................................................53
6.1.6.6 Sorting Tables by Column........................................................................53
6.1.6.7 Changing Index Position of Table Rows..................................................54
6.1.6.8 Searching Table Entries...........................................................................55
6.1.7 Searching for Configuration Parameters.................................................................55
6.1.8 Creating a Login Welcome Message.......................................................................57
6.1.9 Getting Help.............................................................................................................57
6.1.10 Logging Off the Web Interface.................................................................................58
6.2 Configuring Management User Accounts ..............................................................58
6.3 Displaying Login Information upon Login...............................................................62
6.4 Viewing Logged-In User Information......................................................................63
6.5 Configuring Web Session and Access Settings.....................................................63
6.6 Changing Login Password for Administrator and Monitor Users ...........................65
6.7 Configuring Secured (HTTPS) Web.......................................................................65
6.8 Web Login Authentication using Smart Cards .......................................................66
6.9 Configuring Web and Telnet Access List...............................................................67

User's Manual 4 Document #: LTRT-41729
Mediant 4000 SBC
7CLI-Based Management....................................................................................69
7.1 Getting Familiar with CLI........................................................................................69
7.1.1 Understanding Configuration Modes.......................................................................69
7.1.2 Using CLI Shortcuts.................................................................................................70
7.1.3 Common CLI Commands........................................................................................71
7.1.4 Configuring Tables through CLI...............................................................................72
7.1.5 Understanding CLI Error Messages........................................................................73
7.2 Enabling CLI...........................................................................................................73
7.2.1 Enabling Telnet for CLI............................................................................................73
7.2.2 Enabling SSH with RSA Public Key for CLI.............................................................74
7.3 Configuring Maximum Telnet/SSH Sessions.........................................................76
7.4 Establishing a CLI Session ....................................................................................76
7.5 Viewing Current CLI Sessions ...............................................................................77
7.6 Terminating a User's CLI Session..........................................................................78
7.7 Configuring Displayed Output Lines in CLI Terminal Window ...............................78
8SNMP-Based Management...............................................................................79
8.1 Enabling SNMP......................................................................................................79
8.2 Configuring SNMP Community Strings..................................................................79
8.3 Configuring SNMP Trap Destinations with IP Addresses ......................................81
8.4 Configuring an SNMP Trap Destination with FQDN ..............................................83
8.5 Configuring SNMP Trusted Managers...................................................................83
8.6 Enabling SNMP Traps for Web Activity..................................................................84
8.7 Configuring SNMP V3 Users..................................................................................84
9INI File-Based Management..............................................................................87
9.1 INI File Format .......................................................................................................87
9.1.1 Configuring Individual ini File Parameters...............................................................87
9.1.2 Configuring Table ini File Parameters.....................................................................87
9.1.3 General ini File Formatting Rules............................................................................89
9.2 Configuring an ini File ............................................................................................89
9.3 Loading an ini File to the Device............................................................................90
9.4 Secured Encoded ini File.......................................................................................90
9.5 Configuring Password Display in ini File................................................................90
9.6 INI Viewer and Editor Utility ...................................................................................92
General System Settings ........................................................................................93
10 Configuring SSL/TLS Certificates....................................................................95
10.1 Configuring TLS Certificate Contexts.....................................................................95
10.2 Assigning CSR-based Certificates to TLS Contexts..............................................99
10.3 Viewing Certificate Information ............................................................................102
10.4 Assigning Externally Created Private Keys to TLS Contexts...............................103
10.5 Generating Private Keys for TLS Contexts..........................................................104
10.6 Creating Self-Signed Certificates for TLS Contexts.............................................105
10.7 Importing Certificates and Certificate Chain into Trusted Certificate Store..........106
10.8 Configuring Mutual TLS Authentication................................................................108
10.8.1 TLS for SIP Clients................................................................................................108

Version 7.2 5 Mediant 4000 SBC
User's Manual Contents
10.8.2 TLS for Remote Device Management...................................................................108
10.9 Configuring TLS Server Certificate Expiry Check................................................109
11 Date and Time..................................................................................................111
11.1 Configuring Automatic Date and Time using SNTP.............................................111
11.2 Configuring Date and Time Manually...................................................................112
11.3 Configuring the Time Zone...................................................................................113
11.4 Configuring Daylight Saving Time........................................................................114
General VoIP Configuration..................................................................................115
12 Network............................................................................................................117
12.1 Building and Viewing your Network Topology......................................................117
12.2 Configuring Physical Ethernet Ports ....................................................................120
12.3 Configuring Ethernet Port Groups........................................................................123
12.4 Configuring Underlying Ethernet Devices............................................................125
12.5 Configuring IP Network Interfaces .......................................................................127
12.5.1 Assigning NTP Services to Application Types ......................................................131
12.5.2 IP Interfaces Table Configuration Guidelines........................................................131
12.5.3 Networking Configuration Examples .....................................................................132
12.5.3.1 One VoIP Interface for All Applications................................................. 132
12.5.3.2 VoIP Interface per Application Type...................................................... 133
12.5.3.3 VoIP Interfaces for Combined Application Types ................................. 133
12.5.3.4 VoIP Interfaces with Multiple Default Gateways................................... 134
12.6 Configuring Static IP Routes................................................................................135
12.6.1 Configuration Example of Static IP Routes ...........................................................137
12.6.2 Troubleshooting the Static Routes Table ..............................................................138
12.7 Network Address Translation Support .................................................................138
12.7.1 Device Located behind NAT..................................................................................138
12.7.1.1 Configuring NAT Translation per IP Interface....................................... 139
12.7.2 Remote UA behind NAT........................................................................................141
12.7.2.1 SIP Signaling Messages....................................................................... 141
12.7.2.2 Media (RTP/RTCP/T.38)....................................................................... 141
12.8 Configuring Quality of Service..............................................................................145
12.8.1 Configuring Class-of-Service QoS.........................................................................145
12.8.2 Configuring DiffServ-to-VLAN Priority Mapping.....................................................147
12.9 Configuring ICMP Messages ...............................................................................148
12.10DNS......................................................................................................................149
12.10.1Configuring the Internal DNS Table.......................................................................149
12.10.2Configuring the Internal SRV Table.......................................................................150
12.11Robust Receipt of Media Streams by Media Latching.........................................152
12.12Multiple Routers Support......................................................................................154
13 Security............................................................................................................155
13.1 Configuring Firewall Settings ...............................................................................155
13.2 Configuring General Security Settings.................................................................160
13.3 Intrusion Detection System..................................................................................161
13.3.1 Enabling IDS..........................................................................................................162
13.3.2 Configuring IDS Policies........................................................................................162
13.3.3 Assigning IDS Policies...........................................................................................166

User's Manual 6 Document #: LTRT-41729
Mediant 4000 SBC
13.3.4 Viewing IDS Alarms...............................................................................................168
14 Media................................................................................................................171
14.1 Configuring Voice Settings...................................................................................171
14.1.1 Configuring Voice Gain (Volume) Control .............................................................171
14.1.2 Silence Suppression (Compression).....................................................................171
14.1.3 Configuring Echo Cancellation..............................................................................172
14.2 Fax and Modem Capabilities................................................................................173
14.2.1 Fax/Modem Operating Modes...............................................................................174
14.2.2 Fax/Modem Transport Modes ...............................................................................174
14.2.2.1 T.38 Fax Relay Mode............................................................................ 175
14.2.2.2 G.711 Fax / Modem Transport Mode.................................................... 177
14.2.2.3 Fax Fallback.......................................................................................... 178
14.2.2.4 Fax/Modem Bypass Mode .................................................................... 178
14.2.2.5 Fax / Modem NSE Mode....................................................................... 180
14.2.2.6 Fax / Modem Transparent with Events Mode....................................... 181
14.2.2.7 Fax / Modem Transparent Mode........................................................... 181
14.2.2.8 RFC 2833 ANS Report upon Fax/Modem Detection............................ 182
14.2.3 V.34 Fax Support...................................................................................................182
14.2.3.1 Bypass Mechanism for V.34 Fax Transmission.................................... 183
14.2.3.2 Relay Mode for T.30 and V.34 Faxes................................................... 183
14.2.4 V.152 Support........................................................................................................183
14.3 Configuring RTP/RTCP Settings..........................................................................184
14.3.1 Configuring the Dynamic Jitter Buffer....................................................................184
14.3.2 Configuring RFC 2833 Payload.............................................................................185
14.3.3 Configuring RTP Base UDP Port...........................................................................186
14.4 Event Detection and Notification using X-Detect Header.....................................187
14.4.1 Detecting Answering Machine Beeps....................................................................188
14.4.2 SIP Call Flow Examples of Event Detection and Notification................................189
14.5 Answering Machine Detection (AMD)..................................................................191
14.5.1 Configuring AMD ...................................................................................................193
14.6 Automatic Gain Control (AGC).............................................................................194
14.7 Configuring Media (SRTP) Security.....................................................................195
14.7.1 SRTP using DTLS Protocol...................................................................................197
15 Services ...........................................................................................................199
15.1 DHCP Server Functionality..................................................................................199
15.1.1 Configuring the DHCP Server ...............................................................................199
15.1.2 Configuring the Vendor Class Identifier.................................................................204
15.1.3 Configuring Additional DHCP Options...................................................................205
15.1.4 Configuring Static IP Addresses for DHCP Clients...............................................207
15.1.5 Viewing and Deleting DHCP Clients......................................................................208
15.2 SIP-based Media Recording................................................................................209
15.2.1 Enabling SIP-based Media Recording...................................................................213
15.2.2 Configuring SIP Recording Rules..........................................................................213
15.2.3 Configuring SIP User Part for SRS........................................................................214
15.2.4 Interworking SIP-based Media Recording with Third-Party Vendors....................215
15.2.4.1 Genesys................................................................................................ 215
15.2.4.2 Avaya UCID........................................................................................... 215
15.3 RADIUS-based Services......................................................................................216
15.3.1 Enabling RADIUS Services ...................................................................................216
15.3.2 Configuring RADIUS Servers................................................................................216
15.3.3 Configuring Interface for RADIUS Communication...............................................219
15.3.4 Configuring RADIUS Packet Retransmission........................................................219

Version 7.2 7 Mediant 4000 SBC
User's Manual Contents
15.3.5 Configuring the RADIUS Vendor ID ......................................................................219
15.3.6 RADIUS-based Management User Authentication ...............................................220
15.3.6.1 Setting Up a Third-Party RADIUS Server ............................................. 221
15.3.6.2 Configuring RADIUS-based User Authentication.................................. 222
15.3.6.3 Securing RADIUS Communication ....................................................... 223
15.3.6.4 RADIUS-based User Authentication in URL......................................... 223
15.3.7 RADIUS-based CDR Accounting ..........................................................................224
15.4 LDAP-based Management and SIP Services......................................................224
15.4.1 Enabling the LDAP Service...................................................................................225
15.4.2 Enabling LDAP-based Web/CLI User Login Authentication and Authorization.....226
15.4.3 Configuring LDAP Server Groups .........................................................................226
15.4.4 Configuring LDAP Servers.....................................................................................228
15.4.5 Configuring LDAP DNs (Base Paths) per LDAP Server........................................232
15.4.6 Configuring the LDAP Search Filter Attribute........................................................233
15.4.7 Configuring Access Level per Management Groups Attributes ............................234
15.4.8 Configuring the Device's LDAP Cache..................................................................236
15.4.8.1 Refreshing the LDAP Cache................................................................. 238
15.4.8.2 Clearing the LDAP Cache..................................................................... 239
15.4.9 Configuring Local Database for Management User Authentication......................239
15.4.10LDAP-based Login Authentication Example..........................................................241
15.4.11Enabling LDAP Searches for Numbers with Characters.......................................245
15.4.12AD-based Routing for Microsoft Skype for Business ............................................245
15.4.12.1Querying the AD and Routing Priority................................................... 246
15.4.12.2Configuring AD-Based Routing Rules................................................... 249
15.5 Least Cost Routing...............................................................................................251
15.5.1 Overview................................................................................................................251
15.5.2 Configuring LCR....................................................................................................253
15.5.2.1 Configuring Cost Groups....................................................................... 253
15.5.2.2 Assigning Cost Groups to Routing Rules.............................................. 256
15.6 Remote Web Services .........................................................................................257
15.6.1 Configuring Remote Web Services .......................................................................257
15.6.1.1 Configuring Remote HTTP Hosts.......................................................... 261
15.6.2 Enabling Topology Status Services.......................................................................263
15.6.3 Centralized Third-Party Routing Server.................................................................263
15.7 HTTP-based Proxy Services................................................................................267
15.7.1 Enabling the HTTP Proxy Application ...................................................................268
15.7.2 Configuring HTTP Interfaces.................................................................................268
15.7.3 Configuring HTTP Proxy Services.........................................................................270
15.7.3.1 Configuring HTTP Proxy Hosts............................................................. 271
15.7.4 Configuring an HTTP-based EMS Service............................................................273
15.8 E9-1-1 Support for Microsoft Skype for Business................................................275
15.8.1 About E9-1-1 Services...........................................................................................275
15.8.2 Microsoft Skype for Business and E9-1-1 .............................................................276
15.8.2.1 Gathering Location Information of Skype for Business Clients for 911
Calls 277
15.8.2.2 Adding ELINs to the Location Information Server................................. 278
15.8.2.3 Passing Location Information to the PSTN Emergency Provider......... 279
15.8.3 AudioCodes ELIN Device for Skype for Business E9-1-1 Calls to PSTN.............280
15.8.3.1 Detecting and Handling E9-1-1 Calls.................................................... 281
15.8.3.2 Pre-empting Existing Calls for E9-1-1 Calls.......................................... 283
15.8.3.3 PSAP Callback to Skype for Business Clients for Dropped E9-1-1 Calls
283
15.8.3.4 Selecting ELIN for Multiple Calls within Same ERL.............................. 284
15.8.4 Configuring AudioCodes ELIN Device...................................................................285
15.8.4.1 Enabling the E9-1-1 Feature................................................................. 285

User's Manual 8 Document #: LTRT-41729
Mediant 4000 SBC
15.8.4.2 Configuring the E9-1-1 Callback Timeout............................................. 285
15.8.4.3 Configuring SBC IP-to-IP Routing Rule for E9-1-1............................... 285
15.8.4.4 Viewing the ELIN Table......................................................................... 286
16 Quality of Experience......................................................................................287
16.1 Reporting Voice Quality of Experience to SEM....................................................287
16.1.1 Configuring the SEM Server..................................................................................287
16.1.2 Configuring Clock Synchronization between Device and SEM.............................288
16.1.3 Enabling RTCP XR Reporting to SEM ..................................................................288
16.2 Configuring Quality of Experience Profiles...........................................................289
16.3 Configuring Bandwidth Profiles............................................................................294
16.4 Configuring Quality of Service Rules ...................................................................298
17 Control Network ..............................................................................................301
17.1 Configuring Media Realms...................................................................................301
17.1.1 Configuring Remote Media Subnets......................................................................304
17.1.2 Configuring Media Realm Extensions ...................................................................307
17.2 Configuring SRDs ................................................................................................309
17.2.1 Filtering Tables in Web Interface by SRD .............................................................315
17.2.2 Multiple SRDs for Multi-tenant Deployments.........................................................315
17.2.3 Cloning SRDs........................................................................................................317
17.2.4 Color-Coding of SRDs in Web Interface................................................................318
17.2.5 Automatic Configuration based on SRD................................................................319
17.3 Configuring SIP Interfaces...................................................................................319
17.4 Configuring IP Groups..........................................................................................326
17.5 Configuring Proxy Sets ........................................................................................338
17.6 Building and Viewing SIP Entities in Topology View............................................346
18 SIP Definitions.................................................................................................351
18.1 Configuring Registration Accounts.......................................................................351
18.1.1 Regular Registration Mode....................................................................................354
18.1.2 Single Registration for Multiple Phone Numbers using GIN..................................354
18.2 Configuring Proxy and Registration Parameters..................................................355
18.2.1 SIP Message Authentication Example ..................................................................356
18.3 Configuring SIP Message Manipulation...............................................................358
18.4 Configuring SIP Message Policy Rules................................................................363
18.5 Configuring Call Setup Rules...............................................................................366
18.5.1 Call Setup Rule Examples.....................................................................................371
19 Coders and Profiles ........................................................................................375
19.1 Configuring Coder Groups...................................................................................375
19.1.1 Supported Audio Coders .......................................................................................378
19.1.2 Configuring Various Codec Attributes ...................................................................379
19.2 Configuring Allowed Audio Coder Groups ...........................................................380
19.3 Configuring Allowed Video Coder Groups ...........................................................383
19.4 Configuring IP Profiles .........................................................................................384
Session Border Controller Application................................................................413

Version 7.2 9 Mediant 4000 SBC
User's Manual Contents
20 SBC Overview..................................................................................................415
20.1 Feature List..........................................................................................................415
20.2 B2BUA and Stateful Proxy Operating Modes ......................................................416
20.3 Call Processing of SIP Dialog Requests..............................................................419
20.4 User Registration .................................................................................................421
20.4.1 Initial Registration Request Processing.................................................................421
20.4.2 Classification and Routing of Registered Users....................................................422
20.4.3 General Registration Request Processing ............................................................423
20.4.4 Registration Refreshes..........................................................................................423
20.4.5 Registration Restriction Control.............................................................................424
20.4.6 Deleting Registered Users.....................................................................................424
20.5 Media Handling....................................................................................................424
20.5.1 Media Anchoring....................................................................................................425
20.5.2 Direct Media...........................................................................................................426
20.5.3 Restricting Audio Coders.......................................................................................428
20.5.4 Coder Transcoding................................................................................................429
20.5.5 Transcoding Mode.................................................................................................432
20.5.6 Prioritizing Coder List in SDP Offer.......................................................................432
20.5.7 SRTP-RTP and SRTP-SRTP Transcoding ...........................................................433
20.5.8 Multiple RTP Media Streams per Call Session .....................................................433
20.5.9 Interworking Miscellaneous Media Handling.........................................................434
20.5.9.1 Interworking DTMF Methods................................................................. 434
20.5.9.2 Interworking RTP Redundancy............................................................. 434
20.5.9.3 Interworking RTP-RTCP Multiplexing ................................................... 434
20.5.9.4 Interworking RTCP Attribute in SDP..................................................... 434
20.5.9.5 Interworking Crypto Lifetime Field......................................................... 435
20.5.9.6 Interworking Media Security Protocols.................................................. 435
20.5.9.7 Interworking ICE Lite for NAT Traversal ............................................... 435
20.6 Fax Negotiation and Transcoding........................................................................435
20.7 Limiting SBC Call Duration...................................................................................436
20.8 SBC Authentication..............................................................................................436
20.8.1 SIP Authentication Server Functionality................................................................436
20.8.2 User Authentication based on RADIUS.................................................................437
20.9 Interworking SIP Signaling...................................................................................437
20.9.1 Interworking SIP 3xx Redirect Responses............................................................438
20.9.1.1 Resultant INVITE Traversing Device .................................................... 438
20.9.1.2 Local Handling of SIP 3xx..................................................................... 439
20.9.2 Interworking SIP Diversion and History-Info Headers...........................................440
20.9.3 Interworking SIP REFER Messages......................................................................440
20.9.4 Interworking SIP PRACK Messages .....................................................................441
20.9.5 Interworking SIP Session Timer............................................................................441
20.9.6 Interworking SIP Early Media................................................................................441
20.9.7 Interworking SIP re-INVITE Messages..................................................................444
20.9.8 Interworking SIP UPDATE Messages...................................................................444
20.9.9 Interworking SIP re-INVITE to UPDATE................................................................445
20.9.10Interworking Delayed Offer....................................................................................445
20.9.11Interworking Call Hold............................................................................................445
20.9.12Interworking SIP Via Headers ...............................................................................446
20.9.13Interworking SIP User-Agent Headers ..................................................................446
20.9.14Interworking SIP Record-Route Headers..............................................................446
20.9.15Interworking SIP To-Header Tags in Multiple SDP Answers................................446
20.9.16Interworking In-dialog SIP Contact and Record-Route Headers...........................446

User's Manual 10 Document #: LTRT-41729
Mediant 4000 SBC
21 Enabling the SBC Application........................................................................447
22 Configuring General SBC Settings................................................................449
22.1 Interworking Dialog Information in SIP NOTIFY Messages.................................449
23 Configuring Admission Control.....................................................................451
24 Routing SBC....................................................................................................455
24.1 Configuring Classification Rules ..........................................................................455
24.1.1 Classification Based on URI of Selected Header Example...................................462
24.2 Configuring Message Condition Rules.................................................................463
24.3 Configuring SBC IP-to-IP Routing........................................................................464
24.4 Configuring SIP Response Codes for Alternative Routing Reasons....................476
24.5 Configuring SBC Routing Policy Rules................................................................478
25 SBC Manipulations..........................................................................................483
25.1 Configuring IP-to-IP Inbound Manipulations ........................................................485
25.2 Configuring IP-to-IP Outbound Manipulations......................................................489
26 Configuring Dial Plans....................................................................................495
26.1 Importing and Exporting Dial Plans......................................................................499
26.2 Creating Dial Plan Files........................................................................................502
26.3 Using Dial Plan Tags for IP-to-IP Routing............................................................503
26.3.1 Dial Plan Backward Compatibility..........................................................................504
26.4 Using Dial Plan Tags for Outbound Manipulation................................................505
26.5 Using Dial Plan Tags for Call Setup Rules...........................................................506
26.6 Using Dial Plan Tags for Message Manipulation .................................................506
27 Configuring Malicious Signatures.................................................................507
28 Advanced SBC Features.................................................................................509
28.1 Configuring Call Preemption for SBC Emergency Calls ......................................509
28.2 Emergency Call Routing using LDAP to Obtain ELIN..........................................510
28.3 Enabling Interworking of SIP and SIP-I Endpoints...............................................511
28.4 WebRTC ..............................................................................................................514
28.4.1 SIP over WebSocket..............................................................................................516
28.4.2 Configuring WebRTC.............................................................................................518
28.5 Call Forking..........................................................................................................521
28.5.1 Initiating SIP Call Forking ......................................................................................521
28.5.2 Configuring SIP Forking Initiated by SIP Proxy.....................................................521
28.5.3 Configuring Call Forking-based IP-to-IP Routing Rules........................................522
28.6 Call Survivability...................................................................................................522
28.6.1 Enabling Auto-Provisioning of Subscriber-Specific Information of BroadWorks
Server for Survivability........................................................................................................522
28.6.2 Configuring BroadSoft's Shared Phone Line Call Appearance for Survivability ...523
28.6.3 Configuring Call Survivability for Call Centers.......................................................525
28.6.4 Enabling Survivability Display on Aastra IP Phones .............................................527
28.7 Alternative Routing on Detection of Failed SIP Response...................................527
28.8 VoIPerfect ............................................................................................................528
Cloud Resilience Package....................................................................................531

Version 7.2 11 Mediant 4000 SBC
User's Manual Contents
29 CRP Overview..................................................................................................533
30 CRP Configuration..........................................................................................535
30.1 Enabling the CRP Application..............................................................................535
30.2 Configuring Call Survivability Mode .....................................................................536
30.3 Pre-Configured IP Groups....................................................................................537
30.4 Pre-Configured IP-to-IP Routing Rules................................................................538
30.4.1 Normal Mode.........................................................................................................538
30.4.2 Emergency Mode...................................................................................................539
30.4.3 Auto Answer to Registrations................................................................................539
30.5 Configuring PSTN Fallback..................................................................................540
High Availability System.......................................................................................541
31 HA Overview....................................................................................................543
31.1 Connectivity and Synchronization between Devices............................................543
31.2 Device Switchover upon Failure...........................................................................544
31.3 Viewing HA Status on Monitor Web Page............................................................545
32 HA Configuration.............................................................................................547
32.1 Initial HA Configuration ........................................................................................547
32.1.1 Network Topology Types and Rx/Tx Ethernet Port Group Settings......................547
32.1.2 Configuring the HA Devices ..................................................................................548
32.1.2.1 Step 1: Configure the First Device........................................................ 549
32.1.2.2 Step 2: Configure the Second Device................................................... 551
32.1.2.3 Step 3: Initialize HA on the Devices...................................................... 552
32.2 Configuration while HA is Operational .................................................................552
32.3 Configuring Firewall Allowed Rules......................................................................554
32.4 Monitoring IP Entity and HA Switchover upon Ping Failure.................................554
33 HA Maintenance ..............................................................................................557
33.1 Maintenance of Redundant Device......................................................................557
33.2 Replacing a Failed Device ...................................................................................557
33.3 Forcing a Switchover............................................................................................557
33.4 Software Upgrade................................................................................................558
Maintenance...........................................................................................................559
34 Basic Maintenance..........................................................................................561
34.1 Resetting the Device............................................................................................561
34.2 Remotely Resetting Device using SIP NOTIFY...................................................562
34.3 Locking and Unlocking the Device.......................................................................562
34.4 Saving Configuration............................................................................................564
35 High Availability Maintenance........................................................................565
35.1 Initiating an HA Switchover..................................................................................565
35.2 Resetting the Redundant Unit..............................................................................565

User's Manual 12 Document #: LTRT-41729
Mediant 4000 SBC
36 Channel Maintenance .....................................................................................567
36.1 Disconnecting Active Calls...................................................................................567
37 Software Upgrade............................................................................................569
37.1 Auxiliary Files.......................................................................................................569
37.1.1 Loading Auxiliary Files...........................................................................................569
37.1.1.1 Loading Auxiliary Files through Web Interface ..................................... 570
37.1.1.2 Loading Auxiliary Files through CLI ...................................................... 571
37.1.2 Deleting Auxiliary Files ..........................................................................................571
37.1.3 Call Progress Tones File .......................................................................................571
37.1.4 Prerecorded Tones File.........................................................................................574
37.1.5 Dial Plan File..........................................................................................................575
37.1.5.1 Creating a Dial Plan File........................................................................ 575
37.1.5.2 Obtaining IP Destination from Dial Plan File......................................... 576
37.1.5.3 Viewing Information of Installed Dial Plan File...................................... 576
37.1.6 User Information File .............................................................................................577
37.1.6.1 Enabling the User Info Table................................................................. 577
37.1.6.2 User Information File for SBC User Database...................................... 577
37.1.6.3 Viewing the Installed User Info File Name............................................ 581
37.1.7 AMD Sensitivity File...............................................................................................581
37.2 License Key..........................................................................................................581
37.2.1 Viewing the License Key........................................................................................582
37.2.2 Obtaining License Key for Feature Upgrade.........................................................582
37.2.3 Installing the License Key......................................................................................583
37.2.3.1 Installing License Key through Web Interface....................................... 583
37.2.3.2 Installing License Key through CLI........................................................ 584
37.3 Upgrading SBC Capacity Licenses by License Pool Manager Server.................585
37.4 Software Upgrade Wizard....................................................................................587
38 Backing Up and Loading Configuration File.................................................593
39 Automatic Provisioning..................................................................................595
39.1 Automatic Configuration Methods........................................................................595
39.1.1 DHCP-based Provisioning.....................................................................................595
39.1.2 HTTP-based Provisioning......................................................................................596
39.1.3 FTP-based Provisioning ........................................................................................597
39.1.4 Provisioning using AudioCodes EMS....................................................................597
39.2 HTTP/S-Based Provisioning using the Automatic Update Feature......................597
39.2.1 Files Provisioned by Automatic Update.................................................................598
39.2.2 File Location for Automatic Update .......................................................................598
39.2.3 MAC Address Placeholder in Configuration File Name.........................................599
39.2.4 File Template for Automatic Provisioning..............................................................599
39.2.5 Triggers for Automatic Update...............................................................................601
39.2.6 Access Authentication with HTTP Server..............................................................602
39.2.7 Querying Provisioning Server for Updated Files...................................................602
39.2.8 File Download Sequence.......................................................................................605
39.2.9 Cyclic Redundancy Check on Downloaded Configuration Files...........................606
39.2.10Automatic Update Configuration Examples...........................................................606
39.2.10.1Automatic Update for Single Device ..................................................... 607
39.2.10.2Automatic Update from Remote Servers .............................................. 608
39.2.10.3Automatic Update for Mass Deployment............................................... 609
40 Restoring Factory Defaults ............................................................................613
40.1 Restoring Factory Defaults through CLI...............................................................613
40.2 Restoring Factory Defaults through Web Interface..............................................614

Version 7.2 13 Mediant 4000 SBC
User's Manual Contents
40.3 Restoring Defaults through ini File.......................................................................614
Status, Performance Monitoring and Reporting.................................................615
41 System Status .................................................................................................617
41.1 Viewing Device Information..................................................................................617
41.2 Viewing Device Status on Monitor Page..............................................................618
42 Reporting DSP Utilization through SNMP MIB..............................................621
43 Viewing Carrier-Grade Alarms .......................................................................623
43.1 Viewing Active Alarms..........................................................................................623
43.2 Viewing History Alarms........................................................................................624
44 Viewing Management User Activity Logs .....................................................627
45 Viewing Performance Monitoring ..................................................................629
45.1 Viewing Call Success and Failure Ratio ..............................................................629
45.2 Viewing Average Call Duration ............................................................................631
45.3 Configuring Performance Profiles........................................................................632
46 Viewing VoIP Status........................................................................................637
46.1 Viewing SBC Registered Users ...........................................................................637
46.2 Viewing Call Routing Status.................................................................................638
46.3 Viewing Registration Status.................................................................................639
46.4 Viewing Test Call CDRs.......................................................................................639
46.5 Viewing SBC CDR History...................................................................................640
47 Viewing Network Status..................................................................................643
47.1 Viewing Active IP Interfaces.................................................................................643
47.2 Viewing Ethernet Device Status...........................................................................643
47.3 Viewing Ethernet Port Information .......................................................................643
47.4 Viewing Static Routes Status...............................................................................644
48 Viewing Hardware Status ...............................................................................645
48.1 Viewing Hardware Components Status ...............................................................645
49 Reporting Information to External Party .......................................................647
49.1 Configuring RTCP XR..........................................................................................647
49.2 Generating Call Detail Records............................................................................651
49.2.1 CDR Field Description...........................................................................................652
49.2.1.1 CDR Fields for SBC Signaling .............................................................. 652
49.2.1.2 CDR Fields for SBC Media ................................................................... 657
49.2.1.3 CDR Fields for SBC Local Storage....................................................... 659
49.2.2 Customizing CDRs for SBC Calls..........................................................................661
49.2.3 Configuring CDR Reporting...................................................................................664
49.2.4 Storing CDRs on the Device..................................................................................665
49.3 Configuring RADIUS Accounting .........................................................................668
Diagnostics............................................................................................................675

User's Manual 14 Document #: LTRT-41729
Mediant 4000 SBC
50 Syslog and Debug Recording ........................................................................677
50.1 Configuring Log Filter Rules.................................................................................677
50.1.1 Filtering IP Network Traces ...................................................................................681
50.2 Configuring Syslog...............................................................................................682
50.2.1 Syslog Message Format........................................................................................682
50.2.1.1 Event Representation in Syslog Messages .......................................... 684
50.2.1.2 Identifying AudioCodes Syslog Messages using Facility Levels .......... 685
50.2.1.3 Syslog Fields for Answering Machine Detection (AMD)....................... 686
50.2.1.4 SNMP Alarms in Syslog Messages....................................................... 686
50.2.2 Enabling Syslog.....................................................................................................687
50.2.3 Configuring the Syslog Server Address.................................................................687
50.2.4 Configuring Syslog Debug Level...........................................................................688
50.2.5 Configuring Reporting of Management User Activities..........................................689
50.2.6 Viewing Syslog Messages.....................................................................................690
50.3 Configuring Debug Recording..............................................................................691
50.3.1 Configuring the Debug Recording Server Address...............................................692
50.3.2 Collecting Debug Recording Messages ................................................................692
50.3.3 Debug Capturing on Physical VoIP Interfaces......................................................693
51 Creating Core Dump and Debug Files upon Device Crash .........................695
52 Testing SIP Signaling Calls............................................................................697
52.1 Configuring Test Call Endpoints...........................................................................697
52.2 Starting and Stopping Test Calls..........................................................................701
52.3 Viewing Test Call Status......................................................................................702
52.4 Viewing Test Call Statistics..................................................................................702
52.5 Configuring DTMF Tones for Test Calls...............................................................704
52.6 Configuring SBC Test Call with External Proxy ...................................................704
52.7 Test Call Configuration Examples........................................................................706
53 Pinging a Remote Host or IP Address...........................................................709
Appendix................................................................................................................711
54 Dialing Plan Notation for Routing and Manipulation....................................713
55 Configuration Parameters Reference............................................................717
55.1 Management Parameters.....................................................................................717
55.1.1 General Parameters ..............................................................................................717
55.1.2 Web Parameters....................................................................................................718
55.1.3 Telnet Parameters.................................................................................................720
55.1.4 ini File Parameters.................................................................................................721
55.1.5 SNMP Parameters.................................................................................................721
55.1.6 Serial Parameters..................................................................................................725
55.1.7 Auxiliary and Configuration File Name Parameters ..............................................726
55.1.8 Automatic Update Parameters ..............................................................................727
55.2 Networking Parameters........................................................................................731
55.2.1 Ethernet Parameters..............................................................................................731
55.2.2 Multiple VoIP Network Interfaces and VLAN Parameters.....................................732
55.2.3 Routing Parameters...............................................................................................733
55.2.4 Quality of Service Parameters...............................................................................733
55.2.5 NAT Parameters....................................................................................................734
55.2.6 DNS Parameters....................................................................................................736

Version 7.2 15 Mediant 4000 SBC
User's Manual Contents
55.2.7 DHCP Parameters.................................................................................................736
55.2.8 NTP and Daylight Saving Time Parameters..........................................................738
55.3 Debugging and Diagnostics Parameters..............................................................740
55.3.1 General Parameters ..............................................................................................740
55.3.2 SIP Test Call Parameters......................................................................................741
55.3.3 Syslog, CDR and Debug Parameters....................................................................742
55.3.4 Resource Allocation Indication Parameters...........................................................747
55.4 HA Parameters.....................................................................................................747
55.5 Security Parameters.............................................................................................749
55.5.1 General Security Parameters................................................................................749
55.5.2 HTTPS Parameters ...............................................................................................752
55.5.3 SRTP Parameters..................................................................................................752
55.5.4 TLS Parameters.....................................................................................................754
55.5.5 SSH Parameters....................................................................................................756
55.5.6 IDS Parameters.....................................................................................................757
55.5.7 OCSP Parameters.................................................................................................758
55.6 Quality of Experience Parameters .......................................................................759
55.7 Control Network Parameters................................................................................761
55.7.1 IP Group, Proxy, Registration and Authentication Parameters.............................761
55.7.2 Network Application Parameters...........................................................................769
55.8 General SIP Parameters......................................................................................771
55.9 Coders and Profile Parameters............................................................................786
55.10Channel Parameters............................................................................................788
55.10.1Voice Parameters..................................................................................................788
55.10.2Coder Parameters .................................................................................................791
55.10.3DTMF Parameters.................................................................................................792
55.10.4RTP, RTCP and T.38 Parameters.........................................................................793
55.11SBC Parameters..................................................................................................796
55.11.1Supplementary Services........................................................................................812
55.12IP Media Parameters ...........................................................................................812
55.13Services ...............................................................................................................816
55.13.1SIP-based Media Recording Parameters..............................................................816
55.13.2RADIUS and LDAP Parameters............................................................................817
55.13.2.1General Parameters.............................................................................. 817
55.13.2.2RADIUS Parameters............................................................................. 818
55.13.2.3LDAP Parameters ................................................................................. 820
55.13.3Least Cost Routing Parameters ............................................................................823
55.13.4Call Setup Rules Parameters................................................................................823
55.13.5HTTP-based Services............................................................................................824
55.13.6HTTP Proxy Parameters........................................................................................825
56 Channel Capacity............................................................................................827
56.1 Mediant 4000 SBC...............................................................................................828
56.2 Mediant 4000B SBC.............................................................................................829
57 Technical Specifications ................................................................................831
57.1 Supported SIP Standards ....................................................................................833
57.1.1 Supported SIP RFCs.............................................................................................833
57.1.2 SIP Message Compliancy......................................................................................836
57.1.2.1 SIP Functions........................................................................................ 836
57.1.2.2 SIP Methods.......................................................................................... 836
57.1.2.3 SIP Headers.......................................................................................... 837

User's Manual 16 Document #: LTRT-41729
Mediant 4000 SBC
57.1.2.4 SDP Fields ............................................................................................ 839
57.1.2.5 SIP Responses...................................................................................... 839

Version 7.2 17 Mediant 4000 SBC
User's Manual Notices
Notice
This document describes AudioCodes Mediant 4000 Session Border Controller (SBC).
Information contained in this document is believed to be accurate and reliable at the time of
printing. However, due to ongoing product improvements and revisions, AudioCodes cannot
guarantee accuracy of printed material after the Date Published nor can it accept responsibility
for errors or omissions. Before consulting this document, check the corresponding Release
Notes regarding feature preconditions and/or specific support in this release. In cases where
there are discrepancies between this document and the Release Notes, the information in the
Release Notes supersedes that in this document. Updates to this document and other
documents as well as software files can be downloaded by registered customers at
http://www.audiocodes.com/downloads.
© Copyright 2016 AudioCodes Ltd. All rights reserved.
This document is subject to change without notice.
Date Published: July-17-2016
Trademarks
AudioCodes, AC, HD VoIP, HD VoIP Sounds Better, IPmedia, Mediant, MediaPack, What’s
Inside Matters, OSN, SmartTAP, VMAS, VoIPerfect, VoIPerfectHD, Your Gateway To
VoIP, 3GX, VocaNOM and CloudBond 365 are trademarks or registered trademarks of
AudioCodes Limited All other products or trademarks are property of their respective
owners. Product specifications are subject to change without notice.
WEEE EU Directive
Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed
of with unsorted waste. Please contact your local recycling authority for disposal of this
product.
Customer Support
Customer technical support and services are provided by AudioCodes or by an authorized
AudioCodes Service Partner. For more information on how to buy technical support for
AudioCodes products and for contact information, please visit our Web site at
www.audiocodes.com/support.
Abbreviations and Terminology
Each abbreviation, unless widely used, is spelled out in full when first used.

User's Manual 18 Document #: LTRT-41729
Mediant 4000 SBC
Related Documentation
Manual Name
SIP Release Notes
Mediant 4000 E-SBC Hardware Installation Manual
Complementary Guides
CLI Reference Guide
SNMP User's Guide
SBC Design Guide
Recommended Security Guidelines Configuration Note
SIP Message Manipulations Quick Reference Guide
Utility Guides
INI Viewer & Editor Utility User's Guide
AcBootP Utility User's Guide
CLI Wizard User's Guide
Notes and Warnings
Note: The device is an indoor unit and therefore, must be installed only INDOORS. In
addition, Ethernet port interface cabling must be routed only indoors and must not exit
the building.
Note: The scope of this document does not fully cover security aspects for deploying
the device in your environment. Security measures should be done in accordance
with your organization’s security policies. For basic security guidelines, refer to
AudioCodes Recommended Security Guidelines document.
Note: Throughout this manual, unless otherwise specified, the term device refers to
your AudioCodes product.
Note: Before configuring the device, ensure that it is installed correctly as instructed
in the Hardware Installation Manual.

Version 7.2 19 Mediant 4000 SBC
User's Manual Notices
Note:
•By default, the device supports export-grade (40-bit and 56-bit) encryption due to
US government restrictions on the export of security technologies. To enable 128-
bit and 256-bit encryption on your device, contact your AudioCodes sales
representative.
•This device includes software developed by the OpenSSL Project for use in the
OpenSSL Toolkit (http://www.openssl.org/).
•This device includes cryptographic software written by Eric Young
([e-mail]).
Note: Some of the features listed in this document are available only if the relevant
License Key has been purchased from AudioCodes and installed on the device. For a
list of License Keys that can be purchased, please consult your AudioCodes sales
representative.
Note: OPEN SOURCE SOFTWARE. Portions of the software may be open source
software and may be governed by and distributed under open source licenses, such
as the terms of the GNU General Public License (GPL), the terms of the Lesser
General Public License (LGPL),
BSD and LDAP, which terms are located at:
http://www.audiocodes.com/support and all are incorporated herein by reference. If
any open source software is provided in object code, and its accompanying license
requires that it be provided in source code as well, Buyer may receive such source
code by contacting AudioCodes, by following the instructions available on
AudioCodes website.

User's Manual 20 Document #: LTRT-41729
Mediant 4000 SBC
Document Revision Record
LTRT Description
41727 Initial document release for Version 7.2.
41729 Updated patch version 7.20A.001.
Updated sections: Computer Requirements (supported browsers); CLI-Based
Management (permitted user levels); Configuring TLS Certificate Contexts (TLS
versions); Configuring Physical Ethernet Ports (show command); Configuring
Underlying Ethernet Devices (max. VLANs); SIP Signaling Messages (procedure);
First Incoming Packet Mechanism (NAT by Signaling); Robust Receipt of Media
Streams by Media Latching (procedure); Configuring Firewall Settings (note);
Configuring General Security Settings (Web path); Viewing IDS Alarms (show
command); Viewing and Deleting DHCP Clients (show command); Configuring the
Device's LDAP Cache; Centralized Third-Party Routing Server (SIP messages and
credentials for authentication); Configuring Call Setup Rules (dial plan queries);
Call Setup Rule Examples; Registration Refreshes; Using Dial Plan Tags for IP-to-
IP Routing (example); Enabling Interworking of SIP and SIP-I Endpoints (SPIROU
and SIP header X-AC-Action); Configuring WebRTC (Web path); Configuring
BroadSoft's Shared Phone Line Call Appearance for Survivability (example);
Automatic Provisioning (CLI Script file); Configuring RTCP XR (IP Group); Enabling
Same Call Session ID over Multiple Devices (removed); Configuring Test Call
Endpoints (typo); CLI (illustration); Accessing the Web Interface (note).
New sections: VoIPerfect; Using Dial Plan Tags for Call Setup Rules; Using Dial
Plan Tags for Message Manipulation.
New parameters: WebLoginBlockAutoComplete; EnforcePasswordComplexity;
IPGroup_SBCKeepOriginalCallID; IPGroup_SBCDialPlanName;
IPGroup_CallSetupRulesSetId; CallSetupRules_QueryType;
CallSetupRules_QueryTarget; IpProfile_SBCVoiceQualityEnhancement;
IpProfile_SBCMaxOpusBW; IpProfile_SBCISUPVariant; AUPDCliScriptURL;
PublicationIPGroupID.
Updated parameters: Web password (EnforcePasswordComplexity);
TLSContexts_TLSVersion; InterfaceTable_InterfaceName;
CallSetupRules_AttributesToQuery (Web name and description);
IPProfile_SBCRTCPFeedback (values); IpProfile_MediaIPVersionPreference;
ConditionTable_Name (max. chars); Test_Call_RouteBy (default); NATMode
(values); SendAcSessionIDHeader (removed); QOEPort (removed);
MaxGeneratedRegistersRate; CLIPrivPass; GeneratedRegistersInterval;
RTPOnlyMode (removed); SBCUserRegistrationGraceTime;
SBCKeepOriginalCallId.
Documentation Feedback
AudioCodes continually strives to produce high quality documentation. If you have any
comments (suggestions or errors) regarding this document, please fill out the
Documentation Feedback form on our Web site at http://www.audiocodes.com/downloads.