AudioCodes Mediant 4000 SBC User manual

User's Manual
AudioCodes Family of Session Border Controllers (SBC)
Mediant™ 4000 SBC
Version 7.0

Version 7.0 3 Mediant 4000 SBC
User's Manual Contents
Table of Contents
1Introduction .......................................................................................................23
1.1 Product Overview.................................................................................................23
1.2 Typographical Conventions..................................................................................24
1.3 Getting Familiar with Configuration Concepts and Terminology............................24
1.3.1 SBC Application.......................................................................................................24
Getting Started with Initial Connectivity................................................................29
2Introduction .......................................................................................................31
3Default OAMP IP Address.................................................................................33
4Configuring VoIP LAN Interface for OAMP .....................................................35
4.1 Web Interface.......................................................................................................35
4.2 CLI .......................................................................................................................37
Management Tools..................................................................................................39
5Introduction .......................................................................................................41
6Web-Based Management..................................................................................43
6.1 Getting Acquainted with the Web Interface...........................................................43
6.1.1 Computer Requirements..........................................................................................43
6.1.2 Accessing the Web Interface...................................................................................44
6.1.3 Areas of the GUI......................................................................................................45
6.1.4 Toolbar Description..................................................................................................46
6.1.5 Navigation Tree .......................................................................................................47
6.1.5.1 Displaying Navigation Tree in Basic and Full View..................................47
6.1.5.2 Showing / Hiding the Navigation Pane.....................................................48
6.1.6 Working with Configuration Pages ..........................................................................49
6.1.6.1 Accessing Pages......................................................................................49
6.1.6.2 Viewing Parameters.................................................................................49
6.1.6.3 Modifying and Saving Parameters ...........................................................51
6.1.7 Working with Tables ................................................................................................52
6.1.7.1 Table Toolbar Description........................................................................53
6.1.7.2 Toggling Display Mode of Table Dialog Boxes ........................................54
6.1.7.3 Scrolling through Table Pages.................................................................54
6.1.7.4 Searching Table Entries...........................................................................55
6.1.7.5 Sorting Tables by Column........................................................................55
6.1.8 Searching for Configuration Parameters.................................................................56
6.1.9 Creating a Login Welcome Message.......................................................................58
6.1.10 Getting Help.............................................................................................................59
6.1.11 Logging Off the Web Interface.................................................................................60
6.2 Viewing the Home Page.......................................................................................60
6.3Configuring Web User Accounts...........................................................................63
6.3.1 Basic User Accounts Configuration.........................................................................64
6.3.2 Advanced User Accounts Configuration..................................................................66
6.4 Displaying Login Information upon Login..............................................................70
6.5 Configuring Web Security Settings.......................................................................71

User's Manual 4 Document #: LTRT-41730
Mediant 4000 SBC
6.5.1 Configuring Secured (HTTPS) Web........................................................................71
6.5.2 Configuring Web Session and Access Settings ......................................................71
6.6 Web Login Authentication using Smart Cards.......................................................72
6.7 Configuring Web and Telnet Access List..............................................................73
7CLI-Based Management....................................................................................75
7.1 Getting Familiar with CLI ......................................................................................75
7.1.1 Understanding Configuration Modes.......................................................................75
7.1.2 Using CLI Shortcuts.................................................................................................76
7.1.3 Common CLI Commands........................................................................................77
7.1.4 Configuring Tables through CLI...............................................................................78
7.1.5 Understanding CLI Error Messages ........................................................................79
7.2 Enabling CLI.........................................................................................................80
7.2.1 Enabling Telnet for CLI............................................................................................80
7.2.2 Enabling SSH with RSA Public Key for CLI.............................................................80
7.3 Configuring Maximum Telnet/SSH Sessions ........................................................83
7.4 Establishing a CLI Session...................................................................................83
7.5 Viewing Current CLI Sessions..............................................................................84
7.6 Terminating a User's CLI Session ........................................................................84
7.7 Configuring Displayed Output Lines in CLI Terminal Window...............................85
8SNMP-Based Management...............................................................................87
8.1 Enabling SNMP....................................................................................................87
8.2 Configuring SNMP Community Strings.................................................................88
8.3 Configuring SNMP Trap Destinations...................................................................90
8.4 Configuring SNMP Trusted Managers..................................................................91
8.5 Configuring SNMP V3 Users................................................................................92
9INI File-Based Management..............................................................................95
9.1 INI File Format......................................................................................................95
9.1.1 Configuring Individual ini File Parameters...............................................................95
9.1.2 Configuring Table ini File Parameters.....................................................................95
9.1.3 General ini File Formatting Rules............................................................................97
9.2 Configuring an ini File...........................................................................................97
9.3 Loading an ini File to the Device...........................................................................98
9.4 Secured Encoded ini File......................................................................................99
9.5 Configuring Password Display in ini File...............................................................99
9.6 INI Viewer and Editor Utility................................................................................100
General System Settings ......................................................................................101
10 Configuring SSL/TLS Certificates..................................................................103
10.1 Configuring TLS Certificate Contexts..................................................................103
10.2 Assigning CSR-based Certificates to TLS Contexts............................................107
10.3 Assigning Externally Created Private Keys to TLS Contexts...............................109
10.4 Generating Private Keys for TLS Contexts.........................................................110
10.5 Creating Self-Signed Certificates for TLS Contexts ............................................111
10.6 Importing Certificates and Certificate Chain into Trusted Certificate Store..........112
10.7 Configuring Mutual TLS Authentication...............................................................113

Version 7.0 5 Mediant 4000 SBC
User's Manual Contents
10.7.1 TLS for SIP Clients ................................................................................................113
10.7.2 TLS for Remote Device Management...................................................................114
10.8 Configuring TLS Server Certificate Expiry Check ...............................................116
11 Date and Time..................................................................................................117
11.1 Configuring Automatic Date and Time using SNTP ............................................117
11.2 Configuring Date and Time Manually..................................................................118
11.3 Configuring the Time Zone.................................................................................119
11.4 Configuring Daylight Saving Time.......................................................................120
General VoIP Configuration..................................................................................121
12 Network............................................................................................................123
12.1 Configuring Physical Ethernet Ports...................................................................123
12.2 Configuring Ethernet Port Groups.......................................................................126
12.3 Configuring Underlying Ethernet Devices...........................................................129
12.4 Configuring IP Network Interfaces......................................................................132
12.4.1 Assigning NTP Services to Application Types ......................................................135
12.4.2 Multiple Interface Table Configuration Summary and Guidelines.........................136
12.4.3 Networking Configuration Examples .....................................................................137
12.4.3.1 One VoIP Interface for All Applications..................................................137
12.4.3.2 VoIP Interface per Application Type.......................................................137
12.4.3.3 VoIP Interfaces for Combined Application Types ..................................138
12.4.3.4 VoIP Interfaces with Multiple Default Gateways ....................................139
12.5 Configuring Static IP Routes...............................................................................140
12.5.1 Configuration Example of Static IP Routes ...........................................................142
12.5.2 Troubleshooting the Routing Table .......................................................................142
12.6 Configuring Quality of Service ............................................................................143
12.7 Configuring ICMP Messages..............................................................................146
12.8 DNS ...................................................................................................................147
12.8.1 Configuring the Internal DNS Table.......................................................................147
12.8.2 Configuring the Internal SRV Table.......................................................................148
12.9 Network Address Translation Support ................................................................151
12.9.1 Device Located behind NAT..................................................................................151
12.9.1.1 Configuring a Static NAT IP Address for All Interfaces..........................152
12.9.1.2 Configuring NAT Translation per IP Interface........................................153
12.9.2 Remote UA behind NAT........................................................................................154
12.9.2.1 SIP Signaling Messages ........................................................................154
12.9.2.2 Media (RTP/RTCP/T.38)........................................................................155
12.10Robust Receipt of Media Streams by Media Latching.........................................159
12.11Multiple Routers Support....................................................................................161
13 Security............................................................................................................163
13.1 Configuring Firewall Settings..............................................................................163
13.2 Configuring General Security Settings................................................................168
13.3 Intrusion Detection System.................................................................................169
13.3.1 Enabling IDS..........................................................................................................170
13.3.2 Configuring IDS Policies........................................................................................170
13.3.3 Assigning IDS Policies...........................................................................................174
13.3.4 Viewing IDS Alarms...............................................................................................175

User's Manual 6 Document #: LTRT-41730
Mediant 4000 SBC
14 Media................................................................................................................179
14.1 Configuring Voice Settings .................................................................................179
14.1.1 Configuring Voice Gain (Volume) Control .............................................................179
14.1.2 Silence Suppression (Compression).....................................................................180
14.1.3 Configuring Echo Cancellation ..............................................................................180
14.2 Fax and Modem Capabilities ..............................................................................182
14.2.1 Fax/Modem Operating Modes...............................................................................183
14.2.2 Fax/Modem Transport Modes ...............................................................................183
14.2.2.1 T.38 Fax Relay Mode.............................................................................183
14.2.2.2 G.711 Fax / Modem Transport Mode.....................................................186
14.2.2.3 Fax Fallback...........................................................................................186
14.2.2.4 Fax/Modem Bypass Mode......................................................................187
14.2.2.5 Fax / Modem NSE Mode........................................................................188
14.2.2.6 Fax / Modem Transparent with Events Mode ........................................189
14.2.2.7 Fax / Modem Transparent Mode............................................................189
14.2.2.8 RFC 2833 ANS Report upon Fax/Modem Detection.............................190
14.2.3 V.34 Fax Support...................................................................................................191
14.2.3.1 Bypass Mechanism for V.34 Fax Transmission.....................................191
14.2.3.2 Relay Mode for T.30 and V.34 Faxes ....................................................191
14.2.4 V.152 Support........................................................................................................192
14.3 Configuring RTP/RTCP Settings.........................................................................193
14.3.1 Configuring the Dynamic Jitter Buffer....................................................................193
14.3.2 Configuring RFC 2833 Payload.............................................................................194
14.3.3 Configuring RTP Base UDP Port...........................................................................195
14.4 Event Detection and Notification using X-Detect Header....................................196
14.4.1 Detecting Answering Machine Beeps....................................................................197
14.4.2 SIP Call Flow Examples of Event Detection and Notification................................198
14.5 Answering Machine Detection (AMD).................................................................200
14.5.1 Configuring AMD ...................................................................................................203
14.6 Automatic Gain Control (AGC) ...........................................................................204
14.7 Configuring Various Codec Attributes.................................................................205
14.8 Configuring Media (SRTP) Security....................................................................206
14.8.1 SRTP using DTLS Protocol...................................................................................207
15 Services ...........................................................................................................209
15.1 DHCP Server Functionality.................................................................................209
15.1.1 Configuring the DHCP Server ...............................................................................209
15.1.2 Configuring the Vendor Class Identifier.................................................................214
15.1.3 Configuring Additional DHCP Options...................................................................215
15.1.4 Configuring Static IP Addresses for DHCP Clients ...............................................217
15.1.5 Viewing and Deleting DHCP Clients......................................................................218
15.2 SIP-based Media Recording...............................................................................220
15.2.1 Enabling SIP-based Media Recording...................................................................223
15.2.2 Configuring SIP Recording Rules..........................................................................224
15.2.3 Configuring SIP User Part for SRS........................................................................225
15.2.4 Interworking SIP-based Media Recording with Third-Party Vendors....................226
15.2.4.1 Genesys .................................................................................................226
15.2.4.2 Avaya UCID............................................................................................226
15.3 RADIUS-based Services ....................................................................................227
15.3.1 Enabling RADIUS Services ...................................................................................227
15.3.2 Configuring RADIUS Servers ................................................................................227
15.3.3 Configuring Interface for RADIUS Communication ...............................................230
15.3.4 Configuring General RADIUS Parameters............................................................230

Version 7.0 7 Mediant 4000 SBC
User's Manual Contents
15.3.5 RADIUS-based Management User Authentication ...............................................230
15.3.5.1 Setting Up a Third-Party RADIUS Server ..............................................231
15.3.5.2 Configuring RADIUS-based User Authentication...................................232
15.3.5.3 Securing RADIUS Communication ........................................................234
15.3.5.4 RADIUS-based User Authentication in URL..........................................234
15.3.6 RADIUS-based CDR Accounting ..........................................................................234
15.4 LDAP-based Management and SIP Services .....................................................235
15.4.1 Enabling the LDAP Service ...................................................................................236
15.4.2 Enabling LDAP-based Web/CLI User Login Authentication and Authorization.....237
15.4.3 Configuring LDAP Server Groups .........................................................................237
15.4.4 Configuring LDAP Servers.....................................................................................239
15.4.5 Configuring LDAP DNs (Base Paths) per LDAP Server........................................244
15.4.6 Configuring the LDAP Search Filter Attribute........................................................245
15.4.7 Configuring Access Level per Management Groups Attributes.............................246
15.4.8 Configuring the Device's LDAP Cache..................................................................248
15.4.8.1 Refreshing the LDAP Cache..................................................................250
15.4.8.2 Clearing the LDAP Cache......................................................................252
15.4.9 Configuring Local Database for Management User Authentication ......................252
15.4.10 LDAP-based Login Authentication Example..........................................................253
15.4.11 Enabling LDAP Searches for Numbers with Characters.......................................258
15.4.12 Active Directory-based Routing for Microsoft Lync ...............................................259
15.4.12.1Querying the AD and Routing Priority....................................................259
15.4.12.2Configuring AD-Based Routing Rules....................................................261
15.5 Least Cost Routing.............................................................................................264
15.5.1 Overview................................................................................................................264
15.5.2 Configuring LCR ....................................................................................................266
15.5.2.1 Configuring Cost Groups........................................................................266
15.5.2.2 Configuring Time Bands for Cost Groups ..............................................267
15.5.2.3 Assigning Cost Groups to Routing Rules...............................................269
15.6 HTTP-based Remote Services...........................................................................270
15.6.1 Configuring HTTP Services...................................................................................270
15.6.2 Configuring Remote HTTP Hosts..........................................................................273
15.6.3 Centralized Third-Party Routing Server or ARM ...................................................275
15.7 HTTP-based Proxy Services ..............................................................................278
15.7.1 Enabling the HTTP Proxy Application ...................................................................279
15.7.2 Configuring HTTP Interfaces.................................................................................279
15.7.3 Configuring HTTP Proxy Services.........................................................................282
15.7.4 Configuring HTTP Proxy Hosts .............................................................................283
15.7.5 Configuring an HTTP-based EMS Service............................................................285
15.8 Configuring Call Setup Rules..............................................................................288
15.8.1 Call Setup Rule Examples.....................................................................................291
15.9 Enhanced 9-1-1 Support for Lync Server............................................................293
15.9.1 About E9-1-1 Services...........................................................................................293
15.9.2 Microsoft Lync Server and E9-1-1.........................................................................294
15.9.2.1 Gathering Location Information of Lync Clients for 911 Calls................295
15.9.2.2 Adding ELINs to the Location Information Server..................................296
15.9.2.3 Passing Location Information to the PSTN Emergency Provider ..........297
15.9.3 AudioCodes ELIN Device for Lync Server E9-1-1 Calls to PSTN.........................299
15.9.3.1 Detecting and Handling E9-1-1 Calls.....................................................299
15.9.3.2 Pre-empting Existing Calls for E9-1-1 Calls...........................................301
15.9.3.3 PSAP Callback to Lync Clients for Dropped E9-1-1 Calls .....................301
15.9.3.4 Selecting ELIN for Multiple Calls within Same ERL...............................302
15.9.4 Configuring AudioCodes ELIN Device...................................................................303
15.9.4.1 Enabling the E9-1-1 Feature..................................................................303
15.9.4.2 Configuring the E9-1-1 Callback Timeout..............................................303

User's Manual 8 Document #: LTRT-41730
Mediant 4000 SBC
15.9.4.3 Configuring the SIP Release Cause Code for Failed E9-1-1 Calls........303
15.9.4.4 Configuring SBC IP-to-IP Routing Rule for E9-1-1 ................................304
15.9.4.5 Viewing the ELIN Table..........................................................................304
16 Quality of Experience......................................................................................305
16.1 Reporting Voice Quality of Experience to SEM...................................................305
16.1.1 Configuring the SEM Server..................................................................................305
16.1.2 Configuring Clock Synchronization between Device and SEM.............................306
16.1.3 Enabling RTCP XR Reporting to SEM ..................................................................306
16.2 Configuring Quality of Experience Profiles..........................................................307
16.3 Configuring Bandwidth Profiles...........................................................................311
16.4 Configuring Media Enhancement Profiles...........................................................314
17 Control Network ..............................................................................................317
17.1 Configuring Media Realms .................................................................................317
17.1.1 Configuring Remote Media Subnets......................................................................320
17.1.2 Configuring Media Realm Extensions ...................................................................322
17.2 Configuring SRDs...............................................................................................325
17.2.1 Filtering Tables in Web Interface by SRD .............................................................331
17.2.2 Multiple SRDs for Multi-tenant Deployments.........................................................331
17.2.3 Cloning SRDs ........................................................................................................334
17.2.4 Color-Coding of SRDs in Web Interface................................................................335
17.2.5 Automatic Configuration based on SRD................................................................335
17.3 Configuring SIP Interfaces..................................................................................336
17.4 Configuring IP Groups........................................................................................342
17.5 Configuring Proxy Sets.......................................................................................354
18 SIP Definitions.................................................................................................361
18.1 Configuring SIP Parameters...............................................................................361
18.2 Configuring Registration Accounts......................................................................361
18.2.1 Regular Registration Mode....................................................................................364
18.2.2 Single Registration for Multiple Phone Numbers using GIN..................................364
18.3 Configuring Proxy and Registration Parameters.................................................366
18.3.1 SIP Message Authentication Example ..................................................................367
18.4 Configuring SIP Message Manipulation..............................................................369
18.5 Configuring SIP Message Policy Rules...............................................................375
19 Coders and Profiles ........................................................................................379
19.1 Configuring Default Coders ................................................................................379
19.2 Configuring Coder Groups..................................................................................383
19.3 Configuring IP Profiles........................................................................................386
Session Border Controller Application................................................................413
20 SBC Overview..................................................................................................415
20.1 Feature List ........................................................................................................415
20.2 B2BUA and Stateful Proxy Operating Modes......................................................417
20.3 Call Processing of SIP Dialog Requests.............................................................420
20.4 User Registration................................................................................................422
20.4.1 Initial Registration Request Processing.................................................................422

Version 7.0 9 Mediant 4000 SBC
User's Manual Contents
20.4.2 Classification and Routing of Registered Users....................................................423
20.4.3 General Registration Request Processing ............................................................424
20.4.4 Registration Refreshes..........................................................................................424
20.4.5 Registration Restriction Control.............................................................................425
20.4.6 Deleting Registered Users.....................................................................................425
20.5 Media Handling ..................................................................................................426
20.5.1 Media Anchoring....................................................................................................427
20.5.2 Direct Media...........................................................................................................428
20.5.3 Restricting Audio Coders.......................................................................................429
20.5.4 Coder Transcoding................................................................................................430
20.5.5 Transcoding Mode.................................................................................................433
20.5.6 Prioritizing Coder List in SDP Offer.......................................................................434
20.5.7 SRTP-RTP and SRTP-SRTP Transcoding ...........................................................434
20.5.8 Multiple RTP Media Streams per Call Session .....................................................435
20.5.9 Interworking Miscellaneous Media Handling.........................................................435
20.5.9.1 Interworking DTMF Methods..................................................................435
20.5.9.2 Interworking RTP Redundancy..............................................................435
20.5.9.3 Interworking RTP-RTCP Multiplexing ....................................................436
20.5.9.4 Interworking RTCP Attribute in SDP ......................................................436
20.5.9.5 Interworking Crypto Lifetime Field..........................................................436
20.5.9.6 Interworking Media Security Protocols...................................................436
20.5.9.7 Interworking ICE Lite for NAT Traversal ................................................436
20.6 Fax Negotiation and Transcoding.......................................................................437
20.7 Limiting SBC Call Duration.................................................................................438
20.8 SBC Authentication ............................................................................................438
20.8.1 SIP Authentication Server Functionality................................................................438
20.8.2 User Authentication based on RADIUS.................................................................439
20.9 Interworking SIP Signaling..................................................................................439
20.9.1 Interworking SIP 3xx Redirect Responses............................................................439
20.9.1.1 Resultant INVITE Traversing Device .....................................................439
20.9.1.2 Local Handling of SIP 3xx......................................................................441
20.9.2 Interworking SIP Diversion and History-Info Headers...........................................441
20.9.3 Interworking SIP REFER Messages......................................................................442
20.9.4 Interworking SIP PRACK Messages .....................................................................443
20.9.5 Interworking SIP Session Timer............................................................................443
20.9.6 Interworking SIP Early Media ................................................................................443
20.9.7 Interworking SIP re-INVITE Messages..................................................................445
20.9.8 Interworking SIP UPDATE Messages ...................................................................446
20.9.9 Interworking SIP re-INVITE to UPDATE................................................................446
20.9.10 Interworking Delayed Offer....................................................................................446
20.9.11 Interworking Call Hold............................................................................................446
20.9.12 Interworking SIP Via Headers ...............................................................................447
20.9.13 Interworking SIP User-Agent Headers ..................................................................447
20.9.14 Interworking SIP Record-Route Headers..............................................................447
20.9.15 Interworking SIP To-Header Tags in Multiple SDP Answers ................................448
20.9.16 Interworking In-dialog SIP Contact and Record-Route Headers...........................448
21 Enabling the SBC Application........................................................................449
22 Configuring General SBC Settings................................................................451
22.1 Interworking Dialog Information in SIP NOTIFY Messages.................................452
23 Configuring Admission Control.....................................................................455
24 Configuring Coder Groups.............................................................................459
24.1 Configuring Allowed Audio Coder Groups ..........................................................459

User's Manual 10 Document #: LTRT-41730
Mediant 4000 SBC
24.2 Configuring Allowed Video Coder Groups ..........................................................461
25 Routing SBC....................................................................................................463
25.1 Configuring Classification Rules.........................................................................463
25.1.1 Classification Based on URI of Selected Header Example...................................469
25.2 Configuring Message Condition Rules................................................................470
25.3 Configuring SBC IP-to-IP Routing.......................................................................472
25.4 Configuring SIP Response Codes for Alternative Routing Reasons ...................483
25.5 Configuring SBC Routing Policy Rules...............................................................485
26 SBC Manipulations..........................................................................................491
26.1 Configuring IP-to-IP Inbound Manipulations .......................................................493
26.2 Configuring IP-to-IP Outbound Manipulations.....................................................497
27 Configuring Dial Plans....................................................................................503
27.1 Importing and Exporting Dial Plans.....................................................................507
27.2 Creating Dial Plan Files......................................................................................508
27.3 Using Dial Plan Tags for IP-to-IP Routing...........................................................508
27.3.1 Dial Plan Backward Compatibility..........................................................................510
27.4 Using Dial Plan Tags for Outbound Manipulation ...............................................512
28 Advanced SBC Features.................................................................................513
28.1 Configuring Call Preemption for SBC Emergency Calls......................................513
28.2 Emergency Call Routing using LDAP to Obtain ELIN.........................................514
28.3 WebRTC ............................................................................................................515
28.3.1 SIP over WebSocket..............................................................................................518
28.3.2 Configuring WebRTC.............................................................................................520
28.4 Call Forking........................................................................................................521
28.4.1 Initiating SIP Call Forking ......................................................................................521
28.4.2 SIP Forking Initiated by SIP Proxy Server.............................................................521
28.4.3 Call Forking-based IP-to-IP Routing Rules............................................................522
28.5 Call Survivability.................................................................................................523
28.5.1 Auto-Provisioning of Subscriber-Specific Information for BroadWorks Server for
Survivability.........................................................................................................................523
28.5.2 BroadSoft's Shared Phone Line Call Appearance for SBC Survivability...............524
28.5.3 Call Survivability for Call Centers ..........................................................................525
28.5.4 Survivability Mode Display on Aastra IP Phones ..................................................528
28.6 Alternative Routing on Detection of Failed SIP Response..................................528
Cloud Resilience Package....................................................................................529
29 CRP Overview..................................................................................................531
30 CRP Configuration..........................................................................................533
30.1 Enabling the CRP Application.............................................................................533
30.2 Configuring Call Survivability Mode ....................................................................534
30.3 Pre-Configured IP Groups..................................................................................536
30.4 Pre-Configured IP-to-IP Routing Rules...............................................................537
30.4.1 Normal Mode .........................................................................................................537
30.4.2 Emergency Mode...................................................................................................538

Version 7.0 11 Mediant 4000 SBC
User's Manual Contents
30.4.3 Auto Answer to Registrations ................................................................................539
30.5 Configuring PSTN Fallback ................................................................................540
High Availability System.......................................................................................541
31 HA Overview....................................................................................................543
31.1 Connectivity and Synchronization between Devices...........................................543
31.2 Device Switchover upon Failure .........................................................................544
31.3 HA Status on the Home Page.............................................................................546
32 HA Configuration.............................................................................................547
32.1 Initial HA Configuration.......................................................................................547
32.1.1 Network Topology Types and Rx/Tx Ethernet Port Group Settings......................547
32.1.2 Configuring the HA Devices ..................................................................................548
32.1.2.1 Step 1: Configure the First Device .........................................................549
32.1.2.2 Step 2: Configure the Second Device....................................................551
32.1.2.3 Step 3: Initialize HA on the Devices.......................................................551
32.2 Configuration while HA is Operational ................................................................552
32.3 Configuring Firewall Allowed Rules ....................................................................553
32.4 Monitoring IP Entity and HA Switchover upon Ping Failure.................................554
33 HA Maintenance ..............................................................................................557
33.1 Maintenance of Redundant Device.....................................................................557
33.2 Replacing a Failed Device..................................................................................557
33.3 Forcing a Switchover..........................................................................................558
33.4 Software Upgrade ..............................................................................................558
Maintenance...........................................................................................................559
34 Basic Maintenance..........................................................................................561
34.1 Resetting the Device ..........................................................................................561
34.2 Remotely Resetting Device using SIP NOTIFY ..................................................563
34.3 Locking and Unlocking the Device......................................................................563
34.4 Saving Configuration..........................................................................................564
35 High Availability Maintenance........................................................................565
35.1 Initiating an HA Switchover.................................................................................565
35.2 Resetting the Redundant Unit.............................................................................565
36 Disconnecting Active Calls............................................................................567
37 Software Upgrade............................................................................................569
37.1 Auxiliary Files.....................................................................................................569
37.1.1 Loading Auxiliary Files...........................................................................................569
37.1.1.1 Loading Auxiliary Files through Web Interface ......................................570
37.1.1.2 Loading Auxiliary Files through CLI .......................................................571
37.1.1.3 Loading Auxiliary Files through ini File using TFTP...............................571
37.1.2 Deleting Auxiliary Files ..........................................................................................571
37.1.3 Call Progress Tones File .......................................................................................572

User's Manual 12 Document #: LTRT-41730
Mediant 4000 SBC
37.1.4 Prerecorded Tones File.........................................................................................574
37.1.5 Dial Plan File..........................................................................................................575
37.1.5.1 Creating a Dial Plan File.........................................................................575
37.1.5.2 Obtaining IP Destination from Dial Plan File..........................................576
37.1.5.3 Viewing Information of Installed Dial Plan File.......................................576
37.1.6 User Information File .............................................................................................577
37.1.6.1 Enabling the User Info Table..................................................................577
37.1.6.2 User Information File for SBC User Database.......................................577
37.1.6.3 Viewing the Installed User Info File Name.............................................580
37.1.7 AMD Sensitivity File...............................................................................................581
37.2 Software License Key.........................................................................................581
37.2.1 Obtaining the Software License Key File...............................................................581
37.2.2 Installing the Software License Key.......................................................................582
37.2.2.1 Installing Software License Key through Web Interface ........................583
37.2.2.2 Installing Software License Key through CLI .........................................584
37.3 Upgrading SBC Capacity Licenses by License Pool Manager Server.................585
37.4 Software Upgrade Wizard...................................................................................588
38 Backing Up and Loading Configuration File.................................................594
39 Automatic Provisioning..................................................................................597
39.1 Automatic Configuration Methods.......................................................................597
39.1.1 DHCP-based Provisioning.....................................................................................597
39.1.2 HTTP-based Provisioning......................................................................................598
39.1.3 FTP- based Provisioning .......................................................................................599
39.1.4 Provisioning using AudioCodes EMS....................................................................599
39.2 HTTP/S-Based Provisioning using the Automatic Update Feature......................600
39.2.1 Files Provisioned by Automatic Update.................................................................600
39.2.2 File Location for Automatic Update .......................................................................600
39.2.3 Triggers for Automatic Update...............................................................................601
39.2.4 Access Authentication with HTTP Server..............................................................602
39.2.5 Querying Provisioning Server for Updated Files ...................................................602
39.2.6 File Download Sequence.......................................................................................605
39.2.7 Cyclic Redundancy Check on Downloaded Configuration Files ...........................606
39.2.8 MAC Address Placeholder in Configuration File Name.........................................606
39.2.9 File Template for Automatic Provisioning..............................................................606
39.2.10 Automatic Update Configuration Examples...........................................................608
39.2.10.1Automatic Update for Single Device ......................................................608
39.2.10.2Automatic Update from Remote Servers ...............................................610
39.2.10.3Automatic Update for Mass Deployment................................................611
40 Restoring Factory Defaults ............................................................................615
40.1 Restoring Factory Defaults through CLI..............................................................615
40.2 Restoring Factory Defaults through Web Interface .............................................616
40.3 Restoring Defaults through ini File......................................................................616
Status, Performance Monitoring and Reporting.................................................617
41 System Status .................................................................................................619
41.1 Viewing Device Information................................................................................619
41.2 Viewing Ethernet Port Information......................................................................620
41.3 Viewing Hardware Components Status ..............................................................621
41.4 Reporting DSP Utilization through SNMP MIB....................................................622

Version 7.0 13 Mediant 4000 SBC
User's Manual Contents
42 Carrier-Grade Alarms......................................................................................623
42.1 Viewing Active Alarms........................................................................................623
42.2 Viewing History Alarms.......................................................................................624
43 Performance Monitoring.................................................................................625
43.1 Viewing MOS per Media Realm..........................................................................625
43.2 Viewing Quality of Experience............................................................................626
43.3 Viewing Average Call Duration...........................................................................627
44 VoIP Status......................................................................................................629
44.1 Viewing Active IP Interfaces...............................................................................629
44.2 Viewing Ethernet Device Status..........................................................................629
44.3 Viewing Static Routes Status..............................................................................630
44.4 Viewing Registered Users ..................................................................................630
44.5 Viewing Registration Status................................................................................631
45 Reporting Information to External Party.......................................................633
45.1 Configuring RTCP XR ........................................................................................633
45.2 Generating Call Detail Records ..........................................................................637
45.2.1 CDR Field Description ...........................................................................................637
45.2.1.1 CDR Fields for SBC Signaling ...............................................................637
45.2.1.2 CDR Fields for SBC Media.....................................................................641
45.2.1.3 CDR Fields for Locally Stored SBC .......................................................642
45.2.2 Customizing CDRs for SBC Calls..........................................................................643
45.2.3 Storing CDRs on the Device..................................................................................647
45.2.4 Configuring CDR Reporting...................................................................................649
45.3 Configuring RADIUS Accounting........................................................................650
Diagnostics............................................................................................................657
46 Syslog and Debug Recording ........................................................................659
46.1 Configuring Log Filter Rules...............................................................................659
46.1.1 Filtering IP Network Traces ...................................................................................663
46.2 Configuring Syslog .............................................................................................664
46.2.1 Syslog Message Format........................................................................................664
46.2.1.1 Event Representation in Syslog Messages............................................666
46.2.1.2 Identifying AudioCodes Syslog Messages using Facility Levels............667
46.2.1.3 Syslog Fields for Answering Machine Detection (AMD) ........................668
46.2.1.4 SNMP Alarms in Syslog Messages........................................................669
46.2.2 Configuring Web User Activities to Report to Syslog ............................................669
46.2.3 Configuring Syslog Debug Level ...........................................................................671
46.2.4 Configuring Address of Syslog Server...................................................................672
46.2.5 Enabling Syslog.....................................................................................................672
46.2.6 Viewing Syslog Messages.....................................................................................673
46.2.7 Viewing Web User Activity Logs............................................................................674
46.3 Configuring Debug Recording ............................................................................675
46.3.1 Configuring Address of Debug Recording Server .................................................675
46.3.2 Collecting Debug Recording Messages ................................................................675
46.3.3 Debug Capturing on Physical VoIP Interfaces ......................................................677

User's Manual 14 Document #: LTRT-41730
Mediant 4000 SBC
47 Creating Core Dump and Debug Files upon Device Crash .........................679
48 Testing SIP Signaling Calls............................................................................681
48.1 Configuring Test Call Endpoints .........................................................................681
48.2 Starting and Stopping Test Calls ........................................................................686
48.3 Viewing Test Call Statistics.................................................................................687
48.4 Configuring DTMF Tones for Test Calls..............................................................689
48.5 Configuring SBC Test Call with External Proxy...................................................689
48.6 Test Call Configuration Examples.......................................................................691
49 Pinging a Remote Host or IP Address...........................................................693
Appendix ................................................................................................................695
50 Dialing Plan Notation for Routing and Manipulation....................................697
51 Configuration Parameters Reference............................................................701
51.1 Management Parameters...................................................................................701
51.1.1 General Parameters ..............................................................................................701
51.1.2 Web Parameters....................................................................................................702
51.1.3 Telnet Parameters .................................................................................................704
51.1.4 ini File Parameters.................................................................................................705
51.1.5 SNMP Parameters.................................................................................................705
51.1.6 Serial Parameters..................................................................................................709
51.1.7 Auxiliary and Configuration File Name Parameters ..............................................710
51.1.8 Automatic Update Parameters ..............................................................................711
51.2 Networking Parameters......................................................................................715
51.2.1 Ethernet Parameters..............................................................................................715
51.2.2 Multiple VoIP Network Interfaces and VLAN Parameters.....................................716
51.2.3 Routing Parameters...............................................................................................716
51.2.4 Quality of Service Parameters...............................................................................717
51.2.5 NAT Parameters....................................................................................................718
51.2.6 DNS Parameters....................................................................................................720
51.2.7 DHCP Parameters.................................................................................................721
51.2.8 NTP and Daylight Saving Time Parameters..........................................................723
51.3 Debugging and Diagnostics Parameters.............................................................725
51.3.1 General Parameters ..............................................................................................725
51.3.2 SIP Test Call Parameters......................................................................................725
51.3.3 Syslog, CDR and Debug Parameters....................................................................727
51.3.4 Resource Allocation Indication Parameters...........................................................732
51.4 HA Parameters...................................................................................................733
51.5 Security Parameters...........................................................................................735
51.5.1 General Security Parameters ................................................................................735
51.5.2 HTTPS Parameters ...............................................................................................737
51.5.3 SRTP Parameters..................................................................................................738
51.5.4 TLS Parameters.....................................................................................................739
51.5.5 SSH Parameters....................................................................................................742
51.5.6 IDS Parameters.....................................................................................................743
51.5.7 OCSP Parameters.................................................................................................744
51.6 Quality of Experience Parameters......................................................................745
51.7 Control Network Parameters ..............................................................................748
51.7.1 IP Group, Proxy, Registration and Authentication Parameters.............................748
51.7.2 Network Application Parameters ...........................................................................755

Version 7.0 15 Mediant 4000 SBC
User's Manual Contents
51.8 General SIP Parameters ....................................................................................758
51.9 Coders and Profile Parameters...........................................................................773
51.10Channel Parameters...........................................................................................775
51.10.1 Voice Parameters..................................................................................................775
51.10.2 Coder Parameters .................................................................................................778
51.10.3 DTMF Parameters.................................................................................................779
51.10.4 RTP, RTCP and T.38 Parameters.........................................................................780
51.11SBC Parameters ................................................................................................783
51.11.1 Supplementary Services........................................................................................798
51.12IP Media Parameters..........................................................................................799
51.13Services .............................................................................................................803
51.13.1 SIP-based Media Recording Parameters..............................................................803
51.13.2 RADIUS and LDAP Parameters............................................................................804
51.13.2.1General Parameters...............................................................................804
51.13.2.2RADIUS Parameters..............................................................................805
51.13.2.3LDAP Parameters ..................................................................................807
51.13.3 Least Cost Routing Parameters ............................................................................809
51.13.4 Call Setup Rules Parameters ................................................................................810
51.13.5 HTTP-based Services............................................................................................810
51.13.6 HTTP Proxy Parameters........................................................................................811
52 SBC and DSP Channel Capacity....................................................................813
52.1 Signaling-Media Sessions & User Registrations.................................................813
52.2 Mediant 4000 Channel Capacity and Capabilities...............................................814
52.3 Mediant 4000B Channel Capacity and Capabilities ............................................816
53 Technical Specifications ................................................................................819

User's Manual 16 Document #: LTRT-41730
Mediant 4000 SBC
This page is intentionally left blank.

Version 7.0 17 Mediant 4000 SBC
User's Manual Notices
Notice
This document describes AudioCodes Mediant 4000 Session Border Controller (SBC).
Information contained in this document is believed to be accurate and reliable at the time of
printing. However, due to ongoing product improvements and revisions, AudioCodes cannot
guarantee accuracy of printed material after the Date Published nor can it accept responsibility
for errors or omissions. Before consulting this document, check the corresponding Release
Notes regarding feature preconditions and/or specific support in this release. In cases where
there are discrepancies between this document and the Release Notes, the information in the
Release Notes supersedes that in this document. Updates to this document and other
documents as well as software files can be downloaded by registered customers at
http://www.audiocodes.com/downloads.
© Copyright 2016 AudioCodes Ltd. All rights reserved.
This document is subject to change without notice.
Date Published: August-07-2016
Trademarks
AudioCodes, AC, HD VoIP, HD VoIP Sounds Better, IPmedia, Mediant, MediaPack, What’s
Inside Matters, OSN, SmartTAP, VMAS, VoIPerfect, VoIPerfectHD, Your Gateway To
VoIP, 3GX, VocaNOM and CloudBond 365 are trademarks or registered trademarks of
AudioCodes Limited All other products or trademarks are property of their respective
owners. Product specifications are subject to change without notice.
WEEE EU Directive
Pursuant to the WEEE EU Directive, electronic and electrical waste must not be disposed
of with unsorted waste. Please contact your local recycling authority for disposal of this
product.
Customer Support
Customer technical support and services are provided by AudioCodes or by an authorized
AudioCodes Service Partner. For more information on how to buy technical support for
AudioCodes products and for contact information, please visit our Web site at
www.audiocodes.com/support.
Abbreviations and Terminology
Each abbreviation, unless widely used, is spelled out in full when first used.

User's Manual 18 Document #: LTRT-41730
Mediant 4000 SBC
Related Documentation
Manual Name
SIP CPE Release Notes
Mediant 4000 SBC Hardware Installation Manual
Complementary Guides
CLI Reference Guide
SNMP User's Guide
SBC Design Guide
Recommended Security Guidelines Configuration Note
SIP Message Manipulations Quick Reference Guide
Utility Guides
INI Viewer & Editor Utility User's Guide
AcBootP Utility User's Guide
CLI Wizard User's Guide
Notes and Warnings
Note: The device is an indoor unit and therefore, must be installed only INDOORS. In
addition, Ethernet port interface cabling must be routed only indoors and must not exit
the building.
Note: The scope of this document does not fully cover security aspects for deploying
the device in your environment. Security measures should be done in accordance
with your organization’s security policies. For basic security guidelines, refer to
AudioCodes Recommended Security Guidelines document.
Note: Throughout this manual, unless otherwise specified, the term device refers to
your AudioCodes product.
Note: Before configuring the device, ensure that it is installed correctly as instructed
in the Hardware Installation Manual.
Note: Some of the features listed in this document are available only if the relevant
Software License Key has been purchased from AudioCodes and installed on the
device. For a list of Software License Keys that can be purchased, please consult
your AudioCodes sales representative.

Version 7.0 19 Mediant 4000 SBC
User's Manual Notices
Notes:
•By default, the device supports export-grade (40-bit and 56-bit) encryption due to
US government restrictions on the export of security technologies. To enable 128-
bit and 256-bit encryption on your device, contact your AudioCodes sales
representative.
•This device includes software developed by the OpenSSL Project for use in the
OpenSSL Toolkit (http://www.openssl.org/).
•This device includes cryptographic software written by Eric Young
([e-mail]).
Note: OPEN SOURCE SOFTWARE. Portions of the software may be open source
software and may be governed by and distributed under open source licenses, such
as the terms of the GNU General Public License (GPL), the terms of the Lesser
General Public License (LGPL),
BSD and LDAP, which terms are located at:
http://www.audiocodes.com/support and all are incorporated herein by reference. If
any open source software is provided in object code, and its accompanying license
requires that it be provided in source code as well, Buyer may receive such source
code by contacting AudioCodes, by following the instructions available on
AudioCodes website.
Document Revision Record
LTRT Description
41723 Initial document release for Version 7.0.
41725 Mediant 4000B added.
New parameters: IPGroup_UUIFormat; PM_EnableThresholdAlarms; NetworkNodeId;
HTTPProxyApplication; HTTPInterface; HTTPProxyService; HTTPProxyHost;
EMSService.
New features: HTTP-based Proxy Services; Viewing Information of Installed Dial Plan
File; Viewing the Installed User Info File Name; Upgrading SBC Capacity Licenses by
License Pool Manager Server; CDR Fields for Locally Stored SBC; Storing CDRs on
the Device.
Updated parameter descriptions: Session Limit; Session Timeout; LoggingFilters;
PhysicalPortsTable_GroupStatus; LdapConfiguration_Interface;
SRD_SBCOperationMode (option 2); SRD_EnableUnAuthenticatedRegistrations;
SRD_SBCRegisteredUsersClassificationMethod (option 2);
SIPInterface_EnableUnAuthenticatedRegistrations; IPGroup_SBCOperationMode
(default and option 3 removed); ProxySet_DNSResolveMethod (new option 3);
SBCAdmissionControl_Reservation; SBCAdmissionControl_Rate;
IP2IPRouting_DestType; IP2IPRouting_DestIPGroupName;
IP2IPRouting_DestSIPInterfaceName; WebSessionTimeout; EnableSBCMediaSync;
SSHMaxSessions (default).
Updated sections: Technical Specifications; Configuring Web Session and Access
Settings; Configuring Automatic Date and Time using SNTP; Configuring Date and
Time Manually; Configuring the Time Zone; Configuring Daylight Saving Time; Media
(RTP/RTCP/T.38); Answering Machine Detection (AMD); SIP-based Media Recording
(warning added, etc.); Avaya UCID; Enhanced 9-1-1 Support for Lync Server (note
added); Cloning SRDs; Configuring SIP Message Manipulation; Configuring Log Filter

User's Manual 20 Document #: LTRT-41730
Mediant 4000 SBC
LTRT Description
Rules; Configuring Address of Debug Recording Server; Starting and Stopping Debug
Recording (removed); Configuring Ethernet Port Groups.
Maximum table rows of following tables were updated: TLS Contexts table; SBC
Routing Policy table; SBC User Info table.
Miscellaneous: maximum IP addresses per host name was updated for internal DNS
(Internal DNS table); statement added that R-factor VoIP metrics unavailable if RTCP
XR feature is unavailable (not licensed or disabled); statement removed that IP Group
ID 0 cannot be used; SBCEnableAASTRASurvivabilityNotice parameter modified to
SBCEnableSurvivabilityNotice; maximum concurrent WebRTC sessions added; WAN
parameters were removed; CLI for Web Users table; Maximum Signaling, Media
Sessions and Registered Users for Mediant 4000B
41726 New sections: Enabling LDAP Searches for Numbers with Characters;
File Template for
Automatic Provisioning; Configuring Dial Plans
New parameters: LdapConfiguration_VerifyCertificate; GW Group Registered IP
Address; GW Group Registered Status; CDRLocalMaxNomOfFiles; CDR Syslog
Sequence Number; HAUnitIdName; HARemoteAddress; HARevertiveEnabled;
HAPriority;LDAPNumericAttributes; FeatureKeyURL; TemplateUrl; AupdFilesList;
IP2IPRouting_SrcTags; IP2IPRouting_DestTags; IPOutboundManipulation_SrcTags;
IPOutboundManipulation_DestTags; DialPlans; DialPlanRule; IP2IPRouting_Trigger;
SIPChallengeCachingMode; MaxCallDuration
G.727 removed; NFS removed; Web browser requirement for Web interface; LDAP
cache size.
Parameters removed: SRD_SBCRegisteredUsersClassificationMethod;
IpProfile_RemoteBaseUDPPort
Updated parameter descriptions: IpProfile_SBCAllowedMediaTypes;
IpProfile_DisconnectOnBrokenConnection; TLSContexts_TLSVersion;
DeviceTable_Tagging; BaseUDPPort; HTTPRemoteServices_Policy;
HTTPRemoteServices_VerifyCertificate; HTTPInterface_VerifyCert;
HTTPProxyHost_VerifyCert; CpMediaRealm_PortRangeEnd;
CpMediaRealm_PortRangeStart; SIPInterface_UDPPort; IPGroup_Type;
IPGroup_SIPGroupName; IPGroup_ClassifyByProxySet; IPGroup_InboundManSet;
IPGroup_OutboundManSet; IPGroup_SBCPSAPMode;
MessageManipulations_RowRole; CodersGroup0_CoderSpecific;
CodersGroupX_CoderSpecific; Classification_SrcAddress; IP2IPRouting_GroupPolicy;
BaseUDPport; RTCPXREscIP; SBCUserRegistrationGraceTime
; Coder payload types;
RejectCancelAfterConnect
Updated sections: Configuring Underlying Ethernet Devices; Configuring RTP Base
UDP Port; Enabling the E9-1-1 Feature; Configuring IP Groups (matching
methodology); Configuring SIP Message Manipulation; Configuring Classification Rules
;
Configuring SBC IP-to-IP Routing; Network Topology Types and Rx/Tx Ethernet Port
Group Settings; Initial HA Configuration; Configuring RTCP XR; Configuring CDR
Reporting; Customizing CDRs for SBC Calls; Storing CDRs on the Device; Configuring
RADIUS Accounting.
41730 Updated sections: Accessing the Web Interface (autocompletion); CLI-Based
Management (permissible user accounts); Understanding Configuration Modes
(enable command note); Configuring TLS Certificate Contexts (TLS versions);
Configuring Underlying Ethernet Devices (max. VLANs); First Incoming Packet
Mechanism (NAT by Signaling): No-Op Packets (note); Configuring Firewall Settings
(note); Configuring the Device's LDAP Cache; Centralized Third-Party Routing
Server (ARM added); Configuring the SEM Server (port removed); Registration
Refreshes; ConditionTable_Name (max. chars); Configuring Dial Plans; Configuring
SBC User Info Table in Loadable Text File (syntax): Configuring RTCP XR
(PublicationIPGroupID); Storing CDRs on the Device (ftp removed, Web names):