Use this sample configuration to configure your SBC SWe on Azure for SLB.
Use the same configuration on all SBCs which communicate to a particular SLB.
Network Setup
Create the routes for Azure using the following options for PKT1:
Option | Example Value |
---|---|
Name | jm_slb_hfe_pkt1_route |
Destination Address | 10.2.2.43/24 |
Next Hop Destination | 10.27.7.4 |
The route table that the routes are part of is attached to a subnet, where those routes apply subnet-wide.
- As a result, any SBC HFE setup which shares an endpoint address with another SBC HFE setup must have its PKT ports in different subnets to those other setups, so the traffic is routed to the correct HFE.
- The SLB setup is a shared endpoint for all of the SBC setups it is front-ending; therefore, each SBC setup must have (at a minimum) its PKT port used for SLB communication in an individual subnet.
HFE Example
The following example uses the following setup:
- The same public endpoint is in communication for the 3 SBCs for media; therefore each PKT0 requires an individual subnet
- The private endpoint is in the same subnet as ETH0 of the PKT1-HFE for each setup (SLB/SBC)
- The setup shares as many subnets as possible (MGT, HA, HFE-PRIV, HFE-PUB0)
- SLB communication configured to to use PKT1
Ribbon recommends replicating the same setup as depicted in the network diagram below.
Network Diagram for HFE Setup:
Example Azure Route Table Configuration
Route Table | Route Destination | Next Hop (HFE2.1) |
---|---|---|
SLB-PKT0-HFE-ROUTETABLE / SBC*-PKT0-HFE-ROUTETABLE | IP for public endpoint | ETH2 IP for associated PKT0 HFE |
SLB-PKT1-HFE-ROUTETABLE / SBC*-PKT1-HFE-ROUTETABLE | CIDR address for HFE-PRIV subnet | ETH2 IP for associated PKT1 HFE |
SBC SLB Connection Configuration
Set the SBC configuration for the IP address of the SLB, as follows:
HFE setup | SLB communication using PKT0/IF2 | SLB communication using PKT1/IF3 |
---|---|---|
HFE 2.1 | ETH0 IP Address of HFE-PKT0 | ETH0 IP Address of HFE-PKT1 |
Sample Configuration for SLB-SBC on Azure
Steps:
When configuring the ipAddress
on the SBC, you must use the IP address for the HFE interface that front-ends the PKT port used for SLB communication. Also, ensure the SBC and SLB sipSigPort numbers are identical.
Configure SLB on HFE2.1
set addressContext default ipInterfaceGroup LIG1 ipInterface LIF1 ceName vsbcSystem portName pkt0 ipVarV4 IF2.IPV4 ipPublicVarV4 HFE_IF2.FIPV4 prefixVarV4 IF2.PrefixV4 commit set addressContext default ipInterfaceGroup LIG1 ipInterface LIF1 mode inService state enable commit set addressContext default ipInterfaceGroup LIG2 ipInterface LIF2 ceName vsbcSystem portName pkt1 ipVarV4 IF3.IPV4 ipPublicVarV4 HFE_IF3.FIPV4 prefixVarV4 IF3.PrefixV4 commit set addressContext default ipInterfaceGroup LIG2 ipInterface LIF2 mode inService state enable commit set addressContext default zone ZONE_IN id 2 commit set addressContext default zone ZONE_IN id 2 sipSigPort 2 ipInterfaceGroupName LIG1 ipVarV4 IF2.IPV4 ipPublicVarV4 HFE_IF2.FIPV4 portNumber 5060 transportProtocolsAllowed sip-tls-tcp,sip-tcp,sip-udp state enabled mode inService commit set addressContext default zone ZONE_OUT id 3 commit set addressContext default zone ZONE_OUT id 3 sipSigPort 3 ipInterfaceGroupName LIG2 ipVarV4 IF3.IPV4 ipPublicVarV4 HFE_IF3.FIPV4 portNumber 5060 transportProtocolsAllowed sip-udp,sip-tcp,sip-tls-tcp state enabled mode inService commit set addressContext default staticRoute 0.0.0.0 0 10.20.15.1 LIG1 LIF1 preference 100 commit set addressContext default staticRoute 0.0.0.0 0 10.20.16.1 LIG2 LIF2 preference 100 commit Interface for zmqc communication ********************************* set system slb commInterface addressContext default ipInterfaceGroup LIG2 pktIpVar IF3.IPV4 commit
Configure ACLs on SLB
set addressContext default ipAccessControlList rule 1 state enabled fillRate unlimited bucketSize unlimited protocol udp destIpAddress IF3.IPv4 precedence 1 destIpAddressPrefixLength 32 set addressContext default ipAccessControlList rule 2 state enabled fillRate unlimited bucketSize unlimited protocol tcp destIpAddress IF3.IPV4 precedence 2 destIpAddressPrefixLength 32 set addressContext default ipAccessControlList rule 3 state enabled fillRate unlimited bucketSize unlimited protocol tcp destIpAddress <slb commInterface IP> precedence 3 destIpAddressPrefixLength 32
Configure SBC SWe on Azure for SLB
set system slb usage enabled commit set addressContext default ipInterfaceGroup LIG1 ipInterface LIF1 portName pkt0 ipVarV4 IF2.IPV4 ipPublicVarV4 HFE_IF2.FIPV4 prefixVarV4 IF2.PrefixV4 state enabled mode inService commit set addressContext default ipInterfaceGroup LIG2 ipInterface LIF2 portName pkt1 ipVarV4 IF3.IPV4 ipPublicVarV4 HFE_IF3.FIPV4 prefixVarV4 IF3.PrefixV4 state enabled mode inService commit set addressContext default zone ZONE_IN id 2 commit set addressContext default zone ZONE_IN sipSigPort 2 commit set addressContext default zone ZONE_OUT id 3 commit set addressContext default zone ZONE_OUT sipSigPort 3 commit set addressContext default zone ZONE_IN sipTrunkGroup SIP_INGRESS_TG mode inService state enabled media mediaIpInterfaceGroupName LIG1 commit set addressContext default zone ZONE_IN sipTrunkGroup SIP_INGRESS_TG ingressIpPrefix 20.62.0.66 32 commit set addressContext default zone ZONE_OUT sipTrunkGroup SIP_EGRESS_TG mode inService state enabled media mediaIpInterfaceGroupName LIG2 commit set addressContext default zone ZONE_OUT ipPeer EGRESS_PEER ipAddress 10.20.13.4 ipPort 4020 commit set global callRouting routingLabel CLOUD routingLabelRoute 0 ipPeer EGRESS_PEER trunkGroup SIP_EGRESS_TG inService inService commit set global callRouting route trunkGroup SIP_INGRESS_TG VSBCSYSTEM standard 888 1 all all ALL none Sonus_NULL routingLabel CLOUD commit set addressContext default zone ZONE_IN sipTrunkGroup SIP_INGRESS_TG signaling timers sessionKeepalive 0 commit set addressContext default zone ZONE_OUT sipTrunkGroup SIP_EGRESS_TG signaling timers sessionKeepalive 0 commit set system slb slbAddress SLB_01_AZ ipAddress 10.20.4.5 com set addressContext default zone ZONE_IN id 2 sipSigPort 2 slbName SLB_01_AZ commit set addressContext default zone ZONE_OUT id 3 sipSigPort 3 slbName SLB_01_AZ commit set system slb commInterface addressContext default ipInterfaceGroup LIG2 pktIpVar IF3.IPV4 commit set addressContext default staticRoute 0.0.0.0 0 10.20.17.1 LIG1 LIF1 preference 100 commit set addressContext default staticRoute 0.0.0.0 0 10.20.18.1 LIG2 LIF2 preference 100