Best Practice - Configuring SBC Edge for Zoom Phone

Overview

The SBC Edge Portfolio (SBC SWe Edge and SBC 1000/2000) offers the Zoom Phone's Bring Your Own Carrier (BYOC) services. You can use the SBC Edge Portfolio to connect any Zoom Phone client to the following:

• A PSTN trunk based on TDM (for example, PRI and BRI), CAS, or SIP
• Third-party, non-Zoom Phone SIP- or TDM-based PBXs, analog devices, and SIP clients

This section outlines how to configure the SBC Edge Portfolio to connect to Zoom Phone's BYOC in an Enterprise network (On-Premises). For SBC Edge and Zoom Phone BYOC deployments, refer to Ribbon SBC Edge Configuration with Zoom BYOC. The following network diagram illustrates the connection topology for Zoom phone BYOC deployed in an Enterprise network.

SBC Edge Connects to Zoom Phone BYOC Deployed in an Enterprise Network

To configure the SBC Edge Portfolio to connect to Zoom Phone's BYOC in an Enterprise network, you must perform the following procedures:

1. Install the SBC Edge
2. Configure TLS between SBC Edge and Zoom
3. Configure a Media Profile
4. Configure an SDES-SRTP Profile
5. Configure Zoom Phone BYOC
6. Configure SBC Edge for Zoom Phone BYOC
7. Confirm SBC Edge Links to Zoom Phone BYOC
8. Place a Test Call
   

Install the SBC Edge Portfolio

This best practice assumes that the SBC Edge Portfolio is installed and running. If the SBC Edge Portfolio is not installed, see the following table for the installation procedures.

Installation Requirements

Configure TLS between SBC Edge and Zoom 

TLS provides peer authentication, confidentiality and message integrity. 

Prerequisites for TLS between SBC Edge and Zoom

The prerequisites for TLS configuration between SBC Edge and Zoom are:

• a Certificate Authority (CA)

• a Zoom BYOC trunk with TLS/SRTP enabled

Workflow

Generating a Certificate Signing Request 

Start

1. Log into the SBC Edge WebUI (refer to Logging into the SBC Edge Portfolio).

2. Select Settings > Security > SBC Certificates > Generate SBC Edge CSR. The Generate Certificate Signing Request pane opens on the right.

3. Complete the following fields:
   • Common Name
   • Email Address
   • ISO Country Code
   • State/Province (if applicable)
   • Organization
   • Key length
   
   
4. Click OK. 

5. Once the system generates the Certificate Signing Request (CSR), copy the result and send it to a Trusted Certificate Authority for their signature. 
   
   
   

   Note

   Once you receive the signed certificate from the Trusted Certificate Authority, perform Importing a Trusted CA Certificate into SBC Edge.

   
   
   

Importing a Trusted CA Certificate into SBC Edge

Start

1. In the SBC Edge WebUI, select Settings > Security > SBC Certificates > Trusted CA Certificates. The Trusted CA Certificate Table opens on the right.
2. Click Imported Trusted CA Certificate. The Import Trusted CA Certificate opens.
3. Determine the Mode to import the Trusted CA Certificate:
   a. If you select Copy and Paste as the Mode, paste in the Paste Base64 Certificate field the CSR result you copied in Generating a Certificate Signing Request.
      
   b. If you select File Upload as the Mode, click Choose File to select the required file.      
      
4. Click OK.

Verifying the Trusted Root CA Certificate 

Start

1. In the SBC Edge WebUI, select Settings > Security > SBC Certificates > Trusted CA Certificates. The Trusted CA Certificate Table opens on the right.
2. Expand the certificate you imported in Importing a Trusted CA Certificate into SBC Edge.
3. In the Certificate section, make sure that the Verify Status field shows OK.
   

Configuring a TLS Profile 

TLS Profile is required for the TLS handshake between SBC Edge and Zoom. This profile defines cipher suites supported by the SBC Edge. You must attach the TLS Profile to the SIP Server Table on the Zoom leg.

Start

1. In the SBC Edge WebUI, select Settings > Security > TLS Profiles > Default TLS Profile. The TLS Profile pane opens on the right.
2. In the TLS Parameters section, modify the following fields:
   • TLS Protocol: Select TLS 1.2 Only.
   • Mutual Authentication: Select Enabled.
   • Certificate: Select SBC Edge Certificate.
   • Validate Server FQDN: Select Disabled.
   
3. Click Apply.

Configure a Media Profile 

Media Profiles allow you to specify the individual voice and fax compression codecs and their associated settings, for inclusion in a Media List. Different codecs provide varying levels of compression, allowing one to reduce bandwidth requirements at the expense of voice quality. For more information on media profiles, refer to Managing Media Profiles.

Start

1. Log into the SBC Edge WebUI (refer to Logging into the SBC Edge Portfolio).
2. Select Settings > Media > Media Profiles. The Media Profiles pane opens on the right.
3. From the Create Media Profile dropdown list, select Voice Codec Profile. The Create Voice Codec Profile window opens.
4. In the Voice Codec Configuration section, complete the following fields:
   • Description: Enter a name for the media profile.
   • Codec: Select the required Codec.
   • Payload Size: Leave as default (for example, 20).
   
5. Click OK.

Configure an SDES-SRTP Profile 

SDES-SRTP Profiles define a cryptographic context which is used in SRTP negotiation. SDES-SRTP Profiles are required for enabling encryption and SRTP are applied to Media Lists.

Start

1. Log into the SBC Edge WebUI (refer to Logging into the SBC Edge Portfolio).

2. Select Settings > Media > SDES-SRTP Profiles. The SDES-SRTP Profiles pane opens on the right.

3. Click Create SDES-SRTP Profile. The Create SDES-SRTP Profile window opens.
4. Complete the following fields:
   • Description: Enter a name for the SDES-SRTP profile (for example, SRTP_1).
   • Crypto Suite: Select AES_CM_128_HMAC_SHA1_80.
   • Lifetime Value: Select 2³¹.
   • Key Identifier Length: Select 0.
   
5. Click OK.

Configure Zoom Phone BYOC

This best practice does not detail the configuration on the Zoom Phone.

• For more information on configuring SBC Edge to Zoom Phone BYOC, refer to "Section A: SBC Edge Configuration" in Ribbon SBC Edge Configuration with Zoom BYOC

• For more information on configuring Zoom Phone BYOC, refer to "Section B: Zoom Web BYOC Configuration" in Ribbon SBC Edge Configuration with Zoom BYOC.

Prerequisites for Zoom Phone BYOC

The prerequisites for the Zoom Phone BYOC are:

• a Zoom Phone BYOC account

• an existing carrier that offers PSTN services or a router, gateway, or another SBC that supports SIP trunk connectivity
  

  Note

  Make sure that your carrier provides Direct Inward Dialing (DID) numbers to use as external BYOC numbers.

  
  

• a Zoom BYOC SIP trunk built between Ribbon SBC Edge and Zoom SBC
  

  Note

  Make sure that the SBC Edge to Zoom BYOC trunk is over TLS/SRTP.

Configure SBC Edge Portfolio for Zoom Phone BYOC

The following workflow defines the procedures for Configure SBC Edge for Zoom Phone BYOC.

Workflow

Configuring a SIP Profile for the Zoom Phone BYOC Service

SIP profiles control how the SBC Edge communicates with SIP devices. Configuring a SIP profile permits proper connectivity between the SBC Edge and the Zoom Phone BYOC service. For more information on SIP profiles, refer to Managing SIP Profiles.

Start

1. Log into the SBC Edge WebUI (refer to Logging into the SBC Edge Portfolio).

2. Select Settings > SIP > SIP Profiles. The SIP Profile Table pane opens on the right.

3. Click Create SIP Profile. The Create SIP Profile Entry window opens.

4. Complete the following field:
   • Description: Enter a name for the Zoom SIP profile entry (for example, Zoom profile).
   

5. Click OK.

Configuring a SIP Profile for an Enterprise IP PBX 

Configuring a SIP profile permits proper connectivity between the SBC Edge and your enterprise IP PBX.

Start

1. In the SIP Profile Table pane on the right, click Create SIP Profile. The Create SIP Profile Entry window opens.

2. Complete the following field:
   • Description: Enter a name for the IP PBX SIP profile entry (for example, IP PBX Profile).
   

3. Click OK.

Configuring a Media List for the Zoom Phone BYOC Service

Media lists allow you to specify a set of codecs and fax profiles that are allowed on a given SIP Signaling Group. They contain one or more Media Profiles, which must first be defined in Media Profiles. These lists allow you to accommodate specific transmission requirements, and SIP devices that only implement a subset of the available voice codecs. For more information on media lists, refer to Managing Media Lists.

Start

1. In the SBC Edge WebUI, select Settings > Media > Media List. The Media List View pane opens on the right.
2. Click Create Media List. The Create Media List window opens.
3. Complete the following fields:
   • Description: Enter the name of the media list for the Zoom Phone BYOC service (for example, Zoom_Media List).
   • Media Profiles List: Select Add/Edit to add the media profile you created in Configure a Media Profile.
   • SDES-SRTP Profile: Select the SDES-SRTP profile you created in Configure an SDES-SRTP Profile.
   • RTCP Mode: Select RTCP.
   • Silence Suppression: Select Disabled.
   
   
4. Click OK.

Configuring a Media List for the Enterprise IP PBX

Start

1. In the Media List View pane, click Create Media List. The Create Media List window opens.
2. Complete the following fields:
   • Description: Enter the name of the media list for the enterprise IP PBX.
   • Media Profiles List: Select Add/Edit to add the media profile you created in Configure a Media Profile.
   • RTCP Mode: Select RTCP.
   • Silence Suppression: Select Disabled.
   
   
3. Click OK.

Configuring a SIP Server Table for the Zoom Phone BYOC Service 

SIP server tables contain information about the SIP devices connected to the Ribbon SBC Edge Portfolio.  They control important characteristics such as: session timers, SIP header customization, SIP timers, MIME payloads, and option tags. For more information on SIP server tables, refer to Managing SIP Server Tables.

Start

1. In the SBC Edge WebUI, select Settings > SIP > SIP Server Tables. The SIP Server Tables pane opens on the right.
2. Click Create SIP Server Table. The Create SIP Server Table window opens.
3. In the Description field, enter the name for the Zoom SIP server table (for example, Zoom Cloud).
   
   
   
4. Click OK.

Configuring a SIP Server Entry for the Zoom Phone BYOC Service

The entries in the SIP server tables provide information about the IP addresses, ports, and protocols used to communicate with each server. The entries also include links to counters that are useful for troubleshooting. For more information on SIP server entries, refer to Creating and Modifying Entries in SIP Server Tables.

Start

1. In the left navigation pane of the SBC Edge WebUI, expand the SIP Server Tables folder.
2. Click the name of the SIP server table you created in Configuring a SIP Server Table for the Zoom Phone BYOC Service. The SIP server table pane opens on the right.
3. From the Create SIP Server dropdown list, select IP/FQDN. The Create SIP Server Entry window opens.

4. Complete the following fields:
   • Host FQDN/IP: Enter your Zoom IP address.
   • Protocol: Select TLS. 
   • TLS Profile: Select Default TLS Profile.
   • Monitor: Select SIP Options.
   
   

   Note

   This configuration requires the IP address and port information to connect a SIP trunk to the SBC Edge Portfolio.

5. Click OK.

Configuring a SIP Server Table for the Enterprise IP PBX 

Start

1. In the left navigation pane of the SBC Edge WebUI, select SIP Server Tables. The SIP Server Tables pane on the right
2. Click Create SIP Server Table. The Create SIP Server Table window opens.
3. In the Description field, enter the name for the IP PBX SIP server table (for example, IP_PBX).
   
4. Click OK.

Configuring a SIP Server Entry for the Enterprise IP PBX

Start

1. In the left navigation pane of the SBC Edge WebUI, expand the SIP Server Tables folder.
2. Click the name of the SIP server table you created in Configuring a SIP Server Table for the Enterprise IP PBX. The SIP server table pane opens on the right.
3. From the Create SIP Server dropdown list, select IP/FQDN. The Create SIP Server Entry window opens.

4. Complete the following fields:
   • Host FQDN/IP: Enter the IP address of your IP PBX.
   • Protocol: Select UDP. 
   • Monitor: Select None.
   

5. Click OK.

Configuring a Signaling Group for the Zoom Phone BYOC Server

Signaling groups allow the SBC Edge Portfolio to group telephony channels together for routing and to share configurations. The SBC Edge Portfolio routes calls to signaling groups, and the SBC Edge Portfolio selects call routes from signaling groups. For SIP, signaling groups specify protocol settings and link to server, media, and mapping tables. For more information on signaling groups, refer to Managing SIP Signaling Groups.

Start

1. In the left navigation pane of the SBC Edge WebUI, select Signaling Groups. The Signaling Group Table pane opens on the right. 
2. From the Create Signaling Group dropdown list, select SIP Signaling Group. The Create SIP Signaling Group window opens.

3. Complete the following fields:
   • Description: Enter a name for the Zoom Phone signaling group (for example, Zoom Phone_SG).
   • Call Routing Table: Leave as Default Route Table for now. 
   

   Note

   You will create a call routing table for the Zoom Phone BYOC in Create a Call Routing Table and Entry from Zoom and will need to select the created call routing table for the Zoom phone BYOC in Change the Call Routing Table in the Zoom Phone Signaling Group Configuration.

   • SIP Profile: Select the SIP profile you created in Configuring a SIP Profile for the Zoom Phone BYOC Service.

   • SIP Server Table: Select the SIP server table you created in Configuring a SIP Server Table for the Zoom Phone BYOC Service.
   • Media List ID: Select the media list you created in Configuring a Media List for the Zoom Phone BYOC Service.
   • Signaling/Media Source IP: Select Ethernet 2 IP (10.0.0.0).
   • Listen Port: 
      a. Click Create. The Create Listen Port window opens.
          
      b. From the Protocol dropdown list, select TLS.
          
      c. Click OK.
   

   Note

   If you have created the TLS-5061 protocol before for other tasks, you will see the following error message when you click OK: "Validation Error - Unique item not unique for resource Listen Port, Protocol and TLS Profile ID configured is duplicate entry ID [error - parameter value missing]".

   Tip

   If you have created the TLS-5061 protocol before for other tasks, click Add/Edit to select TLS-5061.

   • Federated IP/FQDN: 
      a. Click Create Federated IP/FQDN. The Add Federated IP/FQDN window opens.
      b. In the IPv4/6 Address or FQDN field, enter your Zoom IP address.
      c. Click OK. 
          
          
   

4. Click OK.
   
   
   

   Note

   Since your capacity may vary, 60 channels is an example value in the screen capture above.

Configuring a Signaling Group for the Enterprise IP PBX

Start

1. In the Signaling Group Table pane on the right, select SIP Signaling Group from the Create Signaling Group dropdown list. The Create SIP Signaling Group window opens.

2. Complete the following fields:
   • Description: Enter a name for the enterprise IP PBX signaling group (for example, IP_PBX_SG).
   • Call Routing Table: Leave as Default Route Table for now. 
   

   Note

   You will create a call routing table for the IP PBX in Create a Call Routing Table and Entry from the Carrier and will need to select the created call routing table for the IP PBX in Change the Call Routing Table in the IP PBX Signaling Group Configuration.

   
   • SIP Profile: Select the SIP profile you created in Configuring a SIP Profile for an Enterprise IP PBX.
   • SIP Server Table: Select the SIP server table you created in Configuring a SIP Server Table for the Enterprise IP PBX.
   • Media List ID: Select the media list you created in Configuring a Media List for the Enterprise IP PBX.
   • Signaling/Media Source IP: Select Ethernet1 IP (10.56.68.83).
   • Listen Port: 
      a. Click Add/Edit. The Select Protocolss window opens.
          
      b. From the Listen Port drop-down menu, select UDP-5060 and TCP-5060.
          
      c. Click OK.
      
   • Federated IP/FQDN: 
      a. Click Create Federated IP/FQDN. The Add Federated IP/FQDN window opens.
      b. In the IPv4/6 Address or FQDN field, enter the IP address of your IP PBX.
      c. Click OK. 
      
   
   

3. Click OK.
   
   
   

   Note

   Since your capacity may vary, 60 channels is an example value in the screen capture above.

   Note

   Verify or create listening ports that the SBC Edge Portfolio will use to receive SIP from the IP PBX.

Configuring a Transformation Table and Entry for Calls to the Zoom Phone BYOC

Transformation tables facilitate the conversion of names, numbers, and other fields when routing a call. For example, transformation tables can convert a public PSTN number into a private extension number or SIP address (URI). Each call routing table entry requires a transformation table. Each Transformation Table contains a list of entries considered as routing rules to execute on. For more information on transformation tables and entries, refer to Managing Transformation Tables.

Start

1. In the left navigation pane of the SBC Edge WebUI, select Call Routing > Transformation. The Transformation pane opens on the right.
2. Click Create. The Create Transformation Table window opens.
3. In the Description field, enter the name for the transformation table you want to go towards the Zoom Phone BYOC trunk.
   
   
   
4. Click OK.
5. In the left navigation pane of the SBC Edge WebUI, expand the Transformation folder.
6. Click the name of the transformation table you created. The transformation table pane opens on the right.
7. Click Create. The Create Transformation Table Entry window opens.

8. Complete the following fields:
   • Description: Enter a name for the Zoom Phone BYOC transformation table entry.
   • Match Type: Select the required match type (for example, Mandatory (Must Match)).
   • Input Field Value: Enter the required value for the Called Address/Number (for example, (5126815704)).
   • Output Field Value: Enter the required value for the Called Address/Number (for example, +1/1).
   
   
   

   The configuration in the screen capture above passes the specified calling and called numbers from the IP PBX to Zoom and Zoom to IP PBX. The +1\1 value modifies the transformations (numbers) to add +1 to all calls sent to the Zoom Phone service and removes +1 from all calls sent to the carrier SIP trunk. 
   

   Note

   To pass all calling and called numbers, enter the .* value. For more information on regular expressions and transformation, refer to Regular Expressions for Number Matching and Transformation.

   
   

9. Click OK.

Configuring a Transformation Table and Entry for Calls to the Enterprise IP PBX 

Start

1. In the left navigation pane of the SBC Edge WebUI, select Transformation. The Transformation pane opens on the right.
2. Click Create. The Create Transformation Table window opens.
3. In the Description field, enter the name for the transformation table you want to go towards the IP PBX (for example, to_IP PBX).
   
   
4. Click OK.
5. In the left navigation pane of the SBC Edge WebUI, expand the Transformation folder.
6. Click the name of the transformation table you created. The transformation table pane opens on the right.
7. Click Create. The Create Transformation Table Entry window opens.
8. Complete the following fields:
   • Description: Enter a name for the IP PBX transformation table entry.
   • Match Type: Select the required match type (for example, Optional (Match One)).
   • Input Field Value: Enter the required value for the Called Address/Number (for example, (.*)).
   • Output Field Value: Enter the required value for the Called Address/Number (for example, +1\1).
   
   
9. Click OK.

Configuring a Call Routing Table and Entry to the Zoom Phone BYOC

Call routing allows the SBC Edge Portfolio to carry calls between signaling groups, which allows the SBC Edge Portfolio to carry calls between ports and between protocols (for example, ISDN to SIP). The SBC Edge Portfolio groups call routes into call routing tables. For more information on call routing tables, refer to Managing Call Routing Tables.

Create a Call Routing Table and Entry from Zoom 

Start

1. In the left navigation pane of the SBC Edge WebUI, select Call Routing > Call Routing Table. The Call Routing Tables pane opens on the right.
2. Click Create. The Create Call Routing Table window opens.
3. In the Description field, enter the name for the call routing table from Zoom (for example, From Zoom).
   
   
   
4. Click OK.
5. In the left navigation pane of the SBC Edge WebUI, expand the Call Routing Table folder.
6. Click the name of the call routing table you created. The call routing table pane opens on the right.
7. Click Create Routing Entry. The Create Call Routing Entry window opens.
8. Complete the following fields:
   • Description: Enter a name for the call routing table entry from Zoom (for example, TO_CARRIER).
   • Number/Name Transformation Table: Select the transformation table you created in Configuring a Transformation Table and Entry for Calls to the Enterprise IP PBX.
   • Destination Signaling Groups: Click Add/Edit and select the signaling group you created in Configuring a Signaling Group for the Enterprise IP PBX.
   • Audio/Fax Stream Mode: Select DSP.
   • Media Transcoding: Select Enabled.
   • Media List: Select the media list you created in Configuring a Media List for the Enterprise IP PBX.
   
9. Click OK.

Create a Call Routing Table and Entry from the Carrier 

Start

1. In the left navigation pane of the SBC Edge WebUI, select Call Routing Table. The Call Routing Tables pane opens on the right.
2. Click Create. The Create Call Routing Table window opens.
3. In the Description field, enter the name for the call routing table from the carrier (for example, From IP PBX).
   
   
4. Click OK.
5. In the left navigation pane of the SBC Edge WebUI, expand the Call Routing Table folder.
6. Click the name of the call routing table you created. The call routing table pane opens on the right.
7. Click Create Routing Entry. The Create Call Routing Entry window opens.
8. Complete the following fields:
   • Description: Enter a name for the call routing table entry from the carrier (for example, TO_ZOOM).
   • Number/Name Transformation Table: Select the transformation table you created in Configuring a Transformation Table and Entry for Calls to the Zoom Phone BYOC.
   • Destination Signaling Groups: Click Add/Edit and select the signaling group you created in Configuring a Signaling Group for the Zoom Phone BYOC Server. 
   • Audio/Fax Stream Mode: Select DSP.
   • Media Transcoding: Select Enabled.
   • Media List: Select the media list you created in Configuring a Media List for the Zoom Phone BYOC Service.
   
   
9. Click OK.

Changing the Call Routing Table in a Signaling Group Configuration

This section provides information on changing the default call routing tables you selected in Configuring a Signaling Group for the Zoom Phone BYOC Server and Configuring a Signaling Group for the Enterprise IP PBX.

Change the Call Routing Table in the Zoom Phone Signaling Group Configuration 

Start

1. In the left navigation pane of the SBC Edge WebUI, select Signaling Groups. The Signaling Group Table pane opens on the right.

2. Expand the signaling group you created for the Zoom Phone in Configuring a Signaling Group for the Zoom Phone BYOC Server. 

3. From the Call Routing Table dropdown list, select the call routing table you created in Create a Call Routing Table and Entry from Zoom.

4. Click Apply.

Change the Call Routing Table in the IP PBX Signaling Group Configuration 

Start

1. In the Signaling Group Table pane on the right, expand the signaling group you created for the enterprise IP PBX in Configuring a Signaling Group for the Enterprise IP PBX.
2. From the Call Routing Table dropdown list, select the call routing table you created in Create a Call Routing Table and Entry from the Carrier. 
3. Click Apply.

Confirm SBC Edge Portfolio Links to Zoom Phone BYOC

Use the following procedure to confirm that the SBC Edge Portfolio links to the Zoom Phone BYOC.

Start

1. Log into the WebUI (refer to Logging into the SBC Edge Portfolio).
2. Click Monitor.

3. In the SBC Edge Real-Time Monitor pane, confirm that the channels under each signaling group you created in the Configure SBC Edge for Zoom Phone BYOC procedure are green. For details on channel status, refer to Monitoring Real Time Status.
   
   
   

Place a Test Call

Use the following procedure to place a test call.

Start

1. Log into the WebUI (refer to Logging into the SBC Edge Portfolio).

2. Select Diagnostics > Test a Call. The Test a Call pane opens on the right.

3. Complete the following fields:
   • Destination Number: Enter the number assigned to a Zoom Phone user.
   • Origination/Calling Number: Enter the number assigned to a local user.
   • Call Routing Table: Select the call routing table that handles the call from the Zoom Phone BYOC.
   
   See the following screen capture for an example configuration.

   

4. Click OK.