In this section:
The SBC Edge is certified to offer Microsoft Teams Direct Routing services; the SBC Edge can be used to connect any Teams client to:
These instructions detail how to configure the SBC Edge (SBC 1000/2000 and SBC SWe Lite) to connect Microsoft Teams Direct Routing services deployed in an Enterprise network (On Premises). For public cloud deployments, refer to Connect SBC SWe Lite to Microsoft Teams Direct Routing Deployed in Azure. The network diagram below displays the connection topology for Microsoft Teams Direct Routing deployed in an Enterprise network.
These instructions assume the SBC Edge product (SBC SWe Lite, SBC 1000/2000) is installed and running. If the product is not installed, refer to the links below.
Consult the Microsoft documentation for detailed information on Direct Routing interface configuration guidelines, including the RFC standards and the syntax of SIP messages.
Ensure you are running the latest version of SBC software:
Requirements for configuring the SBC Edge in support of Teams Direct Routing include:
For the SBC Edge to pair with Microsoft Teams, the SBC FQDN domain name must match a name registered in both the Domains and DomainUrlMap fields of the Tenant. Verify the correct domain name is configured for the Tenant as follows:
Users may be from any SIP domain registered for the tenant. For example, you can configure user user@SonusMS01.com with the SBC FQDN name sbc1.hybridvoice.org, as long as both names are registered for the tenant.
The Certificate must be issued by one of the supported certification authorities (CAs). Wildcard certificates are supported.
Refer to Microsoft documentation for the supported CAs.
Ribbon recommends the deployment of the SBC Edge product behind a firewall, within the DMZ, regardless of the assignment of a public IP to the SBC in question. Refer to SBC Edge Security Hardening Checklist for more information about the SBC and firewalls.
This section lists the ports, protocols and services for firewalls that are in the path of the SBC connecting to Teams Direct Routing.
A Tenant is used within the Microsoft environment as a single independent enterprise that has subscribed to Office 365 services; through this tenant, administrators can manage projects, users, and roles. Access the Tenant configuration and configure as detailed below. (For details on accessing the Tenant, refer to Microsoft Teams Documentation).
Create Online PSTN Gateway that points to the SBC:
Enter the SBC FQDN (Example below: aepsite6.SonusMS01.com). The FQDN must be configured for the Tenant in both the Domains and the DomainUrlMap fields.
Enter the SBC SIP Port (Example below - SipPort5061).
New-CsOnlinePSTNGateway -Fqdn aepsite6.SonusMS01.com -SipSignallingPort SipPort5061 -MaxConcurrentSessions <Max Concurrent Session which SBC capable handling> -Enabled $true
Configure Teams usage for the user:
Enter the User Identity (Example below: -user1@domain.com)
Get-CsOnlineUser -Identity user1@domain.com Set-CsUser -Identity user1@domain.com -EnterpriseVoiceEnabled $true -HostedVoiceMail $true -OnPremLineURI tel:+10001001008 Grant-CsOnlineVoiceRoutingPolicy -PolicyName "GeneralVRP" -Identity user1@domain.com Grant-CsTeamsCallingPolicy -PolicyName AllowCalling -Identity user1@domain.com Grant-CsTeamsUpgradePolicy -PolicyName UpgradeToTeams -Identity user1@domain.com
The SBC Edge is configured via Easy Configuration Wizard.
From the Application drop down box, select the relevant Easy Configuration wizard. Depending on your network, follow a relevant Easy Configuration wizard. Refer to the table below for guidance.
If Media Bypass is enabled in the server, this step is complete.
The Configuration Wizard is complete.
For the SBC 1000/SBC 2000 only:
By default, when configuring the SBC with Easy Configuration, the default Ethernet Interface for Border Element (PSTN Endpoint) is configured as Auto. Ribbon recommends changing this configuration manually to the Ethernet port that points to the SIP Trunk side.
For instructions on changing the Ethernet interface, refer to: Configuring and Modifying Logical Interfaces.
This additional step is required only in cases where Media Bypass is disabled on the Teams Server. Complete these steps after Easy Configuration is complete.
Easy Configuration enables Media Bypass by default. If Media Bypass is disabled on the Teams server, in addition to running Easy Configuration, you must disable Media Bypass in the SBC:
Click OK.
For troubleshooting steps, refer to Best Practice - Troubleshoot Issues with Microsoft Teams Direct Routing.
Place a test call as follows: Access the WebUI. Refer to Logging into the SBC Edge. In the WebUI, click the Diagnostics tab. In the left navigation pane, click Test a Call. Configure the parameters as shown below. Click OK. The test call is now complete. For troubleshooting steps, refer to Best Practice - Troubleshoot Issues with Microsoft Teams Direct Routing.