| Add_workflow_for_techpubs |
|---|
| AUTH1 | |
|---|
| REV5 | |
|---|
| REV6 | |
|---|
| REV3 | |
|---|
| REV4 | |
|---|
| REV1 | |
|---|
| REV2 | |
|---|
|
...
| Caption |
|---|
| 0 | Figure |
|---|
| 1 | Browser to SBC through TURN server |
|---|
|
|
Call Flows
Basic call (No Full ICE UE to Full No ICE UE)
| Caption |
|---|
| 0 | Figure |
|---|
| 1 | Basic Call between UE supporting ICE and no ICE |
|---|
|
|
...
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC services natTraversal iceSupport iceFull
|
...
| Code Block |
|---|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC media sdpAttributesSelectiveRelay enabled
commit |
...
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC media mediaAddrType iPv4andiPv6 ice <offerPreference | answerPreference>
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC media mediaAddrType iPv4andiPv6 ice offerPreference <ipv4 | ipv6 | matchSigAddrType>
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC media mediaAddrType iPv4andiPv6 ice answerPreference <honorRecvPrec | ipv4 | ipv6 | matchSigAddrType> |
...
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC services natTraversal iceSourceAddressFilterPriority <serverReflexivePrefixLength | state>
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC services natTraversal iceSourceAddressFilterPriority serverReflexivePrefixLength <0..32>
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC services natTraversal iceSourceAddressFilterPriority state <enabled | disabled> |
...
...
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC media dtlsProfileName d1 |
| Anchor |
|---|
| Creating Crypto Suite Profile |
|---|
| Creating Crypto Suite Profile |
|---|
|
Creating Crypto Suite Profile
On SBC ERE
| Code Block |
|---|
|
set profiles security cryptoSuiteProfile cp1 entry 1 cryptoSuite AES-CM-128-HMAC-SHA1-80 |
On PSX/external PSX
| Caption |
|---|
| 0 | Figure |
|---|
| 1 | Creating Crypto Suite Profile |
|---|
|
Image Added |
| Anchor |
|---|
| Attaching the Crypto Suite Profile to the Packet Service Profile |
|---|
| Attaching the Crypto Suite Profile to the Packet Service Profile |
|---|
|
Attaching the Crypto Suite Profile to the Packet Service Profile
On SBC ERE
| Code Block |
|---|
|
set profiles media packetServiceProfile PSP_IADWRTC dtls dtlsCryptoSuiteProfile cp1 |
On PSX/external PSX
| Caption |
|---|
| 0 | Figure |
|---|
| 1 | Attaching Crypto Suite Profile to Packet Service Profile |
|---|
|
Image Added |
| Anchor |
|---|
| Enabling the Parameters Under DTLS Crypto Suite Profile |
|---|
| Enabling the Parameters Under DTLS Crypto Suite Profile |
|---|
|
Enabling the DTLS Crypto Suite Profile Parameters
| Code Block |
|---|
|
set profiles media packetServiceProfile PSP_IADWRTC dtls dtlsCryptoSuiteProfile cp1 dtlsFlags allowDtlsFallback enable enableDtlsSrtp enable |
...
| Code Block |
|---|
set profiles media packetServiceProfile PSP_IADWRTC dtls dtlsFlags dtlsSrtpRelay enable dtlsSctpRelay enable |
...
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC policy media packetServiceProfile PSP_IADWRTC |
| Note |
|---|
The Packet Service Profile can be attached either to the ingress , egress, or both ingress and or the egress Sip Trunk Group between WRTC and SBC. |
Licensing
...
| Code Block |
|---|
set profiles media packetServiceProfile PSP_IADWRTC codec codecEntry12 OPUS-Default |
...
Assigning SMM Profiles to Trunk Group
The SMM profile is applied to the Trunk Group as shown below:
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC signaling messageManipulation inputAdapterProfile IN_SMM_RULE outputAdapterProfile OUT_SMM_RULE
commit |
Other Configuration
| Code Block |
|---|
|
set addressContext default zone ZONE_IADWRTC sipTrunkGroup TG_SIPART_IADWRTC services natTraversal mediaNat disabled
set profiles media packetServiceProfile PSP_IADWRTC rtcpOptions rtcp enable |
| Note |
|---|
The STUN handling for media NAT and ICE are mutually exclusive. Therefore, mediaNAT is disabled when ICE is used. For DTLS, an association is created for both RTP and RTCP. The RTCP control must be enabled for RTCP packets to flow. |
...