In this section:
The SIP Signaling Registration facility enables
The registration facility allows different expiration time on the untrusted versus trusted network. This can be used to reduce the registration refresh load on the registrars without sacrificing fast detection of failed IADs.
SIP Signaling Subscription enables the
The
The
The
The
To view all active register details, use the following CLI syntax:
> show table addressContext <addressContextName> sipActiveRegisterNameStatus
> show table addressContext ADDR_CONTEXT_1 sipActiveRegisterNameStatus NEXT NEXT HOP HOP REGISTRAR EXTERNAL IP PORT IP REGISTRAR EXPIRATION AOR NAME ID STATE CONTACT URI ADDRESS NUM ADDRESS PORT NUM TIME ---------------------------------------------------------------------------------------------------------------------- xiyu0@10.7.6.40 129024 completed sip:xiyu0@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598 xiyu1@10.7.6.40 95488 completed sip:xiyu1@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598 xiyu2@10.7.6.40 106496 completed sip:xiyu2@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598 xiyu3@10.7.6.40 2560 completed sip:xiyu3@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598 xiyu4@10.7.6.40 32000 completed sip:xiyu4@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598 ... xiyu2047@10.7.6.40 32170 completed sip:xiyu4@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598
To view active register details based on AOR name (full AOR name, including userPart+hostName), append AOR to the end of the command:
> show table addressContext <addressContextName> sipActiveRegisterNameStatus <userPart> <hostName>
> show table addressContext ADDR_CONTEXT_1 sipActiveRegisterNameStatus xiyu24@10.7.6.40 NEXT NEXT HOP HOP REGISTRAR EXTERNAL IP PORT IP REGISTRAR EXPIRATION AOR NAME ID STATE CONTACT URI ADDRESS NUM ADDRESS PORT NUM TIME ---------------------------------------------------------------------------------------------------------------------- xiyu24@10.7.6.40 129024 completed sip:xiyu24@10.7.6.40:14283 10.7.6.40 14283 10.7.6.40 14284 3598
To view active register details based on an AOR and registration, append AOR (userPart+hostName) or partial AOR (userPart) and regID parameters to the end of the command.
In the below example, userPart "xiyu2545" and regID wildcard "0" are appended to the command.
> show table addressContext ADDR_CONTEXT_1 sipActiveRegisterNameStatus xiyu2545 0 state completed; contactURI sip:xiyu2545@10.7.6.40:14283; nextHopIpAddress 10.7.6.40; nextHopPortNum 14283; registrarIpAddress 10.7.6.40; registrarPortNum 14284; externalExpirationTime 3598; internalExpirationTime 3600; creationTime 2015-09-04T13:36:37+00:00; registrarDomainName ""; endPointBehindNapt 0; natPinholeLearningStatus none; securityMechanismType none; registrationType normal; e2aeMediaSecurity none; transportProtocolToEndpoint none; transportProtocolToAS udp; externalExpirationTimeLeft 3178; internalExpirationTimeLeft 2463;
For more information on SIP active register search option, refer to:
The S-SBC and I-SBC (in 1:1 deployments) support the display of various statistics and registration records in the system through
On a switchover, this feature is available on the newly-active SBC. Any rollover of the dump commands started on the earlier Active SBC is not supported.
The
To set registration requests to bulk registration format, use following CLI syntax:
% set addressContext <ac_name> zone <zone name> sipTrunkGroup <tg_name> signaling registration bulkRegisterFormat enable
For complete SIP trunk group configuration details, refer to:
The
ACT
log files) for each successful registration and de-registration.For details on enabling the EVENT records, see the following wiki pages:
The
Refer to SBC Product Specifications page for the maximum initial REGISTER rate when coincident with REGISTER refreshes and background call load for existing registrations. Note that the maximum initial REGISTER rate without any background load is much higher. However, customers should use these numbers for planning purposes since the absence of other background load is unrealistic in real networks.
This initial register rate is for the case when initial registers are challenged for authentication by the registrar. While the unchallenged initial register rate is much higher, the best practice is to securely authenticate subscribers before accepting registrations.
For best performance, use the default overload control settings and configure the unknown peer policer to admit the appropriate initial register rate for your subscriber environment. This ensures that the system provides acceptable performance when the actual initial register attempt rate is much higher than the values below (for example, after a major city comes back online after a power outage).
SIP session and registration capacity limits are derived using the following call flow baseline:
The basic initial REGISTER flow in this example consists of the following four-message exchange. In general, the registration capacity is associated with handling both the initial registration and registration refresh.
A refresh register flow consists of:
The subscription ratio for UDP and TCP access load connection is 10:1.
The
The
When configuring surrogate registration, only one of the following mutually exclusive parameters should be enabled at the IP Peer Surrogate Registrationlevel depending upon the number of AoRs per IP Peer desired.
userPart
at the surrogate registration level. With this method, you cannot associate a surrRegprofile
with this peer.surrRegprofile
to the IP peer. When using this profile, you cannot configure userPart
at the surrogate registration level.Surrogate Registration Profile Limitations
The maximum number on the SBC 7000 and SBC 5400 platforms is 256,000. (1,000 Surrogate Registration profiles, each supporting 256 surrogate AORs).
The maximum number on the SBC SWe platform is 64,000 per SCM instance, up to 256,000.
Refer to SBC Provisioning Limits for details regarding limitations.
If the same AorUsername is configured on two different peers, AorUserName start and end range values for either peer should not fall within start and end range values of the other peer.
In Access and Enterprise scenarios, the
When the
sendCredentials
" parameter in the surrogate registration configuration for IP peers. The "sendCredentials
" parameter supports three configurable options:The
For surrogate registration configuration commands and examples, refer to:
The SBC currently supports IP-PBX registration pass-through without registration between an IP-PBX and the core SIP network. However, the SBC does not support an IP-PBX that does not register when a REGISTER message expects registration. To support this scenario, the SBC performs surrogate registration by generating REGISTER requests for IP-PBXs.
For more information on surrogate registration, refer to:
The
In support of Surrogate Registration, when a REGISTER message is (re)sent with an Authorization or Proxy-Authorization header field in response to a challenge for authentication, the
The selected “Authentication ID” is also used among other parameters, e.g., password, nonce, etc., in computing the “response” parameter of the header field per RFC 2617. The From/To/Contact header fields, however, continue to take the existing “User Part” from the associated “IP Peer/Surrogate Registration” entry as the “userinfo” part of the SIP URI.
To maintain backwards compatibility, during an LSWU from a previous release the value of the “Authentication ID” field is automatically filled with the existing “IP Peer/Surrogate Registration/User Part” field used for authorization in the previous release.
If automatically filling Authentication ID is undesirable, after the LSWU completes, configure the “Authentication ID” with a new value such that its corresponding password in a server-specified protected realm can be located.
To configure SIP Authentication, refer to:
The
When an IAD re-establishes a TCP connection, it uses a different source port and same IP address. the
The SIP Service Group logic forwards a register request when a change in connection parameter is detected under the following conditions, and the IAD is not required to be behind NAT. By forwarding the refresh register, the Registrar can authenticate the user by sending a 401 response.
Currently, after a failover if the IAD reestablishes the connection and sends a refresh REGISTER, the
In Access scenarios, SIP Registrars on Core facing Trunk Group are considered as primary-secondary/alternate for a particular user. The users are registered to the Primary Registrar when it is available and registered with the Secondary Registrar only when the Primary is down. After the Primary Registrar goes down, the Secondary Registrar allows any new calls or requests only after the completion of Successful registration. Whenever the Primary is down,
In earlier releases, when the primary SIP server goes down, the
The
The
request
command to query PSX on new refresh REGISTERs.Quick Re-registration on Alternate SIP Server When Primary Server is Down
This feature requires Pathcheck support using OPTIONS Ping and ARS static blacklisting to detect the reachability of a particular IP/FQDN.
The registrarRecovery
parameter is added to IPSP commonIpAttributes object, and includes following flags:
registerToAlternateOnPrimaryDown
(This flag must be enabled to view overrideInternalExpiresTimer
and revertToPrimaryOnRecovery
flags.)overrideInternalExpiresTimer
revertToPrimaryOnRecovery
(This flag must be enabled to view deRegisterAlternateOnPrimaryRecovery
flag.)deRegisterAlternateOnPrimaryRecovery
Configure the IPSP flags on Egress Trunk Group only.
The CLI request queryPsxOnNextRefreshRegister
command is used to force PSX query on subsequent refresh REGISTER. This enables new routing information configured in the PSX to be reflected in the
The queryPsxOnNextRefreshRegister
command is used for one sequence of refresh REGISTERs on all active registrations. The new refresh REGISTERs is routed after a PSX query and the routes are selected from the PSX response.
Any new registrations that are received after the command is executed are not affected by this command.
The queryPsxOnNextRefreshRegister
command has following optional values:
newRegistrarIndex
overRideInternalExpires
registrarFqdn
registrarIpAddress
The request queryPsxOnNextRefreshRegister
command must be executed only on the Ingress Trunk Group.
The request queryPsxOnNextRefreshRegister
command is applied to all the refresh REGISTERs on all active registrations, which are currently handled by the
If both request command and IPSP flags are configured, command takes the preference over IPSP flags.
For more information, refer to the section Configuring Alternate SIP Server When Primary Server is Down.
Note: This feature is only applicable for TCP/TLS transports. After an SBC switchover, the first REGISTER request sent by the UE is not matched to an existing TCP connection on the newly-active SBC. This will eventually lead the UE to become aware of the lost TCP connection, and the UE will then establish a new TCP connection and send an initial REGISTER request using the same IP address but with a different port compared to the TCP connection established before the switchover as the selection of client source port for a new TCP connection is usually ephemeral. The SBC relays the initial REGISTER request sent by the UE to the Registrar as it creates a new AoR. Thus, the Registrar receives a high rate of REGISTER requests after an SBC switchover.
Enable the SIP Sig Controls flag Register IP Lookup Post Switchover for the SBC to search for and validate that the initial REGISTER over the new TCP/TLS connection matches the synchronized RCB after a switchover. The SBC checks that the source IP address used for the new connection matches the old one regardless of the port value (It needs to update the port value and only for the first initial REGISTER received after the switchover for an AoR). Afterwards, the check is again based on the IP/port.
Note: You must enable Multiple Contacts Per Aor to use this flag.
For configuration details, refer to: