Configure SBC SWe on Azure for SLB

Use this sample configuration to configure your SBC SWe on Azure for SLB.

Note

Use the same configuration on all SBCs which communicate to a particular SLB.

Network Setup

Create the routes for Azure using the following options for PKT1:

Option	Example Value
Name	`jm_slb_hfe_pkt1_route`
Destination Address	`10.2.2.43/24`
Next Hop Destination	`10.27.7.4`

The route table that the routes are part of is attached to a subnet, where those routes apply subnet-wide.

As a result, any SBC HFE setup which shares an endpoint address with another SBC HFE setup must have its PKT ports in different subnets to those other setups, so the traffic is routed to the correct HFE.
The SLB setup is a shared endpoint for all of the SBC setups it is front-ending; therefore, each SBC setup must have (at a minimum) its PKT port used for SLB communication in an individual subnet.

HFE Example

The following example uses the following setup:

The same public endpoint is in communication for the 3 SBCs for media; therefore each PKT0 requires an individual subnet
The private endpoint is in the same subnet as ETH0 of the PKT1-HFE for each setup (SLB/SBC)
The setup shares as many subnets as possible (MGT, HA, HFE-PRIV, HFE-PUB0)
SLB communication configured to to use PKT1

Note

Ribbon recommends replicating the same setup as depicted in the network diagram below.

Network Diagram for HFE Setup:

Example Azure Route Table Configuration

Route Table	Route Destination	Next Hop (HFE2.1)
SLB-PKT0-HFE-ROUTETABLE / SBC*-PKT0-HFE-ROUTETABLE	IP for public endpoint	ETH2 IP for associated PKT0 HFE
SLB-PKT1-HFE-ROUTETABLE / SBC*-PKT1-HFE-ROUTETABLE	CIDR address for HFE-PRIV subnet	ETH2 IP for associated PKT1 HFE

SBC SLB Connection Configuration

Set the SBC configuration for the IP address of the SLB, as follows:

HFE setup	SLB communication using PKT0/IF2	SLB communication using PKT1/IF3
HFE 2.1	ETH0 IP Address of HFE-PKT0	ETH0 IP Address of HFE-PKT1

Sample Configuration for SLB-SBC on Azure

Steps:

Note

When configuring the ipAddress on the SBC, you must use the IP address for the HFE interface that front-ends the PKT port used for SLB communication. Also, ensure the SBC and SLB sipSigPort numbers are identical.

Configure SLB on HFE2.1

set addressContext default ipInterfaceGroup LIG1 ipInterface LIF1 ceName vsbcSystem portName pkt0 ipVarV4 IF2.IPV4 ipPublicVarV4 HFE_IF2.FIPV4 prefixVarV4 IF2.PrefixV4
commit
set addressContext default ipInterfaceGroup LIG1 ipInterface LIF1 mode inService state enable
commit
set addressContext default ipInterfaceGroup LIG2 ipInterface LIF2 ceName vsbcSystem portName pkt1 ipVarV4 IF3.IPV4 ipPublicVarV4 HFE_IF3.FIPV4 prefixVarV4 IF3.PrefixV4
commit
set addressContext default ipInterfaceGroup LIG2 ipInterface LIF2 mode inService state enable
commit
set addressContext default zone ZONE_IN id 2
commit
set addressContext default zone ZONE_IN id 2 sipSigPort 2 ipInterfaceGroupName LIG1 ipVarV4 IF2.IPV4 ipPublicVarV4 HFE_IF2.FIPV4 portNumber 5060 transportProtocolsAllowed sip-tls-tcp,sip-tcp,sip-udp state enabled mode inService
commit
set addressContext default zone ZONE_OUT id 3
commit
set addressContext default zone ZONE_OUT id 3 sipSigPort 3 ipInterfaceGroupName LIG2 ipVarV4 IF3.IPV4 ipPublicVarV4 HFE_IF3.FIPV4 portNumber 5060   transportProtocolsAllowed sip-udp,sip-tcp,sip-tls-tcp state enabled mode inService
commit

set addressContext default staticRoute 0.0.0.0 0 10.20.15.1 LIG1 LIF1 preference 100
commit
set addressContext default staticRoute 0.0.0.0 0 10.20.16.1 LIG2 LIF2 preference 100
commit

Interface for zmqc communication
*********************************
set system slb commInterface addressContext default ipInterfaceGroup LIG2 pktIpVar IF3.IPV4
commit

Configure ACLs on SLB

set addressContext default ipAccessControlList rule 1 state enabled fillRate unlimited bucketSize unlimited protocol udp destIpAddress IF3.IPv4 precedence 1 destIpAddressPrefixLength 32

set addressContext default ipAccessControlList rule 2 state enabled fillRate unlimited bucketSize unlimited protocol tcp destIpAddress IF3.IPV4 precedence 2 destIpAddressPrefixLength 32

set addressContext default ipAccessControlList rule 3 state enabled fillRate unlimited bucketSize unlimited protocol tcp destIpAddress <slb commInterface IP> precedence 3 destIpAddressPrefixLength 32