You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

Table of Contents


Interoperable Vendors


© 2021 Ribbon Communications Operating Company, Inc. © 2021 ECI Telecom Ltd. All rights reserved. The compilation (meaning the collection, arrangement and assembly) of all content on this site is protected by U.S. and international copyright laws and treaty provisions and may not be used, copied, reproduced, modified, published, uploaded, posted, transmitted or distributed in any way, without prior written consent of Ribbon Communications Inc.

The trademarks, logos, service marks, trade names, and trade dress (“look and feel”) on this website, including without limitation the RIBBON and RIBBON logo marks, are protected by applicable US and foreign trademark rights and other proprietary rights and are the property of Ribbon Communications Operating Company, Inc. or its affiliates. Any third-party trademarks, logos, service marks, trade names and trade dress may be the property of their respective owners.  Any uses of the trademarks, logos, service marks, trade names, and trade dress without the prior written consent of Ribbon Communications Operating Company, Inc., its affiliates, or the third parties that own the proprietary rights, are expressly prohibited.

Document Overview

This document outlines the configuration best practices for the Ribbon SBC Core (SBC 5K, 7K, SWe) when deployed with Google Voice SIP Link. 

About Ribbon SBC Core

The SBC Core (SBC 5K, 7K, SWe) addresses the next-generation needs of SIP communications by delivering embedded media transcoding, robust security and advanced call routing in a high-performance, small form-factor device enabling service providers and enterprises to quickly and securely enhance their network by implementing services like SIP Trunking, secure Unified Communications and Voice over IP (VoIP).

The SBC Core provides a reliable, scalable platform for IP interconnect to deliver security, session control, bandwidth management, advanced media services and integrated billing/reporting tools in an SBC appliance. This versatile series of SBCs can be deployed as peering SBCs, access SBCs or enterprise SBCs (eSBCs). The SBC product family is tested for interoperability and performance against a variety of third-party products and call flow configurations in the customer networks.

Note

SBC 5x10, 5400, 7000 and SWe are represented as SBC Core in the subsequent sections.

About Google Voice

Google Voice is a telephone service that provides a U.S. phone number to Google Account customers in the U.S. and Google Works customers in Canada, Denmark, France, the Netherlands, Portugal, Spain, Sweden, Switzerland and the United Kingdom. Calls are forwarded to the phone number that each user must configure in the account web portal. Users can answer and receive calls on any of the phones configured to ring in the web portal. While answering a call, the user can switch between the configured phones. Subscribers in the United States can make outgoing calls to domestic and international destinations. The service is configured and maintained by users in a web-based application, similar in style to Google's email service Gmail, or Android and iOS applications on smartphones or tablets.

Scope/Non-Goals

This document provides configuration best practices for deploying Ribbon's SBC Core for Google Voice SIP Link interop. Note that these are configuration best practices and each customer may have unique needs and networks. Ribbon recommends that customers work with network design and deployment engineers to establish the network design which best meets their requirements.  

It is not the goal of this guide to provide detailed configurations that meet the requirements of every customer. Use this guide as a starting point, and build the SBC configurations in consultation with network design and deployment engineers. 

Audience

This is a technical document intended for telecommunications engineers with the purpose of configuring the Ribbon SBC.

To perform this interop, you need to

  • use graphical user interface (GUI) or command line interface (CLI) of the Ribbon product,
  • understand the basic concepts of TCP/UDP/TLS and IP/Routing, and
  • have SIP/RTP/SRTP to complete the configuration and for troubleshooting.


Note

This configuration guide is offered as a convenience to Ribbon customers. The specifications and information regarding the product in this guide are subject to change without notice. All statements, information, and recommendations in this guide are believed to be accurate but are presented without warranty of any kind, express or implied, and are provided “AS IS”. Users must take full responsibility for the application of the specifications and information in this guide.

Prerequisites

The following aspects are required before proceeding with the interop:

  • Ribbon SBC Core
  • Ribbon SBC Core license
    • A valid license from Ribbon is required to enable functionality on Ribbon SBCs. Each SBC license provides a base set of capabilities to allow enabling and adding of additional features and capacity, as required.
  • Public IP addresses
  • TLS certificates for SBC Core
  • Google Workspace and Domain
    • Google Voice Premier license for the users
    • For more details, contact Google Support

Product and Device Details

The configuration uses the following equipment and software:

Product

Equipment/Service

Software Version

Ribbon SBC

Ribbon SBC Core

9.2.0

Google VoiceTelephone ServiceNA
Third-party EquipmentCisco Unified Communications Manager12.5.1.11900-146

Administration and Debugging Tools

Wireshark

3.4.9

Note

The Ribbon SBC Core portfolio includes SBC 5x10, SBC 5400, SBC 7000 (appliance based), and SBC SWe (virtualized platform). The software version is applicable to Ribbon SBC Core portfolio, and hence, this configuration guide is valid for all of these devices.

Network Topology and E2E Flow Diagrams

Deployment Topology

Interoperability Test Lab Topology

Call Flow Diagram

Document Workflow

The sections in this document follow the sequence below. The reader is advised to complete each section for the successful configuration.

Installing Ribbon SBC Core

Ribbon SBC Standalone

To deploy Ribbon SBC Core standalone instance, refer to SBC Core 9.2.x Documentation

Ribbon SBC High Availability

To deploy Ribbon SBC Core in HA mode on different platforms, refer to SBC Core Software Installation and Upgrade Guide

Info

During this interop, SBC Core HA was installed on VMware platform by following the procedure described in Installing SBC Application in High Availability Mode.

Tip
  • After successful installation, ensure the time on both Active and Standby SBCs is in sync.
  • NTP Sync verification:
    • Run the command 'timedatectl' to check if NTP is synchronized.
    • File /etc/ntp.conf should contain the IP of the NTP server that you have configured during installation.

Ribbon SBC Core Configuration

Global Configuration

Codec Entry

Codecs define the audio encoding methods and their associated attributes. You can add custom codec entries which are then available to include when configuring codecs in a Packet Service Profile. When you add a codec entry, the parameters available change, depending on the base codec you select. You can also configure options for a selected Codec Entry that specify how to handle DTMF digits in the media stream.

set profiles media codecEntry G711-U codec g711
set profiles media codecEntry G711-U packetSize 20
set profiles media codecEntry G711-U fax failureHandling continue
set profiles media codecEntry G711-U fax toneTreatment faxRelayOrFallbackToG711
set profiles media codecEntry G711-U fax honorToneDetection disable
set profiles media codecEntry G711-U modem failureHandling continue
set profiles media codecEntry G711-U modem toneTreatment fallbackToG711
set profiles media codecEntry G711-U modem honorToneDetection disable
set profiles media codecEntry G711-U law ULaw
set profiles media codecEntry G711-U dtmf relay rfc2833
set profiles media codecEntry G711-U dtmf removeDigits enable
commit

set profiles media codecEntry G711-A codec g711
set profiles media codecEntry G711-A packetSize 20
set profiles media codecEntry G711-A fax failureHandling continue
set profiles media codecEntry G711-A fax toneTreatment faxRelayOrFallbackToG711
set profiles media codecEntry G711-A fax honorToneDetection disable
set profiles media codecEntry G711-A modem failureHandling continue
set profiles media codecEntry G711-A modem toneTreatment fallbackToG711
set profiles media codecEntry G711-A modem honorToneDetection disable
set profiles media codecEntry G711-A law ALaw
set profiles media codecEntry G711-A dtmf relay rfc2833
set profiles media codecEntry G711-A dtmf removeDigits enable
commit

set profiles media codecEntry OPUS codec opus
set profiles media codecEntry OPUS packetSize 20
set profiles media codecEntry OPUS preferredRtpPayloadType 111
set profiles media codecEntry OPUS fax failureHandling continue
set profiles media codecEntry OPUS fax toneTreatment none
set profiles media codecEntry OPUS modem failureHandling continue
set profiles media codecEntry OPUS modem toneTreatment none
set profiles media codecEntry OPUS dtmf relay rfc2833
set profiles media codecEntry OPUS dtmf removeDigits enable
set profiles media codecEntry OPUS maxAverageBitRate 20000
commit

set profiles media codecEntry G722 codec g722
set profiles media codecEntry G722 codingRate 64
set profiles media codecEntry G722 packetSize 20
set profiles media codecEntry G722 preferredRtpPayloadType 128
set profiles media codecEntry G722 fax failureHandling continue
set profiles media codecEntry G722 fax toneTreatment none
set profiles media codecEntry G722 modem failureHandling continue
set profiles media codecEntry G722 modem toneTreatment none
set profiles media codecEntry G722 dtmf relay rfc2833
set profiles media codecEntry G722 dtmf removeDigits enable
commit

SBC Configuration for PSTN side

Packet Service Profile

Each Packet Service Profile is configured for a pair of gateways, and includes entries for up to four audio/video encoding methods. The pair of gateways can be originating for destination gateways in the same gateway group, or can be originating for destination gateways in an inter-gateway group.

set profiles media packetServiceProfile PSTN_PSP codec codecEntry1 G711-U
set profiles media packetServiceProfile PSTN_PSP codec codecEntry2 G711-A
set profiles media packetServiceProfile PSTN_PSP codec codecEntry3 OPUS
set profiles media packetServiceProfile PSTN_PSP codec codecEntry4 G722
set profiles media packetServiceProfile PSTN_PSP packetToPacketControl transcode conditional
set profiles media packetServiceProfile PSTN_PSP packetToPacketControl codecsAllowedForTranscoding thisLeg g711a,g711u,g722,opus
set profiles media packetServiceProfile PSTN_PSP packetToPacketControl codecsAllowedForTranscoding otherLeg g711a,g711u,g722,opus
set profiles media packetServiceProfile PSTN_PSP preferredRtpPayloadTypeForDtmfRelay 127
commit

SIP Message Manipulation - PSTN

The SIP Adaptor Profile object is the main construct for SIP Message Manipulation (SMM) functionality. A SIP Adaptor Profile is associated with a SIP Trunk Group or Zone in order to act upon SIP messages passing into or out of that group. A SIP Trunk Group can have two SIP Adaptor Profiles, an input adaptor profile for manipulation of inbound messages, and an output adaptor profile for manipulation of outbound messages. Similarly, a Zone can have two SIP Adaptor Profiles.

SIP Message Manipulation (SMM) allows you to modify SIP messages as they are processed by the SBC Core in both inbound and outbound directions. Using SMM criteria and actions, you define SMM rules within a SIP adaptor profile, which the SBC applies to SIP messages in order to modify their headers and/or parameters. When a message comes into or out of the SBC and a SIP adaptor profile applies, the message is evaluated based on the set of criteria in the profile. If the message meets the criteria, it is modified according to actions defined in the profile.

Since a=inactive is not supported on Google Voice, the SMM PSTN_sendonly is used to modify the parameter to a=sendonly.

set profiles signaling sipAdaptorProfile PSTN_sendonly state enabled
set profiles signaling sipAdaptorProfile PSTN_sendonly advancedSMM disabled
set profiles signaling sipAdaptorProfile PSTN_sendonly profileType messageManipulation
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 applyMatchHeader one
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 1 type message
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 1 message
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 1 message messageTypes request
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 1 message methodTypes [ invite ]
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 2 type messageBody
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 2 messageBody
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 criterion 2 messageBody condition exist
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 type messageBody
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 operation regsub
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 from
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 from type value
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 from value a=sendonly
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 to
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 to type messageBody
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 to messageBodyValue all
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 regexp
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 regexp string a=inactive
set profiles signaling sipAdaptorProfile PSTN_sendonly rule 1 action 1 regexp matchInstance all
commit

IP Interface Group

An IP Interface Group is a named object containing one or more IP interfaces (IP addresses). The IP Interface Group is Address Context-specific (e.g. permanently bound to a particular Address Context), and is the primary tool to manage disjointed networks (separate networks that are not designed to communicate directly). An IP Interface Group is the local manifestation of a segregated network domain. The service section of an IP trunk group and a Signaling Port typically reference an IP Interface Group in order to restrict signaling and/or media activity to that IP Interface Group.

set addressContext default ipInterfaceGroup LIF1 ipInterface PKT0 ceName GOOGLEVOICE
set addressContext default ipInterfaceGroup LIF1 ipInterface PKT0 portName pkt0
set addressContext default ipInterfaceGroup LIF1 ipInterface PKT0 ipAddress x.x.x.x
set addressContext default ipInterfaceGroup LIF1 ipInterface PKT0 prefix x
set addressContext default ipInterfaceGroup LIF1 ipInterface PKT0 mode inService state enabled
commit

Zone

A zone is used to group a set of objects unique in a particular customer environment. 

set addressContext default zone PSTN id 2
commit

SIP Signaling Port

A SIP Signaling Port is a logical address permanently bound to a specific zone, and is used to send and receive SIP call signaling packets. A SIP Signaling Port is capable of multiple transports such as UDP, TCP and TLS/TCP. 

set addressContext default zone PSTN sipSigPort 2 ipInterfaceGroupName LIF1 ipAddressV4 x.x.x.x portNumber 5060 transportProtocolsAllowed sip-udp,sip-tcp
set addressContext default zone PSTN sipSigPort 2 mode inService state enabled
commit

Trunk Group

SIP Trunk Groups are used to apply a wide-ranging set of call management functions to a group of peer devices (endpoints) within the network. SIP Trunk Groups are created within a specific address context and zone.

All SBC signaling and routing (both Trunking and Access) are based upon Trunk Group configurations defined within zones. A zone can contain multiple Trunk Groups.

set addressContext default zone PSTN sipTrunkGroup PSTN_TG media mediaIpInterfaceGroupName LIF1
set addressContext default zone PSTN sipTrunkGroup PSTN_TG signaling timers sessionKeepalive 600
set addressContext default zone PSTN sipTrunkGroup PSTN_TG signaling timers sessionMinSE 90
set addressContext default zone PSTN sipTrunkGroup PSTN_TG ingressIpPrefix x.x.x.x x
set addressContext default zone PSTN sipTrunkGroup PSTN_TG policy media packetServiceProfile PSTN_PSP
set addressContext default zone PSTN sipTrunkGroup PSTN_TG signaling messageManipulation inputAdapterProfile PSTN_sendonly
set addressContext default zone PSTN sipTrunkGroup PSTN_TG mode inService state enabled
commit

IP Peer

IP Peer is an entity of Session Border Controller, which is configured inside the Zone. It acts as a destination endpoint for the call to be routed. An IP Peer constitutes an IPv4/IPv6 address or a Fully Qualified Domain Name (FQDN) with a port number.

set addressContext default zone PSTN ipPeer PSTN_IPP ipAddress x.x.x.x ipPort 5060
commit

IP Static Route

This object specifies the gateway to which you wish to direct traffic from your Packet, Management, or Link Interface. In effect, this object allows you to add, change, and delete gateways (next Hops) to these interfaces. Interface and static routes combine to form the IP routing table for your network.

An IP Static Route provides a route to each potential call destination IP address. The static route is used to add static IP routes for the IP interfaces. A static route indicates the next Hop gateway and IP interface to use for a particular peer network IP prefix.

set addressContext default staticRoute x.x.x.x x x.x.x.x LIF1 PKT0 preference 100
commit

SBC Configuration for Google Voice SIP Link side

TLS Certificates

  • For TLS to work, a Trusted CA (Certificate Authority) is required. For this interop, GoDaddy is used as a Trusted CA.
  • Add an entry in the Public DNS to resolve Ribbon SBC Core FQDN to Public IP Address.
  • In the trust store of the SBC, ensure you have the following certificates as part of the root certificate trust.
    • GTS Root R1
    • GlobalSign Root CA (if required)
Note

Refer to Google Voice SIP Link documentation for other compatible CAs.

Create the certificate for Ribbon SBC with the CN containing SBC's FQDN.

set system security pki certificate SBC_CERT_GV type local-internal
commit

Command to generate CSR on SBC
request system security pki certificate SBC_CERT_GV generateCSR csrSub /C=IN/ST=KA/L=Bangalore/O=Sonus/CN=<common_name> keySize keySize2K

After generating the CSR on Ribbon SBC, provide it to the Certificate Authority. CA would generally provide the following certificates:
	SBC Certificate
	CA's Root Certificate
	Intermediate Certificate

Upload the certificates to Ribbon SBC at /opt/sonus/external and convert them into SBC readable format using openssl
i.e. SBC certificate must be in .pem or .p12 format and root certificate in .cer or .der format

Converting .crt to .pem using openssl for SBC Certificate.
openssl x509 -in sbc_cert.crt -out sbc_cert.der -outform DER
openssl x509 -in sbc_cert.der -inform DER -out sbc_cert.pem -outform PEM

After generating sbc_cert.pem file, convert it to .p12 format using below command and provide the location of the certificate key
openssl pkcs12 -export -out sbc1_cert.p12 -in sbc_cert.pem -inkey /opt/sonus/company_san.key.temp

Converting .crt to .cer using openssl for CA's Root and Intermediate Certificates.
openssl x509 -in root_cert.crt -out root_cert.cer -outform DER

After converting all these certificates, upload them to Ribbon SBC at /opt/sonus/external location.

Add all the required certificates on SBC.

set system security pki certificate gtsr1 state enabled
set system security pki certificate gtsr1 fileName gtsr1.der
set system security pki certificate gtsr1 type remote
set system security pki certificate GoDaddy state enabled
set system security pki certificate GoDaddy fileName gd_bundle.der
set system security pki certificate GoDaddy type remote
set system security pki certificate GlobalSign state enabled
set system security pki certificate GlobalSign fileName globalsign.der
set system security pki certificate GlobalSign type remote
set system security pki certificate SBC_CERT_GV state enabled
set system security pki certificate SBC_CERT_GV fileName b43ffd9ad0d7a03.pem
set system security pki certificate SBC_CERT_GV type local-internal
set system security pki certificate global_root state enabled
set system security pki certificate global_root fileName roots.der
set system security pki certificate global_root type remote
commit

TLS Profile

This object creates and configures a profile for implementing the Transport Layer Security (TLS) protocol to use with SIP over TLS. TLS is an IETF protocol for securing communications across an untrusted network. Normally, SIP packets travel in plain text over TCP or UDP connections. Secure SIP is a security measure that uses TLS, the successor to the Secure Sockets Layer (SSL) protocol.

To add a TLS protection-level policy, create a TLS PROFILE and configure each of the parameters. The TLS profile is specified on the SIP Signaling Port and controls behavior of all TLS connections established on that signaling port.

set profiles security tlsProfile TLS_PROF appAuthTimer 5
set profiles security tlsProfile TLS_PROF handshakeTimer 5
set profiles security tlsProfile TLS_PROF sessionResumpTimer 3600
set profiles security tlsProfile TLS_PROF cipherSuite1 rsa-with-aes-128-cbc-sha
set profiles security tlsProfile TLS_PROF cipherSuite2 tls_ecdhe_rsa_with_aes_128_gcm_sha256
set profiles security tlsProfile TLS_PROF cipherSuite3 tls_rsa_with_aes_256_gcm_sha384
set profiles security tlsProfile TLS_PROF allowedRoles clientandserver
set profiles security tlsProfile TLS_PROF authClient true
set profiles security tlsProfile TLS_PROF clientCertName SBC_CERT_GV
set profiles security tlsProfile TLS_PROF serverCertName SBC_CERT_GV
set profiles security tlsProfile TLS_PROF acceptableCertValidationErrors none
set profiles security tlsProfile TLS_PROF v1_0 enabled
set profiles security tlsProfile TLS_PROF v1_1 enabled
set profiles security tlsProfile TLS_PROF v1_2 enabled
set profiles security tlsProfile TLS_PROF suppressEmptyFragments disabled
set profiles security tlsProfile TLS_PROF peerNameVerify disabled
commit

IP Signaling Profile

This object specifies parameters associated with H.323, SIP, SIP-I communication that are sent as part of the outgoing signaling message after standard protocol rules are applied.

set profiles signaling ipSignalingProfile GOOGLE_IPSP commonIpAttributes flags customizedSessionTimerBehavior enable
set profiles signaling ipSignalingProfile GOOGLE_IPSP commonIpAttributes flags includeTransportTypeInContactHeader enable
set profiles signaling ipSignalingProfile GOOGLE_IPSP commonIpAttributes flags sessionTimerRefreshUpdate enable
set profiles signaling ipSignalingProfile GOOGLE_IPSP commonIpAttributes transparencyFlags fromHeader disable
set profiles signaling ipSignalingProfile GOOGLE_IPSP commonIpAttributes transparencyFlags requestURI disable
set profiles signaling ipSignalingProfile GOOGLE_IPSP commonIpAttributes transparencyFlags toHeader disable
set profiles signaling ipSignalingProfile GOOGLE_IPSP egressIpAttributes numberGlobalizationProfile DEFAULT_IP
set profiles signaling ipSignalingProfile GOOGLE_IPSP egressIpAttributes privacy privacyInformation pAssertedId
set profiles signaling ipSignalingProfile GOOGLE_IPSP egressIpAttributes sipHeadersAndParameters sessionExpiresRefresher notSend
set profiles signaling ipSignalingProfile GOOGLE_IPSP egressIpAttributes transport type1 tlsOverTcp
commit

Packet Service Profile

set profiles media packetServiceProfile GOOGLE_PSP rtcpOptions rtcp enable
set profiles media packetServiceProfile GOOGLE_PSP rtcpOptions rtcpMux enable
set profiles media packetServiceProfile GOOGLE_PSP codec codecEntry1 G711-U
set profiles media packetServiceProfile GOOGLE_PSP codec codecEntry2 G711-A
set profiles media packetServiceProfile GOOGLE_PSP codec codecEntry3 OPUS
set profiles media packetServiceProfile GOOGLE_PSP codec codecEntry4 G722
set profiles media packetServiceProfile GOOGLE_PSP packetToPacketControl transcode conditional
set profiles media packetServiceProfile GOOGLE_PSP packetToPacketControl codecsAllowedForTranscoding thisLeg g711a,g711u,g722,opus
set profiles media packetServiceProfile GOOGLE_PSP packetToPacketControl codecsAllowedForTranscoding otherLeg g711a,g711u,g722,opus
set profiles media packetServiceProfile GOOGLE_PSP preferredRtpPayloadTypeForDtmfRelay 127
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp cryptoSuiteProfile DEFAULT
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags allowFallback disable
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags enableSrtp disable
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags resetROCOnKeyChange disable
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags resetEncDecROCOnDecKeyChange disable
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags updateCryptoKeysOnModify disable
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags allowPassthru disable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsCryptoSuiteProfile DEFAULT
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags allowDtlsFallback disable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags enableDtlsSrtp enable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags dtlsSrtpRelay disable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags dtlsSctpRelay disable
commit

Path Check Profile

The Path Check Profile specifies the conditions that constitute a connectivity failure, and in the event of such a failure, the conditions that constitute a connectivity recovery. This profile specifies the configuration for OPTIONS PING.

set profiles services pathCheckProfile GOOGLE protocol sipOptions
set profiles services pathCheckProfile GOOGLE sendInterval 30
set profiles services pathCheckProfile GOOGLE replyTimeoutCount 1
set profiles services pathCheckProfile GOOGLE recoveryCount 1
set profiles services pathCheckProfile GOOGLE transportPreference preference1 tls-tcp
set profiles services pathCheckProfile GOOGLE transportPreference preference2 tcp
commit

SIP Message Manipulation - Google

The SMM GOOGLE_ADP is used for the following purposes:

  • To add the header “X-Google-Pbx-Trunk-Secret-Key” for Google Voice. The value of this header is generated when the SIP Trunk is created
  • To change the request URI of the specific request messages to Google specified FQDN, trunk.sip.voice.google.com
  • To modify the FQDN in the To header to trunk.sip.voice.google.com
set profiles signaling sipAdaptorProfile GOOGLE_ADP state enabled
set profiles signaling sipAdaptorProfile GOOGLE_ADP advancedSMM disabled
set profiles signaling sipAdaptorProfile GOOGLE_ADP profileType messageManipulation
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 applyMatchHeader one
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 criterion 1 type message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 criterion 1 message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 criterion 1 message messageTypes requestAll
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 operation add
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 headerPosition last
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 from
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 from type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 from value <trunk_secret_key>
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 to
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 to type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 1 action 1 to value X-Google-Pbx-Trunk-Secret-Key
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 applyMatchHeader one
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 1 type message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 1 message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 1 message messageTypes request
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 1 message methodTypes [ cancel invite ack ]
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 2 type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 2 header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 2 header name request-line
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 2 header condition exist
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 2 header numberOfInstances number 1
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 criterion 2 header numberOfInstances qualifier equal
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 type token
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 operation regsub
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 from
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 from type value
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 from value trunk.sip.voice.google.com
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 to
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 to type token
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 to tokenValue urihostname
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 regexp
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 regexp string "^((25[0-5]|(2[0-4]|1[0-9]|[1-9]|)[0-9])(\.(?!$)|$)){4}$"
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 2 action 1 regexp matchInstance one
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 applyMatchHeader one
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 1 type message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 1 message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 1 message messageTypes request
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 1 message methodTypes [ cancel invite ack ]
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 2 type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 2 header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 2 header name To
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 2 header condition exist
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 2 header numberOfInstances number 1
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 criterion 2 header numberOfInstances qualifier equal
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 operation regsub
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 headerInfo fieldValue
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 from
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 from type value
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 from value trunk.sip.voice.google.com
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 to
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 to type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 to value To
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 regexp
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 regexp string siplink.telephony.goog
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 3 action 1 regexp matchInstance one
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 applyMatchHeader one
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 1 type message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 1 message
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 1 message messageTypes request
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 1 message methodTypes [ cancel invite ack ]
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 2 type header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 2 header
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 2 header name request-line
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 2 header condition exist
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 2 header numberOfInstances number 1
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 criterion 2 header numberOfInstances qualifier equal
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 type token
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 operation regsub
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 from
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 from type value
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 from value trunk.sip.voice.google.com
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 to
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 to type token
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 to tokenValue urihostname
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 regexp
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 regexp string siplink.telephony.goog
set profiles signaling sipAdaptorProfile GOOGLE_ADP rule 4 action 1 regexp matchInstance one
commit

The SMM SIP_OPTIONS is used to modify the FQDN in request URI and To header of OPTIONS to Google specified FQDN, trunk.sip.voice.google.com

set profiles signaling sipAdaptorProfile SIP_OPTIONS state enabled
set profiles signaling sipAdaptorProfile SIP_OPTIONS advancedSMM disabled
set profiles signaling sipAdaptorProfile SIP_OPTIONS profileType messageManipulation
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 applyMatchHeader one
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 1 type message
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 1 message
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 1 message messageTypes request
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 1 message methodTypes [ options ]
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 2 type header
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 2 header
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 2 header name request-line
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 2 header condition exist
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 2 header numberOfInstances number 1
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 criterion 2 header numberOfInstances qualifier equal
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 type token
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 operation regsub
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 from
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 from type value
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 from value trunk.sip.voice.google.com
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 to
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 to type token
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 to tokenValue urihostname
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 regexp
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 regexp string siplink.telephony.goog
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 1 action 1 regexp matchInstance one
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 applyMatchHeader one
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 1 type message
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 1 message
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 1 message messageTypes request
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 1 message methodTypes [ options ]
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 2 type header
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 2 header
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 2 header name To
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 2 header condition exist
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 2 header numberOfInstances number 1
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 criterion 2 header numberOfInstances qualifier equal
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 type header
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 operation regsub
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 headerInfo fieldValue
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 from
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 from type value
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 from value trunk.sip.voice.google.com
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 to
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 to type header
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 to value To
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 regexp
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 regexp string siplink.telephony.goog
set profiles signaling sipAdaptorProfile SIP_OPTIONS rule 2 action 1 regexp matchInstance one
commit

IP Interface Group

set addressContext default ipInterfaceGroup LIF2 ipInterface PKT1 ceName GOOGLEVOICE
set addressContext default ipInterfaceGroup LIF2 ipInterface PKT1 portName pkt1
set addressContext default ipInterfaceGroup LIF2 ipInterface PKT1 ipAddress x.x.x.x
set addressContext default ipInterfaceGroup LIF2 ipInterface PKT1 prefix x
set addressContext default ipInterfaceGroup LIF2 ipInterface PKT1 mode inService state enabled
commit

DNS Group

The DNS (Domain Name System) group object contains a list of DNS servers used to resolve SIP NAPTR, SRV and A-record lookups. The DNS server group is contained in an Address Context and is referenced by Zones and SIP Trunk Groups in that Address Context.

set addressContext default dnsGroup DNS type ip
set addressContext default dnsGroup DNS interface LIF2
set addressContext default dnsGroup DNS server PRIMARY_DNS state enabled
set addressContext default dnsGroup DNS server PRIMARY_DNS ipAddress 8.8.8.8
set addressContext default dnsGroup DNS server PRIMARY_DNS priority 1
commit

Zone

set addressContext default zone GOOGLE id 3
set addressContext default zone GOOGLE messageManipulation outputAdapterProfile SIP_OPTIONS
set addressContext default zone GOOGLE dnsGroup DNS
commit

SIP Signaling Port

set addressContext default zone GOOGLE sipSigPort 3 ipInterfaceGroupName LIF2 ipAddressV4 x.x.x.x portNumber 5061 transportProtocolsAllowed sip-tls-tcp
set addressContext default zone GOOGLE sipSigPort 3 tlsProfileName TLS_PROF
set addressContext default zone GOOGLE sipSigPort 3 tcpKeepaliveTime 100
set addressContext default zone GOOGLE sipSigPort 3 tcpKeepaliveInterval 60
set addressContext default zone GOOGLE sipSigPort 3 tcpKeepaliveProbes 2
set addressContext default zone GOOGLE sipSigPort 3 mode inService state enabled
commit

Trunk Group

Note

IngressIpPrefix must be entered with Google Voice SIP Link's Signaling IP address.

set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG media mediaIpInterfaceGroupName LIF2
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG signaling timers sessionKeepalive 1800
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG signaling timers sessionMinSE 90
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG ingressIpPrefix x.x.x.x x
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG policy media packetServiceProfile GOOGLE_PSP
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG policy signaling ipSignalingProfile GOOGLE_IPSP
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG services natTraversal tcpKeepaliveTimer 240
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG signaling messageManipulation outputAdapterProfile GOOGLE_ADP
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG mode inService state enabled
commit

IP Peer

set addressContext default zone GOOGLE ipPeer GOOGLE_IPP policy description ""
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP policy sip fqdn siplink.telephony.goog
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP policy sip fqdnPort 5671
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP pathCheck profile GOOGLE
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP pathCheck hostName siplink.telephony.goog
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP pathCheck hostPort 5671
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP pathCheck state enabled
set addressContext default zone GOOGLE ipPeer GOOGLE_IPP pathCheck statusUpdateSupport enabled
commit
Note
  • For production, the Google Voice (GV) hostname is siplink.telephony.goog
  • GV listens on port 5672. Port 5671 is configured on Ribbon SBC Core as it adds 1 to the existing port for TLS

IP Static Route

set addressContext default staticRoute x.x.x.x x x.x.x.x LIF2 PKT1 preference 100
commit

Call Routing

Routing management allows you to manage all the configurations associated with routing calls based on the carriers' business requirements.

Routing Label

Routing label is associated with a route. Each route includes a gateway/trunk group pair. Routing labels provide the link between an entry in the Standard Route table and the set of routes associated with that Standard Route table entry.

set global callRouting routingLabel GOOGLE_RL routingLabelRoute 1 trunkGroup GOOGLE_TG ipPeer GOOGLE_IPP inService inService
set global callRouting routingLabel PSTN_RL routingLabelRoute 1 trunkGroup PSTN_TG ipPeer PSTN_IPP inService inService
commit

Route

Routing allows you send calls to the correct destination. You can use routing options based on your requirements. Configure the standard and specific routes (with usernames) to ensure that no matter how the called party is addressed (a number or username), the SBC routes the message to the Core. Create Route entries for standard Trunk Group routing with Matching Criteria and a Routing Label destination.

set global callRouting route trunkGroup GOOGLE_TG GOOGLEVOICE standard Sonus_NULL 1 all all ALL none Sonus_NULL routingLabel PSTN_RL
set global callRouting route trunkGroup GOOGLE_TG GOOGLEVOICE username Sonus_NULL 1 all all ALL none Sonus_NULL routingLabel PSTN_RL
set global callRouting route trunkGroup PSTN_TG GOOGLEVOICE standard Sonus_NULL 1 all all ALL none Sonus_NULL routingLabel GOOGLE_RL
set global callRouting route trunkGroup PSTN_TG GOOGLEVOICE username Sonus_NULL 1 all all ALL none Sonus_NULL routingLabel GOOGLE_RL
commit

Media Encryption

Customers can choose to encrypt the media using either DTLS or SDES-SRTP based on the requirement.

Warning

Configuring both DTLS and SDES-SRTP will result in call failure. Hence, customers are advised to use only one method of Media encryption.

DTLS

The Datagram Transport Layer Security (DTLS) protocol provides authentication, data integrity, and confidentiality for communications between two applications over an Unreliable Datagram Protocol (UDP). The Secure Real-time Transport Protocol (SRTP) provides encryption, message authentication and integrity, and replay protection to the RTP data in both unicast and multicast applications. DTLS-SRTP is an extension to the DTLS protocol, where DTLS acts as the key management protocol. DTLS protocol is also extended to negotiate the SRTP crypto suites and parameters for use with those keys.

WebRTC is a signaling protocol defined for real-time communication between Web browsers. WebRTC has assigned DTLS-SRTP protocol for the media exchange between the browsers. The SBC includes the following DTLS functionality:

  • Real-time communication between the web browsers by using DTLS-SRTP while interworking with SIP networks.
  • DTLS on the media path for key management for the SRTP-based media.
  • The self-signed certificates to secure and authenticate DTLS associations. DTLS connections are secured by the two browsers sharing self-signed certificates as part of the media connection during a DTLS handshake between the browsers. The certificates are authenticated by checking a fingerprint, which is passed in the signaling path as part of the Session Description Protocol (SDP).

The SBC includes DTLS crypto suites that define a set of ciphers (algorithms used for encrypting data) which allow the selection of an appropriate level of security. When a TLS connection is established, the client and server exchange information about which cipher suites they have in common.

DTLS Profile

This object specifies the parameters associated with DTLS Flags. These are supporting parameters for DTLS objects.

set profiles security dtlsProfile byotDTLS handshakeTimer 5
set profiles security dtlsProfile byotDTLS sessionResumpTimer 300
set profiles security dtlsProfile byotDTLS cipherSuite1 rsa-with-aes-128-cbc-sha
set profiles security dtlsProfile byotDTLS cipherSuite2 nosuite
set profiles security dtlsProfile byotDTLS cipherSuite3 nosuite
set profiles security dtlsProfile byotDTLS dtlsRole client
set profiles security dtlsProfile byotDTLS hashType sha256
set profiles security dtlsProfile byotDTLS CertName defaultDtlsSBCCert
set profiles security dtlsProfile byotDTLS cookieExchange enabled
set profiles security dtlsProfile byotDTLS v1_0 enabled
set profiles security dtlsProfile byotDTLS v1_1 enabled
set profiles security dtlsProfile byotDTLS v1_2 enabled
commit
Packet Service Profile

Disable SRTP

set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags enableSrtp disable
commit

Enable the flag for DTLS 

set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsCryptoSuiteProfile DEFAULT
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags allowDtlsFallback disable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags enableDtlsSrtp enable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags dtlsSrtpRelay disable
set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags dtlsSctpRelay disable
commit
Trunk Group

Associate the DTLS profile to the Trunk Group

set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG state disabled
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG media dtlsProfileName byotDTLS
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG state enabled
commit

SDES-SRTP

SRTP is an IETF cryptographic protocol that provides secure communications over untrusted networks as described in RFC 3711. SRTP provides confidentiality, message authentication and replay protection to Internet media traffic such as audio and video. The SBC Core supports Secure RTP and its associated secure real-time transport control protocol (Secure RTCP) for IPv4/IPv6 addressing for both audio and video streams.

Trunk Group

Remove the DTLS profile from the Trunk Group

set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG state disabled
delete addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG media dtlsProfileName byotDTLS
set addressContext default zone GOOGLE sipTrunkGroup GOOGLE_TG state enabled
commit
Packet Service Profile

Enable SRTP

set profiles media packetServiceProfile GOOGLE_PSP dtls dtlsFlags enableDtlsSrtp disable
set profiles media packetServiceProfile GOOGLE_PSP secureRtpRtcp flags enableSrtp enable
commit

Ribbon SBC Core High Availability

Info

During this interop, SBC SWe was configured in HA mode with the below configuration for High Availability.

In an HA configuration, the two SBC VMs are connected to each other using the HA ports on the respective VMs. The HA logical ports must be in the same network and routable using the switch and they must be connected to a switch. Failure of the connection is via link detection and also TIPC keep-alives. 

HA Configuration

Link Detection Group

The Link Detection Group allows you to group interfaces and associated Link Monitors together and track link verification failures within the group. A Link Detection Group (LDG) is configured with a unique name and a failover threshold. The LDG tracks the number of link verification failures that have occurred among the Link Monitors configured.

Create Link Detection Groups for both pkt0 and pkt1 interfaces.

set addressContext default linkDetectionGroup PKT0_ACT_LDG ceName GOOGLEACTIVE
set addressContext default linkDetectionGroup PKT0_ACT_LDG type ip
set addressContext default linkDetectionGroup PKT0_ACT_LDG threshold 1
set addressContext default linkDetectionGroup PKT0_ACT_LDG state enabled
set addressContext default linkDetectionGroup PKT0_ACT_LDG linkMonitor PKT0_ACT_LM interfaceGroup LIF1
set addressContext default linkDetectionGroup PKT0_ACT_LDG linkMonitor PKT0_ACT_LM interface PKT0
set addressContext default linkDetectionGroup PKT0_ACT_LDG linkMonitor PKT0_ACT_LM destination <pkt0_default_gateway>
set addressContext default linkDetectionGroup PKT0_ACT_LDG linkMonitor PKT0_ACT_LM state enabled
set addressContext default linkDetectionGroup PKT0_STB_LDG ceName GOOGLESTANDBY
set addressContext default linkDetectionGroup PKT0_STB_LDG type ip
set addressContext default linkDetectionGroup PKT0_STB_LDG threshold 1
set addressContext default linkDetectionGroup PKT0_STB_LDG state enabled
set addressContext default linkDetectionGroup PKT0_STB_LDG linkMonitor PKT0_STB_LM interfaceGroup LIF1
set addressContext default linkDetectionGroup PKT0_STB_LDG linkMonitor PKT0_STB_LM interface PKT0
set addressContext default linkDetectionGroup PKT0_STB_LDG linkMonitor PKT0_STB_LM destination <pkt0_default_gateway>
set addressContext default linkDetectionGroup PKT0_STB_LDG linkMonitor PKT0_STB_LM state enabled
set addressContext default linkDetectionGroup PKT1_ACT_LDG ceName GOOGLEACTIVE
set addressContext default linkDetectionGroup PKT1_ACT_LDG type ip
set addressContext default linkDetectionGroup PKT1_ACT_LDG threshold 1
set addressContext default linkDetectionGroup PKT1_ACT_LDG state enabled
set addressContext default linkDetectionGroup PKT1_ACT_LDG linkMonitor PKT1_ACT_LM interfaceGroup LIF2
set addressContext default linkDetectionGroup PKT1_ACT_LDG linkMonitor PKT1_ACT_LM interface PKT1
set addressContext default linkDetectionGroup PKT1_ACT_LDG linkMonitor PKT1_ACT_LM destination <pkt1_default_gateway>
set addressContext default linkDetectionGroup PKT1_ACT_LDG linkMonitor PKT1_ACT_LM state enabled
set addressContext default linkDetectionGroup PKT1_STB_LDG ceName GOOGLESTANDBY
set addressContext default linkDetectionGroup PKT1_STB_LDG type ip
set addressContext default linkDetectionGroup PKT1_STB_LDG threshold 1
set addressContext default linkDetectionGroup PKT1_STB_LDG state enabled
set addressContext default linkDetectionGroup PKT1_STB_LDG linkMonitor PKT1_STB_LM interfaceGroup LIF2
set addressContext default linkDetectionGroup PKT1_STB_LDG linkMonitor PKT1_STB_LM interface PKT1
set addressContext default linkDetectionGroup PKT1_STB_LDG linkMonitor PKT1_STB_LM destination <pkt1_default_gateway>
set addressContext default linkDetectionGroup PKT1_STB_LDG linkMonitor PKT1_STB_LM state enabled
commit

Google Voice Configuration

For configuration on Google Voice, visit support.google.com/a?p=siplink 

Supplementary Services & Features Coverage

The following checklist depicts the set of services/features covered through the configuration defined in this Interop Guide. 

Sr. No.

Supplementary Services/ Features

Coverage

1Auto Attendant

2DTMF - RFC2833

3Basic Call Setup & Termination

4Calls to/from GV Android Client, Web Client and Desk-phone (OBi based)

5Long Duration Calls

6Session Timers

7Voice Mail Deposit and Retrieval

84xx/5xx Response Handling

9Ring Group

10Call Hold/Resume

11Call Transfer (Attended)

12Call Transfer (Blind/ Unattended)

13Call Forwarding Unconditional

14Call Forward No Answer

15Call Cancel/Reject

16Short Code Dialing

17HA SBC Switchover

Legend

Supported

Not Supported

Caveats

The following items should be noted in relation to this Interop - these are either limitations, untested elements or useful information pertaining to the Interoperability.

  • Short Code calls are not supported on Google Voice clients.
  • After switchover, SBC takes around 45 seconds to establish a new socket connection with GV for sending first SIP OPTIONS over TLS. Hence, all the calls including in-dialog messages initiated from GV end during this period will be failed as GV does not initiate any new socket for TLS connection, unless a new call from PSTN is initiated towards GV over TLS.

These issues will be addressed by GV/Ribbon in their upcoming releases.

Support

For any support related queries about this guide, please contact your local Ribbon representative, or use the details below:

References

For detailed information about Ribbon products & solutions, please visit:

https://ribboncommunications.com/products

Conclusion

This Interoperability Guide describes successful configuration for Google Voice SIP Link interop involving Ribbon SBC Core.

All features and capabilities tested are detailed within this document - any limitations, notes or observations are also recorded in order to provide the reader with an accurate understanding of what has been covered, and what has not.

Configuration guidance is provided to enable the reader to replicate the same base setup - there may be additional configuration changes required to suit the exact deployment environment.





© 2021 Ribbon Communications Operating Company, Inc. © 2021 ECI Telecom Ltd. All rights reserved.

  • No labels