Designing a SIP Trunk Network
John Vickroy
Product Manager
Pashmeen Mistry
Technical Marketing Engineer
Cisco Confidential Do Not Disseminate Pursuant to the Terms of the Parties Non-Disclosure Agreement
Date: May 31, 2012
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential
CIN Technology Workshop
Webinar Logistics Submit Real time Q&A in WebEx Q&A panel Presentation will be posted on My Cisco Community
https://www.myciscocommunity.com/docs
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
Session Overview
CUBE Product Overview SIP Trunk Deployment Models Integrating Voice Gateway with Voice Policy Q&A
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
Cisco Unified Border Element Product Overview
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
Cisco Unified Border Element CUBE
Enabling Session Border Control (SBC) Features on Cisco Routers
Enterprise 1
IP
CUBE
IP
IP SIP SIP
CUBE
Enterprise 2
Rich Media (real time Voice, Video, Screenshare) Rich Media
SESSION CONTROL
SECURITY
INTERWORKING
DEMARCATION
Call Admissions Control Ensuring QoS Statistics and Billing Redundancy/ Scalability
Presentation_ID
Encryption Authentication Registration SIP Protection Firewall Placement Toll Fraud
Cisco Confidential
SIP - SIP H.323 - SIP SIP Normalization DTMF Interworking Transcoding Codec Filtering
Fault Isolation Topology Hiding Network Borders L5/L7 Protocol Demarcation
2009 Cisco Systems, Inc. All rights reserved.
Cisco Unified Border Element
Integration of Routing and Session Border Controller Functions
Cisco Unified Border Element
Address Hiding H.323 and SIP interworking DTMF interworking
TDM Gateway
PSTN Backup
SIP security
Transcoding
Note: An SBC appliance would have only these features
CUBE
Voice Policy API
WAN & LAN Physical Interfaces
Unified CM Conferencing and Transcoding
IP Routing & MPLS
FW, IPS, QoS
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential
SRST VXML
GK
Note: Some features/components may require additional licensing
6
SBC Integration on Cisco Routers
Use L3 Network Visibility for Real Time Session Enhancement
Savings
Reduced equipment footprint Common sparing Common technical knowledge base
Flexibility
Simplified migration to SIP trunking Repurpose router as collaboration needs change
UserExperience
Network Aware Call Admission Control (CAC)
Integrated Media processing Enhanced Video Transport Enhance mobility integration
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
CUBE Integration with Cisco Collaboration Solutions
CUCM Integration with CUBE MOBILITY FEATURES:
Single Number Reach requires separate MTP to terminate media, which can co-reside with CUBE on ISR-G2. Dial Via Office requires translation of DTMF digits from inband to out of band.
NETWORK MANAGEMENT:
CUOM provides capacity analysis for both CUCM lines and Cisco Voice GW (CUBE & TDM) trunks. Serviceability with common call session numbers between CUBE and CUCM. CUCM and Cisco Voice GW (CUBE & TDM) mutual discovery of dial peers via Service Advertisement Framework (SAF)
CONFERENCING
DSP resources used for SBC transcoding or CUCM conferencing
Call Center Integration with CUBE
vXML Server on CVP integrates with vXML client on ISR with CUBE MRCP interaction with ASR applications Media Forking on CUBE integrates with MediaSense
WEBEX Integration with CUBE
WEBEX Connect is designed to work with CUBE as the SBC integration for WEBEX CCA Integrated SIP session control for video, voice and desk top sharing with specific Cisco end points.
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
CUBE Scalability
Scalable Voice Trunk Capacity for Small to Large Businesses
50-150
ASR 1004/6 RP2 ASR 1001
20-35
3900E ISR G2
Calls Per Second
17
ASR 1002
3900 ISR G2
8-12
ASR1006 Highest SBC transcoding capacity: 9,000 G729 to G711 calls
2900 ISR G2
ASR1001 Highest density SBC: 10,000 sessions in 1RU
<5
2801 ISR 800/1861 ISR
ISR 3945 Transcoding of ~800 calls
4
Presentation_ID
<50
600-800
900-1000
Cisco Confidential
1500-1700
2000-2500
10-12K
12-16K+
9
Active Voice Call (Session) Capacity
2009 Cisco Systems, Inc. All rights reserved.
CUBE Session Capacity Summary
Platform
C880/C890 SKUs 1861 2801 2811 2821
Reference
CUBE Sessions
5-25 5-15 55 110 200 225 400 500 600 100 200 400 600 800 950 2100 2500 1750 10000 ASR1001 introduced in RLS 3.2 in Nov 2010
10
Introduced in March 2011
2851
3825 3845 AS5000XM 2901 2911 2921
End of Life Platforms Last IOS Release: 15.1.4M
2951
3925 3945 3925E 3945E ASR1002/1004/1006 RP1 ASR1001
ASR1004/1006 RP2
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved.
16000
Cisco Confidential
CUBE Versatility
Enterprise VOIP Interworking for Internal or External Use Cases
NICE
Networkbased Media Recording IVR Integration for Call Center Business to Business Telepresence
MediaSense
SIP
A
A SIP RTP
CUBE
SIP
SP IP SBC Network
RTP
CVP vXML Server vXML Client
A
ASR Server
SIP
CUBE
SP IP SBC Network
A
CUBE
SIP
SBC
SP IP Network
SIP
CUBE
ISR G2
TDM
Migration from TDM to SIP Trunks
Presentation_ID
Traditional PSTN
SIP H.323
CUBE
SIP
SBC
SP VOIP Servivces
11
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
CUBEs Single Platform Reduces Costs & Complexity for SIP Migrations
Cisco UCM
A SIP H.323
TDM Gateway
Traditional PSTN
TDM
TDM
CUBE
SIP
SBC
Cisco ISR
TDM PBX
SP VOIP Services
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
12
CUBE High Availability
Alternative Deployment Strategies for Redundancy and High Availability
Inbox redundancy
ASR 1001/2/4/6 ASR 2.5, 2.6, 3.1 Media preservation ASR 3.2 (Nov 2010) Stateful failover
ASR1006 ASR1001/2/4 Active OS Standby OS
Dual Forwarding plane HW Dual Control plane HW (CPU)
Box-to-Box redundancy
ISR G2 and ASR 1001/2/4 ISR G2 CUBE 8.5 (15.1.2T) Media preservation ASR 3.2 (Nov 2010) Stateful failover Local redundancy only
In-Leg
Active/Standby Out-Leg
CUBE
SIP SP
Virtual IP (VIP)
CUBE
Virtual IP (VIP)
Clustering with load balancing
All platforms Load balancing by SP call agent Internal SIP proxy/load balancer Local or distributed redundancy
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential
SIP SP
Load Balancer Load Balancer
13
Cisco SME & CUBE: Proven Interoperability
Use what you have, eliminate upgrades, deploy globally
Industry-leading SIP interoperability (sophisticated header normalization) SME Industry-leading interop on any protocol (SIP, H.323, TDM, QSIG, PRI, CAS) Standards based Tested with 3rd party PBXs & IP PBXs Validated with SPs world-wide
Cisco Interop Portal: www.cisco.com/go/interoperability
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential
14
SIP Trunking Deployment Models
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
15
Collaboration Technologies
Voice is Converging with Other Technologies
Collaborative Tools
Text
Images
Social Networking
Voice
Video
Streaming Video Social Video
Number of Participants
Many
Discussion Forums
Blogs
Wikis Contact Center
Group Telepresence Video Events
Email
Conferencing
One
IM Documents
Voice
Voicemail
Personal Telepresence Desktop Video
Expanding Collaboration to include Broader, Richer Interactions
Presentation_ID 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential
16
Future Benefits of Collaboration will Require End to End IP
IP Hybrid
TCO Savings
TDM
IP and TDM PBX w/ mix of TDM and IP trunks Unified Communications Basic Telephony Toll bypass Basic mobile integration
IP infrastructure w/ TDM survivability Enterprise Communications and Collaboration for message, voice, screen share & HD video B2B, Mobile, and Web 2.0 Collaboration Policy-enabled control
Productivity
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
17
Flexible SIP Trunk Deployments
Accommodating Centralized or Distributed SIP Trunk Deployments
Centralized
IP PSTN
Distributed
IP PSTN
CUBE
A
Enterprise IP WAN
CUBE
Enterprise IP WAN
CUBE
CUBE
CUBE
CUBE
Hybrid
IP PSTN
A
CUBE
A
Enterprise IP WAN
CUBE
CUBE
Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.
18
WEBEX Optimization thru SIP Trunking
Webex CCA Solution using CUBE Enterprise
Requirements
Replacement for TDM audio connection to WEBEX with VOIP using SIP signaling. High capacity SIP media connectivity for WEBEX cloud , including telepresence integration.
WEBEX
CUBE
Quad
How
Enterprise IP WAN (MPLS)
A
CUBE
CUBE Reduces SIP protocol chatter between CUCM and WEBEX cloud thru normalization. CUBE allows SIP sessions from ALL enterprise sites to WEBEX to avoid hairpin media flows. CUBE support on ASR provides high performance for signaling and media transport of WEBEX.
Headquarters
Benefit
CUBE CUBE CUBE
Best possible WEB conference experience for Enterprise users, with most efficient network usage.
Branch Office
Branch Office
Future Capabilities
Branch Office Additional Cloud services (e.g. QUAD) under same architecture and identity is possible. Integration with WEBEX One Touch for improved telepresence session set up (i.e. one touch)
19
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
CUBE Provides Phased Approach to SIP Trunking
Centralized Architectures Change BOTH Technology and Topology
This distributed Distributed model TDMFits well with SP services Trunks like BEST from Verizon
IP PSTN
Centralized SIP Trunks
CUBE IP PSTN
TDM PSTN
TDM PSTN
Enterprise IP WAN
TDM Circuits to SP
SIP Trunks to SP
Internal SIP Trunks
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
20
SIP Trunk Deployment Models
Selection Criteria Summary
SELECTION CRITERIA
Limitations on Headend Bandwidth Existing distributed PBX Architecture Variability of branch office capacity requirements Video conferencing /Video telephony requirements thru Service Provider Need to maintain branch IT functions Consistent latency across network Gateway protocols for TDM access
CENTRALIZED
Need strong QoS strategies on Ent WAN Not Recommended Low branch office capacity(<20% of trunks) Requires strong QoS strategies on Ent.WAN Allowable Inconsistent latency can occur If MGCP is used on TDM GW, then may be easiest transition. Device management may be adequate Needs strong QoS & CAC Requires TDM backup in distributed branch offices
DISTRIBUTED
Not affected by Headend BW availability Preferred High branch office capacity (>50% of trunks) Requires adequate BW at each site. Recommended Recommended H323 or SIP used on TDM GW = easiest transition Requires strong centralized management Not a consideration Multiple SIP connection points provide survivability
HYBRID
Adaptable to BW availability Allowable High branch office capacity but varies from site to site. Offers flexibility in phased deployment Allowable Recommended Preferred when both MGCP & H323/SIP are used on TDM GWs Same as distributed Needs QoS & CAC Multiple SIP connection points provide survivability
21
Centralized management Capabilities Enterprise WAN Capabilities Survivability & alternative path Strategy
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
In-Depth Explanation of SIP Deployment Models
Educate your customer on SIP Deployment Models
New White Paper will be posted by the end of January at the following URL: www.cisco.com/go/cube
22
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
Integrating Voice Gateway with Voice Policy
(for real time visibility and control)
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
23
Voice Network Challenges For the CIO
No holistic view of network & no real-time control Fragmented call information and access Un-explained voice billing issues Unanswered questions about network behaviour Heterogeneous networks Risk & compliance discussions Cyber security issues - social media, Web 2.0 Reactive versus proactive Cloud reliability Making the CIO office more business relevant
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
24
Using The Network Edge to Drive Innovative Applications to the Cloud and Premise
Enterprise 1
TDM Gateways & SBCs:
Remain in the call path for the life of the call Demarcation point can mitigate security threats before they hit the network
TDM
IP
Enterprise 2
IP PSTN
IP
CUBE
SIP
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
25
Examples of Recent Voice Threats
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
26
Cisco UC Gateway Services API
Combines applications to:
Remove latency issues (less hops) Allow 3rd parties to integrate
applications onto Cisco ISR using UCS express
Simplify management and
architecture
Single platform using Cisco ISR Enterprise-wide solutions (TDM+SIP) Combine with data solutions
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
27
Integrated Voice Gateway / Voice Policy Solution
Real time Monitoring and Control of the Enterprise Voice Network
Application Layer Voice Policy:
Centralized policy creation/distribution Protection from external harassing calls Service Abuse Control by Internal Users Enterprise-wide UC reporting & analytics Compliance & Data Leakage prevention Call recording archive
Voice Service Infrastructure:
Protocol Normalization (SIP) Transcoding & Transrating Protocol fixes and interoperability Packet level encryption security NAT and topology protection IP Firewall & SP registration QoS & CAC
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
28
Voice Policy Solution Topology
Embedded API Enables Integrated Voice Policy
Service Provider TDM LAN
TDM
IP
SIP MGCP H323 RTP
CUBE + TDM GW
Corporate Network
Call Control CUCM
API for TDM & VOIP Signaling
API for Tone Detection and Media Forking
Voice Policy Appliance
Voice Policy Server
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
29
Voice Policy Use Cases
Broad Range of Use Cases Provides Many Opportunities for ROI
ENTERPRISE WIDE CAPACITY MANAGEMENT
ENTERPRISE WIDE SECURITY MANAGMENT
Centralized Security Policy Definition TDOS (Telephony Denial of Service) Mitigation Reduce Toll Fraud Losses from external dial through Prevent network penetration via blocking modems Alert and control business disrupting bomb threats Identify and Manage harassing calls. Alert/log maintenance port access, and block unauthorized connections Service abuse/misuse/anomalies Prevent identity theft on voice lines
Centralized reporting for the enterprise Baseline and inventory voice network infrastructure Recover capacity lost to unauthorized traffic Right-size trunk infrastructure Eliminate unused PBX bypass lines Identify orphaned or unused extensions Consolidate/reduce unused fax resources Absence of call activity on trunking resources Excessive unanswered/busy calls on trunking resources Optimize staffing based on call activity reports
ENTERPRISE WIDE CONTROL OF SERVICE ABUSE
Centralized abuse prevention policy definition Unauthorized Modem usage Voice Data Leakage Protection (DLP) Reduce toll fraud losses by blocking unauthorized calls 911 notification and response Managed calls to and from restricted numbers
2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential
CUSTOMER SERVICE MONITORING
Record inbound customer calls to audit and aid staff training through the entire call session.
SLA MONITORING
Log of service outages, disruptions, and errors
Voice Usage uptime and performance reports
Presentation_ID
30
Enterprise Wide Voice Policy Definition
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
31
Real-time Alerting With Custom Thresholds
Policy Alerts
911 call Modem calls & duration Inbound busy/unanswered Excessive Long Distance Harassing caller volume Specific Country call block Firewall Terminate rule firing etc
Telecom & Data Center Alerts
Trunk D-Channel up/down Trunk frame slip Trunk bit-error/CRC fail SIP interface up/down SIP proxy offline QoS violation/Excessive Rate Unknown CODEC etc.
Infrastructure Health Alerts
ETM Card in status ETM Appliance Health Management Server status Data migration failures Power supply fail Thermal fail etc
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
32
Enterprise Wide Voice Policy Reporting
REAL TIME CALL MONITORING
Cost Allocation / Call Acct. Resource Utilization UC Diagnostics UC Network Audits UC Operations UC Security
HISTORICAL REPORTS
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
33
Enable Security, Visibility & Control with Voice Policy
Harassing / Threatening Callers
Lowers productivity & safety
Toll Fraud
Corporations lack real-time defense
Voice Service Abuse & Theft
Ensure employee use of voice network complies with business objectives
Contact Center Fraud/ID Theft Schemes
Legal risk and financial losses for corporations and customers
Capacity Monitoring
Enables better network planning and staffing requirements
Unauthorized Fax or Modem Usage
Most commonly found issue
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
34
BT Assure Cloud Security Services
See, Connect, Prevent
BT enhances service to include voice: See unknown patterns: visualize converged threats in a single command center Connect - correlates threats for voice & data enterprise-wide Prevent: dynamically control the network to mitigate threats Enterprise-wide on Cisco ISR G2 SIP+TDM trunking Use with any service provider - including BT
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
35
Presentation_ID
2009 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
36
