Page 2 COPYRIGHT This manual is proprietary to SAMSUNG Electronics Co., Ltd. and is protected by copyright. No information contained herein may be copied, translated, transcribed or duplicated for any commercial purposes or disclosed to third parties in any form without the prior written consent of SAMSUNG Electronics Co., Ltd.
Page 3: General User Information
FCC REQUIREMENTS Thie equipment, the Ubigate iBG2016, complies with Part 68 of the FCC rules and the requirements adopted by the ATCA. On the top of this equipment is a label that contains, among other information, a product identifier in the format US: A3LIS00BiBG2016.
Page 4 04DU9.1SN(PRI) DID LINE FXS-4M, FXS-2M, 02RV2.T RJ11C FXS-24 T1E1-2M, T1E1-1M 04DU9.BN RJ48C T1E1-4 04DU9.BN RJ48C E & M TIE LINE E & M-2M, E & M-1M TL11M RJ45S T1E1-2M, T1E1-1M 04DU9.BN RJ48C T1E1-4 04DU9-BN RJ48C © SAMSUNG Electronics Co., Ltd.
Page 5 For earlier products, the REN is separately shown on the label. INCIDENCE OF HARM If this equipment, the Ubigate iBG2016, causes harm to the telephone network, the telephone company will notify you in advance that temporary discontinuance of service may be required. But if advance notice isn’t practical, the telephone company will notify the customer as soon as possible.
Page 6 This equipment is capable of providing users access to interstate providers of operator services through the use of access codes. Modification of this equipment by call aggregators to block access dialing codes is a violation of the Telephone Operator consumers Act of 1990. © SAMSUNG Electronics Co., Ltd.
Page 7 American Society of Composers, Authors and Publishers(ASCAP) or other similar organizations if copyright music is transmitted through the Music on Hold feature. SAMSUNG ELECTRONICS, CO., LTD. hereby disclaims any liability arising out of failure to obtain such a license. DISA WARNING Lines that are used for the Direct Inward System Access feature must have the disconnect supervision options provided by the telephone company.
Page 8 Every wire for communication should be larger than 26 AWG. Double pole/neutral fusing. UNDERWRITERS LABORATORIES The Ubigate iBG2016 system has been tested to comply with safety standards in the United States and Canada. This system is listed with Underwriters Laboratories. The cUL Mark is separately shown on the label.
Page 9 Ubigate iBG2016 Configuration Guide/Ed.00 Warning to service personnel: ‘CAUTION: Double pole/neutral fusing’ Telephone line cord: ‘CAUTION: To reduce the risk of fire, use only No. 26 AWG or larger(e.g., 24 AWG) UL Listed or CSA Certified Telecommunication Line Cord’ Leakage currents due to ringing voltage - Earthing installation instructions: ‘1.A supplementary equipment earthing conductor is to be...
Page 10 E) Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit(e.g., use of power strips).’ VIII © SAMSUNG Electronics Co., Ltd.
Page 11: Introduction
This document provides the command usage of routing applications supported by the Ubigate iBG2016. This manual is for engineers, technicians, and others involved with the planning and operation of the Ubigate iBG2016. Document Content and Organization This manual contains the following chapters: PART I.
Page 12: Part Iii. Switching And Routing Protocols
CHAPTER 8. VRRP CHAPTER 9. MPLS CHAPTER 10. QoS CHAPTER 11. VLAN forwarding with QoS PART IV. Security CHAPTER 1. Authentication Authorization Accounting CHAPTER 2. Packet Filtering CHAPTER 3. Firewall NAT CHAPTER 4. GRE CHAPTER 5. IPSEC © SAMSUNG Electronics Co., Ltd.
Page 13 Ubigate iBG2016 Configuration Guide/Ed.00 PART V. Voice CHAPTER 1. Voice Feature CHAPTER 2. VoIP Gateway Management CHAPTER 3. SIP Gateway Management CHAPTER 4. H.323 Gateway Management CHAPTER 5. Analog Voice Port CHAPTER 6. Digital Voice Port CHAPTER 7. ISDN CHAPTER 8. Routing and Digit Manipulation CHAPTER 9.
Page 14: Console Screen Output
Ubigate iBG2016 System Description Ubigate iBG2016 Installation Manual Ubigate iBG2016 Command Reference Ubigate iBG2016 Message Reference Ubigate iBG2016 TroubleShooting Manual Ubigate iBG2016 Quick Start Guide Ubigate iBG2016 iBG-DM User Guide Ubigate ISM User Guide Ubigate iPX User Guide Contacting Technical Support...
Page 15: Obtaining Publications And Additional Information
Ubigate iBG2016 Configuration Guide/Ed.00 Obtaining Publications and Additional Information The Ubigate iBG2016 documentation set, and additional literature is available http://www.samsungen.com Revision History EDITION DATE OF ISSUE REMARKS 12. 2006. First Draft XIII © SAMSUNG Electronics Co., Ltd.
Page 17: Table Of Contents
Ubigate iBG2016 Configuration Guide TABLE OF CONTENTS GENERAL USER INFORMATION 오류! 책갈피가 정의되어 있지 않습니다. RADIO FREQUENCY INTERFERENCE ..오류! 책갈피가 정의되어 있지 않습니다. FCC REQUIREMENTS ........오류! 책갈피가 정의되어 있지 않습니다. MUSIC ON HOLD WARNING......오류! 책갈피가 정의되어 있지 않습니다. DISA WARNING ..........오류! 책갈피가 정의되어 있지 않습니다.
Page 18 Module Configuration ......................24 Configuring V.35 ......................24 Bundle Configuration ....................24 Configuring HSSI ......................24 CHAPTER 2. WAN Interfaces Module Configuration ......................24 Configuring T1 and E1 ....................24 Configuring CT3......................24 Configuring CT3 bundle ....................24 © SAMSUNG Electronics Co., Ltd.
Page 19 Ubigate iBG2016 Configuration Guide/Ed.00 CHAPTER 3. PPP, MLPPP, and HDLC Protocol Configuration ....................... 24 MLPPP Configuration ....................24 PPP and MLPPP Configuration ................... 24 CHAPTER 4. FR and MFR Layer Two Configurations .................... 24 PART III. Switching and Routing Protocols CHAPTER 1.
Page 20 Establishing a Trunk-Using CSPF................24 Establishing a Trunk-Using Explicitly Defined Path............24 Reserving Bandwidth for the Trunk ................24 Adding a Secondary LSP to the Trunk ................. 24 Adding Administrative Group Constraints to an LSP............24 XVIII © SAMSUNG Electronics Co., Ltd.
Page 21 Ubigate iBG2016 Configuration Guide/Ed.00 CHAPTER 10. QoS iBG2016 Quality of Service....................24 Features ........................24 Definitions......................... 24 Classification Types ......................24 Configuration ........................24 Create Bundle AppTest ....................24 Create Traffic Classes ....................24 VLAN Identifiers........................ 24 Configuration ........................24 Create bundle VLANtest ....................
Page 22 Multi-Field Classification using PCLs................24 Configuration Example....................24 Verifying the Configuration................... 24 Traffic Policing ........................24 Configuration Example....................24 Verifying the Configuration................... 24 Billing & Conformance Counters ..................24 Configuration Example....................24 Verifying the Configuration................... 24 © SAMSUNG Electronics Co., Ltd.
Page 23 PART IV. Security CHAPTER 1. Authentication Authorization Accounting Configuration Examples....................24 CHAPTER 2. Packet Filtering Example: Blocking Telnet Access ................24 Configure the Ubigate iBG2016................... 24 CHAPTER 3. Firewall NAT Overview ..........................24 Virtual Firewall ......................24 Access Policy Database ....................24 Application Level Gateways..................
Page 24 Introduction to Security ....................24 Securing Remote Access Using IPSec VPN..............24 Access Methods......................24 Securely Managing the Ubigate iBG2016 System Example ........24 Joining Two Private Networks Example ............... 24 Joining Two Networks using Multiple IPSec Proposals Example ......... 24 Supporting Remote User Access Example ..............
Page 25 Ubigate iBG2016 Configuration Guide/Ed.00 CHAPTER 3. SIP Gateway Management Introduction to SIP Gateway Features ................. 24 Configuring Basic SIP Gateway................... 24 Configuring Enhanced SIP Gateway Features ..............24 Configuring SIP Security Features................24 Verifying and Troubleshooting SIP Features..............24 CHAPTER 4. H.323 Gateway Management Introduction to H.323 Gateway Features ..............
Page 26 CHAPTER 12. Survivable Telephony Configuring Call Forward for Survivable Telephony ............24 Configuring System Message for Survivable Telephony ..........24 Configuring COR List for Survivable Telephony ............24 Configuring Translation for Survivable Telephony ............24 XXIV © SAMSUNG Electronics Co., Ltd.
Page 27 Ubigate iBG2016 Configuration Guide/Ed.00 LIST OF FIGURES PART I Figure 2.1 LAN Port Numbering................24 Figure 2.2 20-port Network Module Port Numbering..........24 Figure 2.3 1-Port WAN Network Module Port Numbering ......... 24 Figure 2.4 4-Port WAN Network Module Port Numbering ......... 24 Figure 2.5 Voice Carrier and Mini Module Ports Numbering ........
Page 28 Figure 5.2 Tunnel Mode Between Two Security Gateways-Single Proposals ... 24 Figure 5.3 Tunnel Mode Between Two Security Gateways-Multiple Proposals..24 PART V Figure 1.1 Ubigate iBG2016 Network Diagram............24 Figure 1.2 Example of Call Manager Intworking Mode Network Configuration ..24 XXVI...
Page 29 Ubigate iBG2016 Configuration Guide/Ed.00 Figure 1.3 Example of Stand-alone mode network configuration ......24 Figure 1.4 Toll Bypass for Voice and Fax services ............ 24 Figure 1.5 Connection to IP Phone, Analog Phone and FAX ........24 Figure 1.6 Management using CLI/GUI/NMS............24 Figure 2.1 Architecture of VoIP Network ..............
Page 30 Figure 8.3 Call Legs from the Perspective of the Terminating Router ....... 24 Figure 8.4 Matching Call Legs to Dial Peers ............. 24 Figure 8.5 Dial Peers from the Perspective of the Originating Ubigate iBG2016 ..24 Figure 8.6 Dial Peers from the Perspective of the Terminating Ubigate iBG2016 ..24 Figure 8.7 Communication Between Dial Peers Sharing the...
Page 31 Ubigate iBG2016 Configuration Guide/Ed.00 LIST OF TABLES PART V Table 1.1 High Availability Cases ................24 Table 3.1 Call Setup and Disconnect ................ 24 Table 3.2 Call via Redirect Server ................24 Table 3.3 Call via Proxy Server ................. 24 Table 3.4 Table Default PSTN cause code to SIP status code mapping ....
Page 32 Table 11.13 H323 Debug................... 24 Table 11.14 SIP Debug....................24 Table 11.15 Voice Debug................... 24 Table 11.16 Voice Call log Debug................24 Table 11.17 Attribute List ................... 24 Table 11.18 Vendor Specific Attribute List..............24 © SAMSUNG Electronics Co., Ltd.
Page 33: Part I. System Configuration
PART I. System Configuration Chapter 1. Basic Configuration Chapter 2. Port Numbering Chapter 3. Management Configuration Chapter 4. System Logging Chapter 5. RMON Configuration...
Page 35: Chapter 1. Basic Configuration
Changing Login Parameters The System Administrator login consists of two components: the account name and the password. The initial login name is always samsung, but you can change this to suit the needs of your facility after logging in. The default administrative password, samsung, should be changed as soon as possible to ensure only authorized access to the system.
Page 36: Changing Password
The system prompts you to verify and then press Return the new password. Changing Administrator Account This procedure changes the system administrator login name to a user-specific name. Note that the default is samsung. Step Command Description Router# configure terminal...
Page 37: User Account
Ubigate iBG2016 Configuration Guide/Ed.00 Setting Date and Time There are three commands in ‘configure’ mode to support date and time setting. To set the current time for the router in Universal Time Coordinated time, specify the time zone offset ahead(+) or behind(-) the time in Greenwich(England), the number of hours ahead or behind Greenwich time, and the number of minutes ahead or behind the time in Greenwich.
Page 38: Command-Line Interface Basics
Display forwarding information user_accounts display all users users display only active users version Display system versions virtual-access access virtual access display commands vlan Display VLAN information vrrp display vrrp related information whoami current user © SAMSUNG Electronics Co., Ltd.
Page 39 Ubigate iBG2016 Configuration Guide/Ed.00 Syntax Help The CLI can complete the spelling of command or parameter keywords. Begin typing the command or parameter then press TAB. At the CLI command prompt type sh: Router# sh Press TAB. The CLI shows:...
Page 40 .cfg extension) and press Return, as shown in the example below. Router# configure flash filename(path): test.cfg The system configuration can be saved in a file as shown in the following example. Router# save local © SAMSUNG Electronics Co., Ltd.
Page 41 Ubigate iBG2016 Configuration Guide/Ed.00 If you don’t give a file name after ‘local’, it is save in the default filename, ‘system.cfg’. You also can set the Router system parameters from a configuration file on a network server. This method downloads files via the TFTP protocol, then executes the commands from that file without operator intervention.
Page 43: Chapter 2. Port Numbering
Ubigate iBG2016 Configuration Guide CHAPTER 2. Port Numbering This Chapter describes the port number conventions used on the iBG2016. Ports on any Network modules or Mini modules are numbered from right to left starting with port number zero. If there is more than one row of ports on a...
Page 44: Figure 2.2 20-Port Network Module Port Numbering
Voice carrier Modules can have voice-only mini-modules plugged into them. Here is an example of a voice carrier module in slot 2 with a 4-port inimodule in sub-slot 0, and a 2-port mini-module in sub-slot 1: (X=1 or 2) © SAMSUNG Electronics Co., Ltd.
Page 45: Figure 2.5 Voice Carrier And Mini Module Ports Numbering
Ubigate iBG2016 Configuration Guide/Ed.00 VCU-A 1/0/0 1/1/1 1/1/0 1/0/1 Figure 2.5 Voice Carrier and Mini Module Ports Numbering Mini Modules Ports Numbering Mini-modules have one, two or four ports. Port numbering is from right to left starting with port number zero: (X=0, 1, 2, or 3)
Page 46: Lan Ports
(VCU-A) Port plugged into the network module slot. 1/1/3 Left most port on a four port voice mini-module in the left hand sub-slot in the voice carrier module plugged into the network module slot. © SAMSUNG Electronics Co., Ltd.
Page 47: Chapter 3. Management Configuration
Configuring Simple Network Management Protocol Ubigate iBG2016 provides two classes of SNMP Management Information Bases(MIBs) to provide you with the ability to manage Ubigate iBG2016 routers. The two MIBs are the Enterprise MIB and the Standard MIB. Enterprise MIBs The Enterprise mibs should be compiled in the following order: 1.
Page 48 Compile this MIB before any other DSX MIBs. It does not contain any traps. SUBMARINE-DSX-TE1-MIB.mib This MIB manages T1/E1 interfaces. Use this MIB to Be notified when an alarm is generated(dsxT1E1AlarmOnTrap) Be notified when an alarm is turned off(dsxT1E1AlarmOffTrap) © SAMSUNG Electronics Co., Ltd.
Page 49 Ubigate iBG2016 Configuration Guide/Ed.00 SUBMARINE-DSX-TE3-MIB.mib This MIB manages T3/E3 interfaces. Use this MIB to Be notified when an alarm is generated(dsxT3E3AlarmOnTrap) Be notified when an alarm is turned off(dsxT3E3AlarmOffTrap) SUBMARINE-ENVIRON-MIB.mib This MIB manages the chassis environment such as temperature, fan function.
Page 50 This MIB defines objects related to manage the inter module communication states. Use this MIB to : Be notified when an imc communication failure is occurred. (imcCommFailNotification) Be notified when an imc communication failure is recovered. (imcCommRecoveryNotification) © SAMSUNG Electronics Co., Ltd.
Page 51 Ubigate iBG2016 Configuration Guide/Ed.00 SUBMARINE-AAA-MIB.mib This MIB defines objects related to manage the Authenticatoin, Authorization, and Accounting method lists. This MIB does not contain any traps SUBMARINE-USERS-MIB.mib This MIB defines objects related to manage the user account and current user lists.
Page 52 Be notified when connection fails between iBG and SIP entity. (voiceSipEntityNotification) Be notified when the FXO port is connected when using Loop-Start ONLY (voiceFXOConnNotification) SUBMARINE-ISM-IPS-MIB.mib This MIB defines objects related to manage the integrated security module for premium security. © SAMSUNG Electronics Co., Ltd.
Page 53 Ubigate iBG2016 Configuration Guide/Ed.00 Standard MIBs The Standard MIBs should be compiled in the following order: 1. rfc1213.mib 2. rfc1643.mib 3. rfc1471.mib 4. rfc1473.mib 5. rfc1215.mib 6. rfc1757.mib 7. rfc1406.mib 8. rfc1315.mib 9. rfc1407.mib 10. rfc2787.mib 11. rfc2571.mib 12. rfc2575.mib 13.
Page 54 MIB objects for Interface Table extensions including StackTable and ifXTable. The IfStackTable shows the sub-layer relationships of interfaces. This MIB does not contain any traps. rfc2787.mib This MIB describes objects used for managing Virtual Router Redundancy Protocol(VRRP) routers. © SAMSUNG Electronics Co., Ltd.
Page 55 Ubigate iBG2016 Configuration Guide/Ed.00 rfc1471.mib Implementation of this group is mandatory for all PPP entities. rfc1473.mib Implementation of this group is mandatory for all PPP implementations that support operating IP over PPP. rfc1215.mib This is really only part of RFC-1215. The other part is built into the Emissary MIB compiler as of Emissary release 4.0.
Page 56 The MIB module for entities implementing the client side of the Remote Access Dialin User Service(RADIUS) authentication protocol. rfc2620.mib The MIB module for entities implementing the client side of the Remote Access Dialin User Service(RADIUS) accounting protocol. © SAMSUNG Electronics Co., Ltd.
Page 57: Snmp Applications Supported
NetCool Configuring SNMP This section describes how to configure Simple Network Management Protocol on an Ubigate iBG2016. snmp-server community This command sets the SNMP community name and access privileges. This entry is a password string that assigns access privileges to SNMP MIBs.
Page 58 - Sends SNTP group traps. . system - Sends system group traps . voice - Sends voice group traps. . vrrp - Sends VRRP group traps step1) Router/configure/snmp-server# enable target-traps 90.90.90.240 snmp-server/ step 2) Router/configure/ enable target-traps 90.90.90.240# all © SAMSUNG Electronics Co., Ltd.
Page 59: Chapter 4. System Logging
Ubigate iBG2016 Configuration Guide CHAPTER 4. System Logging Logging System Events The Ubigate iBG2016 supports event logging as well as the industry-standard syslog logging. Event Logging The following commands are useful for configuring event logging on the Ubigate iBG2016. system logging This command accesses next-level commands for configuring consolelogging and syslog event reporting.
Page 60 This command shows system logging information. Syslog Events Ubigate iBG2016 supports logging events to a syslog server. For more information on syslog, see RFC 3164. The following bable shows the different levels of syslog message impact. The first five message levels(Emergency through Warning) have the potential for affecting system performance or normal functionality.
Page 61 Ubigate iBG2016 Configuration Guide/Ed.00 For more information of syslog events, refer to the Ubigate iBG2016 Message Reference Manual. Use the following commands to configure and manage syslog. system logging syslog This command accesses next-level commands for configuring syslog on the Router system.
Page 63: Chapter 5. Rmon Configuration
Ubigate iBG2016 Configuration Guide CHAPTER 5. RMON Configuration Configuring Remote Monitoring Remote Monitoring(RMON) is an Internet standard for monitoring network activity.(See RFC 1757 and RFC 2021.) RMON specifies how various network agents collect and exchange data in an SNMP environment.
Page 64: Configuring Rmon
1000 0 1 2 type absolute startup rising owner Manager-1 To configure an RMON alarms for a variable to be monitored, enter: Router/configure/rmon# alarm 2 ifInoctets 36000 100000 90000 10 20 To configure RMON events(RMON group 9), enter: Router/configure/rmon# event 1 © SAMSUNG Electronics Co., Ltd.
Page 65 Ubigate iBG2016 Configuration Guide/Ed.00 To add an RMON events(which can be a log, a trap, or log-trap) enter: Router/configure/rmon# event 1 log To add an RMON events(which can be a log, a trap, or log-trap) with additional information of community for sending traps, event description and owner, enter: Router/configure/rmon# event 2 log community ABC description “event 2”...
Page 66: Verifying Rmon Configuration
------------------------------------------------------------ ethernet0/4 Rmon history of History Control With Index 2 ------------------------------------------------------------ Sample index: 1 CRC errors: Sample time: 0 days, 0:16: 2 Undersize pkts: Drop events: 0 Oversize pkts: Octets: 0 Fragments: Packets: 0 Jabbers: © SAMSUNG Electronics Co., Ltd.
Page 67 Ubigate iBG2016 Configuration Guide/Ed.00 Broadcast pkts: 0 Collisions: Multicast Pkts: 0 Utilization: ==================== Sample index: 3 CRC errors: Sample time: 0 days, 0:16:22 Undersize pkts: Drop events: 0 Oversize pkts: Octets: 0 Fragments: Packets: 0 Jabbers: Broadcast pkts: 0 Collisions:...
Page 68 Packets of 512to1023Octets= 0 Packets of 1024to1518Octets= 0 ----------------------------------------------------------- RMON/configure/rmon# To show RMON status, enter: Router/configure# show rmon status Rmon is ENABLED Router/configure# no rmon enable Rmon is disabled globally Router/configure# show rmon status Rmon is DISABLED © SAMSUNG Electronics Co., Ltd.
Page 69: Part Ii. Wan Interface And Protocols
PART II. WAN Interface and Protocols Chapter 1. Serial Interfaces Chapter 2. WAN interfaces Chapter 3. PPP, MLPPP and HDLC Chapter 4. FR and MFR...
Page 71: Chapter 1. Serial Interfaces
DCE or DTE mode: EIA 232C, EIA 449, EIA 530, EIA 530A, V.35, and X.21. A Multi-Protocol Transceiver in Ubigate iBG2016 constains all the necessary drivers and receivers for one port to support the appropriate interface types, levels, and termination for the different modes. Each SmartSerial DB26 leaf-...
Page 72 X.21 is a differential synchronous interface and uses V.11(EIA-422) electrical characteristics. It is typically limited to a maximum throughput of 10 Mbps. For the interface, a single clock line is used for receiving and transmitting data and DB-15 connector is used. © SAMSUNG Electronics Co., Ltd.
Page 73: Hssi Interface
Ubigate iBG2016 Configuration Guide/Ed.00 V.35 V.35 is a combination of single-ended and differential synchronous interface. It uses V.35 electrical characteristics for clock and data(differential) and V.28(EIA-232) electrical characteristics for control signals(single-ended). It is typically limited to a maximum throughput of 10Mbps. For the interface, separate clock lines are used for receiving and transmitting data and MRAC- 34 connector is used.
Page 74 For consistency, all signal names and functional definitions use DTE terminology. Thus, Receive Data is data received by the module from the attached piece of equipment, while Transmit Data is data being sent to the attached equipment © SAMSUNG Electronics Co., Ltd.
Page 75: Module Configuration
This section describes how to configure a serial interface, V.35. The other serial interfaces such as RS-232, X.21, 449 and 530 are to be configured in the similar way. Configuring V.35 as a DCE The following figure illustrates a connection of Ubigate iBG2016 configured as a DCE. Configuring Step Step...
Page 76 Returns to the ‘Router#’ prompt. 35# end Router# show module configuration Show configured information of serial [slot/port] the [slot/plort] serial interface. Configuring Example The following figure illustrates a connection of Ubigate iBG2016 configured as a DCE. (V.35 DTE) (V.35 DCE) V.35 Router iBG2016 The following example shows the commands used to configure the connection in The figure.
Page 77: Bundle Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Bundle Configuration This section describes how to configure a bundle interface. The interface bundle specifies the physical connection to be linked, an encapsulation protocol(Layer 2) and, optionally, Layer 3 parameters. Configuring a HSSI frame relay bundle The following example creates a simple interface bundle utilizing the HSSI interface and Frame Relay(Layer 2) parameters.
Page 78 Router/configure/interface/bundle wan1# link hssi 1/0 Router/configure/interface/bundle wan1# encapsulation frelay Router/configure/interface/bundle wan1# fr Router/configure/interface/bundle wan1/fr# intf_type dte Router/configure/interface/bundle wan1/fr# pvc 101 Router/configure/interface/bundle wan1/fr/pvc 101# ip address 165.213.89.237 24 Router/configure/interface/bundle wan1/fr/pvc 101# end Router# show interface bundle wan1 © SAMSUNG Electronics Co., Ltd.
Page 79 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring a HSSI PPP Bundle The following example creates a simple interface bundle utilizing the HSSI interface with PPP(Layer 2) parameters. Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode. Router/configure# interface bundle Sets a bundle interface.
Page 80 The following example shows the commands used to configure the connection in the figure. Router# configure terminal Router/configure# interface bundle wan1 Router/configure/interface/bundle wan1# link serial 1/0 Router/configure/interface/bundle wan1# encapsulation hdlc Router/configure/interface/bundle wan1# ip address 165.213.89.237 24 Router/configure/interface/bundle wan1# end Router# show interface bundle wan1 © SAMSUNG Electronics Co., Ltd.
Page 81: Configuring Hssi
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring HSSI The primary use of HSSI is for WAN interfaces such as T3(45 Mbps), and OC-1 (52 Mbps) of the synchronous digital hierarchy. The HSSI interface can be configured as a DTE or a DCE. Each way to configure HSSI interface is shown in the following.
Page 82 CHAPTER 1. Serial Interfaces Configuring Example The following figure illustrates a connection of Ubigate iBG2016 configured as a HSSI DTE. (HSSI DCE) (HSSI DTE) HSSI Network FR Switdh iBG2016 The following example shows the commands used to configure the connection in the figure.
Page 83 Goes back to the ‘Router#’ prompt. Router# show module Show configured information of the configuration hssi [slot/port] [slot/plort] HSSI interface. Configuring Example The following figure illustrates a connection of Ubigate iBG2016 configured as a DCE. (HSSI DTE) (HSSI DCE) HSSI Router...
Page 84 Router/configure# module hssi 1/0 Router/configure/hssi (1/0)# mode dce Router/configure/hssi (1/0)# clock_source internal Router/configure/hssi (1/0)# clock_rate 45000000 Router/configure/hssi (1/0)# crc 16 Router/configure/hssi (1/0)# data_mode normal Router/configure/hssi (1/0)# name hssi1 Router/configure/hssi (1/0)# end Router# show module configuration hssi 1/0 © SAMSUNG Electronics Co., Ltd.
Page 85: Chapter 2. Wan Interfaces
Ubigate iBG2016 Configuration Guide CHAPTER 2. WAN Interfaces Ubigate iBG2016 is available with T1, Channelized T3, and Clear Channel DS3 WAN interfaces. Consult the Ubigate iBG2016 Installation Manual for details on WAN interface types, cabling, and pinouts. This document outlines the configuration of module parameters(Layer 1) and, to a lesser degree, the configuration of bundle parameters(Layer 2).
Page 86 Router/configure# module t1 0/2/0 Router/configure/module/t1 (0/2/0)# circuitId testCircuit Router/configure/module/t1 (0/2/0)# contactInfo David Router/configure/module/t1 (0/2/0)# description toSeoul Router/configure/module/t1 (0/2/0)# framing esf Router/configure/module/t1 (0/2/0)# linecode b8zs Router/configure/module/t1 (0/2/0)# clock_source line Router/configure/module/t1 (0/2/0)# end Router# show module configuration t1 0/2/0 © SAMSUNG Electronics Co., Ltd.
Page 87 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring E1 Module Before configuring E1 module, the system carrier type must be changed to E1 by using ‘system carrier-type’ command in the configuration terminal mode. After setting the system carrier type, the system must be reboot to take effect.
Page 88: Configuring Ct3
Sets a framing mode framing {c_bit | m13} - c_bit: C_BIT format (default) - m13: 226 to 450 feet Router/configure/module/t1(slot/subslot/port])# Goes back to the ‘Router#’ prompt. Router# show module configuration ct3 Shows CT3 module [slot/port] information. © SAMSUNG Electronics Co., Ltd.
Page 89 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Example The following example shows the commands used to configure the connection in the figure. Router# configure terminal Router/configure# module ct3 2/0 Router/configure/module/ct3 (2/0)# cable_length 1 Router/configure/module/ct3 (2/0)# framing c_bit Router/configure/module/ct3 (2/0)# end Router# show module configuration ct3 2/0 Configuring T1’s within CT3...
Page 90 Router/configure/module/ct3 (2/0)# t1 3 yellowalarm generate Router/configure/module/ct3 (2/0)# t1 3 circuitId CT3_T1_3 Router/configure/module/ct3 (2/0)# t1 3 contactInfo David Router/configure/module/ct3 (2/0)# t1 3 description T1_to_SEOUL Router/configure/module/ct3 (2/0)# t1 3 name THIRD_T1_LINK Router/configure/module/ct3 (2/0)# end Router# show module configuration ct3 2/0:3 © SAMSUNG Electronics Co., Ltd.
Page 91: Configuring Ct3 Bundle
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring CT3 bundle Configuration of an interface bundle is required for WAN interfaces. Multiple physical interfaces may be linked to a single interface bundle; multi- link protocols, including MLPPP and Multilink Frame Relay, make use of NxT1 interfaces to create single logical interfaces.
Page 92 MLPPP is not explicitly specified; a PPP bundle with two or more linked T1s uses the multi-link protocol by definition. Router/configure# interface bundle demo2 Router/configure/interface/bundle demo2# link ct3 2/0/6-8 Router/configure/interface/bundle demo1# encap mlppp Router/configure/interface/bundle demo2# ip addr 30.1.1.3 255.255.255.0 Router/configure/interface/bundle demo2# exit © SAMSUNG Electronics Co., Ltd.
Page 93: Figure 3.1 Overview Of Ppp
Ubigate iBG2016 Configuration Guide CHAPTER 3. PPP, MLPPP, and HDLC Ubigate iBG2016 provides Point-to-point protocol over WAN interfaces feature. The Point-to-Point Protocol(PPP) provides a standard method for transporting multi-protocol datagrams over point-to-point links. These links provide full- duplex simultaneous bi-directional operation and are assumed to deliver packets in order.
Page 94 CHAPTER 3. PPP, MLPPP, and HDLC PPP is comprised of 3 main components: Framing, LCP, NCP. A method for encapsulating multi-protocol datagrams. In Ubigate iBG2016, PPP is used on the links that use HDLC-like framing(on the WAN side over T1/T3 physical interfaces). The details of the encapsulations can be found in RFC1662 and RFC2516.
Page 95: Protocol Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Protocol Configuration Ubigate iBG2016 Routers may be configured for a variety of Layer 2 protocols. This document outlines HDLC, PPP, and Multilink PPP(MLPPP) configurations. Ubigate iBG2016 Router systems are often used at POPs(point of presents) to aggregate data for WAN transmission.
Page 96: Mlppp Configuration
CHAPTER 3. PPP, MLPPP, and HDLC MLPPP Configuration This section shows how to confiure the router at site 1 with MLPPP. Configuring Ubigate iBG2016 at Site 1 Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode.
Page 97: Ppp And Mlppp Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 PPP and MLPPP Configuration This section shows how to configure interfaces with PPP and MLPPP. Configuring MLPPP for Ubigate iBG2016 at Main Site Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode.
Page 98 Configuring Example main# configure terminal main/configure# interface bundle MLPPP main/configure/interface/bundle MLPPP# link ct3 1/0/1-4 main/configure/interface/bundle MLPPP# encapsulation ppp main/configure/interface/bundle MLPPP# mlppp seg_threshold 1400 differential_delay 50 main/configure/interface/bundle MLPPP# ip address 192.168.1.1 24 © SAMSUNG Electronics Co., Ltd.
Page 99 PPP# link ct3 1/0/5 main/configure/interface/bundle PPP# encapsulation ppp main/configure/interface/bundle PPP# ppp mtu-mru-magic mtu 100-250-1000 mru 100-250-1000 main/configure/interface/bundle PPP# ip address 192.168.2.1 24 main/configure/interface/bundle PPP# exit Configuring HDLC for Ubigate iBG2016 at Main Site Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode.
Page 100 CHAPTER 3. PPP, MLPPP, and HDLC Configuring Example main# configure terminal main/configure# interface bundle HDLC main/configure/interface/bundle HDLC# link ct3 1/0/5 main/configure/interface/bundle HDLC# encapsulation hdlc main/configure/interface/bundle HDLC# hdlc keepalive 20 main/configure/interface/bundle HDLC# ip address 192.168.2.1 main/configure/interface/bundle HDLC# exit © SAMSUNG Electronics Co., Ltd.
Page 101: Figure 4.1 Multlink Frame Relay With Three Sites
Ubigate iBG2016 Configuration Guide CHAPTER 4. FR and MFR Layer Two Configurations The following figure outlines a Multilink Frame Relay(MFR) configuration with three sites. PVC 16 connects Site 1 to Site 3, while PVC 31 connects Site 2 to Site 3.
Page 102: Figure 4.2 Multilink Frame Relay With Three Site Details
UNI. The Router serves as Frame Relay DCE and the router as the Frame Relay DTE. Note that the Frame Relay(Layer 2) interface type is independent of, and not necessarily the same as, the HSSI(Layer 1) interface type. © SAMSUNG Electronics Co., Ltd.
Page 103 Ubigate iBG2016 Configuration Guide/Ed.00 Configure the HSSI Bundle at Site 1 Router/configure# interface bundle toRouter Router/configure/interface/bundle toRouter# link hssi 1 Router/configure/interface/bundle toRouter# description “hssi link to router” Router/configure/interface/bundle toRouter# encap fr Router/configure/interface/bundle toRouter# fr Router/configure/interface/bundle toRouter/fr# intf_type dce Router/configure/interface/bundle toRouter/fr# lmi ansi...
Page 104 Router/configure/interface/bundle toRouter/fr# mfr class C 2 Router/configure/interface/bundle toRouter/fr# lmi ansi Router/configure/interface/bundle toRouter/fr/lmi# keepalive 10 Router/configure/interface/bundle toRouter/fr/lmi# exit Router/configure/interface/bundle toRouter/fr# pvc 16 Router/configure/interface/bundle toRouter/fr/pvc# shaping cir 6144000 bcmax 6144000 bcmin 3072000 Router/configure/interface/bundle toRouter/fr/pvc# exit Router/configure/interface/bundle toRouter/fr# exit 2 © SAMSUNG Electronics Co., Ltd.
Page 105 Ubigate iBG2016 Configuration Guide/Ed.00 Router B at Site 2 serves as the Frame Relay termination point, connecting the Site 2 IP network to Router A. This MFR bundle utilizes 2 T1 links for an approximate 3 Mbps bandwidth. Since it is the Frame Relay terminating point and is defined as a DTE frame relay interface, an IP address is assigned to the WAN bundle.
Page 106 ‘bundlename’ DLCI show inter bundle ‘bundlename’ DLCI show fr lmistats ‘bundlename’ show fr vcstats ‘bundlename’ DLCI show fr invarp all show fr pvcs © SAMSUNG Electronics Co., Ltd.
Page 107: Chapter 6. Bgp
PART III. Switching and Routing Protocols Chapter 1. Layer-2 Switching Chapter 2. DHCP Relay Chapter 3. Static Routing Chapter 4. Chapter 5. OSPF Chapter 6. Chapter 7. Multicast Protocols Chapter 8. VRRP Chapter 9. MPLS Chapter 10. Chapter 11. VLAN with QoS...
Page 109: Layer 2 Lan Switching And Bridging
Ubigate iBG2016 Configuration Guide CHAPTER 1. Layer-2 Switching Layer 2 LAN Switching and Bridging Local Area Network(LAN) is a data communications network connecting terminals, computers and printers within a building or other geographically limited areas. These devices could be connected through wired cables or wireless links.
Page 110: Igmp Snooping
This reduces multicast traffic through the Layer-2 device. IGMP snooping drops all but one of the host join messages per multicast group and only forwards this one join message to the multicast router. © SAMSUNG Electronics Co., Ltd.
Page 111: Protocol Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Protocol Configuration This section shows a configuration example for Multiple Spanning Tree Protocol(MSTP) with VLAN. Bridge Configurations This example gives a simple multi-bridge topology and how to configure it. Bridge a Bridge b Bridge c Bridge d Configuring MSTP The following steps show general configuration steps to configure MSTP.
Page 112 0 to 240. [instance number] priority [priority number] Router/configure/interface/[interface Return to the ‘Router#’ prompt. name]# end Router# show span mst detail Shows SMT details The following shows the commad sequences for each bridge in the above figure. © SAMSUNG Electronics Co., Ltd.
Page 113 Ubigate iBG2016 Configuration Guide/Ed.00 Bridge A configuration BRIDGE_A# configure terminal BRIDGE_A/configure# bridge 1 protocol mstp BRIDGE_A/configure# vlan database BRIDGE_A/configure/vlan/database# vlan 2 bridge 1 BRIDGE_A/configure/vlan/database# vlan 3 bridge 1 BRIDGE_A/configure/vlan/database# exit BRIDGE_A/configure# spanning-tree mst configuration BRIDGE_A/configure/spanning-tree/mst# bridge 1 instance 2 vlan 2...
Page 114 BRIDGE_B/configure/interface/ethernet(2/3)# bridge-group 1 instance 3 priority 196 BRIDGE_B/configure/interface/ethernet(2/3)# exit BRIDGE_B/configure# interface ethernet 2/4 BRIDGE_B/configure/interface/ethernet(2/4)# switchport BRIDGE_B/configure/interface/ethernet(2/4)# bridge-group 1 BRIDGE_B/configure/interface/ethernet(2/4)# exit BRIDGE_B/configure# interface ethernet 2/5 BRIDGE_B/configure/interface/ethernet(2/5)# switchport BRIDGE_B/configure/interface/ethernet(2/5)# bridge-group 1 BRIDGE_B/configure/interface/ethernet(2/5)# end BRIDGE_B# show spanning-tree mst detail © SAMSUNG Electronics Co., Ltd.
Page 115 Ubigate iBG2016 Configuration Guide/Ed.00 Bridge C configuration BRIDGE_C# configure terminal BRIDGE_C/configure# bridge 1 protocol mstp BRIDGE_C/configure# vlan database BRIDGE_C/configure/vlan/database# vlan 2 bridge 1 BRIDGE_C/configure/vlan/database# vlan 3 bridge 1 BRIDGE_C/configure/vlan/database# exit BRIDGE_C/configure# spanning-tree mst configuration BRIDGE_C/configure/spanning-tree/mst# bridge 1 instance 2 vlan 2...
Page 116 2 BRIDGE_D/configure/interface/ethernet(2/2)# exit BRIDGE_D/configure# interface ethernet 2/3 BRIDGE_D/configure/interface/ethernet(2/3)# switchport BRIDGE_D/configure/interface/ethernet(2/3)# bridge-group 1 BRIDGE_D/configure/interface/ethernet(2/3)# bridge-group 1 instance 3 BRIDGE_D/configure/interface/ethernet(2/3)# exit BRIDGE_D/configure# interface ethernet 2/4 BRIDGE_D/configure/interface/ethernet(2/4)# switchport BRIDGE_D/configure/interface/ethernet(2/4)# bridge-group 1 BRIDGE_D/configure/interface/ethernet(2/4)# end BRIDGE_D# show spanning-tree mst detail © SAMSUNG Electronics Co., Ltd.
Page 117: Figure 1.1 Configuring 802.1X Security
The router is the physical path between the two clients and the RADIUS server. The Ubigate iBG2016 relays information to the Server and then back to each client.
Page 118 Router/configure/interface/ vlan vlan1.2# ip address 100.0.0.1 24 Router/configure/interface/ vlan vlan1.2# exit Router/configure# interface ethernet 1/2 Router/configure/interface/ethernet(1/2)# ip address 192.126.12.2 24 Router/configure/interface/ethernet(1/2)# exit Router/configure# aaa radius primary-server 192.126.12.1 Router/configure# aaa radius auth_port 1812 Router/configure# aaa radius src_address 192.126.12.2 © SAMSUNG Electronics Co., Ltd.
Page 119: Figure 1.2 Link Aggregation Example
Ubigate iBG2016 Configuration Guide/Ed.00 LACP Configuration LACP is based on the 802.3ad IEEE specification. It allows bundling of several physical interfaces to form a single logical channel providing enhanced performance and redundancy. The aggregated interface is viewed as a single link to each router. Spanning tree views it as one interface.
Page 120: Figure 1.3 Gvrp Configuration
VLAN. Set GVRP globally for this bridge. Associate interfaces with this bridge and specify switching characteristics as required. eth4/0 eth2/0 eth2/0 Bridge 2 Bridge 3 Figure 1.3 GVRP Configuration © SAMSUNG Electronics Co., Ltd.
Page 121 Ubigate iBG2016 Configuration Guide/Ed.00 Bridge 2 Router/configure# Router/configure# bridge 1 protocol mstp Router/configure# vlan database Router/configure/vlan/database# vlan 5 bridge 1 name 5 Router/configure/vlan/database# exit Router/configure# interface ethernet 2/0 Router/configure/interface/ethernet (2/0)# switchport Router/configure/interface/ethernet (2/0)# bridge-group 1 Router/configure/interface/ethernet (2/0)# switchport mode trunk...
Page 122: Configuring Igmp Snooping
Specify the interface to be configured. Associate the interface with bridge-group. Enable IGMP Snooping globally. Enable IGMP Snooping on the bridge-group. Configure ports that are connected to routers as multicast router ports. Enable IGMP Proxy on the router. © SAMSUNG Electronics Co., Ltd.
Page 123: Figure 1.4 Igmp Snooping Example
Ubigate iBG2016 Configuration Guide/Ed.00 eth2/1 eth0/1 Multicast eth1/1 Router Multicast Host A Figure 1.4 IGMP Snooping Example As a result of this configuration, the queries received on the router by Ethernet 1/1 will not be forwarded to Ethernet 0/1 and Ethernet 2/1. The router itself will reply back with Membership report message.
Page 124 Version 3 feature). show ip igmp snooping fast-leave shows fast-leave processing information. show ip igmp snooping group-membership-interval shows the value of the group-membership interval. © SAMSUNG Electronics Co., Ltd.
Page 125 Ubigate iBG2016 Configuration Guide/Ed.00 show ip igmp snooping last-member-query-interval shows the last-member- query-interval processing for IGMP hosts. show ip igmp snooping max-response-time shows the maximum response time setting. show ip igmp snooping mrouter shows the multicast router interfaces. show ip igmp snooping other-querier-interval shows the querier interval setting.
Page 127: Figure 2.1 Dhcp Relay Overview
CHAPTER 2. DHCP Relay Ubigate iBG2016 Modular Router’s DHCP relay feature eliminates the need for a DHCP server on every LAN, because DHCP requests can be relayed to a single remote DHCP server. The relay agent forwards traffic between clients and servers when they are located on different subnets.
Page 128: Figure 2.2 Bootp Requests
DHCP OFFER, DHCP ACK, DHCP NAK, etc. The relay agent looks up the MAC address and either sends the packet to the client or broadcasts it on the LAN. Unicast Broadcast Unicast BOOTEQUEST BOOTEQUEST DHCP Relay Agent DHCP Server DHCP Client Figure 2.3 BOOTP Replies © SAMSUNG Electronics Co., Ltd.
Page 129: Figure 2.4 Typical Scenario For Dhcp Relay With Nat
Ubigate iBG2016 Configuration Guide/Ed.00 Using DHCP Relay with NAT When NAT is enabled, the DHCP server may discard packets because the giaddr does not match the source of the packet. Additionally, it may not know how to route the packet back to the client. See Figure 11.4. The solution is that the gateway address(giaddr) field needs to have IP address 192.168.20.1...
Page 130: Figure 2.5 Show Dhcp_Relay Command
The following screen captures show the displayed results of issuing show commands relevant to DHCP relay, with and without gateway addresses configured. Router# show dhcp_relay DHCP RELAY CONFIGURATION Ethernet 0/0: Enabled; DHCP Server 20.1.1.1 Figure 2.5 show dhcp_relay Command © SAMSUNG Electronics Co., Ltd.
Page 131: Chapter 3. Static Routing
Compared to Static Routing, Dynamic Routing, on the other hand, is typically used when static routing entries should be unwieldy in a large network, where the administrator would have to operate complex manual tasks. This chapter describes how to configure static routing in the Ubigate iBG2016 Router. Configuring Static Routes Static routes are specified by adding and deleting route entries to and from the route table.
Page 132 Router# configure terminal Router/configure# ip route 165.213.100.0/24 165.213.89.238 To delete the entry, simply add ‘no’ just as follows. Router# configure terminal Router/configure# no ip route 165.213.100.0 255.255.255.0 165.213.89.238 Router# configure terminal Router/configure# no ip route 165.213.100.0/24 165.213.89.238 © SAMSUNG Electronics Co., Ltd.
Page 133: Chapter 4. Rip
Ubigate iBG2016 Configuration Guide CHAPTER 4. Routing Information Protocol(RIP) is a classical distance-vector routing protocol. It is simple to implement and performs good for small networks. Distance Vector Routing requires that each node maintain the distance from itself to each possible destination. The distances are computed using the information in neighbor’s distance vectors.
Page 134 The routing-update timer clocks the interval between periodic routing updates. Generally, it is set to 30 seconds, with a small random amount of time added whenever the timer is reset. © SAMSUNG Electronics Co., Ltd.
Page 135: Configuring Rip
Configuring RIP This section describes the steps to configure RIP and show a simple example. R1 and R2 are two Ubigate iBG2016 routers connecting to a common network 10.10.11.0/24. They are also connected to network 10.10.10.0/24 and 10.10.12.0/24, respectively.
Page 136 R1# show ip protocols rip The following example shows the commands used to configure RIP for R2. R1# configure terminal R1/configure# router rip R2/configure/router rip# network 10.10.11.0/24 R2/configure/router rip# network 10.10.12.0/24 R2/configure/router rip# end R2# show ip protocols rip © SAMSUNG Electronics Co., Ltd.
Page 137: Configuring Ripv2 Authentication
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring RIPv2 authentication The Ubigate iBG2016 provides RIPv2 authentication and the choice of a single key or multiple keys for the authentication. This section describes a simple example to configure RIPv2 authentication with a single key.
Page 138 As in the examples, RIP should be run on the network to be authenticated at first. The redistribute command is enabled to see to it that the authentication be performed correctly. Then, the interface to be authenticated, the authentication mode and string are specified. © SAMSUNG Electronics Co., Ltd.
Page 139: Configuring Rip On A Bundle Interface
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring RIP on a bundle interface Configuring Step Step Command Purpose Router# configure terminal Enters the terminal configuration mode. Router/configure# router rip Enters the RIP setup mode. Router/configure/router rip# network Designates a bundle [IP address]/[number of bit masks] or interface to run RIP on.
Page 141 Ubigate iBG2016 Configuration Guide CHAPTER 5. OSPF The Open Shortest Path First(OSPF) protocol is an interior gateway protocol(IGP) that routes packets within a single autonomous system(AS). OSPF uses link-state information to make routing decisions, making route calculations using the shortest path first(SPF) algorithm(also referred to as the Dijkstra algorithm).
Page 142: Ospf Configuration
Configuring Step Step Command Purpose Router# configure terminal Enters the terminal configuration mode. Router/configure# hostname [Host Name] Sets the host name. Configuring Example The following figure illustrates a simple network configuration. 30.30.30.0/24 10.10.10.0./24 iBG2016 T1PPP 20.20.200/24 © SAMSUNG Electronics Co., Ltd.
Page 143 Ubigate iBG2016 Configuration Guide/Ed.00 The following example shows the commands used to configure the host name in the figure. Router# configure terminal Router/configure# hostname iBG2016 iBG2016/configure# Configuring Local Network Interface Configuring Step Step Command Purpose iBG2016/configure# interface ethernet Enters the ethernet interface [slot/port] configuration mode.
Page 144 The following example shows the commands used to configure the bundle interface. iBG2016/configure# interface bundle WAN iBG2016/configure/interface/bundle WAN# link t1 1/1 iBG2016/configure/interface/bundle WAN# encapsulation ppp iBG2016/configure/interface/bundle WAN# ip address 20.20.20.1 24 iBG2016/configure/interface/bundle WAN# exit iBG2016/configure# © SAMSUNG Electronics Co., Ltd.
Page 145: Configuring Ospf
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Loopback Interface Configuring Step Step Command Purpose iBG2016/configure# interface Enters the loopback interface loopback lo configuration mode. iBG2016/configure/interface/loopback Sets the looback interface ip lo# ip address [IP address] { [bit address. mask] | [number of bits for mask] }...
Page 146 CHAPTER 5. OSPF Configuring Example The following example shows the commands used to configure the bundle interface. iBG2016/configure# router-id 1.1.1.1 iBG2016/configure# router ospf 1 iBG2016/configure/router/ospf# network 10.10.10.1/24 area 760 iBG2016/configure/router/ospf# exit iBG2016/configure# © SAMSUNG Electronics Co., Ltd.
Page 147 Ubigate iBG2016 Configuration Guide CHAPTER 6. The Border Gateway Protocol(BGP) is an exterior gateway protocol(EGP) that is used to exchange routing information among routers in different autonomous systems(ASs). BGP routing information includes the complete route to each destination. BGP uses the routing information to maintain a database of network reachability information, which it exchanges with other BGP systems.
Page 148 Since the AS_PATH attribute includes a list of Autonomous Systems used to reach the destination, it is possible to implement primitive policy decisions such as ‘avoid all routes through AS x’. © SAMSUNG Electronics Co., Ltd.
Page 149: Protocol Features
Protocol Features The following BGP features such as aggregation, route reflection, AS confederation, and etc will be supported on the Ubigate iBG2016 system. Aggregation is the process of combining the characteristics of several different routes in such a way that a single route can be advertised. Aggregation reduces the amount of information a BGP speaker stores and exchanges with other speakers.
Page 150 AS path is more efficient than listing each route individually. BGP community list is a user defined BGP communites attribute list. BGP community list can be used for matching or manipulating BGP communities attribute in updates. Valid list numbers are 1-199. © SAMSUNG Electronics Co., Ltd.
Page 151 Ubigate iBG2016 Configuration Guide/Ed.00 Prefix lists are yet another way of implementing BGP policy. A Prefix List enables filtering of route advertisements based on IP prefixes. This is a group of BGP neighbors that share update policies. Instead of defining the same policies for several individual peers, a peer group is defined and policies are assigned to the group.
Page 152: Minimum Bgp Configuration
[IP address] remote-as ip address and antonomous [Autonomous Number] number. Configuring Example In the figure, R1 and R2 are two Ubigate iBG2016 Routers belonging to the same AS(autonomous system) with the ID of 200. AS : 200 10.10.10.1 Network 10.10.10.2...
Page 153 R2# configure terminal R2/configure# router bgp 200 R2/configure/bgp 200# neighbor 10.10.10.1 remote-as 200 Configuring BGP in the different AS Configuring Example The following figure shows two Ubigate iBG2016 Routers in the different AS. AS : 200 AS : 300 10.10.10.1 10.10.10.2 The following example shows the commands used to configure the BGP for R1 in the figure.
Page 154: Bgp Application Using Route-Map
Applies a route-map to routes for neighbor [IP address] route-map incoming advertisements. [prefix name] in Configuring Example In the figure, R1 and R2 are the Ubigate iBG2016 Routers in the different antonomous systems. AS : 200 AS : 300 1.1.1.0/24 192.168.10.1...
Page 155 Ubigate iBG2016 Configuration Guide/Ed.00 R2 is connected to two different routers and their subnets are The following example shows the commands used to configure the BGP using Route-Map for R1. R1# configure terminal R1/configure# ip prefix-list inpf seq 5 deny 1.1.1.0/24 ge...
Page 157: Chapter 7. Multicast Protocols
There are two modes of PIM protocol - Dense mode(DM) and Sparse mode (SM). Ubigate iBG2016 supports SM but not DM. PIM-DM floods multicast traffic throughout the network initially and then generates prune messages as required.
Page 158 The MRIB is a multicast topology table derived from the unicast routing table. In PIM-SM, the MRIB is used to decide where to send Join/Prune messages. It also provides routing metrics for destination addresses. These metrics are used when sending and processing Assert messages. © SAMSUNG Electronics Co., Ltd.
Page 159 Ubigate iBG2016 Configuration Guide/Ed.00 Reverse Path Forwarding Reverse Path Forwarding(RPF) is a concept of an optimized form of flooding, where the router accepts a packet from SourceA through Interface IF1 only if IF1 is the interface the router would use in order to reach SourceA.
Page 160 G) state. RP displays the IP address for the RP router. The leading dots ..Stand for VIF index Router_E# show ip pim sparse-mode mroute IP Multicast Routing Table (*,*,RP) Entries: 0 (*,G) Entries: 1 (S,G) Entries: 0 © SAMSUNG Electronics Co., Ltd.
Page 161 Ubigate iBG2016 Configuration Guide/Ed.00 (S,G,rpt) Entries: 0 (*, 224.0.1.3) RP: 10.10.1.5 RPF nbr: 172.16.1.2 RPF idx: ethernet 2/1 Upstream State: JOINED Local ........ Joined j....... Asserted ........ Outgoing o....... At Router_E, Ethernet 2/1 is the incoming interface of the(*, G) entry, and Ethernet 1/1 is on the outgoing interface list of the(*, G) entry.
Page 162 Router# show ip mroute summary IP Multicast Routing TableFlags: I - Immediate Stat, T - Timed Stat, F - Forwarder installedTimers: Uptime/Stat ExpiryInterface State: Interface (TTL) (10.10.1.52, 224.0.1.3), 00:01:32/00:03:20, PIM-SM, Flags: TF © SAMSUNG Electronics Co., Ltd.
Page 163 Ubigate iBG2016 Configuration Guide/Ed.00 PIM Group-to-RP Mappings Use the show ip pim sparse-mode rp mapping command to display the group- to-RP mapping details. The output displays information about RP candidates. There are two RP candidates for the group range 224.0.0.0/4. RP Candidate 10.10.1.5 has a default priority of 192, whereas, RP Candidate...
Page 164 To set the flag at the DR to switch to the SPT on receiving the first packet (default on), enter: Router/configure#ip pim spt-threshold The following example configures the Register Suppression Timeout to be 70 seconds. Router/configure#ip pim register-suppression 70 © SAMSUNG Electronics Co., Ltd.
Page 165 Ubigate iBG2016 Configuration Guide/Ed.00 To set the RP static IP address to 10.10.1.1, enter: Router/configure#ip pim rp-address 10.10.1.1 To set the flag for the RP to switch to the SPT for(S, G) upon receipt of the first Register message(default: on). To turn on this feature, enter:...
Page 166 − ip pim exclude-genid − ip pim dr-priority − ip pim neighbor-filter − ip pim sparse-mode − Config mode commands ip pim accept-register list − ip pim register-source − ip pim register-rate-limit − © SAMSUNG Electronics Co., Ltd.
Page 167 Ubigate iBG2016 Configuration Guide/Ed.00 ip pim ignore-rp-set-priority − ip pim rp-register-kat − ip pim register-suppression − ip pim cisco-register-checksum group-list − clear ip mroute clear ip pim sparse-mode bsr rp-set all debug pim all debug pim sparse-mode all debug pim sparse-mode events...
Page 168: Distance Vector Multicast Routing Protocol (Dvmrp)
Following is a brief description of terms and concepts used to describe the DVMRP protocol. DRIB Ubigate iBG2016 DVMRP is a separate daemon serviced by the NSM daemon. It maintains the DVMRP Routing Information Base(DRIB). The DRIB contains the table of routes for multicast sources learned through DVMRP route exchanges.
Page 169: Figure 7.1 Dvmrp Network
Ubigate iBG2016 Configuration Guide/Ed.00 Neighbor Table The Neighbor table is a list of detected DVMRP neighbors on an interface. Neighbors announce themselves using the Probe message. Route Report Arrays of Lists Because route reporting is done by grouping together all routes that belong to the same mask, a Route Report Array of Lists(AOL) is used to expedite general route reporting.
Page 170 Verifying Configuration Use the following commands to verify interface, neighbor, route, prune, and DVMRP global state information. Note: For details on the commands used in the following example, refer to the Ubigate iBG2016 Command Reference. © SAMSUNG Electronics Co., Ltd.
Page 171: Interface Information
Ubigate iBG2016 Configuration Guide/Ed.00 Interface Information The show ip dvmrp interface command displays the interface information for Router_C. For example: Router_C# show ip dvmrp interface Neighbor Information The show ip dvmrp neighbor command displays the neighbor information for Router_C. For example:...
Page 172: Internet Group Management Protocol (Igmp)
Reports can be sent ‘unsolicited’ when the hosts come up. IGMP Leaves: IGMP Leaves are sent by the host when it relinquishes membership of a group. IGMP Version 3 is not supported in this release. © SAMSUNG Electronics Co., Ltd.
Page 173: Igmp Commands
Ubigate iBG2016 Configuration Guide/Ed.00 IGMP Commands The IGMP commands supported in Ubigate iBG2016 OS are: ip igmp access-group ip igmp immediate-leave ip igmp last-member-query-count ip igmp last-member-query-interval ip igmp querier-timeout ip igmp query-interval ip igmp query-max-response-time ip igmp version debug igmp all...
Page 174 The following example configures Ethernet(0/1) with the Query time-out to be 300 seconds. Router/configure/interface/ethernet (0/1)# ip igmp querier- timeout 300 Example 4 The following example configures Ethernet(0/1) with the query- max¬response-time to be 10 seconds. Router/configure/interface/ethernet (0/1)# ip igmp query- max-response-time 10 © SAMSUNG Electronics Co., Ltd.
Page 175 Ubigate iBG2016 Configuration Guide/Ed.00 Example 5 The following example configures Ethernet(0/1) with the last-member- querycount to be 3. Router/configure/interface/ethernet (0/1)# ip igmp last- memberquery-count 3 Example 6 The following example configures Ethernet(0/1) with the last-member- query¬interval to be 2000 seconds.
Page 177: Chapter 8. Vrrp
Ubigate iBG2016 Configuration Guide CHAPTER 8. VRRP In statically routed networks, when a router fails, all the network devices connected to this router are unable to have traffic routed. Typically this means these devices cannot reach the Internet or other networks.
Page 178: Configuring Vrrp
2 automatically takes over routing traffic between the subnets labeled Host A, B, and C, and the Gateway Router providing Internet connectivity. To configure VRRP in this environment, you need to configure Ubigate iBG2016 1 as the Master virtual router, and Ubigate iBG2016 2 as the backup virtual router. Host A...
Page 179 2 Router/configure/interface/ethernet(0/1)/vrrp 10# enable Verifying and Troubleshooting Ubigate iBG2016 provides commands to verify VRRP status and configuration. To display detailed status of all VRRP groups on the router. Router# show vrrp detailed To display a brief status of all VRRP groups on the router.
Page 181: Chapter 9. Mpls
Ubigate iBG2016 Configuration Guide CHAPTER 9. MPLS MPLS Overview Multiple Protocol Label Switching(MPLS) is an IETF standards-based approach built on the efforts of the various proprietary multilayer switching solutions. In MPLS, data transmission occurs on label-switched paths(LSPs). Forwarding Equivalent Class(FEC) determines traffic mapping into MPLS LSPs at the ingress point of the MPLS network.
Page 182: Figure 9.1 L2Vpn For Mpls
DA SA Etype Payload DA SA Etype Payload 192.168.1.54/24 192.168.1.108/24 They see this DA SA Etype Payload 192.168.1.54/24 192.168.1.108/24 Figure 9.1 L2VPN for MPLS L2VPNs allow the IP addresses of the end-to-end devices to remain private. © SAMSUNG Electronics Co., Ltd.
Page 183: Mpls Forwarding
Ubigate iBG2016 Configuration Guide/Ed.00 MPLS Forwarding MPLS forwarding consists of 3 main operations: Mapping of data packets into LSPs based on destination FEC bypushing MPLS labels. For Martini case, a VC label followed by a tunnel label will be pushed.
Page 184: Martini L2 Vpn Overview
LSPs in opposite directions. The LSPs can be established using either LDP or RSVP signaling protocol. The ingress and egress nodes of the tunnel use extension to the LDP to exchange VC labels and to create a virtual circuit. © SAMSUNG Electronics Co., Ltd.
Page 185 The egress LER infers from the VC label how to process the frame and then forwards it to the appropriate outgoing port. The current Ubigate iBG2016 system supports the following encapsulation type of PW interface: Ethernet, VLAN, PPP © SAMSUNG Electronics Co., Ltd.
Page 186 Router/configure/router/ospf# redistribute-connected Router/configure/router/ospf# exit Configuring PE1 (LDP) Router/configure# router ldp Router/configure/router/ldp# transport-address 1.1.1.1 Router/configure/router/ldp# target-peer 3.3.3.3 Router/configure/router/ldp# exit Configuring PE1 (Enable Bridge) Router/configure# bridge 1 protocol mstp Router/configure# vlan database Router/configure/vlan/database# vlan 7 bridge 1 © SAMSUNG Electronics Co., Ltd.
Page 187 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring the L2 Circuit (PE1) Router/configure# mpls l2-circuit MPLS 100 3.3.3.3 Binding the L2 Circuit on the PW interface (PE1) Router/configure# interface ethernet 3/2 Router/configure/interface/ethernet (3/2)# switchport Router/configure/interface/ethernet (3/2)# bridge-group 1 Router/configure/interface/ethernet (3/2)# switchport mode trunk...
Page 188 Router/configure# interface ethernet 0/2 Router/configure/interface/ethernet (0/2)# ip address 10.10.1.2 24 Router/configure/interface/ethernet (0/2)# label-switching Router/configure/interface/ethernet (0/2)# enable-ldp Router/configure/interface/ethernet (0/2)# exit Configuring PE2 (OSPF) Router/configure# router ospf 1 Router/configure/router/ospf# network 10.10.1.0 0.0.0.255 area 0 Router/configure/router/ospf# redistribute-connected Router/configure/router/ospf# exit © SAMSUNG Electronics Co., Ltd.
Page 189 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring PE2 (LDP) Router/configure# router ldp Router/configure/router/ldp# transport-address 3.3.3.3 Router/configure/router/ldp# target-peer 1.1.1.1 Router/configure/router/ldp# exit Configuring PE2 (Enable Bridge) Router/configure# bridge 1 protocol mstp Router/configure# vlan database Router/configure/vlan/database# vlan 7 bridge 1 Configuring PE1(OSPF) 9.1.7.14 Configuring the L2 Circuit(PE2) Router/configure# mpls l2-circuit MPLS 100 1.1.1.1...
Page 190 Router /configure/interface/ethernet (3/2)# switchport trunk allowed vlan add 7,10 Router /configure/interface/ethernet (3/2)# mpls-l2-circuit MPLS Router /configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# encapsulation vlan Router /configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# add-vlan vlan-id 10 Router /configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# exit Router /configure/interface/ethernet (3/2)#exit © SAMSUNG Electronics Co., Ltd.
Page 191: Mpls Configuration Example
Class(FEC) corresponding to that LSP. LDP assigns labels to every destination address and destination prefix provided by Ubigate iBG2016. The LDP interface to the MPLS forwarder adds labels to and deletes labels from the forwarding tables. Running LDP on a system, requires the following tasks: Enabling label-switching on the interface on NSM.
Page 192 Router/configure# router ldp Router/configure/router/ldp# transport-address 192.168.0.1 Router/configure/router/ldp# exit Router/configure# interface ethernet(1/1) Router/configure/interface/ethernet(1/1)# enable-ldp Router/configure/interface/ethernet(1/1)# exit R1 (OSPF) Router/configure# router ospf 100 Router/configure/router/ospf# network 10.10.10.0 0.0.0.255 area 0 Router/configure/router/ospf# network 192.168.0.1 0.0.0.0 area 0 Router/configure/router/ospf# exit © SAMSUNG Electronics Co., Ltd.
Page 193 Ubigate iBG2016 Configuration Guide/Ed.00 R2 (NSM) Router/configure# interface loopback lo1 configuring new loopback interface lo1 =======> Router/configure/interface/loopback lo1# ip address 192.168.0.2 32 Router/configure/interface/loopback lo1# exit Router/configure# interface ethernet 1/2 Router/configure/interface/ethernet (1/2)# ip address 10.10.10.2 24 Router/configure/interface ethernet (1/2)# exit Router/configure# interface ethernet 2/2 Router/configure/interface/ethernet (2/2)# ip address 10.10.11.2 24...
Page 194 Router/configure/router/ldp# transport-address 192.168.0.3 Router/configure/router/ldp# exit Router/configure# interface ethernet (2/3) Router/configure/interface/ethernet (2/3)# enable-ldp Router/configure/interface/ethernet (2/3)# exit R3 (OSPF) Router/configure# router ospf 100 Router/configure/router/ospf# network 10.10.11.0 0.0.0.255 area 0 Router/configure/router/ospf# network 192.168.0.3 0.0.0.0 area 0 Router/configure/router/ospf# exit © SAMSUNG Electronics Co., Ltd.
Page 195: Enabling Label-Switching-Minimal Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Enabling label-switching-minimal configuration To establish a trunk on a system: Enable label-switching and RSVP-TE on all participating interfaces. Configure a trunk on the ingress router to use the best available IGP path. In this example, the Label Switched Path(LSP) is configured using minimal configuration and is setup using the best IP nexthop available.
Page 196 Router# configure terminal Router/configure# router-id 192.168.0.63 Router/configure# router rsvp Router/configure/router/rsvp# exit Router/configure#interface Ethernet 0/1 Router/configure/interface/ethernet (0/1)#enable-rsvp Router/configure/interface/ethernet (0/1)#exit R1-OSPF Router/configure# router ospf 100 Router/configure/router/ospf# network 10.10.23.0 0.0.0.255 area 0 Router/configure/router/ospf# network 192.168.0.63 0.0.0.0 area 0 Router/configure/router/ospf# exit © SAMSUNG Electronics Co., Ltd.
Page 197: Establishing A Trunk-Cspf Disabled
Ubigate iBG2016 Configuration Guide/Ed.00 Establishing a Trunk-CSPF disabled In the Ubigate iBG2016 implementation, Constrained Shortest Path First(CSPF) is enabled by default.Typically, CSPF is disabled when all the participating nodes do not support the required traffic engineering extensions and configure LSPs manually to use an explicit path. In this case, LSP is established only along the path specified by the operator.
Page 198: Establishing A Trunk-Using Cspf
Explicit Route Object(ERO). Each router along the path sends a Path message only to the nexthop specified in the ERO. In the Ubigate iBG2016 implementation, CSPF is enabled by default and if no-cspf is not specified, the trunk is CSPF enabled automatically.
Page 199: Establishing A Trunk-Using Explicitly Defined Path
Ubigate iBG2016 Configuration Guide/Ed.00 Establishing a Trunk-Using Explicitly Defined Path The Explicit Route hops can be configured explicitly in the trunk configuration. In this case, the RSVP daemon uses the configured hops as ERO. It sets up the LSP using specified hops only. For a detailed description of the path parameters refer to the RSVP-TE Command Reference.
Page 200: Reserving Bandwidth For The Trunk
Router/configure# interface ethernet 0/1 Router/configure/interface/ethernet (0/1)# ip address 10.10.23.63 255.255.255.0 Router/configure/interface/ethernet (0/1)# label-switching Control enters func enableMplsCp - mplscli.c - 1529 Router/configure/interface/ethernet (0/1)# enable-rsvp Router/configure/interface/ethernet (0/1)# bandwidth 100m Router/configure/interface/ethernet (0/1)# reservable- bandwidth 70m Router/configure/interface/ethernet (0/1)# © SAMSUNG Electronics Co., Ltd.
Page 201: Adding A Secondary Lsp To The Trunk
Ubigate iBG2016 Configuration Guide/Ed.00 R1-RSVP-TE Router#configure terminal Router/configure# rsvp-path mypath Router/configure/rsvp-path# hop-address 10.10.23.60 Router/configure/rsvp-path# hop-address 10.10.21.90 Router/configure/rsvp-path# exit Router/configure# rsvp-trunk T1 Router/configure/rsvp-trunk# primary no-cspf Router/configure/rsvp-trunk# primary path mypath Router/configure/rsvp-trunk# primary bandwidth 10m Router/configure/rsvp-trunk# to 192.168.2.90 Router/configure/rsvp-trunk# Adding a Secondary LSP to the Trunk...
Page 202: Adding Administrative Group Constraints To An Lsp
LSP. 192.168.0.60 eth 2/1 eth 1/1 192.168.0.63 192.168.0.90 10.10.23.0/24 10.10.21.0/24 eth 0/0 eth 0/1 eth 2/1 eth 1/1 Figure 9.10 Adding Administrative Group Constraints © SAMSUNG Electronics Co., Ltd.
Page 203 Ubigate iBG2016 Configuration Guide/Ed.00 R1-NSM Router/configure# mpls admin-group A 0 Router/configure# mpls admin-group B 1 Router/configure# mpls admin-group C 2 Router/configure# mpls admin-group D 3 Router/configure# mpls admin-group E 4 Router/configure# interface ethernet 0/1 Configuring existing Ethernet interface Router/configure/interface/ethernet (0/1)# admin-group A...
Page 204 Figure 9.11 Configuring Globle Parameters R1-RSVP-TE Router# configure terminal Router/configure# router rsvp Router/configure/router/rsvp# hello-interval 10 Router/configure/router/rsvp# hello-timeout 35 Router/configure/router/rsvp# neighbor 10.10.23.60 Router/configure/router/rsvp#exit R2-RSVP-TE Router# configure terminal Router/configure# router rsvp Router/configure/router/rsvp# hello-interval 10 Router/configure/router/rsvp# hello-timeout 35 Router/configure/router/rsvp# neighbor 10.10.23.63 Router/configure/router/rsvp#exit © SAMSUNG Electronics Co., Ltd.
Page 205: Ibg2016 Quality Of Service
Ubigate iBG2016 Configuration Guide CHAPTER 10. iBG2016 Quality of Service The iBG2016 supports software-based QoS in the operating system. It also supports hardware-based QoS which is enforced in the chipset. Each type of QoS support has its own configuration capability in the CLI.
Page 206: Definitions
CR Kbps, and momentary peaks in the flow are permitted. The goal is that each class with sufficient demand will be able to receive roughly its allocated bandwidth over some interval of time. © SAMSUNG Electronics Co., Ltd.
Page 207: Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Peak Rate Every traffic class can be configured with a peak rate parameter, which is the bandwidth that can be offered to that class if unused bandwidth is available from other classes. This provides for very efficient bandwidth utilization.
Page 208: Create Bundle Apptest
Router/configure/interface/bundle AppTest/qos/policy-class SrcOne# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class SrcTwo Router/configure/interface/bundle AppTest/qos/policy-class SrcTwo# cbq cr 1024 pr 1536 Router/configure/interface/bundle AppTest/qos/policy-class SrcTwo# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class AppHTML Router/configure/interface/bundle AppTest/qos/policy-class AppHTML# cbq cr 512 pr 1024 Router/configure/interface/bundle AppTest/qos/policy-class © SAMSUNG Electronics Co., Ltd.
Page 209 Ubigate iBG2016 Configuration Guide/Ed.00 AppHTML# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class AppSMTP Router/configure/interface/bundle AppTest/qos/policy-class AppSMTP# cbq cr 384 pr 1024 Router/configure/interface/bundle AppTest/qos/policy-class AppSMTP# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class AppDef Router/configure/interface/bundle AppTest/qos/policy-class AppDef# cbq cr 128 pr 1024 Router/configure/interface/bundle AppTest/qos/policy-class AppDef# exit policy-class...
Page 210: Vlan Identifiers
VLAN ID = 25-29 VLAN ID = default CR = 3072 Kbps CR = 2048 Kbps CR = 1024 Kbps BR = 6144 Kbps BR = 6144 Kbps BR = 2048 Kbps Figure 10.2 Assigning VLAN Identifiers © SAMSUNG Electronics Co., Ltd.
Page 211: Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Configuration The following is the configuration for the topology shown in Figure 19.2. Create bundle VLANtest Router# conf terminal Router/configure# interface bundle VLANtest Router/configure/interface/bundle VLANtest# link t3 1/23 Router/configure/interface/bundle VLANtest# encap ppp Router/configure/interface/bundle VLANtest# ip addr 200.1.1.1255.255.255.252...
Page 212: Historical Statistics
Upload interval set to 1 hours Upload-file ID set to Router.stats Router/configure/qos/historical-stats# show qos historical- stats configuration Historical Statistics Configuration ------------------------------------------------- Sample Interval : 10minutes Uploading : ENABLED Figure 10.3 Screen Display for show qos bulkstats_config Command © SAMSUNG Electronics Co., Ltd.
Page 213: Traffic Policing Versus Traffic Shaping
Ubigate iBG2016 Configuration Guide/Ed.00 Traffic Policing versus Traffic Shaping Policing controls the traffic by dropping packets or marking down their priority when the configured rate is exceeded. Shaping controls the traffic by delaying packets using a queuing mechanism when they arrive faster than the configured rate.
Page 214: Configuring Traffic Policing
‘police’ command at the class level as shown below. Policing for non-leaf classes(which define more aggregate flows) is currently not be supported. Multi-level policing will be supported in a later release. © SAMSUNG Electronics Co., Ltd.
Page 215: Verifying Policing Status And Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Verifying Policing Status and Configuration The two CLI display commands below can be used to check the policing configuration and status for a class and for an interface. show qos bundle bundle_name shows the policing status on the interface and the bandwidth each class is getting along with its configured policing rate.
Page 216 Multi-level policing is not supported. Policing is done only for leaf classes. Any policing configuration on non-leaf classes is ignored. Policing and CBQ shaping are independent and mutually exclusive features.You must configure CBQ parameters if you to enable the CBQ shaping feature. © SAMSUNG Electronics Co., Ltd.
Page 217: Multi-Field Classification
Ubigate iBG2016 Configuration Guide/Ed.00 Multi-Field Classification The Multi-Field(MF) classifier is an important component of QoS. Its purpose is to help define flows for which appropriate service parameters can be configured. Flow classification is the first step in the QoS process.
Page 218: Packet Marking
Classify based Dscp = default Dscp = 0 on Traffic Class Class ipv6-hi Class ipv6-lo TC = default TC = 0 Class mpls-hi Class mpls-lo EXP = default EXP = 0 Figure 10.4 MF Classification © SAMSUNG Electronics Co., Ltd.
Page 219 Ubigate iBG2016 Configuration Guide/Ed.00 The user configures MF classification for a specific interface and for a specific traffic direction. He constructs the class hierarchy by specifying the parent- class for each new class he wants to create. In order to create a new class, the user must specify the class-name of the new class, the class name of the parent-class and a match rule.
Page 220 ‘mpls’ is added, the ‘search_type’ in the parent class ‘root-out’ is set to ‘packet-class’. The search function and search structure pointers are set to do a hash table lookup based on packet-class value. © SAMSUNG Electronics Co., Ltd.
Page 221 Ubigate iBG2016 Configuration Guide/Ed.00 The ether-type value of 0x8847 is added to the hash table and a pointer to class ‘mpls’ is stored in that entry. For any classification type, it is possible for the match rule to have a range of values or multiple, non-contiguous values.
Page 222: Traffic Policing
VLAN ID is the classification key and setting appropriate policing parameters for traffic class. Similarly for application-based rate limiting, configuring traffic class with application identifier as a classification key and configuring policing parameters for traffic class can achieve rate limiting. © SAMSUNG Electronics Co., Ltd.
Page 223 Ubigate iBG2016 Configuration Guide/Ed.00 Some clarification on acronyms will be helpful before going into the design discussion about policing. Committed Information Rate Committed Burst Size Committed Burst Time Excess Burst Size Peak Information Rate Peak Burst Size Peak Burst Time Burst Size Burst Interval.
Page 224: Policing Using Single Rate Three Color Marking (Srtcm)
B else if Te(t)-B >= 0 and packet’s color is green then the packet is marked yellow and Te is decremented by B else if packet color is green or yellow, then the packet is marked red. © SAMSUNG Electronics Co., Ltd.
Page 225 Ubigate iBG2016 Configuration Guide/Ed.00 Is Tc full? Is Tc full? Green action Drop Permit/mark-dscp/ drop Token Bucket(T Token Bucket(T Size = CBS Size = EBS tokens tokens Packet arrival Insufficient Out-of profile tokens packet Packet ‘pkt size’ number ‘pkt size’ number...
Page 226: Configuring Srtcm
They will have the following default values: green packets - ‘permit’, yellow packets - ‘mark-dscp 0’ and red packets - ‘drop’. srTCM can be configured and enabled for each ‘leaf’ traffic class on an interface. © SAMSUNG Electronics Co., Ltd.
Page 227: The Trtcm (Two Rate Three Color Marker)
Ubigate iBG2016 Configuration Guide/Ed.00 The trTCM (Two Rate Three Color Marker) The trTCM algorithm uses two rates CIR and PIR, and two burst sizes, CBS and PBS. The trTCM is typically implemented using two token buckets, Tc of size CBS, and Tp of size PBS. A packet is marked red if it exceeds PBS, yellow if it exceeds CBS but not PBS, otherwise it is green.
Page 228 CBS number of tokens into the Tc bucket and PBS number of tokens into the Tp bucket. However, in our implementation the token filler will run every 100 ms. Note that the same token-filling process will replenish tokens in all srTCM and trTCM token buckets. © SAMSUNG Electronics Co., Ltd.
Page 229: Configuring Trtcm
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring trTCM To enable policing using trTCM, CIR, CBS, PIR and PBS need to be configured. CIR and PIR configuration will be mandatory and CBS and PBS parameters will be optional. CBS will have a default value equal to ‘CIR’...
Page 230: Egress Queuing, Shaping And Scheduling
Each scheduling list is formed as circular linked list of same priority classes. In each list head points to leaf class from where scheduling starts with. The rest of the section explains about scheduling operation, excess bandwidth list formation, fairness for classes in the same priority. © SAMSUNG Electronics Co., Ltd.
Page 231 Ubigate iBG2016 Configuration Guide/Ed.00 For understanding of CBQ operation, let us first consider all classes to be of equal priority. The scheduler runs every 5 msec to service the queues on each interface.(Each leaf class is associated with a queue). In every scheduling interval, the scheduler makes two passes on the classes of each interface.
Page 232 This limits the queuing delay experienced by each queue/class because each class is serviced at least once every 5ms. The algorithm supports prioritization in terms of both latency and bandwidth borrowing. A class can be rate limited to a configured maximum value. © SAMSUNG Electronics Co., Ltd.
Page 233: Buffer Management For Class Queues
Ubigate iBG2016 Configuration Guide/Ed.00 Buffer Management for Class Queues It is not possible for a class to guarantee bandwidth if it doesn’t have enough buffers for its queue, because the packets can be dropped even before they have a chance to be scheduled. Therefore it is essential to have a good buffer management scheme along with a good scheduling algorithm.
Page 234: Output Queue Congestion Management
This is configured by the user. bbr - ‘Burst rate bytes’. Class parameter. This is the number of bytes a class can send in one scheduler interval, corresponding to its BR. © SAMSUNG Electronics Co., Ltd.
Page 235: Buffer Reservation For Interfaces
Ubigate iBG2016 Configuration Guide/Ed.00 Buffer Reservation for Interfaces When a wan interface is created, a certain amount of queue buffers will be reserved for it’s transmitting queue from the global buffer pool. Buffer reservation is only done for wan interfaces and not GE interfaces because we expect congestion and hence queue build-ups only on wan interfaces.
Page 236: Buffer Management For Class Queues
BCR = ((3072000/8) * 5) / 1000 = 1920 bytes-per-scheduling interval Total buffering requirement for a class = bbr = 1920 bytes Let’s estimate the average packet size to be 100 bytes.(This would be a very conservative estimate). © SAMSUNG Electronics Co., Ltd.
Page 237 Ubigate iBG2016 Configuration Guide/Ed.00 The minimum # of buffers required for one class = bbr/100 = 20 buffers With 20 classes on the bundle,(20 * 20) = 400 buffers would be required for the bundle. With 14 bundles on a t3 interface, the total buffers requirement...
Page 238 On the other hand the minimum guaranteed number of reserved buffers is not less than(4 * BCR) for all classes on the interface. The remaining amount of(6 * BCR / average_packet_size) is used to create the shared buffer pool. © SAMSUNG Electronics Co., Ltd.
Page 239 Ubigate iBG2016 Configuration Guide/Ed.00 A single class by itself should not be allowed to borrow all of the available common pool buffers. So we need to enforce a maximum limit on the buffer consumption of each class. Since we have allocated(10 * BCR average_...
Page 240: Congestion Management On Output Queues
The drop probability when the average queue size equals ‘maxth’ is known as the Mark Probability. Mark Probability = 1/MPD, where MPD is the Mark Probability Denominator. MPD is configured as a power of 2 for efficiency in Average Queue Size Calculation © SAMSUNG Electronics Co., Ltd.
Page 241 Ubigate iBG2016 Configuration Guide/Ed.00 Average Queue Size Calculation for Interface Queues The average queue size computation for interface is done for every packet sent on the interface. Before deciding whether packet needs to be dropped or not, the average queue size is calculated using the following formula and by reading the current driver queue size and current average queue size.
Page 242: Drop Probability Calculation
As said earlier by default RED is enabled on traffic classes. At the queuing time, if DSWRED is not enabled then minth and maxth thresholds of given class is assumed for RED calculation otherwise the minth and maxth thresholds corresponding to the packet’s DSCP value is assumed. © SAMSUNG Electronics Co., Ltd.
Page 243: Configuring Red Parameters
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring RED parameters This section discusses which RED parameters are configurable and how are their default values set. It also explains the effect of changing these parameter values and guidelines about how to set their values.
Page 244 CR, on an average at least(2*Ts) msec of traffic will be buffered before RED starts dropping. Note that these buffering requirements are calculated for 200 byte packets which are conservative. © SAMSUNG Electronics Co., Ltd.
Page 245 Ubigate iBG2016 Configuration Guide/Ed.00 The average internet packet size is probably between 200-300 bytes, for which the buffering would be up to twice the amount mentioned above. The minimum permissible value for minth is L, where L corresponds to Ts msec of buffering(for 200 byte packets) at CR Kbps or L = 3, whichever is higher.
Page 246: Differentiated Services
Router/configure/interface/bundle wan1# encap ppp Router/configure/interface/bundle wan1# ip address 23.1.1.1 24 Router/configure/interface/bundle wan1# qos Router/configure/interface/bundle wan1/qos# add-policy-class dscp-af11 root-out Router/configure/interface/bundle wan1/qos# policy-class dscpaf11 Router/configure/interface/bundle wan1/qos/policy-class dscpaf11# match-dscp 10 Router/configure/interface/bundle wan1/qos/policy-class dscpaf11# cbq cr 1500 pr 1500 priority 3 © SAMSUNG Electronics Co., Ltd.
Page 247: Qos Statistics
Ubigate iBG2016 Configuration Guide/Ed.00 Router/configure/interface/bundle wan1/qos/policy-class dscpaf11#red minth-red 10 minth-yellow 15 minth-green 20 maxredminth-red 10 minth-yellow 15 minth-green 20 maxth-red 16 maxthyellow24 maxth- green 25 Router/configure/interface/bundle wan1/qos/policy-class dscpaf11# Router/configure/interface/bundle wan1/qos/policy-class dscpaf11#red minth 20 maxth 25 dscp 10 Router/configure/interface/bundle wan1/qos/policy-class dscpaf11# QoS Statistics The following policy-class level statistics are supported in this release.
Page 248: Ingress And Egress Qos For Ip Tunnels
QoS treatment to be given to a packet. CoS attributes can be assigned to a packet by any of the multiple stages of the ingress pipeline. © SAMSUNG Electronics Co., Ltd.
Page 249: L2 Bridge Based Cos Marking
Ubigate iBG2016 Configuration Guide/Ed.00 L2 Bridge Based CoS Marking The first stage that assigns CoS attributes is the Bridge processing stage. To configure the bridge port TC assignment, enter: Router/configure/interface/ethernet (3/0)/qos# [no] override-outq <queue-id(1..8)> Using the no form will switch off TC override. When TC override is ‘off’, the TC gets reassigned based on the UP of the packet in the next stage.
Page 250: Configuration Example
Router/configure/qos# no map-outq-to-up 4 Router/configure/qos# map-up-to-dp 4 2 Router/configure/qos# no map-up-to-dp Router/configure/qos# no map-up-to-dp 4 Router/configure/qos# map-up-to-outq 4 5 Router/configure/qos# no map-up-to-outq 4 Verifying the Configuration Use the following command to display the configuration: show qos global-config © SAMSUNG Electronics Co., Ltd.
Page 251: Inlif Based Cos Marking
Ubigate iBG2016 Configuration Guide/Ed.00 InLIF Based CoS Marking The inLIF is a logical context assigned to a user port. InLIF-based CoS marking allows you to override the marking done at the bridge stage and assign CoS based purely on the ingress interface.
Page 252: Policy Based Cos Marking
Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-dscp <DSCP(0..63)> Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-up <UP(0..7)> Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-outq <queue-id(1..8)> Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-dp <DP(0..2)> To map the policy created above to an interface, enter: Router/configure/interface/ethernet (<name>)/qos# service- policyinput <map-name> © SAMSUNG Electronics Co., Ltd.
Page 253: Configuration Example
Ubigate iBG2016 Configuration Guide/Ed.00 Configuration Example Router/configure/qos# policy-map map2 Router/configure/qos/policy-map map2# policy-class class2 Router/configure/qos/policy-map map2/policy-class class2# match ipv4 Router/configure/qos/policy-map map2/policy-class class2# mark-dp 2 Router/configure/qos/policy-map map2/policy-class class2# markdscp 3 Router/configure/qos/policy-map map2/policy-class class2# markoutq 5 Router/configure/qos/policy-map map2/policy-class class2# mark-up 3 Router/configure/interface/ethernet (3/0)/qos# service-...
Page 254 To map this policy to an interface, enter: Router/configure/interface/ethernet (<name>)/qos# service- policyinput <map-name> To configure a policer for the class configured above, enter: Router/configure/qos/policy-map <map-name>/policy-class <classname># police Router/configure/qos/policy-map <map-name>/policy-class <classname>/ police# srtcm <rate_in_kbps> cbs <committed_burst_in_bytes> ebs <excess_burst_in_bytes> © SAMSUNG Electronics Co., Ltd.
Page 255 Ubigate iBG2016 Configuration Guide/Ed.00 To configure the L3-based CoS marking table, enter: Router/configure/qos# police Router/configure/qos/police# l3-cos-map <DSCP(0..63)> <conformance (green, yellow, red)> [mark-dscp <DSCP(0..63)> markup <UP(0..7)> mark-dp <DP(0..2)>] To configure the L2-based CoS marking table, enter: Router/configure/qos# police Router/configure/qos/police# l2-cos-map < UP(0..7)>...
Page 256: Multi-Field Classification Using Pcls
< match-operation > can be ”” (exact match on value) or “-” (range between value1 and value2) or “!=” (exclude value) or “/” (prefix length) or “>=”(greated than or equal to value) or “<=” (less than or equal to value) © SAMSUNG Electronics Co., Ltd.
Page 257: Configuration Example
Ubigate iBG2016 Configuration Guide/Ed.00 Configuration Example Router/configure/qos/policy-map map1/policy-class class1# match ipv4 src-ip 20.30.30.30 Router/configure/qos/policy-map map1/policy-class class1# match ipv4 dest-ip 30.40.50.0/24 Router/configure/qos/policy-map map1/policy-class class1# match ipv6 src-ip 2002::/64 Router/configure/qos/policy-map map1/policy-class class1# match ipv6 ip-proto 10-12 Router/configure/qos/policy-map map1/policy-class class1# match ipv6 ip-proto !=10...
Page 258 Router/configure/qos/policy-map <map-name>/policy-class <classname>/ police# srtcm <rate_in_kbps> cbs <committed_burst_in_bytes> ebs <excess_burst_in_bytes> To configure a trTCM policer for the class configured above, enter: Router/configure/qos/policy-map <map-name>/policy-class <classname># police Router/configure/qos/policy-map <map-name>/policy-class <classname>/ police# trtcm <mean_rate_in_kbps> <peak_rate_in_kbps> cbs <committed_burst_in_bytes> pbs <peak_burst_in_bytes> © SAMSUNG Electronics Co., Ltd.
Page 259 Ubigate iBG2016 Configuration Guide/Ed.00 Configuration Example Router/configure/qos/policy-map map1/policy-class class1/police# srtcm 100 cbs 100 ebs 200 Router/configure/qos/policy-map map1/policy-class class1/police# no srtcm 100 Router/configure/qos/policy-map map1/policy-class class1/police# trtcm 100 200 cbs 200 pbs 300 Router/configure/qos/policy-map map1/policy-class class1/police# no trtcm 100 200 Verifying the Configuration...
Page 260: Configuration Example
To enable or disable conformance counters at the global level, enter: Router/configure/qos#[no] conformance-counter enable Configuration Example Router/configure/qos# billing enable Router/configure/qos# no billing enable Router/configure/qos# conformance-counter enable Router/configure/qos# no conformance-counter enable Router/configure/qos/policy-map map1/policy-class class1/police# billing enable Router/configure/qos/policy-map map1/policy-class class1/police# no billing enable © SAMSUNG Electronics Co., Ltd.
Page 261: Verifying The Configuration
Ubigate iBG2016 Configuration Guide/Ed.00 Verifying the Configuration To verify the configuration, enter: Router/configure/qos# show qos global-config Router/configure/qos/policy-map map1# show qos policer policy-name map1 policy-class class1 Egress Queuing, Scheduling and Shaping Two queuing disciplines are supported namely Strict Priority Queuing and Weighted Round Robin.
Page 262: Congestion Management On Egress Queues
Router/configure/qos/qos-congestion-set 1# red 1 0 minTh 10 maxTh 20 mpd 2 Router/configure/qos/qos-congestion-set 1# red-ewma-wt 8 10 Router/configure/interface/ethernet (3/0)/qos# qos- congestion-map Verifying the Configuration To verify the configuration, enter: Router/configure/interface/ethernet (3/0)# show qos port- info ethernet3/0 Router/configure/interface/ethernet (3/0)# show qos congestion-set © SAMSUNG Electronics Co., Ltd.
Page 263: Buffer Management
Ubigate iBG2016 Configuration Guide/Ed.00 Buffer Management To configure buffer management and flow control, enter: Router/configure/interface/ethernet (3/0)/qos# rx-buffers- limit 2000 Router/configure/interface/ethernet (3/0)/qos# tx- descriptorlimit 3000 Router/configure/interface/ethernet (3/0)/qos# xoff- threshold 500 Router/configure/interface/ethernet (3/0)/qos# xon-threshold 200 Router/configure/interface/ethernet (3/0)/qos# queue-tx- descrlimit 1 2000 Verifying the Configuration...
Page 265: Chapter 11. Vlan Forwarding With Qos
Ubigate iBG2016 Configuration Guide CHAPTER 11. VLAN forwarding with QoS Overview Untagged Customer LANs Channelized Ethernet Switch T3 Router Channelized T3 Gigabit Ethernet Ethernet Switch Internet Telco Tagged VLAN Trunk Multilink T1 Router Multi-Tenant Bullding Figure 11.1 VLAN Forwarding: Multi-Tenant Internet Access The example above shows each multi-tenant customer represented as a separate VLAN on the Ethernet switch.
Page 266 QoS can be configured based on VLAN IDs, in increments of 64 kbps providing greater control than what is normally available in Ethernet switches. © SAMSUNG Electronics Co., Ltd.
Page 267: Virtual Lan Domain
Ubigate iBG2016 Configuration Guide/Ed.00 Virtual LAN Domain The iBG2016 supports VLAN-based data forwarding. Essentially, this feature forwards the packets from one network to another based on the VLAN identifier(rather than routing) contained in the VLAN header, as defined by IEEE 802.1q. The VLAN packets are generally termed as tagged packets referring to the VLAN encapsulation of the Ethernet packets.
Page 268: Configuring Bridging On The Wan Interface
2006/03/15 08:54:50 NSM: interface ethernet3/5 index 9 is already a switchport % Interface already a switchport Router/configure/interface/ethernet (3/5)# br 1 % Interface already bound to a bridge Router/configure/interface/ethernet (3/5)# switchport mode access Router/configure/interface/ethernet (3/5)# switchport access vlan 700 Router/configure/interface/ethernet (3/5)# exit © SAMSUNG Electronics Co., Ltd.
Page 269: Creating A Bridge Group
Ubigate iBG2016 Configuration Guide/Ed.00 Router/configure#interface ethernet 3/6 DUT2/configure/interface/ethernet (3/6)# switchport 2006/03/15 08:54:50 NSM: interface ethernet3/5 index 9 is already a switchport % Interface already a switchport DUT2/configure/interface/ethernet (3/6)# br 1 % Interface already bound to a bridge DUT2/configure/interface/ethernet (3/6)# switchport mode...
Page 271 PART IV. Security Chapter 1. Authentication Authorization and Accounting Chapter 2. Packet Filtering Chapter 3. Firewall and NAT Chapter 4. Chapter 5. IPSEC...
Page 273 Ubigate iBG2016 Configuration Guide CHAPTER 1. Authentication Authorization Accounting The combination of accounting controls, authorization requirements, and authentication checks(AAA) is a framework for configuring security functions across the network in a consistent fashion. Each component of AAA can be implemented separately.
Page 274: Chapter 1. Authentication Authorization Accounting
The following example shows how to enable AAA module. Router# configure terminal Router/configure# aaa Router/configure/aaa# enable Router/configure/aaa# show aaa status The command ‘show aaa status’ shows whether it is enabled. The following example shows the way to disable AAA module. Router/configure/aaa# no enable © SAMSUNG Electronics Co., Ltd.
Page 275: Configuring Radius
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Authentication The Ubigate system is configured to authenticate users on a port basis. For example, if you want to configure a port of Ethernet 2/3 with a RADIUS authentication method, you may follow the example shown below.
Page 276: Configuring Tacacs
Router# configure terminal Router/configure# aaa Router/configure/aaa# enable Router/configure/aaa# authentication login list1 tacacs/local/none Router/configure/aaa# authentication protocols list1 ascii/pap/chap Router/configure/aaa# tacacs primary_server 192.168.203.213 Router/configure/aaa# tacacs secondary_server 192.170.200.211 Router/configure/aaa# tacacs shared_key key123 Router/configure/aaa# tacacs retries 5 Router/configure/aaa# tacacs time_out 5 © SAMSUNG Electronics Co., Ltd.
Page 277 Ubigate iBG2016 Configuration Guide/Ed.00 Verifying TACACS Configuration To confirm the access method, enter: Router/configure/aaa# show aaa authentication login List Name Methods Order ------------------------------------------- default NOT CONFIGURED list1 tacacs local none To confirm the protocols list, enter: Router/configure/aaa# show aaa authentication protocols...
Page 278 CHAPTER 1. Authentication Authorization Accounting This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
Page 279: Chapter 2. Packet Filtering
An example would be a filter that prohibits external users from establishing Telnet sessions to the Ubigate iBG2016, and allows only specific internal users Telnet access to the system. At the end of every rule list is an implied ‘deny all traffic’ statement.
Page 280: Example: Blocking Telnet Access
200.1.1.1) to an ISP, with Ethernet 0/1(IP address 222.199.19.3) connected to the internal network. The network administrator wants to completely block Telnet access to the Ubigate iBG2016 from all external networks as well as from all internal networks except 222.199.19.0/28. All other TCP/IP traffic, such as FTP, Ping, and HTTP, is to flow unrestricted through the Ubigate iBG2016.
Page 281: Chapter 3. Firewall Nat
Ubigate iBG2016 Configuration Guide CHAPTER 3. Firewall NAT Overview Security module in Ubigate iBG2016 consists of various components such as Stateful inspection firewall, IPSec VPN, Public Key Infrastructure and Access Control List(ACL). This chapter introduces Ubigate iBG2016’s firewall and its typical configuration.
Page 282: Virtual Firewall
Virtual firewall feature can be used to provide separate firewall policies as shown in the following diagram Internet(internet) for the untrusted network. Corporation(corp) for the corporate network. Demilitarized Zone(dmz)for the server accessibility from the untrusted side-or other user-defined network. Managing access to the box. © SAMSUNG Electronics Co., Ltd.
Page 283 Ubigate iBG2016 Configuration Guide/Ed.00 Firewal Corp internet Firewall Firewall Firewall Inciming Policy Outing Policy Inciming Policy Outing Policy Inciming Policy Outing Policy Database Database Database Database Database Database Transit Self Transit Self Transit Self Transit Self Transit Self Transit Self...
Page 284: Access Policy Database
This policy is available on network basis and within that direction. Currently supported policy categories are Outbound: Policies that govern traffic originated from one map to the external world. Inbound-Policies that govern traffic bound to map from the external world. © SAMSUNG Electronics Co., Ltd.
Page 285 Ubigate iBG2016 Configuration Guide/Ed.00 Access Policy Database Lookup Untrusted Side Trusted Side (internet) (corp) Host-A Host-A To Host-B To Host-B Host-A Host-A To Firewall To Firewall Host-B Host-A Firewall Firewall To Host-A To Host-A Transit Polidies Self Policies Self Policies...
Page 286: Application Level Gateways
The NAT record would eventually be used in one of the following category. Many-to-one regular NAT(NAT record attached to out bound policy) One-to-one regular NAT(NAT record attached to out bound policy) © SAMSUNG Electronics Co., Ltd.
Page 287: Application Content Filtering
Ubigate iBG2016 Configuration Guide/Ed.00 Many-to-one reverse NAT(NAT record attached to in bound policy) One-to-one reverse NAT(NAT record attached to in bound policy) Many-to-many regular NAT(NAT record attached to out bound Policy) Multiple policies can share single NAT address, provided NAT address is of type many to one only.
Page 288: Configuring Firewalls
Consider a PC on the LAN sending a packet destined for some.server.com. The source IP address and port are in the packet together with the destination IP address and port. When the packet arrives at the Ubigate iBG2016 it will be de-encapsulated, modified, and re-encapsulated.
Page 289 Ubigate iBG2016 Configuration Guide/Ed.00 The Ubigate iBG2016 also adds an entry into a table it keeps, which maps the internal address and source port number that the PC generated against the port number it allocated to this session. Therefore, when some.server.com sends a reply packet to the PC, the Ubigate iBG2016 can quickly determine how it needs to re-write the packet before transmitting it back on to the LAN.
Page 290: Nat Configuration Examples
If a NAT IP address cannot be allocated dynamically at the connection creation time, the packet would be dropped. 10.1.1.1 OPAL 10.1.1.2 Internet 60.1.1.1.60.1.1.2 10.1.1.3 Figure 3.4 Dynamic NAT The dynamic NAT configuration shown in Figure 25.4 includes: Private network addresses:10.1.1.1-10.1.1.4 Public(NAT) IP address range: 60.1.1.1-60.1.1.2 © SAMSUNG Electronics Co., Ltd.
Page 291: Ubigate Ibg2016 Configuration Guide/Ed
Figure 3.5 Mapping Multiple NAT Addresses to One Public IP Address There are two methods to configure Port Address Translation(PAT) on the Ubigate iBG2016 gateway. In the first method, specify the IP address to the nat-ip parameter in the policy command. In the second method, create a pool of type PAT and then attach it to the policy.
Page 292 Router/configure/firewall corp# object Router/configure/firewall corp/object# nat-pool patPool pat 50.1.1.5 Router/configure/firewall corp/object# exit Router/configure/firewall corp# policy 2 out address 10.1.1.1 10.1.1.3 any any Router/configure/firewall corp/policy 2 out# apply-object nat-pool patPool Router/configure/firewall corp/policy 2 out# exit 2 Router/configure# © SAMSUNG Electronics Co., Ltd.
Page 293: Static Nat (One To One)
Ubigate iBG2016 Configuration Guide/Ed.00 Static NAT (one to one) 10.1.1.1 OPAL 10.1.1.2 Internet 50.1.1.1.50.1.1.3 10.1.1.3 Figure 3.6 Static NAT In static(one-to-one) NAT type, for each IP address in the corporate network, one NAT IP address will be used. For example, for the three IP addresses from 10.1.1.1 to 10.1.1.3, there is a set of three NAT IP address from...
Page 294 Static NAT also requires a public address from the upstream service provider. Individual PCs within a LAN are assigned RFC 1918 reserved IP addresses to enable access to other PCs within the LAN. The Ubigate iBG2016 is configured with static mapping, which maps the internal RFC 1918 IP addresses for each PC to the appropriate public IP address.
Page 295 Ubigate iBG2016 Configuration Guide/Ed.00 Configuration for Figure 23.7 Router# configure terminal Router/configure# firewall corp Router/configure/firewall corp# object Router/configure/firewall corp/object# nat-pool staticNat static 100.1.1.6 100.1.1.6 Router/configure/firewall corp/object# exit Router/configure/firewall corp# policy 8 out address 192.168.1.6 32 any Router/configure/firewall corp/policy 8 out# apply-object...
Page 296: Reverse Nat
Ethemet 1 FTP, SMTP, HTTP Server 199.7.3.2/24 192.168.1.6/24 www server is running on TCP port 81 FTP, SMTP, HTTP Server 192.168.1.6/24 10/100 BaceT Ethernet Workstation Workstation Workstation Workstation 192.168.1.1/24 192.168.1.2/24 192.168.1.3/24 192.168.1.5/24 Figure 3.9 Reverse NAT © SAMSUNG Electronics Co., Ltd.
Page 297: Nat-Failover For Firewalls
Ubigate iBG2016 Configuration Guide/Ed.00 Configuration for Figure 23.9 Router# configure terminal Router/configure# firewall corp Router/configure/firewall corp# object Router/configure/firewall corp/object# nat-pool revNat pat 192.168.1.6 192.168.1.6 Router/configure/firewall corp/object# exit Router/configure/firewall corp# policy 9 in address any 100.1.1.6 32 Router/configure/firewall corp/policy 9 in# apply-object...
Page 299: Chapter 4. Gre
Ubigate iBG2016 Configuration Guide CHAPTER 4. Generic Routing Encapsulation(GRE) is a standards-based(RFC1701, RFC2784) tunneling protocol that can encapsulate a wide variety of protocol packet types inside IP tunnels, creating a virtual point-to-point link between routers at remote points over an IP network. A tunnel is a logical interface that provides a way to encapsulate passenger packets inside a transport protocol.
Page 300: Gre Configuration Examples
Figure 4.1 Simple GRE configuration Configuring Site to Site Tunnel To configure GRE in a site to site tunnel configuration: Configure the interface. Ubigate iBG2016# configure terminal Router/configure# interface bundle wan1 Router/configure/interface/bundle wan1# link t1 0/2/0 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 192.168.94.220...
Page 301 Ubigate iBG2016 Configuration Guide/Ed.00 Configure the IP routes. Router/configure# ip route 0.0.0.0 0.0.0.0 192.168.94.254 Router/configure# ip route 40.1.1.0 255.255.255.0 t0 The peer of a local WAN interface cannot be used as a tunnel destination. Verify that the tunnel is up and running.(If it is not, check the Gateway and Source Address fields.)
Page 302 Configure the Cisco-compatible router side: cisco # config t cisco(config)#interface Ethernet2/0 cisco(config-if)#ip address 192.168.55.75255.255.255.0 cisco(config-if)#exit cisco(config)#interface Tunnel 0 cisco(config-if)#ip address 103.1.1.1 255.255.255.0 cisco(config-if)#tunnel source 192.168.55.75 cisco(config-if)#tunnel destination 192.168.94.220 cisco(config-if)#exit cisco(config)#ip route 0.0.0.0 0.0.0.0 192.168.55.254 cisco(config)#ip route 10.3.1.0 255.255.255.0 Tunnel0 © SAMSUNG Electronics Co., Ltd.
Page 303: Configuring Gre Site To Site With Ipsec
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring GRE Site to Site with IPSec This example extends the first example by adding encryption to the tunnel. Prepare the WAN link: Router# configure terminal Router/configure# interface bundle wan1 Router/configure/interface/bundle wan1# link t1 0/2/0 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 192.168.94.220 255.255.255.0...
Page 304: Configuring Gre Site To Site With Ipsec And Ospf
This example extends the previous IPSec configuration example by enabling Open Shortest Path First(OSPF) protocol which provides redundant paths for the tunnel. To enable OSPF, add to the Ubigate iBG2016 configuration above: Router# configure terminal Router/configure# router-id 2.2.2.2 Router/configure# router ospf Router/configure/router/ospf# network 103.1.1.0/24 area 0...
Page 305: Introduction To Security
Ubigate iBG2016 Configuration Guide CHAPTER 5. IPSEC Need to develop CLNS VPNs and Secure Packet Exchange topics-new material Introduction to Security SNOS introduces a wide range of robust industry-standard security features including: Virtual Private Networking IPSec encryption and tunneling Generalized Router Encryption...
Page 306: Access Methods
Ubigate iBG2016 supports two types of IPSec remote access using VPNs. Remote Access: User Group One of the methods to achieve IPSec remote access in Ubigate iBG2016 is the user group method. In this method, the administrator creates an IKE policy for a logical group of users such as a department in an organization.
Page 307 Ubigate iBG2016 Configuration Guide/Ed.00 Remote Access: Mode Configuration The other method to achieve IPSec remote access in Ubigate iBG2016 is the mode configuration method. This method makes the VPN client an extension of the LAN being accessed by the VPN client. The remote client appears as a network accessing some resource behind the VPN server.
Page 308: Securely Managing The Ubigate Ibg2016 System Example
CHAPTER 5. IPSEC Securely Managing the Ubigate iBG2016 System Example This example demonstrates how to manage a router through an IP security tunnel. Steps are presented for configuring the Router and NW2 routers to assist any host on the LAN side of Networks-2 to manage the Router router through the IP security tunnel.
Page 309 Ubigate iBG2016 Configuration Guide/Ed.00 Display the crypto interfaces. Router# show crypto interfaces Interface Network Name Type --------- ------- ethernet 0/1 trusted wan1 untrusted Add the route to the peer LAN. Router/configure# ip route 10.0.2.0 255.255.255.0 wan1 Configure IKE to the peer gateway.
Page 310 For IPSec only-when you create an outbound tunnel, an inbound tunnel is automatically created. The inbound tunnel applies the name that you provide for the outbound tunnel and adds the prefix ‘IN’ to the name. © SAMSUNG Electronics Co., Ltd.
Page 311 Ubigate iBG2016 Configuration Guide/Ed.00 Display the policies. Router# show crypto ipsec policy all Policy Peer Match Proto Transform ------ ---- ----- ----- --------- NW2 172.16.0.2 S 172.16.0.1/32/any Any P1 esp-aes-sha1-tunl D 10.0.2.0/24/any INNW2 172.16.0.2 S 10.0.2.0/24/any Any P1 esp-aes-sha1-tunl D 172.16.0.1/32/any Display IPSec policies in detail.
Page 312 Router# show firewall policy internet Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter, R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging, E-Policy Enabled, M-Smtp-Filter Pri Dir Source Addr Destination Addr Sport Dport Proto Action Advanced --- --- ----------- ---------------- ----------------- ----- - -------- © SAMSUNG Electronics Co., Ltd.
Page 313 Ubigate iBG2016 Configuration Guide/Ed.00 1000 in any any snmp PERMIT SE 1002 in any any telnet PERMIT SE 1003 in any any any any icmp PERMIT SE 1024 out any any any any any PERMIT SE Display firewall policies in the internet map in detail.
Page 314 When the SNMP manager starts managing Router from NW2’s LAN, display the IKE and IPSec SA tables. Router# show crypto ike sa all Policy Peer State Bytes Transform ------ ----------- --------- ------ ---------------- NW2 172.16.0.2 SA_MATURE 2020 pre-g1-3des-sha1 © SAMSUNG Electronics Co., Ltd.
Page 315 Ubigate iBG2016 Configuration Guide/Ed.00 Router# show crypto ike sa all detail Crypto Policy name: NW2 Remote ident 172.16.0.2 Peer Address is 172.16.0.2 Transform: 3des, sha1, pre-shared-key DH Group: group1 Bytes Processed 2020 State is SA_MATURE Mode is Main Remaining Time in Sec: 86084...
Page 316: Joining Two Private Networks Example
Figure 5.2 Tunnel Mode Between Two Security Gateways-Single Proposals Configure a WAN bundle of network type untrusted. Router/configure/interface/bundle wan1# link t1 0/2/0 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 172.16.0.1 24 Router/configure/interface/bundle wan1# crypto untrusted Router/configure/interface/bundle wan1# exit © SAMSUNG Electronics Co., Ltd.
Page 317 Ubigate iBG2016 Configuration Guide/Ed.00 Configure the Ethernet interface with trusted network type. Router/configure# interface ethernet 0/1 message: Configuring existing Ethernet interface Router/configure interface/ethernet(0/1)# ip address 10.0.1.1 24 Router/configure/interface/ethernet(0/1)# crypto trusted Router/configure/interface/ethernet(0/1)# exit Display the crypto interfaces. Router# show crypto interfaces...
Page 318 For IPSec only-when you create an outbound tunnel, an inbound tunnel is automatically created. The inbound tunnel applies the name that you provide for the outbound tunnel and adds the prefix ‘IN’ to the name. © SAMSUNG Electronics Co., Ltd.
Page 319 Ubigate iBG2016 Configuration Guide/Ed.00 Display IPSec policies. Router# show crypto ipsec policy all Policy Peer Match Proto Transform ------ ---- ----- ----- --------- NW2 172.16.0.2 S 10.0.1.0/24/any Any P1 esp-aes-sha1-tunl D 10.0.2.0/24/any INNW2 172.16.0.2 S 10.0.2.0/24/any Any P1 esp-aes-sha1-tunl D 10.0.1.0/24/any...
Page 320 Logging is disable Source Address is any, Dest Address is any Source Port is any, Service Name is ike Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled © SAMSUNG Electronics Co., Ltd.
Page 321 Ubigate iBG2016 Configuration Guide/Ed.00 Bytes In 0, Bytes Out 0 Policy with Priority 1024 is enabled, Direction is outbound Action permit, Traffic is self Logging is disable Source Address is any, Dest Address is any Source Port is any, Dest Port is any, any...
Page 322 Source Port is any, Dest Port is any, any Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled Max-Connections 1024, Connection-Rate is disabled Policing is disabled, Bandwidth is disabled © SAMSUNG Electronics Co., Ltd.
Page 323 Ubigate iBG2016 Configuration Guide/Ed.00 Repeat steps 1-16 with suitable modifications on NW2 prior to passing traffic. Test the IPSec tunnel between Router and NW2 by passing traffic from the 10.0.1.0 to the 10.0.2.0 network. After transit traffic is passed through the tunnel, display the IKE and IPSec SA tables.
Page 324 Spi: 0xb013de87 Transform: aes256(key length=256 bits), sha1 In use settings = {tunnel} Bytes Processed 256 Hard lifetime in seconds 3560, Hard lifetime in kilobytes 413695 Soft lifetime in seconds 3470, Soft lifetime in kilobytes 41492 © SAMSUNG Electronics Co., Ltd.
Page 325: Joining Two Networks Using Multiple Ipsec Proposals Example
Ubigate iBG2016 Configuration Guide/Ed.00 Joining Two Networks using Multiple IPSec Proposals Example The following example demonstrates how a security gateway can use multiple IPSec(phase2) proposals to form an IP security tunnel to join two private networks: 10.0.1.0/24 and 10.0.2.0/24. IKE Proposal offered by both Router and NW2:...
Page 326 Router/configure/crypto# ike policy NW2 172.16.0.2 Router/configure/crypto/ike/policy NW2 172.16.0.2# local- address 172.16.0.1 Router/configure/crypto/ike/policy NW2 172.16.0.2# key secretkey Router/configure/crypto/ike/policy NW2 172.16.0.2# proposal 1 Router/configure/crypto/ike/policy NW2 172.16.0.2/proposal 1# encryption-algorithm 3des-cbc Router/configure/crypto/ike/policy NW2 172.16.0.2/proposal 1# exit Router/configure/crypto/ike/policy NW2 172.16.0.2# exit © SAMSUNG Electronics Co., Ltd.
Page 327 Ubigate iBG2016 Configuration Guide/Ed.00 Display the IKE policies. Router# show crypto ike policy all Policy Peer Mode Transform NW2 172.16.0.2 Main P1 pre-g1-3des-sha1 Display the IKE policies in detail. Router# show crypto ike policy all detail Policy name NW2, Local addr 172.16.0.1, Peer addr 172.16.0.2...
Page 328 Hash Algorithm: sha1 Lifetime in seconds: 3600 Lifetime in Kilobytes: 4608000 Proposal of priority 2 Protocol: esp Mode: tunnel Encryption Algorithm: aes256(key length=256 bits) Hash Algorithm: sha1 Lifetime in seconds: 3600 Lifetime in Kilobytes: 4608000 © SAMSUNG Electronics Co., Ltd.
Page 329 Ubigate iBG2016 Configuration Guide/Ed.00 Policy name INNW2 is enabled, Direction is inbound Peer Address is 172.16.0.2, Action is Apply Key Management is Automatic PFS Group is disabled Match Address: Protocol is Any Source ip address(ip/mask/port):(10.0.2.0/255.255.255.0/any) Destination ip address(ip/mask/port):(10.0.1.0/255.255.255.0/any) Proposal of priority 1...
Page 330 Source Address is any, Dest Address is any Source Port is any, Dest Port is any, any Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled © SAMSUNG Electronics Co., Ltd.
Page 331 Ubigate iBG2016 Configuration Guide/Ed.00 Configure firewall policies to allow transit traffic from remote LAN to the local LAN. Router/configure# firewall corp Router/configure/firewall corp# policy 1000 in address 10.0.2.0 24 10.0.1.0 24 Router/configure/firewall corp/policy 1000 in# exit Router/configure/firewall corp# exit Display firewall policies in the corp map.
Page 332 Bytes In 11258, Bytes Out 5813 Repeat steps 1-15 with suitable modifications on NW2 prior to passing bi-directional traffic. Test the IPSec tunnel between Router and NW2 by passing traffic from the 10.0.1.0 network to the 10.0.2.0 network. © SAMSUNG Electronics Co., Ltd.
Page 333 Ubigate iBG2016 Configuration Guide/Ed.00 After traffic is passed through the tunnel, display the IKE and IPSec SA tables. Router# show crypto ike sa all Policy Peer State Bytes Transform -------- ---------- -------- ------ ---------------- NW2 172.16.0.2 SA_MATURE 1796 pre-g1-3des-sha1 Router# show crypto ike sa all detail Crypto Policy name: NW2 Remote ident 172.16.0.2...
Page 334 Configuration on the other end is as follows: Configure the Ethernet interface with trusted network type. Networks2Router/configure# interface ethernet 0/1 Configuring existing Ethernet interface Networks2Router/configure interface/ethernet (0/1)# ip address 10.0.2.1 24 Networks2Router/configure/interface/ethernet (0/1)# crypto trusted Networks2Router/configure/interface/ethernet (0/1)# exit © SAMSUNG Electronics Co., Ltd.
Page 335 Ubigate iBG2016 Configuration Guide/Ed.00 Display the crypto interfaces. Networks1# show crypto interfaces Interface Network Name Type ethernet 0/1 trusted wan1 untrusted Add the route to the peer LAN. Networks2Router/configure# ip route 10.0.1.0 24 wan1 Configure IKE to the peer gateway.
Page 336 Networks2Router/configure/crypto/ipsec/policy Networks2 172.16.0.1# proposal 2 Networks1Router/configure/crypto/ipsec/policy Networks2 172.16.0.1# proposal 2 message: Proposal added with priority2-esp-3des-sha1-tunnel. Networks2Router/configure/crypto/ipsec/policy Networks2 172.16.0.1/proposal 2# encryption-algorithm aes256-cbc Networks2Router/configure/crypto/ipsec/policy Networks2 172.16.0.1/proposal 2# mode tunnel Networks2Router/configure/crypto/ipsec/policy Networks2 172.16.0.1# exit Networks2Router/configure/crypto# exit Networks2Router/configure# © SAMSUNG Electronics Co., Ltd.
Page 337: Supporting Remote User Access Example
Ubigate iBG2016 Configuration Guide/Ed.00 Supporting Remote User Access Example The following example demonstrates how to configure a router to be an IPSec VPN server using user group method with extended authentication(XAUTH) for remote VPN clients. The client could be any standard IPSec VPN client.
Page 338 New user mike is added to the group sales Router/configure/crypto/dynamic/ike/policy sales# key secretkeyforsalesusers Router/configure/crypto/dynamic/ike/policy sales# proposal 1 Router/configure/crypto/dynamic/ike/policy sales/proposal 1# encryption-algorithm 3des-cbc Router/configure/crypto/dynamic/ike/policy sales/proposal 1# exit Router/configure/crypto/dynamic/ike/policy sales# client authentication radius pap Router/configure/crypto/dynamic/ike/policy sales# exit Router/configure/crypto/dynamic# © SAMSUNG Electronics Co., Ltd.
Page 339 Ubigate iBG2016 Configuration Guide/Ed.00 Display dynamic IKE policies. Router# show crypto dynamic ike policy all Policy Remote-id Mode Transform Address-Pool ------ --------- ---- --------- ------------ sales U david@tabc... Aggressive P1 pre-g1-3des-sha1 Display dynamic IKE policies in detail. Router# show crypto dynamic ike policy all detail...
Page 340 Lifetime in Kilobytes: 4608000 Policy INsales is enabled, User group name sales Direction is inbound, Action is Apply Key Management is Automatic PFS Group is disabled Match Address: Protocol is Any Source ip address(ip/mask/port):(any/any/any) Destination ip address(ip/mask/port):(10.0.1.0/255.255.255.0/any) © SAMSUNG Electronics Co., Ltd.
Page 341 Ubigate iBG2016 Configuration Guide/Ed.00 Proposal of priority 1 Protocol: esp Mode: tunnel Encryption Algorithm: aes256(key length=256 bits) Hash Algorithm: sha1 Lifetime in seconds: 3600 Lifetime in Kilobytes: 4608000 Configure RADIUS server(applicable only if client authentication is configured in dynamic IKE policy).
Page 342 10.0.1.0 24 Router/configure/firewall corp/policy 1000 in# exit Router/configure/firewall corp# Be sure to match the user group name in the policy command with the name used in Step 4(the dynamic IKE policy). © SAMSUNG Electronics Co., Ltd.
Page 343 Ubigate iBG2016 Configuration Guide/Ed.00 Display firewall policies in the corp ma. Router# show firewall policy corp Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter, R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging, E-Policy Enabled, M-Smtp-Filter Pri Dir Source Addr Destination Addr Sport Dport Proto Action Advanced 1000 in any 10.0.1.0/24...
Page 344 Client Address Client Id Policy Advanced -------------- --------- ------ -------- 192.168.107.105 david@abc-corp... sales UserGrp Router# show crypto ike sa all Policy Peer State Bytes Transform ------ ---- ----- ----- --------- sales 192.168.107.105 SA_MATURE 1580 pre-g1-3des-sha1 © SAMSUNG Electronics Co., Ltd.
Page 345 Ubigate iBG2016 Configuration Guide/Ed.00 Router# show crypto ike sa all detail Crypto Policy name: sales Remote ident david@abc-corp.com Peer Address is 192.168.107.105 Transform: 3des, sha1, pre-shared-key DH Group: group1 Bytes Processed 1772 State is SA_MATURE Mode is Aggressive Life Time in Sec is unlimited, Life Time in Bytes is...
Page 346: Configuring Ipsec Remote Access Example
VPN Client 1 Pool: 10.0.1.100.10.02.150 Local Outer Address: Dynamic Local Inner Address: 10.0.1.100/32 IPSec Tunnel Local ID: david@abc-corp.com VPN Client 1 IPSec Tunnel Local Outer Address: Dynamic Local Inner Address: 10.0.1.101/32 Corporate Headquarters Local ID: milk@abc-corp.com 10.0.1.0/24 © SAMSUNG Electronics Co., Ltd.
Page 347 Ubigate iBG2016 Configuration Guide/Ed.00 Configure a WAN bundle of network type untrusted. Router/configure# interface bundle wan1 message: Configuring new bundle Router/configure/interface/bundle wan1# link t1 1/1 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 172.16.0.1 24 Router/configure/interface/bundle wan1# crypto untrusted Router/configure/interface/bundle wan1# exit Configure the Ethernet interface with trusted network type.
Page 348 Router/configure/crypto/dynamic/ike/policy sales/client/ configuration# exit Router/configure/crypto/dynamic/ike/policy sales# exit Router/configure/crypto/dynamic# exit Display dynamic IKE policies. Router# show crypto dynamic ike policy all Policy Remote-id Mode Transform Address-Pool sales U david@abc-... Aggressive P1 pre-g1-3des-sha1 1 S 20.1.1.100 E 20.1.1.150 © SAMSUNG Electronics Co., Ltd.
Page 349 Ubigate iBG2016 Configuration Guide/Ed.00 Display dynamic IKE policies in detail. Router# show crypto dynamic ike policy all detail Policy name sales, Modeconfig group Aggressive mode, Response Only, PFS is not enabled, Shared Key is ***** Local addr: 192.168.55.52, Local ident 192.168.55.52(ip- address) Remote idents are david@abc-corp.com(email-id), mike@abc-...
Page 350 Hash Algorithm: sha1 Lifetime in seconds: 3600 Lifetime in Kilobytes: 4608000 Configure firewall policies to allow IKE negotiation through untrusted interface. Router/configure# firewall internet Router/configure/firewall internet# policy 1000 in service ike self Router/configure/firewall internet/policy 1000 in# exit © SAMSUNG Electronics Co., Ltd.
Page 351 Ubigate iBG2016 Configuration Guide/Ed.00 Display firewall policies in the internet map. Router# show firewall policy internet Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter, R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging, E-Policy Enabled, M-Smtp-Filter Dir Source Addr Destination Addr Sport Dport Proto Action Advanced ---- --- ---------- ---------------- ------------------...
Page 352 R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging, E-Policy Enabled, M-Smtp-Filter Dir Source Addr Destination Addr Sport Dport Proto Action Advanced 1000 20.1.1.100 10.0.1.0/24 PERMIT E 20.1.1.150 1022 out any PERMIT SE 1023 PERMIT SE 1024 out any PERMIT E © SAMSUNG Electronics Co., Ltd.
Page 353 Ubigate iBG2016 Configuration Guide/Ed.00 Display firewall policies in the corp map in detail. Router# show firewall policy corp detail Policy with Priority 1000 is enabled, Direction is inbound Action permit, Traffic is transit Logging is disable Source Address is 20.1.1.100-20.1.1.150, Dest Address is 10.0.1.0/24...
Page 354 --------- ----- --------- INsales 172.16.0.10xbba97427 esp-aes-sha1-tunl sales 192.168.107.1050xcb0e23f3 560 esp-aes-sha1-tunl Router# show crypto ipsec sa all Policy Dest IP Bytes Transform -------- ------- ----- --------- INsales 172.16.0.1 0xbba97427 840 esp-aes-sha1-tunl sales 192.168.107.105 0xcb0e23f3 560 esp-aes-sha1-tunl © SAMSUNG Electronics Co., Ltd.
Page 355 Ubigate iBG2016 Configuration Guide/Ed.00 Router# Router# show crypto ipsec sa all detail Crypto Policy name: INsales Protocol is Any Local ident(ip/mask/port):(20.1.1.1/255.255.255.255/any) Remote ident(ip/mask/port):(10.0.1.0/255.255.255.0/any) Peer Address is 172.16.0.1, PFS Group is disabled inbound ESP sas Spi: 0xbba97427 Transform: aes256(key length=256 bits), sha1...
Page 357: Part V. Voice Chapter 1. Voice Feature
PART V. Voice Chapter 1. Voice Feature Chapter 2. VoIP Gateway Management Chapter 3. SIP Gateway Management Chapter 4. H.323 Gateway Management Chapter 5. Analog Voice Port Chapter 6. Digital Voice Port Chapter 7. ISDN Chapter 8. Routing and Digit Manipulation Chapter 9.
Page 359: Introduction Of Voice Feature
This system has two major functions. The one is signaling conversion function and another is a media conversion function. Network Architecture The network architecture in the view of Ubigate iBG2016 is shown in Figure 26.1. © SAMSUNG Electronics Co., Ltd.
Page 360 PhoNe IVR, AA, VMS UMS, Conference Figure 1.1 Ubigate iBG2016 Network Diagram The external entities which interwork with Ubigate iBG2016 over a network is as follows: Ubigate iBG2016 Ubigate iBG2016 acts as the interface between a traditional voice network and the IP network.
Page 361 IP Network method. CLI/Web It is the OAM interface provided by the Ubigate iBG2016 system, which can control various OAM functions of Ubigate iBG2016, after accessing a Ubigate iBG2016 via CLI or web from a desktop or notebook computer.
Page 362: Operation Mode
CHAPTER 1. Voice Feature Operation Mode When the Ubigate iBG2016 runs as SIP gateway, it can work in an Call Manager Interworking mode where it interworks with SIP network via Call Manager, or in a Stand-alone Mode(or Toll Bypass Mode) where it directly interworks with other SIP gateway with Call Manager.
Page 363 In a Survivable Telephony mode, the default call and minimum supplementary services within the same branch are provided. Depending on the fault type and settings of Ubigate iBG2016, some calls can be provided to other branch. © SAMSUNG Electronics Co., Ltd.
Page 364 Manager(or Proxy Server). Therefore, it is connected to other network entities without separate dependency registration procedure. If Ubigate iBG2016 operates in a Stand-alone mode, the remote office can be multiple different Ubigate iBG2016s, and the Ubigate iBG2016 directly determines call routing according to the dial plan settings.
Page 365: Key Functions
H.323 v5, and interworks with other H.323 network entities residing on a network in the following way. H.323 Gateway Mode In a H.323 gateway mode, a Ubigate iBG2016 serves as a gateway in the zone managed by a gatekeeper of ITSP. © SAMSUNG Electronics Co., Ltd.
Page 366 CHAPTER 1. Voice Feature If a Ubigate iBG2016 runs in a gateway mode, a Ubigate iBG2016 performs a general GK registration procedure using RRQ, a gatekeeper identifies the Ubigate iBG2016 as a gateway to be managed in a zone, and a Ubigate iBG2016 provides the H.323 Gateway characteristics necessary for default...
Page 367 Q.SIG(PRI) − Support of Voice Codec Ubigate iBG2016 acts as a VoIP gateway converting the TDM to packets and vice versa, and supports following Voice Codec: ITU-T G.711-Pulse code modulation(PCM) of voice frequencies ITU-T G.711 Appendix I-A high quality low-complexity algorithm for packet loss concealment with G.711...
Page 368 Call Routing and Digit Manipulation Call Routing The calls incoming to a Ubigate iBG2016 can be outbound to PSTN such as Port and Trunk Group, or to the VoIP network such as H.323 Session Target or SIP Session Target. Routing Control is the procedure to determine the route, out of various destinations, where a call will be outbound.
Page 369: Digit Manipulation
Ubigate iBG2016 system matches a dial string to an outbound POTS dial peer For prefixes, the Ubigate iBG2016 system may add specific digits to the front of the dialed string before it is forwarded to the telephony interface.
Page 370 The Ubigate iBG2016 system provides Call Admission Control based on Maximum Call Number per System Wide. The Call Admission Control Based on Max. Call feature permits the Ubigate iBG2016 system to deny incoming calls exceeding a preconfigured threshold, permitting the selection of a system max.
Page 371 For SIP, initially a normal VoIP call is established using SIP INVITEs. The DSP of the Ubigate iBG2016 system needs to be informed that it can support T.38 mode while it is put into voice mode. Then, during the call, when...
Page 372 CHAPTER 1. Voice Feature FAX Pass-through The Ubigate iBG2016 system does not distinguish a fax call from a voice call. Fax communication between the two fax machines is carried in its entirety in- band over a voice call. Fax up-speed is similar to pass-through in the sense that the fax call is carried in-band over the voice call.
Page 373 PBX. LVBO (Local Voice Busy Out) LVBO provides the Ubigate iBG2016 with the ability to monitor the state of various network interfaces, both LAN and WAN, and busy back the trunk to the PSTN interface if any of the monitored links should fail.
Page 374: Supplementary Services
Call Manager Interworking mode, Survivable Telephony Mode and Stand Alone Mode. Call Manager Interworking Mode When running in a Call Manager Interworking mode, a Ubigate iBG2016 provides the supplementary services under the control of Call Manager. Calling Line Identification(CLID) Call Forward-All...
Page 375 Call Waiting and Retrieve Call Transfer-Blind Call Transfer-Consultative Distinctive Ring Stand Alone Mode When running in a Stand Alone mode, a Ubigate iBG2016 provides the following supplementary services to the FXS subscribers connected to itself. CLID Call Hold and Retrieve Call Pickup Group...
Page 376: Table 1.1 High Availability Cases
CHAPTER 1. Voice Feature E911 Support Ubigate iBG2016 supports an E911 feature. E911 is an emergency telephone system capable of automatically displaying the callback number(and in some cases the location) of a person who dials emergency call numbers(911) to request emergency help from public safety agencies.
Page 377 If Ubigate iBG2016 detects connection fail, it changes to Survivable Telephony mode automatically. In Survivable Telephony mode, Ubigate iBG2016 acts as a SIP server for local call. Using IP phone location and subscriber profile information, Ubigate iBG2016 provides basic call and restricted supplementary service.
Page 378: Voice Deployment Scenario
Ubigate iBG2016 VoIP system. PSTN Toll Bypass Ubigate iBG2016 provides voice and fax toll bypass capabilities as shown in Figure 26.4. In this scenario a telephonic device attached to a PBX or Key Phone System will be connected to Ubigate iBG2016 through an analog or digital trunk connection.
Page 379 Ubigate iBG2016 Configuration Guide/Ed.00 IP Phones The second scenario of an IP phone attached to Ubigate iBG2016 as shown in Figure 26.5. The SIP phone communicates directly with the Call Manager using SIP Protocol that is passed through Ubigate iBG2016. The Call Managers communicate with each other across the IP network via SIP to establish and maintain the call.
Page 380 The Network Management System uses Simple Network Management Protocol(SNMP) to communicate with Ubigate iBG2016 systems. The SNMP ‘get’ and ‘set’ commands can be used to configure either system and retrieve current configuration and status information.
Page 381: Introduction To Voip Gateway Features
Ubigate iBG2016 Configuration Guide CHAPTER 2. VoIP Gateway Management Introduction to VoIP Gateway Features VoIP Gateway function is used to deliver voice calls between PSTN and IP network. For interwork with PSTM over IP network, such call processing protocols as SIP, H.323, MGCP, etc. are used over IP network. Ubigate iBG2016 supports SIP and H.323 out of VoIP Call processing protocols.
Page 382: Chapter 2. Voip Gateway Management
IP Address of the interface to be bound This procedure should be executed first before executing the bind command. Configuration Steps configure terminal − interface − ip address − exit − Detailed Steps © SAMSUNG Electronics Co., Ltd.
Page 383 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal Interface type number Enters interface configuration mode to configure specific Example) interface. /configure# interface Ethernet 0/0 ip address ip_address subnet_mask Configure a IP Address for an interface.
Page 384 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway bind control interface type num Sets source interface for signaling. Example) /configure/voip-gateway# bind control interface ethernet 0/0 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 385 Ubigate iBG2016 Configuration Guide/Ed.00 bind media To specify the source address of media stream, you have to do the followings. Configuration Steps configure terminal − voip-gateway − bind media − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 386 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway host ip-address ip-address Sets source ip address for signaling and media streams. Example) /configure/voip-gateway# host ip- address 90.90.90.90 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 387 Ubigate iBG2016 Configuration Guide/Ed.00 Enabling or Disabling Voip Services There are two ways of enabling or shutting down VoIP service. One uses a shutdown command in voip-gateway configuration mode, the other one uses a shutdown command in sip-ua configuration mode or h323-gateway configuration mode.
Page 388 Manager. All calls of Ubigate iBG2016 in a Call Manager Inter-working mode pass through Call Manager. If a Call Manager is not set, a Ubigate iBG2016 runs in a Stand Alone mode. You can specify the SIP signaling IP Address and port of Call Manager using ip-address command in a call-server configuration mode, and also specify optionally the registration expire value in a Call Manager Inter-working mode.
Page 389 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway call-server Enters sip-ua configuration mode. Example) /configure/voip-gateway# call-server ip-address ip-addr [udp | tcp | tls] [sip...
Page 391: Introduction To Sip Gateway Features
Ubigate iBG2016 Configuration Guide CHAPTER 3. SIP Gateway Management Introduction to SIP Gateway Features Information about SIP SIP is a simple, Text-based protocol that uses requests and responses to establish communication among the various components in the network and to...
Page 392 Whether the endpoint functions as a UAC or a UAS depends on the user agent that initiated the request. SIP proxy and redirect servers SIP user Agents(Uas) SIP gateway PSTN Legacy PBX Figure 3.1 Architecture of SIP Network © SAMSUNG Electronics Co., Ltd.
Page 393 Ubigate iBG2016 Configuration Guide/Ed.00 From an architectural standpoint, the physical components of a SIP network can be grouped into two categories: clients(endpoints) and servers. Figure 28.1 illustrates the architecture of a SIP network. SIP Client Phones User agent which can attempt or receive a call voluntarily.
Page 394 Manager, and the response is delivered to a caller. A caller sends ACK for the response. A session between a caller and callee is established, and session data is delivered to caller and callee using Real-time Transfer Protocol(RTP). © SAMSUNG Electronics Co., Ltd.
Page 395 Ubigate iBG2016 Configuration Guide/Ed.00 How SIP Works with a Proxy Server If a proxy server is used, the caller user agent sends an INVITE request to the proxy server, the proxy server determines the path, and then forwards the request to the called party. The called party responds to the proxy server, which in turn, forwards the response to the caller.
Page 396 User agents Client Server Proxy Redirect Figure 3.3 SIP Response Through a Proxy server IP-based network Client Client Server Server User agents User agents Client Server Proxy Redirect Figure 3.4 SIP Session Through a Proxy Server © SAMSUNG Electronics Co., Ltd.
Page 397 Ubigate iBG2016 Configuration Guide/Ed.00 How SIP Works with a Redirect Server If a redirect server is used, the caller user agent sends an INVITE request to the redirect server, the redirect server contacts the location server to determine the path to the called party, and then the redirect server sends that information back to the caller.
Page 398 CHAPTER 3. SIP Gateway Management Invite 302 Moved ternporarity IP-based Client Client network Server Server User agents User agents Proxy Redirect Figure 3.6 SIP Request Through a Redirect Server © SAMSUNG Electronics Co., Ltd.
Page 399 Ubigate iBG2016 Configuration Guide/Ed.00 SIP Call Flows This section describes the basic SIP call flow in an SIP gateway. SIP Gateway to SIP Gateway-Call Setup and Disconnect Figure 28.7 shows a successful gateway-to-gateway call setup and disconnect. The two end users are User A and User B. User A is located at PBX A, which is connected to SIP gateway 1 via a T1/E1.
Page 400: Table 3.1 Call Setup And Disconnect
SIP Gateway 1 receives Connect ACK from PBX A. Connect ACK indicates that Connect was received normally. SIP Gateway 2 sends ACK request to SIP Gateway2. ACK request indicates that SIP Gateway 1 received 200 OK response normally. © SAMSUNG Electronics Co., Ltd.
Page 401 Ubigate iBG2016 Configuration Guide/Ed.00 Table 3.1 Call Setup and Disconnect (Continued) Message Description Connect ACK Upon receiving ACK, SIP Gateway2 sends Connect ACK to PBX B. Disconnect If a subscriber hangs up the phone, SIP Gateway 2 receives Disconnect from PBX B. Disconnect indicates that User B requested a call release.
Page 402 2-way Voice Path 2-way RTP channel 2-way Voice Path 19. Disconnect 20. BYE 21. Disconnect 22. Release 23. Release 25. Release 24. 200 OK Complete 26. Release Complete Figure 3.8 SIP Gateway-to-SIP Gateway-Call Via SIP Redirect Server © SAMSUNG Electronics Co., Ltd.
Page 403: Table 3.2 Call Via Redirect Server
Ubigate iBG2016 Configuration Guide/Ed.00 Table 3.2 Call via Redirect Server Message Description Setup SIP Gateway 1 receives Setup from PBX A. Setup indicates the call attempt from User A to User B. INVITE SIP Gateway 1 sends INVITE request to a redirect server.
Page 404 SIP Gateway 1 sends 200 OK to SIP Gateway 2. 200 OK indicates that a session was terminated normally by BYE request. Release Complete Receives Release Complete in regard to Release. Release Complete Sends Release Complete in regard to Release. © SAMSUNG Electronics Co., Ltd.
Page 405 Ubigate iBG2016 Configuration Guide/Ed.00 SIP Gateway to SIP Gateway-Call via Proxy Server Figure 28.9 shows the call of SIP Gateway to SIP Gateway using SIP Proxy server. Table28.3 briefly describes the messages used in the call flow. User B User A PBX A...
Page 406: Table 3.3 Call Via Proxy Server
200 OK Proxy Server 2 sends 200 OK to SIP Gateway 1. Connect Upon receiving 200 OK, SIP Gateway1 sends Connect to PBX A. Connect ACK SIP Gateway 1 receives Connect ACK from PBX A. © SAMSUNG Electronics Co., Ltd.
Page 407 Ubigate iBG2016 Configuration Guide/Ed.00 Table 28.3 Call via Proxy Server (Continued) Message Description SIP Gateway 1 sends ACK request to a Proxy server. ACK request indicates that SIP Gateway 1 received 200 OK response normally. Proxy server sends ACK request to a SIP Gateway2.
Page 408 AAA server. For authorization, the existing access lists are used. Support for configurable expiration time for SIP REGISTERs and maximum number of proxies or redirect servers that can forward a SIP request. © SAMSUNG Electronics Co., Ltd.
Page 409 Ubigate iBG2016 Configuration Guide/Ed.00 Ability to hide the identity of the calling party by RFC 3325-Private Extensions to the Session Initiation Protocol(SIP) for Asserted Identity within Trusted Networks. Support for sips uri over TLS. capability to periodically refresh SIP sessions by sending repeated UPDATE requests.
Page 410: Configuring Basic Sip Gateway
IP Address of the interface to be bound This procedure should be executed first before executing the bind command. Configuration Steps configure terminal − interface − ip address − exit − Detailed Steps © SAMSUNG Electronics Co., Ltd.
Page 411 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal Interface type number Enters interface configuration mode to configure specific Example) interface. /configure# interface Ethernet 0/0 ip address ip_address subnet_mask Configure a IP Address for an interface.
Page 412 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway bind control interface type num Sets source interface for signaling. Example) /configure/voip-gateway# bind control interface ethernet 0/0 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 413 Ubigate iBG2016 Configuration Guide/Ed.00 bind media To specify the source address of media stream, you have to do the followings. Configuration Steps configure terminal − voip-gateway − bind media − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 414 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway host ip-address ip-address Sets source ip address for signaling and media streams. Example) /configure/voip-gateway# host ip- address 90.90.90.90 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 415 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Basic SIP Call Services This section describes the basic configuration necessary for SIP gateway functions. Since it is essential for SIP call signaling, it should be done before other settings. This section describes how to specify the domain name used in SIP signaling, and the function to enable/disable SIP service.
Page 416 Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway [no] shutdown [forced] Shuts down or enables voip call services Example) /configure/voip-gateway# no shutdown Exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 417 Ubigate iBG2016 Configuration Guide/Ed.00 shutdown in sip-ua configuration mode The procedure to enable or disable SIP service is as follows. Configuration Steps configure terminal − voip-gateway − sip-ua − [no] shutdown − exit − exit − Detailed Steps Step Command...
Page 418 Configuring Call Manager This section describes the configuration necessary for interworking with Call Manager. All calls of Ubigate iBG2016 in a Call Manager Inter-working mode pass through Call Manager. You can specify the SIP signaling IP Address and port of Call Manager using ip-address command in a call-server configuration mode, and also specify optionally the registration expire value in a Call Manager Inter-working mode.
Page 419 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway call-server Enters sip-ua configuration mode. Example) /configure/voip-gateway# call-server ip-address ip-addr [udp | tcp | tls] [sip |...
Page 420 Call Example) Manager by register e164 /configure/ dial-peer/voice/pots 11# register command. you can also e164 configure separate URI for registration by register uri command. exit Exits the current mode Example) /configure/dial-peer/voice/pots 11# exit © SAMSUNG Electronics Co., Ltd.
Page 421 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring SIP Proxy This section describes how to set the SIP proxy used in a Stand-Alone mode. If you set a sip-server as a session target of dial-peer together with SIP proxy setting, it is possible to send an outbound call to SIP proxy.
Page 422 − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal dial-peer voice {pots | voip} tag Enters VoIP dial-peer configuration mode. Example) /configure# dial-peer voice voip 100 © SAMSUNG Electronics Co., Ltd.
Page 423 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose destination-pattern dest-pattern Sets a destination pattern. Example) /configure/ dial-peer/voice/voip 100# dest-pattern 1234 session target sip-server Sets the session target as sip- server. Example) /configure/ dial-peer/voice/voip 100# session target sip-server exit Exits the current mode...
Page 424 Example) expires and retry interval. /configure/voip-gateway/sip-ua# registrar ip-address ipv4:90.90.90.100 exit Exits the current mode Example) /configure/voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 425 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Dial-Peer for Registration The procedure of registration in SIP Registrar per dial-peer is as follows. Configuration Steps configure terminal − dial-peer − destination-pattern − register {e164 | uri} − exit − Detailed Steps...
Page 426 3xx class of response. In a Call Manager Inter-working mode, all SIP incoming calls of Ubigate iBG2016 is redirected to Call Manager. This means that all calls are controlled by Call Manager.
Page 427 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Dial-Peer for SIP Redirect Processing You can limit the Redirect processing count per dial-peer in the following way. Configuration Steps configure terminal − dial-peer − max-redirects − exit − Detailed Steps Step Command...
Page 428: Table 3.4 Table Default Pstn Cause Code To Sip Status Code Mapping
The opposite is also true: SIP status codes or events are mapped to PSTN cause codes. A Ubigate iBG2016 provides a SIP- PSTN default mapping table. The method for an operator to change the mapping is also provided. You can change the mapping using set pstn-cause command and set sip-status command.
Page 429 Ubigate iBG2016 Configuration Guide/Ed.00 Table 28.4 Table Default PSTN cause code to SIP status code mapping (Continued) PSTN Cause Description SIP Event Code Number changed 410 Gone Non-selected user clearing 404 Not found Destination out of order 404 Not found...
Page 430: Table 3.5 Default Sip Event To Pstn Cause Code Mapping
Interworking, unspecified 415 Unsupported media type Service or option not implemented 420 Bad extension Interworking, unspecified 480 Temporarily unavailable No user response 481 Call leg does not exist Interworking, unspecified 482 Loop detected Interworking, unspecified © SAMSUNG Electronics Co., Ltd.
Page 431 Ubigate iBG2016 Configuration Guide/Ed.00 Table 28.5 Default SIP Event to PSTN cause code mapping (Continued) SIP Event PSTN Cause code Description 483 Too many hops Interworking, unspecified 484 Address incomplete Address incomplete 485 Address ambiguous Unallocated number 486 Busy here...
Page 432 Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit show sip-ua maps pstn-sip Display current pstn cause code to sip status code mapping table. Example) # show sip-ua maps pstn-sip © SAMSUNG Electronics Co., Ltd.
Page 433 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure SIP Status Code to PSTN Cause Code Mapping You can change the SIP Status code to PSTN Cause code mapping in the following way. Configuration Steps configure terminal − voip-gateway − sip-ua −...
Page 434 SIP-UA configuration mode, you can control the method for Ubigate iBG2016 to handle the SDP delivered via 180 response. To the contrary, it is possible to control whether, when Ubigate iBG2016 sends a 18x provisional response including SDP, to send 180 or 183 response, or send it together with SDP, by using the alert-cut-through command.
Page 435 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose [no] disable-early-media 180 Disables or re-enables early media processing for 180 Example) provisional response. Default is /configure/voip-gateway/sip-ua# enable. disable-early-media 180 exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode...
Page 436 Min-SE, which is used to limit the minimum value of the session update cycle. Restrictions for Session Timer Ubigate iBG2016 uses a UPDATE method as the method of session update. Even though Session update is not done using INVITE, when INVITE for session update is received, it is processed normally.
Page 437 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Session Timer Feature To enable the Session Timer Feature, you can set Min-Se in the following way. Configuration Steps configure terminal − voice service sip − min-se − exit − Detailed Steps Step...
Page 438 This section describes how to set the use of Reason header in SIP message. To deliver the Q.850 Cause of PSTN via SIP message in SIP-PSTN interworking, a reason header is added to SIP message. Ubigate iBG2016 loads the Q.850 Cause received from PSTN to the reason header of SIP message;...
Page 439 To complement this, an additional method called PRACK is used to ensure reliability of Provisional response. Ubigate iBG2016 supports this function by default, or it can disable or forcibly provide the function.
Page 440 Exits the current mode Example) /configure/voice/service/sip# exit Configuring SIP DTMF Relay This section describes how to set the method of delivering DTMF tone via SIP signaling. To relay DTMF tone, Ubigate iBG2016 supports the 4 methods as follows. inband rtp-nte sip-notify...
Page 441 Ubigate iBG2016 Configuration Guide/Ed.00 Field Description event The DTMF event that is between 0-9, A, B, C, D, #, * and flash. E signifies the end bit. If E is set to a value of 1, the NOTIFY message contains the end of the DTMF event. Thus, the duration parameter in this final NOTIFY message measures the complete duration of the event.
Page 442 Specifies how to relay DTMF tone sip-notify] between telephony interface and SIP network. Example) /configure/voip-gateway/sip-ua# dtmf- relay sip-info exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 443 Ubigate iBG2016 Configuration Guide/Ed.00 To set the DTMF Relay method for each dial-peer, follow the procedure below. Configuration Steps configure terminal − dial-peer − dtmf-relay − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example)
Page 444 Enters sip-ua configuration mode. Example) /configure/ voip-gateway# sip-ua [no] suspend-resume Enables or Disables ISDN Suspend/Resume support. Example) /configure/voip-gateway/sip-ua# suspend-resume exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 445 Configuring QSIG tunneling over SIP This section describes how to make the settings necessary to deliver QSIG message via SIP signaling. Ubigate iBG2016 provides the function to load QSIG message in SIP message. Its purpose is for QSIG message to be delivered transparently in SIP section, when different QSIG network is connected to SIP.
Page 446 And, MWI function should be set for each FXS voice port. Restrictions for SIP MWI Feature The MWI feature of Ubigate iBG2016, via interworking with MWI server, only notifies if a waiting message exists via audible or visible indication, but does not provide the ‘Call redirection to the voice-mail server when the line is...
Page 447 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose mwi-server ip-address ip-address Sets the ip address of MWI Server. [udp | tcp | tls] [sip | sips] and you can configure transport and uri type. Example) /configure/voip-gateway/sip-ua# mwi-server ip-address ipv4:90.90.90.200 exit...
Page 448 Configuring Calling-Info for SIP Calls This section describes how to set the calling informations for SIP Calls forcibly. Ubigate iBG2016 ignore the caling name and number received from Calling party and change them to what configured. To change the calling...
Page 449 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway sip-ua Enters sip-ua configuration mode. Example) /configure/ voip-gateway# sip-ua [ no ] calling-info pstn-to-sip Sets the calling-info for pstn-to-sip { unscreened discard | name <name...
Page 450 Sets the calling-info for sip-to-pstn { unscreened discard | name <name call. string> number <number> } Example) /configure/voip-gateway/sip-ua# calling-info sip-to-pstn number 7778888 exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 451 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring SIP Entity Monitoring Features This section describes how to enable SIP Entity Monitoring Features. Ubigate iBG2016 send OPTIONS message to monitor SIP remote entities. If no response received, that entity is concidered as not operating status and new call is not routed to that entity.
Page 452 Enables or Disables SIP entity seconds> retry <retry seconds> monitoring feature. Example) /configure/voip-gateway/sip-ua# peer-mon duration 200 retry 30 exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 453 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Miscellaneous Features This section describes the miscellaneous SIP settings not discussed in the previous section. These commands are available in SIP UA Configuration mode and SIP Service Configuration mode. For the information how to use the commands, see the Command Reference.
Page 454: Configuring Sip Security Features
SIP server in advance. SIP server requesting the authentication of SIP client response to the request sent from Ubigate iBG2016 with 401 response. Using the information contained in 401 response and UserName/Password, Ubigate iBG2016 adds Authorization Token to a request.
Page 455 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal dial-peer voice {pots | voip} tag Enters POTS dial-peer configuration mode Example) /configure# dial-peer voice pots 11 authentication username username Configure a user name and...
Page 456 [realm realm] password and realm for system Example) default /configure/voip-gateway/sip- ua#authentication username Ubigate iBG2016 password 12345678 realm proxy.com exit Exits the current mode Example) /configure/voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 457 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring SIPS URI with TLS transport This section describes how to set SIP signaling via TLS connection. To do this, set URI type to SIPS, and change the transport type to TLS. You can change the URI type and transport type in two ways. That is, you can make a setting which applies to the entire SIP signaling, or individual dial-peers of SIP type.
Page 458 Example) /configure/ dial-peer/voice/voip 100# sip- class uri sips session transport [udp | tcp | tls] Specifies SIP transport type. Example) /configure/ dial-peer/voice/voip 100# session transport tls Exit Exits the current mode Example) /configure/dial-peer/voice/voip 100# exit © SAMSUNG Electronics Co., Ltd.
Page 459 SIP Signaling. Prerequisites for S/MIME Configuration Before specifying a certificate and private key to POTS Dial-peer, a certificate and private key should be saved in the file system of Ubigate iBG2016 in a PEM format. How to Configure S/MIME Support You can specify the certificate and private key to a desired dial-peer where S/MIME will be used, in the following way.
Page 460 Example) /configure# dial-peer voice voip 100 srtp crypto Specifies SRTP crypto suite. You [AES_CM_128_HMAC_SHA1_32 | can specify either AES_CM_128_HMAC_SHA1_80] AES_CM_128_HMAC_SHA1_32 Example) AES_CM_128_HMAC_SHA1_80 /configure/ dial-peer/voice/voip 100# , or both of them. srtp crypto AES_CM_128_HMAC_SHA1_32 © SAMSUNG Electronics Co., Ltd.
Page 461: Verifying And Troubleshooting Sip Features
Verifying and Troubleshooting SIP Features This section describes how to use the show command and debug command to verify and troubleshoot the SIP feature of Ubigate iBG2016. Using show commands You can use the show command commands as follows to confirm or see the current status of the SIP feature settings.
Page 462 3600 uri type is system show sip-ua registration Shows the registration status of Ubigate iBG2016 and each dial-peer. Example) # show sip-ua registeration line peer expires registered Call Server sip:90.90.90.100...
Page 463 Ubigate iBG2016 Configuration Guide/Ed.00 show sip-ua parameters Shows other SIP settings. Example) # show sip-ua parameters SIP configuration SIP-UA : up operation mode = Call-server mode auth username = samsung auth password = samsung SIP-UA is use call-server SIP-UA use ip address for call-server : ipv4:10.254.139.50...
Page 464 : udp 10.254.167.244:0 -MEDIA INFO -PAYLOAD ID(CODEC) : g711u -RTP LOCAL ADDRESS : 10.10.10.10:16388 -RTP REMOTE ADDRESS : 10.10.10.10:16386 -DTMF PAYLOAD TYPE : 101 ------------------------------------------------------------ ------------------------------------------------------------ SIP-CALL CTXID ------------------------------------------------------------ -SIP-CALLID AAFfkD4bDhsAAAAAAAAAAA@10.254.167.249 -CALL-STATES : PIC_O_Active -FROM © SAMSUNG Electronics Co., Ltd.
Page 465 Ubigate iBG2016 Configuration Guide/Ed.00 <sip:2301@samsung.com>;tag=7267517 <sip:2302@samsung.com>;tag=7267170 -SOURCE ADDRESS : udp 10.254.167.249:0 -DESTINATION ADDRESS : udp 10.254.167.244:0 -MEDIA INFO -PAYLOAD ID(CODEC) : g711u -RTP LOCAL ADDRESS : 10.10.10.10:16386 -RTP REMOTE ADDRESS : 10.10.10.10:16388 -DTMF PAYLOAD TYPE : 101 ------------------------------------------------------------ TOTLA NUMBER: 2 show sip-ua connections Shows the SIP connection status.
Page 466: Using Debug Commands
Displays the debugging messages of SIP call processing task. debug sip stack Displays the debugging messages of SIP Stack level. debug sip dump req Displays SIP message’s request and response line. debug sip dump msg Displays SIP messages. © SAMSUNG Electronics Co., Ltd.
Page 467: Table 4.1 Standards
Ubigate iBG2016 Configuration Guide CHAPTER 4. H.323 Gateway Management Introduction to H.323 Gateway Features This section describes how H.323 gateway works in regard to the features stated below. Call Setup Procedure RAS Signalling Codec Negotiation Support for Supplementary Services Call Statistics Conformance H.323 gateway basically follows the recommendations below.
Page 468: Chapter 4. H.323 Gateway Management
Signalling and Gatekeeper Routed Call Signalling depending on the call model supported by a gatekeeper. This section will discuss how Ubigate iBG2016 performs a call setup procedure in dial-peer depending on the registered information(session target). The H.225.0 SETUP message from the H.323 Endpoint registered as a session target on dial-peer follows the call procedure illustrated in Figure 29.1.
Page 469 Ubigate iBG2016 Configuration Guide/Ed.00 If H.323 gateway is not registered in a gatekeeper, the H.225.0 SETUP message from the H.323 Endpoint not registered as a session target on dial- peer reject calls as in Figure 29.2. iBG2016 a known H.323 endpoint...
Page 470 Direct Call Signalling method. iBG2016 Gatekeeper a known H.323 endpoint SETUP CallProceeding Alerting or Progress Connect Call Signalling Messages RAS Messages Figure 4.3 Call Setup from a unknown H.323 Endpoint, with Gatekeeper © SAMSUNG Electronics Co., Ltd.
Page 471 Ubigate iBG2016 Configuration Guide/Ed.00 When H.323 gateway is registered in a gatekeeper, the H.225.0 SETUP message from gatekeeper follows the call procedure illustrated in Figure 29.4. Figure 29.4 shows the case where a gatekeeper usually uses a Gatekeeper Routed Call Signalling.
Page 472 In this case, call setup is done regardless of the existence of the gatekeeper to interwork over H.323 network. iBG2016 Gatekeeper a known H.323 endpoint SETUP CallProceeding Alerting or Progress Connect Call Signalling Messages RAS Messages Figure 4.5 Call Setup to a known H.323 Endpoint © SAMSUNG Electronics Co., Ltd.
Page 473 Ubigate iBG2016 Configuration Guide/Ed.00 When a ‘gatekeeper’is designated as a session target, the H.225.0 SETUP message sent from H.323 gateway follows the call procedure illustrated in Figure 29.6. Figure 29.6 shows the case where a gatekeeper usually uses a Gatekeeper Routed Call Signalling.
Page 474: Table 4.2 Ras Registration Trial
Both primary and no gatekeeper-name secondary gatekeeper info are deleted. When H.323 Service is turned shutdown(forced) When registration was ‘Down’ (h323-gateway made. configuration mode) When URQ is explicitly received When registration was from a gatekeeper. made. © SAMSUNG Electronics Co., Ltd.
Page 475 Ubigate iBG2016 Configuration Guide/Ed.00 H.323 gateway, using the primary and secondary Gatekeeper information, performs registration as shown in Figure 29.7.(However, the Alternative Gatekeeper Procedure is omitted from the flowchart.) start current-gatekeeper is primary gatekeeper send full-RRQ to current-gatekeeper recv RCF?
Page 476 RAS registration procedure; and after the entire alternative gatekeeper list is selected, the RAS registration procedure is performed with the secondary gatekeeper or original gatekeeper according to the Figure 29.7. © SAMSUNG Electronics Co., Ltd.
Page 477 Ubigate iBG2016 Configuration Guide/Ed.00 Codec Negotiation Codec Negotiation reports multiple codecs, which H.323 gateway can support in the H.245 capability exchange stage, to a remote H.323 endpoint, so that a single codec can be selected ultimately in a call establishment stage. Supply of multiple codecs in the H.245 capability exchange stage increases the...
Page 478: Table 4.4 Supported Supplementary Services In H.323 Gateway
H.323 party cannot presses a specific feature code after be other party(B, C) hook-off, C can converse with A, than A-party. instead of B. ‘call-pickup-group’ command should be set in a POTS dial- peer configuration mode.. © SAMSUNG Electronics Co., Ltd.
Page 479: Table 4.5 H.323 Call Statistics Command
Accumulated data per H.225.0 RAS message transceived by H.323 gateway after Ubigate iBG2016 is booted. show h323-gateway release- Accumulated data per cause of H.225.0 cause ReleaseComplete message transceived by H.323 gateway after Ubigate iBG2016 is booted. © SAMSUNG Electronics Co., Ltd.
Page 480: Table 4.6 H.323 Call Tracing & Debug Command
[ deb0 | deb1 | deb2 | info | all ] information is displayed. - deb0: H.323 Message send and received - deb1: Internal Call Control Message and Call State transition information - deb2: detailed message processing information - info: not used © SAMSUNG Electronics Co., Ltd.
Page 481: Configuring A H.323 Gateway
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring a H.323 Gateway This section describes how to configure the items below. Prerequisites for Configuring H.323 gateways Configuring H.323 Bind Shutting Down and Enabling H.323 Services Configuring Basic H.323 Services Configuring Gateway RAS Configuring Multiple Codecs Configuring Enhanced H.323 Services...
Page 482 Example) interface. /configure# interface Ethernet 0/0 ip address ip_address subnet_mask Configures a IP Address for an interface. Example) /configure/interface/ethernet(0/0)# ip address 90.90.90.90 255.255.255.0 exit Exits the current mode Example) /configure/interface/ethernet(0/0)# exit © SAMSUNG Electronics Co., Ltd.
Page 483 Ubigate iBG2016 Configuration Guide/Ed.00 shutdown voip-gateway This procedure should be executed first before executing the bind command or host ip-address command. Configuration Steps configure terminal − voip-gateway − shutdown − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 484 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway bind control interface type num Sets source interface for signaling. Example) /configure/voip-gateway# bind control interface ethernet 0/0 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 485 Ubigate iBG2016 Configuration Guide/Ed.00 bind media To specify the source address of media stream, you have to do the followings. Configuration Steps configure terminal − voip-gateway − bind media − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 486 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway host ip-address ip-address Sets source ip address for signaling and media streams. Example) /configure/voip-gateway# host ip-address 90.90.90.90 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
Page 487: Table 4.7 Combination To Enable Or Shutdown H.323 Service
Ubigate iBG2016 Configuration Guide/Ed.00 Shutting Down and Enabling H.323 Services This section describes the basic configuration necessary for H.323 gateway functions. Since it is essential for H.323 call signaling, it should be done before other settings. This section also describes how to enable or disable H.323 service.
Page 488 /configure/voip-gateway# exit shutdown in h323-gateway configuration mode The procedure to enable or disable H.323 service is as follows. Configuration Steps configure terminal − voip-gateway − h323-gateway − [no] shutdown − exit − exit − Detailed Steps © SAMSUNG Electronics Co., Ltd.
Page 489 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway h323-gateway Enters h323-gateway configuration mode. Example) /configure/voip-gateway# h323- gateway [no] shutdown [forced] Shuts down or enables H.323...
Page 490 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal dial-peer voice voip tag Enters dial-peer configuration mode for the VoIP peer designated by tag. Example) /configure# dial-peer voice voip 100 © SAMSUNG Electronics Co., Ltd.
Page 491 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose destination-pattern number Specifies the telephone number associated with the dial peer Example) Matches dialed digits to a telephony /configure/dial-peer/voice/voip device. 100#destination-pattern 02.T The string argument is a series of digits that specifies the E.164 or private dialing plan telephone number.
Page 492 H.323 gateway. This section includes the followings. How to register or unregister with Gatekeeper How to configure RAS Retries and Timers How to configure RRQ TimeToLive Value © SAMSUNG Electronics Co., Ltd.
Page 493 Ubigate iBG2016 Configuration Guide/Ed.00 Prerequisites for Configuring RAS The followings should be done first before H.323 gateway performs RAS signalling. H.323 services should be already enabled. The information of the H.323 gateway should be previously set on the gatekeeper to interwork.
Page 494 Example) gatekeeper, this command causes /configure/voip-gateway/h323- RAS unregistration. gateway# gatekeeper ip-address ipv4:192.168.10.200 1719 primary exit Exits the current mode Example) /configure/voip-gateway/h323- gateway# exit exit Exits the current mode Example) /configure/voip-gateway#exit © SAMSUNG Electronics Co., Ltd.
Page 495 Ubigate iBG2016 Configuration Guide/Ed.00 RAS registration or unregistration using ‘gatekeeper-name’ command. Configuration Steps configure terminal − voip-peer − ip-address − exit − voip-gateway − h323-gateway − h323-id − [no] gatekeeper id − [no] gatekeeper name − exit − exit −...
Page 496 ‘no’ flag is used and H323 /configure/voip-gateway/h323-gateway# gateway is registerd with a gatekeeper –name gk.samsung.com pri- gatekeeper, this command gatekeeper primary causes RAS unregistration. exit Exits the current mode Example) /configure/voip-gateway/h323-gateway# exit exit Exits the current mode Example) /configure/voip-gateway#exit © SAMSUNG Electronics Co., Ltd.
Page 497 Ubigate iBG2016 Configuration Guide/Ed.00 How to configure RAS Retries and Timers ‘ras timeout’ command sets the time(in second) for H.323 gateway to wait before resending a RAS message to gatekeeper. ‘ras retry’ command specifies the number of retransmissions of RAS message when the specified timeout value is exceeded.
Page 498 The argument is as follows: - value:Number of times that the gateway Example) resends messages to the gatekeeper after /configure/voice/service/h323 timeout. Range: 1 to 10. ras retry rrq 5 Exit Exits the current mode Example) /configure/voice/service/h323 # exit © SAMSUNG Electronics Co., Ltd.
Page 499 Ubigate iBG2016 Configuration Guide/Ed.00 How to configure RRQ TimeToLive ‘ras rrq-ttl’ command specifies the time which should be considered as that H.323 gateway is running after a gatekeeper receives the lightweight RRQ for the last time. H.323 gateway sets this value(TimeToLive value) within a RRQ message and sends it to a gatekeeper.
Page 500 5 being the least preferred. Example) - codec-type:Type of codec referred. /configure/voice/class/codec - interval-time:10/20/30/40/50/60(ms) 100#codec-preference 1 Repeat this command to specify the g711alaw 20 preferred selection order for additional codecs, if required. © SAMSUNG Electronics Co., Ltd.
Page 501 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose exit Exits the current mode Example) /configure/voice/class/codec 100# exit dial-peer voice voip tag Enters dial-peer configuration mode for the VoIP peer designated by tag Example) /configure#dial-peer voice voip 1000 voice-class codec tag...
Page 502 DTMF Relay method can be set for all H.323 calls, or differently for each dial-peer. To set it for all H.323 calls, follow the procedure below. Configuration Steps configure terminal − voice service h323 − dtmf-relay − exit − Detailed Steps © SAMSUNG Electronics Co., Ltd.
Page 503 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice service h323 Enters ‘voice service h323’ configuration mode. Example) /configure# voice service h323 dtmf-relay {inband | rtp-nte | h245- Specifies how to relay DTMF tone...
Page 504 H.245 UserInputIndication(alphanumeric) message. - queued-digits: DTMF is sent using the voice stream according to the RFC2833 recommendation; and additionally, Queued Digits are supported for analog-FXS subscribers. Exit Exits the current mode Example) /configure/dial-peer/voice/voip 100# exit © SAMSUNG Electronics Co., Ltd.
Page 505: Table 4.8 Commands Of 'Voice Service H323' Configuration And
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Enhanced H.323 Services The additional control of H.323 gateway call processing can be done in a ‘voice service h323’ configuration mode or ‘voice class h323’ configuration mode. ‘voice service h323’ configuration is applied to all H.323 calls, while ‘voice class h323’...
Page 506 Enters ‘voice service h323’ configuration mode. Example) /configure# voice service h323 h225 call-start {fast | slow} Specifies how to setup H323 call Example) /configure/voice/service/h323#h225 call-start fast exit Exits the current mode Example) /configure/voice/service/h323#exit © SAMSUNG Electronics Co., Ltd.
Page 507 Ubigate iBG2016 Configuration Guide/Ed.00 h225 early-h245 The settings to execute the Early H245 Procedure during H.323 Call Signalling are as follows. Configuration Steps configure terminal − voice service h323 − h225 early-h245 − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 508 Enters ‘voice service h323’ configuration mode. Example) /configure# voice service h323 h225 h245-tunnel {on|off} Specifies whether h245 tunneling method will be Example) supported during call- /configure/voice/service/h323#h225 h245-tunnel on signaling exit Exits the current mode Example) /configure/voice/service/h323#exit © SAMSUNG Electronics Co., Ltd.
Page 509 Ubigate iBG2016 Configuration Guide/Ed.00 h225 call-response You can determine what H.225.0 message to send as a response to H.225.0 Setup message. Configuration Steps configure terminal − voice service h323 − h225 call-response − exit − Detailed Steps Step Command Purpose...
Page 510: Verifying And Troubleshooting H.323 Features
Verifying and Troubleshooting H.323 Features This section describes how to use the show command and debug command to verify and troubleshoot the H.323 feature of Ubigate iBG2016. Using show commands You can use the show command commands as follows to confirm or see the current status of the H.323 feature settings.
Page 511 Ubigate iBG2016 Configuration Guide/Ed.00 show h323-gateway detailed It shows all the setting values of ‘voice class h323’. Example) # show h323-gateway detailed ========================================================= VOICE SERVICE H323 ========================================================= dtmf-relay: [rtp-nte] tech-prefix: [] h225 call-start : fast h245-tunnel : on early-h245 : off...
Page 512 ========================================================= Current H323 Calls Current Time: 2005/11/29 06:09:55.280 Total: 2 calls ============================================================ ========================================================= CallState SrcIpAddr SrcPort DstIpAddr DstPort StartTime ------------------------------------------------------------ --------------------------------------------------------- CallDelivered 10.254.167.239 1111 10.254.167.235 1720 2005/11/29 06:09:40.370 Active 10.254.167.239 1113 10.254.167.235 1720 2005/11/29 06:09:50.720 © SAMSUNG Electronics Co., Ltd.
Page 513 Ubigate iBG2016 Configuration Guide/Ed.00 Using debug commands You can use the following debug commands to view the debugging messages of an application, or the H.323 message sent or received. debug h323 log Command to view the H.323 message. You can display messages by filtering them with calling number or called number.
Page 515: Introduction To Analog Voice Port Features
Ubigate iBG2016 Configuration Guide CHAPTER 5. Analog Voice Port Introduction to Analog Voice Port Features This chapter describes Analog Voice port Features. Analog Voice port plays a role to transmit voice and call signal between a packet-based network and the existing telephony network.
Page 516 Ring Opened Generator (loop broken) -48DC Ring Battery 2) Hook-Off state Analog FXS Interface or Telephone set or PBX module in submarine Ring Closed Generator (loop hold) -48DC Ring Battery Figure 5.1 Loop Start Signaling © SAMSUNG Electronics Co., Ltd.
Page 517 Ubigate iBG2016 Configuration Guide/Ed.00 Ground Start Signaling It works by using ground and current detectors that allow the network to indicate off-hook or seizure of an incoming call independent of the ringing signal and allow for positive recognition of connects and disconnects.
Page 518 Ring Detector superimposes a Generator 20-Hz 90-VAC ringing voltage over the ring -48DC Ring line to alert the PBX Battery of an incoming call. Figure 5.3 Ground-start signaling for Analog FXS (seizure-state) © SAMSUNG Electronics Co., Ltd.
Page 519 Ubigate iBG2016 Configuration Guide/Ed.00 Analog E & M Interface Analog E & M Interface Analog E&M interface, which uses special signaling paths that are separate from the trunk’s audio path to convey information about the calls. The signaling paths are known as the E-lead and the M-lead. The name E&M is thought to derive from the phrase Ear and Mouth or rEceive and transMit although it could also come from Earth and Magnet.
Page 520 Originating Destination M-wire E-wire M-wire E-wire seizure Min 120 msec Max 6 sec answer Pulse=200 msec Min 70 msec Max 10 sec digits digits Min 200 msec answer Figure 5.5 wink method signaling sequence © SAMSUNG Electronics Co., Ltd.
Page 521 Ubigate iBG2016 Configuration Guide/Ed.00 Delay-Dial Method Delay-dial method enters ‘seizure’ action by hooking off E-lead from the calling side, after a given time, about 200msec, when the calling side takes a look at the status of terminating side, if the terminating side is on hook status (or he/she awaits till the terminating side enters into on-hook status), calling side sends address information.
Page 522 Feed for M, Return for E, to SG to ground connected to - Galvanically isolated from ground Output, Relay Input,referenced Connected to Connected to to ground to ground -48V ground Output, Relay Input,referenced to ground to -48V © SAMSUNG Electronics Co., Ltd.
Page 523: Analog Voice Port Monitoring
Ubigate iBG2016 Configuration Guide/Ed.00 Analog Voice Port Monitoring This section describes the configuration of analog voice port. Analog voice port have an architecture to create a basic configuration of a voice port by which Submarine automatically detects H/W information. Accordingly, when starting up the system, port number of analog voice port is shown automatically to an operator, and it is able to enters into a basic service.
Page 524 DS0. Prerequisites to Configure Analog Voice ports Before configuration of Voice port, the user should predefine the following information and determine the following with interworking Opposite PBX in advance. © SAMSUNG Electronics Co., Ltd.
Page 525: Configuring Analog Fxs Voice Port
Ubigate iBG2016 Configuration Guide/Ed.00 Telephony signaling interface: Analog FXO, FXS or E & M Locale Code(usually the country) for Call Progress Tone or DTMF/MF Variant If FXO, type of Signal: loop-start or ground-start If FXS, type of Signal: loop-start or ground-start or DID If E &...
Page 526 - Sets the number of seconds that the system waits between the caller input of the initial digit and the subsequent digit of dialed string. A valid entry is from 0 to 120. The default is 10 © SAMSUNG Electronics Co., Ltd.
Page 527 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeouts timer-name interdigit - Configures the number of seconds that timer-value the system waits after the caller has input the initial digit or a subsequent digit of the dialed string. If the timeout ends before the Destination is identified, a tone sounds and the call ends.
Page 528 #). The timer character must be a capital T. port slot/subslot/port Maps the dial peer to a specific Port Number exit Exits voice dial-peer configuration mode © SAMSUNG Electronics Co., Ltd.
Page 529 Ubigate iBG2016 Configuration Guide/Ed.00 Predefined ring cadence patterns. Ring Cadence of Analog FXS have a predefined patterns as follow, and can be set up by on-net , or off-net respectively. On-net means an inbound call coming from FXS line in the inside of submarine, on the while, off-net means inbound transit call except that.
Page 530 You can specify addition call- progress tones without exiting custom-cptone configuration mode. Configure>voice class custom-cptone tag dualtone {busy|dialtone|number- unobtainable|ringback} busy - Busy tone. dialtone - Dial tone. number-unobtainable - Number-unobtainable tone. ringback - Ringback tone. © SAMSUNG Electronics Co., Ltd.
Page 531 Ubigate iBG2016 Configuration Guide/Ed.00 Cadence To define the tone-on and tone-off duration for a call-progress tone, use the cadence command in call-progress dualtone configuration mode. Configure>voice class custom-cptone tag dualtone busy cadence {cycle-1-on- time cycle-1-off-time [cycle-2-on-time cycle-2-off-time] [cycle-3-on-time cycle-3-off-time] [cycle-4-on-time cycle-4-off-time]} cycle-1-on-time - Tone-on duration for the first cycle of the cadence pattern, in milliseconds(ms).
Page 532: Configuring Analog Fxo Voice Port
- (default) Uses a closed circuit to indicate off-hook status; used for residential loops. ground-start - Uses ground and current detectors; preferred for PBXs and trunks dial-type {dtmf|mf} Specifies the dialing method for outgoing calls © SAMSUNG Electronics Co., Ltd.
Page 533 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose ring number number (FXO only) Specifies the maximum number of rings to be detected before an incoming call is answered by the router. The default is 1. locale locale Selects the two-letter locale for the voice call...
Page 534 #). The timer character must be a capital T. port slot/subslot/port Maps the dial peer to a specific Port Number exit Exits voice dial-peer configuration mode © SAMSUNG Electronics Co., Ltd.
Page 535: Configuring Analog E & M Voice Port
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Analog E & M Voice Port This section describes the configuration of analog E&M voice port. How to Configure Analog E&M Voice Port Unlike FXO, FXS, E & M voice port is not enough to send voice data as a default value, the set up values of E&N voice port should be sure to be...
Page 536 The following Figure 30.8 shows a whole Jumper information for E & M Board. J1, J2, J11, J12 CH0: J1, J2 CH1: J11, J12 (Black line) CPLD Vcc_3.3V Download Type J6/J7 (E, SG) J4/J5 (M) Not used 1-2, 3-4 Figure 5.8 E & M Jumper Information © SAMSUNG Electronics Co., Ltd.
Page 537 Ubigate iBG2016 Configuration Guide/Ed.00 Type I, II, III, V There are five different E&M interface types or models: Type I, II, III, IV, and V (Type IV is not supported. Each type has a different wiring arrangement, hence a different approach to transmit E & M supervision signaling(on-hook /off-hook signaling).
Page 538 Specifies the dialing method for outgoing calls locale locale Selects the two-letter locale for the voice call progress tones and other locale-specific parameters to be used on this voice port The Default is us ex) locale us © SAMSUNG Electronics Co., Ltd.
Page 539 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose timing {wait- To change timing parameters. wink|wink- wait-wink - Specifies maximum amound of time to wait|wink- wait wink for Outbound Call duration|delay- wink-wait - Specifies maximum wink-wait duration, in duration|delay- milliseconds, for a wink-start signal start } timing-value Valid entries are from 100 to 5000.
Page 540 #). The timer character must be a capital T. port slot/subslot/port Maps the dial peer to a specific Port Number exit Exits voice dial-peer configuration mode © SAMSUNG Electronics Co., Ltd.
Page 541: Configuring Analog Did
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Analog DID This section describes the configuration of analog DID Feature. DID Feature Overview This section describes the analog DID Feature Direct Inward Dialing(DID), which is the service proposed by Telephone service providers, is the service to allow a caller to dial to extension of PBX without help of an attendant.
Page 542 - if the voice port must use the delay start protocol locale locale Selects the two-letter locale for the voice call progress tones and other locale-specific parameters to be used on this voice port The Default is us ex) locale us © SAMSUNG Electronics Co., Ltd.
Page 543 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeouts timer-name timer- To change timeouts parameters value initial - Sets the number of seconds that the system waits between the caller input of the initial digit and the subsequent digit of dialed string.
Page 544: Configuring E911 Cama
Enhanced 911(E911) purposes. E911 is an emergency telephone system capable of automatically displaying the callback number(and in some cases the location) of a person who dials 911 to request emergency help from public safety agencies. © SAMSUNG Electronics Co., Ltd.
Page 545 Ubigate iBG2016 Configuration Guide/Ed.00 For further information on E911, see ‘American National Standard T1.422- 2001’. End Office 9-1-1 Service Provider Selective PSAP ANI/ALI Router CAMA Trunks Controller Tandem Aquired for 911 Traffic PSTN Traffic ALI Database Analog Phone IP Phone Public Safety Answering Point Figure 5.9 E911 Network Diagram...
Page 546 Upon answer, the PSAP will disconnect audible ringing, connect the call to the answering attendant, display the ANI at the answering position, and return an off-hook signal to the PBX indicating that the call has been answered. © SAMSUNG Electronics Co., Ltd.
Page 547 Ubigate iBG2016 Configuration Guide/Ed.00 PBX E911 SWITCH 1. SEIZE --------------- (OFF-HOOK) -----------------------> 2. <----------- WINK START (l40 ms TO 290 ms) -------------> 3. KP 911 ST ----------------------------------------------> 4. <------------------------------------------------OFF-HOOK 5. KP I NXXXXXX ST (ANI) ----------------------------------> 6. <--------------- TALKING PATH CONNECTED ---------------->...
Page 548 Bell South E911 Case bellsouteh locale locale Selects the two-letter locale for the voice call progress tones and other locale-specific parameters to be used on this voice port The Default is us ex) locale us © SAMSUNG Electronics Co., Ltd.
Page 549 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeouts timer-name To change timeouts parameters timer-value initial - Sets the number of seconds that the system waits between the caller input of the initial digit and the subsequent digit of dialed string.
Page 550 #). The timer character must be a capital T. port slot/subslot/port Maps the dial peer to a specific Port Number exit Exits voice dial-peer configuration mode © SAMSUNG Electronics Co., Ltd.
Page 551: Digital Trunk E1-R2 Features
Ubigate iBG2016 Configuration Guide CHAPTER 6. Digital Voice Port This chapter describes the digital voice port Features. The digital voice port commands discussed in this section configure channelized T1 or E1 connections. Digital Trunk E1-R2 Features Digital Trunk T1-CAS Features...
Page 552 Create ds0-groups to manage the DS0 channels on the E1 trunk Configure ds0-group with sub-commands such as ‘timeslots’ and ‘signal cas’ Customize country variants in ‘cas-custom’ configuration mode. Configure basic voice port parameters in ‘voice-port’ configuration mode. © SAMSUNG Electronics Co., Ltd.
Page 553 Ubigate iBG2016 Configuration Guide/Ed.00 Network Diagram PSTN SIP, H.323 E1 R2 Figure 6.3 E1-R2 Network Diagram Configure E1 Trunk This section shows the process of configuring physical layer of E1 trunk. Configuring E1 Trunk Settings To make a E1 connection with a neighboring equipment interwoking on the PSTN, the configuration should be set up to a characteristic specific to E1 trunk line.
Page 554 E1 # Framing Coding ClkSrc LBO-CableLength State Alarm ---------------------------------- ---------------------------------- 0/1/1 hdb3 long haul 0/1/0 hdb3 long haul configure terminal Enter the global configuration mode to advance the E1 setting. © SAMSUNG Electronics Co., Ltd.
Page 555 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose system carrier-type Input the slot# which is qualified to be E1 trunk card. slot # e1 And if the previous carrier-type of the slot is configured E1, rebooting is not required. Otherwise the system will prompt you to reboot the system for the change to take effect.
Page 557 Ubigate iBG2016 Configuration Guide/Ed.00 Voice Port PSTN Voice PSTN Signaling Packet Properties Properties PSTN PCM Voice Properties Figure 6.4 Conceptual view of voice port DS0 group is a concept of a logical voice port controllable in a system by combining several DS0 channels in a digital trunk.
Page 558 OUT STATUS ======== == ========== ===== ==== ============ ============= == 0/0/0 -- fxs-ls on-hook idle 0/0/1 -- fxs-ls on-hook idle 0/0/2 -- fxs-ls on-hook idle 0/0/3 -- fxs-ls on-hook idle 0/1/0:10 -- --- down ---- ---- © SAMSUNG Electronics Co., Ltd.
Page 559 Ubigate iBG2016 Configuration Guide/Ed.00 Configure R2 on DS0 group R2 Signaling R2 signaling is channelized E1 signaling used in Europe, Asia, and South America. It is equivalent to channelized T1 signaling in North America. There are two types of R2 signaling: line signaling and interregister signaling.
Page 560 SLOT CARD TYPE STATUS VS VSLOTNAME [DSP] VoIP_M510 NORMAL 13 VoIP_VSLOT [0/0] FXS_4M NORMAL 7 MM_2_VSLOT [0/1] WTE_2M NORMAL 6 MM_1_VSLOT [0/2]- [1/0]- [1/1]- [2/0]- [2/1]- © SAMSUNG Electronics Co., Ltd.
Page 561 Ubigate iBG2016 Configuration Guide/Ed.00 By using show module configuration, it is possible to check out carrier type of the trunk working. v239# show module configuration t1 0/1/0 T1 0/1/0 is ENABLED Alarm Hierarchy: TRUE, Yellow Alarm: DISABLE Framing:ESF, LineCode:B8ZS, ClockSource: INT, LineMode:CSU, LBO:0 db...
Page 562 ADMIN up/down: indicates the status of voice port in accordance with the operator’s control. This appears as ‘down’ when an operator executes shutdown command in voice port configuration mode, but ‘up’ when executing ‘no shutdown’. © SAMSUNG Electronics Co., Ltd.
Page 563 Ubigate iBG2016 Configuration Guide/Ed.00 OPER indicates status changes while voice port or DS0 channel works. This appears as ‘up’ in case that the voice port or DS0 channel is normally in service, and as ‘down’ while the voice port is out of service due to failure of voice card.
Page 564 Timing guard-out is set to 2000 Timing hook-flash-input is set to 480 Timing hook-flash-output is set to 400 Timing percent-break is set to 50 Region Tone is set to United States Dialing Type is set to dialType_mf © SAMSUNG Electronics Co., Ltd.
Page 565 Ubigate iBG2016 Configuration Guide/Ed.00 Trunk Voice port Management This section describes management of logical voice ports configured in digital E1 trunk. create a DS0 group delete a DS0 group configure DS0 group Create Trunk Voice Port logically combines DS0 channels in a digital trunk to manage ds0 group.
Page 566 This electrically generated echo occurs when the incoming energy from the far end speaker is reflected back toward the speaker as a slightly altered and delayed replication due to impedance mismatch in the hybrid(Figure 31.6). © SAMSUNG Electronics Co., Ltd.
Page 567 Ubigate iBG2016 Configuration Guide/Ed.00 The presence of echo occurs whenever the replicated signal delay exceeds 10 msecs, and becomes apparent to the speaker as reflected voice when the delay exceeds as little as 16 msec. It is manifested to the far end as an altered replica of the speaker original.
Page 568 Accordingly, initial setup and control of dynamic jitter buffer in order to cope with voice delay is executed on the basis of information configured in dial peer, and set up with the command playout-delay. © SAMSUNG Electronics Co., Ltd.
Page 569 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enter the global configuration mode. dial-peer voice Enter the dial-peer configuration mode. voip number playout-delay Determines the mode in which the jitter buffer will mode {adaptive | operate for calls on this dial-peer.
Page 570 CLI, it is possible to tune each command. ani-digits Specifies the number of ANI digits expected to be collected. answer-signal Specifies answer signal to be used which can be group-A or group-B. © SAMSUNG Electronics Co., Ltd.
Page 571 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose caller-digits Specifies the number of digits needed to be collected before it requests ANI. default Sets a command to its default setting. dnis-digits Specifies the expected number of DNIS digits. invert-abcd Specifies the inversion of the ABCD bits before tx and after rx.
Page 572 DNIS digits to be collected before requesting line category. When it works as R2 calling side, is used to send call priority defined in R2 to the receiver. Unused ABCD Specifies unused ABCD bit values. © SAMSUNG Electronics Co., Ltd.
Page 573: Digital Trunk T1-Cas Features
Ubigate iBG2016 Configuration Guide/Ed.00 Digital Trunk T1-CAS Features T1 Robbed Bit Signaling Concept On T1 trunks, a frame consists of 24 timeslots, sent every 1/8000 sec. Trunk 23 0 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 0 1...
Page 574 This is done by using the A- and B- bit on the network side instead of just the B-bit. The A-bit is also used on the CPE side. However, the B-bit can also be involved, based on the switch’s implementation. © SAMSUNG Electronics Co., Ltd.
Page 575 Prerequisites Before you attempt this configuration, ensure that you meet these prerequisites: T1-CAS signaling applies to T1 trunk only In order to run T1-CAS signalings on the UBIGATE IBG2016 routers, these hardwards are required: WTE-2M or WTE-4 − Define the command cas-ds0-group on the T1 trunk(module) to create ds0- group.
Page 576 PBXs have different requirements on the clock source. Configuration of clock source is only used in module command. Configure line signaling and interregister signaling for CAS. Customize the configuration with the cas-custom command. © SAMSUNG Electronics Co., Ltd.
Page 577 Ubigate iBG2016 Configuration Guide/Ed.00 This procedure is much like the same as the configuration of E1 trunk. Step Command Purpose show voice card all List all the voice cards installed in the system. If you find any of the WTE_XX card you can choose the one to use a T1 trunks card.
Page 578 OUT STATUS ======== == ========== ===== ==== ============= ============ == 0/0/0 -- fxs-ls on-hook idle 0/0/1 -- fxs-ls on-hook idle 0/0/2 -- fxs-ls on-hook idle 0/0/3 -- fxs-ls on-hook idle 0/1/0:10 -- --- down ---- ---- © SAMSUNG Electronics Co., Ltd.
Page 579 Ubigate iBG2016 Configuration Guide/Ed.00 Trunk Status Monitoring This procedure is much like the same as the configuration of E1 trunk. Details in each following section refer to ‘Trunk Status Monitoring’. Physical Layer Status Using show voice card all, check all the voice card installed in the system...
Page 580 Groups) created in digital trunk. It displays all the voice ports created in the system including DS0 group. Logical Voice Port In Detail Using show voice port port#, check the detailed setup value of parameters used in the particular voice port. © SAMSUNG Electronics Co., Ltd.
Page 581 Ubigate iBG2016 Configuration Guide/Ed.00 Trunk Voice port Management This section describes management of logical voice ports configured in digital E1 trunk. create a DS0 group delete a DS0 group configure DS0 group Create Trunk Voce Port It manages with ds0 group by logically combining DS0 channel, which belongs to digital trunk.
Page 582 Optional is the setup-represetative ID for voice- port, and names text string. exit Exit the voice-port configuration mode. show voice port Checks out if the values set in voice-port are slot/sub-slot/port:ds0- normally set up. group-no © SAMSUNG Electronics Co., Ltd.
Page 583 Ubigate iBG2016 Configuration Guide/Ed.00 Configure Advanced Trunk Voice Port Parameters It is the same as creation of E1 trunk voice port, and for T1 CAS signaling, and the following advanced setting is possible. T1-CAS Bit Modification Settings The bit modification commands for digital voice ports modify sent or received bit patterns.
Page 584 911) calls. ANI is an a series of digits in the call to identify the telephone number of the calling device. In other words, ANI identifies the number of the calling party. © SAMSUNG Electronics Co., Ltd.
Page 585 Ubigate iBG2016 Configuration Guide/Ed.00 Step Command Purpose voice-port slot/sub- To set up the attribute values of created ds0- slot/port:ds0-group-no group, enter voice-port configuration mode. shutdown Shuts down the voice port to manipulate ‘timeslots’ and ‘signal cas’ command. calling-number Specifies ANI to be sent out when the T1-CAS...
Page 586 If seconds is set to 0, it means ‘infinite’ ringing. no shutdown Activate the voice port at the final step of configuration Exit © SAMSUNG Electronics Co., Ltd.
Page 587 Ubigate iBG2016 Configuration Guide/Ed.00 Timing Settings To change timing parameters, use the following commands as appropriate, in voice-port configuration mode. Step Command Purpose voice-port slot/sub- To set up the attribute values of created ds0- slot/port:ds0-group-no group, enter voice-port configuration mode.
Page 588 This is usually not a problem for ‘real’ phones, since the end user will realize that there is no one on the call and hang up. This problem can be solved by using Ground Start signaling. © SAMSUNG Electronics Co., Ltd.
Page 589 Ubigate iBG2016 Configuration Guide/Ed.00 Ground Start Ground Start signaling was originally developed to aid in resolving Glare. In Loop Start the only way to indicate an inbound call from the network is to Ring the phone. During a full 6-second ringing cycle there is a 4-second period when the phone is not physically ringing.
Page 590 To set up the attribute values of created ds0- slot/port:ds0-group-no group, enter voice-port configuration mode. if ds0-group was created normally, there is no error in this CLI command. shutdown Shuts down the voice port to manipulate ‘timeslots’ and ‘signal cas’ command. © SAMSUNG Electronics Co., Ltd.
Page 591 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeslots timeslot-list timeslots-Specifies the single time slot number, single range of numbers, or multiple ranges of numbers separated by commas. For T1, allowable values are from 1 to 24. Examples are as follows:...
Page 592 To set up the attribute values of created ds0- slot/port:ds0-group-no group, enter voice-port configuration mode. if ds0-group was created normally, there is no error in this CLI command. shutdown Shuts down the voice port to manipulate ‘timeslots’ and ‘signal cas’ command. © SAMSUNG Electronics Co., Ltd.
Page 593 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeslots timeslot-list timeslots-Specifies the single time slot number, single range of numbers, or multiple ranges of numbers separated by commas. For T1, allowable values are from 1 to 24. Examples are as follows:...
Page 594 Figure 6.10 Wink-start method signaling sequence Immediate-Start signaling Originating Destination M-wire E-wire M-wire E-wire 1111 seizure Min 120 msec Max 10 sec digits digits 1111 Min 200 msec answer Figure 6.11 Immediate-start method signaling sequence © SAMSUNG Electronics Co., Ltd.
Page 595 Ubigate iBG2016 Configuration Guide/Ed.00 Delay-Dial signaling Originating Destination M-wire E-wire M-wire E-wire 1111 seizure Min 120 msec Max 6 sec 1111 Start dial Duration 200 msec 0000 Min 70 msec Max 10 sec digits digits 1111 Min 200 msec answer Figure 6.12 Delay-dial method signaling sequence...
Page 596 Transmitted state Signal Transmitted Signal Originating Terminating direction duration Idle continuous Connect(seizing) continuous Delay-dialing continuous Start-dialing continuous Answer continuous Hang-up continuous (Clear-back) Disconnect continuous 0 or 1 (Clear-forward) Ring-forward 65-135 msec 0 or 1 Busy, Re-order © SAMSUNG Electronics Co., Ltd.
Page 597 Ubigate iBG2016 Configuration Guide/Ed.00 Address Signaling Is in compliance with ITU-T Q.316~Q.326 recommendation. Signals Frequencies(Hz) Signals Frequencies(Hz) KP(start-of-pulsing) 1100 + 1700 Digit 8 900 + 1500 Digit 1 700 + 900 Digit 9 1100 + 1500 Digit 2 700 + 1100...
Page 598 Choose T1-R1 signaling method. signal cas r1-modifited r1-itu-R1 signaling compliant with ITU-T recommendation. r1-modified-R1 signaling variants no shutdown Activate the voice port at the final step of configuration exit Exit the voice-port configuration mode. © SAMSUNG Electronics Co., Ltd.
Page 599: Overview
Ubigate iBG2016 Configuration Guide CHAPTER 7. ISDN Overview Integrated Services Digital Network(ISDN) is composed of data service and telephone service provided by telephone carrier. Since ISDN includes digitalization of telephone, it can transmit voice, data, text, graphic, music, video and data transmissible by various telephone line. The appearance of ISDN enables standardizing subscriber service standard, user network interface, the capacity of network and inter-network.
Page 600 A variety of call-establishment, call- termination, information, and miscellaneous messages are specified, including SETUP, CONNECT, RELEASE, USER INFORMATION, CANCEL, STATUS, and DISCONNECT. These messages are functionally similar to those provided by the X.25 protocol. © SAMSUNG Electronics Co., Ltd.
Page 601 Ubigate iBG2016 Configuration Guide/Ed.00 Calling Calling Called Called Called Router router call Pick up Set up Set up Set up ACK Information Call Proceeding Ringing Alerting Alerting Pick up Ring back indication Connect Connect Stop ring back indication Connect ACK...
Page 602: Configuring Isdn Bri
Create interface bundle To create the interface bundle, use the following command. Step Command Purpose configure terminal Configures to set up bundle. interface bundle bundle- Designates bundle name. name link bri 0/0/0:1 Sets the pertinent physical link. © SAMSUNG Electronics Co., Ltd.
Page 603: Table 7.1 Switch-Type Parameter Description (Bri)
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring the ISDN BRI Switch To configure the switch type, use the following command. Step Command Purpose configure terminal Configures to set up bundle. interface bundle sets up bundle name. bundle-name Link bri 0/0/0:1 sets up the pertinent physical link.
Page 604 Connect message. overlap-receiving (Optional) Specify if the interface will do Overlap Receiving. tei-mode [point-to- (Optional) Configure the type of tei negotiation point|point-to-multipoint] tei-vale num (Optional) Configure the tei value for Point-to- Point tei mode. © SAMSUNG Electronics Co., Ltd.
Page 605 Ubigate iBG2016 Configuration Guide/Ed.00 Actviate the ISDN To activate the ISDN, use the following command. Step Command Purpose configure terminal Configures to set up bundle. interface bundle Sets up bundle name. bundle-name link bri 0/0/0:1 Sets up the pertinent physical link.
Page 606 Sets up for voice. calling-number calling- Specifies the calling party number number activate Activates ISDN. exit voice-port 0/0/0 Configure to set up voice port no shutdown Turns on the port. © SAMSUNG Electronics Co., Ltd.
Page 607 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Inclusion of the Sending Complete Information Element In some geographic locations, such as Hong Kong and Taiwan, ISDN switches require that the Sending Complete information element be included in the outgoing Setup message to indicate that the entire number is included.
Page 608 ISDN Information: bri000 -------------------------- caller answer1 answer2 called-number spid1 spid2 idle-timeout connect delay keep-alive 10000 disconnect-cause switch-type basic-dms tei-mode point-to-multipoint Press any key to continue (q : quit | enter : next line) : © SAMSUNG Electronics Co., Ltd.
Page 609 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Command Purpose show isdn status Displays the ISDN Line Status WORD v239# show isdn status bri000 ==== NETWORK side configuration === Layer 1 Status: NOT ACTIVE Layer 2 Status: NOT ACTIVE TEI MODE MULTIPOINT Layer 3 Status:...
Page 610 ISDN Layer 2 Timer Values 7 Outstanding I Frames N200 = 3 Max number of retransmission of a frame N203 = 260 Max number of TEI notification retransmits T200 = 2 Seconds T203 = 10 Seconds © SAMSUNG Electronics Co., Ltd.
Page 611 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Command Purpose debug isdn q931-timers Displays q931 timers. WORD v239# show isdn q931-timers bri000 ISDN Layer 3 Timer Values T303 = 4 Seconds T304 = 30 Seconds T305 = 30 Seconds T308 = 4 Seconds...
Page 612 Setup Rx Setup AckRx Alert Rx Call P Rx Conn Rx Con Ack Rx Prog Rx Disc Rx Rel Rx Rel Cmp Rx Stat Rx Stat Enq Rx Info Rx Stat Enq Rx Stat Enq Rx © SAMSUNG Electronics Co., Ltd.
Page 613: Configuring Isdn Pri
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring ISDN PRI Requirements Prerequisites Before you attempt this configuration, ensure that you meet these prerequisites: If the router will be the only device attached to the PRI, ask for point-to- point service and a data-only line.
Page 614: Table 7.2 Switch-Type Parameter Description (Pri)
NTT Primary Rate Switch Type Primary-qsig Q Signaling Primary Rate Switch Type(only user(slave) side) Primary-ni2 National ISDN 2 Primary Rate Switch Type Primary-euro Euro ISDN Primary Rate Switch Type Primary-ccitt CCITT/ITU-T Primary Rate Switch Type © SAMSUNG Electronics Co., Ltd.
Page 615 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Voice type To configure the voice type, use the following command. Step Command Purpose configure terminal Configures to set up bundle. interface bundle bundle-name Sets up bundle name. link [pri_t1|pri_e1] 0/0/0:1 Sets up the pertinent physical link.
Page 616 0/0/0:1 isdn Sets up ISDN switch-type switch-type Sets up the pertinent switch-type with the content like the following table. incoming-voice Sets up for voice. calling-number calling- Specifies the calling party number number activate Activates ISDN. © SAMSUNG Electronics Co., Ltd.
Page 617 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Inclusion of the Sending Complete Information Element In some geographic locations, such as Hong Kong and Taiwan, ISDN switches require that the Sending Complete information element be included in the outgoing Setup message to indicate that the entire number is included.
Page 618 ISDN Information: pri000 -------------------------- caller answer1 answer2 called-number spid1 spid2 idle-timeout connect delay keep-alive 10000 disconnect-cause switch-type primary-euro tei-mode point-to-point Press any key to continue (q : quit | enter : next line) : © SAMSUNG Electronics Co., Ltd.
Page 619 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Command Purpose show isdn status Displays the ISDN Line Status WORD v239# show isdn status pri000 ==== NETWORK side configuration === Layer 1 Status: NOT ACTIVE Layer 2 Status: NOT ACTIVE TEI MODE POINT-TO-POINT Layer 3 Status:...
Page 620 T200 = 2 Seconds T203 = 10 Seconds debug isdn q931- Displays q931 timers. timers WORD v239# show isdn q931-timers pri000 ISDN Layer 3 Timer Values T303 = 4 Seconds T304 = 30 Seconds © SAMSUNG Electronics Co., Ltd.
Page 621 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Command Purpose debug isdn q931- timers WORD T305 = 30 Seconds T308 = 4 Seconds T310 = 40 Seconds T313 = 4 Seconds T316 = 120 Seconds T319 = 4 Seconds T322 = 4 Seconds debug isdn Displays q931 statistics.
Page 622 Setup Rx Setup AckRx Alert Rx Call P Rx Conn Rx Con Ack Rx Prog Rx Disc Rx Rel Rx Rel Cmp Rx Stat Rx Stat Enq Rx Info Rx Stat Enq Rx Stat Enq Rx © SAMSUNG Electronics Co., Ltd.
Page 623: Dial Peer Management
Ubigate iBG2016 Configuration Guide CHAPTER 8. Routing and Digit Manipulation This chapter describes how to implement dial plans by configuring dial peers and using dial peer matching, digit manipulation, access group, trunk-group, PLAR and COR features. Dial Peer Management Dial Peer Overview To configure dial peer is an important task for establishing dial plan and transmitting voice on packet network.
Page 624: Chapter 8. Routing And Digit Manipulation
Ubigate iBG2016. Both figure 33.2 and figure 33.3 are the cases to be applied to call through packet network. If originating and terminating POTS interface are in the same Ubigate iBG2016, it is sufficient with two POTS dial peers. Source...
Page 625 Ubigate iBG2016 matches POTS dial peer with inbound call leg. Also it matches VoIP dial peer with outbound call leg. Against incoming call from packet network, Ubigate iBG2016 matches POTS dial peer to make a call and it matches VoIP dial peer with inbound call leg to apply configuration elements such as codec.
Page 626 Incoming voice port with configured voice port Ip address with configured session-target. The Ubigate iBG2016 should be met with one condition among the mentioned conditions. To match dial peer, it is sufficient if a single condition is met. © SAMSUNG Electronics Co., Ltd.
Page 627 When it is POTS dial peer, input port command to transmit call. When it is VoIP dial peer, input session target command to transmit call. In the case of POTS incoming call, Ubigate iBG2016 selects outbound dial peer based on whether it is DID of inbound POTS dial peer. Both cases support longest matching.
Page 628 Configuring Dial Peers Configuring Dial Peers for Call Legs When call enters Ubigate iBG2016, it is necessary to do dial-peer matching for routing. On call bound to packet network after entering POTS interface, Ubigate iBG2016 should do matching POTS dial-peer against inbound call leg.
Page 629 4:10.1.1.2 Figure 8.6 Dial Peers from the Perspective of the Terminating Ubigate iBG2016 The above setup information shows that in VoIP dial peer of Ubigate iBG2016 B the last four digits of desitination parttern is replaced as wild card.
Page 630 Inbound call leg does not match, use the already defined default dial peer as inbound dial peer. Dial peer 2 of Ubigate iBG2016 B in the figure 33.6 is necessary when call is tried with A only in Ubigate iBG2016 B.
Page 631 Ubigate iBG2016 Configuration Guide/Ed.00 In most cases, it is sufficient in connecting call with the basic value of POTS dial peer configuration command except the above setup. To configure POTS dial peer, use the following command starting in global configuration mode.
Page 632 {all | default | extra | (Optional) Configures the digit-forwarding num num } method used by the dial peer. The valid range for the number of digits forwarded(num-digit) Example) is 0 through 32. sbm/configure/…/pots num# forward-digit all © SAMSUNG Electronics Co., Ltd.
Page 633 Valid entries for the string argument are 0 string through 9. Configuring VoIP Dial Peers VoIP dial peer makes possible call with the particular Ubigate iBG2016 telephony device. To set VoIP dial peer, the followings should be done. Assign dial peer with the tag number only.
Page 634 The dns:host-name keyword and argument Example) indicate that the domain name server will sbm/configure/…/voip num# resolve the name of the IP address. Valid session-target ip-address entries for this parameter are characters ipv4:10.10.10.10 representing the name of the host device. © SAMSUNG Electronics Co., Ltd.
Page 635 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose codec { g711alaw | Defines the codec for the dial peer. g711ulaw | g723r53 | Ptime means the time between frames g723r63 | g726 | g729 } transmitted. The unit is msec and has the...
Page 636 Followings are commands that could be configured in ‘voice class h323’ mode. Command Purpose h225 call-start {fast|slow|system} Specifies the H.323 call setup method. h225 early-h245 {on|off|system} Specifies whether to perform the normal H.245 procedure before or after CONNECT message. © SAMSUNG Electronics Co., Ltd.
Page 637 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Command Purpose h225 h245-tunnel {on|off|system} Specifies the H.245 Tunnelling support. h225 T301 seconds Maximum time to wait for CONNECT or RELCOMP message, after receiving ALERT message. h225 T303 seconds Maximum time to wait for CALLPROCEEDING or ALERTING or PROGRESS or RELCOMP message, after sending SETUP message.
Page 638 To control the presentation and use of calling-line ID(CLID) information, use the clid command in dial-peer configuration mode. Command Purpose clid network-number string (Optional) Network number. Establishes the calling-party network number in the CLID Example) for this router. sbm/configure.../voip num# clid network-number 3345 © SAMSUNG Electronics Co., Ltd.
Page 639 VoIP dial peer is routed to session target. Against Outbound VoIP dial peer, destination pattern determines dialed digit Ubigate iBG2016 should collect and transmit. The entire dial peer created in Ubigate iBG2016 should possess destination pattern. Destination pattern should possess full telephone number or the partial number together with wildcard digit(ex: period-‘.’).
Page 640: Table 8.1 Wild Card Symbol
0 to 9 are allowed in the range. Indicate a pattern and are the same as the regular expression rule. The only wild card symbol usable in both answer-address and incoming-called-number is period(.). © SAMSUNG Electronics Co., Ltd.
Page 641 Ubigate iBG2016 Configuration Guide/Ed.00 Session Target Session target is the network address of remote Ubigate iBG2016, which is a call intended to transmit. Set up in VoIP dial-peer with ‘session target’ command. Destination-pattern is telephone number of telephone attempting to connect in outbound dial-peer.
Page 642 POTS dial-peer, called number attempts to automatically match with destination pattern to find outbound call leg. If DID is not setup on the moment of incoming call, Ubigate iBG2016 transmits dial tone to caller and collects additionally numbers to find outbound dial-peer.
Page 643 3 If priority should be given between dial peers within the set hunt group, use preference command. Ubigate iBG2016 first makes possible call in terms of dial peer, which possesses preference in hunt group. Low preference number gets higher priority. When the same preference number in hunt group occurs, it is selected randomly.
Page 644 PBX to the PSTN. This type of configuration is sometimes referred to as hairpinning or PSTN fallback. VoIP dial-peer support PSTN fallback basically. To disable, use ‘no call-fallback port’ command. © SAMSUNG Electronics Co., Ltd.
Page 645 Ubigate iBG2016 Configuration Guide/Ed.00 Numbering Type Matching Dial peer checks number type matching in addition to the condition such as incoming called number, answer address, destination pattern, port and ip- addresss. It determines dial-peer number type with ‘numbering-type’ dial- peer configuration command.
Page 646: Dial Plan Mode
Range is from 1 to 10000. call 512 secondary-dialtone string To enable a secondary dial tone, use the secondary-dialtone command. The maximum Example) number that could be configured is 10. sbm/configure/dial-plan /secondary-dialtone # secondary-dialtone 9 © SAMSUNG Electronics Co., Ltd.
Page 647: Ubigate Ibg2016 Configuration Guide/Ed
Input T-indicator representing timeout at the end of destination of outbound voice-network dial peer and wait for inputting additional digit after receiving the Ubigate iBG2016-fixed length of dial string. Timeout letter is ‘T’ in capital letter. The following dial-peer configuration is the example of configuring T-indicator to enable variable-length dial string.
Page 648: Digit Manipulation
Digit Strip and Prefixes When the Ubigate iBG2016 of the receiver side matches with dial string as outbound POTS dial peer, Ubigate iBG2016 basically takes out digit matching specifically with destination pattern. The remaining digit is transmitted to either PBX or PSTN.
Page 649 Ubigate iBG2016 Configuration Guide/Ed.00 For example, Let’s assume that E.164 called number is 82(02)3438-4968. In the office, call is made possible by pressing number 14968, which is the extension number of the telephone. If users set destination-pattern with ‘82023438’ in outbound POTS dial peer which is associated with the telephone, termination GW strips ‘82023438’after receiving call with...
Page 650 The figure 33.9 shows the network of the small company which desires to use VoIP for integrating the telephone network in the current ip network. Destination-pattern of Ubigate iBG2016 A is 408 115-xxxx, 408 116-xxxx, 408 117-xxxx. Destination-pattern against Ubigate iBG2016 B is 729 555- xxxx.
Page 651: Table 8.2 Number Expansion Commands
Ubigate iBG2016 Configuration Guide/Ed.00 In the above circumstances, configuring table to apply number expansion is the same as the following. Table 8.2 Number Expansion Commands Extension Destination Pattern Num-exp Command 5…. 408115…. numexp 5…. 408115…. 6…. 408116…. numexp 6…. 408116….
Page 652 POTS call. The two different translation rule sets can be designated against called number and calling number. Access Group - Designating translation profile, rule set to apply translation to Incoming VoIP call is possible. Dial-peer. Voice-port. Voip incoming. © SAMSUNG Electronics Co., Ltd.
Page 653 Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Translation Rule Set By using ‘voice translation-rule’ global command, creating rule set is possible. Using ‘rule-match-replace’ voice translation-rule command, it is possible to designate match & replace rule in rule set. Equally, users can designate reject rule using ‘rule-reject’ voice translation-rule.
Page 654: Table 8.3 Characters Of Translation Rule
Example) by designating the single profile name. sbm/configure # voice translation- profile prof1 translate {called|calling} rule-set-id Configuring Translation Rule Set in Profile. Example) Designates rule-set-id against called sbm/../translation-profile prof1# and calling number. translate called 1 © SAMSUNG Electronics Co., Ltd.
Page 655 Ubigate iBG2016 Configuration Guide/Ed.00 Applying Translation in Dial Peer Command Purpose translation-profile {incoming|outgoing} Applying Translation Profile in Dial Peer. trans-prof-name Example) sbm/…/pots 1# translation-profile incoming prof1 translation-rule {called|calling} rule-set-id Applying Translation Rule in Dial Peer Example) sbm/…/pots 1# translation-rule called 1...
Page 656 Applying Translation in VoIP Incoming Calls Command Purpose translation-profile trans-prof-name Applying Translation Profile in VoIP incoming calls. Example) sbm/…/voip-incoming# translation- profile prof1 translation-rule {called|calling} rule- Applying Translation Rule in VoIP Incoming set-id Calls Example) sbm/…/voip-incoming# translation- rule called 1 © SAMSUNG Electronics Co., Ltd.
Page 657: Access Group Management
Ubigate iBG2016 Configuration Guide/Ed.00 Access Group Management Introduction Applying the call block function to determine whether it permits call or not based on Ip address prior to inbound dial peer matching against VoIP incoming call is used. Executing classification function is possible by setting Permit and deny.
Page 658 Example) is possible. sbm/… /access-group name# translation-profile profname1 By using ‘test voice access-group ip-address’ command, whether call from the pertinent ip-address permits or not can be checked based on the setting access-group. © SAMSUNG Electronics Co., Ltd.
Page 659: Trunk Group Management
Ubigate iBG2016 Configuration Guide/Ed.00 Trunk Group Management Introduction Trunk group is the logical group of interface having the same signal type. Thus, even though a single channel is in operation or in failure call is made through other channels. The type of signal type is as follows.
Page 660 Hunt scheme is the selection method for selecting voice port or channel. Trunk group having various members uses hunt scheme to find idle channel for routing outgoing call. Hunt scheme provided in Ubigate iBG2016 is random, round-robin, sequential. Assume the three trunk groups. A has the preference value which is the smallest.
Page 661 Ubigate iBG2016 Configuration Guide/Ed.00 Round-Robin Trunk group finds idle channel in sequence. By remembering the previously selected channel, follow the sequence when finding channel afterwards. This method meets channel load balance between trunk group elements. With optional parameter, it is possible to change to find either channels or the even, odd channel in either ascending or descending order.
Page 662: Plar
Voice-port slot/subslot/port Voice-port slot/subslot/port timing-hookflash-out 500 timing-hookflash-out 1000 connection PLAR yyy connection PLAR-OPX xxx Figure 8.10 Example of PLAR configuration How to Configure PLAR Configuration Steps configure terminal − voice-port − connection plar − exit − © SAMSUNG Electronics Co., Ltd.
Page 663 Ubigate iBG2016 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice-port slot/subslot/port Enters voice-port configuration mode. Example) /configure# voice-port 0/0/0 connection plar digit-string Enters connection mode for voice port Example) /configure/voice-port(slot/subslot/port)#...
Page 664 By using this option, local voice port provides the local response before the remote voice port receives answer. The PLAR-OPX connection makes possible call before user makes dialing. The Ubigate iBG2016 uses the digits that follow the command internally to send to a dial peer Voice port PLAR...
Page 665 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure PLAR OPX Configuration Steps configure terminal − voice-port − connection plar-opx − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice-port slot/subslot/port Enters voice-port configuration mode.
Page 666 80 answer-address 590…. dial-peer cor list list2a corlist incoming listA member 2a dial-peer voice voip 90 dial-peer cor list list6a answer-address 060T member 6a corlist incoming listB dial-peer cor list list060b member 060b © SAMSUNG Electronics Co., Ltd.
Page 667 Ubigate iBG2016 Configuration Guide/Ed.00 To set up COR, use commands on the bottom of global configuration mode. Configuration Steps configure terminal − dial-peer cor custom − name − exit − dial-peer cor list − member − exit − dial-peer voice {pots|voip} −...
Page 668 When the appropriate dial-peer is used as outgoing, set up a cor list. Example) From step7 to step9 should be Sbm/configure/…/pots num# corlist repeated under the necessity, and outgoing corlist2 designates corlist in dial-peer. © SAMSUNG Electronics Co., Ltd.
Page 669 Ubigate iBG2016 Configuration Guide/Ed.00 Verifying Classes of Restrictions To check COR configuration, follow the below procedures. To check the configured COR and list, use ‘show dial-peer cor’ command. <<< Class of Restriction >>> < COR Custom NAME > name: corname1...
Page 670 CHAPTER 8. Routing and Digit Manipulation This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
Page 671: Fax Relay With Voip
Ubigate iBG2016 Configuration Guide CHAPTER 9. Extended VoIP Services This chapter provides an overview of Voice over IP(VoIP) services. The chapter contains the following sections: Fax Relay with VoIP Supplementary services for Call Manager Interworking mode Supplementary services for Survivable telephony mode...
Page 672 Example) # configure terminal dial-peer voice voip Enters VoIP dial-peer configuration mode. Example) /configure#dial-peer voice voip 1000 fax protocol pass-through specifies a high-bandwidth codec for fax relay with VoIP Example) /configure/dial-peer/voice/voip 1000#fax protocol pass-through g711alaw © SAMSUNG Electronics Co., Ltd.
Page 673 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose exit Exits the current mode Example) /configure/dial-peer/voice/voip 1000#exit ‘fax protocol pass-through’ command in ‘voice-service configuration’ mode Configuration Steps configure terminal − voice service voip − fax protocol pass-through − exit − Detailed Steps...
Page 674 T.38 fax packets to be sent Example) -fallback: {none | /configure/dial-peer/voice/voip 1000#fax pass-through-g711alaw | protocol t38 redundancy 0 fallback pass- pass-through-g711ulaw } through-g711ulaw fax rate specifies fax transmission speed. Example) /configure/dial-peer/voice/voip 1000#fax rate 14400 © SAMSUNG Electronics Co., Ltd.
Page 675 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose fax error-correction-mode enables fax-relay Error Correction Mode(ECM). to Example) disable ECM, use ‘no fax /configure/dial-peer/voice/voip 1000#fax error-correction-mode’ error-correction-mode command exit Exits the current mode Example) /configure/dial-peer/voice/voip 1000#exit ‘fax protocol t38’ command in ‘voice-service configuration’ mode...
Page 676 Example) /configure/voice/service/voip#fax rate 14400 fax error-correction-mode enables fax-relay Error Correction Mode(ECM). to disable ECM, use Example) ‘no fax error-correction-mode’ /configure/voice/service/voip#fax command error-correction-mode exit Exits the current mode Example) /configure/voice/service/voip#exit © SAMSUNG Electronics Co., Ltd.
Page 677: Table 9.1 Supplementary Services For Call Manager Interworking Mode
Supplementary Services for Call Manager Interworking Mode Service Descriptions Ubigate iBG2016 provides supplementary services like Table 34.1 through control of Call Manager in Call Manager interworking mode. For the methods of using services not mentioned in this document, see the Call Manager Operation Manual.
Page 678 Call forward to VMS- busy transfers the incoming call to voice mail device, so an extension subscriber can leave a voice message in the voice message box when the appropriate subscriber is in conversation. © SAMSUNG Electronics Co., Ltd.
Page 679 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Service Description Call Forwarding This is the function that transfers the incoming call to voice mail to VMS – device, so an extension subscriber can leave a voice message in NoAnswer the voice message box when the subscriber cannot answer the phone.
Page 680 This is the function for a subscriber to dial a Follow Me feature code and his own telephone number from a phone where a call forwarding will be done to forward a call to a desired phone. © SAMSUNG Electronics Co., Ltd.
Page 681: Configuring Services
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Services All the configuring service of Call Manager Interworking mode are done in the Call Manager. But, for CLID Service enable the function that transfers a Caller Id to a FXS phone in FXS voice-port.
Page 682 Configuring Feature Codes To support smooth provision of services, the following feature codes should be set in a Ubigate iBG2016. The feature codes regarding Call Pickup and Call Waiting are commonly used regardless of the operation mode. For more information on feature code settings, see the Command Reference.
Page 683 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Command Purpose group-call-pickup It is a feature code used for Group call pickup or Universal call pickup. Dial the group-cal- pickup feature code to pick up the call terminating toward the subscriber in the pickup group which is the same as yours.
Page 684 Call forward busy Call forward no answer = Group pickup number = 20003 iBG_03# show voip profiles 2700 IP PHONE SUBSCRIBER : 2700 Public number = 2792700 Extension number = 2700 Host domain = sec01.com © SAMSUNG Electronics Co., Ltd.
Page 685 Ubigate iBG2016 Configuration Guide/Ed.00 Dual home = yes VMS URI Used Services = CTR CWT CPU GPU CID CTR : Call Transfer CWT : Call Waiting CPU : Call Pickup GPU : Group Call Pickup CID : Calling Line Identification...
Page 686: Table 9.2 Supplementary Services For Survivable Telephony Mode
Supplementary services for Survivable Telephony Mode Service Descriptions Even in Survivable telephony mode, Ubigate iBG2016 independently provides some supplementary services provided by Call Manager control in Call Manager interworking mode. The services provided in survivable telephony mode are like Table 34.2 below.
Page 687 Ubigate iBG2016 Configuration Guide/Ed.00 Table 34.2 Supplementary services for Survivable telephony mode (Continued) Service Description Call Waiting and Call waiting lets users receive a second incoming call on Retrieve the same line without disconnecting the first call. When the second call arrives, the user receives a brief call waiting indicator tone.
Page 688 CHAPTER 9. Extended VoIP Services Configuring Services Ubigate iBG2016 does not require a user to set up separately for services of survivable telephony mode. In the Call Manager Interworking mode, it controls services on the basis of subscriber profiles downloaded from Call Manager.
Page 689: Table 9.3 Supplementary Services For Stand Alone Mode
Ubigate iBG2016 Configuration Guide/Ed.00 Supplementary Services for Stand Alone Mode Service Descriptions Ubigate iBG2016 independently provides services in Stand Alone mode as Table 34.3 below. Table 9.3 Supplementary services for Stand Alone mode Service Description CLID Calling Line Identification(CLID) function displays a calling party’s phone number on a terminal of a called party.
Page 690 Enters Voice-Port configuration mode. Example) /configure# voice-port 0/1/2 [no] caller-id enable [type1 | type2] Enables or Disables caller- id feature. Example) /configure/voice-port(0/1/2)# caller-id enable type1 Exit Exits the current mode Example) /configure/voice-port(0/1/2)# exit © SAMSUNG Electronics Co., Ltd.
Page 691 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Voice-Port for CLIDB To block Caller Id in an originating call of FXS phone, follow the procedures as below. Configuration Steps configure terminal − voice-port − caller-id block − exit − Detailed Steps...
Page 692 Example) /configure# dial-peer voice pots 11 [no] call-pickup-group group-number Specifies call pickup group number for Call Pickup Example) service. /configure/ dial-peer/voice/pots 11# call- pickup-group 8400 Exit Exits the current mode Example) /configure/ dial-peer/voice/pots 11# exit © SAMSUNG Electronics Co., Ltd.
Page 693 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Dial-Peer for Call Waiting To enable Call Waiting and Retrieve service, follow the procedures as below. Configuration Steps configure terminal − dial-peer voice pots − call-waiting − exit − Detailed Steps Step Command...
Page 694 Example) /configure/voice-port(0/1/2)# ring cadence on-net bellcore01 ring cadence off-net ring-type Specifies Off-Net Ring type for the voice port. Example) /configure/voice-port(0/1/2)# ring cadence off-net bellcore01 Exit Exits the current mode Example) /configure/voice-port(0/1/2)# exit © SAMSUNG Electronics Co., Ltd.
Page 695: Chapter 10. Call Admission Control
This function does not operate when applied to the whole Ubigate iBG2016 system. This is because the call limitation function that permits max calls is used in the Call Manager.
Page 696: Configuration Procedure
Configure max call Example) configure # call-admission max-call Exit Exits the current mode Example) configure # exit call-admission max-calls 2000 In Call Manager interworking mode the mechanism of Max call for system is not used. © SAMSUNG Electronics Co., Ltd.
Page 697 Ubigate iBG2016 Configuration Guide/Ed.00 DS0 Limitation DS0 Limitation limits available physical interface. To limit a certain amount of max calls coming through PBX, it blocks a part of the channels in E1/T1 trunk, which is connected to PBX, in order to decrease DS0 in the system.
Page 698 D dial-peer voice voip 1 224xxxx destination-pattern 223xxxx max-call 5 exit Figure 10.2 max call per dialpeer In Call Manager interworking mode the mechanism of Max call per dial- peer is not used. © SAMSUNG Electronics Co., Ltd.
Page 699: Table 10.1 Bandwidth Per Codec
Ubigate iBG2016 Configuration Guide/Ed.00 Voice Bandwidth When WAN link is used for processing VoIP call, this is the function to calculate media bandwidth used as WAN link by using voice bandwidth set up, and control in order that the bandwidth that is more than the permitted bandwidth may not be used in VoIP media.
Page 700 How to set LVBO Convert Voice-port to busyout state by force.(busyout forced) Convert time slots on E1/T1 trunk to busyout state by force.(ds0 busyout) With specific conditions things can be converted to busyout by monitoring.(busyout monitor) © SAMSUNG Electronics Co., Ltd.
Page 701 Ubigate iBG2016 Configuration Guide/Ed.00 If you want to check current busyout monitor list, use ‘show voice busyout monitor’ command. Using show voice busyout port, a user is able to check voice port list currently busyout set and information on the reason why voice port is busyported.
Page 702 [in-service] no busyout monitor interface-name interface-number interface-name Identifies an interface name to be monitored for the voice port busyout function. There are bundle, and loopback that can be used as interface name. © SAMSUNG Electronics Co., Ltd.
Page 703 Ubigate iBG2016 Configuration Guide/Ed.00 interface-number Identifies an interface to be monitored for the voice port busyout function. in-service(Optional) Configures the voice port to be busied out when any monitored interface comes into service(its state changes to up). If the keyword is not entered, the voice port is busied out when all monitored interfaces go out of service(their state changes to down).
Page 704 Ethernet for interface type. The followings are busyout monitor commands used in voice class busyout configuration mode. busyout monitor ethernet interface-number [in-service] no busyout monitor ethernet interface-number busyout monitor bundle interface-name [in-service] no busyout monitor bundle interface-name © SAMSUNG Electronics Co., Ltd.
Page 705 Ubigate iBG2016 Configuration Guide/Ed.00 busyout monitor sip-server no busyout monitor sip-server busyout monitor gatekeeper no busyout monitor sgatekeeper busyout monitor ip-address dest-ip-address no busyout monitor ip-address dest-ip-address busyout monitor ethernet: add ethernet interface to busyout monitoring class busyout monitor bundle:...
Page 706: Resource-Based Cac
To monitor utilization which is the global resource of Ubigate iBG2016 gateway. A user can set it up using ‘call-admission threshold global’ command that is the global CAC configuration, and release it using ‘no’...
Page 707 To monitor memory which is the global resource of Ubigate iBG2016 gateway. A user can set it up using ‘call-admission threshold global’ command that is the global CAC configuration, and release it using ‘no’...
Page 708 Is DSP utilization that Minor Alarm would RAISE/CLEAR, a user can designate from 1% TO 100%. The initial value is 70. maj value: Is DSP utilization that Major Alarm would RAISE/CLEAR, a user can designate from 1% to 100%. The initial value is 80. © SAMSUNG Electronics Co., Ltd.
Page 709: Call-Admission Spike
Ubigate iBG2016 Configuration Guide/Ed.00 Call-admission Spike This is the function that cuts calls, monitoring when incoming calls reach their peak in a certain period. To set up this function, use ‘call-admission spike’ which is global CAC configuration command, to release it use ‘no’ command.
Page 710: Call Admission Treatment
‘no’ command to release it. call-admission treatment causecode <cause-code> no call-admission treatment causecode <cause-code> <cause-code>: From 34 to 47 can be used. © SAMSUNG Electronics Co., Ltd.
Page 711: Table 11.1 Alarm List
Ubigate iBG2016 Configuration Guide CHAPTER 11. Management Alarm There are 7 alarms and 2 faults in relation to voice from Ubigate iBG2016 Gateway. Alarm There are mainly 5 types of alarms in relation to voice. The alarms are in relation to Call Count, DSP channel, SIP entity, H323 gatekeeper, and FXS port.
Page 712 <value>: Is the percentage of current used dsp channel against max dsp channel that minor alarm would be created. maj <value>: Is the percentage of current used dsp channel against max dsp channel that major alarm would be created. © SAMSUNG Electronics Co., Ltd.
Page 713: Table 11.2 Falut List
Voice task fail When operating the Ubigate iBG2016 system, this fault occurs in case that task related to voice processing suspends. In this case, Ubigate iBG2016 system cannot be used as voice gateway.
Page 714: Table 11.3 Call Statistics Command
CHAPTER 11. Management Statistics Ubigate iBG2016 statistics displays the numerical value of accumulation after booting up of the system. The objects of Ubigate iBG2016 statistics are as followings. Call statistics-whole call statistics, POTS call statistics, VoIP call statistics. Protocol statistics-SIP, H323 protocol statistics.
Page 715 Ubigate iBG2016 Configuration Guide/Ed.00 Table 36.4 Call Statistics Item (Continued) Item Object explanation Outbound POTS, VoIP, Call Outgoing failed calls Failed Calls - number of outgoing calls that failed Inbound Call Incoming abnormal terminated calls Abnormal - number of incoming answered calls...
Page 716 Ok Bye Num Terminated the session Ok Cancel Num Terminated the pending request Ok Info Num Number of information messages the gateway has received(inbound) and how many have been transmitted(outbound) Ok Invite Num Initiates a call © SAMSUNG Electronics Co., Ltd.
Page 717 Ubigate iBG2016 Configuration Guide/Ed.00 Table 36.6 SIP protocol Statistics command (Continued) Item Explanation Ok Notify Num 200 Successful response to a Notify request Ok Options Num 200 Successful response to an Options request Ok Prack Num 200 Successful response to a PRACK request...
Page 718 483 A server received a request that required more hops than is allowed by the Max-Forward heade Address Imcomplete Num 484 Address supplied is incomplete Ambiguous Num 485 Address supplied is ambiguous Busy Here Num 486 Called party is busy © SAMSUNG Electronics Co., Ltd.
Page 719 Ubigate iBG2016 Configuration Guide/Ed.00 Table 36.6 SIP protocol Statistics command (Continued) Item Explanation Request Terminated Num 487 The request is canceled Not Acceptable Here Num 488 Call was contacted, but some aspect of the session description was unacceptable Bad Event Num...
Page 720 Facility Number of Facility messages the gateway has received and transmitted Information Number of Information messages the gateway has received and transmitted UserInformation Number of UserInformation messages the gateway has received and transmitted © SAMSUNG Electronics Co., Ltd.
Page 721 Ubigate iBG2016 Configuration Guide/Ed.00 Table 36.8 H.225.0 CS Statistics command (Continued) Item Explanation Notify Number of Notify messages the gateway has received and transmitted Status Number of Status messages the gateway has received and transmitted Status Inquiry Number of StatusInquiry messages the gateway has...
Page 722 ResourceAvailableCon Number of RAC messages the gateway has received and firm transmitted InfoRequestAck Number of IACK messages the gateway has received and transmitted InfoRequestNak Number of INAK messages the gateway has received and transmitted © SAMSUNG Electronics Co., Ltd.
Page 723 Ubigate iBG2016 Configuration Guide/Ed.00 Table 36.9 H.225.0 RAS Statistics command (Continued) Item Explanation ServiceControlIndication Number of SCI messages the gateway has received and transmitted ServiceControlResponse Number of SCR messages the gateway has received and transmitted Unknown Number of unknown messages the gateway has received and transmitted Table 11.10 H.245Statistics command...
Page 724 EndSessionCommand Number of EndSessionCommand messages the gateway has received and transmitted UserInputIndication Number of UserInputIndication messages the gateway has received and transmitted Unknown Number of unknown messages the gateway has received and transmitted © SAMSUNG Electronics Co., Ltd.
Page 725: Debug Management
Ubigate iBG2016 Configuration Guide/Ed.00 Debug Management This section describes commands that show Debug related to voice. Following contents are displayed: Voice Call Control Debug. Voice Protocol Module Debug. H323 Debug. SIP Debug. Voice Debug. Voice Call log Debug Voice Call Control Debug Mode This is the function that shows an appropriate call log after a voice call.
Page 726 This is the function that shows a debug message of SIP, and shows the contents of stack and call-control. Dump is the function that shows a SIP message. Log displays an appropriate calling number and called number, All displays a debug message regardless of calling/called number. © SAMSUNG Electronics Co., Ltd.
Page 727 Ubigate iBG2016 Configuration Guide/Ed.00 Table 11.14 SIP Debug Command Purpose Debug sip stack SIP stack related command Debug sip vcc SIP Voice Call Control related command Debug sip log SIP calling or called number log related command Debug sip dump...
Page 728: Cdr Management
CHAPTER 11. Management CDR Management Ubigate iBG2016 system transmits CDR made by processing a call to RADIUS server. This section describes the method of configuration to manage CDR and CDR attribute. Configuration Restrictions for CDR Management Works only when an Authentication, Authorization, and Accounting(AAA) RADIUS server is enabled for VoIP calls.
Page 729 Ubigate iBG2016 Configuration Guide/Ed.00 (Continued) Step Command Purpose aaa radius Configure RADIUS Example) configure # aaa radius primary 10.254.167.244 configure # aaa radius shared testing123 voip-gateway Enter voip-gateway configuration mode Example) configure #voip-gateway gw-accounting Configure gw-accounting enable Example) configure/voip-gateway# ga-accounting...
Page 730 CHAPTER 11. Management CDR Attributes The CDR in the Ubigate iBG2016 system transmits accounting request packet according to RADIUS specification described in RFC2865, RFC2866. The attribute described in Table 36.1 below is used and numerous Vendor Specific Attributes are included.
Page 731 NAS MUST use the same Acct-Session-Id in the Accounting-Request packets for that session. vendor specific attribute Vendor specific attributes used in the Ubigate iBG2016 system are arranged in the following table and the values of VSA attribute field are as followings. Type field = 26 Length field >=7 byte(vendor-string field has to be more than 1byte)
Page 732 CHAPTER 11. Management System ID VSA No: 4 Length: 32 Ubigate iBG2016 system ip address or domain-name Call ID VSA No: 3 Length: 12 Call ID Calling party type VSA No: 22 Length: 4 Calling party category. Information on a category of calling party.
Page 733: Chapter 12. Survivable Telephony
Call Manager interworking mode. Besides, in case a subscriber does not set up Ubigate iBG2016, it generally provides a method to set up Call-Forwarding Service. That is, in the situation that a call is...
Page 734 Enters VOIP Fallback configuration mode. Example) /configure# voip-fallback call-forward busy forward-number Specifies Call-forward Number for Call Forward-Busy in Example) Survivable Telephony mode. /configure/voip-fallback# call-forward busy 4400 Exit Exits the current mode Example) /configure/voip-fallback# exit © SAMSUNG Electronics Co., Ltd.
Page 735 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Call Forward-NoAnswer Configure Call Forward-NoAnswer function for Survivable Telephony mode as following procedures. Summary Steps configure terminal − voip-fallback − call-forward noan − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 736: Configuring System Message For Survivable Telephony
CHAPTER 12. Survivable Telephony Configuring System Message for Survivable Telephony When Ubigate iBG2016 is converting between Call Manager interworking mode and Survivable Telephony mode, to inform that mode is converting, it sends designated messages through MESSAGE method with SIP phone.
Page 737 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure System Message for Call Manager interworking mode When Survivable Telephony mode is converted to Call Manager interworking mode, it sets up the message that would be sent to SIP phone as following procedures. The basic message is ‘Normal Mode’.
Page 738: Configuring Cor List For Survivable Telephony
/configure# voip-fallback cor {incoming|outgoing} cor-list- Configures a COR on dial peers name cor-list-number starting- associated with directory numbers. number ending-number Example) /configure/voip-fallback# cor incoming corlist1 1 1001 1005 Exit Exits the current mode Example) /configure/voip-fallback# exit © SAMSUNG Electronics Co., Ltd.
Page 739: Configuring Translation For Survivable Telephony
Ubigate iBG2016 Configuration Guide/Ed.00 Configuring Translation for Survivable Telephony Digit translation is also applicable in Survivable telephony mode. This is a mechanism that handles numbers, automatically modifying or adding area code or prefix of calling and called number. It is applicable not only to translation rule but also translation profile.
Page 740 /configure# voice translation-profile name1 translate { called | calling } rule-set-id Associates a voice translation rule with a voice Example) translation profile. /configure/voice/translation-profile prof-name # translate called 11 Exit Exits the current mode Example) /configure/voice/translation-rule rule-set-id # exit © SAMSUNG Electronics Co., Ltd.
Page 741 Ubigate iBG2016 Configuration Guide/Ed.00 How to Configure Translation Rule in Fallback Mode Summary Steps configure terminal − voip-fallback − translate { called | called } ruleset-id − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
Page 742 If translation rule or translation profile is ocnfigured in voip-fallback mode, when ibg vocie gw trun to sruvivable mode, all of other translation rule and profiles are not applied. Only translation rules and profiles of voip-fallback mode are applied. © SAMSUNG Electronics Co., Ltd.
Page 743: Configuration Guide
Ubigate iBG2016 Configuration Guide ©2007 Samsung Electronics Co., Ltd. All rights reserved. Information in this manual is proprietary to SAMSUNG Electronics Co., Ltd. No information contained here may be copied, translated, transcribed or duplicated by any form without the prior written consent of SAMSUNG.
Page 744 EQBD-000071 Ed. 00...

This manual is also suitable for:

Ubigate ibg2016

Samsung Ubigate iBG2016 Configuration Manual

Table of Contents

Table of Contents

CHAPTER 1. Basic Configuration

CHAPTER 2. Port Numbering

CHAPTER 3. Management Configuration

CHAPTER 4. System Logging

CHAPTER 5. RMON Configuration

Chapter 6. Bgp

CHAPTER 7. Multicast Protocols

Chapter 8. Vrrp

Chapter 9. Mpls

Chapter 10. Qos

CHAPTER 11. VLAN Forwarding with Qos

CHAPTER 12. Survivable Telephony

Quick Links

Chapters

Troubleshooting

Related Manuals for Samsung Ubigate iBG2016

Summary of Contents for Samsung Ubigate iBG2016