SupportDocumentationRoutersAccess RoutersAR100&200Configuration & CommissioningConfiguration Guide

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010 CLI-based Configuration Guide - Voice

Configuring the Signaling Proxy and Media Proxy on the Private/Public Network Boundary

Configuring the Signaling Proxy and Media Proxy on the Private/Public Network Boundary

This section describes how to configure signaling media proxy on the boundary between the private and public networks to implement processing and directional forwarding for call packets and media streams.

Context

The PBX is deployed at the edge of the public and private networks. Signaling media proxy is configured on the private network and NAT is configured to provide registration services for public network users. The PBX connects to PBX1 through the public network and PBX2 through the private network. The signaling media proxy is configured to allow the voice service between SIP user G who is on the public network, PBX, and users connected to the PBX1 and PBX2. Figure 2-77 shows the networking.
Figure 2-77 Networking of signaling media proxy deployed on the boundary between private network and public network

Prerequisites

Configuring Interface Addresses and Address Pools

Step

Action

Command

Description

1

Enter the system view.

 system-view

-

2

Enter the interface view.

 interface interface-type interface-number

-

3

(Optional) Bind a VPN instance to an interface.

ip binding vpn-instance vpn-instance-name

Before running the ip binding vpn-instance command, create a VPN instance.

When you run the ip binding vpn-instance command on an interface, all Layer 3 features on the interface, such as the IP address and routing protocol, are deleted. To use these features, re-configure them.

By default, no VPN instance is bound to an interface.

4

Configure an Ethernet IP address.

ip address ip-address { mask | mask-length }

If you configure a new IP address for an interface that already has an IP address, the new IP address overwrites the old one.

5

Return to the system view.

 quit

-

6

Enter the voice view.

 voice

-

7

Add an IP address to the signaling IP address pool.

 voip-address signalling interface interface-type interface-number { ip-address | dynamic }

To specify the ip-address parameter, ensure that an IP address has been configured for the specified interface. To specify the dynamic parameter, ensure that an IP address has been dynamically allocated to the specified interface.

8

Add an IP address to the media IP address pool.

 voip-address media interface interface-type interface-number { ip-address | dynamic }

It is recommended that the media and signaling IP address pools be the same.

9

(Optional) Configure a bound VPN instance.

voip-vpn-instance vpn-instance-name

Only SIP trunk groups can be bound to VPN instances.

Before running the voip-vpn-instance command, ensure that a VPN instance has been created and interfaces to which the signaling IP addresses and media IP addresses belong have been bound to the instance.

By default, no VPN instance is specified to be used by voice services.

10

Configure the interface and type for the media relay.

sbc media-relay

-

Configuring NAT

Step

Action

Command

1

Enter the ACL view.

acl number

2

Add an ACL rule.

 rule [ rule-id ] { deny | permit } [ source { source-address source-wildcard | any } ]

3

Return to the system view.

 quit

4

Enter the interface view.

 interface interface-type interface-number

5

Configure NAT to translate private network addresses to public network addresses.

 nat static protocol { imcp | tcp | udp } global { global-address | current-interface | interface } global-port inside host-address [ host-port ] [ vpn-instance vpn-instance-name ] [ netmask mask ] [ acl acl-number ] [ description description ]

6

Return to the system view.

 quit

Configuring the SIP Server and signaling media proxy

Step

Action

Command

Description

1

Enter the SIP server view.

 sipserver

-

2

Configure the signaling IP address and signaling port number of the SIP server.

 signaling-address { ip ip-address | addr-name addr-name-value } port port-value

The signaling IP address of the SIP server must be allocated from the signaling IP address pool on the corresponding interface.

3

Configure the media IP address of the SIP server.

 media-ip { ip-address | addr-name addr-name-value }

The media IP address of the SIP server must be allocated from the media IP address pool on the corresponding interface.

4

Configure the URI for the SIP server.

 register-uri uri

The Uniform Resource Identifier (URI) is used for SIP user registration.

5

Configure the home domain for the SIP server.

 home-domain domain

The SIP server fills this parameter into the From field in SIP messages.

6

Enable signaling proxy.

sbc signalling-proxy

-

7

Enable media proxy.

sbc media-proxy

-

8

Configures a public IP address and port number for the signaling mapping of the SIP server.

sbc mapped-signalling-address ip ip-address port port-value

-

9

Configure a media IP address for a SIP server.

sbc mapped-media-ip ip-address

-

10

Reset the SIP server.

 reset
NOTE:
Resetting the SIP server requires a dozen of seconds. Wait until the system displays SIP server reset succeeds. before performing other operations; otherwise, configurations will fail.

11

Return to the voice view.

quit

-

Configuring the SIP IP Trunk (Connecting to PBX1)

Step

Action

Command

Description

1

Create a SIP IP trunk group and enter the SIP IP trunk group view.

 trunk-group name sip no-register

-

2

Configure the local signaling IP address and port.

 signalling-address { ip ip-address | addr-name signal-addr-name-value } port port-value

-

3

Configure the local media IP address.

 media-ip { ip-address | addr-name addr-name-value }

-

4

Configure the remote IP address and port.

 peer-address static primary-ip-address primary-port-value [ secondary secondary-ip-address secondary-port-value ]

The remote IP address and port must be manually specified.

5

Configure the home domain of the remote trunk group.

 home-domain value

-

6

Configure the URI for the registration server.

 register-uri register-uri-value

The URI must be the same as home-domain.

7

Enable media proxy.

sbc media-proxy

-

8

Reset the trunk.

 reset
NOTE:
Resetting the SIP server requires a dozen of seconds. Wait until the system displays SIP server reset succeeds. before performing other operations; otherwise, configurations will fail.

9

Return to the voice view.

quit

-

Configuring the SIP IP Trunk (Connecting to PBX2)

When the PBX functions as the aggregation node for the calls from PBX1 to PBX2, enable the media proxy in the voice view by running the following command:

pbx number-parameter 104 0

Step

Action

Command

Description

1

Create a SIP IP trunk group and enter the SIP IP trunk group view.

 trunk-group name sip no-register

-

2

Configure a call route.

callroute callroute-name

-

3

Configure the local signaling IP address and port.

 signalling-address { ip ip-address | addr-name signal-addr-name-value } port port-value

-

4

Configure the local media IP address.

 media-ip { ip-address | addr-name addr-name-value }

-

5

Configure the remote IP address and port.

 peer-address static primary-ip-address primary-port-value [ secondary secondary-ip-address secondary-port-value ]

-

6

Configure the home domain of the remote trunk group.

 home-domain value

-

7

Configure the URI for the registration server.

 register-uri register-uri-value

The URI must be the same as home-domain.

8

Configure the signaling IP address and port number for a SIP trunk.

sbc mapped-signalling-address ip ip-address port port-value

-

9

Configure the media IP address for the SIP trunk.

sbc mapped-media-ip ip-address

-

10

Reset the trunk.

 reset
NOTE:
Resetting the SIP server requires a dozen of seconds. Wait until the system displays SIP server reset succeeds. before performing other operations; otherwise, configurations will fail.

11

Save the configuration.

save

-

Example

  1. Configure interface addresses and address pools.

    Set the public network address of GE0 to 172.16.2.2, private network address of GE1 to 10.10.10.10, and add the two addresses to the media IP address pool and signaling IP address pool.

    <Huawei> system-view
[Huawei] interface gigabitethernet 0/0/0
[Huawei-GigabitEthernet0/0/0] ip address 172.16.2.2 24
[Huawei-GigabitEthernet0/0/0] quit
[Huawei] interface gigabitethernet 0/0/1
[Huawei-GigabitEthernet0/0/1] ip address 10.10.10.10 24
[Huawei-GigabitEthernet0/0/1] quit
[Huawei] voice
[Huawei-voice] voip-address media interface gigabitethernet 0/0/0 172.16.2.2
[Huawei-voice] voip-address signalling interface gigabitethernet 0/0/0 172.16.2.2
[Huawei-voice] voip-address media interface gigabitethernet 0/0/1 10.10.10.10
[Huawei-voice] voip-address signalling interface gigabitethernet 0/0/1 10.10.10.10
[Huawei-voice] sbc media-relay interface GigabitEthernet 0/0/0 external
[Huawei-voice] quit

  2. Configure NAT.

    Allow the packets from GE0 with private network address 10.10.10.10 to traverse NAT to reach GE1 on the public network.

    [Huawei] acl 2000
[Huawei-acl-basic-2000] rule permit source  10.10.10.0 0.0.0.255
[Huawei-acl-basic-2000] quit
[Huawei] interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1] nat static protocol udp global current-interface 5070 inside 10.10.10.10 5060 netmask 255.255.255.255
[Huawei-GigabitEthernet0/0/1] nat static protocol udp global current-interface 5071 inside 10.10.10.10 5061 netmask 255.255.255.255
[Huawei-GigabitEthernet0/0/1] quit

  3. Configure the SIP server and signaling media proxy. 

    [Huawei-voice] sipserver
[Huawei-voice-sipserver] signalling-address ip 10.10.10.10 port 5060
[Huawei-voice-sipserver] media-ip 10.10.10.10
[Huawei-voice-sipserver] register-uri abcd.com
[Huawei-voice-sipserver] home-domain abcd.com
[Huawei-voice-sipserver] sbc signalling-proxy enable
[Huawei-voice-sipserver] sbc media-proxy enable
[Huawei-voice-sipserver] sbc mapped-signalling-address ip 172.16.2.2 port 5070
[Huawei-voice-sipserver] sbc mapped-media ip 172.16.2.2
[Huawei-voice-sipserver] reset
[Huawei-voice-sipserver]
 SIP server reset succeeds.
[Huawei-voice-sipserver] quit

  4. Configure the SIP IP trunk (connecting to PBX1).

    Configure the route with callroute 1 destined for PBX1. Assume that the IP address and port number of PBX1 are 172.16.2.3 and 5061 respectively.

    [Huawei-voice] trunk-group PBX1 sip no-register
[Huawei-voice-trunkgroup-PBX1] callroute 1
[Huawei-voice-trunkgroup-PBX1] signalling-address ip 172.16.2.2 port 5060
[Huawei-voice-trunkgroup-PBX1] media-ip 172.16.2.2
[Huawei-voice-trunkgroup-PBX1] peer-address static 172.16.2.3 5061
[Huawei-voice-trunkgroup-PBX1] home-domain abcd.com
[Huawei-voice-trunkgroup-PBX1] register-uri abcd.com
[Huawei-voice-trunkgroup-PBX1] sbc media-proxy enable
[Huawei-voice-trunkgroup-PBX1] reset
[Huawei-voice-trunkgroup-PBX1]
 Note: Trunkgroup reset succeeds.
[Huawei-voice-trunkgroup-PBX1] quit

  5. Configure the SIP IP trunk (connecting to PBX2).

    Configure the route with callroute 2 destined for PBX2. Assume that the IP address and port number of PBX2 are 10.10.10.13 and 5061 respectively.

    [Huawei-voice] trunk-group PBX2 sip no-register
[Huawei-voice-trunkgroup-PBX2] callroute 2
[Huawei-voice-trunkgroup-PBX2] signalling-address ip 10.10.10.10 port 5061
[Huawei-voice-trunkgroup-PBX2] media-ip 10.10.10.10
[Huawei-voice-trunkgroup-PBX2] peer-address static 10.10.10.13 5061
[Huawei-voice-trunkgroup-PBX2] home-domain abcd.com
[Huawei-voice-trunkgroup-PBX2] register-uri abcd.com
[Huawei-voice-trunkgroup-PBX2] sbc mapped-signalling-address ip 172.16.2.2 port 5071
[Huawei-voice-trunkgroup-PBX2] sbc mapped-media ip 172.16.2.2
[Huawei-voice-trunkgroup-PBX2] reset
[Huawei-voice-trunkgroup-PBX2]
 Note: Trunkgroup reset succeeds.
[Huawei-voice-trunkgroup-PBX2] save
 The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y

Verification

Action

Command

Expected Result

Verify the trunk group configuration.

 display voice trunk-group [ name [ para-value ] ]

The parameter values in the command output are consistent with the settings.

Verify the configuration of a SIP server.

 display voice sipserver 
[Huawei]display voice sipserver 
  Config       
  Signalling IP                   : 10.10.10.10  
  Signalling IP address name      : 
  Signalling domain               :   
  DDNS client name                :
  Signalling port                 : 5060 
  Media IP                        : 10.10.10.10 
  Media IP address name           :       
  Register URI                    : abcd.com   
  Home domain                     : abcd.com