By Ala'a Abedel Rahman Al-Zo'bi. Supervisor Dr. Sherif Gad. Faculty of Graduate Studies Al-Balqa' Applied University

Transcription

1 NEW IP QoS ARCHITECTURE FOR VOICE AND DATA CONVERGENCE OVER DSL LINES By Ala'a Abedel Rahman Al-Zo'bi Supervisor Dr. Sherif Gad This Thesis Was Submitted in Partial Fulfillment of the Requirements for the Master's Degree of Science in Computer Science Faculty of Graduate Studies Al-Balqa' Applied University May, 2007

2 DECLARATION OF AUTHORSHIP/ORIGINALITY I certify that the work in this thesis has not previously been submitted for a degree nor has it been submitted as part of requirements for a degree except as fully acknowledged within the text. I also certify that the thesis has been written by me. Any help that I have received in my research work and in the preparation of the thesis itself has been acknowledged. In addition, I certify that all information sources and literature used are indicated in the thesis. Signature of Candidate ii

3 This thesis (New IP QoS architecture for voice and data convergence over DSL lines) was successfully defended and approved on 20 th of May Examination Committee Signatures Dr. Sherif Gad, Chairman Associate Professor in Computer Engineering... Dr. Basem Al-Rifai Assistant Professor in Computer Engineering... Dr. Khalaf Khatatneh Assistant Professor in Computer Science... Dr. Ebrahim El-Omary Assistant Professor in Computer Engineering... iii

4 DEDICATION To my role models: My Father and Mother,,, My two loving Sisters,,, And my Beloved Brother,,, Thank You,,, iv

5 ACKNOWLEDGMENT As they said: "Success is a journey, not a destination". Well, I deeply believe that is true, my journey started long time ago and I will never know when it will stop. Two years of the journey in the university went just like eye blink, led me meanwhile the team of Professors and Doctors in the Al-Balqa' Applied University, who guide me to keep moving on the right track. My thanks must go first to the Great God, because this thesis will not meet any success without his help. God lightens up the hope candle in the middle of desperate nights. To my supervisor Dr. Sherif Gad, thanks for being there whenever I need a help, you always try to keep my spirit up... for this and more, thank you. To family, thank you for being patient with me in all the way, from the moment I was born till now and for ever. To my friends who supported me each day and gave strength I needed to carry on. At last but not least, it is my honor to have such a wonderful Examination committee. Many thanks to Dr. Basem Al-Rifai, Dr. Khalaf Khatatneh and Dr. Ebrahim El- Omary. Without you all I could not do it so far!! Thanks v

6 TABLE OF CONTENTS Subject Page Committee Decision... iii Dedication... iv Acknowledgement... v Table of Contents vi List of Tables.. x List of Figures... Xi List of Appendices... xv Abstract... xvi Chapter 1: Introduction VOIP (Voice over IP) VoIP Benefits VoIP Protocols VoIP Isn t Just another Data Protocol 6 Chapter 2: Simulation Configuration and Features The Functions of a Typical PBX Perform PBX Administration Asterisk Gateway Interface Asterisk Manager API Dial Plans Numbering Plans Choosing a Numbering Scale for Your Private Numbering Plan Assigning Dialer Plan: A Case Study Extensions Based on DID Dialing Plan and Asterisk PBX Billing Billing Accounting with Asterisk PBX System Routing Time-of-Day Routing Day-of-Week Routing.. 22 vi

7 2.16 Source Number Routing Cost-Savings Routing Disaster Routing Skill-Based Routing DUNDi Routing Protocol 24 Chapter 3: The Hardware Infrastructure Traditional PBX Systems PBX Lines PBX Trunks PBX Features PBX Adjunct Servers Voice Messaging Interactive Voice Response Servers Wireless PBX Solutions Other PBX Solutions PBX Alternatives VoIP Telephony and Infrastructure Media Servers Interactive Media Service: Media Servers Call or Resource Control: Media Servers The H.323 Gatekeeper Registration Servers Redirect Servers Media Gateways Firewalls and Application-Layer Gateways Application Proxies Endpoints (User Agents) Softphones Authentication: 802.1x Power-Supply Infrastructure Power-over-Ethernet (IEEE 802.3af).. 43 vii

8 3.26 Energy and Heat Budget Considerations. 45 Chapter 4: The New Architecture Methodology The H.323 Protocol Specification The Primary H.323 VoIP-Related Protocols H.225/Q.931 Call Signaling H.245 Call Control Messages Real-Time Transport Protocol H.235 Security Mechanisms Other Protocols Used by SIP Session Description Protocol Real-Time Transport Protocol Media Gateway Control Protocol Real-Time Streaming Protocol Understanding SIP s Architecture SIP Registration Requests through Proxy Servers Requests through Redirect Servers Peer to Peer Instant Messaging and SIMPLE Instant Messaging SIMPLE.. 72 Chapter 5: Performance Evaluation Architectural Overview Management Services Role-based Single Sign-on (SSO) Metering, Accounting, and Billing (MAB) Software Deployment (SDS) Information Brokering (IB) Feature Interaction Manager (FIM) Basic VoIP Services Supplementary Services 80 viii

9 5.5 Integrating Supplementary Services Accessing Supplementary Services Consuming Supplementary Services. 82 Chapter 6: Conclusions Security Policies and Processes Server Hardening Combine Network Management Tools and Operations Confirm User Identity References Appendices. 93 Abstract in Arabic ix

10 LIST OF TABLES Table No. Title of the Table Page 2.1 Corporation XYZ s Number Scale Billing Fields and Functions Recorded H.323 VoIP Ports and Protocols H.323 Ports. ٥٥ x

11 LIST OF FIGURES Figure No. Title of the Figure Page 1.1 Normal Message Flow Inbound VoIP Message Flow manager.conf Configuration File Dial Plan Effect ITU T Format for International Dial Plan over PSTN NANP Format for Dial Plan Corporation XYZ s Current Environment extensions.conf File and *78 Extension Modified Master.csv File and Its CDR Records A Basic PBX Diagram A Basic 802.1x Implementation for a Wireless Network H.323 Entities VoIP-Related H.323 Protocol Stack Typical H.323 Channels H.225/Q.931 Signaling H.225/Q.931 RAS H.245 Call Control RTP/RTCP Media Streams H.235 Scope Baseline Security Profile Security Services (H.235.1) Voice Encryption Profile with Native H.235/H.245 Key Management Registering with a SIP Registrar Request and Response Made through Proxy Server Request Made through Redirect Server Once SIP Has Initiated a Session, a Peer-to-Peer Architecture Is Used Instant Messaging through Skype.. 71 xi

12 5.1 Architectural Overview Supplementary Services for VoIP Defense in Depth Security Framework. 87 xii

13 LIST OF APPENDICES Appendix Name Page Appendix (A) Glossary of Acronyms.. ٩٣ Appendix (B) Voice Decoders 109 Appendix (C) Suggested Hardware 112 xiii

14 New IP QoS Architecture for Voice and Data Convergence over DSL Lines By Ala'a Abedel Rahman Al-Zo'bi Supervisor Dr. Sherif Gad Abstract In this thesis, our approach is to build a new architecture for a next generation (Voice over IP) framework has been outlined and discussed. The main focus of the architecture is on interoperability between different Voice over IP providers as well as dependability and robustness. Although not many supplementary services are used on a regular basis during common telephone communication, the possibilities provided by the supplementary services based on Internet technology are much more extensive than in classical telephone communication. As a result the supplementary services have been an additional focus of the architecture described. The requirements of a suitable (VoIP) architecture are the basis of this approach. Starting with these requirements the different components of the architecture have been as the process of developing a prototype for the architecture described here comes to an end, and we focus on scalability, reliability and dependability of the prototype. These tests will prove that the requirements expressed in the beginning are met. Additionally the quality of the feature interaction management will be checked thoroughly in order to provide a large amount of possibilities to use supplementary services consecutively. xiv

15 Chapter 1 Introduction Telephone networks were designed for voice transmission. Data networks were not. Recently within the last three to five years PBX functionality has moved logically (and even physically) from the closet or fenced room in the basement into the data networking space, both from physical connectivity and management standpoints. Additionally, the components of the converged infrastructure (gateways, gatekeepers, media servers, IP PBXes, etc.) are no longer esoteric variants of VxWorks, Oryx-Pecos, or other proprietary UNIXs, whose operating systems are not well enough known or distributed to be common hacking targets; but instead run on well-known, commonly exploited Windows and Linux OSes. SS7, which hardly any data networking people understand, is slowly being replaced by SIGTRAN (which is basically SS7 over IP), H.323 (which no one understands ), and SIP (which is many things to many people), running over TCP/IP networks. By the way, hackers understand TCP/IP [19]. Most people, if they even think about it, consider the traditional public switched telephone network (PSTN) secure. On the PSTN the eavesdropper requires physical access to the telephone line or switch and an appropriate hardware bugging device. Note Whenever a telephone line is tapped, the privacy of the persons at both ends of the line is invaded, and all conversations between them upon any subject, and although proper, confidential, and privileged, may be overheard. Moreover, the tapping of one man s telephone line involves the tapping of the telephone of every other person whom he may call, or who may call him. As a means of espionage, writs of assistance and general warrants are but puny instruments of tyranny and oppression when compared with wire tapping. Justice Louis Brandeis, Olmstead v. United States, 1928 [24]. Toll fraud occurs more frequently than most people realize (one source estimates damages at $4 billion per year) primarily due to improperly configured remote access policies (DISA Direct Inward System Access) and voic ; however, strong authentication codes and passwords, active call detail record accounting, and physical security controls reduce the risk of damage due to toll fraud to reasonable levels. Although it is theoretically possible to hack SS7, only sophisticated techniques and direct access to the signaling channel make this possible [43]. ١

16 Cisco Unified Voice Self-Service Products Cisco IP Interactive Voice Response Cisco Unified Customer Voice Portal Voice Self-Service Application Development Cisco Unified Call Services, Universal Edition Cisco Unified Call Studio, Universal Edition Cisco Unified Customer Interaction Analyzer IP Telephony Call Control Cisco BTS Softswitch Cisco Call Session Control Platform Cisco EGW 2200 Enterprise Gateway Cisco Gatekeeper External Interface Cisco Gatekeeper/Multimedia Conference Manager Cisco International Dial Plan Cisco Media Gateway Controller Software Cisco Network Route Director Cisco PGW 2200 Softswitch Cisco Service Node for Linksys One Cisco Signaling Controllers Cisco SIP Proxy Server Cisco Unified Communications 500 Series for Small Business Cisco Unified Communications Manager (CallManager) Cisco Unified Communications Manager Business Edition Cisco Unified Communications Manager Express Cisco Unified Mobility Cisco Unified Mobility Advantage Cisco Unified Presence Cisco Unified Survivable Remote Site Telephony IP Phones Cisco ATA 180 Series Analog Telephone Adaptors ١١٤

17 Cisco IP Communicator Cisco MGCP IP Phone Software Cisco SIP IP Phone Software Cisco Unified IP Phones 7900 Series Cisco Unified SIP Phones 3900 Series Cisco Unified Video Advantage Unified Communications Applications Application Development Cisco Unified Application Designer Cisco Unified Application Server Cisco Unified Media Engine Conferencing Cisco Conference Connection Cisco Unified MeetingPlace Cisco Unified MeetingPlace Express Cisco Unified Videoconferencing 3500 Series Products Cisco Unified Videoconferencing Manager Telephony Applications Cisco Billing and Measurements Server Cisco Conference Connection Cisco Emergency Responder Cisco Fax Server Cisco RSVP Agent Cisco Unified Attendant Consoles Cisco Unified CallConnectors Cisco Unified Communications Manager Assistant Cisco Unified Phone Application Suite Cisco Unified PhoneProxy Cisco Voice Provisioning Tool Cisco WebAttendant Unified Communications Clients ١١٥

18 Cisco IP Communicator Cisco Unified Mobile Communicator Cisco Unified Personal Communicator Cisco Unified Video Advantage Unified Communications Mobility Cisco IP Communicator Cisco Unified Mobile Communicator Cisco Unified Mobility Cisco Unified Personal Communicator Voice Mail and Unified Messaging Cisco Fax Server Cisco Personal Assistant Cisco Unity Cisco Unity Connection Cisco Unity Express Cisco Unified Presence Unified Communications Systems Cisco Unified Communications System Voice Network Management CiscoWorks QoS Policy Manager Cisco Extensible Provisioning and Operations Manager Cisco Media Gateway Control Node Manager Cisco Monitor Director Cisco Monitor Manager Cisco netmanager - Unified Communications Cisco Unified Operations Manager Cisco Unified Provisioning Manager Cisco Unified Service Monitor Cisco Unified Service Statistics Manager CiscoWorks Voice Manager Cisco Voice Services Provisioning Tool ١١٦