Configuration of the Intertex IX78 E-SBC with IP-PBXs and Telia SIP Trunking Services

Transcription

1 Configuration of the Intertex IX78 E-SBC with IP-PBXs and Telia SIP Trunking Services For the IX78 ADSL T8 GW2 model with Telia SIP-anslutning using Telia Bredband Företag or Telia ProLane Table of Contents 1 Intertex IX78 E-SBC and IP-PBXs Configuration This Instruction and the Configuration Wizard Basic Settings for Telia SIP-anslutning Telia Bredband Företag (ADSL Service for Business) Telia ProLane and Telia ProLane Light with the Intertex IX78 E-SBC as Firewall Telia ProLane and Telia ProLane Light with Existing Firewall LAN SIParator: All Traffic through Existing, not SIP Capable, Firewall Connecting an IP-PBX to the Trunk Service SIP Trunking using the IX78 as a SIP Proxy SIP Trunking using the IX78 as a B2BUA (Back to Back User Agent) The Outbound Proxy setting in the PBX Using the SIP Trunk Configuration Page in the IX Both the PBX with its Phones and Other SIP Clients Can Use the SIP Trunk Licenses used with SIP Trunking Setting up the SIP Trunk Page Defining Outgoing Call Handling in the Dial Plan [Mandatory] The SIP Trunk Page Entering the SIP Trunking Service Parameters [Mandatory] Entering the PBX Parameters [Mandatory] Defining Number Routing, Registration to and Authentication for the Trunk Service [General Overview] Typical settings for Telia SIP-anslutning when the PBX is configured to use the external (DID) numbers [Mandatory] Settings for Telia SIP-anslutning when the PBX only uses internal extension numbers Using SIP Clients registered to the IX78 with the SIP Trunk Other Setting when Connecting a PBX Sound Quality Remote Administration Dynamic DNS Security Profile Low Interference on the ADSL Connection Specific Problems with Some IP-PBXs If Calls are Cut Off at a Specific Time into each Call The PBXs that Cannot Handle Fragmented SIP Messages If the PBX Sends some SIP Messages with a Numeric instead of a Symbolic Domain Address

2 1 Intertex IX78 E-SBC and IP-PBXs The Intertex IX78 E-SBC is used to connect the company PBX to Telia SIP-anslutning using VoIP over a Telia broadband connection. The Intertex IX78 E-SBC offers powerful firewall features to protect the LAN while at the same time handling the SIP traffic sent between the company IP-PBX and Telia SIP-anslutning. The Intertex IX78 E-SBC makes connection of the PBX possible by enhancing the compatibility between different PBXs and Telia SIP-anslutning. The main problem solved by the IX78 is that the SIP traversal problem that exists for traditional firewalls and NAT routers is handled in the IX78, making SIP communication possible between the LAN, where the IP-PBX is connected, and Telia s service outside the firewall. Furthermore, the IX78 prioritizes the telephony traffic over data traffic. When using Telia Bredband Företag the telephony traffic is routed over Telia s high quality telephony channel instead of over the Internet channel and when using Telia ProLane the telephony is sent on prioritized ports. The IX78 can also add several additional features to the IP-PBXs. As an example, telecommuters can connect remotely to the company IP-PBX through the Internet. Some other feature additions are mentioned below, but are not detailed in this document. 2 Configuration This instruction describes the configuration of the Intertex IX78 E-SBC that is necessary to make it work with different types of PBXs that are to be connected to Telia s SIP service. Telia SIP-anslutning is currently offered on the following Telia broadband connections: Telia Bredband Företag, Telia ProLane and Telia ProLane Light. This description is general and describes the configuration that might be required for different PBXs when connecting over different Telia broadband services. Two types of settings are necessary; For Telia SIP-anslutning (chapter 4) and for the specific IP-PBX (chapter 5). To configure the IX78, you need to connect a computer with a web browser to the unit. (default address: ) and log in (User: admin, default password: admin). When the settings have been entered and work well, choose Click here to save permanently in the yellow area in the top part of the window so that the new settings survive a restart of the IX78. 2

3 3 This Instruction and the Configuration Wizard This instruction explains the functionality of the Intertex IX78 E-SBC when connecting IP- PBXs to Telia SIP-anslutning and describes the configuration that may be required. The exact required settings are different for different PBXs, and furthermore, the PBXs themselves need to be configured. This instruction can be used as a guide by the supplier of a specific PBX to make an installation instruction that is specific to his PBX, Telia SIP-anslutning and the IX78. To make the installation of the IX78 easier, Intertex has developed a web-based application, the SIP Trunking Configuration Wizard specifically for Telia SIP-anslutning. You can reach the Configuration Wizard by using the link on the menu page of the IX78. Resellers and installation staff can get user ID and password to use the Configuration Wizard by contacting Intertex. You can select the PBX in the Configuration Wizard and then the Wizard will ask for the required information and automatically download this information into the IX78. 3

4 The Wizard gives a summary of what to set up in the PBX and may also link to the PBX supplier s instructions for configuring the PBX (once the IX78 has been configured). PBX settings needed PBX's local IP address: Enable the SIP Trunk. Set Registration account and credentials. Map your DID numbers from Telia SIP-anslutning to the internal extension numbers. Set the outbound proxy in the PBX to the LAN IP address of the E-SBC. The E-SBC's LAN IP is on ports ET1-ET3. For detailed instructions how to configure the PBX: PBXInstructionABC If a certain IP-PBX is not available in the Wizard, the PBX supplier is more than welcome to contact Intertex Data AB, , info@intertex.se. 4

5 4 Basic Settings for Telia SIP-anslutning Telia SIP-anslutning is currently offered on the following Telia broadband connections: Telia Bredband Företag, Telia ProLane and Telia ProLane Light. Please choose the correct preconfigured profile in the IX78 E-SBC for access to Telia SIP-anslutning 1 : The Intertex IX78 E-SBC has a built-in firewall for both IP telephony and data traffic. In case you are using ProLane and already have a separate firewall that you want to continue using, the IX78 can be used for the telephony traffic only, as a SIParator, in parallel with the existing firewall. 1. In the menu select Administration. 2. In the field General Settings > Settings as for operator, please select between a, b and c below a. Telia ADSL PBX (4.1 below) for Telia Bredband Företag (ADSL service for business) b. Telia ProLane PBX Firewall (4.2 below) for Telia ProLane and Telia ProLane Light when the IX78 shall be used as the firewall for both IP telephony and other traffic (recommended alternative) c. Telia ProLane PBX SIParator (4.3 below) * for Telia ProLane and Telia ProLane Light when you already have a firewall for the network and want to continue using it. The IX78 will then be used only for IP telephony. (Please note that you can NOT use Telia s ProLane Firewall service with Telia SIP-anslutning.) * The setting Telia ProLane PBX SIParator is only shown in case a SIParator License is installed in the Intertex IX78 E-SBC. (This License is available by clicking Buy extras on the login page of the IX78.) The SIParator License is included in the SIP Trunking License, which already comes with the IX78 ADSL T8 GW2 model. 3. Select Go. 4. Click on Save and restart. Proceed to the section that describes the profile you selected above. 1 The pre-configured profiles for ProLane are available from software version 5.11 and others from

6 4.1 Telia Bredband Företag (ADSL Service for Business) (Selected profile: Telia ADSL PBX) The Line port on the back of the Intertex IX78 E-SBC shall be connected to the ADSL cable as detailed in the Quick Start guide for the IX78. This pre-configured profile, Telia ADSL PBX, automatically makes the settings required for Telia SIP-anslutning, under Configurations > Network > Advanced > Extra WANinterfaces / Virtual Circuits: Heading Checked IP address Subnet mask Gateway Access type DHCP QoS routing SIP, specific: 4 VPI 8 VCI 55 ATM QoS class VBR-real time PCR 2416 SCR 2416 MBS 2604 Example: Furthermore the profile makes automatic settings of the SIP outbound proxy under Configurations > SIP: Send to: for Requests from Domain sip.telia.com:5060 *@telia.com and with Destinations Use WAN Interface with Special SIP QoS Checked Example: 6

7 4.2 Telia ProLane and Telia ProLane Light with the Intertex IX78 E- SBC as Firewall (Selected profile: Telia ProLane PBX Firewall) This profile is used when you want to use the Intertex IX78 E-SBC for both telephony and data, which we recommend. The WAN/ET0 port (or ET4 on an IX78 with 4 Ethernet ports) on the back of the Intertex IX78 E-SBC shall be connected to an Ethernet port on the LAN side of the Cisco router supplied by Telia with Telia ProLane. (The ADSL connection on the IX78 is not used in this case.) This pre-configured profile makes automatic settings for Telia SIP-anslutning. ET4 or WAN/ET0 (instead of LINE) will be set as WAN-connection under Configurations > Network. If you have been assigned a fixed IP address for Telia SIP-anslutning you must enter this yourself on the Network page: Example: ET IP address Subnet mask Access type Manual DNS-server IP address 2:nd Standard gateway IP address The IP-PBX and the rest of the LAN shall be connected to any of the ports marked ET1-ET3 on the back of the IX78. 7

8 The selected profile also automatically configures: media (the voice) will be sent in the UDP port range which is prioritized by Telia when ProLane has been selected for Telia SIP-anslutning. SIP outbound proxy under Configurations > SIP. Send to: for Requests from Domain sip.telia.com:5060 and with Destinations Use WAN Interface with Special SIP QoS Not checked Example: 4.3 Telia ProLane and Telia ProLane Light with Existing Firewall (Selected profile: Telia ProLane PBX SIParator) This profile is used when you already have a firewall after the Cisco router supplied with the ProLane service and want to continue using this firewall (which does not have to be SIP capable) instead of the firewall in the IX78. As mentioned above, a SIParator License is required in the IX78 for this profile to be available, but that is already available in the IX78 ADSL T8 GW2 model. (This License is otherwise available by clicking Buy extras on the login page of the IX78.) The WAN/ET0 port (or ET4 on an IX78 with 4 Ethernet ports) on the back of the Intertex IX78 E-SBC shall be connected to an Ethernet port on the LAN side of the Cisco router supplied by Telia with Telia ProLane. (The ADSL connection on the IX78 is not used in this case). This pre-configured profile makes automatic settings for Telia SIP-anslutning. Under Configurations > Network ET4 or WAN/ET0 will be designated as WAN connection (instead of LINE) and the IX78 will be configured as a two legged SIParator (instead of as a standard firewall/router). If you have received a fixed IP address for Telia SIP-anslutning you need to manually enter this on the Networks page: 8

9 Example: ET IP address Subnet mask Access type Manual DNS-server IP address 2:nd Standard gateway IP address Since the SIParator profile has been selected, the LAN side of the IX78 must be supplied with an available IP address within the address space already used on the LAN. Find an available IP address on the existing LAN, which the IP-PBX is connected to, and also the subnet mask used on the LAN. Then enter these items under ET1 on the Network page. IMPORTANT! Uncheck the DHCP server checkbox below ET1 (otherwise the IX78 will hand out IP addresses, which probably is a task handled by the existing firewall when using this configuration). Example: ET1 inside IP address <Available LAN IP address>, for example: Subnet mask The LAN subnet mask, for example: DHCP server Not checked 9

10 Note! The IP-PBX and possibly other SIP equipment on the LAN must be configured to use the IP address of the IX78 as its outbound proxy. The profile setting also automatically configures: media (IP telephony sound) will be sent in the UDP port range which is prioritized by Telia if the service ProLane QoS has been selected from them. SIP outbound proxy under Configurations > SIP. Example: Send to: for Requests fro Domain and with Destinations Use WAN Interface with Special SIP QoS sip.telia.com:5060 Not checked 10

11 4.4 LAN SIParator: All Traffic through Existing, not SIP Capable, Firewall It is also possible to let all traffic, both telephony and data, go through the current, not SIP capable, firewall. The Intertex IX78 E-SBC should then be set up as a LAN SIParator, which requires a SIParator License in the IX78, but that is already available in the IX78 ADSL T8 GW2 model. (This License is otherwise available by clicking Buy extras on the login page of the IX78.) This configuration is not available as a pre-configured profile on the Administration page, it has to be set up manually by following the instructions below. ET4 or WAN/ET0 on the back of the IX78 will in this case be connected to the LAN behind the existing firewall and the IP address for WAN/ET0 (or ET4) must be set to an available IP address on the LAN. Note! The IP-PBX and possibly other SIP equipment on the LAN must be configured to use the IP address of the IX78 as its outbound proxy. Security warning! In order not to risk unauthorized use, the IX78 must be set-up to authenticate all outgoing calls when being used as a LAN SIParator. See point 7 below! Before the IX78 is set to LAN SIParator mode it has to be configured correctly from a computer attached to the Ethernet port ET1 on the IX78. The configuration must be made in the following way: 1. First select Telia ProLane PBX Firewall (not SIParator) according to 4.2 above. 2. As settings for WAN/ET0 (or ET4), select Manual and set the IP address, subnet mask, DSN-servers and default gateway on the Network page. The IP address must be an available IP address within the address space already used on the LAN. Click on Apply and Save permanently. (Please note that the IP address must not conflict with the IP address space you belong to when making these settings. In such a case you must first change the subnet on ET1 and on the computer that the settings are done from.) Example: ET IP address Subnet mask Access type Manual DNS-server IP address 2:nd Standard gateway IP address 11

12 3. Now, select LAN SIParator under Operational mode on the Network page. Click on Save, restart. 4. After the reboot the IX78 is in LAN SIParator mode and WAN/ET0 (or ET4) on the back of the IX78 must now be connected to the existing LAN. The IX78 can now only be reached via that interface (in this case via IP address ). The Network page shall now look like this: 5. Set the public IP address of your Internet connection as the IP address in Outside IP. 12

13 6. You must also make some changes in your existing firewall (which otherwise is not necessary). Redirect UDP- and TCP-port 5060 from outside the existing firewall to the IX78 (here on IP address ). Redirect the UDP-port range shown in the LAN SIParator (here ) from outside the firewall to the IX78 (here on IP address ). 7. Since the existing firewall now will send all SIP traffic from the outside to the IX78, it is important that registrations and all outgoing calls are authenticated, i.e. that the IX78 checks the user name and password. That is done on the page Configurations > SIP, under General SIP Server Settings. General SIP Server Settings Allow to register: Inside users Allow to register: Outside users Allow outgoing calls from Authenticate Authenticate None [v] and from others after authentication In order for the PBX to make outgoing calls, the PBX account at the SIP Trunk page must contain the PBX user ID and password, see point 2. 13

14 5 Connecting an IP-PBX to the Trunk Service 5.1 SIP Trunking Using the IX78 as a SIP Proxy Some IP-PBXs can already after the basic setup above be connected to the Telia Service without any further settings in the IX78 E-SBC. This may be the case for PBXs that can register on all accounts (telephone numbers) directly to the Telia service and where the PBX itself can support the signaling required by the Telia service. The PBX then communicates directly with the Telia Service through the IX78, which operates in SIP proxy mode. IX78 in Proxy Mode: The IP-PBX talks to the Trunk Service The Registration/Authentication model between the PBX and the Trunking Service must match Little configuration in the IX78 The SIP Trunking Service credentials (User IDs and Passwords) are set in the PBX The Trunking Service may require more complex SIP handling than the PBX supports Note that you, also in proxy mode, can use most of the additional configuration possibilities described under 7 and 8 below and the settings on the SIP Advanced page in the IX78 Web GUI. 5.2 SIP Trunking Using the IX78 as a B2BUA (Back to Back User Agent) The IX78 also includes a Back to Back User Agent (B2BUA) that can be invoked to allow larger control of the SIP signaling and a wider separation between PBX and the Trunk Service. (The SIP Proxy is still in use and doing the basics when the B2BUA is invoked.) IX78 in B2BUA Mode: The IP-PBX only talks to the IX78 Wider separation between the PBX and the Trunk Service The SIP Trunking Service Credentials (User IDs and Passwords) are only in the IX78 More SIP normalization possibilities (e.g. REFER) If a new SIP Trunking Service platform is introduced, only the IX78 has to be reconfigured, while the PBX configuration can remain From IX78 firmware version 5.20 the SIP Trunking configuration is best done using the SIP Trunk page in the IX78 Web GUI under the menu Configurations > SIP > SIP Trunk, see 5.4. The previous way of configuring the IX78 in B2BUA mode still works with the new firmware, but is more complex and does not offer all the new features. The previous way also requires more expensive licenses. IP- PBX IP- PBX 5.3 The Outbound Proxy Setting in the PBX Most PBXs have an Outbound Proxy setting for their SIP Trunking interface. It should be set to the LAN IP address of the IX78 (e.g if the IX78 still has its default setting). This is especially important if the Trunking Service communicates from several services at different IP addresses, e.g. due to load balancing. Some PBX have problems with SIP communication from different IP addresses, but by setting the Outbound Proxy to the IX78 address, even when the IX78 is used in Proxy mode, the PBX will see all SIP Communication coming from the single IP address of the IX78. 14

15 5.4 Using the SIP Trunk Configuration Page in the IX78 (Please remember that these settings, as well as most of the other ones in this description, usually are done by the installation Wizard and that this description is provided for reference.) The SIP Trunk page is new from version 5.20 of the IX78 firmware. Click the link in the bottom left corner of the Log-in page in the IX78 and upgrade the firmware if you have an older version. Using the SIP Trunk page will invoke the B2BUA for the connection of the PBX to the service provider s SIP Trunk and offers the advantages mentioned in section 5.2. Using the SIP Trunking page, there will be a clear demarcation point for the SIP Trunking service hand off. Using the SIP Trunking page replaces the previous way of configuring the IX78, where the B2BUA routing were entered on the SIP Switch page. It offers simplicity, additional functionality and a wider support of various PBXs and Trunk Services Both the PBX with its Phones and Other SIP Clients Can Use the SIP Trunk The SIP Trunk page also offers a simple way to allow SIP clients (SIP phones, the telephone (FXS) ports, Soft SIP clients for PCs and wireless SIP clients) to register to the IX78 use the SIP Trunk. This is done in addition to supporting the PBX and its extension phones Licenses Used with SIP Trunking The IX78 ADSL T8 GW2 model comes ready with licenses for SIP Trunking and 8 simultaneous calls. The SIP Trunking License allows the SIP Trunking configuration page and the Dial Plan on the SIP Switch page to be used. The SIParator License is also included. If you have another model of the IX78 without the SIP Trunk license installed, you can purchase it on-line by clicking the link in the upper right corner of the SIP Trunk page. (The SIP Trunking License is far less costly than the previous required SIP Server License plus the Seat Licenses required for the previous way setting up SIP Trunking in B2BUA mode.) You can have up to nine SIP Trunk pages for different PBXs and or SIP Trunk Services, but usually only one is required. One SIP Trunking License is required for each page. There are four steps to connect the PBX to the SIP Trunking service. Each of these steps is simple and straightforward: Define in the Dial Plan which outgoing calls to send to the SIP Trunk Enter the SIP Trunk Service parameters Enter the PBX parameters Define the number routing and authentication between the Trunk Service and the PBX Note that there are help texts available in the IX78 for each setting just press the yellow question mark closest to the particular setting. 15

16 6 Setting up the SIP Trunk Page This section describes the functioning and set-up of the SIP Trunk page in the IX78. Please remember that these settings, as well as most of the other ones in this description, usually are done by the installation Wizard and that this description is provided for reference Defining Outgoing Call Handling in the Dial Plan [Mandatory] Outgoing calls are processed through the Dial Plan (when On) and then searched line by line from the top for a match of the dialed number before it is forwarded. 1) This line in the figure below will match any number with 6 digits or more and forward the call to SIP Trunk page 1 for further processing. 2) This line will match calls from users that want to be anonymous and forward such calls to SIP Trunk page 1 with the #31# prefix to the number dialed. That will make the Telia service hide the caller s identity. 3) Other calls, e.g. sip calls as to john@smartcomp.com, are placed by the IX78 by the Allow entry under the Action column. 2) 1) 3) The IX78 can also authenticate callers (ask for password) trying to place an outgoing call on the SIP Trunk by selecting A&Forward under the Action column. The PBX must then have the callers credentials (User ID and Password) entered on the SIP Trunk Page, see below. Any SIP Client registered to the IX78, must also have its credentials in the User Account table on the SIP Switch page, see More details are available by pressing the yellow, giving you context sensitive help texts in the same way as in other parts of the IX78 web GUI. 16

17 The SIP Trunk Page There is a SIP Trunk page under menu Configurations > SIP > SIP Trunk Several SIP Trunk pages may be defined if you have several PBXs or Trunk Services. You need a SIP Trunk License for each SIP Trunk page. It can be purchased by clicking the Buy-link in the Web GUI of the IX78. Below are instructions how to set up the SIP Trunk page for the Telia SIPanslutning service. Please note the Dial Plan License and SIParator License are included in the SIP Trunking License that comes with IX78 ADSL T8 GW2. 17

18 Entering the SIP Trunking Service Parameters [Mandatory] For the Telia SIP-anslutning service, only the following three fields need to be filled in: 1) Service Provider domain, here telia.com, which is the host part of the SIP address of the account such as 2) Outbound Proxy is where the SIP requests for this trunk service are to be sent, here the FQDN (Fully Qualified Domain Name) sip.telia.com:5060 is entered. 3) Use WAN interface with special SIP QoS shall be checked when using Telia Bredband Företag and Telia Fiber LAN, but not when using ProLane. It will make the SIP traffic go on the special quality assured WAN interface. 1) 2) 3) Entering the PBX Parameters [Mandatory] Here you enter the basics relating to the PBX on the LAN. Other settings may be required, e.g. on the SIP Advanced page, Configurations > SIP > SIP Advanced. 1) The IX78 needs to know at which address the PBX is located, which can be entered as an IP address, a domain name or by a SIP registration by the PBX. It is recommended that you enter the IP address if the IP PBX is at a fixed IP address. 2) Here you can set up a SIP account, at which the PBX registers itself to show where it can be contacted. If the PBX is located on a fixed IP address, it is recommended that you also enter that one (see 1) above). By entering User ID and Password, the IX78 will force the PBX to Authenticate itself when registering to the IX78. The User ID and Password are also required if, in the Dial Plan, the IX78 is configured to authenticate users placing outgoing calls. 3) If several ways to address the PBX are entered (e.g. both 1) and 2) above), specify here which way the IX78 will try first. If that way fails, the other ways will be tried. 18

19 2) 1) 3) Other PBXs (than here exemplified) may require more of the available settings. For more details, please press the yellow in the Web GUI to show the context sensitive help texts Defining Number Routing, Registration to and Authentication for the Trunk Service [General Overview] In this section of the SIP Trunk page you define how outgoing calls from the PBX are routed to the Trunk Service (A:) and how incoming calls from the Trunk Service are routed to the PBX (B:). You also define whether the IX78 shall register to some of the Trunk Service accounts (C:) (e. g. to one or to all numbers). The Used ID and Password for the Trunk Service is also entered here (D:). The Identity column is used when the Trunk Service requires P-Asserted-Identity or P- Preferred-Identity to be used. See also the Service Provider domain is trusted (for P- Asserted-Identity) and Use P-Preferred-Identity (instead of P-Asserted-Identity) checkboxes among the SIP Trunking Service settings in C: A: Calls from a specific user will use D: Credentials the trunk line defined here. for Trunk Service B: Incoming calls will be sent to a specific user here. 19

20 The Main Trunk Line settings (E:) are the ones used if the caller or credentials (User ID and Password) are not defined further down. For services that depict one main number or account, this is where those settings are entered. At (F:) you enter the routing between the external (DID) numbers on the SIP Trunk and the numbers used by the PBX. At (G:) you can connect SIP Clients (e.g. SIP Phones, Soft PC SIP Clients or the Telephone Ports of the IX78) registered to the IX78 itself (not belonging to the PBX), to trunk numbers. H: E: F: G: Entering an Extension number for a PBX Line at (H:) will make that PBX user appear in the Account table on the SIP Switch page so Forwards, forking and other functions can be added as well as integration with SIP devices registered to the IX78. A Seat License is required for each such entry. Further details are available in the help texts, which are shown by pressing the yellow question mark in the Web GUI. 20

21 Typical settings for Telia SIP-anslutning when the PBX is configured to use the external (DID) numbers [Mandatory] 1) There must be a registration to all numbers of the Telia SIP-anslutning that you want to use. 2) Select one of the numbers of the Trunk Service (DID numbers) as your main number and enter it on this line together with the User ID (same as the telephone number for Telia SIP-anslutning) and Password. Calls from PBX users that are NOT entered further down in the table (3)), will use this trunk line and the main number will be shown to the called party (as Caller ID). 3) Enter the other DID numbers you want to use with the PBX on these line together with their credentials (User ID and Password) you received with the Trunk Service. The number under User Name will be shown to the called party as Caller ID. 4) Incoming calls will be forwarded to the PBX number (user) defined in the Forward to column. The mapping between the external (DID) numbers and the PBX numbers does not have to be as regular as shown here. One can add prefixes and map to any number, or even use the extension numbers of the PBX, see next section ) 4) 2) 3) In the PBX: With the settings above in the IX78, you need to enter all phone numbers (DID numbers) used with the trunk in the PBX and also map each of those numbers to the extension numbers the PBX uses. 21

22 Settings for Telia SIP-anslutning when the PBX only uses internal extension numbers The settings are similar to those in the previous section , but the PBX users are referenced by their extension numbers instead of the DID numbers as exemplified at A: and B:. In this example, we have also connected SIP clients (SIP Phones or soft PC Clients and the analog telephone ports of the IX78 itself - the FXS-ports) registered to the IX78 itself, to the SIP Trunk. (This can of course also be done with the configuration in the previous section.) 1) An ordinary (analog) fax machine has been connected Phone Port 1 of the IX78 and connected to one of the SIP Trunk telephone numbers (the DID numbers). The IX78 supports both T.38 fax and pass through fax to support various SIP Trunking services. 2) Here an ordinary (analog) telephone is connected to Phone Port 2 of the IX78 and linked to another of the SIP Trunk telephone numbers. 3) This line is for a soft SIP PC client on the LAN, registered to the IX78. A: B: 1) 2) 3) These three SIP clients also require a User Account on the SIP Configurations > SIP > SIP Switch page, see next section In the PBX: With the settings suggested in this section, the IX78 will forward calls directly to the extension numbers used by the PBX. Thus, no DID numbers (allocated by the Service Provider) have to be entered in the PBX and the PBX is expected to show the extension number of the caller in its From header Using SIP Clients registered to the IX78 with the SIP Trunk As shown in the previous section , SIP clients registered to the IX78 can also be connected to trunk phone numbers (DID numbers). These SIP clients need to have a SIP User Account on the SIP Switch page, found under Configurations > SIP > SIP Switch. Shown below are the User Accounts for the SIP clients referenced in the SIP Lines table at the SIP Trunk page in the previous section The two first User Accounts 1) and 2) are the (analog) Telephone ports (FXS ports) on the IX78, which here were configured by the PBX Configuration Wizard, but otherwise are 22

23 configured on the Telephone Port page found under Configurations > Telephone Ports but shown on and used on this page. Accounts for other SIP clients, like SIP Phones or Steven s Soft PC client here, are configured on this page. 1) This is the User Account for the fax machine Telefax connected to Telephone Port 1 of the IX78. On the SIP Trunk page in the previous section, this User Account is connected to the telephone (DID) number On this line, extension number 204 is also allocated to Telefax. 2) This is the User Account for the analog telephone connected to Telephone Port 2. Like 1) it is set up on the Telephone Port page. The entered credentials (User ID and Password) are only required if the IX78 is set up to authenticate outgoing calls through the SIP trunk (which is done in the Dial Plan, see 6.1.1). 3) The soft SIP Client steven is configured here and allocated extension number 211 in addition to its DID telephone number on the SIP Trunk page. Steven has setup his account to ring both his soft PC client and his mobile phone in Parallel. The entered credentials are required, if the PC Client is being used from a remote location over the Internet (Authentication is required for outside users at the Configurations > SIP page.). For further details, please refer to the help text by pressing the yellow question mark the Web GUI. on 1) 2) 3) A: To allow SIP clients, like SIP Phones or Steven s Soft PC client here, to use the IX78 as their SIP Server, Licenses are required. First you need a single SIP Server License and then for each User Account, you need a Seat License. The Seat License gives you the functions in the pink marked columns above. Click on the Buy More link in the IX78 Web GUI to buy Licenses. The built-in Telephone Ports (in IX78 with FXS ports) are ready to use these functions without extra licenses though. Usage of a Seat License is shown in pink as exemplified at A: in the picture above. 23

24 7 Other Settings when Connecting a PBX 7.1 Sound Quality Telia SIP-anslutning prioritizes the telephony traffic over the data traffic and hence the sound quality should always be good. There are some settings available in the IX78 for prioritization and traffic shaping on the web page Configurations > SIP > Advanced SIP settings. Normally these should not be changed. If WAN connection is Ethernet instead of ADSL, for example when using Telia ProLane, it is sometimes useful to fill in the settings for upstream Link capacity under Prioritize SIP media streams in the second to last box on the page Configurations > SIP > Advanced SIP Settings. This is only applicable in case the outgoing sound is deteriorated because there is something else on the LAN (apart from IP telephony) that generates a lot of traffic in the same port range, UDP , that Telia prioritizes for telephony media. For example, if real upstream capacity is 1.8Mbps you can enter 1400kbps link capacity in the IX78 and check if this improves the sound quality. Example: This setting can however only improve the sound quality in case the IX78 acts as the firewall. In case an existing firewall is used, that firewall has to restrict possible traffic overload that is sent within the prioritized range. 7.2 Remote Administration The Intertex IX78 E-SBC makes it possible to remotely administrate the IP-PBX over the Internet, even though the telephony traffic is sent over a separate quality controlled channel. In order to remotely administrate a PBX behind the Intertex IX78 E-SBC, a specific port needs to be opened in the firewall to the IP address of the PBX on the LAN. Please do the following in the Intertex IX78 E-SBC: 1. Select Configurations > Security > Low (active) in the menu. 2. In the table named Port redirection, TCP connections enter: outside port(s) <port number> for example 5000 (different IP-PBXs use different port numbers). inside host <IP address of the PBX>, for example: Click on Apply. 24

25 Example: If you use another firewall, not the IX78, a similar setting must be made in that firewall. 7.3 Dynamic DNS Dynamic DNS can be used in order to reach the PBX even though the broadband connection has a dynamic IP address. Please do the following in the Intertex IX78 E-SBC in order to use dynamic DNS: 1. Select Configurations > Network > Dynamic DNS in the menu. 2. Select dyndns provider. 3. Configure the following settings: Hostname Account type User Password The complete host namn that has been registered at the provider s site, for example dnsuser.mine.nu Only applicable for dyndns.org, ignored by all other providers. The user name used when connecting to the provider. The password used when connecting to the provider. 4. Click on Apply. Example: 25

26 7.4 Security Profile Low In order for some PBXs to work through the Intertex IX78 E-SBC we recommend putting the IX78 into the Low security profile. 1. In the column to the left, please select: Active profile: Low. 2. Click on Change. Please note that the Low security setting in the Intertex IX78 E-SBC is as secure as the normal setting in many other firewalls. The main difference between the High and Low settings is that all ports and applications are allowed for use from the inside towards the Internet in the Low setting, while the High setting only allows the use of well known ports and applications (it is more restrictive for traffic from the LAN towards the public network.) 7.5 Interference on the ADSL Connection Telia Bredband Företag is usually delivered over an ADSL connection on a traditional telephone line. Because of the distance to the central office, other broadband connections in adjacent wires, other sources of interference or problems with the wiring itself, problems can sometimes be experienced on the physical connection and the IP telephony communication. On the page Status > ADSL in the IX78, it is possible to look at parameters describing the quality of the ADSL connection, including CRC errors both upstream and downstream. If this counter increases quickly (check by refreshing the web page) at the same time as you experience problems with the IP telephony, the ADSL connection can be the cause of the problem. The following actions can decrease the interference and enhance the connection quality: Make sure that the ADSL wires to the IX78 are really coming from the first telephone jack in the building and that the supplied splitter is used. Make sure there are no strong interfering sources, for example switched power supplies or other electronic equipment, close to the ADSL wires or the IX78. Make sure there are no strong interfering sources, for example switched power supplies or other electronic equipment, connected to the same power socket as the IX78. If your connection is a 24 Mbps Telia Bredband Företag without extra error protection, you can try configuring the IX78 so that it connects less aggressively. This will give you a lower data transfer rate but increases tolerance against interference. Under Configurations > ADSL please click on the link ADSL2(+) Annex M. On the page that appears, please check the box Force SNR Margin and enter 15 db (the default setting is 8 db). Thereafter restart the IX78. If your connection is a 24 Mbps Telia Bredband Företag without extra error protection, you could also ask Telia to use the line profile called l2l3-a102-3 which will give you 12 Mbps downstream and 2 Mbps upstream, but again with better error protection. You could also ask Telia to try using another set of ADSL wires, if possible, as some wire pairs can be less than optimal and occasionally cause problems. 26

27 8 Specific Problems with Some IP-PBXs 8.1 If Calls are Cut Off at a Specific Time into each Call Telia SIP-anslutning does not support SIP UPDATE messages, but uses RE-INVITE instead. If the IP-PBX uses UPDATE, ongoing calls will be disconnected after the time specified by the session timer within the PBX. This is no problem when the IX78 is used in B2BUA mode, using the SIP Trunk page, only when using the IX78 in proxy mode. If possible, configure the PBX to use RE-INVITE instead of UPDATE. If this is not possible, the session timer in the PBX can be increased. In order to ascertain that calls can go on for more than 1 hour, you also need to configure a higher value in the IX78, which is done under Configurations > SIP > SIP Advanced in the box SIP proxy after Time-out for SIP session. 8.2 The PBXs that Cannot Handle Fragmented SIP Messages When sending telephony traffic over IP using SIP, messages can sometimes grow bigger than one UDP packet and will then be split into two packets. Some IP-PBXs cannot handle this and it is then recommended to configure the IX78 to reduce the length of the messages, without removing vital information. If the PBX has problems handling fragmented SIP messages, we recommend the setting Hide Via headers on requests to IP addresses: <IP address to the IP-PBX on the LAN> in the Advanced frame on the page Configurations > SIP > SIP Advanced. Example: When using Telia SIP-anslutning this setting will remove 3 via headers when the messages become too long, hence decreasing the length of the message by approximately 200 bytes. (The via headers are added on the way back but this setting shall not be used unnecessarily as the protection against communication loops is decreased). 27

28 8.3 If the PBX Sends some SIP Messages with a Numeric Instead of a Symbolic Domain Address Some PBXs sometimes address> instead in the from header in some SIP messages, for example OPTIONS, but not in others. This is no problem when the IX78 is used in B2BUA mode, using the SIP Trunk page, but is when using the IX78 in proxy mode. The following setting will solve this problem: 1. Select Configurations > SIP from the menu. 2. In the Outbound proxy table, add the IP address of the PBX under for Request from Domains. 3. Click on Apply. Example: 28