BroadSoft Partner Configuration Guide

Transcription

1 BroadSoft Partner Configuration Guide Patton Smartde Trinity SBC April 2015 Document Version Washingtonian Boulevard, Suite 350 Gaithersburg, MD Tel

2 BroadWorks Guide Copyright tice Trademarks Copyright 2015 BroadSoft, Inc. All rights reserved. Any technical documentation that is made available by BroadSoft, Inc. is proprietary and confidential and is considered the copyrighted work of BroadSoft, Inc. This publication is for distribution under BroadSoft non-disclosure agreement only. part of this publication may be duplicated without the express written permission of BroadSoft, Inc., 9737 Washingtonian Boulevard, Suite 350, Gaithersburg, MD BroadSoft reserves the right to make changes without prior notice. Any product names mentioned in this document may be trademarks or registered trademarks of BroadSoft or their respective companies and are hereby acknowledged. This document is printed in the United States of America BROADSOFT INC. PAGE 2 OF 29

3 Document Revision History Version Reason for Change 1.1 Introduced document for Patton Smartde Trinity version Trinity 3.x M5T SIP Stack/ validation with BroadWorks Release 20.sp Edited and published document. Verified Table of Figures BROADSOFT INC. PAGE 3 OF 29

4 Table of Contents 1 Overview Interoperability Status Verified Versions Interface Capabilities Supported Known Issues Smartde Trinity Configuration Configuration Method System Configuration Configure Network Interfaces Configure Redundancy SIP Configuration Configure SIP Core Side Configure SIP Access Side Remote Survivability Configuration Appendix A: Reference Smartde Trinity Configuration References BROADSOFT INC. PAGE 4 OF 29

5 1 Overview This guide describes the configuration procedures required for the Patton Smartde Trinity SBC for interoperability with BroadWorks. The Smartde Trinity is a CPE based Session Border Controller that has been validated with BroadWorks. This guide describes the specific configuration items that are important for use with BroadWorks. It does not describe the purpose and use of all configuration items on the Smartde Trinity. For those details, see the Trinity Administrator s Guide [1] supplied by Patton BROADSOFT INC. PAGE 5 OF 29

6 2 Interoperability Status This section provides the known interoperability status of the Patton Smartde Trinity SBC with BroadWorks. This includes the version(s) tested, the capabilities supported, and known issues. Interoperability testing validates that the device interfaces properly with BroadWorks via the Session Initiation Protocol (SIP) interface. Qualitative aspects of the device or device capabilities not affecting the SIP interface, such as performance, are not covered by interoperability testing. Requests for information and/or issues regarding these aspects should be directed to Patton. 2.1 Verified Versions The following table identifies the verified Patton Smartde Trinity SBC and BroadWorks versions and the month/year the testing occurred. If the device has undergone more than one test cycle, versions for each test cycle are listed, with the most recent listed first. Compatible Versions in the following table identify specific Smartde Trinity versions that the partner has identified as compatible so should interface properly with BroadWorks. Generally, maintenance releases of the validated version are considered compatible and are not specifically listed here. For any questions concerning maintenance and compatible releases, contact Patton. NOTE: Interoperability testing is usually performed with the latest generally available (GA) device firmware/software and the latest GA BroadWorks release and service pack at the time the testing occurs. If there is a need to use a non-verified mix of BroadWorks and device software versions, customers can mitigate their risk by self-testing the combination themselves using the BroadWorks Session Border Controller Interoperability Test Plan [5]. Verified Versions Date (mm/yyyy) BroadWorks Release Smartde Trinity Verified Version Smartde Trinity Compatible Versions 03/2015 Release 20.sp1 Trinity 3.x Any maintenance revisions of the validated release BROADSOFT INC. PAGE 6 OF 29

7 2.2 Interface Capabilities Supported The Patton Smartde Trinity SBC has completed interoperability testing with BroadWorks using the BroadWorks Session Border Controller Interoperability Test Plan [5]. The results are summarized in the following table. The BroadWorks test plan is composed of packages, each covering distinct interoperability areas, such as Basic call scenarios and Redundancy scenarios. Each package is composed of one or more test items, which in turn, are composed of one or more test cases. The test plan exercises the SIP interface between the device and BroadWorks with the intent to ensure interoperability sufficient to support the BroadWorks feature set. The Supported column in the following table identifies the Patton Smartde Trinity SBC s support for each of the items covered in the test plan packages, with the following designations: Test item is supported Test item is not supported NA Test item is not applicable to the device type NT Test item was not tested Caveats and clarifications are identified in the Comments column. NOTE: DUT in the following table refers to the Device Under Test, which in this case is the Patton Smartde Trinity SBC. BroadWorks Session Controller Interoperability Test Plan Support Table Test Plan Package Test Plan Package Items Supported Comments Basic Call Origination Call Termination Session Audit Session Timer Ringback Forked Dialog Early UPDATE Early-Session 181 Call Being Forwarded DTMF Inband DTMF RFC 2833 DTMF DTMF Relay BroadWorks Services Third-Party Call Control Basic Third-Party Call Control Advanced Only Click-to-Dial. Message Waiting Indicator Unsolicited 2015 BROADSOFT INC. PAGE 7 OF 29

8 BroadWorks Session Controller Interoperability Test Plan Support Table Test Plan Package Test Plan Package Items Supported Comments Access Device Services Call Control Services Message Waiting Indicator Solicited Voice Portal Outcall Advanced Alerting Calling Line ID n-trusted Endpoint Calling Line ID with Unicode Characters n-trusted Endpoint Calling Line ID Trusted Endpoint Calling Line ID with Unicode Characters Trusted Endpoint Diversion Header History-Info Header Deny Calls from Unregistered Users Enterprise Trunking Originating Trunk Group (OTG) Enterprise Trunking Destination Trunk Group (DTG) Enterprise Trunking Trunk Group (TGRP) Call Waiting Call Hold Call Transfer Except Blind Transfer. Access Device Services Registration and Authentication Local Conference Network Conference Call Forwarding Registration Register Authentication Registration Maximum Registration Registration Minimum Registration Authentication Invite Authentication Authentication Re-Invite or Update Authentication Authentication Refer Authentication Authentication Access Device Authenticating BroadWorks SIP Trunk GIN Registration GIN Register 2015 BROADSOFT INC. PAGE 8 OF 29

9 BroadWorks Session Controller Interoperability Test Plan Support Table Test Plan Package Test Plan Package Items Supported Comments Access Device Services Fax Advanced Phone Services Busy Lamp Field Advanced Phone Services Feature Key Synchronization Advanced Phone Services Shared Call Appearance Advanced Phone Services Call Recording Advanced Phone Services Security Classification SIP Trunk GIN Registration Call to PBX User SIP Trunk GIN Registration Call from PBX User SIP Trunk Pilot Registration Pilot Register SIP Trunk Pilot Registration Call to PBX User SIP Trunk Pilot Registration Call from PBX User Surrogate Registration Pilot Register Surrogate Registration Call to PBX User Surrogate Registration Call from PBX User G711 Fax Passthrough G711 Fax Fallback T38 Fax Messaging Busy Lamp Field Maximum Monitored Users Do t Disturb Call Forwarding Call Center Agent Logon/Logoff Call Recording Security Classification Line-Seize Events Call-Info Events Multiple Call Arrangement Bridging Call Recording Controls Call Recording Video Security Classification NT NT NT NT NT NT Redundancy DNS SRV Lookup Premise based. Register Failover/Failback Premise based. Invite Failover/Failback Premise based. Bye Failover Premise based BROADSOFT INC. PAGE 9 OF 29

10 BroadWorks Session Controller Interoperability Test Plan Support Table Test Plan Package Test Plan Package Items Supported Comments Video Basic Video Calls Video BroadWorks Video Services Video BroadWorks Video Conference Call Origination Call Termination Call Hold Call Transfer Auto Attendant Auto Attendant HD Voice Messaging Network Conference Network Conference HD Collaborate Video Collaborate Video HD Remote Survivability Register Local Calls Without Subscriber Data PSTN Calls Without Subscriber Data SCA Call Without Subscriber Data Register for Subscriber Data Local Calls With Subscriber Data PSTN Calls With Subscriber Data SCA Call With Subscriber Data IPV6 Call Origination Call Termination Ringback Call Control Registration with Authentication T38 Fax Messaging Busy Lamp Field Redundancy Video Dual Stack with Alternate Connectivity 2.3 Known Issues This section lists the known interoperability issues between BroadWorks and specific partner release(s). Issues identified during interoperability testing and known issues identified in the field are listed BROADSOFT INC. PAGE 10 OF 29

11 The following table provides a description of each issue and, where possible, identifies a workaround. The verified partner device versions are listed with an X indicating that the issue occurs in the specific release. The issues identified are device deficiencies or bugs, so typically not BroadWorks release dependent. The Issue Number is a tracking number for the issue. If it is a Patton issue, the issue number is from Patton s tracking system. If it is a BroadWorks issue, the issue number is from BroadSoft s tracking system. For more information on any issues related to the particular partner device release, see the partner release notes. Issue Number Issue Description Partner Version Trinity 3.x Reference trac# 4977 REFER message for Blind transfer not correct. In case of Blind transfer, DUT should send REFER without Replaces in the REFER-TO header. However DUT adds the Replaces field causing the REFER to be declined. Workaround: ne. X 2015 BROADSOFT INC. PAGE 11 OF 29

12 3 Smartde Trinity Configuration This section describes the configuration settings required for the Smartde Trinity integration with BroadWorks, primarily focusing on the SIP interface configuration. The Smartde Trinity configuration settings identified in this section have been derived and verified through interoperability testing with BroadWorks. For configuration details not covered in this section, see the Trinity Administrator s Guide [1] from Smartde Trinity SBC. 3.1 Configuration Method The following figure shows the Smartde System Overview. Figure 1 Smartde System Overview Files (Files can be loaded via HTTP or TFTP) Image files System files Batch files File handling Configuration Files copy: <the main file handling command on the Smartde> erase: <the command to delete files on the Smartde> Configuration files contain commands that are used to define the functionality of Trinity. During system startup, the command parser reads the factory or startup configuration file command-by-command, organizes the arguments, and dispatches each command to the command shell for execution. If you use the CLI to enter a command during operation, alter the running configuration accordingly. In other words, you are modifying a live, inservice system configuration. Configuration files may be copied into the local memory to switch between different configurations. Remember the different local memory regions in Trinity as shown in the following figure. System Image Files: System image handling management is a complex and feature rich system allowing a user to perform various upgrades on the devices. It allows a user to perform full upgrades and partial upgrades. It allows you to upgrade system configurations seamlessly BROADSOFT INC. PAGE 12 OF 29

13 Configuration File Overview: KEY: System Level Configuration Call Level Configuration Registration/Subscription Configuration # # # # # Patton Electronics Company # # Smartde Trinity # # Release: Trinity 3.x # # Generated configuration file # # # # # cli version 4.00 superuser admin1 password admin1 administrator admin2 password admin2 superuser - Can modify the system configuration, as well as view all relevant system information. Superusers can also create new users. administrator - Can modify the system configuration, as well as view all relevant system information. Administrators cannot create new users. actions rule PROV_STARTUP condition ip address:wan.dhcp LINKUP initial action 1 "provisioning execute PF_PROVISIONING_CONFIG" Auto Provisioning Actions scripts. (To activate provisioning) ntp server time.nist.gov NTP Server Settings dns-server host DNS relay dns-client dns-client name-server DNS Server Settings profile dhcp-server DHCPS_LAN lease 2 hours default-router domain-name-server include DHCP Server Settings profile voip DEFAULT codec 1 g711alaw64k rx-length 20 tx-length 20 codec 2 g711ulaw64k rx-length 20 tx-length BROADSOFT INC. PAGE 13 OF 29

14 codec 3 g729 rx-length 20 tx-length 20 fax transmission 1 relay t38-udp fax transmission 2 bypass g711ulaw64k rx-length 20 tx-length 20 The VoIP Profile builds the SDP parameters within the SIP messages context ip ROUTER interface IF_WAN ipaddress IF_WAN /28 use profile napt DEFAULT IF_WAN WAN IP Address Settings (Public facing side) interface IF_LAN ipaddress IF_LAN /24 tcp adjust-mss rx mtu tcp adjust-mss tx mtu LAN IP Address Settings (Private facing side) routing-table DEFAULT route /0 gateway metric 0 WAN Default Gateway Address interface sip IF_SIP_BROADSOFT bind context sip-gateway GW_SIP_WAN route call dest-service SIP_LOCATION_SERVICE remote as.iop1.broadworks.net trust remote This is where you set the parameters that are used to generate SIP INVITE s. The remote parameter builds the host part of the To-Header-URI and the Request-URI. interface sip IF_SIP_LAN bind context sip-gateway GW_SIP_LAN route call dest-interface IF_SIP_BROADSOFT local This is where you set the parameters that are used to generate SIP INVITE s. The local parameter builds the host part of the From-Header-URI. service sip-location-service SIP_LOCATION_SERVICE bind location-service LOC_SVC_LAN This service is the main consumer of the address bindings (mapping of the users identity to a contact address) deposited in the location service data base. authentication-service AUTH_SVC_BROADSOFT realm 1 as.iop1.broadworks.net username password xxxxxx username password xxxxxx This is a Database for Username/Passwords on the WAN side (encrypted on view) towards Broadsoft. authentication-service AUTH_SVC_LAN username password xxxxxx username password xxxxxx This is a Database for Username/Passwords on the LAN side (encrypted on view) towards the local LAN BROADSOFT INC. PAGE 14 OF 29

15 location-service LOC_SVC_BROADSOFT domain 1 as.iop1.broadworks.net match-any-domain This is a Database for Registration info for the WAN side towards Broadsoft. identity-group DEFAULT authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT registration outbound register auto message inbound message-server as.iop1.broadworks.net lifetime 180 subscribe explicit Identity-group default is where you can set settings that apply globally to all usernames for the WAN side towards Broadsoft. identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username This is for the user specific settings for the WAN side towards Broadsoft. location-service LOC_SVC_LAN domain match-any-domain identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound This is for the user specific settings the LAN side towards the local LAN. context sip-gateway GW_SIP_LAN bind location-service LOC_SVC_LAN 2015 BROADSOFT INC. PAGE 15 OF 29

16 interface IF_GW_SIP_LAN transport-protocol udp+tcp 5060 no transport-protocol tls bind ipaddress ROUTER IF_LAN IF_LAN context sip-gateway GW_SIP_LAN context sip-gateway GW_SIP_WAN bind location-service LOC_SVC_BROADSOFT interface IF_GW_SIP_WAN transport-protocol udp+tcp 5060 no transport-protocol tls bind ipaddress ROUTER IF_WAN IF_WAN context sip-gateway GW_SIP_WAN notify check-sync accept This is where the forwarding and reception of SIP packets is done. port ethernet 0 0 bind interface ROUTER IF_WAN port ethernet 0 1 bind bridge-group BG port ethernet 0 2 bind bridge-group BG port ethernet 0 3 bind bridge-group BG This is where the physical setup of Ethernet Ports is done. Configuration Files Smartde Trinity Configuration Files Trinitytable entry can you provide ch y 3.x.x.tar Smartde Trinity_SBC Description Contains the device firmware load. Contains configurable parameters for the session controller device. 3.2 System Configuration This section describes system configuration items required for the Smartde Trinity Configure Network Interfaces This section describes how to configure the Smartde Trinity network interfaces BROADSOFT INC. PAGE 16 OF 29

17 Step Command Description Step 1 context ip <cr> Enters the Context IP section of config. Step 2 Step 3 interface <interface name> For example, interface IF_WAN. ipaddress <Smartde Trinity IP address> <netmask> For example, ipaddress IF_WAN /28 Enters the IP interface. Enter IP Address of the Smartde Trinity (LAN or WAN side) Configure IPV6 Settings Smartde Trinity does not support IPv Configure Redundancy This section describes how to configure the Smartde Trinity for server redundancy. Step Command Description Step 1 context cs <cr> Enters the Context CS section of config. Step 2 Step 3 Step 4 service hunt-group <HG name> For example, service hunt-group HG_REDUNDANCY. route call dest-interface <Broadsoft SIP interface name> For example, route call 1 dest-interface IF_SIP_BROADSOFT. route call dest-service <HG service name> For example, route call 2 dest-service SIP_LOCATION_SERVICE. Enters the hunt-group service. Specifies a primary route to BroadSoft servers. Specifies the redundant route to take in case of WAN outage. 3.3 SIP Configuration This section identifies the Smartde Trinity configuration to enable SIP on the access and core side of the SBC Configure SIP Core Side Configure SIP Parameters This section describes how to configure SIP parameters such as timers and headers. Step Command Description Step 1 context cs <cr> Enters the context CS section. Step 2 interface sip <Broadsoft SIP interface name> For example, interface sip IF_SIP_BROADSOFT. Enters the SIP interface for communication with BroadSoft. SIP header and timer values are set here BROADSOFT INC. PAGE 17 OF 29

18 Configure BroadWorks SIP Peers This section describes how to configure the Smartde Trinity with BroadWorks Application Server and Network Server peer(s). Step Command Description Step 1 context cs <cr> Enters the context CS section. Step 2 Step 3 Interface sip <Broadsoft SIP interface name> For example, interface sip IF_SIP_BROADSOFT. remote <Broadworks server FQDN> For example, remote as.iop1.broadworks.net. Enters the SIP interface for BroadSoft. Builds the host part of the To-Header- URI and the Request-URI Configure Registration This section describes how to configure the Smartde Trinity core-side registration settings. Step Command Description Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 authentication-service <WAN Auth svc name> For example, authentication-service AUTH_SVC_BROADSOFT. realm <realm address> For example, realm as.iop1.broadworks.net. username <Broadworks username> password <Broadworks password> For example, username password user_password. location-service <Location svc name> For example, location-service LOC_SVC_BROADSOFT. domain <domain IP Address or FQDN> For example, domain 1 as.iop1.broadsoft.net. identity <Broadworks BWDN> For example, identity Enters into the authentication service to set the username and passwords. Enters a Realm for authentication. If left blank, the credentials are used for any realm. Creates the username and password used for authentication and registration. Enters into the location service to set up users. Specifies the domains that this location service is responsible for. An identity represents one of multiple possible addresses over, which a user is reachable. Step 7 authentication outbound <cr> Enters the outbound authentication section. Step 8 authenticate authenticationservice <Auth svc name> username <Broadworks username> For example, authenticate 1 authentication-service AUTH_SVC_BROADSOFT username Specifies which credentials to use for authentication. Step 9 registration outbound <cr> Enters the outbound registration section BROADSOFT INC. PAGE 18 OF 29

19 Step Command Description Step 10 register auto <cr> Enables registration request to be sent Configure Failover/Failback for BroadWorks Redundancy This section describes how to configure the Smartde Trinity failover and failback mechanism to support BroadWorks redundant Application Servers and Network Servers. Step Command Description Step 1 context cs <cr> Enters the context CS section of config. Step 2 Step 3 Interface sip <interface name> For example, interface sip IF_SIP_BROADSOFT. penalty-box sip-option-trigger interval 20 timeout 20 <cr> Enters the SIP interface. A failed destination is put into the penalty box. Any destination that is not in the penalty box has a higher priority for use as destinations listed in the penalty box Configure SIP Access Side Configuration for Registering Devices This section describes how to configure the Smartde Trinity for registering access device peers such as SIP phones. Step Command Description Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 authentication-service <LAN Auth svc name> For example, authentication-service AUTH_SVC_LAN. realm <realm address> (if applicable) username <Local username> password <Local password> For example, username password user_password. location-service <Location svc name> For example, location-service LOC_SVC_LAN. domain <domain IP Address or FQDN> For example, domain identity <Local BWDN> For example, identity Enters into the authentication service to set the username and passwords. Enters a realm for authentication. If left blank, the credentials are used for any realm. Creates username and password used for authentication and registration. Enters into the location service to set up users. Specifies the domains that this location service is responsible for. An identity represents one of multiple possible addresses over which a user is reachable. Step 7 authentication inbound <cr> Enters the inbound authentication section. Step 8 authenticate authenticationservice <Auth svc name> username <Local username> Specifies which credentials to use for authentication BROADSOFT INC. PAGE 19 OF 29

20 Step Command Description For example, authenticate 1 authentication-service AUTH_SVC_LAN username Step 9 registration inbound <cr> Enters the inbound registration section Configuration for n-registering Devices Call routing accomplishes this, which can be done many ways. Contact support@patton.com for questions concerning non-registering devices Configuration for GIN Registering Devices Smartde Trinity does not support GIN registration Configuration for Pilot Registering Devices Smartde Trinity does not support pilot or surrogate registration. 3.4 Remote Survivability Configuration Smartde Trinity does not support Remote Survivability BROADSOFT INC. PAGE 20 OF 29

21 Appendix A: Reference Smartde Trinity Configuration The following is a reference configuration for the Smartde Trinity configured for use with BroadWorks. Sample Config: # # # # # Patton Electronics Company # # Smartde Trinity # # Release: Trinity 3.x # # Generated configuration file # # # # # cli version 4.00 superuser admin1 password admin1 administrator admin2 password admin2 system hostname TRINITY_SN rtp-port-range switch mode groups actions rule PROV_STARTUP condition ip address:wan.dhcp LINKUP initial action 1 "provisioning execute PF_PROVISIONING_CONFIG" profile aaa DEFAULT method 1 local method 2 none console use profile aaa DEFAULT telnet-server use profile aaa DEFAULT ssh-server use profile aaa DEFAULT snmp-server shutdown web-server http use profile aaa DEFAULT ntp server time-nist.gov profile napt DEFAULT dns-server host DNS relay dns-client profile dhcp-server DHCPS_LAN lease 2 hours default-router domain-name-server include BROADSOFT INC. PAGE 21 OF 29

22 profile tls DEFAULT authentication incoming authentication outgoing private-key pki:private-key/default own-certificate 1 pki:own-certificate/default profile voip DEFAULT codec 1 g711alaw64k rx-length 20 tx-length 20 codec 2 g711ulaw64k rx-length 20 tx-length 20 codec 3 g729 rx-length 20 tx-length 20 fax transmission 1 relay t38-udp fax transmission 2 bypass g711ulaw64k rx-length 20 tx-length 20 profile sip DEFAULT context ip ROUTER interface IF_WAN ipaddress IF_WAN /28 use profile napt DEFAULT IF_WAN interface IF_LAN ipaddress IF_LAN /24 tcp adjust-mss rx mtu tcp adjust-mss tx mtu routing-table DEFAULT route /0 gateway metric 0 profile ppp DEFAULT context bridge bridge-group BG bind interface ROUTER IF_LAN context switch-group DEFAULT shutdown context cs SWITCH interface sip IF_SIP_BROADSOFT bind context sip-gateway GW_SIP_WAN route call dest-service SIP_LOCATION_SERVICE remote as.iop1.broadsoft.net penalty-box sip-option-trigger interval 20 timeout 20 trust remote interface sip IF_SIP_LAN bind context sip-gateway GW_SIP_LAN route call dest-service HG_REDUNDANCY local service sip-location-service SIP_LOCATION_SERVICE bind location-service LOC_SVC_LAN service hunt-group HG_REDUNDANCY drop-cause normal-unspecified drop-cause no-circuit-channel-available drop-cause network-out-of-order drop-cause temporary-failure drop-cause switching-equipment-congestion drop-cause access-info-discarded drop-cause circuit-channel-not-available drop-cause resources-unavailable route call 1 dest-interface IF_SIP_BROADSOFT route call 2 dest-service SIP_LOCATION_SERVICE service bridge GROUP BROADSOFT INC. PAGE 22 OF 29

23 authentication-service AUTH_SVC_BROADSOFT realm 1 as.iop1.broadsoft.net username password user_password username password user_password username password user_password username password user_password username password user_password username password user_password username password user_password username password user_password authentication-service AUTH_SVC_LAN username password user_password username password user_password username password user_password username password user_password username password user_password username password user_password username password user_password username password user_password location-service LOC_SVC_BROADSOFT domain 1 as.iop1.broadsoft.net match-any-domain identity-group default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT registration outbound register auto message inbound message-server as.iop1.broadsoft.net lifetime 180 subscribe explicit identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username BROADSOFT INC. PAGE 23 OF 29

24 identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username identity inherits default authentication outbound authenticate 1 authentication-service AUTH_SVC_BROADSOFT username location-service LOC_SVC_LAN domain match-any-domain identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound identity authentication inbound authenticate 1 authentication-service AUTH_SVC_LAN username registration inbound context sip-gateway GW_SIP_LAN 2015 BROADSOFT INC. PAGE 24 OF 29

25 bind location-service LOC_SVC_LAN interface IF_GW_SIP_LAN transport-protocol udp+tcp 5060 no transport-protocol tls bind ipaddress ROUTER IF_LAN IF_LAN context sip-gateway GW_SIP_LAN context sip-gateway GW_SIP_WAN bind location-service LOC_SVC_BROADSOFT interface IF_GW_SIP_WAN transport-protocol udp+tcp 5060 no transport-protocol tls bind ipaddress ROUTER IF_WAN IF_WAN context sip-gateway GW_SIP_WAN notify check-sync accept port ethernet 0 0 bind interface ROUTER IF_WAN port ethernet 0 1 bind bridge-group BG port ethernet 0 2 bind bridge-group BG port ethernet 0 3 bind bridge-group BG Factory Config: # # # # # Shipping Configuration # # SN5300/4B/EUI # # # # # cli version 4.00 snmp shutdown rtp-port-range actions rule PROV_STARTUP condition ip address:wan.dhcp LINKUP initial action 1 "provisioning execute PF_PROVISIONING_CONFIG" profile aaa DEFAULT 2015 BROADSOFT INC. PAGE 25 OF 29

26 method 1 local rule required method 2 none rule required console use profile aaa DEFAULT telnet-server use profile aaa DEFAULT ssh-server use profile aaa DEFAULT web-server http use profile aaa DEFAULT ntp server 0.patton.pool.ntp.org server 1.patton.pool.ntp.org server 2.patton.pool.ntp.org server 3.patton.pool.ntp.org profile napt NAPT_WAN dns-server profile dhcp-server DHCPS_LAN network /24 lease 24 hours default-router domain-name-server include profile provisioning PF_PROVISIONING_CONFIG destination configuration activation reload immediate 2015 BROADSOFT INC. PAGE 26 OF 29

27 location 1 hwmajor=$(system.hw.major);hwminor=$(system.hw.minor);swmajor=$(system.sw.major);sw Minor=$(system.sw.minor);swDate=$(system.sw.date);productName=$(system.product.name );climajor=$(cli.major);climinor=$(cli.minor);osname=trinity;subdirtrinity=/trinity ;subdirtrinity=;dhcp66=$(dhcp.66);dhcp67=$(dhcp.67) location 2 $(dhcp.66) location 3 $(dhcp.66)/$(system.mac).cfg location 4 location 5 location 6 tftp://$(dhcp.66)/$(dhcp.67) location 7 tftp://$(dhcp.66)/$(system.mac).cfg profile voip DEFAULT codec 1 g711alaw64k rx-length 20 tx-length 20 codec 2 g711ulaw64k rx-length 20 tx-length 20 profile sip DEFAULT context ip ROUTER interface WAN ipaddress DHCP use profile napt NAPT_WAN DHCP interface LAN ipaddress LAN /24 routing-table DEFAULT context ip ROUTER use profile dhcp-server DHCPS_LAN profile ppp DEFAULT context switch-group DEFAULT bind interface ROUTER LAN interface ETHERNET_0_1 interface ETHERNET_0_2 interface ETHERNET_0_ BROADSOFT INC. PAGE 27 OF 29

28 port ethernet 0 0 bind interface ROUTER WAN port ethernet 0 1 bind switch-group DEFAULT ETHERNET_0_1 port ethernet 0 2 bind switch-group DEFAULT ETHERNET_0_2 port ethernet 0 3 bind switch-group DEFAULT ETHERNET_0_ BROADSOFT INC. PAGE 28 OF 29

29 References [1] Smartde Trinity Administrator s Guide. Patton Electronics Co., Trinity Release 3.4.X Command Line Reference Guide, Rev. B (v002), Trinity3-cli.pdf. Available from Smartde at [2] BroadSoft, Inc BroadWorks Redundancy Guide, Release Available from BroadSoft at xchange.broadsoft.com. [3] BroadSoft, Inc BroadWorks SIP Access Interface Interworking Guide, Release Available from BroadSoft at xchange.broadsoft.com. [4] BroadSoft, Inc BroadWorks SIP Trunking Solution Guide, Release Available from BroadSoft at xchange.broadsoft.com [5] BroadSoft, Inc BroadWorks Session Border Controller Interoperability Test Plan, Release Available from BroadSoft at xchange.broadsoft.com BROADSOFT INC. PAGE 29 OF 29