Unified Capabilities and Tactical Overview 7 May 2012 Version 3
What is Unified Capabilities? A Combat Support Agency Enterprise Network Convergence DoD Unified Capabilities Voice Video Data Tactical The Users / Mission Partners Interoperability Information Assurance Network Performance Robust, diverse and resilient protected communications, and computing environment enabling Net Centric Operations 2
Unified Capabilities Delivering Commercial Capabilities to the Warfighter fg A Video Presence Co Ringing Software Linkage IM/Chat Voicemail/ E mail Integration Integrated Directory Voice Conferencing & Conf. Control Mobile Devices Voice & Video / Conferencing Bridges 3
Organizational Relationships 4
Equipment Terminology Multi-Function Switch (MFS) Legacy backbone switch serving DSN Soft Switch (SS) IP based backbone switch used to tandem sessions between SCs Session Controller (SC) IP based phone switch that t replaces PBX s and End Offices Certified in multiple configurations based on Service need Local Session Controller (LSC), Enterprise Session Controller (ESC), Master/Subtended Session Controller (MSC) Session Border Controller (SBC) VVoIP aware firewall located at the IA accreditation boundary in parallel/combination with data firewall 5
Planned Unified Capabilities (2013 2016) Session Creation Ceato Prioritization ato Identity ty Mgmt. Voice oceisp Peering Collaboration at o Tool IP DRSN Device Multi Level Secure Interface Circuit-Switching Capa abilities AS SIP for session creation Messaging and Presence A Endpoints use DSCP Legacy Interop. DoD PKI for authentication Availability Central IP based PSTN access Directory Integration of UC service with DCO Messaging Integration IP enabled DRSN endpoints Cross Domain UC Legacy TDM voice capabilities Legacy VTC XMPP for collab., presence, and IM Bridge IP and TDM domains Availability via MLPP and ASAC Linked enterprise directory services Unifying e mail and voicemail Multi Level IP based switches Legacy PtP and PtMP ISDN Video Services Assured & Non Assured Voice, Video, Data Session Management (Multiple Classification Levels) Assured and Non Assured Voice and Video Conferencing (Multiple Classification Levels) Collaboration (Multiple Classification Levels) User Mobility (Wired / Wireless) Voice ISP Access Unified Messaging UC Portability Infr rastructure Survivable Call Processor or LSC IP: Pt to Pt Video, VTC (Video), Collaboration, Voice Other services: Private IP Ethernet Private LAN MG ASLAN FW MILDEP Infrastructure Top Secret IP Data and UC EBC XMPP Servers Enterprise LSC WAN SS or MFSS Enterprise Service Infrastructure Secret IP Data and UC (VoSIP) DISN Transport IP SBU IP Data and UC DISN EBC LSC at MCEP Integrated Directory MCEP Teleport SBC Tactical Coalition UC Voice ISP DSN GWs DRSN GWs DSN Switches (Reduced) Limited DSN DRSN Switches (Reduced) Limited DRSN Limited TDM PSTN
UC Distributed Architecture MILDEP Owned and Managed Session Controller WAN Softswitch (SS) Data Firewall WAN Softswitch (SS) Data Firewall WAN SS CER CER WAN SS EBC EBC Session Controller (SC) Edge Boundary Controller (EBC) CER DISN Core CER Session Controller (SC) End Instruments Local Area Network Media Gateway Data Firewall Data Firewall Media Gateway EBC Local Area Network End Instruments End Office/PBX** PSTN End Office/PBX** **Note: EOs/PBX1s have TDM access to the DISN (not shown)
Enterprise Unified Capabilities Enterprise Email Infrastructure ESD Enterprise Directory Services Enterprise UC Services Centralized Audio/Video Conferencing Unified Messaging Service Mobility/Portability IM/Chat/Presence Federation Enterprise Directory Integration E911 Call Management Voice ISP Access Subscriber Data System Data ESC Data Firewall SBC Centralized OAM&P Enterprise Session Management Enterprise Session Controller (ESC) Centralized OAM&P System & Subscriber Data ESC fronting SBC IP Softphone DSC Local Survivable Services SBC CE R CE-R SBC Data Firewall SSP IP Softphone IP Hardphone DoD Components Edge End Instruments / Media Gateways Survivable Call Processing Capabilities Enclave fronting SBC IP Hardphone Video Media Gateway E911 Access PSTN E911 Access Media Gateway 8
Commercial VoIP ISP Access Voice ISP Data ISP Voice ISP Data ISP Voice ISP Session Border Controller (SBC) NIPRNET Voice ISP Protocols Router U PE Router DISN EBC DoD Secure VVoIP Signaling (AS SIP over TLS with SRTP) COI Network NIPRNET Aligns with PEO-MA and EE vision to augment with new threat detection technologies. Architecture Approved by the DISA Chief Engineering Panel (CEP) in Mar 2011
Voice ISP Costs vs TDM PSTN A Combat Support Agency Migration of the DoD to the Voice ISP Model Will Allow the DoD to Save on Both PSTN Access Costs as well as PSTN Per Minute Usage Charges Centralized Access Via Small Number of Ethernet Interfaces PSTN Access Costs Example: vs Thousands of Legacy TDM Interfaces (T1, etc.) P S T N Fast Ethernet Links (Future: Upgrade to Gigabit when required) DISA (Voice ISP Site 1) DISA (Voice ISP Site 2) FastEthernet cost is $9K per month and supports at least 2500 concurrent calls (Gigabit Ethernet cost is $40K per month and supports at least 25,000 concurrent calls) T1 costs range from $350 $500 per month (varies per geographic region) and supports only 23 concurrent TDM calls DoD Site 1 T1 P T1 DoD Site 2 S T N As low as $4 per month per line in access costs for Fast Ethernet And $2 per line per month for Gigabit (future) $15 $22 per month per line in access costs at each DoD site DoD Site N T1 10
Securing and Federating Chat A Combat Support Agency Presence Subscription & Exchange One to One Chat Multi User Chat Extensible Message and Presence Protocol (XMPP) XMPP Clients Server Server Clients
XMPP Test Objectives Test Objective Description 1. Assess Trusted Server Federation: 2. Assess Presence Subscription Management: 3. Assess the Exchange of Presence: 4. Assess One-to-One Chat: 5. Assess Multi-User Chat: Server-to-server communication with TLS and DoD PKI certificates (mutual authentication & channel encryption) Ability to manage presence subscription requests, approvals and cancellations Ability to advertize/broadcast a user s network availability Ability to exchange messages in the context of a two party text conversation Support for multi-user text-based conferencing, whereby multiple users can exchange messages in the context of a virtual room
XMPP Multivendor APL Test Event Participating Vendors XMPP Multivendor APL Test Event Date: December 5-16, 2011 Location: JITC Fort Huachuca, AZ Products/Systems Under Test: - XMPP Client/Server Solutions - XMPP Gateways Client / Server Gateway Enabling the following capabilities: Exchange of presence One to one chat (a.k.a., Instant Messaging) Multi user chat t( (a.k.a., Group Chat) XMPP
Tentative Unified Message (UM) Architecture Joint Enterprise E mail Infrastructure Microsoft Exchange Forest Microsoft Exchange Unified Messaging Server Enterprise Session Controller DISN Enterprise Session Controller Replaces current VM platforms ltf Joint Enterprise E mail s UM becomes DISA s enterprise VM platform 14
DCO Telephony Integration Goal: Provide assured quality audio to DCO meetings Contract awarded to provide a session controller with a robust conference bridge on both unclassified and classified networks DCO Program Office updating menus within DCO Capability to create a meeting in DCO and have DCO create a telephony conference bridge for all participants i t 15
Validated Tactical UC Features A Combat Support Agency Feature Joint mixed MILDEP simulations Mixed vendors Capacity constrained satellite links Fixed to Tactical calls Tactical to Tactical calls Advantage to War Fighter Allows different services to communicate with each other over tactical networks Allows more competition, and drives down cost Optimizes UC traffic and increases reliability Allows strategic location to call tactical over UC Allows calls between two separate tactical units Multi satellite t llit hop calls Validates QoS,policies i and procedures across DISA TPO and the sites. Demonstrated the Validates calls across more complex (and real) tactical Master/Subtended LSC scenarios 16
QUESTIONS 17