Oracle SBC 7.3 - setup for Access SBC in home lab

Oracle SBC 7.3 - setup for Access SBC in home lab

Oracle SBC 7.3 - setup for Access SBC in home lab

Home lab has 10Gb network from PC to ESXi of 192.168.70.0/24 using SPF+ DAC
PC and ESXi both have 1Gb nics that go to switch using 192.168.10.0/24

192.168.10.5 is PC with xlite soft phone
192.168.10.235 is my asterisk box (vm guest)
192.168.70.236 is my 2012 R2 server for logs, snmp, and traps using 10Gb pc to esxi (vm guest)

SBC is also vm guest. Was tricky setting up the interfaces. You must have them all setup correctly before you power on the SBC guest image THE FIRST TIME!!
make sure they are on correct interface, like example: vmnetwork1 for media interfaces and 10GbToPC for the wancomm interfaces
make sure they are using correct type e1000 as the sbc has driver for that one. You may have to remove some interfaces and add new ones.
make sure they are all set to power on at start

192.168.70.50 for wancomm on pc to esxi 10Gb using 10GbToPC e1000 (vm guest)
192.168.10.60 for network-interface on s0p0 using vmnetwork1 e1000 (vm guest)
192.168.10.70 for network-interface on s0p1 using vmnetwork1 e1000 (vm guest)
192.168.10.65 for sip-interface access - VIRTUAL INTERFACE IN SBC SETUP DURING CONFIG BELOW
192.168.10.75 for sip-interface core - VIRTUAL INTERFACE IN SBC SETUP DURING CONFIG BELOW

Using s0p0 for access and s0p1 for core side to asterisk

I will anchor media on the 10.65 and 10.75 interfaces also

all my snmp and trap community names are: mysbc

Preferred order of setup is:
setup product
setup entitlements
bootparam
redundancy //if needed
timezone
ntp-sync
system-config
phy-interface
network-interface
media-manager
realms
sip-config
sip-interface
//used nat-traversal always
//used registration-caching enabled
steering-pools
local-policy //if needed
session-agents //if needed
session-groups //if needed
header manipulations //if needed


session-agent is assigned in local policy
so we create one called asterisk on core realm with asterisk IP
no reason to have sa on access side unless you support customers with PBX
as sip trunk and phone/mta is a peering usage



//begin the setup now

prompt-enabled enabled

setup product

setup entitlements

save
activate

conf t
bootparam

reboot

You should now be able to ping wancomm and ssh to SBC

prompt-enabled enabled
save
activate

conf t
ntp-sync
select
add-server 198.211.106.151
done
exit
exit

show timezone
if no timezone yet do

timezone-set

show ntp server
save
activate

/system-config is a must and setup syslog server if needed (log-filter all-fork if using syslog server)
conf t
system
system-con
select
hostname mysbc
description mysbc
location "Gilbert AZ"
mib-system-contact "Glen Whittenberg"
mib-system-name mysbc
mib-system-location "Gilbert AZ"
snmp-enabled enabled
enable-snmp-auth-traps enabled
enable-snmp-syslog-notify enabled
enable-snmp-monitor-traps enabled
enable-env-monitor-traps enabled
enable-mblk_tracking enabled
snmp-syslog-his-table-length 1
snmp-syslog-level WARNING
syslog-server
address 192.168.70.236
port 514
facility 4
done
exit
system-log-level WARNING
process-log-level NOTICE
process-log-ip-address 192.168.70.236
process-log-port 2500
log-filter all-fork
default-gateway your ip here if needed
done
exit
exit
exit
save
activate


//snmp-community if needed

conf t
system
snmp-community
ip-addresses 192.168.70.236
community-name mysbc
access-mode READ-WRITE
done
exit
exit
exit
save
activate

//trap-receiver if needed

conf t
system
trap-receiver
ip-address 192.168.70.236
filter-level All
community-name mysbc
done
exit
exit
exit
save
activate-con

//account-server for radius if needed for CDRs
conf t
session-router
account-config
select
account-servers
hostname 192.168.70.236
port 1813
state enabled
secret mysbc
done
exit
done
exit
exit
exit
save
activate-con


//Enable CDR on SBC if needed and use ftp push if needed

conf t
session-router
account-config
select
hostname localhost
state enabled
file-output enabled
ftp-push enabled
cdr-output-redundancy disabled
generate-start OK
generate-interim Reinvite-Response
prevent-duplicate-attrs enabled
cdr-output-inclusive enabled
done
exit
exit
exit
save
activate-con

//push-reciever for cdr to ftp server

conf t
session-router
account-config
select
push-receiver
server 192.168.70.236
remote-path /
username ftpuser
password ftpuser
admin-state enabled
done
exit
done
exit
exit
exit
save
activate-con






//setup interfaces

interface-mapping
show

Interface Mapping Info
-------------------------------------------
Eth-IF  MAC-Addr                Label
wancom0 00:50:56:86:BF:70       #generic
wancom1 00:50:56:86:E0:FC       #generic
wancom2 00:50:56:86:70:66       #generic
spare   00:50:56:86:51:35       #generic
s0p0    00:50:56:86:3A:BD       #generic
s1p0    00:50:56:86:F0:63       #generic
s0p1    00:50:56:86:C1:EC       #generic
s1p1    00:50:56:86:97:01       #generic
s0p2    FF:FF:FF:FF:FF:FF       #dummy
s1p2    FF:FF:FF:FF:FF:FF       #dummy
s0p3    FF:FF:FF:FF:FF:FF       #dummy
s1p3    FF:FF:FF:FF:FF:FF       #dummy

exit
show interfaces brief

Slt Prt Vlan Interface  IP                     Gateway                 Adm  Oper
Num Num   ID Name       Address                Address                 Stat Stat
--- --- ---- ---------- ---------------------- ----------------------- ---- ----
  -   -    - lo         127.0.0.1/8            -                        up   up
  -   -    - wancom0    192.168.70.50/24       -                        up   up
--------------------------------------------------------------------------------


//phy-interface

conf t
system
phy-interface
name access
operation-type Media
slot 0
port 0
done
name core
operation-type Media
slot 0
port 1
done
exit
exit
exit
save
activate


//network-interface

conf t
system
network-interface
name access
description "access side"
ip-address 192.168.10.160
netmask 255.255.255.0
gateway 192.168.10.1
signaling-mtu 1500
add-hip-ip 192.168.10.160
add-ftp-ip 192.168.10.160
add-icmp-ip 192.168.10.160
add-ssh-ip 192.168.10.160
done
name core
description "core side"
ip-address 192.168.10.170
netmask 255.255.255.0
gateway 192.168.10.1
signaling-mtu 1500
add-hip-ip 192.168.10.170
add-ftp-ip 192.168.10.170
add-icmp-ip 192.168.10.170
add-ssh-ip 192.168.10.170
done
exit
exit
exit
save
activate

show interfaces brief

Slt Prt Vlan Interface  IP                     Gateway                 Adm  Oper
Num Num   ID Name       Address                Address                 Stat Stat
--- --- ---- ---------- ---------------------- ----------------------- ---- ----
  -   -    - lo         127.0.0.1/8            -                        up   up
  -   -    - wancom0    192.168.70.50/24       -                        up   up
  0   0    0 access     192.168.10.60/24       192.168.10.1             up   up
  0   1    0 core       192.168.10.70/24       192.168.10.1             up   up
--------------------------------------------------------------------------------



//media-manager

conf t
media-manager
realm-config
network-interfaces access
identifier access
description "access realm"
done
network-interfaces core
identifier core
description "core realm"
done
exit
exit
exit
save
activate

//media-manager-config for audio latching purpose
conf t
media-manager
media-manager
state enabled
latching enabled
done
exit
exit
exit
save
activate


//sip-config

conf t
session-router
sip-config
select
state enabled
operation-mode dialog
dialog-transparency enabled
home-realm-id access
egress-realm-id core
nat-mode Public
registrar-domain *
registrar-host *
registrar-port 5060
done
exit
exit
exit
save
activate


//sip interfaces

conf t
session-router
sip-interface
state enabled
realm-id access
nat-traversal always
registration-caching enabled
sip-ports
address 192.168.10.165
port 5060
transport-protocol UDP
allow-anonymous all
done
exit
done
exit
exit
exit
save
activate

conf t
session-router
sip-interface
state enabled
realm-id core
nat-traversal always
registration-caching enabled
sip-ports
address 192.168.10.175
port 5060
transport-protocol UDP
allow-anonymous all
done
exit
done
exit
exit
exit
save
activate


//sreering-pool

conf t
media-manager
steering-pool
realm-id access
ip-address 192.168.10.165
start-port 10000
end-port 30000
done
realm-id core
ip-address 192.168.10.175
start-port 10000
end-port 30000
done
exit
exit
exit
save
activate


//local-policy

conf t
session-router
local-policy
source-realm core
description "core local policy"
from-address *
to-address *
source-realm core
state enabled
policy-attribute
next-hop 192.168.10.235
realm core
state enabled
app-protocol SIP
done
exit
done
exit
exit
exit
save
activate

conf t
session-router
local-policy
source-realm access
description "access local policy"
from-address *
to-address *
source-realm access
state enabled
policy-attribute
next-hop 192.168.10.235
realm core
state enabled
app-protocol SIP
done
exit
done
exit
exit
exit
save
activate


Now setup your phones pointing to asterisk 192.168.10.235 with using 192.168.10.65 as proxy
Make calls and look at sip logs on asterisk and sbc. we have true b2b with media anchoring.

Remember you could have created a session-agent and used that for next hop in core local-policy