Session border control applications

Session border controller functions & features

Multi-protocol SIP, H.323, MGCP/NCS, H.248; H.248 border gateway control; interworking SIP IMS-H.323 & H.323-H.323 Security SBC DoS protection, access control, topology hiding, privacy, VPN separation, service infrastructure DoS prevention, fraud prevention Service reach surrogate registration IP PBX & IAD endpoints, adaptive NAT traversal, OLIP/VPN bridging, interworking: signaling, transport & encryption protocols; transcoding, address & response code translations SLA assurance admission control: session agent constraints, bandwidth, policy server, QoS metrics; peer-peer media release; QoS marking/mapping; QoS reporting, session agent load balancing Revenue & profit protection bandwidth policing, QoS theft protection, accounting, session timers, routing Regulatory compliance emergency service (E911) & lawful intercept

SBC applications
PSTN
Termination/origination & IP transit services
PSTN O&T IP transit

PSTN Origination & Termination

PSTN Termination

ITSP/Voice ASP services

Hosted voice Customer care centers Directory Calling card Messaging
Customer care IP Transit & PSTN O&T Directory

Hosted IP IC services (network facilities-based)

Voice & video Unified messaging Conferencing Presence & IC Multimedia collaboration Gaming IP PBX trunking

Business Services Mobile Services

Residential Services

Hosted IP IC services residential & SME (SBG-NE)

Security SBC DoS protection, access control, topology hiding, privacy, VPN separation, service infrastructure DoS prevention, fraud prevention Service reach SIP, MGCP/NCS, H.248, SIP-H.323 PBX IWF; adaptive NAT traversal; OLIP bridging; SIP interworking: transport & encryption protocols, surrogate registration IP PBX & IAD endpoints WIFI SLA assurance admission control: SIP session agent constraints, bandwidth, policy server; peer-peer media release; QoS marking/mapping; QoS reporting
Wimax

H.248 MGCP
DSL Cable H.248 Frame/LL

MGCP

H.323

Revenue & profit protection bandwidth policing, QoS theft protection, accounting, session timers Regulatory compliance emergency service (911) & lawful intercept
Signaling Media

Video Telephony over Three Networks

FastWeb Network PSTN

Cl.4 iMSS Cl. 5 iMSS

H.323 VDC Domain

Media Gateways

Telecom Italia IP Backbone

3 Network

i-WTS H.323 Video Zone SIP Video Zone Web Video Zone

SIP / UMTS VDC Domain

STB + TVCam

Netmeeting STB + TVCam PC client Microsoft Messenger SIP Videophone PC client

Italtel S.p.A.

China Unicom residential & enterprise services

3G Video wireless/IP Convergence

Hosted IP IC services MPLS VPN-based enterprises

Security SBC DoS protection, access control, topology hiding, VPN separation, service infrastructure DoS prevention Service reach surrogate registration IP PBX endpoints, SIP IMS-H.323 PBX IWF; VPN bridging SLA assurance admission control: bandwidth per VPN & site, session agent constraints, SIP policy server; intra-VPN media release; QoS marking/mapping; QoS reporting Revenue & profit protection bandwidth policing, QoS theft protection, accounting, session timers
Site 1

SIP

SIP MPLS VPN

H.323

Site 2

Site 3

Regulatory compliance emergency service (911) & lawful intercept

Signaling Media

Overall architecture

Enterprise MPLS VPN services

VoIP Network Architecture

Enterprise
MPLS Backbone

IP PBX

PSTN
IP
IPVPN Private Line Frame DSL DIA Public Internet

IP VPN
Acme Packet Session Border Controller

VoIP

GSX

PSTN

PSTN
On-Net Call Off-Net Call

SIP IP Phones

Architecture provides security, quality & scalability Private IP Backbone Session Border Controller (Firewall) Toll Quality VoIP packets receive highest class of service (QOS) resuting in: Increased security Increased reliability Carrier quality service Minimized latency, packet loss, and jitter

Technology (Best in Class) Session Border Controller: Acme Packet Media Gateway: Sonus Session Border Controller Advantage Security Access Control Network Address Translation (NAT) SIP & H.323 Mediation Bandwidth & QOS Management

Voice ASP/ITSP application (SBG-NE)

Security SBC DoS protection, access control, topology hiding & privacy, VPN separation, service infrastructure DoS prevention, fraud prevention Service reach SIP, SIP-H.323 IWF; adaptive NAT traversal; Accounting OLIP/VPN bridging; interworking: transport & encryption protocols SLA assurance admission control: session agent constraints, bandwidth; peer-peer media release; app/media server load balancing QoS reporting
SIP
Database(s)

Data Center

SIP

H.323

PSTN

Revenue & profit protection routing, accounting

Regulatory compliance emergency service (911) & lawful intercept
Signaling Media

Service provider interconnect (SBG-NC) VoIP trunking networks

Security SBC DoS protection, access control, topology hiding, VPN separation, service infrastructure DoS prevention
PSTN

Service reach SIP, H.323, IWF: signaling, transport & encryption protocols; OLIP/VPN bridging; transcoding; address & response code translations

USA SIP G.711 Europe 2 $.03 H.323 G.711

IP
Europe 1 $.05 SIP G.729

SLA assurance admission control: session agent constraints, bandwidth, policy server, QoS metrics; QoS marking/mapping; QoS reporting Revenue & profit protection accounting, session timers, routing & load balancing
B

Signaling

Media

ipLCR - VoIP enables 110 operators

Switch

A logical extension of the LCR trading community It bridges VoIP and PSTN interconnects

Switch Voice

Voice

Voice Switch

SDH
Gateway Media Soft Controller

It converts SS7 traffic to SIP or H.323 and vice versa Its unit of currency is the trunk group, mapping 30 VoIP calls to an E1 It supports SIP to
S.Border

S.Border

Switch

IP
www.fibernet.co.uk
Controller S.Border Soft S.Border Controller

Soft

Controller

Soft

Switch

Switch

Switch

Service provider interconnect (SBG-NC) PSTN termination & origination

IXC
Security access control, topology hiding, SBC DoS protection, SS DoS prevention Service reach - private-public address space mediation SLA assurance - session agent availability testing & load balancing
PSTN

Nortel PVG

Private
SIP

IXC

Nortel CS 2000

Acme Packet 4000 SD

Cable operator
Security SLA assurance - QoS DiffServ marking, QoS reporting Revenue/profit assurance - accounting

Cable
Public
CMTS

CMS

CMS

Cisco BTS
CMTS

NCS
MTA CMTS

MTA MTA MTA MTA MTA

Arris

Contact center application (SBG-NE & NC)

Contact center 2 Contact center 1 Site 1a IP MPLS Hosted services Site 3
(e.g. contact center, ACD, recording)

Site 2a

Site 2b

CSR 1c

CSR 1b

Internet

PSTN

Managed IP subscriber network

Customers Customers

Contact center application - VPN connected sites

Security Net-SAFE: VPN separation, topology hiding, SIP ACD/AS DoS prevention, SBC DoS protection SLA assurance admission control bandwidth per VPN & site, SIP ACD constraints; SIP ACD/AS load balancing & routing, QoS reporting & accounting
Contact center - SIP/G.711 Site A Site B

CSR1

CSR2

CSR3

CSR4

CSR5

MPLS

Service reach - VPN/OLIP bridging, SIP-H.323 interworking, transcoding

Regulatory compliance lawful intercept (call data & content)
Internet
Managed SIP/H.323, codec X

Customers

Contact center application - Internet CSRs

Service reach - NAT traversal Security - signaling & media encryption termination, VPN bridging SLA assurance - media release CSRs to customers (no NAT), QoS reporting
Contact center - SIP/G.711 Site A Site B

CSR1

CSR2

CSR3

CSR4

CSR5

MPLS

Internet

Managed SIP/H.323, codec X

Customers

Enterprise SBC application (SBG-CE)

Security access control (FW), topology hiding (NAT), privacy, VPN separation, IP PBX/endpoint DoS prevention, SBC DoS protection SLA assurance admission control: IP PBX/SIP server constraints, bandwidth; QoS marking/VLAN mapping voice vs. video; QoS reporting, bandwidth policing, accounting
Enterprise site, MPLS VPN or private network
H.323 or SIP PBX SIP endpoints /server

SIP
SRTP pass-thru

Service reach - VPN/OLIP bridging, SIP-H.323 interworking, adaptive NAT traversal

Regulatory compliance lawful intercept for universities

SIP/TLS

Internet

Managed SIP services

SOHO

IP access to PSTN, hosted services, IP extranet, other IP subscribers

The leader in session border control

for trusted, first class IMS services