Samsung Ubigate iBG3026 Configuration Manual
Hide thumbs Also See for Ubigate iBG3026:
Table of Contents

Advertisement

Advertisement

Table of Contents
loading

Summary of Contents for Samsung Ubigate iBG3026

  • Page 2 COPYRIGHT This manual is proprietary to SAMSUNG Electronics Co., Ltd. and is protected by copyright. No information contained herein may be copied, translated, transcribed or duplicated for any commercial purposes or disclosed to third parties in any form without the prior written consent of SAMSUNG Electronics Co., Ltd.
  • Page 3: General User Information

    UNAUTHORIZED MODIFICATIONS Any changes or modifications performed on this equipment that are not expressly approved in writing by SAMSUNG ELECTRONICS, CO., LTD. could cause non-compliance with the FCC rules and void the user’s authority to operate the equipment.
  • Page 4: Fcc Part

    04DU9.1SN 04DU9.1SN(PRI) T1E1-4 04DU9.DN RJ48C 04DU9.1KN 04DU9.1SN 04DU9.1SN(PRI) DID LINE FXS-4M 02RV2.T RJ11C T1E1-2M 04DU9.BN RJ48C T1E1-4 04DU9.BN RJ48C E & M TIE LINE E & M-2M TL11M RJ45S T1E1-2M 04DU9.BN RJ48C T1E1-4 04DU9-BN RJ48C © SAMSUNG Electronics Co., Ltd.
  • Page 5: Ringer Equivalence Number

    Only technicians certified on the iBG3026, are authorized by SAMSUNG ELECTRONICS, CO., LTD. to perform system repairs. Certified technicians may replace modular parts of a system to repair or diagnose trouble. Defective modular parts can be returned to SAMSUNG ELECTRONICS, CO., LTD. for repair. © SAMSUNG Electronics Co., Ltd.
  • Page 6 This equipment is capable of providing users access to interstate providers of operator services through the use of access codes. Modification of this equipment by call aggregators to block access dialing codes is a violation of the Telephone Operator consumers Act of 1990. © SAMSUNG Electronics Co., Ltd.
  • Page 7: Music On Hold Warning

    American Society of Composers, Authors and Publishers(ASCAP) or other similar organizations if copyright music is transmitted through the Music on Hold feature. SAMSUNG ELECTRONICS, CO., LTD. hereby disclaims any liability arising out of failure to obtain such a license. DISA WARNING Lines that are used for the Direct Inward System Access feature must have the disconnect supervision options provided by the telephone company.
  • Page 8: Safety Warning

    Separation of TNV and SELV - Pluggable A: ‘The separate protective earthing terminal provided on this product shall be permanently connected to earth.’(Instruction) Separation of TNV and SELV - Pluggable B: ‘Disconnect TNV circuit connector(s) before disconnecting power.’(Instruction) © SAMSUNG Electronics Co., Ltd.
  • Page 9 Ubigate iBG3026 Configuration Guide/Ed.00 Warning to service personnel: ‘CAUTION: Double pole/neutral fusing’ Telephone line cord: ‘CAUTION: To reduce the risk of fire, use only No. 26 AWG or larger(e.g., 24 AWG) UL Listed or CSA Certified Telecommunication Line Cord’ Leakage currents due to ringing voltage - Earthing installation instructions: ‘1.A supplementary equipment earthing conductor is to be...
  • Page 10 E) Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit(e.g., use of power strips).’ VIII © SAMSUNG Electronics Co., Ltd.
  • Page 11: Introduction

    This document provides the command usage of routing applications supported by the Ubigate iBG3026. This manual is for engineers, technicians, and others involved with the planning and operation of the Ubigate iBG3026. Document Content and Organization This manual contains the following chapters: PART I.
  • Page 12 CHAPTER 17. VRRP CHAPTER 18. MPLS CHAPTER 19. QoS CHAPTER 20. VLAN forwarding with QoS PART IV. Security CHAPTER 21. Authentication Authorization Accounting CHAPTER 22. Packet Filtering CHAPTER 23. Firewall NAT CHAPTER 24. GRE CHAPTER 25. IPSEC © SAMSUNG Electronics Co., Ltd.
  • Page 13 Ubigate iBG3026 Configuration Guide/Ed.00 PART V. Voice CHAPTER 26. Voice Feature CHAPTER 27. VoIP Gateway Management CHAPTER 28. SIP Gateway Management CHAPTER 29. H.323 Gateway Management CHAPTER 30. Analog Voice Port CHAPTER 31. Digital Voice Port CHAPTER 32. ISDN CHAPTER 33. Routing and Digit Manipulation CHAPTER 34.
  • Page 14: Console Screen Output

    Ubigate iBG3026 System Description Ubigate iBG3026 Installation Manual Ubigate iBG3026 Command Reference Ubigate iBG3026 Message Reference Ubigate iBG3026 TroubleShooting Manual Ubigate iBG3026 Quick Start Guide Ubigate iBG3026 iBG-DM User Guide Ubigate iBG3026 ISM User Guide Ubigate iPX User Guide Contacting Technical Support...
  • Page 15: Obtaining Publications And Additional Information

    Ubigate iBG3026 Configuration Guide/Ed.00 Obtaining Publications and Additional Information The Ubigate iBG3026 documentation set, and additional literature is available at: http://www.samsungen.com Revision History EDITION DATE OF ISSUE REMARKS 04. 2006. First Draft XIII © SAMSUNG Electronics Co., Ltd.
  • Page 16 INTRODUCTION This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 17: Table Of Contents

    Ubigate iBG3026 Configuration Guide TABLE OF CONTENTS GENERAL USER INFORMATION RADIO FREQUENCY INTERFERENCE ................ I FCC REQUIREMENTS ....................I MUSIC ON HOLD WARNING..................V DISA WARNING ......................V SAFETY WARNING......................VI UNDERWRITERS LABORATORIES ................VI INTRODUCTION Purpose ........................IX Document Content and Organization Conventions........................XI Console Screen Output ....................XII Reference ........................XII...
  • Page 18 Module Configuration ......................41 Configuring V.35 ......................41 Bundle Configuration ....................43 Configuring HSSI ......................47 CHAPTER 7. WAN Interfaces Module Configuration ......................51 Configuring T1 and E1 ....................51 Configuring CT3......................54 Configuring CT3 bundle ....................56 © SAMSUNG Electronics Co., Ltd.
  • Page 19 Ubigate iBG3026 Configuration Guide/Ed.00 CHAPTER 8. PPP, MLPPP, and HDLC Protocol Configuration ....................... 61 MLPPP Configuration ....................62 PPP and MLPPP Configuration ................... 63 CHAPTER 9. FR and MFR Layer Two Configurations .................... 67 PART III. Switching and Routing Protocols CHAPTER 10.
  • Page 20 Reserving Bandwidth for the Trunk ................159 Adding a Secondary LSP to the Trunk ............... 160 Adding Administrative Group Constraints to an LSP............161 CHAPTER 19. QoS iBG3026 Quality of Service .................... 165 Features........................166 Definitions ........................166 XVIII © SAMSUNG Electronics Co., Ltd.
  • Page 21 Ubigate iBG3026 Configuration Guide/Ed.00 Classification Types ....................... 167 Configuration ........................168 Create Bundle AppTest ....................168 Create Traffic Classes ....................168 VLAN Identifiers......................169 Configuration ........................170 Create bundle VLANtest .................... 170 Create Traffic Classes and Assign Classifications ............. 170 Historical Statistics ......................
  • Page 22 Configuration Example....................214 Verifying the Configuration..................214 Egress Queuing, Scheduling and Shaping ..............214 Verifying the Configuration..................215 Congestion Management on Egress Queues............... 215 Verifying the Configuration..................216 Buffer Management ......................216 Verifying the Configuration..................216 © SAMSUNG Electronics Co., Ltd.
  • Page 23 PART IV. Security CHAPTER 21. Authentication Authorization Accounting Configuration Examples..................... 224 CHAPTER 22. Packet Filtering Example: Blocking Telnet Access ................230 Configure the Ubigate iBG3026................. 230 CHAPTER 23. Firewall NAT Overview .......................... 231 Virtual Firewall ......................232 Access Policy Database .................... 234 Application Level Gateways..................
  • Page 24 Introduction to Security ....................255 Securing Remote Access Using IPSec VPN..............255 Access Methods......................256 Securely Managing the Ubigate iBG3026 System Example ........258 Joining Two Private Networks Example ..............266 Joining Two Networks using Multiple IPSec Proposals Example ....... 274 Supporting Remote User Access Example ..............
  • Page 25 Ubigate iBG3026 Configuration Guide/Ed.00 Verifying and Troubleshooting SIP Features..............405 CHAPTER 29. H.323 Gateway Management Introduction to H.323 Gateway Features ..............411 Configuring a H.323 Gateway..................423 Verifying and Troubleshooting H.323 Features..............449 CHAPTER 30. Analog Voice Port Introduction to Analog Voice Port Features..............453 Analog Voice Port Monitoring ..................
  • Page 26 CHAPTER 37. Survivable Telephony Configuring Call Forward for Survivable Telephony ............665 Configuring System Message for Survivable Telephony ..........667 Configuring COR List for Survivable Telephony ............669 Configuring Translation for Survivable Telephony ............670 XXIV © SAMSUNG Electronics Co., Ltd.
  • Page 27 Ubigate iBG3026 Configuration Guide/Ed.00 LIST OF FIGURES Figure 2.1 Main Board LAN Port Numbering............... 9 Figure 2.2 Ethernet Switch Gigabit Module Port Numbering........10 Figure 2.3 20-port Network Module Port Numbering..........10 Figure 2.4 44-port Network Module Port Numbering..........11 Figure 2.5 2-Port Mini Module Port Numbering............
  • Page 28 Figure 25.2 Tunnel Mode Between Two Security Gateways-Single Proposals ..266 Figure 25.3 Tunnel Mode Between Two Security Gateways-Multiple Proposals ..275 Figure 26.1 Ubigate iBG3026 Network Diagram ............. 306 Figure 26.2 Example of Call Manager Intworking Mode Network Configuration ..309 Figure 26.3 Example of Stand-alone mode network configuration ......
  • Page 29 Ubigate iBG3026 Configuration Guide/Ed.00 Figure 27.1 Architecture of VoIP Network ............... 327 Figure 28.1 Architecture of SIP Network ..............338 Figure 28.2 SIP Request Through a Proxy Server ..........341 Figure 28.3 SIP Response Through a Proxy server..........342 Figure 28.4 SIP Session Through a Proxy Server........... 342 Figure 28.5 SIP Session Through a Redirect Server ..........
  • Page 30 Figure 33.3 Call Legs from the Perspective of the Terminating Router ....563 Figure 33.4 Matching Call Legs to Dial Peers ............566 Figure 33.5 Dial Peers from the Perspective of the Originating Ubigate iBG3026 .. 567 Figure 33.6 Dial Peers from the Perspective of the Terminating Ubigate iBG3026 ..567 Figure 33.7 Communication Between Dial Peers Sharing the Same Ubigate...
  • Page 31 Ubigate iBG3026 Configuration Guide/Ed.00 Table 29.5 H.323 Call Statistics Command ............. 422 Table 29.6 H.323 Call Tracing & Debug Command..........422 Table 29.7 combination to enable or shutdown H.323 Service........ 428 Table 29.8 commands of ‘voice service h323’ configuration and ‘voice class h323’...
  • Page 32 TABLE OF CONTENTS This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 33: Part I. System Configuration

    PART I. System Configuration Chapter 1. Basic Configuration Chapter 2. Port Numbering Chapter 3. Management Configuration Chapter 4. System Logging Chapter 5. RMON Configuration...
  • Page 35: Chapter 1. Basic Configuration

    Changing Login Parameters The System Administrator login consists of two components: the account name and the password. The initial login name is always samsung, but you can change this to suit the needs of your facility after logging in. The default administrative password, samsung, should be changed as soon as possible to ensure only authorized access to the system.
  • Page 36 The system prompts you to verify and then press Return the new password. Changing Administrator Account This procedure changes the system administrator login name to a user-specific name. Note that the default is samsung. Step Command Description Router# configure terminal...
  • Page 37 Ubigate iBG3026 Configuration Guide/Ed.00 Step Command Description Router/configure# utc-UTC Hours 8 Sets the local Pacific Standard Time to UTC time Router/configure# date 04 30 2005 sets the date to April 30, 2005 Router/configure# time 18 14 sets the time to 18:14...
  • Page 38: Command-Line Interface Basics

    Display forwarding information user_accounts display all users users display only active users version Display system versions virtual-access access virtual access display commands vlan Display VLAN information vrrp display vrrp related information whoami current user © SAMSUNG Electronics Co., Ltd.
  • Page 39 Ubigate iBG3026 Configuration Guide/Ed.00 Syntax Help The CLI can complete the spelling of command or parameter keywords. Begin typing the command or parameter then press TAB. At the CLI command prompt type Router# sh Press TAB. The CLI shows: Router# show If the command or parameter partial spelling is ambiguous, the CLI displays the choices that match the abbreviation.
  • Page 40 .cfg extension) and press Return, as shown in the example below. Router# configure flash filename(path): test.cfg The system configuration can be saved in a file as shown in the following example. Router# save local © SAMSUNG Electronics Co., Ltd.
  • Page 41 Ubigate iBG3026 Configuration Guide/Ed.00 If you don’t give a file name after ‘local’, it is save in the default filename, ‘system.cfg’. You also can set the Router system parameters from a configuration file on a network server. This method downloads files via the TFTP protocol, then executes the commands from that file without operator intervention.
  • Page 42 CHAPTER 1. Basic Configuration This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 43: Chapter 2. Port Numbering

    Ubigate iBG3026 Configuration Guide CHAPTER 2. Port Numbering This Chapter describes the port number conventions used on the iBG3026. Ports on any WAN or LAN module are numbered from right to left starting with port number zero. If there is more than one row of ports on a given...
  • Page 44: Figure 2.2 Ethernet Switch Gigabit Module Port Numbering

    There two types of LAN Network Module: 20-port and 44-port. The 20-port LAN network module numbering is as follows: (X=1 or 2) X/19 X/18 X/17 X/16 X/15 X/14 X/13 X/12 X/11 X/10 Figure 2.3 20-port Network Module Port Numbering © SAMSUNG Electronics Co., Ltd.
  • Page 45: Wan Ports

    Ubigate iBG3026 Configuration Guide/Ed.00 The 44-port LAN network module numbering is as follows: 2/36 2/35 2/34 2/33 2/31 2/30 2/29 2/26 2/25 2/24 2/43 2/42 2/41 2/40 2/39 2/38 2/37 2/32 2/28 2/27 2/23 2/22 GbE0 GbE21 LMG-44 2/21 2/20 2/19...
  • Page 46: Figure 2.7 1-Port Wan Network Module Port Numbering

    (X=1 or 2) HSSI RDY LNK HSSI-1 Figure 2.7 1-Port WAN Network Module Port Numbering T1E1-3 T1E1-2 T1E1-1 T1E1-0 LNK3 LNK1 LNK0 LNK2 T1E1-4 Figure 2.8 4-Port WAN Network Module Port Numbering © SAMSUNG Electronics Co., Ltd.
  • Page 47: Mini Modules

    Ubigate iBG3026 Configuration Guide/Ed.00 Mini Modules Main Board Mini Module Ports Numbering When a mini-module is plugged into a carrier module, a three-level numbering reference is used to identify the ports on the mini-module. 0/2/1 0/2/0 0/1/1 0/1/0 LNK1 RDY LNK0...
  • Page 48: Port Numbering Examples

    2/1/3 Left most port on a four port voice mini-module in the left hand sub-slot in the voice carrier module plugged into the left hand network module slot. © SAMSUNG Electronics Co., Ltd.
  • Page 49: Chapter 3. Management Configuration

    Configuring Simple Network Management Protocol Ubigate iBG3026 provides two classes of SNMP Management Information Bases(MIBs) to provide you with the ability to manage Ubigate iBG3026 routers. The two MIBs are the Enterprise MIB and the Standard MIB. Enterprise MIBs The Enterprise mibs should be compiled in the following order: 1.
  • Page 50 Compile this MIB before any other DSX MIBs. It does not contain any traps. SUBMARINE-DSX-TE1-MIB.mib This MIB manages T1/E1 interfaces. Use this MIB to Be notified when an alarm is generated(dsxT1E1AlarmOnTrap) Be notified when an alarm is turned off(dsxT1E1AlarmOffTrap) © SAMSUNG Electronics Co., Ltd.
  • Page 51 Ubigate iBG3026 Configuration Guide/Ed.00 SUBMARINE-DSX-TE3-MIB.mib This MIB manages T3/E3 interfaces. Use this MIB to Be notified when an alarm is generated(dsxT3E3AlarmOnTrap) Be notified when an alarm is turned off(dsxT3E3AlarmOffTrap) SUBMARINE-ENVIRON-MIB.mib This MIB manages the chassis environment such as temperature, fan function.
  • Page 52 Use this MIB to : Be notified when the environmental monitoring detects that the network- clock is at a critical state.(clockAllDownNotification) Be notified when the environmental monitoring detects that the network- clock is at a normal state.(clockAllUpNotification). © SAMSUNG Electronics Co., Ltd.
  • Page 53 Ubigate iBG3026 Configuration Guide/Ed.00 SUBMARINE-IMC-MIB.mib This MIB defines objects related to manage the inter module communication states. Use this MIB to : Be notified when an imc communication failure is occurred. (imcCommFailNotification) Be notified when an imc communication failure is recovered.
  • Page 54 Be notified when connection fails between iBG and SIP entity. (voiceSipEntityNotification) Be notified when the FXO port is connected when using Loop-Start ONLY (voiceFXOConnNotification) SUBMARINE-ISM-IPS-MIB.mib This MIB defines objects related to manage the integrated security module for premium security. © SAMSUNG Electronics Co., Ltd.
  • Page 55 Ubigate iBG3026 Configuration Guide/Ed.00 Standard MIBs The Standard MIBs should be compiled in the following order: 1. rfc1213.mib 2. rfc1643.mib 3. rfc1471.mib 4. rfc1473.mib 5. rfc1215.mib 6. rfc1757.mib 7. rfc1406.mib 8. rfc1315.mib 9. rfc1407.mib 10. rfc2787.mib 11. rfc2571.mib 12. rfc2575.mib 13.
  • Page 56 MIB objects for Interface Table extensions including StackTable and ifXTable. The IfStackTable shows the sub-layer relationships of interfaces. This MIB does not contain any traps. rfc2787.mib This MIB describes objects used for managing Virtual Router Redundancy Protocol(VRRP) routers. © SAMSUNG Electronics Co., Ltd.
  • Page 57 Ubigate iBG3026 Configuration Guide/Ed.00 rfc1471.mib Implementation of this group is mandatory for all PPP entities. rfc1473.mib Implementation of this group is mandatory for all PPP implementations that support operating IP over PPP. rfc1215.mib This is really only part of RFC-1215. The other part is built into the Emissary MIB compiler as of Emissary release 4.0.
  • Page 58 The MIB module for entities implementing the client side of the Remote Access Dialin User Service(RADIUS) authentication protocol. rfc2620.mib The MIB module for entities implementing the client side of the Remote Access Dialin User Service(RADIUS) accounting protocol. © SAMSUNG Electronics Co., Ltd.
  • Page 59: Snmp Applications Supported

    NetCool Configuring SNMP This section describes how to configure Simple Network Management Protocol on an Ubigate iBG3026. snmp-server community This command sets the SNMP community name and access privileges. This entry is a password string that assigns access privileges to SNMP MIBs.
  • Page 60 - Sends SNTP group traps. . system - Sends system group traps . voice - Sends voice group traps. . vrrp - Sends VRRP group traps step1) Router/configure/snmp-server# enable target-traps 90.90.90.240 snmp-server/ step 2) Router/configure/ enable target-traps 90.90.90.240# all © SAMSUNG Electronics Co., Ltd.
  • Page 61: Chapter 4. System Logging

    Ubigate iBG3026 Configuration Guide CHAPTER 4. System Logging Logging System Events The Ubigate iBG3026 supports event logging as well as the industry-standard syslog logging. Event Logging The following commands are useful for configuring event logging on the Ubigate iBG3026. system logging This command accesses next-level commands for configuring consolelogging and syslog event reporting.
  • Page 62 This command shows system logging information. Syslog Events Ubigate iBG3026 supports logging events to a syslog server. For more information on syslog, see RFC 3164. The following bable shows the different levels of syslog message impact. The first five message levels(Emergency through Warning) have the potential for affecting system performance or normal functionality.
  • Page 63 Ubigate iBG3026 Configuration Guide/Ed.00 For more information of syslog events, refer to the Ubigate iBG3026 Message Reference Manual. Use the following commands to configure and manage syslog. system logging syslog This command accesses next-level commands for configuring syslog on the Router system.
  • Page 64 CHAPTER 4. System Logging This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 65: Chapter 5. Rmon Configuration

    Ubigate iBG3026 Configuration Guide CHAPTER 5. RMON Configuration Configuring Remote Monitoring Remote Monitoring(RMON) is an Internet standard for monitoring network activity.(See RFC 1757 and RFC 2021.) RMON specifies how various network agents collect and exchange data in an SNMP environment.
  • Page 66: Configuring Rmon

    1000 0 1 2 type absolute startup rising owner Manager-1 To configure an RMON alarms for a variable to be monitored, enter: Router/configure/rmon# alarm 2 ifInoctets 36000 100000 90000 10 20 To configure RMON events(RMON group 9), enter: Router/configure/rmon# event 1 © SAMSUNG Electronics Co., Ltd.
  • Page 67: Verifying Rmon Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 To add an RMON events(which can be a log, a trap, or log-trap) enter: Router/configure/rmon# event 1 log To add an RMON events(which can be a log, a trap, or log-trap) with additional information of community for sending traps, event description and owner, enter: Router/configure/rmon# event 2 log community ABC description “event 2”...
  • Page 68 0 Oversize pkts: Octets: 0 Fragments: Packets: 0 Jabbers: Broadcast pkts: 0 Collisions: Multicast Pkts: 0 Utilization: ==================== To show specific history control index information, enter: Router/configure/rmon# show rmon history_control ethernet0/0 IndexBucketsInterval Owner 110 1800 CLI-Manager RMON/configure/rmon# © SAMSUNG Electronics Co., Ltd.
  • Page 69 Ubigate iBG3026 Configuration Guide/Ed.00 To show the configured RMON events, enter: Router/configure# show rmon events RMON Events Configured: Event Event Community Descrir index type ----------------------------------------------------------- log(2) none trap(3) public none To show RMON statistics for the specified interface, enter: Router/configure/rmon# show rmon statistics ethernet2/19...
  • Page 70 CHAPTER 5. RMON Configuration This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 71: Part Ii. Wan Interface And Protocols

    PART II. WAN Interface and Protocols Chapter 6. Serial Interfaces Chapter 7. WAN interfaces Chapter 8. PPP, MLPPP and HDLC Chapter 9. FR and MFR...
  • Page 73: Chapter 6. Serial Interfaces

    DCE or DTE mode: EIA 232C, EIA 449, EIA 530, EIA 530A, V.35, and X.21. A Multi-Protocol Transceiver in Ubigate iBG3026 constains all the necessary drivers and receivers for one port to support the appropriate interface types, levels, and termination for the different modes. Each SmartSerial DB26 leaf-...
  • Page 74 X.21 is a differential synchronous interface and uses V.11(EIA-422) electrical characteristics. It is typically limited to a maximum throughput of 10 Mbps. For the interface, a single clock line is used for receiving and transmitting data and DB-15 connector is used. © SAMSUNG Electronics Co., Ltd.
  • Page 75: Hssi Interface

    Ubigate iBG3026 Configuration Guide/Ed.00 V.35 V.35 is a combination of single-ended and differential synchronous interface. It uses V.35 electrical characteristics for clock and data(differential) and V.28(EIA-232) electrical characteristics for control signals(single-ended). It is typically limited to a maximum throughput of 10Mbps. For the interface, separate clock lines are used for receiving and transmitting data and MRAC- 34 connector is used.
  • Page 76 For consistency, all signal names and functional definitions use DTE terminology. Thus, Receive Data is data received by the module from the attached piece of equipment, while Transmit Data is data being sent to the attached equipment © SAMSUNG Electronics Co., Ltd.
  • Page 77: Module Configuration

    This section describes how to configure a serial interface, V.35. The other serial interfaces such as RS-232, X.21, 449 and 530 are to be configured in the similar way. Configuring V.35 as a DCE The following figure illustrates a connection of Ubigate iBG3026 configured as a DCE. Configuring Step Step...
  • Page 78: Ibg3026

    Returns to the ‘Router#’ prompt. 35# end Router# show module configuration Show configured information of serial [slot/port] the [slot/plort] serial interface. Configuring Example The following figure illustrates a connection of Ubigate iBG3026 configured as a DCE. (V.35 DTE) (V.35 DCE) V.35 Router iBG3026 The following example shows the commands used to configure the connection in The figure.
  • Page 79: Bundle Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Bundle Configuration This section describes how to configure a bundle interface. The interface bundle specifies the physical connection to be linked, an encapsulation protocol(Layer 2) and, optionally, Layer 3 parameters. Configuring a HSSI frame relay bundle The following example creates a simple interface bundle utilizing the HSSI interface and Frame Relay(Layer 2) parameters.
  • Page 80 Router/configure/interface/bundle wan1# link hssi 1/0 Router/configure/interface/bundle wan1# encapsulation frelay Router/configure/interface/bundle wan1# fr Router/configure/interface/bundle wan1/fr# intf_type dte Router/configure/interface/bundle wan1/fr# pvc 101 Router/configure/interface/bundle wan1/fr/pvc 101# ip address 165.213.89.237 24 Router/configure/interface/bundle wan1/fr/pvc 101# end Router# show interface bundle wan1 © SAMSUNG Electronics Co., Ltd.
  • Page 81 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring a HSSI PPP Bundle The following example creates a simple interface bundle utilizing the HSSI interface with PPP(Layer 2) parameters. Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode. Router/configure# interface bundle Sets a bundle interface.
  • Page 82 The following example shows the commands used to configure the connection in the figure. Router# configure terminal Router/configure# interface bundle wan1 Router/configure/interface/bundle wan1# link serial 1/0 Router/configure/interface/bundle wan1# encapsulation hdlc Router/configure/interface/bundle wan1# ip address 165.213.89.237 24 Router/configure/interface/bundle wan1# end Router# show interface bundle wan1 © SAMSUNG Electronics Co., Ltd.
  • Page 83: Configuring Hssi

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring HSSI The primary use of HSSI is for WAN interfaces such as T3(45 Mbps), and OC-1 (52 Mbps) of the synchronous digital hierarchy. The HSSI interface can be configured as a DTE or a DCE. Each way to configure HSSI interface is shown in the following.
  • Page 84 CHAPTER 6. Serial Interfaces Configuring Example The following figure illustrates a connection of Ubigate iBG3026 configured as a HSSI DTE. (HSSI DCE) (HSSI DTE) HSSI Network FR Switdh iBG3026 The following example shows the commands used to configure the connection in the figure.
  • Page 85 Goes back to the ‘Router#’ prompt. Router# show module Show configured information of the configuration hssi [slot/port] [slot/plort] HSSI interface. Configuring Example The following figure illustrates a connection of Ubigate iBG3026 configured as a DCE. (HSSI DTE) (HSSI DCE) HSSI Router...
  • Page 86 CHAPTER 6. Serial Interfaces Router/configure/hssi (1/0)# crc 16 Router/configure/hssi (1/0)# data_mode normal Router/configure/hssi (1/0)# name hssi1 Router/configure/hssi (1/0)# end Router# show module configuration hssi 1/0 © SAMSUNG Electronics Co., Ltd.
  • Page 87: Chapter 7. Wan Interfaces

    Ubigate iBG3026 Configuration Guide CHAPTER 7. WAN Interfaces Ubigate iBG3026 is available with T1, Channelized T3, and Clear Channel DS3 WAN interfaces. Consult the Ubigate iBG3026 Installation Manual for details on WAN interface types, cabling, and pinouts. This document outlines the configuration of module parameters(Layer 1) and, to a lesser degree, the configuration of bundle parameters(Layer 2).
  • Page 88 Router/configure# module t1 0/2/0 Router/configure/module/t1 (0/2/0)# circuitId testCircuit Router/configure/module/t1 (0/2/0)# contactInfo David Router/configure/module/t1 (0/2/0)# description toSeoul Router/configure/module/t1 (0/2/0)# framing esf Router/configure/module/t1 (0/2/0)# linecode b8zs Router/configure/module/t1 (0/2/0)# clock_source line Router/configure/module/t1 (0/2/0)# end Router# show module configuration t1 0/2/0 © SAMSUNG Electronics Co., Ltd.
  • Page 89 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring E1 Module Before configuring E1 module, the system carrier type must be changed to E1 by using ‘system carrier-type’ command in the configuration terminal mode. After setting the system carrier type, the system must be reboot to take effect.
  • Page 90: Configuring Ct3

    Sets a framing mode Router/configure/module/ct3([slot/port]) # - c_bit: C_BIT format framing {c_bit | m13} (default) - m13: 226 to 450 feet Goes back to the Router/configure/module/t1(slot/subslot/port])# ‘Router#’ prompt. Shows CT3 module Router# show module configuration ct3 information. [slot/port] © SAMSUNG Electronics Co., Ltd.
  • Page 91 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Example The following example shows the commands used to configure the connection in the figure. Router# configure terminal Router/configure# module ct3 2/0 Router/configure/module/ct3 (2/0)# cable_length 1 Router/configure/module/ct3 (2/0)# framing c_bit Router/configure/module/ct3 (2/0)# end Router# show module configuration ct3 2/0 Configuring T1’s within CT3...
  • Page 92: Configuring Ct3 Bundle

    MLPPP and Multilink Frame Relay, make use of NxT1 interfaces to create single logical interfaces. The interface bundle specifies the physical connection(s) to be linked, an encapsulation protocol(Layer 2) and, optionally, Layer 3 parameters. © SAMSUNG Electronics Co., Ltd.
  • Page 93 Ubigate iBG3026 Configuration Guide/Ed.00 CT3 Fractional T1 The following example creates a 384 Kbps fractional T1 bundle utilizing DS0s 1-3 and 8-10 of T1 number 3. Router/configure# interface bundle demo Router/configure/interface/bundle demo# link ct3 2/0/3:1-3 Router/configure/interface/bundle demo# link ct3 2/0/3:8-10 Router/configure/interface/bundle demo# encap hdlc Router/configure/interface/bundle demo# ip address 10.1.1.9...
  • Page 94 CHAPTER 7. WAN Interfaces This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 95: Chapter 8. Ppp, Mlppp, And Hdlc

    Ubigate iBG3026 Configuration Guide CHAPTER 8. PPP, MLPPP, and HDLC Ubigate iBG3026 provides Point-to-point protocol over WAN interfaces feature. The Point-to-Point Protocol(PPP) provides a standard method for transporting multi-protocol datagrams over point-to-point links. These links provide full- duplex simultaneous bi-directional operation and are assumed to deliver packets in order.
  • Page 96 CHAPTER 8. PPP, MLPPP, and HDLC PPP is comprised of 3 main components: Framing, LCP, NCP. A method for encapsulating multi-protocol datagrams. In Ubigate iBG3026, PPP is used on the links that use HDLC-like framing(on the WAN side over T1/T3 physical interfaces). The details of the encapsulations can be found in RFC1662 and RFC2516.
  • Page 97: Protocol Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Protocol Configuration Ubigate iBG3026 Routers may be configured for a variety of Layer 2 protocols. This document outlines HDLC, PPP, and Multilink PPP(MLPPP) configurations. Ubigate iBG3026 Router systems are often used at POPs(point of presents) to aggregate data for WAN transmission.
  • Page 98: Mlppp Configuration

    CHAPTER 8. PPP, MLPPP, and HDLC MLPPP Configuration This section shows how to confiure the router at site 1 with MLPPP. Configuring Ubigate iBG3026 at Site 1 Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode.
  • Page 99: Ppp And Mlppp Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 PPP and MLPPP Configuration This section shows how to configure interfaces with PPP and MLPPP. Configuring MLPPP for Ubigate iBG3026 at Main Site Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode.
  • Page 100 Configuring Example main# configure terminal main/configure# interface bundle MLPPP main/configure/interface/bundle MLPPP# link ct3 1/0/1-4 main/configure/interface/bundle MLPPP# encapsulation ppp main/configure/interface/bundle MLPPP# mlppp seg_threshold 1400 differential_delay 50 main/configure/interface/bundle MLPPP# ip address 192.168.1.1 24 © SAMSUNG Electronics Co., Ltd.
  • Page 101 PPP# link ct3 1/0/5 main/configure/interface/bundle PPP# encapsulation ppp main/configure/interface/bundle PPP# ppp mtu-mru-magic mtu 100-250-1000 mru 100-250-1000 main/configure/interface/bundle PPP# ip address 192.168.2.1 main/configure/interface/bundle PPP# exit Configuring HDLC for Ubigate iBG3026 at Main Site Configuring Step Step Command Purpose Router# configure terminal Goes into the terminal configuration mode.
  • Page 102 CHAPTER 8. PPP, MLPPP, and HDLC Configuring Example main# configure terminal main/configure# interface bundle HDLC main/configure/interface/bundle HDLC# link ct3 1/0/5 main/configure/interface/bundle HDLC# encapsulation hdlc main/configure/interface/bundle HDLC# hdlc keepalive 20 main/configure/interface/bundle HDLC# ip address 192.168.2.1 main/configure/interface/bundle HDLC# exit © SAMSUNG Electronics Co., Ltd.
  • Page 103: Chapter 9. Fr And Mfr

    Ubigate iBG3026 Configuration Guide CHAPTER 9. FR and MFR Layer Two Configurations The following figure outlines a Multilink Frame Relay(MFR) configuration with three sites. PVC 16 connects Site 1 to Site 3, while PVC 31 connects Site 2 to Site 3.
  • Page 104: Figure 9.2 Multilink Frame Relay With Three Site Details

    Configure the HSSI Bundle at Site 1 Router/configure# interface bundle toRouter Router/configure/interface/bundle toRouter# link hssi 1 Router/configure/interface/bundle toRouter# description "hssi link to router" Router/configure/interface/bundle toRouter# encap fr Router/configure/interface/bundle toRouter# fr Router/configure/interface/bundle toRouter/fr# intf_type dce Router/configure/interface/bundle toRouter/fr# lmi ansi © SAMSUNG Electronics Co., Ltd.
  • Page 105 Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure/interface/bundle toRouter/fr/lmi# exit Router/configure/interface/bundle toRouter/fr# pvc 16 Router/configure/interface/bundle toRouter/fr/pvc# shaping cir 6144000 bcmax 6144000 bcmin 3072000 Router/configure/interface/bundle toRouter/fr/pvc# exit The Router serves as a Frame Relay switch, connecting PVCs 16 and 31 through to another Frame Switch via a Clear Channel DS-3 interface. Note that the Bcmin setting of 3.072 Mbps is maintained across all PVC 16...
  • Page 106 Router/configure/interface/bundle toRouter/fr# mfr class C 2 Router/configure/interface/bundle toRouter/fr# lmi ansi Router/configure/interface/bundle toRouter/fr/lmi# keepalive Router/configure/interface/bundle toRouter/fr/lmi# exit Router/configure/interface/bundle toRouter/fr# pvc 16 Router/configure/interface/bundle toRouter/fr/pvc# shaping cir 6144000 bcmax 6144000 bcmin 3072000 Router/configure/interface/bundle toRouter/fr/pvc# exit Router/configure/interface/bundle toRouter/fr# exit 2 © SAMSUNG Electronics Co., Ltd.
  • Page 107 Ubigate iBG3026 Configuration Guide/Ed.00 Router B at Site 2 serves as the Frame Relay termination point, connecting the Site 2 IP network to Router A. This MFR bundle utilizes 2 T1 links for an approximate 3 Mbps bandwidth. Since it is the Frame Relay terminating point and is defined as a DTE frame relay interface, an IP address is assigned to the WAN bundle.
  • Page 108 ‘bundlename’ DLCI show inter bundle ‘bundlename’ DLCI show fr lmistats ‘bundlename’ show fr vcstats ‘bundlename’ DLCI show fr invarp all show fr pvcs © SAMSUNG Electronics Co., Ltd.
  • Page 109: Part Iii. Switching And Routing Protocols

    PART III. Switching and Routing Protocols Chapter 10. Layer-2 Switching Chapter 11. DHCP Relay Chapter 12. Static Routing Chapter 13. Chapter 14. OSPF Chapter 15. Chapter 16. Multicast Protocols Chapter 17. VRRP Chapter 18. MPLS Chapter 19. Chapter 20. VLAN with QoS...
  • Page 111: Chapter 10. Layer-2 Switching

    Ubigate iBG3026 Configuration Guide CHAPTER 10. Layer-2 Switching Layer 2 LAN Switching and Bridging Local Area Network(LAN) is a data communications network connecting terminals, computers and printers within a building or other geographically limited areas. These devices could be connected through wired cables or wireless links.
  • Page 112: Igmp Snooping

    This reduces multicast traffic through the Layer-2 device. IGMP snooping drops all but one of the host join messages per multicast group and only forwards this one join message to the multicast router. © SAMSUNG Electronics Co., Ltd.
  • Page 113: Protocol Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Protocol Configuration This section shows a configuration example for Multiple Spanning Tree Protocol(MSTP) with VLAN. Bridge Configurations This example gives a simple multi-bridge topology and how to configure it. Bridge a Bridge b Bridge c Bridge d Configuring MSTP The following steps show general configuration steps to configure MSTP.
  • Page 114 BRIDGE_A/configure# bridge 1 protocol mstp BRIDGE_A/configure# vlan database BRIDGE_A/configure/vlan/database# vlan 2 bridge 1 BRIDGE_A/configure/vlan/database# vlan 3 bridge 1 BRIDGE_A/configure/vlan/database# exit BRIDGE_A/configure# spanning-tree mst configuration BRIDGE_A/configure/spanning-tree/mst# bridge 1 instance 2 vlan 2 BRIDGE_A/configure/spanning-tree/mst# bridge 1 instance 3 vlan 3 © SAMSUNG Electronics Co., Ltd.
  • Page 115 Ubigate iBG3026 Configuration Guide/Ed.00 BRIDGE_A/configure/spanning-tree/mst# exit BRIDGE_A/configure# interface ethernet 2/2 BRIDGE_A/configure/interface/ethernet(2/2)# switchport BRIDGE_A/configure/interface/ethernet(2/2)# bridge-group 1 BRIDGE_A/configure/interface/ethernet(2/2)# bridge-group 1 instance 2 BRIDGE_A/configure/interface/ethernet(2/2)# bridge-group 1 instance 2 priority 96 BRIDGE_A/configure/interface/ethernet(2/2)# exit BRIDGE_A/configure# interface ethernet 2/3 BRIDGE_A/configure/interface/ethernet(2/3)# switchport BRIDGE_A/configure/interface/ethernet(2/3)# bridge-group 1 BRIDGE_A/configure/interface/ethernet(2/3)# bridge-group 1...
  • Page 116 BRIDGE_C/configure# interface ethernet 2/2 BRIDGE_C/configure/interface/ethernet(2/2)# switchport BRIDGE_C/configure/interface/ethernet(2/2)# bridge-group 1 BRIDGE_C/configure/interface/ethernet(2/2)# bridge-group 1 instance 2 BRIDGE_C/configure/interface/ethernet(2/2)# exit BRIDGE_C/configure# interface ethernet 2/3 BRIDGE_C/configure/interface/ethernet(2/3)# switchport BRIDGE_C/configure/interface/ethernet(2/3)# bridge-group 1 BRIDGE_C/configure/interface/ethernet(2/3)# bridge-group 1 instance 3 BRIDGE_C/configure/interface/ethernet(2/3)# exit BRIDGE_C/configure# interface ethernet 2/4 © SAMSUNG Electronics Co., Ltd.
  • Page 117 Ubigate iBG3026 Configuration Guide/Ed.00 BRIDGE_C/configure/interface/ethernet(2/4)# switchport BRIDGE_C/configure/interface/ethernet(2/4)# bridge-group 1 BRIDGE_C/configure/interface/ethernet(2/4)# end BRIDGE_C# show spanning-tree mst detail Bridge D configuration BRIDGE_D# configure terminal BRIDGE_D/configure# bridge 1 protocol mstp BRIDGE_D/configure# vlan database BRIDGE_D/configure/vlan/database# vlan 2 bridge 1 BRIDGE_D/configure/vlan/database# vlan 3 bridge 1...
  • Page 118: Configuring 802.1X

    The router is the physical path between the two clients and the RADIUS server. The Ubigate iBG3026 relays information to the Server and then back to each client.
  • Page 119: Lacp Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure/interface/ethernet(1/1)# switchport access vlan 2 Router/configure/interface/ethernet(1/1)# dot1x port-control auto Router/configure/interface/ethernet(1/1)# exit Router/configure# interface vlan vlan1.2 Router/configure/interface/ vlan vlan1.2# ip address 100.0.0.1 24 Router/configure/interface/ vlan vlan1.2# exit Router/configure# interface ethernet 1/2 Router/configure/interface/ethernet(1/2)# ip address 192.126.12.2 24 Router/configure/interface/ethernet(1/2)# exit Router/configure# aaa radius primary-server 192.126.12.1...
  • Page 120: Gvrp Configuration

    VLAN as active. This active state allows forwarding of frames on this VLAN. Set GVRP globally for this bridge. Associate interfaces with this bridge and specify switching characteristics as required. © SAMSUNG Electronics Co., Ltd.
  • Page 121: Figure 10.3 Gvrp Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 eth4/0 eth2/0 eth2/0 Bridge 2 Bridge 3 Figure 10.3 GVRP Configuration Bridge 2 Router/configure# Router/configure# bridge 1 protocol mstp Router/configure# vlan database Router/configure/vlan/database# vlan 5 bridge 1 name 5 Router/configure/vlan/database# exit Router/configure# interface ethernet 2/0 Router/configure/interface/ethernet (2/0)# switchport...
  • Page 122: Configuring Igmp Snooping

    Specify the interface to be configured. Associate the interface with bridge-group. Enable IGMP Snooping globally. Enable IGMP Snooping on the bridge-group. Configure ports that are connected to routers as multicast router ports. Enable IGMP Proxy on the router. © SAMSUNG Electronics Co., Ltd.
  • Page 123: Figure 10.4 Igmp Snooping Example

    Ubigate iBG3026 Configuration Guide/Ed.00 eth2/1 eth0/1 Multicast eth1/1 Router Multicast Host A Figure 10.4 IGMP Snooping Example As a result of this configuration, the queries received on the router by Ethernet 1/1 will not be forwarded to Ethernet 0/1 and Ethernet 2/1. The router itself will reply back with Membership report message.
  • Page 124 IGMP snooping SSM-safe-reporting. © SAMSUNG Electronics Co., Ltd.
  • Page 125 Ubigate iBG3026 Configuration Guide/Ed.00 show ip igmp snooping interface version shows the version of IGMP being used. show ip igmp snooping vlan shows the IGMP snooping state for the default VLAN. show ip igmpv2 snooping statistics shows Version 2 statistics.
  • Page 126 CHAPTER 10. Layer-2 Switching This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 127: Chapter 11. Dhcp Relay

    CHAPTER 11. DHCP Relay Ubigate iBG3026 Modular Router’s DHCP relay feature eliminates the need for a DHCP server on every LAN, because DHCP requests can be relayed to a single remote DHCP server. The relay agent forwards traffic between clients and servers when they are located on different subnets.
  • Page 128: Figure 11.2 Bootp Requests

    DHCP OFFER, DHCP ACK, DHCP NAK, etc. The relay agent looks up the MAC address and either sends the packet to the client or broadcasts it on the LAN. Unicast Broadcast Unicast BOOTEQUEST BOOTEQUEST DHCP Relay Agent DHCP Server DHCP Client Figure 11.3 BOOTP Replies © SAMSUNG Electronics Co., Ltd.
  • Page 129: Figure 11.4 Typical Scenario For Dhcp Relay With Nat

    Ubigate iBG3026 Configuration Guide/Ed.00 Using DHCP Relay with NAT When NAT is enabled, the DHCP server may discard packets because the giaddr does not match the source of the packet. Additionally, it may not know how to route the packet back to the client. See Figure 11.4. The solution is that the gateway address(giaddr) field needs to have IP address 192.168.20.1(in...
  • Page 130: Figure 11.5 Show Dhcp_Relay Command

    The following screen captures show the displayed results of issuing show commands relevant to DHCP relay, with and without gateway addresses configured. Router# show dhcp_relay DHCP RELAY CONFIGURATION Ethernet 0/0: Enabled; DHCP Server 20.1.1.1 Figure 11.5 show dhcp_relay Command © SAMSUNG Electronics Co., Ltd.
  • Page 131: Chapter 12. Static Routing

    Compared to Static Routing, Dynamic Routing, on the other hand, is typically used when static routing entries should be unwieldy in a large network, where the administrator would have to operate complex manual tasks. This chapter describes how to configure static routing in the Ubigate iBG3026 Router. Configuring Static Routes Static routes are specified by adding and deleting route entries to and from the route table.
  • Page 132 Router# configure terminal Router/configure# ip route 165.213.100.0/24 165.213.89.238 To delete the entry, simply add ‘no’ just as follows. Router# configure terminal Router/configure# no ip route 165.213.100.0 255.255.255.0 165.213.89.238 Router# configure terminal Router/configure# no ip route 165.213.100.0/24 165.213.89.238 © SAMSUNG Electronics Co., Ltd.
  • Page 133: Chapter 13. Rip

    Ubigate iBG3026 Configuration Guide CHAPTER 13. Routing Information Protocol(RIP) is a classical distance-vector routing protocol. It is simple to implement and performs good for small networks. Distance Vector Routing requires that each node maintain the distance from itself to each possible destination. The distances are computed using the information in neighbor’s distance vectors.
  • Page 134 The routing-update timer clocks the interval between periodic routing updates. Generally, it is set to 30 seconds, with a small random amount of time added whenever the timer is reset. © SAMSUNG Electronics Co., Ltd.
  • Page 135: Configuring Rip

    Configuring RIP This section describes the steps to configure RIP and show a simple example. R1 and R2 are two Ubigate iBG3026 routers connecting to a common network 10.10.11.0/24. They are also connected to network 10.10.10.0/24 and 10.10.12.0/24, respectively.
  • Page 136 R1# show ip protocols rip The following example shows the commands used to configure RIP for R2. R1# configure terminal R1/configure# router rip R2/configure/router rip# network 10.10.11.0/24 R2/configure/router rip# network 10.10.12.0/24 R2/configure/router rip# end R2# show ip protocols rip © SAMSUNG Electronics Co., Ltd.
  • Page 137: Configuring Ripv2 Authentication

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring RIPv2 authentication The Ubigate iBG3026 provides RIPv2 authentication and the choice of a single key or multiple keys for the authentication. This section describes a simple example to configure RIPv2 authentication with a single key.
  • Page 138 R2. R2# configure terminal R2/configure# router rip R2/configure/router rip# network 10.10.11.0/24 R2/configure/router rip# redistribute connected R2/configure/router rip# exit R2/configure# interface ethernet 1/1 R2/configure/interface/ethernet(1/1)# ip rip authentication mode md5 R2/configure/interface/ethernet(1/1)# ip rip authentication string UBI © SAMSUNG Electronics Co., Ltd.
  • Page 139: Configuring Rip On A Bundle Interface

    Ubigate iBG3026 Configuration Guide/Ed.00 As in the examples, RIP should be run on the network to be authenticated at first. The redistribute command is enabled to see to it that the authentication be performed correctly. Then, the interface to be authenticated, the authentication mode and string are specified.
  • Page 140 The following example shows the commands used to configure RIP using a bundle interface. Router# configure terminal Router/configure# router rip Router/configure/router rip# network 165.213.89.237/24 Router/configure/router rip# network wan1 Router/configure/router rip# end Router# show ip protocols rip © SAMSUNG Electronics Co., Ltd.
  • Page 141: Chapter 14. Ospf

    Ubigate iBG3026 Configuration Guide CHAPTER 14. OSPF The Open Shortest Path First(OSPF) protocol is an interior gateway protocol(IGP) that routes packets within a single autonomous system(AS). OSPF uses link-state information to make routing decisions, making route calculations using the shortest path first(SPF) algorithm(also referred to as the Dijkstra algorithm).
  • Page 142: Ospf Configuration

    Configuring Step Step Command Purpose Router# configure terminal Enters the terminal configuration mode. Router/configure# hostname [Host Sets the host name. Name] Configuring Example The following figure illustrates a simple network configuration. 30.30.30.0/24 10.10.10.0./24 iBG3026 T1PPP 20.20.200/24 © SAMSUNG Electronics Co., Ltd.
  • Page 143 Ubigate iBG3026 Configuration Guide/Ed.00 The following example shows the commands used to configure the host name in the figure. Router# configure terminal Router/configure# hostname iBG3026 iBG3026/configure# Configuring Local Network Interface Configuring Step Step Command Purpose iBG3026/configure# interface ethernet Enters the ethernet interface [slot/port] configuration mode.
  • Page 144 The following example shows the commands used to configure the bundle interface. iBG3026/configure# interface bundle WAN iBG3026/configure/interface/bundle WAN# link t1 1/1 iBG3026/configure/interface/bundle WAN# encapsulation ppp iBG3026/configure/interface/bundle WAN# ip address 20.20.20.1 24 iBG3026/configure/interface/bundle WAN# exit iBG3026/configure# © SAMSUNG Electronics Co., Ltd.
  • Page 145 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Loopback Interface Configuring Step Step Command Purpose iBG3026/configure# interface Enters the loopback interface loopback lo configuration mode. iBG3026/configure/interface/loopback Sets the looback interface ip lo# ip address [IP address] { [bit address. mask] | [number of bits for mask] }...
  • Page 146 CHAPTER 14. OSPF Configuring Example The following example shows the commands used to configure the bundle interface. iBG3026/configure# router-id 1.1.1.1 iBG3026/configure# router ospf 1 iBG3026/configure/router/ospf# network 10.10.10.1/24 area 760 iBG3026/configure/router/ospf# exit iBG3026/configure# © SAMSUNG Electronics Co., Ltd.
  • Page 147: Chapter 15. Bgp

    Ubigate iBG3026 Configuration Guide CHAPTER 15. The Border Gateway Protocol(BGP) is an exterior gateway protocol(EGP) that is used to exchange routing information among routers in different autonomous systems(ASs). BGP routing information includes the complete route to each destination. BGP uses the routing information to maintain a database of network reachability information, which it exchanges with other BGP systems.
  • Page 148 Since the AS_PATH attribute includes a list of Autonomous Systems used to reach the destination, it is possible to implement primitive policy decisions such as ‘avoid all routes through AS x’. © SAMSUNG Electronics Co., Ltd.
  • Page 149: Protocol Features

    Protocol Features The following BGP features such as aggregation, route reflection, AS confederation, and etc will be supported on the Ubigate iBG3026 system. Aggregation is the process of combining the characteristics of several different routes in such a way that a single route can be advertised. Aggregation reduces the amount of information a BGP speaker stores and exchanges with other speakers.
  • Page 150 AS path is more efficient than listing each route individually. BGP community list is a user defined BGP communites attribute list. BGP community list can be used for matching or manipulating BGP communities attribute in updates. Valid list numbers are 1-199. © SAMSUNG Electronics Co., Ltd.
  • Page 151: Minimum Bgp Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Prefix lists are yet another way of implementing BGP policy. A Prefix List enables filtering of route advertisements based on IP prefixes. This is a group of BGP neighbors that share update policies. Instead of defining the same policies for several individual peers, a peer group is defined and policies are assigned to the group.
  • Page 152 CHAPTER 15. BGP Configuring Example In the figure, R1 and R2 are two Ubigate iBG3026 Routers belonging to the same AS(autonomous system) with the ID of 200. AS : 200 10.10.10.1 Network 10.10.10.2 165.213.100.0/24 The following example shows the commands used to configure the BGP for R1 in the figure.
  • Page 153 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring BGP in the different AS Configuring Example The following figure shows two Ubigate iBG3026 Routers in the different AS. AS : 200 AS : 300 10.10.10.1 10.10.10.2 The following example shows the commands used to configure the BGP for R1 in the figure.
  • Page 154: Bgp Application Using Route-Map

    Applies a route-map to routes for neighbor [IP address] route-map incoming advertisements. [prefix name] in Configuring Example In the figure, R1 and R2 are the Ubigate iBG3026 Routers in the different antonomous systems. AS : 200 AS : 300 1.1.1.0/24 192.168.10.1...
  • Page 155 Ubigate iBG3026 Configuration Guide/Ed.00 R2 is connected to two different routers and their subnets are The following example shows the commands used to configure the BGP using Route-Map for R1. R1# configure terminal R1/configure# ip prefix-list inpf seq 5 deny 1.1.1.0/24 ge...
  • Page 156 CHAPTER 15. BGP This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 157: Chapter 16. Multicast Protocols

    There are two modes of PIM protocol - Dense mode(DM) and Sparse mode (SM). Ubigate iBG3026 supports SM but not DM. PIM-DM floods multicast traffic throughout the network initially and then generates prune messages as required.
  • Page 158 The MRIB is a multicast topology table derived from the unicast routing table. In PIM-SM, the MRIB is used to decide where to send Join/Prune messages. It also provides routing metrics for destination addresses. These metrics are used when sending and processing Assert messages. © SAMSUNG Electronics Co., Ltd.
  • Page 159 Ubigate iBG3026 Configuration Guide/Ed.00 Reverse Path Forwarding Reverse Path Forwarding(RPF) is a concept of an optimized form of flooding, where the router accepts a packet from SourceA through Interface IF1 only if IF1 is the interface the router would use in order to reach SourceA.
  • Page 160 G) state. RP displays the IP address for the RP router. The leading dots ..Stand for VIF index Router_E# show ip pim sparse-mode mroute IP Multicast Routing Table (*,*,RP) Entries: 0 (*,G) Entries: 1 (S,G) Entries: 0 © SAMSUNG Electronics Co., Ltd.
  • Page 161 Ubigate iBG3026 Configuration Guide/Ed.00 (S,G,rpt) Entries: 0 (*, 224.0.1.3) RP: 10.10.1.5 RPF nbr: 172.16.1.2 RPF idx: ethernet 2/1 Upstream State: JOINED Local ........ Joined j....... Asserted ........ Outgoing o....... At Router_E, Ethernet 2/1 is the incoming interface of the(*, G) entry, and Ethernet 1/1 is on the outgoing interface list of the(*, G) entry.
  • Page 162 Router# show ip mroute summary IP Multicast Routing TableFlags: I - Immediate Stat, T - Timed Stat, F - Forwarder installedTimers: Uptime/Stat ExpiryInterface State: Interface (TTL) (10.10.1.52, 224.0.1.3), 00:01:32/00:03:20, PIM-SM, Flags: © SAMSUNG Electronics Co., Ltd.
  • Page 163 Ubigate iBG3026 Configuration Guide/Ed.00 PIM Group-to-RP Mappings Use the show ip pim sparse-mode rp mapping command to display the group- to-RP mapping details. The output displays information about RP candidates. There are two RP candidates for the group range 224.0.0.0/4. RP Candidate 10.10.1.5 has a default priority of 192, whereas, RP Candidate...
  • Page 164 To set the flag at the DR to switch to the SPT on receiving the first packet (default on), enter: Router/configure#ip pim spt-threshold The following example configures the Register Suppression Timeout to be 70 seconds. Router/configure#ip pim register-suppression 70 © SAMSUNG Electronics Co., Ltd.
  • Page 165 Ubigate iBG3026 Configuration Guide/Ed.00 To set the RP static IP address to 10.10.1.1, enter: Router/configure#ip pim rp-address 10.10.1.1 To set the flag for the RP to switch to the SPT for(S, G) upon receipt of the first Register message(default: on). To turn on this feature, enter:...
  • Page 166 − ip pim exclude-genid − ip pim dr-priority − ip pim neighbor-filter − ip pim sparse-mode − Config mode commands ip pim accept-register list − ip pim register-source − ip pim register-rate-limit − © SAMSUNG Electronics Co., Ltd.
  • Page 167 Ubigate iBG3026 Configuration Guide/Ed.00 ip pim ignore-rp-set-priority − ip pim rp-register-kat − ip pim register-suppression − ip pim cisco-register-checksum group-list − clear ip mroute clear ip pim sparse-mode bsr rp-set all debug pim all debug pim sparse-mode all debug pim sparse-mode events...
  • Page 168 CHAPTER 16. MultiCast Protocols DRIB Ubigate iBG3026 DVMRP is a separate daemon serviced by the NSM daemon. It maintains the DVMRP Routing Information Base(DRIB). The DRIB contains the table of routes for multicast sources learned through DVMRP route exchanges. Both the upstream and the downstream parts of a route-state reside physically in a combined, single DRIB node.
  • Page 169: Figure 16.1 Dvmrp Network

    Ubigate iBG3026 Configuration Guide/Ed.00 10.101.52 Source_1 224.10.1.3(Group 0) 10.10.1.9 eth 2 10.10.3.4 ethernet 2/1 Router_A Router_B ethernet 1/1 ethernet 1/1 172.16.1.2/24 10.10.3.9 ethernet 2/1 172.16.1.2/24 Router_C ethernet 1/1 192.168.1.10/24 Subnet 1 192.168.1.50/24 Host_1 Figure 16.1 DVMRP Network In this example, all routers are running DVMRP.
  • Page 170 Use the following commands to verify interface, neighbor, route, prune, and DVMRP global state information. Note: For details on the commands used in the following example, refer to the Ubigate iBG3026 Command Reference. Interface Information The show ip dvmrp interface command displays the interface information for Router_C.
  • Page 171 Ubigate iBG3026 Configuration Guide/Ed.00 DVMRP Prune Information The show ip dvmrp prune command displays DVMRP prune information for Router_C. For example: Router_C# show ip dvmrp prune DVMRP Global State The show ip dvmrp command displays the global DVMRP state for Router_C.
  • Page 172 CHAPTER 16. MultiCast Protocols IGMP Commands The IGMP commands supported in Ubigate iBG3026 OS are: ip igmp access-group ip igmp immediate-leave ip igmp last-member-query-count ip igmp last-member-query-interval ip igmp querier-timeout ip igmp query-interval ip igmp query-max-response-time ip igmp version debug igmp all...
  • Page 173 Ubigate iBG3026 Configuration Guide/Ed.00 Example 1 The following example configures default IGMP version to 2 to run on interface Ethernet(0/1). Router/configure/interface/ethernet (0/1)# ip igmp version 2 Example 2 The following example configures Ethernet(0/1) with the Query Interval to be 100 seconds.
  • Page 174 Router/configure# interface ethernet 0/1 Router/configure/interface/ethernet (0/1)# ip igmp access- group 1 Example 8 The following example configures Immediate leave on Ethernet(0/1) for multicast group 224.7.7.7. mpls4Router/configure# access-list 1 permit 224.7.7.7 0.0.0.0 Router/configure/interface/ethernet (0/1)# ip igmp immediate-leave group-list 1 © SAMSUNG Electronics Co., Ltd.
  • Page 175: Chapter 17. Vrrp

    Ubigate iBG3026 Configuration Guide CHAPTER 17. VRRP In statically routed networks, when a router fails, all the network devices connected to this router are unable to have traffic routed. Typically this means these devices cannot reach the Internet or other networks.
  • Page 176: Configuring Vrrp

    2 automatically takes over routing traffic between the subnets labeled Host A, B, and C, and the Gateway Router providing Internet connectivity. To configure VRRP in this environment, you need to configure Ubigate iBG3026 1 as the Master virtual router, and Ubigate iBG3026 2 as the backup virtual router. Host A...
  • Page 177 2 Router/configure/interface/ethernet(0/1)/vrrp 10# enable Verifying and Troubleshooting Ubigate iBG3026 provides commands to verify VRRP status and configuration. To display detailed status of all VRRP groups on the router. Router# show vrrp detailed To display a brief status of all VRRP groups on the router.
  • Page 178 CHAPTER 17. VRRP This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 179: Chapter 18. Mpls

    Ubigate iBG3026 Configuration Guide CHAPTER 18. MPLS MPLS Overview Multiple Protocol Label Switching(MPLS) is an IETF standards-based approach built on the efforts of the various proprietary multilayer switching solutions. In MPLS, data transmission occurs on label-switched paths(LSPs). Forwarding Equivalent Class(FEC) determines traffic mapping into MPLS LSPs at the ingress point of the MPLS network.
  • Page 180: Mpls Forwarding

    Forwarding of MPLS packet as L3 packets by popping the MPLS label at the PHP HOP or at the egress LER. For Martini case, forwarding of MPLS packet as L2 packets by popping the MPLS outer label, and examine the inner VC label. © SAMSUNG Electronics Co., Ltd.
  • Page 181: Qos

    Ubigate iBG3026 Configuration Guide/Ed.00 The MPLS architecture defines the components of the forwarding information base(FIB) as follows: Next Hop Label Forwarding Entry(NHLFE): An entry containing next-hop information(interface and next-hop address) and label manipulation instructions; it may also include label encoding, L2 encapsulation information, and other information required for processing packets in the associated stream.
  • Page 182: Figure 18.2 Martini L2 Vpn Configuration

    After adding the two MPLS headers, one for each label, the frame is encapsulated into the proper format corresponding to the outgoing interface. © SAMSUNG Electronics Co., Ltd.
  • Page 183 The egress LER infers from the VC label how to process the frame and then forwards it to the appropriate outgoing port. The current Ubigate iBG3026 system supports the following encapsulation type of PW interface: Ethernet, VLAN, PPP Configuring Minimal L2VPN The following configuration is based on figure 18.2.
  • Page 184 Router/configure/interface/ethernet (3/2)# switchport Router/configure/interface/ethernet (3/2)# bridge-group 1 Router/configure/interface/ethernet (3/2)# switchport mode trunk Router/configure/interface/ethernet (3/2)# switchport trunk allowed vlan add 7 Router/configure/interface/ethernet (3/2)# mpls-l2-circuit MPLS Router/configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# encapsulation vlan Router/configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# exit Router/configure/interface/ethernet (3/2)#exit © SAMSUNG Electronics Co., Ltd.
  • Page 185 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring P (NSM) Router#configure terminal Router/configure#interface loopback 0 Router/configure/interface/loopback 0# ip address 2.2.2.2 32 Router/configure/interface/loopback 0# exit Router/configure# router-id 2.2.2.2 Router/configure# interface ethernet 0/2 Router/configure/interface/ethernet (0/2)# ip address 20.20.1.2 24 Router/configure/interface/ethernet (0/2)# label-switching Router/configure/interface/ethernet (0/2)# enable-ldp...
  • Page 186 Router/configure/router/ldp# target-peer 1.1.1.1 Router/configure/router/ldp# exit Configuring PE2 (Enable Bridge) Router/configure# bridge 1 protocol mstp Router/configure# vlan database Router/configure/vlan/database# vlan 7 bridge 1 Configuring PE1(OSPF) 9.1.7.14 Configuring the L2 Circuit(PE2) Router/configure# mpls l2-circuit MPLS 100 1.1.1.1 © SAMSUNG Electronics Co., Ltd.
  • Page 187 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring PE1 (OSPF) 9.1.7.15 (Binding the L2 Circuit on the PW interface(PE2) Router/configure# interface ethernet 3/2 Router/configure/interface/ethernet (3/2)# switchport Router/configure/interface/ethernet (3/2)# bridge-group 1 Router/configure/interface/ethernet (3/2)# switchport mode trunk Router/configure/interface/ethernet (3/2)# switchport trunk allowed vlan add 7...
  • Page 188 Router /configure/interface/ethernet (3/2)# switchport trunk allowed vlan add 7,10 Router /configure/interface/ethernet (3/2)# mpls-l2-circuit MPLS Router /configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# encapsulation vlan Router /configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# add-vlan vlan-id 10 Router /configure/interface/ethernet (3/2)/mpls-l2-circuit MPLS# exit Router /configure/interface/ethernet (3/2)#exit © SAMSUNG Electronics Co., Ltd.
  • Page 189: Mpls Configuration Example

    Class(FEC) corresponding to that LSP. LDP assigns labels to every destination address and destination prefix provided by Ubigate iBG3026. The LDP interface to the MPLS forwarder adds labels to and deletes labels from the forwarding tables. Running LDP on a system, requires the following tasks: Enabling label-switching on the interface on NSM.
  • Page 190 0 Router/configure/router/ospf# exit R2 (NSM) Router/configure# interface loopback lo1 configuring new loopback interface lo1 =======> Router/configure/interface/loopback lo1# ip address 192.168.0.2 32 Router/configure/interface/loopback lo1# exit Router/configure# interface ethernet 1/2 Router/configure/interface/ethernet (1/2)# ip address 10.10.10.2 24 © SAMSUNG Electronics Co., Ltd.
  • Page 191 Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure/interface ethernet (1/2)# exit Router/configure# interface ethernet 2/2 Router/configure/interface/ethernet (2/2)# ip address 10.10.11.2 24 Router/configure/interface Ethernet (2/2)# exit Router/configure# router-id 192.168.0.2 Router/configure# interface ethernet 1/2 Router/configure/interface/ethernet (1/2)# label-switching Router/configure/interface/ethernet (1/2)# exit Router/configure# interface ethernet 2/2 Router/configure/interface/ethernet (2/2)# label-switching...
  • Page 192: Enabling Label-Switching-Minimal Configuration

    In this example, the Label Switched Path(LSP) is configured using minimal configuration and is setup using the best IP nexthop available. Each router along the path is chosen by the previous router by looking up the best nexthop available in its IP routing table. © SAMSUNG Electronics Co., Ltd.
  • Page 193: Figure 18.4 Lable-Switching Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 192.168.0.60 eth 2/1 eth 1/1 192.168.0.63 192.168.0.90 10.10.23.0/24 10.10.21.0/24 eth 0/0 eth 0/1 eth 2/1 eth 1/1 Figure 18.4 Lable-switching Configuration R1- NSM Router# configure terminal Router/configure# interface loopback lo1 configuring new loopback interface lo1=======> Router/configure/interface/loopback lo1# ip address 192.168.0.63 32...
  • Page 194: Establishing A Trunk-Cspf Disabled

    0 Router/configure/router/ospf# exit Establishing a Trunk-CSPF disabled In the Ubigate iBG3026 implementation, Constrained Shortest Path First(CSPF) is enabled by default.Typically, CSPF is disabled when all the participating nodes do not support the required traffic engineering extensions and configure LSPs manually to use an explicit path. In this case, LSP is established only along the path specified by the operator.
  • Page 195: Establishing A Trunk-Using Cspf

    Explicit Route Object(ERO). Each router along the path sends a Path message only to the nexthop specified in the ERO. In the Ubigate iBG3026 implementation, CSPF is enabled by default and if no-cspf is not specified, the trunk is CSPF enabled automatically.
  • Page 196: Establishing A Trunk-Using Explicitly Defined Path

    10.10.12.0/24 eth 2/1 eth 1/1 10.10.24.0/24 eth 2/1 eth 1/1 Figure 18.7 Explicitily Defined Path R1-RSVP-TE Router#configure terminal Router/configure# rsvp-path P1 Router/configure/rsvp-path# hop-address 10.10.23.60 Router/configure/rsvp-path# hop-address 10.10.21.90 Router/configure/rsvp-path# exit Router/configure# rsvp-trunk T1 Router/configure# primary no-cspf © SAMSUNG Electronics Co., Ltd.
  • Page 197: Reserving Bandwidth For The Trunk

    Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure/rsvp-trunk# primary path P1 Router/configure/rsvp-trunk# to 192.168.0.90 Router/configure/rsvp-trunk# Reserving Bandwidth for the Trunk Configuring the reservable bandwidth specifies the maximum bandwidth available to RSVP-TE for reservations. Using the bandwidth command specifies the total bandwidth on an interface.
  • Page 198: Adding A Secondary Lsp To The Trunk

    LSPs and the numerically lower one is given a preference. However, once the LSP gets established, its setup priority is never used until it gets pre-empted or reset and is being brought up again. © SAMSUNG Electronics Co., Ltd.
  • Page 199: Adding Administrative Group Constraints To An Lsp

    Ubigate iBG3026 Configuration Guide/Ed.00 192.168.0.60 eth 2/1 eth 1/1 192.168.0.63 192.168.0.90 10.10.23.0/24 10.10.21.0/24 eth 0/0 eth 0/1 eth 2/1 eth 1/1 Figure 18.9 Adding Secondary LSP R1-RSVP-TE Router#configure terminal Router/configure# rsvp-trunk T1 Router/configure/rsvp-trunk# primary no-cspf Router/configure/rsvp-trunk# primary path mypath Router/configure/rsvp-trunk# primary bandwidth 10m...
  • Page 200 Configuring existing Ethernet interface Router/configure/interface/ethernet (0/1)# admin-group A Router/configure/interface/ethernet (0/1)# admin-group B Router/configure/interface/ethernet (0/1)# admin-group C Router/configure/interface/ethernet (0/1)# exit Router/configure# interface ethernet 1/0 Configuring existing Ethernet interface Router/configure/interface/ethernet (1/0)# admin-group D Router/configure/interface/ethernet (1/0)# admin-group E Router/configure/interface/ethernet (1/0)# exit © SAMSUNG Electronics Co., Ltd.
  • Page 201 Ubigate iBG3026 Configuration Guide/Ed.00 R1-RSVP-TE Router# configure terminal Router/configure# rsvp-trunk T1 Router/configure/rsvp-trunk# primary no-cspf Router/configure/rsvp-trunk# primary path P1 Router/configure/rsvp-trunk# primary no-cspf Router/configure/rsvp-trunk# primary bandwidth 10m Router/configure/rsvp-trunk# primary setup-priority 6 Router/configure/rsvp-trunk# primary hold-priority 4 Router/configure/rsvp-trunk# primary include-any A Router/configure/rsvp-trunk# primary include-any C...
  • Page 202 CHAPTER 18. MPLS R1-RSVP-TE Router# configure terminal Router/configure# router rsvp Router/configure/router/rsvp# hello-interval 10 Router/configure/router/rsvp# hello-timeout 35 Router/configure/router/rsvp# neighbor 10.10.23.60 Router/configure/router/rsvp#exit R2-RSVP-TE Router# configure terminal Router/configure# router rsvp Router/configure/router/rsvp# hello-interval 10 Router/configure/router/rsvp# hello-timeout 35 Router/configure/router/rsvp# neighbor 10.10.23.63 Router/configure/router/rsvp#exit © SAMSUNG Electronics Co., Ltd.
  • Page 203: Chapter 19. Qos

    Ubigate iBG3026 Configuration Guide CHAPTER 19. iBG3026 Quality of Service The iBG3026 supports software-based QoS in the operating system. It also supports hardware-based QoS which is enforced in the chipset. Each type of QoS support has its own configuration capability in the CLI.
  • Page 204: Features

    CR Kbps, and momentary peaks in the flow are permitted. The goal is that each class with sufficient demand will be able to receive roughly its allocated bandwidth over some interval of time. © SAMSUNG Electronics Co., Ltd.
  • Page 205: Classification Types

    Ubigate iBG3026 Configuration Guide/Ed.00 Peak Rate Every traffic class can be configured with a peak rate parameter, which is the bandwidth that can be offered to that class if unused bandwidth is available from other classes. This provides for very efficient bandwidth utilization.
  • Page 206: Configuration

    Router/configure/interface/bundle AppTest/qos/policy-class SrcOne# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class SrcTwo Router/configure/interface/bundle AppTest/qos/policy-class SrcTwo# cbq cr 1024 pr 1536 Router/configure/interface/bundle AppTest/qos/policy-class SrcTwo# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class AppHTML Router/configure/interface/bundle AppTest/qos/policy-class AppHTML# cbq cr 512 pr 1024 Router/configure/interface/bundle AppTest/qos/policy-class © SAMSUNG Electronics Co., Ltd.
  • Page 207: Vlan Identifiers

    Ubigate iBG3026 Configuration Guide/Ed.00 AppHTML# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class AppSMTP Router/configure/interface/bundle AppTest/qos/policy-class AppSMTP# cbq cr 384 pr 1024 Router/configure/interface/bundle AppTest/qos/policy-class AppSMTP# exit policy-class Router/configure/interface/bundle AppTest/qos# policy-class AppDef Router/configure/interface/bundle AppTest/qos/policy-class AppDef# cbq cr 128 pr 1024 Router/configure/interface/bundle AppTest/qos/policy-class AppDef# exit policy-class...
  • Page 208: Configuration

    SmithInc Router/configure/interface/bundle VLANtest/qos/class SmithInc# cb q cr 2049 pr 6144 Router/configure/interface/bundle VLANtest/qos/class SmithInc# exit Router/configure/interface/bundle VLANtest/qos# policy-class Default Router/configure/interface/bundle VLANtest/qos/class Default# cbq 1024 pr 2048 Router/configure/interface/bundle VLANtest/qos/class Default# exit Router/configure/interface/bundle VLANtest/qos# enable Router/configure/interface/bundle VLANtest/qos# end © SAMSUNG Electronics Co., Ltd.
  • Page 209: Historical Statistics

    Ubigate iBG3026 Configuration Guide/Ed.00 Historical Statistics The Historical statistics command enables users to collect statistics for every N hours(N < 4 hours) and upload the statistics for every class to an FTP server. The data is sent in an ASCII format file with three sections. The first section includes the upload time, system IP address, sample interval in minutes, and the upload interval in minutes.
  • Page 210: Traffic Policing Versus Traffic Shaping

    CBQ to shape traffic is recommended because of reasons mentioned in section ‘Traffic Policing versus Traffic Shaping’. Additionally, CBQ in iBG3026 OS also provides bandwidth guarantee, bandwidth borrowing and prioritization. It provides ‘Total Link Access Control’ instead of just rate limiting. © SAMSUNG Electronics Co., Ltd.
  • Page 211: Configuring Traffic Policing

    Ubigate iBG3026 Configuration Guide/Ed.00 Traffic policing is also supported on Ethernet interfaces. Please check section ‘Verifying Policing Status and Configuration’ for limitations. Traffic policing is implemented using a token bucket algorithm. Users will be able specify two parameters when configuring traffic policing, Rate(token fill rate) and Peak(number of tokens).
  • Page 212 Avg Rate In: 1000 Kbps Counters since last boot/clear: Packets Forwarded: 26222 -- Packet drop details Bytes Forwarded: 34088600 Queue overflow: 0 Packets Dropped: 2913 No buffers: 0 Bytes Dropped: 3786900 Policing: 2913 RED: 0 R87# © SAMSUNG Electronics Co., Ltd.
  • Page 213: Limitations

    Ubigate iBG3026 Configuration Guide/Ed.00 Limitations The following limitations apply for this release: Policing is not supported for outbound traffic on Ethernet interfaces. Multi-level policing is not supported. Policing is done only for leaf classes. Any policing configuration on non-leaf classes is ignored.
  • Page 214: Packet Marking

    Classify based Dscp = default Dscp = 0 on Traffic Class Class ipv6-hi Class ipv6-lo TC = default TC = 0 Class mpls-hi Class mpls-lo EXP = default EXP = 0 Figure 19.4 MF Classification © SAMSUNG Electronics Co., Ltd.
  • Page 215 Ubigate iBG3026 Configuration Guide/Ed.00 The user configures MF classification for a specific interface and for a specific traffic direction. He constructs the class hierarchy by specifying the parent- class for each new class he wants to create. In order to create a new class, the user must specify the class-name of the new class, the class name of the parent-class and a match rule.
  • Page 216 ‘mpls’ is added, the ‘search_type’ in the parent class ‘root-out’ is set to ‘packet-class’. The search function and search structure pointers are set to do a hash table lookup based on packet-class value. © SAMSUNG Electronics Co., Ltd.
  • Page 217: Traffic Policing

    Ubigate iBG3026 Configuration Guide/Ed.00 The ether-type value of 0x8847 is added to the hash table and a pointer to class ‘mpls’ is stored in that entry. For any classification type, it is possible for the match rule to have a range of values or multiple, non-contiguous values.
  • Page 218 Committed Burst Size Committed Burst Time Excess Burst Size Peak Information Rate Peak Burst Size Peak Burst Time Burst Size Burst Interval. Token bucket representing committed rates Token bucket representing excess rates Token bucket representing peak rates © SAMSUNG Electronics Co., Ltd.
  • Page 219: Policing Using Single Rate Three Color Marking (Srtcm)

    Ubigate iBG3026 Configuration Guide/Ed.00 Policing Using Single Rate Three Color Marking (srTCM) The srTCM algorithm uses single rate CIR, and two burst sizes, i.e., CBS, and EBS. The srTCM will be implemented using two token buckets, i.e., Tc of size CBS, and Te of size EBS. A packet is ‘colored’ green if it doesn't exceed the CBS, yellow if it does exceed the CBS but not the EBS, and red otherwise.
  • Page 220 This process will execute within the context of the forwarding task(tRxPoll) so that no context switches are involved, leading to better performance. © SAMSUNG Electronics Co., Ltd.
  • Page 221: Configuring Srtcm

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring srTCM To enable policing using srTCM, CIR, CBS and EBS need to be configured. CIR configuration will be mandatory and CBS and EBS parameters will be optional. CBS will have a default value equal to ‘CIR’ Kbits, which means that the default burst time will be 1 sec.
  • Page 222 CBT and PBT milliseconds. Without which CIR and PIR cannot be sustained. It is recommended that CBS and PBS be large enough so that CBT and PBT are at least 1 second. © SAMSUNG Electronics Co., Ltd.
  • Page 223: Configuring Trtcm

    Ubigate iBG3026 Configuration Guide/Ed.00 Therefore it is sufficient for the token filler to execute every 1 second and fill CBS number of tokens into the Tc bucket and PBS number of tokens into the Tp bucket. However, in our implementation the token filler will run every 100 ms.
  • Page 224: Egress Queuing, Shaping And Scheduling

    Each scheduling list is formed as circular linked list of same priority classes. In each list head points to leaf class from where scheduling starts with. The rest of the section explains about scheduling operation, excess bandwidth list formation, fairness for classes in the same priority. © SAMSUNG Electronics Co., Ltd.
  • Page 225 Ubigate iBG3026 Configuration Guide/Ed.00 For understanding of CBQ operation, let us first consider all classes to be of equal priority. The scheduler runs every 5 msec to service the queues on each interface.(Each leaf class is associated with a queue). In every scheduling interval, the scheduler makes two passes on the classes of each interface.
  • Page 226 This limits the queuing delay experienced by each queue/class because each class is serviced at least once every 5ms. The algorithm supports prioritization in terms of both latency and bandwidth borrowing. A class can be rate limited to a configured maximum value. © SAMSUNG Electronics Co., Ltd.
  • Page 227: Buffer Management For Class Queues

    Ubigate iBG3026 Configuration Guide/Ed.00 Buffer Management for Class Queues It is not possible for a class to guarantee bandwidth if it doesn’t have enough buffers for its queue, because the packets can be dropped even before they have a chance to be scheduled. Therefore it is essential to have a good buffer management scheme along with a good scheduling algorithm.
  • Page 228: Buffer Reservation For Interfaces

    WAN interface, to consume all buffers and starve other interfaces(including Ethernet) of receive buffers. The calculation below shows how the number of reserved buffers is calculated for a WAN interface. © SAMSUNG Electronics Co., Ltd.
  • Page 229: Buffer Management For Class Queues

    Ubigate iBG3026 Configuration Guide/Ed.00 MAX((NxBCR_BUFS_RED * Bc)/AVG_PKTSIZE_FOR_BUF_CALC, 20) + (Bc / MIN_PKTSIZE_FOR_BUF_CALC) Where, The value of NxBCR_BUFS_RED is 3, The value of _PKTSIZE_FOR_BUF_CALC is 100 bytes, Bc is interface bandwidth proportional to scheduling interval(5 msec), The value of MIN_PKTSIZE_FOR_BUF_CALC 64 bytes.
  • Page 230 It is possible for traffic entering a class to be at a much higher rate than other classes, because of which it will gain access to majority of the buffers and hence most of the bandwidth. © SAMSUNG Electronics Co., Ltd.
  • Page 231 Ubigate iBG3026 Configuration Guide/Ed.00 Buffer Requirements Analysis and Buffer Management Scheme A more economical scheme can be developed by making a calculated compromise on the buffer guarantee(availability) for a class. In most cases, not all classes would simultaneously need to transmit at their BR. Which means only a few classes, at any given time needs a buffering capacity of bbr bytes.
  • Page 232 In this case the maximum buffers that a traffic class can loan from the common pool is as shown below. Max loaned buffers = (3*bbr / average_packet_size) – reserved_buffers For a class with BR = interface BR and CR~0, © SAMSUNG Electronics Co., Ltd.
  • Page 233: Congestion Management On Output Queues

    Ubigate iBG3026 Configuration Guide/Ed.00 Max loaned buffers = (3*BCR / average_packet_size) –QOS_MIN_RES_ CLASS_Q_SIZE Max loaned buffers ~ (3*BCR / average_packet_size) Note that a single class can still not consume all the buffers in the common buffer pool. There will be(BCR / average_packet_size) buffers still remaining for the other classes(which is enough to support a rate of up to the interface bandwidth).
  • Page 234 The weight is restricted to be a negative power of 2 so that a shift operation can be used instead of division to make the calculation more efficient. © SAMSUNG Electronics Co., Ltd.
  • Page 235: Drop Probability Calculation

    Ubigate iBG3026 Configuration Guide/Ed.00 Qaverage = Qaverage + (Qcurrent - Qaverage) << ewf This Qaverage ‘average queue size’ is used as an indication of congestion by RED and is compared against the ‘minth’ and ‘maxth’ to decide whether packet need to be allowed, randomly dropped or dropped.
  • Page 236: Configuring Red Parameters

    A low value will result in a milder drop response for a given increase in average queue size and increases the likelihood of tail drops. © SAMSUNG Electronics Co., Ltd.
  • Page 237 Ubigate iBG3026 Configuration Guide/Ed.00 Therefore it is important to select an optimum value. MPD is entered is entered as a power of 2 and has a default value of 5. This means the actual value of MPD = 32 and the Mark Probability = 1/32.
  • Page 238 The following RED statistics will be collected for interface and class queue RED. Packets dropped above maxth packets dropped between minth-maxth packets allowed between minth-maxth Total RED drops Current average queue size Maximum recorded average queue size Maximum recorded queue size © SAMSUNG Electronics Co., Ltd.
  • Page 239: Differentiated Services

    Ubigate iBG3026 Configuration Guide/Ed.00 Differentiated Services The iBG3026 operating system is fully compliant with the DiffServ Code Point specification. For more information refer to RFC 3290, RFC 3260, and RFC 2998. Assured Forwarding (AF), Expedited Forwarding (EF), and Class Selector Code...
  • Page 240: Qos Statistics

    The QoS configuration for Frame Relay is same as for regular PPP bundles, except the QoS feature configuration using ‘enable <feature> <direction>’ command. This command is allowed at FR bundle level QoS context, and is not allowed FR PVC’s QoS context. © SAMSUNG Electronics Co., Ltd.
  • Page 241: Ingress And Egress Qos For Ip Tunnels

    Ubigate iBG3026 Configuration Guide/Ed.00 Ingress and egress QoS for IP tunnels The QoS configuration for IP tunnels is the same as for regular PPP bundles except CBQ queuing and shaping feature. QoS for IP tunnels provides policing, and monitoring on both directions.
  • Page 242: L2 Bridge Based Cos Marking

    TC attribute of the packet to assign the UP attribute, if the packet is untagged. To configure the associated table, enter: Router/configure/qos# [no] map-outq-to-up [<TC(1..8)> <UP(0..2)>] Using the no form will reset a specific row to default. © SAMSUNG Electronics Co., Ltd.
  • Page 243: Configuration Example

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuration Example Router/configure/qos# map-outq-to-up 4 3 Router/configure/qos# no map-outq-to-up 4 Router/configure/qos# map-up-to-dp 4 2 Router/configure/qos# no map-up-to-dp Router/configure/qos# no map-up-to-dp 4 Router/configure/qos# map-up-to-outq 4 5 Router/configure/qos# no map-up-to-outq 4 Verifying the Configuration Use the following command to display the configuration:...
  • Page 244: Configuration Example

    To create a policy map, enter: Router/configure/qos# policy-map <map-name> To create a policy class, enter: Router/configure/qos/policy-map <map-name># policy-class <classname> To create a policy rule, enter: Router/configure/qos/policy-map <map-name>/policy-class <classname># match ipv4 src-ip 20.20.20.20 © SAMSUNG Electronics Co., Ltd.
  • Page 245 Ubigate iBG3026 Configuration Guide/Ed.00 To configure CoS marking actions, enter: Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-dscp <DSCP(0..63)> Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-up <UP(0..7)> Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-outq <queue-id(1..8)> Router/configure/qos/policy-map <map-name>/policy-class <classname># mark-dp <DP(0..2)> To map the policy created above to an interface, enter: Router/configure/interface/ethernet (<name>)/qos# service-...
  • Page 246: Policing-Based Cos Marking, Cos Re-Marking, And L2-Based Cos Re-Marking

    To map this policy to an interface, enter: Router/configure/interface/ethernet (<name>)/qos# service- policyinput <map-name> To configure a policer for the class configured above, enter: Router/configure/qos/policy-map <map-name>/policy-class <classname># police Router/configure/qos/policy-map <map-name>/policy-class <classname>/ police# srtcm <rate_in_kbps> cbs <committed_burst_in_bytes> ebs <excess_burst_in_bytes> © SAMSUNG Electronics Co., Ltd.
  • Page 247: Configuration Example

    Ubigate iBG3026 Configuration Guide/Ed.00 To configure the L3-based CoS marking table, enter: Router/configure/qos# police Router/configure/qos/police# l3-cos-map <DSCP(0..63)> <conformance (green, yellow, red)> [mark-dscp <DSCP(0..63)> markup <UP(0..7)> mark-dp <DP(0..2)>] To configure the L2-based CoS marking table, enter: Router/configure/qos# police Router/configure/qos/police# l2-cos-map < UP(0..7)>...
  • Page 248: Multi-Field Classification Using Pcls

    < match-operation > can be ”” (exact match on value) or “-” (range between value1 and value2) or “!=” (exclude value) or “/” (prefix length) or “>=”(greated than or equal to value) or “<=” (less than or equal to value) © SAMSUNG Electronics Co., Ltd.
  • Page 249: Configuration Example

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuration Example Router/configure/qos/policy-map map1/policy-class class1# match ipv4 src-ip 20.30.30.30 Router/configure/qos/policy-map map1/policy-class class1# match ipv4 dest-ip 30.40.50.0/24 Router/configure/qos/policy-map map1/policy-class class1# match ipv6 src-ip 2002::/64 Router/configure/qos/policy-map map1/policy-class class1# match ipv6 ip-proto 10-12 Router/configure/qos/policy-map map1/policy-class class1# match ipv6 ip-proto !=10...
  • Page 250: Configuration Example

    To configure a trTCM policer for the class configured above, enter: Router/configure/qos/policy-map <map-name>/policy-class <classname># police Router/configure/qos/policy-map <map-name>/policy-class <classname>/ police# trtcm <mean_rate_in_kbps> <peak_rate_in_kbps> cbs <committed_burst_in_bytes> pbs <peak_burst_in_bytes> Configuration Example Router/configure/qos/policy-map map1/policy-class class1/police# srtcm 100 cbs 100 ebs 200 Router/configure/qos/policy-map map1/policy-class class1/police# no srtcm 100 © SAMSUNG Electronics Co., Ltd.
  • Page 251: Verifying The Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure/qos/policy-map map1/policy-class class1/police# trtcm 100 200 cbs 200 pbs 300 Router/configure/qos/policy-map map1/policy-class class1/police# no trtcm 100 200 Verifying the Configuration To verify the configuration, enter: Router/configure/qos/policy-map map1# show qos policer policy-name map1 policy-class class1 Billing & Conformance Counters Billing counters are used to track the amount of data that is admitted into the router.
  • Page 252: Egress Queuing, Scheduling And Shaping

    Two queuing disciplines are supported namely Strict Priority Queuing and Weighted Round Robin. To configure the queuing discipline, enter: Router/configure/interface/ethernet (3/0)/qos# queue- discipline 1 Router/configure/interface/ethernet (3/0)/qos/queue- discipline 1# Router/configure/interface/ethernet (3/0)/qos/queue- discipline 1# Router/configure/interface/ethernet (3/0)/qos# queue- discipline 2 Router/configure/interface/ethernet (3/0)/qos/queue- discipline 2# wrr 3 © SAMSUNG Electronics Co., Ltd.
  • Page 253: Congestion Management On Egress Queues

    Ubigate iBG3026 Configuration Guide/Ed.00 To configure port and queue shaping, enter: Router/configure/interface/ethernet (3/0)/qos# port-shaping token-bucket-size 8KB token-refill-rate-kbps 650 Router/configure/interface/ethernet (3/0)/qos/queue- discipline 1# queue-shaping token-bucket-size 8KB token-refill-rate-kbps Verifying the Configuration To verify the configuration, enter: Router/configure/interface/ethernet (3/0)# show qos port- info...
  • Page 254: Verifying The Configuration

    Router/configure/interface/ethernet (3/0)/qos# xoff- threshold 500 Router/configure/interface/ethernet (3/0)/qos# xon-threshold Router/configure/interface/ethernet (3/0)/qos# queue-tx- descrlimit 1 2000 Verifying the Configuration To verify the configuration, enter: Router/configure/interface/ethernet (3/0)# show qos port- info ethernet3/0 Router/configure/interface/ethernet (3/0)# show qos queue- info ifname ethernet3/0 © SAMSUNG Electronics Co., Ltd.
  • Page 255: Chapter 20. Vlan Forwarding With Qos

    Ubigate iBG3026 Configuration Guide CHAPTER 20. VLAN forwarding with QoS Overview Untagged Customer LANs Channelized Ethernet Switch T3 Router Channelized T3 Gigabit Ethernet Ethernet Switch Internet Telco Tagged VLAN Trunk Multilink T1 Router Multi-Tenant Bullding Figure 20.1 VLAN Forwarding: Multi-Tenant Internet Access The example above shows each multi-tenant customer represented as a separate VLAN on the Ethernet switch.
  • Page 256 QoS can be configured based on VLAN IDs, in increments of 64 kbps providing greater control than what is normally available in Ethernet switches. © SAMSUNG Electronics Co., Ltd.
  • Page 257: Virtual Lan Domain

    Ubigate iBG3026 Configuration Guide/Ed.00 Virtual LAN Domain The iBG3026 supports VLAN-based data forwarding. Essentially, this feature forwards the packets from one network to another based on the VLAN identifier(rather than routing) contained in the VLAN header, as defined by IEEE 802.1q. The VLAN packets are generally termed as tagged packets referring to the VLAN encapsulation of the Ethernet packets.
  • Page 258: Configuring Bridging On The Wan Interface

    2006/03/15 08:54:50 NSM: interface ethernet3/5 index 9 is already a switchport % Interface already a switchport Router/configure/interface/ethernet (3/5)# br 1 % Interface already bound to a bridge Router/configure/interface/ethernet (3/5)# switchport mode access Router/configure/interface/ethernet (3/5)# switchport access vlan 700 Router/configure/interface/ethernet (3/5)# exit © SAMSUNG Electronics Co., Ltd.
  • Page 259: Creating A Bridge Group

    Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure#interface ethernet 3/6 DUT2/configure/interface/ethernet (3/6)# switchport 2006/03/15 08:54:50 NSM: interface ethernet3/5 index 9 is already a switchport % Interface already a switchport DUT2/configure/interface/ethernet (3/6)# br 1 % Interface already bound to a bridge DUT2/configure/interface/ethernet (3/6)# switchport mode...
  • Page 260 CHAPTER 20. VLAN forwarding with QoS This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 261: Part Iv. Security

    PART IV. Security Chapter 21. Authentication Authorization and Accounting Chapter 22. Packet Filtering Chapter 23. Firewall and NAT Chapter 24. Chapter 25. IPSEC...
  • Page 263: Chapter 21. Authentication Authorization Accounting

    Ubigate iBG3026 Configuration Guide CHAPTER 21. Authentication Authorization Accounting The combination of accounting controls, authorization requirements, and authentication checks(AAA) is a framework for configuring security functions across the network in a consistent fashion. Each component of AAA can be implemented separately.
  • Page 264: Configuration Examples

    The following example shows how to enable AAA module. Router# configure terminal Router/configure# aaa Router/configure/aaa# enable Router/configure/aaa# show aaa status The command ‘show aaa status’ shows whether it is enabled. The following example shows the way to disable AAA module. Router/configure/aaa# no enable © SAMSUNG Electronics Co., Ltd.
  • Page 265 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Authentication The Ubigate system is configured to authenticate users on a port basis. For example, if you want to configure a port of Ethernet 2/3 with a RADIUS authentication method, you may follow the example shown below.
  • Page 266 Router# configure terminal Router/configure# aaa Router/configure/aaa# enable Router/configure/aaa# authentication login list1 tacacs/local/none Router/configure/aaa# authentication protocols list1 ascii/pap/chap Router/configure/aaa# tacacs primary_server 192.168.203.213 Router/configure/aaa# tacacs secondary_server 192.170.200.211 Router/configure/aaa# tacacs shared_key key123 Router/configure/aaa# tacacs retries 5 Router/configure/aaa# tacacs time_out 5 © SAMSUNG Electronics Co., Ltd.
  • Page 267 Ubigate iBG3026 Configuration Guide/Ed.00 Verifying TACACS Configuration To confirm the access method, enter: Router/configure/aaa# show aaa authentication login List Name Methods Order ------------------------------------------- default NOT CONFIGURED list1 tacacs local none To confirm the protocols list, enter: Router/configure/aaa# show aaa authentication protocols...
  • Page 268 CHAPTER 21. Authentication Authorization Accounting This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 269: Chapter 22. Packet Filtering

    An example would be a filter that prohibits external users from establishing Telnet sessions to the Ubigate iBG3026, and allows only specific internal users Telnet access to the system. At the end of every rule list is an implied ‘deny all traffic’ statement.
  • Page 270: Example: Blocking Telnet Access

    200.1.1.1) to an ISP, with Ethernet 0/1(IP address 222.199.19.3) connected to the internal network. The network administrator wants to completely block Telnet access to the Ubigate iBG3026 from all external networks as well as from all internal networks except 222.199.19.0/28. All other TCP/IP traffic, such as FTP, Ping, and HTTP, is to flow unrestricted through the Ubigate iBG3026.
  • Page 271: Chapter 23. Firewall Nat

    Ubigate iBG3026 Configuration Guide CHAPTER 23. Firewall NAT Overview Security module in Ubigate iBG3026 consists of various components such as Stateful inspection firewall, IPSec VPN, Public Key Infrastructure and Access Control List(ACL). This chapter introduces Ubigate iBG3026’s firewall and its typical configuration.
  • Page 272: Virtual Firewall

    Virtual firewall feature can be used to provide separate firewall policies as shown in the following diagram Internet(internet) for the untrusted network. Corporation(corp) for the corporate network. Demilitarized Zone(dmz)for the server accessibility from the untrusted side-or other user-defined network. Managing access to the box. © SAMSUNG Electronics Co., Ltd.
  • Page 273 Ubigate iBG3026 Configuration Guide/Ed.00 Firewal Corp internet Firewall Firewall Firewall Inciming Policy Outing Policy Inciming Policy Outing Policy Inciming Policy Outing Policy Database Database Database Database Database Database Transit Self Transit Self Transit Self Transit Self Transit Self Transit Self...
  • Page 274: Access Policy Database

    This policy is available on network basis and within that direction. Currently supported policy categories are Outbound: Policies that govern traffic originated from one map to the external world. Inbound-Policies that govern traffic bound to map from the external world. © SAMSUNG Electronics Co., Ltd.
  • Page 275 Ubigate iBG3026 Configuration Guide/Ed.00 Access Policy Database Lookup Untrusted Side Trusted Side (internet) (corp) Host-A Host-A To Host-B To Host-B Host-A Host-A To Firewall To Firewall Host-B Host-A Firewall Firewall To Host-A To Host-A Transit Polidies Self Policies Self Policies...
  • Page 276: Application Level Gateways

    The NAT record would eventually be used in one of the following category. Many-to-one regular NAT(NAT record attached to out bound policy) One-to-one regular NAT(NAT record attached to out bound policy) © SAMSUNG Electronics Co., Ltd.
  • Page 277: Application Content Filtering

    Ubigate iBG3026 Configuration Guide/Ed.00 Many-to-one reverse NAT(NAT record attached to in bound policy) One-to-one reverse NAT(NAT record attached to in bound policy) Many-to-many regular NAT(NAT record attached to out bound Policy) Multiple policies can share single NAT address, provided NAT address is of type many to one only.
  • Page 278: Configuring Firewalls

    Consider a PC on the LAN sending a packet destined for some.server.com. The source IP address and port are in the packet together with the destination IP address and port. When the packet arrives at the Ubigate iBG3026 it will be de-encapsulated, modified, and re-encapsulated.
  • Page 279 Ubigate iBG3026 Configuration Guide/Ed.00 The Ubigate iBG3026 also adds an entry into a table it keeps, which maps the internal address and source port number that the PC generated against the port number it allocated to this session. Therefore, when some.server.com sends a reply packet to the PC, the Ubigate iBG3026 can quickly determine how it needs to re-write the packet before transmitting it back on to the LAN.
  • Page 280: Nat Configuration Examples

    If a NAT IP address cannot be allocated dynamically at the connection creation time, the packet would be dropped. 10.1.1.1 OPAL 10.1.1.2 Internet 60.1.1.1.60.1.1.2 10.1.1.3 Figure 23.4 Dynamic NAT The dynamic NAT configuration shown in Figure 25.4 includes: Private network addresses:10.1.1.1-10.1.1.4 Public(NAT) IP address range: 60.1.1.1-60.1.1.2 © SAMSUNG Electronics Co., Ltd.
  • Page 281: Port Address Translation (Many To One)

    Figure 23.5 Mapping Multiple NAT Addresses to One Public IP Address There are two methods to configure Port Address Translation(PAT) on the Ubigate iBG3026 gateway. In the first method, specify the IP address to the nat-ip parameter in the policy command. In the second method, create a pool of type PAT and then attach it to the policy.
  • Page 282 Router/configure/firewall corp# object Router/configure/firewall corp/object# nat-pool patPool pat 50.1.1.5 Router/configure/firewall corp/object# exit Router/configure/firewall corp# policy 2 out address 10.1.1.1 10.1.1.3 any any Router/configure/firewall corp/policy 2 out# apply-object nat-pool patPool Router/configure/firewall corp/policy 2 out# exit 2 Router/configure# © SAMSUNG Electronics Co., Ltd.
  • Page 283: Static Nat (One To One)

    Ubigate iBG3026 Configuration Guide/Ed.00 Static NAT (one to one) 10.1.1.1 OPAL 10.1.1.2 Internet 50.1.1.1.50.1.1.3 10.1.1.3 Figure 23.6 Static NAT In static(one-to-one) NAT type, for each IP address in the corporate network, one NAT IP address will be used. For example, for the three IP addresses from 10.1.1.1 to 10.1.1.3, there is a set of three NAT IP address from...
  • Page 284 Static NAT also requires a public address from the upstream service provider. Individual PCs within a LAN are assigned RFC 1918 reserved IP addresses to enable access to other PCs within the LAN. The Ubigate iBG3026 is configured with static mapping, which maps the internal RFC 1918 IP addresses for each PC to the appropriate public IP address.
  • Page 285 Ubigate iBG3026 Configuration Guide/Ed.00 Configuration for Figure 23.7 Router# configure terminal Router/configure# firewall corp Router/configure/firewall corp# object Router/configure/firewall corp/object# nat-pool staticNat static 100.1.1.6 100.1.1.6 Router/configure/firewall corp/object# exit Router/configure/firewall corp# policy 8 out address 192.168.1.6 32 any Router/configure/firewall corp/policy 8 out# apply-object...
  • Page 286: Reverse Nat

    Ethemet 1 FTP, SMTP, HTTP Server 199.7.3.2/24 192.168.1.6/24 www server is running on TCP port 81 FTP, SMTP, HTTP Server 192.168.1.6/24 10/100 BaceT Ethernet Workstation Workstation Workstation Workstation 192.168.1.1/24 192.168.1.2/24 192.168.1.3/24 192.168.1.5/24 Figure 23.9 Reverse NAT © SAMSUNG Electronics Co., Ltd.
  • Page 287: Nat-Failover For Firewalls

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuration for Figure 23.9 Router# configure terminal Router/configure# firewall corp Router/configure/firewall corp# object Router/configure/firewall corp/object# nat-pool revNat pat 192.168.1.6 192.168.1.6 Router/configure/firewall corp/object# exit Router/configure/firewall corp# policy 9 in address any 100.1.1.6 32 Router/configure/firewall corp/policy 9 in# apply-object...
  • Page 288 CHAPTER 23. Firewall NAT This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 289: Chapter 24. Gre

    Ubigate iBG3026 Configuration Guide CHAPTER 24. Generic Routing Encapsulation(GRE) is a standards-based(RFC1701, RFC2784) tunneling protocol that can encapsulate a wide variety of protocol packet types inside IP tunnels, creating a virtual point-to-point link between routers at remote points over an IP network. A tunnel is a logical interface that provides a way to encapsulate passenger packets inside a transport protocol.
  • Page 290: Configuring Site To Site Tunnel

    Figure 24.1 Simple GRE configuration Configuring Site to Site Tunnel To configure GRE in a site to site tunnel configuration: Configure the interface. Ubigate iBG3026# configure terminal Router/configure# interface bundle wan1 Router/configure/interface/bundle wan1# link t1 0/2/0 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 192.168.94.220...
  • Page 291 Ubigate iBG3026 Configuration Guide/Ed.00 The peer of a local WAN interface cannot be used as a tunnel destination. Verify that the tunnel is up and running.(If it is not, check the Gateway and Source Address fields.) Router# show ip interfaces...
  • Page 292: Configuring Gre Site To Site With Ipsec

    Configure the tunnel: Router/configure# interface tunnel t0 Router/configure/interface/tunnel t0# ip address 103.1.1.2 24 Router/configure/interface/tunnel t0# tunnel source 192.168.94.220 Router/configure/interface/tunnel t0# tunnel destination 192.168.55.75 Router/configure/interface/tunnel t0# tunnel protection grecisco secretkeyfortest Router/configure/interface/tunnel t0# crypto untrusted Router/configure/interface/tunnel t0# exit © SAMSUNG Electronics Co., Ltd.
  • Page 293 Ubigate iBG3026 Configuration Guide/Ed.00 Configure the routes: Router/configure# ip route 0.0.0.0 0.0.0.0 192.168.94.254 Router/configure# ip route 40.1.1.0 255.255.255.0 t0 Define the policy: Router/configure # firewall internet Router/configure/firewall internet# policy 100 in proto gre self Router/configure/firewall internet/policy 100 in# exit Router/configure/firewall internet# policy 101 in service...
  • Page 294: Configuring Gre Site To Site With Ipsec And Ospf

    This example extends the previous IPSec configuration example by enabling Open Shortest Path First(OSPF) protocol which provides redundant paths for the tunnel. To enable OSPF, add to the Ubigate iBG3026 configuration above: Router# configure terminal Router/configure# router-id 2.2.2.2 Router/configure# router ospf Router/configure/router/ospf# network 103.1.1.0/24 area 0...
  • Page 295: Chapter 25. Ipsec

    Ubigate iBG3026 Configuration Guide CHAPTER 25. IPSEC Need to develop CLNS VPNs and Secure Packet Exchange topics-new material Introduction to Security SNOS introduces a wide range of robust industry-standard security features including: Virtual Private Networking IPSec encryption and tunneling Generalized Router Encryption...
  • Page 296: Access Methods

    Ubigate iBG3026 supports two types of IPSec remote access using VPNs. Remote Access: User Group One of the methods to achieve IPSec remote access in Ubigate iBG3026 is the user group method. In this method, the administrator creates an IKE policy for a logical group of users such as a department in an organization.
  • Page 297 Ubigate iBG3026 Configuration Guide/Ed.00 Remote Access: Mode Configuration The other method to achieve IPSec remote access in Ubigate iBG3026 is the mode configuration method. This method makes the VPN client an extension of the LAN being accessed by the VPN client. The remote client appears as a network accessing some resource behind the VPN server.
  • Page 298: Securely Managing The Ubigate Ibg3026 System Example

    CHAPTER 25. IPSEC Securely Managing the Ubigate iBG3026 System Example This example demonstrates how to manage a router through an IP security tunnel. Steps are presented for configuring the Router and NW2 routers to assist any host on the LAN side of Networks-2 to manage the Router router through the IP security tunnel.
  • Page 299 Ubigate iBG3026 Configuration Guide/Ed.00 Display the crypto interfaces. Router# show crypto interfaces Interface Network Name Type --------- ------- ethernet 0/1 trusted wan1 untrusted Add the route to the peer LAN. Router/configure# ip route 10.0.2.0 255.255.255.0 wan1 Configure IKE to the peer gateway.
  • Page 300 For IPSec only-when you create an outbound tunnel, an inbound tunnel is automatically created. The inbound tunnel applies the name that you provide for the outbound tunnel and adds the prefix ‘IN’ to the name. © SAMSUNG Electronics Co., Ltd.
  • Page 301 Ubigate iBG3026 Configuration Guide/Ed.00 Display the policies. Router# show crypto ipsec policy all Policy Peer Match Proto Transform ------ ---- ----- ----- --------- NW2 172.16.0.2 S 172.16.0.1/32/any Any P1 esp-aes-sha1-tunl D 10.0.2.0/24/any INNW2 172.16.0.2 S 10.0.2.0/24/any Any P1 esp-aes-sha1-tunl D 172.16.0.1/32/any Display IPSec policies in detail.
  • Page 302 Router# show firewall policy internet Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter, R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging, E-Policy Enabled, M-Smtp-Filter Pri Dir Source Addr Destination Addr Sport Dport Proto Action Advanced --- --- ----------- ---------------- ----------------- ----- - -------- © SAMSUNG Electronics Co., Ltd.
  • Page 303 Ubigate iBG3026 Configuration Guide/Ed.00 1000 in any any snmp PERMIT SE 1002 in any any telnet PERMIT SE 1003 in any any any any icmp PERMIT SE 1024 out any any any any any PERMIT SE Display firewall policies in the internet map in detail.
  • Page 304 When the SNMP manager starts managing Router from NW2’s LAN, display the IKE and IPSec SA tables. Router# show crypto ike sa all Policy Peer State Bytes Transform ------ ----------- --------- ------ ---------------- NW2 172.16.0.2 SA_MATURE 2020 pre-g1-3des-sha1 © SAMSUNG Electronics Co., Ltd.
  • Page 305 Ubigate iBG3026 Configuration Guide/Ed.00 Router# show crypto ike sa all detail Crypto Policy name: NW2 Remote ident 172.16.0.2 Peer Address is 172.16.0.2 Transform: 3des, sha1, pre-shared-key DH Group: group1 Bytes Processed 2020 State is SA_MATURE Mode is Main Remaining Time in Sec: 86084...
  • Page 306: Joining Two Private Networks Example

    Figure 25.2 Tunnel Mode Between Two Security Gateways-Single Proposals Configure a WAN bundle of network type untrusted. Router/configure/interface/bundle wan1# link t1 0/2/0 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 172.16.0.1 24 Router/configure/interface/bundle wan1# crypto untrusted Router/configure/interface/bundle wan1# exit © SAMSUNG Electronics Co., Ltd.
  • Page 307 Ubigate iBG3026 Configuration Guide/Ed.00 Configure the Ethernet interface with trusted network type. Router/configure# interface ethernet 0/1 message: Configuring existing Ethernet interface Router/configure interface/ethernet(0/1)# ip address 10.0.1.1 24 Router/configure/interface/ethernet(0/1)# crypto trusted Router/configure/interface/ethernet(0/1)# exit Display the crypto interfaces. Router# show crypto interfaces...
  • Page 308 For IPSec only-when you create an outbound tunnel, an inbound tunnel is automatically created. The inbound tunnel applies the name that you provide for the outbound tunnel and adds the prefix ‘IN’ to the name. © SAMSUNG Electronics Co., Ltd.
  • Page 309 Ubigate iBG3026 Configuration Guide/Ed.00 Display IPSec policies. Router# show crypto ipsec policy all Policy Peer Match Proto Transform ------ ---- ----- ----- --------- NW2 172.16.0.2 S 10.0.1.0/24/any Any P1 esp-aes-sha1-tunl D 10.0.2.0/24/any INNW2 172.16.0.2 S 10.0.2.0/24/any Any P1 esp-aes-sha1-tunl D 10.0.1.0/24/any...
  • Page 310 Logging is disable Source Address is any, Dest Address is any Source Port is any, Service Name is ike Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled © SAMSUNG Electronics Co., Ltd.
  • Page 311 Ubigate iBG3026 Configuration Guide/Ed.00 Bytes In 0, Bytes Out 0 Policy with Priority 1024 is enabled, Direction is outbound Action permit, Traffic is self Logging is disable Source Address is any, Dest Address is any Source Port is any, Dest Port is any, any...
  • Page 312 Source Port is any, Dest Port is any, any Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled Max-Connections 1024, Connection-Rate is disabled Policing is disabled, Bandwidth is disabled © SAMSUNG Electronics Co., Ltd.
  • Page 313 Ubigate iBG3026 Configuration Guide/Ed.00 Repeat steps 1-16 with suitable modifications on NW2 prior to passing traffic. Test the IPSec tunnel between Router and NW2 by passing traffic from the 10.0.1.0 to the 10.0.2.0 network. After transit traffic is passed through the tunnel, display the IKE and IPSec SA tables.
  • Page 314: Joining Two Networks Using Multiple Ipsec Proposals Example

    The following example demonstrates how a security gateway can use multiple IPSec(phase2) proposals to form an IP security tunnel to join two private networks: 10.0.1.0/24 and 10.0.2.0/24. IKE Proposal offered by both Router and NW2: Phase 1: 3DES and SHA1 © SAMSUNG Electronics Co., Ltd.
  • Page 315 Ubigate iBG3026 Configuration Guide/Ed.00 IPSec Proposals offered by Router: Phase 2: Proposal1: IPSec ESP with DES and HMAC-SHA1 Phase 2: Proposal2: IPSec ESP with AES(256-bit) and HMAC-SHA1 IPSec Proposal offered by NW2: Phase 2: Proposal1: IPSec ESP with AES(256-bit) and HMAC-SHA1 In this example, the Router router offers two IPSec proposals to the peer while the NW2 router offers only one proposal.
  • Page 316 Router/configure/crypto/ike/policy NW2 172.16.0.2# proposal Router/configure/crypto/ike/policy NW2 172.16.0.2/proposal 1# encryption-algorithm 3des-cbc Router/configure/crypto/ike/policy NW2 172.16.0.2/proposal 1# exit Router/configure/crypto/ike/policy NW2 172.16.0.2# exit Display the IKE policies. Router# show crypto ike policy all Policy Peer Mode Transform NW2 172.16.0.2 Main P1 pre-g1-3des-sha1 © SAMSUNG Electronics Co., Ltd.
  • Page 317 Ubigate iBG3026 Configuration Guide/Ed.00 Display the IKE policies in detail. Router# show crypto ike policy all detail Policy name NW2, Local addr 172.16.0.1, Peer addr 172.16.0.2 Main mode, Response and Initiate, PFS is not enabled, Shared Key is ***** Local ident 172.16.0.1(ip-address), Remote Ident 172.16.0.2(ip-address)
  • Page 318 Lifetime in seconds: 3600 Lifetime in Kilobytes: 4608000 Policy name INNW2 is enabled, Direction is inbound Peer Address is 172.16.0.2, Action is Apply Key Management is Automatic PFS Group is disabled Match Address: Protocol is Any Source ip © SAMSUNG Electronics Co., Ltd.
  • Page 319 Ubigate iBG3026 Configuration Guide/Ed.00 address(ip/mask/port):(10.0.2.0/255.255.255.0/any) Destination ip address(ip/mask/port):(10.0.1.0/255.255.255.0/any) Proposal of priority 1 Protocol: esp Mode: tunnel Encryption Algorithm: des Hash Algorithm: sha1 Lifetime in seconds: 3600 Lifetime in Kilobytes: 4608000 Proposal of priority 2 Protocol: esp Mode: tunnel Encryption Algorithm: aes256(key length=256 bits)
  • Page 320 Router/configure/firewall corp# exit Display firewall policies in the corp map. Router# show firewall policy corp Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter, R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging, E-Policy Enabled, M-Smtp-Filter Pri Dir Source Addr Destination Addr Sport Dport Proto Action Advanced © SAMSUNG Electronics Co., Ltd.
  • Page 321 Ubigate iBG3026 Configuration Guide/Ed.00 --- --- ----------- ---------------- ----------------- ----- - -------- 1000 in 10.0.2.0/24 10.0.1.0/24 any any any PERMIT E 1022 out any any any any any PERMIT SE 1023 in any any any any any PERMIT SE 1024 out any any any any any PERMIT E Display firewall policies in the corp map in detail.
  • Page 322 Peer Address is 172.16.0.2 Transform: 3des, sha1, pre-shared-key DH Group: group1 Bytes Processed 1796 State is SA_MATURE Mode is Main Remaining Time in Sec: 86380 Life Time in Sec: 86400, Life Time in Bytes is unlimited © SAMSUNG Electronics Co., Ltd.
  • Page 323 Ubigate iBG3026 Configuration Guide/Ed.00 Router# show crypto ipsec sa all Policy Dest IP Spi Bytes Transform ------ ------- --- ----- --------- INNW2 172.16.0.1 0x8eabe4b3 256 esp-aes-sha1-tunl NW2 172.16.0.2 0xa9a506f9 256 esp-aes-sha1-tunl Router# show crypto ipsec sa all detail Crypto Policy name: INNW2 Protocol is Any Local ident(ip/mask/port):(10.0.2.0/255.255.255.0/...
  • Page 324 Configure IKE to the peer gateway. Networks2Router/configure# crypto Networks2Router/configure/crypto# ike policy Networks2 172.16.0.1 Networks2Router/configure/crypto/ike/policy Networks2 172.16.0.1# local-address 172.16.0.2 message: Default proposal created with priority1-des-sha1- pre_shared-g1 message: Key String has to be configured by the user © SAMSUNG Electronics Co., Ltd.
  • Page 325 Ubigate iBG3026 Configuration Guide/Ed.00 Networks2Router/configure/crypto/ike/policy Networks2 172.16.0.1# key secretkey Networks2Router/configure/crypto/ike/policy Networks2 172.16.0.1# proposal 1 Networks2Router/configure/crypto/ike/policy Networks2 172.16.0.1/proposal 1# encryption-algorithm 3des-cbc Networks2Router/configure/crypto/ike/policy Networks2 172.16.0.1/proposal 1# exit Networks2Router/configure/crypto/ike/policy Networks2 172.16.0.1# exit Display the IKE policies. Networks2# show crypto ike policy all Policy Peer Mode Transform Networks2 172.16.0.1 Main P1 pre-g1-3des-sha1...
  • Page 326: Supporting Remote User Access Example

    Phase 2: IPSec ESP tunnel with AES256 and HMAC-SHA1 Router #1 VPN Server VPN Client 1 172.16.0.1 Local Address: Dynamic IPSec Tunnel devid@abc-corp.com VPN Client 2 IPSec Tunnel Local Address: Dynamic mike@abc-corp.com Corporate Headquarters 10.0.1.0/24 © SAMSUNG Electronics Co., Ltd.
  • Page 327 Ubigate iBG3026 Configuration Guide/Ed.00 Configure a WAN bundle of network type untrusted. Router/configure# interface bundle wan1 Router/configure/interface/bundle wan1# link t1 0/2/0 Router/configure/interface/bundle wan1# encapsulation ppp Router/configure/interface/bundle wan1# ip address 172.16.0.1 24 Router/configure/interface/bundle wan1# crypto untrusted Router/configure/interface/bundle wan1# exit Configure the Ethernet interface with trusted network type.
  • Page 328 Aggressive mode, Response Only, PFS is not enabled, Shared Key is ***** Client authentication is Radius(PAP) Local addr: 172.16.0.1, Local ident 172.16.0.1(ip-address) Remote idents are david@abc-corp.com(email-id), mike@abc- corp.com(email Proposal of priority 1 Encryption algorithm: 3des Hash Algorithm: sha1 © SAMSUNG Electronics Co., Ltd.
  • Page 329 Ubigate iBG3026 Configuration Guide/Ed.00 Authentication Mode: pre-shared-key DH Group: group1 Lifetime in seconds: 86400 Lifetime in kilobytes: unlimited Configure dynamic IPSec policy for a group of mobile users. Router/configure/crypto/dynamic# ipsec policy sales Router/configure/crypto/dynamic/ipsec/policy sales# match address 10.0.1.0 24 Default proposal created with priority1-esp-3des-sha1-tunnel and activated.
  • Page 330 Configure RADIUS server(applicable only if client authentication is configured in dynamic IKE policy). Router/configure# aaa Router/configure/aaa# radius Router/configure/aaa/radius# primary_server 172.168.2.1 Primary Radius server configured. Router/configure/aaa/radius# secondary_server 192.168.2.1 Secondary Radius server configured. Router/configure/aaa/radius# enable radius Router/configure/aaa/radius# exit Router/configure/aaa# exit © SAMSUNG Electronics Co., Ltd.
  • Page 331 Ubigate iBG3026 Configuration Guide/Ed.00 Configure firewall policies to allow IKE negotiation through untrusted interface. Router/configure# firewall internet Router/configure/firewall internet# policy 1000 in service ike self Router/configure/firewall internet/policy 1000 in# exit Router/configure/firewall internet# exit Display firewall policies in the internet map.
  • Page 332 1000 in any 10.0.1.0/24 any any any PERMIT E 1022 out any any any any any PERMIT SE 1023 in any any any any any PERMIT SE 1024 out any any any any any PERMIT E © SAMSUNG Electronics Co., Ltd.
  • Page 333 Ubigate iBG3026 Configuration Guide/Ed.00 Display firewall policies in the corp map in detail. Router# show firewall policy corp detail Policy with Priority 1000 is enabled, Direction is inbound Action permit, Traffic is transit User Group is sales, Logging is disable Source Address is any, Dest Address is 10.0.1.0/24...
  • Page 334 Dest IP Bytes Transform ------ ------- ----- --------- INsales 172.16.0.1 0xf43c5e3b esp-aes-sha1-tunl sales 192.168.107.105 0xcfea8435 240 esp-aes-sha1-tunl T Router# show crypto ipsec sa all detail Crypto Policy name: INsales Protocol is Any Local ident(ip/mask/port):(192.168.107.105/255.255.255.255/ any) © SAMSUNG Electronics Co., Ltd.
  • Page 335: Configuring Ipsec Remote Access Example

    Ubigate iBG3026 Configuration Guide/Ed.00 Remote ident(ip/mask/port):(10.0.1.0/255.255.255.0/ any) Peer Address is 172.16.0.1, PFS Group is disabled inbound ESP sas Spi: 0xf43c5e3b Transform: aes256(key length=256 bits), sha1 In use settings = {tunnel} Bytes Processed 360 Hard lifetime in seconds 28780, Hard lifetime in...
  • Page 336 Configure the Ethernet interface with trusted network type. Router/configure# interface ethernet 0/1 message: Configuring existing Ethernet interface Router/configure interface/ethernet(0/1)# ip address 10.0.1.1 24 Router/configure/interface/ethernet(0/1)# crypto trusted Router/configure/interface/ethernet(0/1)# exit Display the crypto interfaces. Router# show crypto interfaces Interface Network © SAMSUNG Electronics Co., Ltd.
  • Page 337 Ubigate iBG3026 Configuration Guide/Ed.00 Name Type -------- ---------- ethernet 0/1 trusted wan1 untrusted Configure dynamic IKE policy for a group of mobile users. Router/configure# crypto Router/configure/crypto# dynamic Router/configure/crypto/dynamic# ike policy sales modecfg- group Router/configure/crypto/dynamic/ike/policy sales# local- address 192.168.55.52 Router/configure/crypto/dynamic/ike/policy sales# remote-id email david@abc-corp.com...
  • Page 338 Lifetime in seconds: 86400 Lifetime in kilobytes: unlimited Configure dynamic IPSec policy for a group of mobile users. Router/configure/crypto# Router/configure/crypto# dynamic Router/configure/crypto/dynamic# ipsec policy sales modecfg- group Router/configure/crypto/dynamic/ipsec/policy sales# match address 10.0.1.0 24 Router/configure/crypto/dynamic/ipsec/policy sales# proposal © SAMSUNG Electronics Co., Ltd.
  • Page 339 Ubigate iBG3026 Configuration Guide/Ed.00 Router/configure/crypto/dynamic/ipsec/policy sales/proposal encryption-algorithm aes256-cbc Router/configure/crypto/dynamic/ipsec/policy sales/proposal exit Router/configure/crypto/dynamic/ipsec/policy sales# exit Router/configure/crypto/dynamic# exit Display dynamic IPSec policies. Router# show crypto dynamic ipsec policy all Policy Match Proto Transform ------ ----------------- ----- ------------------- sales S 10.0.1.0/24/any Any P1 esp-aes-sha1-tunl D any/any/any Display dynamic IPSec policies in detail.
  • Page 340 Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled Bytes In 0, Bytes Out 0 Policy with Priority 1024 is enabled, Direction is outbound Action permit, Traffic is self Logging is disable © SAMSUNG Electronics Co., Ltd.
  • Page 341 Ubigate iBG3026 Configuration Guide/Ed.00 Source Address is any, Dest Address is any Source Port is any, Dest Port is any, any Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled Bytes In 0, Bytes Out 0 Configure firewall policies for a group of mobile users to allow access to the local LAN.
  • Page 342 Schedule is disabled, Ftp-Filter is disabled Smtp-Filter is disabled, Http-Filter is disabled Rpc-Filter is disabled, Nat is disabled Max-Connections 1024, Connection-Rate is disabled Policing is disabled, Bandwidth is disabled Bytes In 11258, Bytes Out 5813 © SAMSUNG Electronics Co., Ltd.
  • Page 343 Ubigate iBG3026 Configuration Guide/Ed.00 Test the IPSec tunnel between the VPN client and the server by passing traffic from the client to the 10.0.1.0 network. After passing traffic through the tunnel, display the list of clients logged onto the VPN server and the IKE and IPSec SA tables.
  • Page 344 Transform: aes256(key length=256 bits), sha1 In use settings = {tunnel} Bytes Processed 560 Hard lifetime in seconds 28750, Hard lifetime in kilobytes is unlimited Soft lifetime in seconds 28720, Soft lifetime in kilobytes is unlimited © SAMSUNG Electronics Co., Ltd.
  • Page 345: Part V. Voice

    PART V. Voice Chapter 26. Voice Feature Chapter 27. VoIP Gateway Management Chapter 28. SIP Gateway Management Chapter 29. H.323 Gateway Management Chapter 30. Analog Voice Port Chapter 31. Digital Voice Port Chapter 32. ISDN Chapter 33. Routing and Digit Manipulation Chapter 34.
  • Page 347: Chapter 26. Voice Feature

    This system has two major functions. The one is signaling conversion function and another is a media conversion function. Network Architecture The network architecture in the view of Ubigate iBG3026 is shown in Figure 26.1. © SAMSUNG Electronics Co., Ltd.
  • Page 348 PhoNe IVR, AA, VMS UMS, Conference Figure 26.1 Ubigate iBG3026 Network Diagram The external entities which interwork with Ubigate iBG3026 over a network is as follows: Ubigate iBG3026 Ubigate iBG3026 acts as the interface between a traditional voice network and the IP network.
  • Page 349 IP Network method. CLI/Web It is the OAM interface provided by the Ubigate iBG3026 system, which can control various OAM functions of Ubigate iBG3026, after accessing a Ubigate iBG3026 via CLI or web from a desktop or notebook computer.
  • Page 350: Operation Mode

    CHAPTER 26. Voice Feature Operation Mode When the Ubigate iBG3026 runs as SIP gateway, it can work in an Call Manager Interworking mode where it interworks with SIP network via Call Manager, or in a Stand-alone Mode(or Toll Bypass Mode) where it directly interworks with other SIP gateway with Call Manager.
  • Page 351 In a Survivable Telephony mode, the default call and minimum supplementary services within the same branch are provided. Depending on the fault type and settings of Ubigate iBG3026, some calls can be provided to other branch. © SAMSUNG Electronics Co., Ltd.
  • Page 352 Manager(or Proxy Server). Therefore, it is connected to other network entities without separate dependency registration procedure. If Ubigate iBG3026 operates in a Stand-alone mode, the remote office can be multiple different Ubigate iBG3026s, and the Ubigate iBG3026 directly determines call routing according to the dial plan settings.
  • Page 353: Key Functions

    H.323 v5, and interworks with other H.323 network entities residing on a network in the following way. H.323 Gateway Mode In a H.323 gateway mode, a Ubigate iBG3026 serves as a gateway in the zone managed by a gatekeeper of ITSP. © SAMSUNG Electronics Co., Ltd.
  • Page 354 CHAPTER 26. Voice Feature If a Ubigate iBG3026 runs in a gateway mode, a Ubigate iBG3026 performs a general GK registration procedure using RRQ, a gatekeeper identifies the Ubigate iBG3026 as a gateway to be managed in a zone, and a Ubigate iBG3026 provides the H.323 Gateway characteristics necessary for default...
  • Page 355 Q.SIG(PRI) − Support of Voice Codec Ubigate iBG3026 acts as a VoIP gateway converting the TDM to packets and vice versa, and supports following Voice Codec: ITU-T G.711-Pulse code modulation(PCM) of voice frequencies ITU-T G.711 Appendix I-A high quality low-complexity algorithm for packet loss concealment with G.711...
  • Page 356: Call Routing

    Call Routing and Digit Manipulation Call Routing The calls incoming to a Ubigate iBG3026 can be outbound to PSTN such as Port and Trunk Group, or to the VoIP network such as H.323 Session Target or SIP Session Target. Routing Control is the procedure to determine the route, out of various destinations, where a call will be outbound.
  • Page 357 Ubigate iBG3026 system matches a dial string to an outbound POTS dial peer For prefixes, the Ubigate iBG3026 system may add specific digits to the front of the dialed string before it is forwarded to the telephony interface.
  • Page 358 The Ubigate iBG3026 system provides Call Admission Control based on Maximum Call Number per System Wide. The Call Admission Control Based on Max. Call feature permits the Ubigate iBG3026 system to deny incoming calls exceeding a preconfigured threshold, permitting the selection of a system max.
  • Page 359 For SIP, initially a normal VoIP call is established using SIP INVITEs. The DSP of the Ubigate iBG3026 system needs to be informed that it can support T.38 mode while it is put into voice mode. Then, during the call, when...
  • Page 360 CHAPTER 26. Voice Feature FAX Pass-through The Ubigate iBG3026 system does not distinguish a fax call from a voice call. Fax communication between the two fax machines is carried in its entirety in- band over a voice call. Fax up-speed is similar to pass-through in the sense that the fax call is carried in-band over the voice call.
  • Page 361 PBX. LVBO (Local Voice Busy Out) LVBO provides the Ubigate iBG3026 with the ability to monitor the state of various network interfaces, both LAN and WAN, and busy back the trunk to the PSTN interface if any of the monitored links should fail.
  • Page 362 Call Manager Interworking mode, Survivable Telephony Mode and Stand Alone Mode. Call Manager Interworking Mode When running in a Call Manager Interworking mode, a Ubigate iBG3026 provides the supplementary services under the control of Call Manager. Calling Line Identification(CLID) Call Forward-All...
  • Page 363 Call Waiting and Retrieve Call Transfer-Blind Call Transfer-Consultative Distinctive Ring Stand Alone Mode When running in a Stand Alone mode, a Ubigate iBG3026 provides the following supplementary services to the FXS subscribers connected to itself. CLID Call Hold and Retrieve Call Pickup Group...
  • Page 364: Table 26.1 High Availability Cases

    CHAPTER 26. Voice Feature E911 Support Ubigate iBG3026 supports an E911 feature. E911 is an emergency telephone system capable of automatically displaying the callback number(and in some cases the location) of a person who dials emergency call numbers(911) to request emergency help from public safety agencies.
  • Page 365 If Ubigate iBG3026 detects connection fail, it changes to Survivable Telephony mode automatically. In Survivable Telephony mode, Ubigate iBG3026 acts as a SIP server for local call. Using IP phone location and subscriber profile information, Ubigate iBG3026 provides basic call and restricted supplementary service.
  • Page 366: Voice Deployment Scenario

    Ubigate iBG3026 VoIP system. PSTN Toll Bypass Ubigate iBG3026 provides voice and fax toll bypass capabilities as shown in Figure 26.4. In this scenario a telephonic device attached to a PBX or Key Phone System will be connected to Ubigate iBG3026 through an analog or digital trunk connection.
  • Page 367 Ubigate iBG3026 Configuration Guide/Ed.00 IP Phones The second scenario of an IP phone attached to Ubigate iBG3026 as shown in Figure 26.5. The SIP phone communicates directly with the Call Manager using SIP Protocol that is passed through Ubigate iBG3026. The Call Managers communicate with each other across the IP network via SIP to establish and maintain the call.
  • Page 368 The Network Management System uses Simple Network Management Protocol(SNMP) to communicate with Ubigate iBG3026 systems. The SNMP ‘get’ and ‘set’ commands can be used to configure either system and retrieve current configuration and status information.
  • Page 369: Introduction To Voip Gateway Features

    Ubigate iBG3026 Configuration Guide CHAPTER 27. VoIP Gateway Management Introduction to VoIP Gateway Features VoIP Gateway function is used to deliver voice calls between PSTN and IP network. For interwork with PSTM over IP network, such call processing protocols as SIP, H.323, MGCP, etc. are used over IP network. Ubigate iBG3026 supports SIP and H.323 out of VoIP Call processing protocols.
  • Page 370: Configuring Voip Gateway

    This procedure should be executed first before executing the bind command. Configuration Steps configure terminal − interface − ip address − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal © SAMSUNG Electronics Co., Ltd.
  • Page 371 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose Interface type number Enters interface configuration mode to configure specific Example) interface. /configure# interface Ethernet 0/0 ip address ip_address subnet_mask Configure a IP Address for an interface. Example) /configure/interface/ethernet(0/0)# ip address 90.90.90.90 255.255.255.0...
  • Page 372 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway bind control interface type num Sets source interface for signaling. Example) /configure/voip-gateway# bind control interface ethernet 0/0 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
  • Page 373 Ubigate iBG3026 Configuration Guide/Ed.00 bind media To specify the source address of media stream, you have to do the followings. Configuration Steps configure terminal − voip-gateway − bind media − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
  • Page 374 How to Enable or Disable All Voip call services The procedure to enable or disable all voip call services including SIP service is as follows. If you want to terminate the current call together with stopping the service, use the forced parameter. © SAMSUNG Electronics Co., Ltd.
  • Page 375 Manager. All calls of Ubigate iBG3026 in a Call Manager Inter-working mode pass through Call Manager. If a Call Manager is not set, a Ubigate iBG3026 runs in a Stand Alone mode. You can specify the SIP signaling IP Address and port of Call Manager using ip-address command in a call-server configuration mode, and also specify optionally the registration expire value in a Call Manager Inter-working mode.
  • Page 376 Prerequisites for Call Manager Configurations For interworking with Call Manager, the registration information of a relevant Ubigate iBG3026 should be registered in advance. For more information, see the Call Manager manual. You should disable VoIP service before setting the Call-server. You cannot set the call server while VoIP service is enabled.
  • Page 377 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose ip-address ip-addr [udp | tcp | tls] [sip Sets the SIP Signaling IP Address of | sips] [expires expires] [retry retry] Call Manager. And you can also configure transport type, uri type,...
  • Page 378 CHAPTER 27. VoIP Gateway Management This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 379: Chapter 28. Sip Gateway Management

    Ubigate iBG3026 Configuration Guide CHAPTER 28. SIP Gateway Management Introduction to SIP Gateway Features Information about SIP SIP is a simple, Text-based protocol that uses requests and responses to establish communication among the various components in the network and to...
  • Page 380: Sip Components

    Whether the endpoint functions as a UAC or a UAS depends on the user agent that initiated the request. SIP proxy and redirect servers SIP user Agents(Uas) SIP gateway PSTN Legacy PBX Figure 28.1 Architecture of SIP Network © SAMSUNG Electronics Co., Ltd.
  • Page 381 Ubigate iBG3026 Configuration Guide/Ed.00 From an architectural standpoint, the physical components of a SIP network can be grouped into two categories: clients(endpoints) and servers. Figure 28.1 illustrates the architecture of a SIP network. SIP Client Phones User agent which can attempt or receive a call voluntarily.
  • Page 382 Manager, and the response is delivered to a caller. A caller sends ACK for the response. A session between a caller and callee is established, and session data is delivered to caller and callee using Real-time Transfer Protocol(RTP). © SAMSUNG Electronics Co., Ltd.
  • Page 383 Ubigate iBG3026 Configuration Guide/Ed.00 How SIP Works with a Proxy Server If a proxy server is used, the caller user agent sends an INVITE request to the proxy server, the proxy server determines the path, and then forwards the request to the called party. The called party responds to the proxy server, which in turn, forwards the response to the caller.
  • Page 384 User agents Client Server Proxy Redirect Figure 28.3 SIP Response Through a Proxy server IP-based network Client Client Server Server User agents User agents Client Server Proxy Redirect Figure 28.4 SIP Session Through a Proxy Server © SAMSUNG Electronics Co., Ltd.
  • Page 385 Ubigate iBG3026 Configuration Guide/Ed.00 How SIP Works with a Redirect Server If a redirect server is used, the caller user agent sends an INVITE request to the redirect server, the redirect server contacts the location server to determine the path to the called party, and then the redirect server sends that information back to the caller.
  • Page 386 SIP gateway 1 via a T1/E1. User B is located at PBX B, which is connected to SIP gateway 2 via a T1/E1. Table 28.1 briefly describes the messages used in the call flow. © SAMSUNG Electronics Co., Ltd.
  • Page 387 Ubigate iBG3026 Configuration Guide/Ed.00 User A PBX A IP Network PBX B User B 1. Setup 2. INVITE 3. Call Proceeding 4. Setup 5. 100 Trying 6. Call Proceeding 7. Alerting 8. 180 Ringing 9. Alerting 2-way RTP channel 1-way voice path 1-way voice path 10.
  • Page 388: Table 28.1 Call Setup And Disconnect

    SIP Gateway 1 receives Connect ACK from PBX A. Connect ACK indicates that Connect was received normally. SIP Gateway 2 sends ACK request to SIP Gateway2. ACK request indicates that SIP Gateway 1 received 200 OK response normally. © SAMSUNG Electronics Co., Ltd.
  • Page 389 Ubigate iBG3026 Configuration Guide/Ed.00 Table 28.1 Call Setup and Disconnect (Continued) Message Description Connect ACK Upon receiving ACK, SIP Gateway2 sends Connect ACK to PBX B. Disconnect If a subscriber hangs up the phone, SIP Gateway 2 receives Disconnect from PBX B. Disconnect indicates that User B requested a call release.
  • Page 390 2-way Voice Path 2-way RTP channel 2-way Voice Path 19. Disconnect 20. BYE 21. Disconnect 22. Release 23. Release 25. Release 24. 200 OK Complete 26. Release Complete Figure 28.8 SIP Gateway-to-SIP Gateway-Call Via SIP Redirect Server © SAMSUNG Electronics Co., Ltd.
  • Page 391: Table 28.2 Call Via Redirect Server

    Ubigate iBG3026 Configuration Guide/Ed.00 Table 28.2 Call via Redirect Server Message Description Setup SIP Gateway 1 receives Setup from PBX A. Setup indicates the call attempt from User A to User B. INVITE SIP Gateway 1 sends INVITE request to a redirect server.
  • Page 392 SIP Gateway 1 sends 200 OK to SIP Gateway 2. 200 OK indicates that a session was terminated normally by BYE request. Release Complete Receives Release Complete in regard to Release. Release Complete Sends Release Complete in regard to Release. © SAMSUNG Electronics Co., Ltd.
  • Page 393 Ubigate iBG3026 Configuration Guide/Ed.00 SIP Gateway to SIP Gateway-Call via Proxy Server Figure 28.9 shows the call of SIP Gateway to SIP Gateway using SIP Proxy server. Table28.3 briefly describes the messages used in the call flow. User B User A PBX A...
  • Page 394: Table 28.3 Call Via Proxy Server

    200 OK Proxy Server 2 sends 200 OK to SIP Gateway 1. Connect Upon receiving 200 OK, SIP Gateway1 sends Connect to PBX A. Connect ACK SIP Gateway 1 receives Connect ACK from PBX A. © SAMSUNG Electronics Co., Ltd.
  • Page 395 Ubigate iBG3026 Configuration Guide/Ed.00 Table 28.3 Call via Proxy Server (Continued) Message Description SIP Gateway 1 sends ACK request to a Proxy server. ACK request indicates that SIP Gateway 1 received 200 OK response normally. Proxy server sends ACK request to a SIP Gateway2.
  • Page 396 Trusted Networks. Support for sips uri over TLS. capability to periodically refresh SIP sessions by sending repeated UPDATE requests. Support for QSig inter-working and QSig tunneling over SIP. Support for the following RFCs and Drafts © SAMSUNG Electronics Co., Ltd.
  • Page 397 Ubigate iBG3026 Configuration Guide/Ed.00 Description RFC3261 Session Initiation Protocol RFC2976 The SIP INFO Method RFC3262 Reliability of Provisional Responses in SIP RFC3265 SIP – Specific Event Notification RFC3311 The SIP UPDATE Method RFC3323 A Privacy Mechanism for the SIP RFC3325...
  • Page 398: Configuring Basic Sip Gateway

    − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal Interface type number Enters interface configuration mode to configure specific Example) interface. /configure# interface Ethernet 0/0 © SAMSUNG Electronics Co., Ltd.
  • Page 399 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose ip address ip_address subnet_mask Configure a IP Address for an interface. Example) /configure/interface/ethernet(0/0)# ip address 90.90.90.90 255.255.255.0 exit Exits the current mode Example) /configure/interface/ethernet(0/0)# exit shutdown voip-gateway This procedure should be executed first before executing the bind command or host ip-address command.
  • Page 400 Exits the current mode Example) /configure/voip-gateway# exit bind media To specify the source address of media stream, you have to do the followings. Configuration Steps configure terminal − voip-gateway − bind media − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 401 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway bind media interface type num Sets source interface for media streams. Example) /configure/voip-gateway# bind media...
  • Page 402 SIP signaling should already be set using host domain-name command. How to Configure Default domain name To specify the default domain name to be used in SIP signaling, follow the procedure below. Configuration Steps configure terminal − voip-gateway − host domain-name − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 403 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway host domain-name domain-name Sets the default domain name for SIP signaling. Example) /configure/voip-gateway# host domain-name samsung.com...
  • Page 404 − voip-gateway − sip-ua − [no] shutdown − exit − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway © SAMSUNG Electronics Co., Ltd.
  • Page 405 Configuring Call Manager This section describes the configuration necessary for interworking with Call Manager. All calls of Ubigate iBG3026 in a Call Manager Inter-working mode pass through Call Manager. You can specify the SIP signaling IP Address and port of Call Manager using ip-address command in a call-server configuration mode, and also specify optionally the registration expire value in a Call Manager Inter-working mode.
  • Page 406 Set the URI where a Ubigate iBG3026 will be registered in Example) Call Manager. And you can /configure/voip-gateway/call-server# gw-uri also configure registration sip:ibg3026@samsung.com expires and retry interval. Exit Exits the current mode Example) /configure/voip-gateway/call-server# exit © SAMSUNG Electronics Co., Ltd.
  • Page 407 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose exit Exits the current mode Example) /configure/voip-gateway# exit How to Configure Dial-Peer for Registration The procedure of registration in Call Manager per dial-peer is as follows. Configuration Steps configure terminal − dial-peer −...
  • Page 408 − voip-gateway − sip-ua − sip-server − exit − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway © SAMSUNG Electronics Co., Ltd.
  • Page 409 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose sip-ua Enters sip-ua configuration mode. Example) /configure/ voip-gateway# sip-ua sip-server ip-address ip-addr [udp | tcp Sets the SIP Signaling IP Address | tls] [sip | sips] of SIP Proxy. And you can also...
  • Page 410 This changes the operation mode to Stand-Alone mode. How to Configure SIP Registrar You can set the SIP Registrar in the following way. Configuration Steps configure terminal − voip-gateway − sip-ua − registrar − exit − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 411 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway sip-ua Enters sip-ua configuration mode. Example) /configure/ voip-gateway# sip-ua registrar ip-address ip-addr [udp | tcp |...
  • Page 412 3xx class of response. In a Call Manager Inter-working mode, all SIP incoming calls of Ubigate iBG3026 is redirected to Call Manager. This means that all calls are controlled by Call Manager.
  • Page 413 Ubigate iBG3026 Configuration Guide/Ed.00 How to Configure SIP Redirect Processing You can enable or disable the SIP redirect response processing in the following way. The default setting is ‘disable’. Configuration Steps configure terminal − voice service sip − [no] redirection −...
  • Page 414 Enters VoIP dial-peer configuration mode. Example) /configure# dial-peer voice voip 100 max-redirects count Sets the maximum count for SIP redirect response handling. Example) /configure/ dial-peer/voice/voip 100# max-redirects 3 exit Exits the current mode Example) /configure/dial-peer/voice/voip 100# exit © SAMSUNG Electronics Co., Ltd.
  • Page 415: Configuring Enhanced Sip Gateway Features

    The opposite is also true: SIP status codes or events are mapped to PSTN cause codes. A Ubigate iBG3026 provides a SIP- PSTN default mapping table. The method for an operator to change the mapping is also provided. You can change the mapping using set pstn-cause command and set sip-status command.
  • Page 416 503 Service Unavailable Incompatible destination 400 Bad request Invalid message 400 Bad request Recover on Expires timeout 408 Request timeout Protocol error 400 Bad request Any code other than those listed above 500 Internal server © SAMSUNG Electronics Co., Ltd.
  • Page 417: Table 28.5 Default Sip Event To Pstn Cause Code Mapping

    Ubigate iBG3026 Configuration Guide/Ed.00 Default SIP Status Code to PSTN Cause Code Mapping Table 28.5 Default SIP Event to PSTN cause code mapping SIP Event PSTN Cause code Description 400 Bad request Interworking, unspecified 401 Unauthorized Bearer capability not authorized...
  • Page 418 How to Configure PSTN Cause Code to SIP Status Code Mapping You can change the PSTN Cause code to SIP Status code mapping in the following way. Configuration Steps configure terminal − voip-gateway − sip-ua − set pstn-cause − © SAMSUNG Electronics Co., Ltd.
  • Page 419 Ubigate iBG3026 Configuration Guide/Ed.00 exit − exit − show sip-ua maps pstn-sip − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway sip-ua Enters sip-ua configuration mode.
  • Page 420 Changes sip status code to pstn cause code mapping. Example) /configure/voip-gateway/sip-ua# set sip-status 404 pstn-cause 1 exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
  • Page 421 SIP-UA configuration mode, you can control the method for Ubigate iBG3026 to handle the SDP delivered via 180 response. To the contrary, it is possible to control whether, when Ubigate iBG3026 sends a 18x provisional response including SDP, to send 180 or 183 response, or send it together with SDP, by using the alert-cut-through command.
  • Page 422 How to Configure Early Media Cut-through You can set the Early media cut-through method in the following way. Configuration Steps configure terminal − voip-gateway − sip-ua − alert-cut-through − exit − exit − Detailed Steps © SAMSUNG Electronics Co., Ltd.
  • Page 423 Ubigate iBG3026 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway sip-ua Enters sip-ua configuration mode. Example) /configure/ voip-gateway# sip-ua [no] alert-cut-through {180 | 183} no alert-cut-through: 18x response does not include SDP.
  • Page 424 CHAPTER 28. SIP Gateway Management Restrictions for Session Timer Ubigate iBG3026 uses a UPDATE method as the method of session update. Even though Session update is not done using INVITE, when INVITE for session update is received, it is processed normally.
  • Page 425 This section describes how to set the use of Reason header in SIP message. To deliver the Q.850 Cause of PSTN via SIP message in SIP-PSTN interworking, a reason header is added to SIP message. Ubigate iBG3026 loads the Q.850 Cause received from PSTN to the reason header of SIP message;...
  • Page 426 To complement this, an additional method called PRACK is used to ensure reliability of Provisional response. Ubigate iBG3026 supports this function by default, or it can disable or forcibly provide the function.
  • Page 427 Exits the current mode Example) /configure/voice/service/sip# exit Configuring SIP DTMF Relay This section describes how to set the method of delivering DTMF tone via SIP signaling. To relay DTMF tone, Ubigate iBG3026 supports the 4 methods as follows. inband rtp-nte sip-notify...
  • Page 428 In RFC2833, unused corresponds to the volume field, but is not used in NOTIFY-based out-of-band DTMF relay duration Duration of the DTMF event, in milliseconds On SIP INFO method, use ‘application/dtmf-relay’ content-type header, contain signal and duration attribute field. signal= dtmf event value © SAMSUNG Electronics Co., Ltd.
  • Page 429 Ubigate iBG3026 Configuration Guide/Ed.00 How to Configure SIP DTMF Relay DTMF Relay method can be set for all SIP calls, or differently for each dial- peer. To set it for all SIP calls, follow the procedure below. Configuration Steps configure terminal −...
  • Page 430 This section describes how to set the function, in SIP and ISDN interworking, to map ISDN Suspend/Resume message to SIP Hold/Retrieve. Upon receiving a Suspend message from ISDN, it sends re-INVITE for SIP Hold; and upon receiving Resume message, it sends re-INVITE for SIP Retrieve. © SAMSUNG Electronics Co., Ltd.
  • Page 431 Ubigate iBG3026 Configuration Guide/Ed.00 How to Configure ISDN Suspend/Resume Support You can enable the ISDN Suspend/Resume to SIP Hold/Retrieve mapping function in the following way. Configuration Steps configure terminal − voip-gateway − sip-ua − [no] suspend-resume − exit − exit −...
  • Page 432 Configuring QSIG tunneling over SIP This section describes how to make the settings necessary to deliver QSIG message via SIP signaling. Ubigate iBG3026 provides the function to load QSIG message in SIP message. Its purpose is for QSIG message to be delivered transparently in SIP section, when different QSIG network is connected to SIP.
  • Page 433 And, MWI function should be set for each FXS voice port. Restrictions for SIP MWI Feature The MWI feature of Ubigate iBG3026, via interworking with MWI server, only notifies if a waiting message exists via audible or visible indication, but does not provide the ‘Call redirection to the voice-mail server when the line is...
  • Page 434 Configuration Steps configure terminal − voice-port − − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice-port slot/subslot/port Enters Voice-Port configuration mode. Example) /configure# voice-port 0/1/2 © SAMSUNG Electronics Co., Ltd.
  • Page 435 Configuring Calling-Info for SIP Calls This section describes how to set the calling informations for SIP Calls forcibly. Ubigate iBG3026 ignore the caling name and number received from Calling party and change them to what configured. To change the calling...
  • Page 436 Sets the calling-info for pstn-to-sip { unscreened discard | name <name call. string> number <number> } Example) /configure/voip-gateway/sip-ua# calling-info pstn-to-sip number 7778888 exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
  • Page 437 Ubigate iBG3026 Configuration Guide/Ed.00 How to Configure Calling-info for SIP-to-PSTN calls You can set the calling information for SIP-to-PSTN calls in the following way. Configuration Steps configure terminal − voip-gateway − sip-ua − calling-info sip-to-pstn − exit − exit −...
  • Page 438 − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway sip-ua Enters sip-ua configuration mode. Example) /configure/ voip-gateway# sip-ua © SAMSUNG Electronics Co., Ltd.
  • Page 439 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Step Purpose [ no ] peer-mon duration <duration Enables or Disables SIP entity seconds> retry <retry seconds> monitoring feature. Example) /configure/voip-gateway/sip-ua# peer-mon duration 200 retry 30 exit Exits the current mode Example) /configure/ voip-gateway/sip-ua# exit...
  • Page 440: Configuring Sip Security Features

    SIP server in advance. SIP server requesting the authentication of SIP client response to the request sent from Ubigate iBG3026 with 401 response. Using the information contained in 401 response and UserName/Password, Ubigate iBG3026 adds Authorization Token to a request.
  • Page 441 Ubigate iBG3026 Configuration Guide/Ed.00 How to Configure UserName and Password for a POTS dial-peer You can specify UserName and Password per Dial-peer voice pot in the following way. Configuration Steps configure terminal − dial-peer voice pots − authentication − exit −...
  • Page 442 [realm realm] password and realm for Example) system default /configure/voip-gateway/sip- ua#authentication username Ubigate iBG3026 password 12345678 realm proxy.com exit Exits the current mode Example) /configure/voip-gateway/sip-ua# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
  • Page 443 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring SIPS URI with TLS transport This section describes how to set SIP signaling via TLS connection. To do this, set URI type to SIPS, and change the transport type to TLS. You can change the URI type and transport type in two ways. That is, you can make a setting which applies to the entire SIP signaling, or individual dial-peers of SIP type.
  • Page 444 Example) /configure/ dial-peer/voice/voip 100# sip- class uri sips session transport [udp | tcp | tls] Specifies SIP transport type. Example) /configure/ dial-peer/voice/voip 100# session transport tls Exit Exits the current mode Example) /configure/dial-peer/voice/voip 100# exit © SAMSUNG Electronics Co., Ltd.
  • Page 445 SIP Signaling. Prerequisites for S/MIME Configuration Before specifying a certificate and private key to POTS Dial-peer, a certificate and private key should be saved in the file system of Ubigate iBG3026 in a PEM format. How to Configure S/MIME Support You can specify the certificate and private key to a desired dial-peer where S/MIME will be used, in the following way.
  • Page 446 − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal dial-peer voice {pots | voip} tag Enters VoIP dial-peer configuration mode. Example) /configure# dial-peer voice voip 100 © SAMSUNG Electronics Co., Ltd.
  • Page 447: Verifying And Troubleshooting Sip Features

    Verifying and Troubleshooting SIP Features This section describes how to use the show command and debug command to verify and troubleshoot the SIP feature of Ubigate iBG3026. Using show commands You can use the show command commands as follows to confirm or see the current status of the SIP feature settings.
  • Page 448 Shows the SIP Proxy settings. Example) # show sip-ua sip-server proxy type is Call Manager host ip is ipv4:90.90.90.100 tranport is system port is used system configuration expires is 3600 uri type is system © SAMSUNG Electronics Co., Ltd.
  • Page 449 Ubigate iBG3026 Configuration Guide/Ed.00 show sip-ua registration Shows the registration status of Ubigate iBG3026 and each dial-peer. Example) # show sip-ua registeration line peer expires registered Call Server sip:90.90.90.100 2300 3600 0/1/0 2301 3600 0/1/1 2302 3600 0/1/2 2303 3600...
  • Page 450 : "Survivable Mode" show sip-ua calls Shows the status of SIP calls in progress. Example) # show sip-ua calls ------------------------------------------------------------ SIP-CALL CTXID ------------------------------------------------------------ -SIP-CALLID AAFfkD4bDhsAAAAAAAAAAA@10.254.167.249 -CALL-STATES : PIC_T_Active -FROM <sip:2301@samsung.com>;tag=7267517 © SAMSUNG Electronics Co., Ltd.
  • Page 451 Ubigate iBG3026 Configuration Guide/Ed.00 <sip:2302@samsung.com>;tag=7267170 -SOURCE ADDRESS : udp 10.254.167.249:0 -DESTINATION ADDRESS : udp 10.254.167.244:0 -MEDIA INFO -PAYLOAD ID(CODEC) : g711u -RTP LOCAL ADDRESS : 10.10.10.10:16388 -RTP REMOTE ADDRESS : 10.10.10.10:16386 -DTMF PAYLOAD TYPE : 101 ------------------------------------------------------------ ------------------------------------------------------------ SIP-CALL CTXID...
  • Page 452 Displays the debugging messages of SIP call processing task. debug sip stack Displays the debugging messages of SIP Stack level. debug sip dump req Displays SIP message’s request and response line. debug sip dump msg Displays SIP messages. © SAMSUNG Electronics Co., Ltd.
  • Page 453: Introduction To H.323 Gateway Features

    Ubigate iBG3026 Configuration Guide CHAPTER 29. H.323 Gateway Management Introduction to H.323 Gateway Features This section describes how H.323 gateway works in regard to the features stated below. Call Setup Procedure RAS Signalling Codec Negotiation Support for Supplementary Services Call Statistics Conformance H.323 gateway basically follows the recommendations below.
  • Page 454 Signalling and Gatekeeper Routed Call Signalling depending on the call model supported by a gatekeeper. This section will discuss how Ubigate iBG3026 performs a call setup procedure in dial-peer depending on the registered information(session target). The H.225.0 SETUP message from the H.323 Endpoint registered as a session target on dial-peer follows the call procedure illustrated in Figure 29.1.
  • Page 455 Ubigate iBG3026 Configuration Guide/Ed.00 If H.323 gateway is not registered in a gatekeeper, the H.225.0 SETUP message from the H.323 Endpoint not registered as a session target on dial- peer reject calls as in Figure 29.2. iBG3026 a known H.323 endpoint...
  • Page 456 Figure 29.4 shows the case where a gatekeeper usually uses a Gatekeeper Routed Call Signalling. iBG3026 Gatekeeper H.323 endpoint SETUP SETUP CallProceeding Alerting or Progress Connect Call Signalling Messages RAS Messages Figure 29.4 Call Setup from Gatekeeper © SAMSUNG Electronics Co., Ltd.
  • Page 457 Ubigate iBG3026 Configuration Guide/Ed.00 When a specific IP address is designated as a session target, the H.225.0 SETUP message from the H.323 Endpoint, the H.225.0 SETUP message sent from H.323Gateway follows the call procedure illustrated in Figure 29.5. In this case, call setup is done regardless of the existence of the gatekeeper to interwork over H.323 network.
  • Page 458 Registration & UnRegistration An operator can designate maximum 2(Primary, Second) gatekeepers, and the first registration is attempted with the primary gatekeeper. The time points when H.323 gateway attempts registration in a gatekeeper are as follows. © SAMSUNG Electronics Co., Ltd.
  • Page 459: Table 29.2 Ras Registration Trial

    Ubigate iBG3026 Configuration Guide/Ed.00 Table 29.2 RAS Registration Trial Registration Attempt Time Point Related CLI Remarks Time when primary gatekeeper gatekeeper When H.323 Service information is set. gatekeeper-name is already running When H.323 Service becomes ‘up’. no shutdown When primary...
  • Page 460 H.323 gateway enables interworking with other gatekeeper at GRQ and RRQ stage. This function provides redundancy when the gatekeeper interworking over H.323 network fails; and the system availability, redundancy and scalability should be implemented at the gatekeeper level. © SAMSUNG Electronics Co., Ltd.
  • Page 461 Ubigate iBG3026 Configuration Guide/Ed.00 AltGKList in GCF Messages The alternative gatekeeper list currently managed by H.323 gateway is − replaced by the list in this field. In case of the empty AltGKList, the alternative gatekeeper list managed by H.323 gateway is kept.
  • Page 462: Table 29.4 Supported Supplementary Services In H.323 Gateway

    H.323 party cannot if A presses a hook flash, B turns to a be other party(A) hold status; and if A presses a hook than B-party. flash again, B is retrieved. any confiquration is not needed. © SAMSUNG Electronics Co., Ltd.
  • Page 463 Ubigate iBG3026 Configuration Guide/Ed.00 Table 29.4 Supported Supplementary Services in H.323 Gateway (Continued) Service Name Description Restriction Call Waiting While A and B are busy, H.323 party cannot C attempts a call to A. At this time, A can be other party(A, B) hear a CallWaiting tone;...
  • Page 464: Table 29.5 H.323 Call Statistics Command

    Accumulated data per cause of H.225.0 cause ReleaseComplete message transceived by H.323 gateway after Ubigate iBG3026 is booted. To trace and debug the H.323 call in progress, the command described in Table 29.6 should be entered in a privileged EXEC mode.
  • Page 465: Configuring A H.323 Gateway

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring a H.323 Gateway This section describes how to configure the items below. Prerequisites for Configuring H.323 gateways Configuring H.323 Bind Shutting Down and Enabling H.323 Services Configuring Basic H.323 Services Configuring Gateway RAS Configuring Multiple Codecs Configuring Enhanced H.323 Services...
  • Page 466 Exits the current mode Example) /configure/interface/ethernet(0/0)# exit shutdown voip-gateway This procedure should be executed first before executing the bind command or host ip-address command. Configuration Steps configure terminal − voip-gateway − shutdown − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 467 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway shutdown [forced] Shutdowns voip call services Example) /configure/voip-gateway# shutdown forced exit Exits the current mode...
  • Page 468 # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway bind media interface type num Sets source interface for media streams. Example) /configure/voip-gateway# bind media interface ethernet 0/0 exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
  • Page 469 Ubigate iBG3026 Configuration Guide/Ed.00 host ip-address Instead of specify the source address of signaling and media stream via bind command, you can directly specify the IP address in the following way. Configuration Steps configure terminal − voip-gateway − host ip-address −...
  • Page 470: Table 29.7 Combination To Enable Or Shutdown H.323 Service

    The procedure to enable or disable all voip call services including H.323 service is as follows. Configuration Steps configure terminal − voip-gateway − [no] shutdown − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 471 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway [no] shutdown [forced] Shuts down or enables voip call services Example) /configure/voip-gateway# no shutdown...
  • Page 472 Example) /configure/voip-gateway# h323- gateway [no] shutdown [forced] Shuts down or enables H.323 services Example) /configure/voip-gatway/h323-gateway# no shutdown exit Exits the current mode Example) /configure/voip-gateway/h323- gateway# exit exit Exits the current mode Example) /configure/voip-gateway# exit © SAMSUNG Electronics Co., Ltd.
  • Page 473 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Basic H.323 Services This section describes how to do a configuration to enable H.323 gateway to perform a basic call processing. Prerequisites for Basic H.323 Services The followings should be done first before setting the configuration to enable H.323 gateway to perform a basic call processing.
  • Page 474 | gatekeeper | name voip-peer- gatekeeper. name } Specifies ip address as session target if you want to run direct Example) connection to H.323 endpoint /configure/dial-peer/voice 100#session target ip-address ipv4:192.168.10.100:1720 © SAMSUNG Electronics Co., Ltd.
  • Page 475 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose codec Specifies the information of a codec {g711alaw|g711ulaw|g723r53|g723r6 for multimedia communication 3|g729} [interval-time] voice-class codec tag Specifies the tag value of the voice class created using ‘voice class Example) codec’ command /configure/dial-peer/voice 100#codec...
  • Page 476 − gatekeeper id − [no] gatekeeper ip-address − exit − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway © SAMSUNG Electronics Co., Ltd.
  • Page 477 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose h323-gateway Enters h323-gateway configuration mode. Example) /configure/voip-gateway#h323- gateway h323-id h323-id defines H.323 name of this H.323 gateway. Example) /configure/voip-gateway/h323- gateway#h323-id gw.samsung.com [no] gatekeeper id {gatekeeper-ID} defines H.323 identification of the [primary | secondary] gatekeeper that H.323 gateway will...
  • Page 478 {h323 | sip} Enters voip-peer configuration mode Example) /configure#voip-peer pri-gatekeeper h323 ip-address {ipv4:ip-address[:port] | specifies ip address and port ipv6:ip-address[:port] | dns:hostname[:port] } Example) /configure/voip-peer pri-gatekeeper h323#ip-address ipv4:10.254.10.200:1719 exit Exits the current mode Example) /configure/voip-peer pri-gatekeeper h323#exit © SAMSUNG Electronics Co., Ltd.
  • Page 479 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose voip-gateway Enters voip-gateway configuration mode. Example) /configure# voip-gateway h323-gateway Enters h323-gateway configuration mode. Example) /configure/voip-gateway#h323-gateway h323-id h323-id defines H.323 name of this H.323 gateway Example) /configure/voip-gateway/h323- gateway#h323-id gw.samsung.com [no] gatekeeper id {gatekeeper-ID} defines H.323 identification of...
  • Page 480 If no ras timeout all is ras timeout rrq 3 entered, all values set to the default except the individual values that were configured separately. - arq: Admission Request(ARQ) message counter - drq: Disengage Request(DRQ) message counter © SAMSUNG Electronics Co., Ltd.
  • Page 481 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose - grq: Gatekeeper Request(GRQ) message counter - rai: Resource Availability Indication(RAI) message counter - rrq: Registration Request(RRQ) message counter - urq: Unregistration Request(URQ) message counter - value:How long the gateway waits for a message from the gatekeeper before timing out, in seconds.
  • Page 482 You can set multiple codecs in a single dial-peer in the following way. Configuration Steps configure terminal − voice class codec − codec-preference − exit − dial-peer voice voip − voice-class codec − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 483 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice class codec tag Enters voice-class configuration mode and assigns an identification tag number for a codec voice class. The tag argument is...
  • Page 484 DTMF Relay method can be set for all H.323 calls, or differently for each dial-peer. To set it for all H.323 calls, follow the procedure below. Configuration Steps configure terminal − voice service h323 − dtmf-relay − exit − Detailed Steps © SAMSUNG Electronics Co., Ltd.
  • Page 485 Ubigate iBG3026 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice service h323 Enters ‘voice service h323’ configuration mode. Example) /configure# voice service h323 dtmf-relay {inband | rtp-nte | h245- Specifies how to relay DTMF tone...
  • Page 486 H.245 UserInputIndication(alphanumeric) message. - queued-digits: DTMF is sent using the voice stream according to the RFC2833 recommendation; and additionally, Queued Digits are supported for analog-FXS subscribers. Exit Exits the current mode Example) /configure/dial-peer/voice/voip 100# exit © SAMSUNG Electronics Co., Ltd.
  • Page 487: Table 29.8 Commands Of 'Voice Service H323' Configuration And 'Voice Class H323' Configuration

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Enhanced H.323 Services The additional control of H.323 gateway call processing can be done in a ‘voice service h323’ configuration mode or ‘voice class h323’ configuration mode. ‘voice service h323’ configuration is applied to all H.323 calls, while ‘voice class h323’...
  • Page 488 Enters ‘voice service h323’ configuration mode. Example) /configure# voice service h323 h225 call-start {fast | slow} Specifies how to setup H323 call Example) /configure/voice/service/h323#h225 call-start fast exit Exits the current mode Example) /configure/voice/service/h323#exit © SAMSUNG Electronics Co., Ltd.
  • Page 489 Ubigate iBG3026 Configuration Guide/Ed.00 h225 early-h245 The settings to execute the Early H245 Procedure during H.323 Call Signalling are as follows. Configuration Steps configure terminal − voice service h323 − h225 early-h245 − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode.
  • Page 490 − h225 call-response − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice service h323 Enters ‘voice service h323’ configuration mode. Example) /configure# voice service h323 © SAMSUNG Electronics Co., Ltd.
  • Page 491: Verifying And Troubleshooting H.323 Features

    Verifying and Troubleshooting H.323 Features This section describes how to use the show command and debug command to verify and troubleshoot the H.323 feature of Ubigate iBG3026. Using show commands You can use the show command commands as follows to confirm or see the current status of the H.323 feature settings.
  • Page 492 : fast h245-tunnel : on early-h245 : off call-response : alert t301 : 180 t303 : 15 rrq-ttl : 60 retry timeout show h323-gateway registration It shows the gatekeeper registration of H.323 gateway. Example) © SAMSUNG Electronics Co., Ltd.
  • Page 493 Ubigate iBG3026 Configuration Guide/Ed.00 # show h323-gateway registration H323-ID ibg.samsung.com Primary gatekeeper information is configured as below. Gatekeeper ID: GK1 IP address : 10.254.139.50 RAS port : 1719 Secondary gatekeeper information is not configured. This gateway is registered with a gatekeeper.
  • Page 494 Command to view the H.323 message. You can display messages by filtering them with calling number or called number. debug h323 vcc Displays the debugging messages of H.323 call processing task. debug h323 stack Displays the debugging messages of H.323 stack level. © SAMSUNG Electronics Co., Ltd.
  • Page 495: Chapter 30. Analog Voice Port

    Ubigate iBG3026 Configuration Guide CHAPTER 30. Analog Voice Port Introduction to Analog Voice Port Features This chapter describes Analog Voice port Features. Analog Voice port plays a role to transmit voice and call signal between a packet-based network and the existing telephony network.
  • Page 496 It works by using ground and current detectors that allow the network to indicate off-hook or seizure of an incoming call independent of the ringing signal and allow for positive recognition of connects and disconnects. For these reasons, ground-start method is used as inter-PBX Trunk line. © SAMSUNG Electronics Co., Ltd.
  • Page 497 Ubigate iBG3026 Configuration Guide/Ed.00 Idle state Analog FXS Interface or PBX CO module in submarine - The module of Analog FXS are constantly monitoring the - The PBX are ring line for ground. Ring Detector constantly Generator monitoring the - Battery(-48 VDC) is tip line for ground.
  • Page 498 E-lead to enter ‘seizure’ action, and sends address information. Use DTMF (dual-tone multifrequency) digits or MF for address information. Originating Destination M-wire E-wire M-wire E-wire seizure Min 70 msec Max 10 sec digits digits Min 200 msec answer Figure 30.4 Immediate method signaling sequence © SAMSUNG Electronics Co., Ltd.
  • Page 499 Ubigate iBG3026 Configuration Guide/Ed.00 Wink-Start Method Wink-start is most used E & M Access method, and default signaling of voice port. Wink-start method hooks off E-lead to enter ‘seizure’ action, and then receives ‘Wink’ of M-lead on the counterpart office, and transmits address information.
  • Page 500 Feed for M, Return for E, to ground connected to - Galvanically isolated from ground Output, Relay to Input,referenced Connected to - Connected to ground to ground ground Output, Relay to Input,referenced ground to -48V © SAMSUNG Electronics Co., Ltd.
  • Page 501: Analog Voice Port Monitoring

    Ubigate iBG3026 Configuration Guide/Ed.00 Analog Voice Port Monitoring This section describes the configuration of analog voice port. Analog voice port have an architecture to create a basic configuration of a voice port by which Submarine automatically detects H/W information. Accordingly, when starting up the system, port number of analog voice port is shown automatically to an operator, and it is able to enters into a basic service.
  • Page 502 DS0. Prerequisites to Configure Analog Voice ports Before configuration of Voice port, the user should predefine the following information and determine the following with interworking Opposite PBX in advance. © SAMSUNG Electronics Co., Ltd.
  • Page 503: Configuring Analog Fxs Voice Port

    Ubigate iBG3026 Configuration Guide/Ed.00 Telephony signaling interface: Analog FXO, FXS or E & M Locale Code(usually the country) for Call Progress Tone or DTMF/MF Variant If FXO, type of Signal: loop-start or ground-start If FXS, type of Signal: loop-start or ground-start or DID If E &...
  • Page 504 - Sets the number of seconds that the system waits between the caller input of the initial digit and the subsequent digit of dialed string. A valid entry is from 0 to 120. The default is 10 © SAMSUNG Electronics Co., Ltd.
  • Page 505 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose interdigit - Configures the number of seconds that the system waits after the caller has input the initial digit or a subsequent digit of the dialed string. If the timeout ends before the Destination is identified, a tone sounds and the call ends.
  • Page 506 #). The timer character must be a capital T. port slot/subslot/port Maps the dial peer to a specific Port Number exit Exits voice dial-peer configuration mode © SAMSUNG Electronics Co., Ltd.
  • Page 507 Ubigate iBG3026 Configuration Guide/Ed.00 Predefined ring cadence patterns. Ring Cadence of Analog FXS have a predefined patterns as follow, and can be set up by on-net , or off-net respectively. On-net means an inbound call coming from FXS line in the inside of submarine, on the while, off-net means inbound transit call except that.
  • Page 508 To define the tone-on and tone-off duration for a call-progress tone, use the cadence command in call-progress dualtone configuration mode. Configure>voice class custom-cptone tag dualtone busy cadence {cycle-1-on- time cycle-1-off-time [cycle-2-on-time cycle-2-off-time] [cycle-3-on-time cycle-3-off-time] [cycle-4-on-time cycle-4-off-time]} © SAMSUNG Electronics Co., Ltd.
  • Page 509 Ubigate iBG3026 Configuration Guide/Ed.00 cycle-1-on-time - Tone-on duration for the first cycle of the cadence pattern, in milliseconds(ms). Range is from 0 to 1000. The default is 0. cycle-1-off-time - Tone-off duration for the first cycle of the cadence pattern, in milliseconds(ms).
  • Page 510: Configuring Analog Fxo Voice Port

    The keywords are as follows: loop-start - (default) Uses a closed circuit to indicate off-hook status; used for residential loops. ground-start - Uses ground and current detectors; preferred for PBXs and trunks © SAMSUNG Electronics Co., Ltd.
  • Page 511 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose dial-type {dtmf|mf} Specifies the dialing method for outgoing calls ring number number (FXO only) Specifies the maximum number of rings to be detected before an incoming call is answered by the router.
  • Page 512 1004 the letters A through D. You can also enter the following special characters: - The asterisk (*) or pound sign (#) on standard touch-tone dial pads can be used anywhere in the pattern. © SAMSUNG Electronics Co., Ltd.
  • Page 513: Configuring Analog E & M Voice Port

    Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose - The period (.) acts as a wildcard character. When the timer(T) character is included at the end of the destination pattern, the router collects dialed digits until the interdigit timer expires(5 seconds, by default) or until you dial the termination character(the default is #).
  • Page 514 The following Figure 30.8 shows a whole Jumper information for E & M Board. J1, J2, J11, J12 CH0: J1, J2 CH1: J11, J12 (Black line) CPLD Vcc_3.3V Download Type J6/J7 (E, SG) J4/J5 (M) Not used 1-2, 3-4 Figure 30.8 E & M Jumper Information © SAMSUNG Electronics Co., Ltd.
  • Page 515 Ubigate iBG3026 Configuration Guide/Ed.00 Type I, II, III, V There are five different E&M interface types or models: Type I, II, III, IV, and V (Type IV is not supported. Each type has a different wiring arrangement, hence a different approach to transmit E & M supervision signaling(on-hook /off-hook signaling).
  • Page 516 Specifies the dialing method for outgoing calls locale locale Selects the two-letter locale for the voice call progress tones and other locale- specific parameters to be used on this voice port The Default is us ex) locale us © SAMSUNG Electronics Co., Ltd.
  • Page 517 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose timing {wait-wink|wink- To change timing parameters. wait|wink-duration|delay- wait-wink - Specifies maximum amound duration|delay-start } timing- of time to wait wink for Outbound Call value wink-wait - Specifies maximum wink-wait duration, in milliseconds, for a wink-start signal Valid entries are from 100 to 5000.
  • Page 518 1004 and the letters A through D. You can also enter the following special characters: - The asterisk (*) or pound sign (#) on standard touch-tone dial pads can be used anywhere in the pattern. © SAMSUNG Electronics Co., Ltd.
  • Page 519: Configuring Analog Did

    Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose - The period (.) acts as a wildcard character. When the timer(T) character is included at the end of the destination pattern, the router collects dialed digits until the interdigit timer expires(5 seconds, by default) or until you dial the termination character(the default is #).
  • Page 520 Enter voice port Configuration Mode slot - Specifies the number of the router slot where the voice module in installed subslot - Specifies the number of subslot in the slot port - Indicates the voice port © SAMSUNG Electronics Co., Ltd.
  • Page 521 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose shutdown Change status of voice port to shutdown signal did {immediate| wink-start| This command enables Direct Inward delay-dial} Dialing on the voice port immediate - if the voice port must use the immediate start protocol...
  • Page 522 Sets the duration of a wink-start signal timing delay-duration timer-value Sets the duration of a delay signal timing delay-start timer-value Sets the delay interval after a incoming seizure in detected no shutdown Change shutdown Status of voice-port to in-Service © SAMSUNG Electronics Co., Ltd.
  • Page 523: Configuring E911 Cama

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring E911 CAMA This section describes Voice-grade Enhanced 911 Switched Access function. CAMA of Submarine is connected to PSAP using Analog FXO Line. E911 CAMA Feature Overview The North American emergency E911 phone system consists of a voice network that is built largely outside of the normal public switched telephone network(PSTN) on which common voice traffic rides.
  • Page 524 CAMA Centralized Automatic Message Accounting NPA Numbering Plan Area NPD Numbering Plan Digit NRF No Record Found PBX Private Branch Exchange PSAP Public Safety Answering Point or Primary Public Safety Answering Point SR Selective Routing © SAMSUNG Electronics Co., Ltd.
  • Page 525 Ubigate iBG3026 Configuration Guide/Ed.00 Address information E911 CAMA Access function should transmit Calling number for the following reasons. 1) For that PSAP is able to search Automatic Location Identification(ALI) database using the Calling Number. 2) If an emergency call is disconnected to E911, it is because CAMA system should be able to display the calling number or connect to the callbacknumber.
  • Page 526 8. <---------------- 911 SWITCH DISCONNECTS -------- ON-HOOK How to Configure CAMA To configure CAMA function using analog FXO, follow the next procedures. Configuration Steps configure terminal − voice-port − dial-peer voice pots − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 527 Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice-port Enter voice port Configuration Mode slot/subslot/port slot - Specifies the number of the router slot where the voice module in installed...
  • Page 528 This value is important when using variable- length dial peer destination patterns(dial plans). The seconds argument is the interdigit timeout wait time in seconds. A valid entry is an integer from 0 to 120. The default is 5. © SAMSUNG Electronics Co., Ltd.
  • Page 529 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose ringing - Specifies the duration that the voice port allows ringing to continue if a call is not answered. The range is from 5 to 60000. The default is 180. wait-release - Specifies the duration that a voice...
  • Page 530 #). The timer character must be a capital T. port slot/subslot/port Maps the dial peer to a specific Port Number exit Exits voice dial-peer configuration mode © SAMSUNG Electronics Co., Ltd.
  • Page 531: Chapter 31. Digital Voice Port

    Ubigate iBG3026 Configuration Guide CHAPTER 31. Digital Voice Port This chapter describes the digital voice port Features. The digital voice port commands discussed in this section configure channelized T1 or E1 connections. Digital Trunk E1-R2 Features Digital Trunk T1-CAS Features...
  • Page 532 Create ds0-groups to manage the DS0 channels on the E1 trunk Configure ds0-group with sub-commands such as ‘timeslots’ and ‘signal cas’ Customize country variants in ‘cas-custom’ configuration mode. Configure basic voice port parameters in ‘voice-port’ configuration mode. © SAMSUNG Electronics Co., Ltd.
  • Page 533 Ubigate iBG3026 Configuration Guide/Ed.00 Network Diagram PSTN SIP, H.323 E1 R2 Figure 31.3 E1-R2 Network Diagram Configure E1 Trunk This section shows the process of configuring physical layer of E1 trunk. Configuring E1 Trunk Settings To make a E1 connection with a neighboring equipment interwoking on the PSTN, the configuration should be set up to a characteristic specific to E1 trunk line.
  • Page 534 E1 # Framing Coding ClkSrc LBO-CableLength State Alarm ---------------------------------- ---------------------------------- 0/1/1 hdb3 long haul 0/1/0 hdb3 long haul configure terminal Enter the global configuration mode to advance the E1 setting. © SAMSUNG Electronics Co., Ltd.
  • Page 535 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose system carrier-type Input the slot# which is qualified to be E1 trunk card. slot # e1 And if the previous carrier-type of the slot is configured E1, rebooting is not required. Otherwise the system will prompt you to reboot the system for the change to take effect.
  • Page 536 © SAMSUNG Electronics Co., Ltd.
  • Page 537 Ubigate iBG3026 Configuration Guide/Ed.00 Voice Port PSTN Voice PSTN Signaling Packet Properties Properties PSTN PCM Voice Properties Figure 31.4 Conceptual view of voice port DS0 group is a concept of a logical voice port controllable in a system by combining several DS0 channels in a digital trunk.
  • Page 538 OUT STATUS ======== == ========== ===== ==== ============ ============= == 0/0/0 -- fxs-ls on-hook idle 0/0/1 -- fxs-ls on-hook idle 0/0/2 -- fxs-ls on-hook idle 0/0/3 -- fxs-ls on-hook idle 0/1/0:10 -- --- down ---- ---- © SAMSUNG Electronics Co., Ltd.
  • Page 539 Ubigate iBG3026 Configuration Guide/Ed.00 Configure R2 on DS0 group R2 Signaling R2 signaling is channelized E1 signaling used in Europe, Asia, and South America. It is equivalent to channelized T1 signaling in North America. There are two types of R2 signaling: line signaling and interregister signaling.
  • Page 540 SLOT CARD TYPE STATUS VS VSLOTNAME [DSP] VoIP_M510 NORMAL 13 VoIP_VSLOT [0/0] FXS_4M NORMAL 7 MM_2_VSLOT [0/1] WTE_2M NORMAL 6 MM_1_VSLOT [0/2]- [1/0]- [1/1]- [2/0]- [2/1]- © SAMSUNG Electronics Co., Ltd.
  • Page 541 Ubigate iBG3026 Configuration Guide/Ed.00 By using show module configuration, it is possible to check out carrier type of the trunk working. v239# show module configuration t1 0/1/0 T1 0/1/0 is ENABLED Alarm Hierarchy: TRUE, Yellow Alarm: DISABLE Framing:ESF, LineCode:B8ZS, ClockSource: INT, LineMode:CSU, LBO:0 db...
  • Page 542 ADMIN up/down: indicates the status of voice port in accordance with the operator’s control. This appears as ‘down’ when an operator executes shutdown command in voice port configuration mode, but ‘up’ when executing ‘no shutdown’. © SAMSUNG Electronics Co., Ltd.
  • Page 543 Ubigate iBG3026 Configuration Guide/Ed.00 OPER indicates status changes while voice port or DS0 channel works. This appears as ‘up’ in case that the voice port or DS0 channel is normally in service, and as ‘down’ while the voice port is out of service due to failure of voice card.
  • Page 544 Timing guard-out is set to 2000 Timing hook-flash-input is set to 480 Timing hook-flash-output is set to 400 Timing percent-break is set to 50 Region Tone is set to United States Dialing Type is set to dialType_mf © SAMSUNG Electronics Co., Ltd.
  • Page 545 Ubigate iBG3026 Configuration Guide/Ed.00 Trunk Voice port Management This section describes management of logical voice ports configured in digital E1 trunk. create a DS0 group delete a DS0 group configure DS0 group Create Trunk Voice Port logically combines DS0 channels in a digital trunk to manage ds0 group.
  • Page 546 This electrically generated echo occurs when the incoming energy from the far end speaker is reflected back toward the speaker as a slightly altered and delayed replication due to impedance mismatch in the hybrid(Figure 31.6). © SAMSUNG Electronics Co., Ltd.
  • Page 547 Ubigate iBG3026 Configuration Guide/Ed.00 The presence of echo occurs whenever the replicated signal delay exceeds 10 msecs, and becomes apparent to the speaker as reflected voice when the delay exceeds as little as 16 msec. It is manifested to the far end as an altered replica of the speaker original.
  • Page 548 Accordingly, initial setup and control of dynamic jitter buffer in order to cope with voice delay is executed on the basis of information configured in dial peer, and set up with the command playout-delay. © SAMSUNG Electronics Co., Ltd.
  • Page 549 Ubigate iBG3026 Configuration Guide/Ed.00 Step Command Purpose configure terminal Enter the global configuration mode. dial-peer voice Enter the dial-peer configuration mode. voip number playout-delay Determines the mode in which the jitter buffer will mode {adaptive | operate for calls on this dial-peer.
  • Page 550 - brazil-brazil country specification. - china-china country specification. - easteurope-easteurope country specification. - hongkong-hongkong country specification. - India-india country specification. - itu-itu country specification. - korea-korea country specification. - thailand-thailand country specification. - mexico-mexico country specification. © SAMSUNG Electronics Co., Ltd.
  • Page 551 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Purpose Step country name Using the country default command, after setting [use-defaults] of the parameters as a default value used in a specific country, and using the command of each CLI, it is possible to tune each command.
  • Page 552 Invert ABCD Inverts the ABCD bits before tx and after rx. determines signal number that may be used in KA signal. determines signal number that may be used in KD signal. © SAMSUNG Electronics Co., Ltd.
  • Page 553: Digital Trunk T1-Cas Features

    Ubigate iBG3026 Configuration Guide/Ed.00 Metering determines if it would create metering pulse for outgoing call. Request category DNIS digits to be collected before requesting line category. When it works as R2 calling side, is used to send call priority defined in R2 to the receiver.
  • Page 554 Figure 31.8 T1 CAS signaling network Loopstart signaling Is the simplest type of CAS signaling, which change the operation type of analog FXS into digital signaling type as it is. Thus, there are more defects than other CAS signaling. © SAMSUNG Electronics Co., Ltd.
  • Page 555 Ubigate iBG3026 Configuration Guide/Ed.00 One of the defects is that there is no way to notify users of far-end disconnect or answer, making users impossible to know about the status. In the case of loop-start signaling, FXS only uses the A-bit and the FXO side only uses the B-bit to communicate call information..
  • Page 556 Prerequisites Before you attempt this configuration, ensure that you meet these prerequisites: T1-CAS signaling applies to T1 trunk only In order to run T1-CAS signalings on the UBIGATE IBG3026 routers, these hardwards are required: WTE-2M or WTE-4 − Define the command cas-ds0-group on the T1 trunk(module) to create ds0- group.
  • Page 557 Ubigate iBG3026 Configuration Guide/Ed.00 For T1 linecoding, choose either B8ZS or AMI. For the T1 clock source, choose either internal or line. Keep in mind that different PBXs have different requirements on the clock source. Configuration of clock source is only used in module command.
  • Page 558 OUT STATUS ======== == ========== ===== ==== ============= ============ == 0/0/0 -- fxs-ls on-hook idle 0/0/1 -- fxs-ls on-hook idle 0/0/2 -- fxs-ls on-hook idle 0/0/3 -- fxs-ls on-hook idle 0/1/0:10 -- --- down ---- ---- © SAMSUNG Electronics Co., Ltd.
  • Page 559 Ubigate iBG3026 Configuration Guide/Ed.00 Trunk Status Monitoring This procedure is much like the same as the configuration of E1 trunk. Details in each following section refer to ‘Trunk Status Monitoring’. Physical Layer Status Using show voice card all, check all the voice card installed in the system...
  • Page 560 Groups) created in digital trunk. It displays all the voice ports created in the system including DS0 group. Logical Voice Port In Detail Using show voice port port#, check the detailed setup value of parameters used in the particular voice port. © SAMSUNG Electronics Co., Ltd.
  • Page 561 Ubigate iBG3026 Configuration Guide/Ed.00 Trunk Voice port Management This section describes management of logical voice ports configured in digital E1 trunk. create a DS0 group delete a DS0 group configure DS0 group Create Trunk Voce Port It manages with ds0 group by logically combining DS0 channel, which belongs to digital trunk.
  • Page 562 Optional is the setup-represetative ID for voice-port, and names text string. exit Exit the voice-port configuration mode. show voice port Checks out if the values set in voice-port are slot/sub-slot/port:ds0- normally set up. group-no © SAMSUNG Electronics Co., Ltd.
  • Page 563 Ubigate iBG3026 Configuration Guide/Ed.00 Configure Advanced Trunk Voice Port Parameters It is the same as creation of E1 trunk voice port, and for T1 CAS signaling, and the following advanced setting is possible. T1-CAS Bit Modification Settings The bit modification commands for digital voice ports modify sent or received bit patterns.
  • Page 564 911) calls. ANI is an a series of digits in the call to identify the telephone number of the calling device. In other words, ANI identifies the number of the calling party. © SAMSUNG Electronics Co., Ltd.
  • Page 565 Ubigate iBG3026 Configuration Guide/Ed.00 Step Command Purpose voice-port slot/sub- To set up the attribute values of created ds0- slot/port:ds0-group- group, enter voice-port configuration mode. shutdown Shuts down the voice port to manipulate ‘timeslots’ and ‘signal cas’ command. calling-number Specifies ANI to be sent out when the T1-CAS...
  • Page 566 If seconds is set to 0, it means ‘infinite’ ringing. no shutdown Activate the voice port at the final step of configuration Exit © SAMSUNG Electronics Co., Ltd.
  • Page 567 Ubigate iBG3026 Configuration Guide/Ed.00 Timing Settings To change timing parameters, use the following commands as appropriate, in voice-port configuration mode. Step Command Purpose voice-port slot/sub- To set up the attribute values of created ds0- slot/port:ds0-group- group, enter voice-port configuration mode.
  • Page 568 As shown in the POTS diagram above, Loop Start signaling uses only two basic states: Ringing(sent to the FXO interface) and Off-Hook(sent to the FXS interface). Loop Start signaling is the most common type of signaling deployed in the PSTN. © SAMSUNG Electronics Co., Ltd.
  • Page 569 Ubigate iBG3026 Configuration Guide/Ed.00 Although it is very common, problems can occur whenever automatic answering equipment is used as the phone. Since there is no way for the CO to tell the phone to hang up(go On-Hook), if the answering equipment never times out then the circuit can be permanently seized.
  • Page 570 To set up the attribute values of created ds0- slot/port:ds0-group- group, enter voice-port configuration mode. if ds0-group was created normally, there is no error in this CLI command. shutdown Shuts down the voice port to manipulate ‘timeslots’ and ‘signal cas’ command. © SAMSUNG Electronics Co., Ltd.
  • Page 571 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeslots timeslot-list timeslots-Specifies the single time slot number, single range of numbers, or multiple ranges of numbers separated by commas. For T1, allowable values are from 1 to 24. Examples are as follows:...
  • Page 572 To set up the attribute values of created ds0-group, slot/port:ds0-group- enter voice-port configuration mode. if ds0-group was created normally, there is no error in this CLI command. shutdown Shuts down the voice port to manipulate ‘timeslots’ and ‘signal cas’ command. © SAMSUNG Electronics Co., Ltd.
  • Page 573 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose timeslots timeslot- timeslots-Specifies the single time slot number, list single range of numbers, or multiple ranges of numbers separated by commas. For T1, allowable values are from 1 to 24. Examples are as follows:...
  • Page 574 Figure 31.10 Wink-start method signaling sequence Immediate-Start signaling Originating Destination M-wire E-wire M-wire E-wire 1111 seizure Min 120 msec Max 10 sec digits digits 1111 Min 200 msec answer Figure 31.11 Immediate-start method signaling sequence © SAMSUNG Electronics Co., Ltd.
  • Page 575 Ubigate iBG3026 Configuration Guide/Ed.00 Delay-Dial signaling Originating Destination M-wire E-wire M-wire E-wire 1111 seizure Min 120 msec Max 6 sec 1111 Start dial Duration 200 msec 0000 Min 70 msec Max 10 sec digits digits 1111 Min 200 msec answer Figure 31.12 Delay-dial method signaling sequence...
  • Page 576 Transmitted state Signal Transmitted Signal Originating Terminating direction duration Idle continuous Connect(seizing) continuous Delay-dialing continuous Start-dialing continuous Answer continuous Hang-up continuous (Clear-back) Disconnect continuous 0 or 1 (Clear-forward) Ring-forward 65-135 msec 0 or 1 Busy, Re-order © SAMSUNG Electronics Co., Ltd.
  • Page 577 Ubigate iBG3026 Configuration Guide/Ed.00 Address Signaling Is in compliance with ITU-T Q.316~Q.326 recommendation. Signals Frequencies(Hz) Signals Frequencies(Hz) KP(start-of-pulsing) 1100 + 1700 Digit 8 900 + 1500 Digit 1 700 + 900 Digit 9 1100 + 1500 Digit 2 700 + 1100...
  • Page 578 Choose T1-R1 signaling method. signal cas r1- r1-itu-R1 signaling compliant with ITU-T modifited recommendation. r1-modified-R1 signaling variants no shutdown Activate the voice port at the final step of configuration exit Exit the voice-port configuration mode. © SAMSUNG Electronics Co., Ltd.
  • Page 579: Chapter 32. Isdn

    Ubigate iBG3026 Configuration Guide CHAPTER 32. ISDN Overview Integrated Services Digital Network(ISDN) is composed of data service and telephone service provided by telephone carrier. Since ISDN includes digitalization of telephone, it can transmit voice, data, text, graphic, music, video and data transmissible by various telephone line. The appearance of ISDN enables standardizing subscriber service standard, user network interface, the capacity of network and inter-network.
  • Page 580 A variety of call-establishment, call- termination, information, and miscellaneous messages are specified, including SETUP, CONNECT, RELEASE, USER INFORMATION, CANCEL, STATUS, and DISCONNECT. These messages are functionally similar to those provided by the X.25 protocol. © SAMSUNG Electronics Co., Ltd.
  • Page 581 Ubigate iBG3026 Configuration Guide/Ed.00 Calling Calling Called Called Called Router router call Pick up Set up Set up Set up ACK Information Call Proceeding Ringing Alerting Alerting Pick up Ring back indication Connect Connect Stop ring back indication Connect ACK...
  • Page 582: Configuring Isdn Bri

    Create interface bundle To create the interface bundle, use the following command. Step Command Purpose configure terminal Configures to set up bundle. Interface bundle Designates bundle name. bundle-name Link bri 0/0/0:1 Sets the pertinent physical link. © SAMSUNG Electronics Co., Ltd.
  • Page 583: Table 32.1 Switch-Type Parameter Description (Bri)

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring the ISDN BRI Switch To configure the switch type, use the following command. Step Command Purpose configure terminal Configures to set up bundle. Interface bundle sets up bundle name. bundle-name Link bri 0/0/0:1 sets up the pertinent physical link.
  • Page 584 Connect message. overlap-receiving (Optional) Specify if the interface will do Overlap Receiving. tei-mode [point-to- (Optional) Configure the type of tei negotiation point|point-to- multipoint] tei-vale num (Optional) Configure the tei value for Point-to- Point tei mode. © SAMSUNG Electronics Co., Ltd.
  • Page 585 Ubigate iBG3026 Configuration Guide/Ed.00 Actviate the ISDN To activate the ISDN, use the following command. Step Command Purpose configure terminal Configures to set up bundle. Interface bundle Sets up bundle name. bundle-name Link bri 0/0/0:1 Sets up the pertinent physical link.
  • Page 586 Incoming-voice Sets up for voice. Calling-number calling- Specifies the calling party number number activate Activates ISDN. exit Voice-port 0/0/0:D Configure to set up voice port No shutdown Turns on the port. © SAMSUNG Electronics Co., Ltd.
  • Page 587 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Inclusion of the Sending Complete Information Element In some geographic locations, such as Hong Kong and Taiwan, ISDN switches require that the Sending Complete information element be included in the outgoing Setup message to indicate that the entire number is included.
  • Page 588 ISDN Information: bri000 -------------------------- caller answer1 answer2 called-number spid1 spid2 idle-timeout connect delay keep-alive 10000 disconnect-cause switch-type basic-은 tei-mode point-to-multipoint Press any key to continue (q : quit | enter : next line) : © SAMSUNG Electronics Co., Ltd.
  • Page 589 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Purpose Show isdn status WORD Displays the ISDN Line Status v239# show isdn status bri000 ==== NETWORK side configuration === Layer 1 Status: NOT ACTIVE Layer 2 Status: NOT ACTIVE TEI MODE MULTIPOINT Layer 3 Status:...
  • Page 590 ISDN Layer 2 Timer Values 7 Outstanding I Frames N200 = 3 Max number of retransmission of a frame N203 = 260 Max number of TEI notification retransmits T200 = 2 Seconds T203 = 10 Seconds © SAMSUNG Electronics Co., Ltd.
  • Page 591 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Purpose Debug isdn q931-timers Displays q931 timers. WORD v239# show isdn q931-timers bri000 ISDN Layer 3 Timer Values T303 = 4 Seconds T304 = 30 Seconds T305 = 30 Seconds T308 = 4 Seconds...
  • Page 592 Setup Rx Setup AckRx Alert Rx Call P Rx Conn Rx Con Ack Rx Prog Rx Disc Rx Rel Rx Rel Cmp Rx Stat Rx Stat Enq Rx Info Rx Stat Enq Rx Stat Enq Rx © SAMSUNG Electronics Co., Ltd.
  • Page 593: Configuring Isdn Pri

    Ubigate iBG3026 Configuration Guide/Ed.00 Configuring ISDN PRI Requirements Prerequisites Before you attempt this configuration, ensure that you meet these prerequisites: If the router will be the only device attached to the PRI, ask for point-to- point service and a data-only line.
  • Page 594: Table 32.2 Switch-Type Parameter Description (Pri)

    Primary-ccitt CCITT/ITU-T Primary Rate Switch Type Configuring Voice type To configure the voice type, use the following command. Step Command Purpose configure terminal Configures to set up bundle. Interface bundle Sets up bundle name. bundle-name © SAMSUNG Electronics Co., Ltd.
  • Page 595 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose Link [pri_t1|pri_e1] Sets up the pertinent physical link. 0/0/0:1 Isdn Sets up ISDN Switch-type switch-type Sets up the pertinent switch-type with the content like the following table. Incoming-voice Sets up for voice.
  • Page 596 0/0/0:1 isdn Sets up ISDN Switch-type switch-type Sets up the pertinent switch-type with the content like the following table. Incoming-voice Sets up for voice. Calling-number calling- Specifies the calling party number number activate Activates ISDN. © SAMSUNG Electronics Co., Ltd.
  • Page 597 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Inclusion of the Sending Complete Information Element In some geographic locations, such as Hong Kong and Taiwan, ISDN switches require that the Sending Complete information element be included in the outgoing Setup message to indicate that the entire number is included.
  • Page 598 ISDN Information: bri000 -------------------------- caller answer1 answer2 called-number spid1 spid2 idle-timeout connect delay keep-alive 10000 disconnect-cause switch-type basic-은 tei-mode point-to-multipoint Press any key to continue (q : quit | enter : next line) : © SAMSUNG Electronics Co., Ltd.
  • Page 599 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Purpose Show isdn status Displays the ISDN Line Status WORD v239# show isdn status pri000 ==== NETWORK side configuration === Layer 1 Status: NOT ACTIVE Layer 2 Status: NOT ACTIVE TEI MODE POINT-TO-POINT Layer 3 Status:...
  • Page 600 T200 = 2 Seconds T203 = 10 Seconds Debug isdn Displays q931 timers. q931-timers WORD v239# show isdn q931-timers pri000 ISDN Layer 3 Timer Values T303 = 4 Seconds T304 = 30 Seconds © SAMSUNG Electronics Co., Ltd.
  • Page 601 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Purpose Debug isdn q931-timers T305 = 30 Seconds WORD T308 = 4 Seconds T310 = 40 Seconds T313 = 4 Seconds T316 = 120 Seconds T319 = 4 Seconds T322 = 4 Seconds Debug isdn Displays q931 statistics.
  • Page 602 Setup Rx Setup AckRx Alert Rx Call P Rx Conn Rx Con Ack Rx Prog Rx Disc Rx Rel Rx Rel Cmp Rx Stat Rx Stat Enq Rx Info Rx Stat Enq Rx Stat Enq Rx © SAMSUNG Electronics Co., Ltd.
  • Page 603: Dial Peer Management

    Ubigate iBG3026 Configuration Guide CHAPTER 33. Routing and Digit Manipulation This chapter describes how to implement dial plans by configuring dial peers and using dial peer matching, digit manipulation, access group, trunk-group, PLAR and COR features. Dial Peer Management Dial Peer Overview To configure dial peer is an important task for establishing dial plan and transmitting voice on packet network.
  • Page 604 Ubigate iBG3026. Both figure 37.2 and figure 37.3 are the cases to be applied to call through packet network. If originating and terminating POTS interface are in the same Ubigate iBG3026, it is sufficient with two POTS dial peers. Source...
  • Page 605 Ubigate iBG3026 matches POTS dial peer with inbound call leg. Also it matches VoIP dial peer with outbound call leg. Against incoming call from packet network, Ubigate iBG3026 matches POTS dial peer to make a call and it matches VoIP dial peer with inbound call leg to apply configuration elements such as codec.
  • Page 606 Incoming voice port with configured voice port Ip address with configured session-target. The Ubigate iBG3026 should be met with one condition among the mentioned conditions. To match dial peer, it is sufficient if a single condition is met. © SAMSUNG Electronics Co., Ltd.
  • Page 607 When it is POTS dial peer, input port command to transmit call. When it is VoIP dial peer, input session target command to transmit call. In the case of POTS incoming call, Ubigate iBG3026 selects outbound dial peer based on whether it is DID of inbound POTS dial peer. Both cases support longest matching.
  • Page 608 Configuring Dial Peers Configuring Dial Peers for Call Legs When call enters Ubigate iBG3026, it is necessary to do dial-peer matching for routing. On call bound to packet network after entering POTS interface, Ubigate iBG3026 should do matching POTS dial-peer against inbound call leg.
  • Page 609 4:10.1.1.2 Figure 33.6 Dial Peers from the Perspective of the Terminating Ubigate iBG3026 The above setup information shows that in VoIP dial peer of Ubigate iBG3026 B the last four digits of desitination parttern is replaced as wild card.
  • Page 610 Inbound call leg does not match, use the already defined default dial peer as inbound dial peer. Dial peer 2 of Ubigate iBG3026 B in the figure 37.6 is necessary when call is tried with A only in Ubigate iBG3026 B.
  • Page 611 Ubigate iBG3026 Configuration Guide/Ed.00 In most cases, it is sufficient in connecting call with the basic value of POTS dial peer configuration command except the above setup. To configure POTS dial peer, use the following command starting in global configuration mode.
  • Page 612 {all | default | extra | (Optional) Configures the digit-forwarding num num } method used by the dial peer. The valid range for the number of digits forwarded(num-digit) Example) is 0 through 32. sbm/configure/…/pots num# forward-digit all © SAMSUNG Electronics Co., Ltd.
  • Page 613 Valid entries for the string argument are 0 string through 9. Configuring VoIP Dial Peers VoIP dial peer makes possible call with the particular Ubigate iBG3026 telephony device. To set VoIP dial peer, the followings should be done. Assign dial peer with the tag number only.
  • Page 614 The dns:host-name keyword and argument Example) indicate that the domain name server will sbm/configure/…/voip num# resolve the name of the IP address. Valid session-target ip-address entries for this parameter are characters ipv4:10.10.10.10 representing the name of the host device. © SAMSUNG Electronics Co., Ltd.
  • Page 615 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose Defines the codec for the dial peer. codec { g711alaw | Ptime means the time between frames g711ulaw | g723r53 | transmitted. The unit is msec and has the g723r63 | g726 | g729 }...
  • Page 616 Followings are commands that could be configured in ‘voice class h323’ mode. Command Purpose h225 call-start {fast|slow|system} Specifies the H.323 call setup method. h225 early-h245 {on|off|system} Specifies whether to perform the normal H.245 procedure before or after CONNECT message. © SAMSUNG Electronics Co., Ltd.
  • Page 617 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Command Purpose h225 h245-tunnel {on|off|system} Specifies the H.245 Tunnelling support. h225 T301 seconds Maximum time to wait for CONNECT or RELCOMP message, after receiving ALERT message. h225 T303 seconds Maximum time to wait for CALLPROCEEDING or...
  • Page 618 1 where the lower the number, the higher the preference. tech-prefix string (Optional) Specifies that a particular technology prefix be Example) prepended to the destination sbm/configure.../voip num# tech-prefix #34 pattern of this dial peer. © SAMSUNG Electronics Co., Ltd.
  • Page 619 VoIP dial peer is routed to session target. Against Outbound VoIP dial peer, destination pattern determines dialed digit Ubigate iBG3026 should collect and transmit. The entire dial peer created in Ubigate iBG3026 should possess destination pattern. Destination pattern should possess full telephone number or the partial number together with wildcard digit(ex: period-‘.’).
  • Page 620: Table 33.1 Wild Card Symbol

    The only wild card symbol usable in both answer-address and incoming-called-number is period(.). Session Target Session target is the network address of remote Ubigate iBG3026, which is a call intended to transmit. Set up in VoIP dial-peer with ‘session target’ command. Destination-pattern is telephone number of telephone attempting to connect in outbound dial-peer.
  • Page 621 Ubigate iBG3026 Configuration Guide/Ed.00 Source Destination VoIP dial peer VoIP dial peer destination target session target iBG3026 A iBG3026 B IP Network 579… 389… Ethernet port Voioe port Figure 33.8 Relationship Between Destination Pattern and Session Target Session target is used for inbound matching. When Voip incoming does not match due to number condition, try matching the set session target and the ip address.
  • Page 622 POTS dial-peer, called number attempts to automatically match with destination pattern to find outbound call leg. If DID is not setup on the moment of incoming call, Ubigate iBG3026 transmits dial tone to caller and collects additionally numbers to find outbound dial-peer.
  • Page 623 3 If priority should be given between dial peers within the set hunt group, use preference command. Ubigate iBG3026 first makes possible call in terms of dial peer, which possesses preference in hunt group. Low preference number gets higher priority. When the same preference number in hunt group occurs, it is selected randomly.
  • Page 624 Dial peer checks number type matching in addition to the condition such as incoming called number, answer address, destination pattern, port and ip- addresss. It determines dial-peer number type with ‘numbering-type’ dial- peer configuration command. © SAMSUNG Electronics Co., Ltd.
  • Page 625: Dial Plan Mode

    Ubigate iBG3026 Configuration Guide/Ed.00 The following number type can be used. Abbreviated - Abbreviated representation of the complete number as supported by this network. International - Number called to reach a subscriber in another country. National - Number called to reach a subscriber in the same country, but outside the local network.
  • Page 626: Dialed Number Analysis

    Input T-indicator representing timeout at the end of destination of outbound voice-network dial peer and wait for inputting additional digit after receiving the Ubigate iBG3026-fixed length of dial string. Timeout letter is ‘T’ in capital letter. The following dial-peer configuration is the example of configuring T-indicator to enable variable-length dial string.
  • Page 627: Digit Manipulation

    Digit Strip and Prefixes When the Ubigate iBG3026 of the receiver side matches with dial string as outbound POTS dial peer, Ubigate iBG3026 basically takes out digit matching specifically with destination pattern. The remaining digit is transmitted to either PBX or PSTN.
  • Page 628 ‘Forward-digits all’ command intends to transmit the entire part when the length of dialed digit is larger than that of destination- pattern. In the case that destination-pattern of dial-peer is variable-length such as ‘3438...T’ and ‘3438T’, it is impossible to transmit. © SAMSUNG Electronics Co., Ltd.
  • Page 629 The figure 33.9 shows the network of the small company which desires to use VoIP for integrating the telephone network in the current ip network. Destination-pattern of Ubigate iBG3026 A is 408 115-xxxx, 408 116-xxxx, 408 117-xxxx. Destination-pattern against Ubigate iBG3026 B is 729 555- xxxx.
  • Page 630: Table 33.2 Number Expansion Commands

    If the call is routed through the PSTN to reach the other site, the iBG3026 must use translation rules to convert the five digit extension into the 10-digit format that is recognized by the central office switch. © SAMSUNG Electronics Co., Ltd.
  • Page 631 Ubigate iBG3026 Configuration Guide/Ed.00 Translation rule Set can be configured with translation-rule up to 15 sets. The kind of rule includes both match & replace rule and reject rule. The pattern expression in each rule uses the expression characteristic of SED like.
  • Page 632: Table 33.3 Characters Of Translation Rule

    Match any single character. Repeat the previous regexp zero or more times. Repeat the previous regexp zero or more times. Repeat the previous regular expression zero or one time (use CTRL-V in order to enter). Groups regular expressions. © SAMSUNG Electronics Co., Ltd.
  • Page 633 Ubigate iBG3026 Configuration Guide/Ed.00 Configuring Translation Profile Creating translation profile is possible by using ‘voice translation-profile’ global configuration command. Designating rule set in called number and calling number is possible by using ‘translate’ voice translation-profile command. Step Command Purpose voice translation-profile prof- Configuring translation profile.
  • Page 634 Applying Translation Rule in Voice Port number} rule-set-id Example) sbm/…/voice-port 0/1/0# translate called-number 1 Applying Translation in Trunk Group Command Purpose translation-profile Applying Translation Profile in Trunk Group {incoming|outgoing} trans-prof- name Example) sbm/…/trunk-group 1# translation- profile outgoing prof1 © SAMSUNG Electronics Co., Ltd.
  • Page 635 Ubigate iBG3026 Configuration Guide/Ed.00 Applying Translation in Access Group Command Purpose translation-profile Applying Translation Profile in Access Group {incoming|outgoing} trans-prof- name Example) sbm/…/access-group ag1# translation-profile incoming prof1 Applying Translation in VoIP Incoming Calls Command Purpose translation-profile trans-prof-name Applying Translation Profile in VoIP incoming calls.
  • Page 636: Access Group Management

    Creates access group. The name of group must be come up with in 31 letters. Example) sbm/configure# voice access-group accgrp1 access-list num Creates access list. Users can create 8 lists ranging from 0 to 7 Example) sbm/… /access-group name# access-list 0 © SAMSUNG Electronics Co., Ltd.
  • Page 637 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose access-list-permit ipv4:ip- Designates permit ip within the list. address [host] If permit ip is not designated, permit permit ip against the entire call. Example) The meaning of ‘255’ in each class of ip sbm/…...
  • Page 638: Trunk Group Management

    When finding the empty channel takes place, the pertinent trunk group is used for outbound call. The following example shows the one selecting trunk group. Example 1 dial-peer voice pots 1 trunk-group 101 1 trunk-group 102 2 trunk-group 103 3 © SAMSUNG Electronics Co., Ltd.
  • Page 639 Hunt scheme is the selection method for selecting voice port or channel. Trunk group having various members uses hunt scheme to find idle channel for routing outgoing call. Hunt scheme provided in Ubigate iBG3026 is random, round-robin, sequential. Assume the three trunk groups. A has the preference value which is the smallest.
  • Page 640 If B does not have any available even-numbered channels, the search tries to find an even-numbered channel in the next highest trunk group member, which is C. If successful, that channel is used for the call routing. A new idle channel request would start with A. © SAMSUNG Electronics Co., Ltd.
  • Page 641: Plar

    Ubigate iBG3026 Configuration Guide/Ed.00 If C has no available even-numbered channels, the search repeates the process to find an odd-numbered channel. In this instance, the search would start again with A. PLAR PLAR Overview PLAR(Private-line Automatic Ringdown) is autodialing mechanism forming the eternal connection between voice interface of the opposite PBX and voice interface without dialing.
  • Page 642 # configure terminal voice-port slot/subslot/port Enters voice-port configuration mode. Example) /configure# voice-port 0/0/0 connection plar digit-string Enters connection mode for voice port Example) /configure/voice-port(slot/subslot/port)# connection plar 01034381234 exit Exits the current mode Example) /configure/voice-port(slot/subslot/port)# exit © SAMSUNG Electronics Co., Ltd.
  • Page 643 By using this option, local voice port provides the local response before the remote voice port receives answer. The PLAR-OPX connection makes possible call before user makes dialing. The Ubigate iBG3026 uses the digits that follow the command internally to send to a dial peer Voice port PLAR...
  • Page 644 Exits the current mode Example) /configure/voice-port(slot/subslot/port)# exit PLAR and PLAR-OPX are able to configure in SCM interworking mode. When PLAR and PLAR-OPX were configured on SCM interworking mode, you don’t need to set up the VoIP dial-peer. © SAMSUNG Electronics Co., Ltd.
  • Page 645: Cor

    Ubigate iBG3026 Configuration Guide/Ed.00 Introduction This is the function that decides call admission on the basis of incoming, outgoing cor list designated in inbound, outbound dial peer. This function provides flexibility when planning the network, and enables a user to block a call, and limits distinctively against different callers.
  • Page 646 Example) # configure terminal dial-peer cor custom Enters COR configuration mode. Example) sbm/configure# dial-peer cor custom name cor-name Defines COR name. This step should be repeated as many as COR names. Example) sbm/configure/…/custom# name corname1 © SAMSUNG Electronics Co., Ltd.
  • Page 647 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose exit Exits COR configuration mode. Example) sbm/configure/…/custom# exit dial-peer cor list cor-list-name Defines COR list. Example) sbm/configure# dial-peer cor list corlist1 member cor-name Designates member included in COR list. This step should be repeated Example) under the necessity.
  • Page 648 = `1001`, answer-address = ``, preference = 0, numbering type = 'none', incoming called-number = ``, connections/maximum = 0/ unlimited, decision limit number = '3', huntstop = `disabled`, incoming COR list = `list1`, outgoing COR list = `list2`, … © SAMSUNG Electronics Co., Ltd.
  • Page 649: Chapter 34. Extended Voip Services

    Ubigate iBG3026 Configuration Guide CHAPTER 34. Extended VoIP Services This chapter provides an overview of Voice over IP(VoIP) services. The chapter contains the following sections: Fax Relay with VoIP Supplementary services for Call Manager Interworking mode Supplementary services for Survivable telephony mode...
  • Page 650 Example) # configure terminal dial-peer voice voip Enters VoIP dial-peer configuration mode. Example) /configure#dial-peer voice voip 1000 fax protocol pass-through specifies a high-bandwidth codec for fax relay with VoIP Example) /configure/dial-peer/voice/voip 1000#fax protocol pass-through g711alaw © SAMSUNG Electronics Co., Ltd.
  • Page 651 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose exit Exits the current mode Example) /configure/dial-peer/voice/voip 1000#exit ‘fax protocol pass-through’ command in ‘voice-service configuration’ mode Configuration Steps configure terminal − voice service voip − fax protocol pass-through − exit − Detailed Steps...
  • Page 652 T.38 fax packets to be sent Example) -fallback: {none | /configure/dial-peer/voice/voip 1000#fax pass-through- protocol t38 redundancy 0 fallback pass- g711alaw | through-g711ulaw pass-through- g711ulaw } fax rate specifies fax transmission speed. Example) /configure/dial-peer/voice/voip 1000#fax rate 14400 © SAMSUNG Electronics Co., Ltd.
  • Page 653 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose fax error-correction-mode enables fax-relay Error Correction Mode(ECM). to Example) disable ECM, use ‘no fax /configure/dial-peer/voice/voip 1000#fax error-correction-mode’ error-correction-mode command exit Exits the current mode Example) /configure/dial-peer/voice/voip 1000#exit ‘fax protocol t38’ command in ‘voice-service configuration’ mode...
  • Page 654: Supplementary Services For Call Manager Interworking Mode

    Supplementary Services for Call Manager Interworking Mode Service Descriptions Ubigate iBG3026 provides supplementary services like Table 34.1 through control of Call Manager in Call Manager interworking mode. For the methods of using services not mentioned in this document, see the Call Manager Operation Manual.
  • Page 655 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Service Description Call Hold and Retrieve This is the function allows you to place a call on hold, try a new call, and retrieve the call. Call Park The Call Park feature allows you to place a call on hold, so it can be retrieved from another phone in the Call Manager system.
  • Page 656 A or B are called and they are busy; if a subscriber presses the number of A or B followed by the feature code, the conference call is established between A, B and such subscriber. © SAMSUNG Electronics Co., Ltd.
  • Page 657 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Service Description Privacy If a subscriber does not want interruption during call with other subscriber, activate this function. Then the subscriber will be not interrupted by Call Intrusion and Call Override function of other subscribers. This function is available only for the subscribers that an operator registered a privacy function.
  • Page 658 # configure terminal voice-port slot/subslot/port Enters Voice-Port configuration mode. Example) /configure# voice-port 0/1/2 [no] caller-id enable [type1 | type2] Enables or Disables caller-id feature. Example) /configure/voice-port(0/1/2)# caller-id enable type1 Exit Exits the current mode Example) /configure/voice-port(0/1/2)# exit © SAMSUNG Electronics Co., Ltd.
  • Page 659 Configuring Feature Codes To support smooth provision of services, the following feature codes should be set in a Ubigate iBG3026. The feature codes regarding Call Pickup and Call Waiting are commonly used regardless of the operation mode. For more information on feature code settings, see the Command Reference.
  • Page 660: Supplementary Services For Survivable Telephony Mode

    Supplementary services for Survivable Telephony Mode Service Descriptions Even in Survivable telephony mode, Ubigate iBG3026 independently provides some supplementary services provided by Call Manager control in Call Manager interworking mode. The services provided in survivable telephony mode are like Table 34.2 below.
  • Page 661 Ubigate iBG3026 Configuration Guide/Ed.00 Table 34.2 Supplementary services for Survivable telephony mode (Continued) Service Description Call Pickup Group It is the function that another subscriber can answer the phone when a call is terminated to an extension subscriber and rings. It is the function that when a call is terminated to a subscriber from the same group picks up the call by dialing a specific feature code.
  • Page 662 CHAPTER 34. Extended VoIP Services Configuring Services Ubigate iBG3026 does not require a user to set up separately for services of survivable telephony mode. In the Call Manager Interworking mode, it controls services on the basis of subscriber profiles downloaded from Call Manager.
  • Page 663: Supplementary Services For Stand Alone Mode

    Ubigate iBG3026 Configuration Guide/Ed.00 Supplementary Services for Stand Alone Mode Service Descriptions Ubigate iBG3026 independently provides services in Stand Alone mode as Table 34.3 below. Table 34.3 Supplementary services for Stand Alone mode Service Description CLID Calling Line Identification(CLID) function displays a calling party’s phone number on a terminal of a called party.
  • Page 664 Enters global configuration mode. Example) # configure terminal voice-port slot/subslot/port Enters Voice-Port configuration mode. Example) /configure# voice-port 0/1/2 [no] caller-id enable [type1 | type2] Enables or Disables caller- id feature. Example) /configure/voice-port(0/1/2)# caller-id enable type1 © SAMSUNG Electronics Co., Ltd.
  • Page 665 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose Exit Exits the current mode Example) /configure/voice-port(0/1/2)# exit How to Configure Voice-Port for CLIDB To block Caller Id in an originating call of FXS phone, follow the procedures as below. Configuration Steps configure terminal −...
  • Page 666 Example) /configure# dial-peer voice pots 11 [no] call-pickup-group group-number Specifies call pickup group number for Call Pickup Example) service. /configure/ dial-peer/voice/pots 11# call- pickup-group 8400 Exit Exits the current mode Example) /configure/ dial-peer/voice/pots 11# exit © SAMSUNG Electronics Co., Ltd.
  • Page 667 Ubigate iBG3026 Configuration Guide/Ed.00 How to Configure Dial-Peer for Call Waiting To enable Call Waiting and Retrieve service, follow the procedures as below. Configuration Steps configure terminal − dial-peer voice pots − call-waiting − exit − Detailed Steps Step Command...
  • Page 668 Example) /configure/voice-port(0/1/2)# ring cadence on-net bellcore01 ring cadence off-net ring-type Specifies Off-Net Ring type for the voice port. Example) /configure/voice-port(0/1/2)# ring cadence off-net bellcore01 Exit Exits the current mode Example) /configure/voice-port(0/1/2)# exit © SAMSUNG Electronics Co., Ltd.
  • Page 669: Chapter 35. Call Admission Control

    This function does not operate when applied to the whole Ubigate iBG3026 system. This is because the call limitation function that permits max calls is used in the Call Manager.
  • Page 670 Configure max call Example) configure # call-admission max-call Exit Exits the current mode Example) configure # exit call-admission max-calls 2000 In Call Manager interworking mode the mechanism of Max call for system is not used. © SAMSUNG Electronics Co., Ltd.
  • Page 671 Ubigate iBG3026 Configuration Guide/Ed.00 DS0 Limitation DS0 Limitation limits available physical interface. To limit a certain amount of max calls coming through PBX, it blocks a part of the channels in E1/T1 trunk, which is connected to PBX, in order to decrease DS0 in the system.
  • Page 672 D dial-peer voice voip 1 224xxxx destination-pattern 223xxxx max-call 5 exit Figure 35.2 max call per dialpeer In Call Manager interworking mode the mechanism of Max call per dial- peer is not used. © SAMSUNG Electronics Co., Ltd.
  • Page 673: Table 35.1 Bandwidth Per Codec

    Ubigate iBG3026 Configuration Guide/Ed.00 Voice Bandwidth When WAN link is used for processing VoIP call, this is the function to calculate media bandwidth used as WAN link by using voice bandwidth set up, and control in order that the bandwidth that is more than the permitted bandwidth may not be used in VoIP media.
  • Page 674 How to set LVBO Convert Voice-port to busyout state by force.(busyout forced) Convert time slots on E1/T1 trunk to busyout state by force.(ds0 busyout) With specific conditions things can be converted to busyout by monitoring.(busyout monitor) © SAMSUNG Electronics Co., Ltd.
  • Page 675 Ubigate iBG3026 Configuration Guide/Ed.00 If you want to check current busyout monitor list, use ‘show voice busyout monitor’ command. Using show voice busyout port, a user is able to check voice port list currently busyout set and information on the reason why voice port is busyported.
  • Page 676 [in-service] no busyout monitor interface-name interface-number interface-name Identifies an interface name to be monitored for the voice port busyout function. There are bundle, and loopback that can be used as interface name. © SAMSUNG Electronics Co., Ltd.
  • Page 677 Ubigate iBG3026 Configuration Guide/Ed.00 interface-number Identifies an interface to be monitored for the voice port busyout function. in-service(Optional) Configures the voice port to be busied out when any monitored interface comes into service(its state changes to up). If the keyword is not entered, the voice port is busied out when all monitored interfaces go out of service(their state changes to down).
  • Page 678 Ethernet for interface type. The followings are busyout monitor commands used in voice class busyout configuration mode. busyout monitor ethernet interface-number [in-service] no busyout monitor ethernet interface-number busyout monitor bundle interface-name [in-service] no busyout monitor bundle interface-name © SAMSUNG Electronics Co., Ltd.
  • Page 679 Ubigate iBG3026 Configuration Guide/Ed.00 busyout monitor sip-server no busyout monitor sip-server busyout monitor gatekeeper no busyout monitor sgatekeeper busyout monitor ip-address dest-ip-address no busyout monitor ip-address dest-ip-address busyout monitor ethernet: add ethernet interface to busyout monitoring class busyout monitor bundle:...
  • Page 680: Resource-Based Cac

    To monitor utilization which is the global resource of Ubigate iBG3026 gateway. A user can set it up using ‘call-admission threshold global’ command that is the global CAC configuration, and release it using ‘no’...
  • Page 681 To monitor memory which is the global resource of Ubigate iBG3026 gateway. A user can set it up using ‘call-admission threshold global’ command that is the global CAC configuration, and release it using ‘no’...
  • Page 682: Call-Admission Spike

    The range is from 1 to 2, 147, 483, 647. steps-The number of steps in a sliding window. The range is from 3 to 10. size-The size of the step in milliseconds. The range is from 100 to 2000. © SAMSUNG Electronics Co., Ltd.
  • Page 683: Call Admission Treatment

    Ubigate iBG3026 Configuration Guide/Ed.00 A user is able to limit incoming calls in intervals of size time using call- admission spike command. Size and step make windows, the windows are made by size intervals, and a size of a window would be size*step.
  • Page 684 ‘no’ command to release it. call-admission treatment causecode <cause-code> no call-admission treatment causecode <cause-code> <cause-code>: From 34 to 47 can be used. © SAMSUNG Electronics Co., Ltd.
  • Page 685: Chapter 36. Management

    Ubigate iBG3026 Configuration Guide CHAPTER 36. Management Alarm There are 7 alarms and 2 faults in relation to voice from Ubigate iBG3026 Gateway. Alarm There are mainly 5 types of alarms in relation to voice. The alarms are in relation to Call Count, DSP channel, SIP entity, H323 gatekeeper, and FXS port.
  • Page 686 <value>: Is the percentage of current used dsp channel against max dsp channel that minor alarm would be created. maj <value>: Is the percentage of current used dsp channel against max dsp channel that major alarm would be created. © SAMSUNG Electronics Co., Ltd.
  • Page 687: Table 36.2 Falut List

    Voice task fail When operating the Ubigate iBG3026 system, this fault occurs in case that task related to voice processing suspends. In this case, Ubigate iBG3026 system cannot be used as voice gateway.
  • Page 688: Statistics

    CHAPTER 36. Management Statistics Ubigate iBG3026 statistics displays the numerical value of accumulation after booting up of the system. The objects of Ubigate iBG3026 statistics are as followings. Call statistics-whole call statistics, POTS call statistics, VoIP call statistics. Protocol statistics-SIP, H323 protocol statistics.
  • Page 689 Ubigate iBG3026 Configuration Guide/Ed.00 Table 36.4 Call Statistics Item Item Object explanation Inbound POTS, VoIP, Incoming successful calls Success Calls Call - number of incoming calls that received answers Outbound POTS, VoIP, Outgoing successful calls Success Calls Call - number of outgoing calls that received answers...
  • Page 690: Table 36.5 Sip Protocol Statistics Command

    Ok Bye Num Terminated the session Ok Cancel Num Terminated the pending request Ok Info Num Number of information messages the gateway has received(inbound) and how many have been transmitted(outbound) Ok Invite Num Initiates a call © SAMSUNG Electronics Co., Ltd.
  • Page 691 Ubigate iBG3026 Configuration Guide/Ed.00 Table 36.6 SIP protocol Statistics command (Continued) Item Explanation Ok Notify Num 200 Successful response to a Notify request Ok Options Num 200 Successful response to an Options request Ok Prack Num 200 Successful response to a PRACK request...
  • Page 692 483 A server received a request that required more hops than is allowed by the Max-Forward heade Address Imcomplete Num 484 Address supplied is incomplete Ambiguous Num 485 Address supplied is ambiguous Busy Here Num 486 Called party is busy © SAMSUNG Electronics Co., Ltd.
  • Page 693 Ubigate iBG3026 Configuration Guide/Ed.00 Table 36.6 SIP protocol Statistics command (Continued) Item Explanation Request Terminated Num 487 The request is canceled Not Acceptable Here Num 488 Call was contacted, but some aspect of the session description was unacceptable Bad Event Num...
  • Page 694: Table 36.7 Call Statistics Command

    Information Number of Information messages the gateway has received and transmitted UserInformation Number of UserInformation messages the gateway has received and transmitted Notify Number of Notify messages the gateway has received and transmitted © SAMSUNG Electronics Co., Ltd.
  • Page 695: Table 36.9 H.225.0 Ras Statistics Command

    Ubigate iBG3026 Configuration Guide/Ed.00 Table 36.8 H.225.0 CS Statistics command (Continued) Item Explanation Status Number of Status messages the gateway has received and transmitted Status Inquiry Number of StatusInquiry messages the gateway has received and transmitted Unknown Number of unknown messages the gateway has received and transmitted Table 36.9 H.225.0 RAS Statistics command...
  • Page 696 ServiceControlIndication Number of SCI messages the gateway has received and transmitted ServiceControlResponse Number of SCR messages the gateway has received and transmitted Unknown Number of unknown messages the gateway has received and transmitted © SAMSUNG Electronics Co., Ltd.
  • Page 697: Table 36.10 H.245Statistics Command

    Ubigate iBG3026 Configuration Guide/Ed.00 Table 36.10 H.245Statistics command Item Explanation MasterSlaveDetermination Number of MasterSlaveDetermination messages the gateway has received and transmitted MasterSlaveDeterminationAck Number of MasterSlaveDeterminationAck messages the gateway has received and transmitted MasterSlaveDetermination Number of MasterSlaveDeterminationReject Reject messages the gateway has received and...
  • Page 698: Debug Management

    Voice Call log Debug Voice Call Control Debug Mode This is the function that shows an appropriate call log after a voice call. There are parameters of in/out/all that set up Incoming/Outgoing, and deb0/deb1/info/all that set up levels. © SAMSUNG Electronics Co., Ltd.
  • Page 699: Table 36.11 Voice Call Control Debug

    Ubigate iBG3026 Configuration Guide/Ed.00 Especially set up log commands when displaying debug Message of a specific port. Table 36.11 Voice Call Control Debug Command Purpose Debug vcc ascc Analog Signal Call Control debug Debug vcc ccac CCAC debug Debug vcc iscc...
  • Page 700: Table 36.14 Sip Debug

    Basc Call Control LIB debug Debug voie cac Call Admin Control debug Debug voice log LOG class debug Debug voice nrc Number Resource Control debug Debug voice off debug voice off Debug voice rmdh Resource Manager Data Handler debug © SAMSUNG Electronics Co., Ltd.
  • Page 701: Cdr Management

    Command Purpose Debug call-log Call log on CDR Management Ubigate iBG3026 system transmits CDR made by processing a call to RADIUS server. This section describes the method of configuration to manage CDR and CDR attribute. Configuration Restrictions for CDR Management Works only when an Authentication, Authorization, and Accounting(AAA) RADIUS server is enabled for VoIP calls.
  • Page 702 Example) configure/voip-gateway# exit CDR Attributes The CDR in the Ubigate iBG3026 system transmits accounting request packet according to RADIUS specification described in RFC2865, RFC2866. The attribute described in Table 36.1 below is used and numerous Vendor Specific Attributes are included.
  • Page 703: Table 36.17 Attribute List

    Ubigate iBG3026 Configuration Guide/Ed.00 Table 36.17 Attribute List Attribute type Length Attribute Name >=3 Called Station ID >=3 Calling Station ID Account Status Type >=3 Account Session ID >=7 Vendor Specific Attribute Standard Attribute Called Station ID Attribute type: 30 Length: >= 3...
  • Page 704: Table 36.18 Vendor Specific Attribute List

    NAS MUST use the same Acct-Session-Id in the Accounting-Request packets for that session. vendor specific attribute Vendor specific attributes used in the Ubigate iBG3026 system are arranged in the following table and the values of VSA attribute field are as followings. Type field = 26 Length field >=7 byte(vendor-string field has to be more than 1byte)
  • Page 705 Ubigate iBG3026 Configuration Guide/Ed.00 System ID VSA No: 4 Length: 32 Ubigate iBG3026 system ip address or domain-name Call ID VSA No: 3 Length: 12 Call ID Calling party type VSA No: 22 Length: 4 Calling party category. Information on a category of calling party.
  • Page 706 CHAPTER 36. Management This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 707: Chapter 37. Survivable Telephony

    Call Manager interworking mode. Besides, in case a subscriber does not set up Ubigate iBG3026, it generally provides a method to set up Call-Forwarding Service. That is, in the situation that a call is...
  • Page 708 Configure Call Forward-NoAnswer function for Survivable Telephony mode as following procedures. Summary Steps configure terminal − voip-fallback − call-forward noan − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal © SAMSUNG Electronics Co., Ltd.
  • Page 709: Configuring System Message For Survivable Telephony

    /configure/voip-fallback# exit Configuring System Message for Survivable Telephony When Ubigate iBG3026 is converting between Call Manager interworking mode and Survivable Telephony mode, to inform that mode is converting, it sends designated messages through MESSAGE method with SIP phone. This section describes how to send the messages.
  • Page 710 SIP phone as following procedures. The basic message is ‘Normal Mode’. Summary Steps configure terminal − voip-fallback − system-message normal − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal © SAMSUNG Electronics Co., Ltd.
  • Page 711: Configuring Cor List For Survivable Telephony

    Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose voip-fallback Enters VOIP Fallback configuration mode. Example) /configure# voip-fallback system-message normal system-message Specifies message context to inform mode transition from Example) survivable telephony to scm /configure/voip-fallback# system-message interworking. normal ‘Normal Mode’ Exit...
  • Page 712: Configuring Translation For Survivable Telephony

    It is applicable not only to translation rule but also translation profile. Translation rule is prior to profile. How to Configure Translation Rule Summary Steps configure terminal − voice translation-rule rule-set-id − rule precedence /match-pattern/ /replace-pattern/ − exit − © SAMSUNG Electronics Co., Ltd.
  • Page 713: Ubigate Ibg3026 Configuration Guide/Ed

    Ubigate iBG3026 Configuration Guide/Ed.00 Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voice translation-rule rule-set-id Defines a translation rule for voice calls and enters voice Example) translatioon-rule configuration /configure# voice translation-rule rule-set- mode.
  • Page 714 − translate { called | called } ruleset-id − exit − Detailed Steps Step Command Purpose configure terminal Enters global configuration mode. Example) # configure terminal voip-fallback Enters VOIP Fallback configuration mode. Example) /configure# voip-fallback © SAMSUNG Electronics Co., Ltd.
  • Page 715 Ubigate iBG3026 Configuration Guide/Ed.00 (Continued) Step Command Purpose translate { called | calling } rule-set-id Applies a translation rule to modify the phone number Example) dialed or received by IP /configure/voip-fallback# translate called 11 phone user while fallback is active.
  • Page 716 CHAPTER 37. Survivable Telephony This page is intentionally left blank. © SAMSUNG Electronics Co., Ltd.
  • Page 717: Configuration Guide

    Configuration Guide © 2006 Samsung Electronics Co., Ltd. All rights reserved. Information in this manual is proprietary to SAMSUNG Electronics Co., Ltd. No information contained here may be copied, translated, transcribed or duplicated by any form without the prior written consent of SAMSUNG.
  • Page 718 EQBD-000026 Ed. 00...

Table of Contents